Bazaar

F-Droid now supports APK Expansion Files aka OBB

February 22, 2017

Many games, mapping, and other apps require a large amount of data to work. The APK file of an Android app is limited to 100MB in size, yet it is …

Build Your Own App Store: Android Media Distribution for Everyone

February 22, 2017

Most people get their Android apps from Google Play. It is usually the simplest and most secure option for them. But there are also many people who do …

Imagining the challenges of developers in repressive environments

January 26, 2017

The Guardian Project team spends a lot of time thinking about users. In our work we focus on easy-to-use applications for users in high-risk …

Building the most private app store

June 2, 2016

App stores can work well without any tracking at all Attackers are increasingly seeing app stores as a prime attack vector, whether it is aimed at the …

How to Migrate Your Android App’s Signing Key

December 29, 2015

It is time to update to a stronger signing key for your Android app! The old default RSA 1024-bit key is weak and officially deprecated. What? The …

First Reproducible Builds Summit

December 9, 2015

I was just in Athens for the “Reproducible Builds Summit“, an Aspiration-run meeting focused on the issues of getting all software builds to be …

CipherKit reproducible builds

September 21, 2015

We have been on a kick recently with making our build process support “reproducible builds” aka “deterministic builds”. What is this reproducible …

Building a trustworthy app store that respects privacy

June 2, 2015

One core piece of our approach is thinking about very high risk situations, like Ai Weiwei or Edward Snowden, then making the tools for operating …

Getting Android tools into Debian

April 30, 2015

As part of Debian’s project in Google Summer of Code, I’ll be working with two students, Kai-Chung Yan and Komal Sukhani, and another mentor from the …

Phishing for developers

February 24, 2015

I recently received a very interesting phishing email directed at developers with apps in Google Play. One open question is, how targeted it was: did …