Google is now marking EVERY SINGLE APK at our repository as "Malware site issue".

[leandro@gts.cybervalley.org]

@IzzyOnDroid can't understand which link I have to report

[sylvielorxu@chaos.social]

@murks @IzzyOnDroid The .apk they tell us is "malware" (it isn't, we scanned it repeatedly) is https://apt.izzysoft.de/fdroid/repo/com.apkupdater_52.apk. But right now every single .apk link under https://apt.izzysoft.de/fdroid/repo/ is blocked, almost 1300 safe, scanned, open source apps :(

[izzyondroid@floss.social]

@murks The console points to https://apt.izzysoft.de/fdroid/repo/com.apkupdater_52.apk – which at our last check (see https://floss.social/@IzzyOnDroid/115949348459945502) was reported clean even by their own scanner.

And this time they not only MARK it as POTENTIALLY malicious – they block the entire site. So if you have a browser with "SafeBrowsing" enabled, you cannot download a single APK.

[murks@social.tchncs.de]

@SylvieLorxu @IzzyOnDroid Thanks, I reported https://apt.izzysoft.de/fdroid/repo/ as safe.

[sylvielorxu@chaos.social]

@leandro @IzzyOnDroid The .apk they tell us is "malware" (it isn't, we scanned it repeatedly) is https://apt.izzysoft.de/fdroid/repo/com.apkupdater_52.apk. But right now every single .apk link under https://apt.izzysoft.de/fdroid/repo/ is blocked, almost 1300 safe, scanned, open source apps :(

[jandi@mastodon.social]

@SylvieLorxu @murks @IzzyOnDroid Thanks, reported as safe. Sheesh, goog. 😡

[thomas@social.zell-mbc.com]

@IzzyOnDroid I just tried one of my apks in Chrome (MediLog) and it came down without a warning. However, apkupdater_52.apk produced the red screen warning. Maybe not all links are affected,which doesn't make this any better :-(

[sylvielorxu@chaos.social]

@thomas @IzzyOnDroid It seems it depends on device? Maybe the "malware list" from Google is only pulled every X hours. Some of my devices block every single link, others don't. Google "Safebrowsing" works in mysterious ways...

[izzyondroid@floss.social]

@thomas Thanks for checking!

It also doesn't make it better that they do not tell us WHICH files are affected and WHY. Their console just gives a single example (the linked APK), and says "go figure yourself".

And isn't it funny that the APK triggering this insane BS is an APK downloader? What was that with "allowing alternative app stores" (even Droid-ify is blocked now)? And the crap with "developer registration"? One ring to rule them all?!?

[izzyondroid@floss.social]

@SylvieLorxu and the same ones blocking now, might no longer block it after a second device did not – heard that before, on one of our previous cases. Their entire "safe" browsing thingy is out of control. I'm glad it's not active in any of my browsers… @thomas

[alex2ander@fosstodon.org]

@IzzyOnDroid @SylvieLorxu @thomas Done.

[ahills@hachyderm.io]

@IzzyOnDroid I wasn't able to submit; any suggestions?

[sempf@infosec.exchange]

@IzzyOnDroid The entire spam service is booked. Every email comes through as spam on my Workspace account.

[izzyondroid@floss.social]

@ahills Heard that the second time now. And getting more reports that their entire "spam service" (haha, yeah) seems to have gone nuts – like, marking each and every incoming mail as "spam".

So much about that "internet police". Which – by their PR – is the only one you can trust…

[izzyondroid@floss.social]

@Sempf even their own ones, I guess – like "back then"? https://support.google.com/webmasters/thread/382326165?hl=en&msgid=382561704

Yeah, nice description: "spam service". Pun intended? Most spam (or should I say: scam?) I see here nowadays is hosted at storage.googleapis.com. But yeah, tell us whom to trust…

Would be interesting to know who else is affected. Only us with the APKs – or e.g. ApkPure (which copies the APKs from PlayStore) as well? 🤔

[ahills@hachyderm.io]

@IzzyOnDroid I'll try again later. Sorry this happened to you.

[izzyondroid@floss.social]

@ahills Thanks! And yeah, we'd know much nicer things to do than fighting such shenanigans… 😢 We're just a very small team, trying to deliver you the best experience. Such actions by Goog are not exactly helpful with that (nor is that their entire system seems to be on auto-pilot, you never get a human to check. "Computer says »no«")…

[sousse@anonsys.net]

@IzzyOnDroid It's done for me, I got a confirmation of receipt OK

[izzyondroid@floss.social]

@sousse Thanks! Let's hope we're shaking something loose there – and that it's just a quirk at their end, which they quickly fix, removing those unwarranted blocks and red pages.

I doubt they'll ever apologize for the mess they caused there. Wish they'd surprise me positively once. Like, "as reparation, we've filled your OpenCollective with a (6+ digit) sum" (that would even come out of their "petty cash")… Well, one can dream, right? *Sigh…*

[loebas@bark.lgbt]

@IzzyOnDroid even firefox for android is blocking it