Exodus-Privacy
Update download function to download from the right source
Issue detected on submit function on Exodus app (2.2.0)
- Get app links from Fdroid (app never analysed and only available on Fdroid) and use submit function
- Exodus app open link with browser (https://reports.exodus-privacy.eu.org/analysis/submit/# + app id)
- On website =>source = Google Play
- Exodus check if app id exists models.py
- Exodus find app on Fdroid but download apk from Google Play
- Exodus return Unable to download the APK
Change detection function and download rules
If source = Google Play and app id match on Google Play
- Then download from Google Play
If source = Google Play and app id match on Fdroid
- Then download from Fdroid
If source = Fdroid and app id match on Fdroid
- Then download from Fdroid
If source = Fdroid and app id match on Google Play
- Then download from Google Play
If source = Google Play or Fdroid and app id no match
- Then return The application cannot be found
Algorithm can be optimize
If source = Google Play If app id match on Google Play Then download from Google Play If app id match on Fdroid Then download from Fdroid Else (no match app id) Then return The application cannot be found Else (source = Fdroid) If app id match on Fdroid Then download from Fdroid If app id match on Google Play Then download from Google Play Else (no match app id) Then return The application cannot be found
I'm not sure we want to do that, I think we need to respect the user's choice of source.
If the user says they want to check an app from Google Play, I'm not sure we want to try downloading this app from F-Droid (that would imply a lot of unnecessary downloads). Beside, which report do we send back if we start 2 analysis in the same time.
I think what we need to do is that the android app should tell us the source.
It could be by redirecting to https://reports.exodus-privacy.eu.org/analysis/submit/#<full_url>
For instance https://reports.exodus-privacy.eu.org/en/analysis/submit/#https://f-droid.org/packages/org.eu.exodus_privacy.exodusprivacy/
Currently that does not work perfectly in the exodus website but can be fixed quickly
Ok you can change for solution more easy If source = Google Play If app id match on Google Play Then download from Google Play Else (no match app id) Then return The application cannot be found on GP Else (source = Fdroid) If app id match on Fdroid Then download from Fdroid Else (no match app id) Then return The application cannot be found on fdroid
To make sure I understand your proposal, what you mean is that we could check that an app exists in the desired store (F-Droid or Google Play) before trying to download it?
Yes, actually you check with function validate_handle if app matched on Google Play and Fdroid. But like explain in past. If handle doesn't match, on Fdroid, exodus doesn't check if handle match on Google Play.
Don't forget that some applications are on more than one store and maybe slightly different so whenever you submit an app it has to be downloaded and scanned for all stores.
