Android Enthusiasts Stack Exchange is a question and answer site for enthusiasts and power users of the Android operating system. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have found older version of Facebook For Android app here which was hosted on

When i wanted to install 1.8.1 and checked permissions, the following arose my suspicions:

Services that cost you money:
Send SMS messages

Your messages:
edit SMS or MMS, read SMS or MMS, receive SMS

Your accounts:
act as an account authenticator, manage the accounts list

Phone calls:
read phone state and identity

Your accounts:
discover known accounts

modify/delete SD card contents

Can unscrupulous people inject malware into APKs? If yes, what are trusted repositories for downgrading apps to older versions?

Is this repository trusted source?

share|improve this question
For future reference, you can use something like Titanium Backup to make backups of previous app versions and revert to them if something goes wrong (This saved my bacon when I almost got locked out of my Google account due to a botched Authenticator update). – Martin Tapankov Mar 22 '12 at 8:19
I am UNrooted as long as i have actual warranty, so cannot use Titanium Backup yet. I used MyBackup full version but could not find Facebook For Android .APK file and all that i have found was Facebook Messenger. – Boris_yo Mar 22 '12 at 21:07

As a general rule, I don't trust any "freeware" or "shareware" site that has not specifically been recommended to me by someone I know and trust, and because these sites aren't my thing I can't either recommend or condemn this specific example. I can answer part of your question, though, and say an emphatic yes, unscrupulous people can inject malware into APKs. Installing an APK from an unknown source is generally a very bad idea.

The permissions you mention, though, are actually the same that the legit Facebook for Android app asks over in the Play store (see the "Permissions" tab). Permissions alone are a bad judge of an APK's potential for harm. In this case, personally, I would say the risk of an unknown source far outweighs the app's permission requests.

share|improve this answer
I wouldn't install an APK from a non-trusted source either. – louielouie Mar 22 '12 at 3:14
@Mr. Buster Not the same actually. I don't see legit Facebook for Android app asking permission to send/receive SMS messages. – Boris_yo Mar 31 '12 at 15:15
@Boris_yo - the SMS/MMS permissions I see are Send, Edit, Receive, and Read per the Play Market. – Mr. Buster Apr 1 '12 at 6:48
@Mr.Buster I see now that since version 1.8 send/receive SMS messages permissions were removed. – Boris_yo Apr 5 '12 at 21:02

If you really want to downgrade an APK, the best way is to get it from another device that you trust using one of the methods in Where are the .apk files stored on my Android device? Then you can put that APK on your device.

share|improve this answer
After using MyBackup full version, i can only find Facebook Messenger .APK file but no Facebook For Android. – Boris_yo Mar 22 '12 at 21:05

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.