Multiple google cast devices are available in network and visible (and usable) in other apps. Symfonium only shows local and no cast targets when i hit tbe cast button. Tried with jellyfin and subsonic providers.
Logs don’t lie you know, the APK is modified, I know you don’t want to believe me and it’s easier to assault, so have a nice day I hope you are feeling better now …
If the logs don’t lie what do they say? Redownloading from the app store seems to provide the right functionality, other than now reporting a different expiration date of the trial (jan 10 rather than today).
How long is the trial supposed to last? I think I started the trial 2 weeks ago and was planning to buy probably the next time I launched the app, but then it didn’t work (I’d tested it only with android auto and local playback previously).
I see different releases since including betas - is it possible that somehow triggered this?
Well yes I am (really) worried and not exactly looking forward to tracking down whatever this is. Even a wipe and rebuild…doesn’t really satisfy.
I do have a fair number of google services turned off that I could see impacting other sorts of authentication and was really hoping that had triggered it, but other than a handful of quite well-known applications from f-droid that prefer to distribute there that I would not be inclined to distrust nothing outside of the play store and nothing with the permissions to mess with apps.
I’m happy to pull the review as soon as I’m not called a pirate. And if there’s anything additional in the logs thst you could share offline thst doesn’t compromise your protections I’d appreciate that as well.
You had an issue, I gave you the most plausible explanation and kept explaining the reason, that’s called support. I won’t beg if you think your actions are correct…
For the rest I can’t tell you more the application was modified and the signature changed.
You can’t update an app with a different signature, so at some point you were prompted or saw the settings reset if something uninstalled then installed that modified version without your knowledge.
So should I update it to “downloaded compromised app from the play store, be careful”?
Because I literally downloaded ftom play store, set it up, used it for a few days, left it for a while, came back to it yestetday, and encountered this issue.
I regretfully didn’t back it up for insoection before uninstall and reinstall, but the app properties said from play store.
When i reinstalled i did need to set up my provider again - is this the indication that you reference of the signature changing?
If so you really need to double check security on your end as well.
It is not possible to download modified APKs from Play Store …
Play Store build and sign the APKs themselves.
Symfonium have no permissions and no way to update itself.
So sorry that you keep not believing me, but this is something on your side at 1000% …
If initial install said trial ends 10 janv, then now again says 10 janv then it was properly installed from Play Store and is now again the Play Store version.
The version that expired today was modified, again I have no way to know more about what or who modified it. But it’s not me or Play Store…
If it’s not you or play store, then according to you my settings would have reset if the app was switched out. But they only reset when I reinstalled just today, and the only other time I had set things up was immediately after downloading from play store.
You haven’t offered up a plausible explanation or even confirmed the expected duration of the free trial. You’ve only stated that what happened to me is “impossible” which for obvious reasons I distrust.
Then the trial would never have ended on Jan 10, which above you state as a “sign” that it was properly installed. As I initially stated…I first installed (and heard of…) symfonium about 2 weeks ago.
There is information in your FAQ about troubleshooting play store issues - including extraordinary steps like changing your authentication settings, disabling ad blocking, discussions of reasons for false-positives (none of which appear to apply other than having multiple google accounts on the phone…but clearly there is more going on here.) If there are known triggers to false positives, I imagine there are unknown ones as well.
And since I can’t even access and see my own logs all I have to rely on is you, who clearly has a motivation to suggest that you and your distribution and licensing chain are infallible.
Distribution is done by Play Store as is signing there’s nothing more secure, the issue have nothing to do with licensing or anything else.
Again THE FUCKING APK OR SIGNATURE WAS MODIFIED… I’ll now stop answering as you know better how Android works.
And of course you can see the logs by yourself … Send them to your email ) Use the manage Symfonium generated logs to manage the logs ?
All the stuff from the docs…
Give me your trial ID on the working version and I’ll tell you when it was registered and from what IP.
From maxmind that IP range doesn’t seem to point to cloudflare either, but rather to a Ukranian ISP which seems more suspicious.
I think the date makes sense as I recall setting up navidrome at that time and likely grabbed symfonium to evaluate as a client, but not really using it in earnest prior to a couple of weeks ago. I also see in my browser history first visiting your site at that time and would have clicked through to the play store to install.
somehow getting a compromised play store that’s tainting apps and routing things through the ukraine…is more than a bit terrifying.
Regarding the logs - At this point since I needed to reinstall the app for it to function, I would no longer have access to logs from whatever was originally installed.
But you are still certain that the Play Store or me can do the impossible thing of replacing an application on your phone with another one because it’s more comfortable to believe that, than the actual facts.
I’ve lost way more than enough time trying to explain you how Android and Play Store works, you have decided that impossible is the truth and wants to kill the app with the bad rating for impossible things then be it.
It’s hard to imagine, but maybe I know what I’m talking about after 14 years publishing apps on Play Store with millions downloads and having been a system architect for large companies data centers …
So while I’ll stop answering about your delusions about Play Store and me, if you are not a troll and lying I’d start looking at what is present on your phone to be able to do that or you browser history 15 days before today to see what site you browsed that you also maybe forget about.
Edit: Or actually simply your fdroid client and configuration that may have a compromised repo that asked you to replace and you forget you clicked yes.
Why can’t you just be honest? What’s the point of hiding the subnet of a cloudflare IP?
The actual facts are that the initial activation came over a network/service that I don’t use and that’s concerning as hell to me.
You’d be more believable if you would stop with the casual, meaningless lies (like hiding the cloudflare subnet) and insisting that whatever happened here is impossible.
[quote=“Tolriq, post:19, topic:6545”]
Edit: Or actually simply your fdroid client and configuration that may have a compromised repo that asked you to replace and you forget you clicked yes.
[/quote]As far as I know Symfonium wouldn’t be available on fdroid anyway (and I only ever use the official fdroid.org repo), and if that did happen the app would/should? indicate that it was installed by fdroid and from what you say should have provoked a loss of settings that never occurred.
[quote=“Tolriq, post:19, topic:6545”]
So while I’ll stop answering about your delusions about Play Store and me, if you are not a troll and lying I’d start looking at what is present on your phone to be able to do that or you browser history 15 days before today to see what site you browsed that you also maybe forget about.[/quote]
I am taking a very close look at my phone, but what concerns me most are 2 things
According to you, changing the signature would change the settings (which never occurred, and I’m quite sure I set up at least one provider immediately upon install, even if I didn’t really make extensive use of it until later)
The initial activation coming from an IP that corresponds to a service that I don’t use, and a continent that I neither live on nor connect to via VPN (other than for work, and not on a mobile device)
For those reasons it seems likely at first glance that any compromise would have occurred at that time (or earlier) - not out of any particular suspicion of you, but because the information you’ve shared doesn’t add up with my location
A compromised repo is a possibility I guess, but that still doesn’t resolve the network of the original activation at all.