VideoLAN @videolan App Stores were a mistake. Currently, we cannot update VLC on Windows Store, and we cannot update VLC on Android Play Store, without reducing security or dropping a lot of users… For now, iOS App Store still allows us to ship for iOS9, but until when?

  • batman without ears@sh.itjust.works
    link
    fedilink
    arrow-up
    50
    ·
    edit-2
    11 months ago

    Fdroid is the obvious answer me thinks. Anyway love you guys/gals at videolan still haven’t come across a piece of software that destroys every other in its field in every aspect.

    • TWeaK@lemm.ee
      link
      fedilink
      English
      arrow-up
      8
      ·
      11 months ago

      By the way, archive.is and archive.ph are Tor unfriendly.

      Not just Tor, they poison DNS queries from Cloudfare and Quad9, basically any DNS that doesn’t give them sufficient location information about the end user.

  • Thann@lemmy.ml
    link
    fedilink
    English
    arrow-up
    31
    arrow-down
    2
    ·
    11 months ago

    and yet the fdroid version was updated last month!

  • idefix@sh.itjust.works
    link
    fedilink
    arrow-up
    34
    arrow-down
    6
    ·
    11 months ago

    VLC is still on Twitter? I thought they would be quick to migrate to Mastodon, slightly disappointed.

    And thanks OP for linking outside of Twitter.

    • d-RLY?@lemmy.ml
      link
      fedilink
      arrow-up
      3
      ·
      11 months ago

      Mastodon and other federated platforms are still confusing to normies and less ideologically-minded users. Aside from that, unless VLC starts hosting their own instance, it is hard to say if the particular one they decide to use will stick around. They can relocate by taking some extra steps of course. But they would likely care to put that effort into making VLC Player better instead of into social media. For now at least. X has been more or less the same for a long time (even with the past couple of years) for what they use it for. I am sure they would like to be on an open platform over propriety if that were the only difference. And nothing is stopping them from using both at the same time in order to reach as many people as possible.

  • GravitySpoiled@lemmy.ml
    link
    fedilink
    English
    arrow-up
    6
    ·
    11 months ago

    With Play App Signing, Google manages and protects your app’s signing key for you and uses it to sign optimized, distribution APKs that are generated from your app bundles

    You can use google’s play app signing. It’s not mandatory.

  • lemmyreader@lemmy.ml
    link
    fedilink
    English
    arrow-up
    4
    ·
    edit-2
    11 months ago

    I’ve scrolled through the F-Droid repositories in Droidify app and see that VLC does not have their own F-Droid repository ? They could create one, and set up mirrors for it, think of a way to cover the hosting costs, why not ? Making yourself depend on Apple and Google and saying that app stores were a mistake feels wrong.

  • Scolding0513@sh.itjust.works
    link
    fedilink
    arrow-up
    2
    ·
    11 months ago

    i love how google is not even trying to hide the fact that they are engaging in obvious extortion

    “give us the keys to all your secrets so that we can secretly inject NSA malware, or be setenced to obscurity”

    anyway this is what we get when we trust gargantuan multi billion corpos not to royally fuck us over

  • answersplease77@lemmy.world
    link
    fedilink
    arrow-up
    2
    arrow-down
    1
    ·
    edit-2
    11 months ago

    same thing for linux. their repo’s latest version is 1.16 while their github version is 2.4.

    Edit: my version numbers are wrong but you get the idea. The repo’s version is like 20 releases behind

    • sabreW4K3@lazysoci.al
      link
      fedilink
      arrow-up
      0
      ·
      11 months ago

      They’ve not updated it there either though. It seems to be less of a case of can’t update Android and more of a case of won’t update Android

      • bionicjoey@lemmy.ca
        link
        fedilink
        arrow-up
        1
        ·
        edit-2
        11 months ago

        What exactly is the issue preventing them from updating the Android version?

        Also, if that’s the case, it sounds like “App stores were a mistake” is a bit misleading, since the particular app store isnt the problem.

        • sabreW4K3@lazysoci.al
          link
          fedilink
          arrow-up
          1
          ·
          11 months ago

          Basically, modern app stores have changed how they work and now require the signing keys, VLC feel this is a bad thing and refuse to update. Banks are okay with it, but VLC feel more strongly than banks.

          • taladar@sh.itjust.works
            link
            fedilink
            arrow-up
            1
            ·
            11 months ago

            Banks are okay with it, but VLC feel more strongly than banks.

            I mean banks are known for horrible security practices all around so that makes perfect sense.

      • deweydecibel@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        edit-2
        11 months ago

        From their Twitter:

        If you wonder why we can’t update the VLC on Android version, it’s because Google refuses to let us update:

        • either we give them our private signing keys,
        • or we drop support for Android TV before API-30, and all our users on TV API<30 can’t get fixes.

        It’s not much, just dozens of millions of people use Android TV before Android-11…

        Maybe we should tell users to buy new TVs? #electronicWaste

        I can’t speak to why they’re not updating on FDroid but seeing as how it’s much more difficult to get people to use FDroid on Android TV, I don’t think it will help them with that issue anyway.

        • stoy@lemmy.zip
          link
          fedilink
          arrow-up
          1
          ·
          11 months ago

          Google requiring their private signing key is insane, and goes completely against the concept of private/public keys.

          Why is Google asking for this?

          • Synnr@sopuli.xyz
            link
            fedilink
            arrow-up
            1
            ·
            edit-2
            11 months ago

            See also: NSA PRISM

            Member when all the companies listed released a PR statement within 24 hours of each other, all very basic and denied allowing the NSA direct access to their users?

            I member.