This blog post has been taken over by PrivSec with my explicit permission, and will be continuously improved by other people. You can access this updated blog post on the PrivSec website. They will continue improving it without me. I decided to take down the original blog post of my own accord since I didn’t want too much attention from it, and this has very much become a burden. I was particularly saddened by the negative reactions which often resorted to personal attacks, rather than a healthy exchange focused on technical facts.

cross-posted from: https://community.hackliberty.org/post/5479

F-Droid is a popular alternative app repository for Android, especially known for its main repository dedicated to free and open-source software. F-Droid is often recommended among security and privacy enthusiasts, but how does it stack up against Play Store in practice? This write-up will attempt to emphasize major security issues with F-Droid that you should consider.