>Signal: End-to-end encrypted messaging over the internet. (You can get it on APKMirror.)

Isn't that a good way to get a modified / malware version of Signal? Anyone can upload to APKMirror, can't they?

There's an fdroid repo[1] for it, but I'm not sure I trust the person running it. Because of the lovely conversations with moxie the main fdroid repo got taken down. Don't you just love free software projects that hate giving users freedom.

[1]: https://fdroid.eutopia.cz/

That is a really good point, I actually got someone else to get it from the play store then copied it, the updates from apkmirror are then fine since the signatures match. I'll edit the post to say, get it from a trusted source.

This is also useful: http://www.onyxbits.de/raccoon It's a dektop play store client. I tried it out a while back and it worked, don't know about now.

This is a very clean and straightforward article demonstrating how to do it! Nice work.