Hacker News new | ask | show | jobs
by ranger_danger 638 days ago
Depends where the check is... most likely outside of the app itself. A regular phone with google play services already has a "backdoor" of sorts where google can push any code they want to you... which they have already used for dubious purposes like forcefully uninstalling certain apps from devices under the guise of security.
1 comments
fngjdflmdflg 638 days ago
Revanced gives the app a new app ID (app.revanced.android.youtube) and resigns it, so Google cannot for example just check that apps using the youtube app id have a valid MD5.
link
ranger_danger 638 days ago
They could check for Revanced and friends too though, probably even dual-purpose that to disallow installing it entirely since it wouldn't be allowed on the play store in the first place.
link
fngjdflmdflg 638 days ago
>They could check for Revanced and friends too though

Not really, at least not at the app ID level, because revanced can change app ids indefinitely. Google generally only solves a problem when it can be automated, and manually adding revanced app ids to a blacklist cannot easily be automated. In fact, since revanced is patched on device, they could assign each user a unique app id which would make using app ids as a solution unworkable for Google.

link
ranger_danger 637 days ago
You don't think they know how to automate downloading the latest Revanced and checking the app ID?
link
fngjdflmdflg 636 days ago
Like I just said, you do not download a revanced youtube apk. You download a revanced patcher that patches the APK on your device. Right now, the patcher gives each app the same id, but theoretically it could give a random string as the app id that is generated by the user at runtime while patching, so that would not work. Even if that were not the case, Google would not set up a script to download latest revanced to check the id. It's only a few steps away from being manual because it would not work for other projects or even for revanced itself if they changed the website's code or domain name. What I mean by solving a problem with automation is like how Google detects copyrighted music in youtube videos and sends the ad revenue to the copyright owners.[0] Having someone constantly fix a script that "automates" finding app ids does not meet that bar.

[0] https://support.google.com/youtube/answer/2797370?sjid=13102...

link
ranger_danger 636 days ago
The Play Store functions as a type of backdoor which allows them to run any code on your device that they want, which includes scanning for Revanced (regardless of the actual app ID, they could just look for the NAME of the app for example) and removing it.

They have already used the play store in the past to delete apps from people's devices: https://android.stackexchange.com/questions/252066/does-goog...

link