-4

Further to my previous question.

I'm now asking for the 'so what' for all app stores...

Which app store performs better checks so non-technical users can trust the protection? Including 3rd party app stores available

I realise that security is somewhat of a moving target, but perhaps an answer should include which sources one will likely remain good.

Which app stores are the most or least secure, and what checks do they do. This will change over time but then What action points are there for non-technical users?

Safe Definition

I am aware 100% safety is impossible

Good enough for the average user, "secure enough" for average use and threat

  • You can just download the app from Store and run it.
  • It won't be so buggy that it is unsafe
  • It won't contain malware or code that will execute later that gives you issues
Improve this question
13
  • 1
    Does this answer your question? How does a non technical user/beginner vet Android apps to ensure they are safe?
    – Chenmunka
    Commented Dec 14, 2022 at 13:53
  • 1
    How do you know for a program you download on your PC?
    – allo
    Commented Dec 14, 2022 at 15:21
  • 1
    You have a clear problem in your head: Android apps from small developers presenting a potential threat, a threat that a non-technical user is not equipped to mitigate. However, that problem has many facets and many potential ways to mitigate, and those facets and mitigations are not related except through the lens of the problem statement. I'm trying to get you to set the "big problem" aside in order to take the individual problems atomically. But, as I've mentioned, you are trying to tackle a "wicked problem" that is not easy to solve. And even more difficult to ask on a Q&A site.
    – schroeder ♦
    Commented Dec 16, 2022 at 9:46
  • 1
    As a Q&A site, we are different in how we handle topics. It's what makes us different, but it is also why some questions just don't fit. But just because they don't fit here doesn't make the question not worthwhile to ask elsewhere.
    – schroeder ♦
    Commented Dec 16, 2022 at 9:48
  • 1
    @maskin It was kind of a rhetoric question. On the PC you don't have sandboxes and install programs you download from the internet, still you probably know how to avoid malware. So judge alternative appstores and downloads of single app packages in he same way you would judge where to download your .exe files.
    – allo
    Commented Dec 19, 2022 at 19:55

1 Answer 1

Reset to default
-2

iOS vs Android

iOS has an edge on providing secure apps over Android:

“The risk of malicious apps tends to be higher on Android because it’s a more open operating system. It’s incredibly difficult to download an app that isn’t from the Apple App Store on an iOS device, which is one of the benefits of the company’s walled garden approach.

https://www.trustedreviews.com/news/mobile-news/are-iphones-more-secure-than-android-phones-4205231 Date: 2022

"Android’s open Google Play Store marketplace has far more apps to choose from than on Apple's App Store, but there’s a far greater chance that hackers can make it onto the platform to distribute malware through malicious apps.

On numerous occasions, highly ranked apps with hundreds of thousands of downloads from the Google Play Store have been discovered to contain Android malware.

https://nordvpn.com/blog/ios-vs-android-security/ - Date 2022

"Android operating system Popularity: The Android operating system is hugely popular. This means that developers are constantly building new apps designed to run on the system. That’s good for users ... mostly. The problem comes when hackers create apps designed to infect your mobile devices.

There is an app review process for Google Play. Unfortunately, the process is far less stringent than what developers face when adding apps to Apple’s App Store.

It's easier, then, for malicious apps to sneak onto the Google Play store and easier for users to accidentally install one."

emphasis added for bold https://us.norton.com/blog/mobile/android-vs-ios-which-is-more-secure# Date 2022

https://www.makeuseof.com/apple-vs-android-which-is-more-secure/ - Date 2022

https://www.howtogeek.com/224096/why-iphones-are-more-secure-than-android-phones/ - Date 2015

Android

3rd party Android stores

??

Amazon AppStore

??

F-Droid

We do not currently recommend F-Droid as a way to obtain apps. F-Droid is often recommended as an alternative to Google Play, particularly in the privacy community. The option to add third-party repositories and not be confined to Google's walled garden has led to its popularity.

F-Droid additionally has reproducible builds for some applications and is dedicated to free and open-source software. However, there are notable problems with the official F-Droid client, their quality control, and how they build, sign, and deliver packages.

Due to their process of building apps, apps in the official F-Droid repository often fall behind on updates. F-Droid maintainers also reuse package IDs while signing apps with their own keys, which is not ideal as it gives the F-Droid team ultimate trust.

Other popular third-party repositories such as IzzyOnDroid alleviate some of these concerns. The IzzyOnDroid repository pulls builds directly from GitHub and is the next best thing to the developers' own repositories.

However, it is not something that we can recommend, as apps are typically removed from that respository when they make it to the main F-droid repository. While that makes sense (since the goal of that particular repository is to host apps before they're accepted into the main F-Droid repository), it can leave you with installed apps which no longer receive updates.

That said, the F-droid and IzzyOnDroid repositories are home to countless apps, so they can be a useful tool to search for and discover open-source apps that you can then download through Play Store, Aurora Store, or by getting the APK directly from the developer.

It is important to keep in mind that some apps in these repositories have not been updated in years and may rely on unsupported libraries, among other things, posing a potential security risk. You should use your best judgement when looking for new apps via this method.

Note

In some rare cases, the developer of an app will only distribute it through F-droid (Gadgetbridge is one example of this). If you really need an app like that, we recommend using Neo Store instead of the official F-droid app to obtain it.

Formatting added

Date: October 24, 2022 https://www.privacyguides.org/android/?h=f+droid#f-droid

Other app stores

I've ignored anything I've not heard of or I figure has too few apps/coverage to be helpful to include or cover only specific areas like Games

Reference: https://en.wikipedia.org/wiki/List_of_mobile_app_distribution_platforms https://www.androidpolice.com/best-google-play-store-alternatives/

APKMirror

??

Aptoide

??

Reference: https://alternativeto.net/software/slideme-market/

Related

Why do mobile apps have fine-grained permissions while desktop apps don't?

Improve this answer
8
  • This answer was all over the place, reflecting the unfocused nature of the question. As a Q&A site, we can't fix all the problems in a single domain (mobile apps across all ecosystems) in a single post. If asking which app store performers better checks, then this focused answer gets you there. If asking for a universal guide for all possible apps in any context, that's too broad for Stackexchange.
    – schroeder ♦
    Commented Dec 14, 2022 at 16:49
  • @schroeder deleted 14214 characters in body, much of that text is relevant to the question, such as sandboxed google play, aurora store (this is a 3rd party front end for Google play), dummy google account... It might be worth covering how much of an edge ios has over Google Play store, which I worry is quite high.
    – maskin
    Commented Dec 15, 2022 at 9:21
  • @schroeder "If asking for a universal guide for all possible apps in any context, that's too broad for Stackexchange." I'm not sure why as the same rules you'd follow in one apply to the next store, beyond the differences between stores that affect the answers. + my notes to a table so less 'long answer' This could be several questions but again not sure people will answer those. I'm not asking for 100% security but good enough, as in who does enough checks and which stores are they, possibly none, or maybe ios... that's of no help to the majority of people using andriod phones I guess?
    – maskin
    Commented Dec 16, 2022 at 9:08
  • *One/I could add my long answer into a table or mind map if that's easier but ...
    – maskin
    Commented Dec 16, 2022 at 9:11
  • 1
    There is a fundamental difference between asking complex questions and asking a handful of different complex questions that are tangentially related. Clear questions can be complex.
    – schroeder ♦
    Commented Dec 16, 2022 at 9:22

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .