Latest version of youtube on google play is 17.34.35 (not 17.34.36) for android 6-7 ?

[wupwupper001]

Hi, I have two phones, one of them is android 6 and the other one is android 7. I tried to download latest version of youtube from google play but I got version 17.34.35 on both phones. I tried android 7.1 on an emulated device and the latest version of youtube is always 17.34.35.

1. How can I get youtube version 17.34.36 from google play? I don't trust apkmirror's apks.
2. If the question 1 isn't possible are there any patches for version 17.34.35? I tried to patch it with the current patches in this repo but it didn't work.

Thank you for making youtube vanced possible on android 6-7 devices.

[kitadai31]

Same for me
Play Store shows that 17.34.35 is latest
Maybe Google account depended
Maybe some users get 17.34.36, but the other users get 17.34.35

Use APKMirror's 17.34.36 APK
Play store apk is a split apk, so cannot be used for ReVanced patching

I checked the "Signature fingerprint" of APKMirror APK
And I confirmed that it is same as Play Store 17.34.35
This means that APKMirror 17.34.36 APK is guaranteed not to have been tampered with by a third party and trustworthy

[wupwupper001]

$ /home/test/Android/Sdk/build-tools/35.0.1/apksigner verify --print-certs youtube-original-v17.34.35.apk
Signer (minSdkVersion=33, maxSdkVersion=2147483647) certificate DN: CN=Android, OU=Android, O=Google Inc., L=Mountain View, ST=California, C=US
Signer (minSdkVersion=33, maxSdkVersion=2147483647) certificate SHA-256 digest: 5aad2bee6db95d17e05a08d7d1e64c10a1511879154483916b6ae6c7fd9cb0c6
Signer (minSdkVersion=33, maxSdkVersion=2147483647) certificate SHA-1 digest: f8456b1d9986acf9ce21fb450b0d32b895f36885
Signer (minSdkVersion=33, maxSdkVersion=2147483647) certificate MD5 digest: 0ea37f3786c8273287600bee47186c32
Signer (minSdkVersion=24, maxSdkVersion=32) certificate DN: CN=Unknown, OU="Google, Inc", O="Google, Inc", L=Mountain View, ST=CA, C=US
Signer (minSdkVersion=24, maxSdkVersion=32) certificate SHA-256 digest: 3d7a1223019aa39d9ea0e3436ab7c0896bfb4fb679f4de5fe7c23f326c8f994a
Signer (minSdkVersion=24, maxSdkVersion=32) certificate SHA-1 digest: 24bb24c05e47e0aefa68a58a766179d9b613a600
Signer (minSdkVersion=24, maxSdkVersion=32) certificate MD5 digest: d046fc5d1fc3cd0e57c5444097cd5449
Source Stamp Signer certificate DN: CN=Android, OU=Android, O=Google Inc., L=Mountain View, ST=California, C=US
Source Stamp Signer certificate SHA-256 digest: 3257d599a49d2c961a471ca9843f59d341a405884583fc087df4237b733bbd6d
Source Stamp Signer certificate SHA-1 digest: b1af3a0bf998aeede1a8716a539e5a59da1d86d6
Source Stamp Signer certificate MD5 digest: 577b8a9fbc7e308321aec6411169d2fb
WARNING: META-INF/services/com.google.protobuf.GeneratedExtensionRegistryLoader not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/.
WARNING: META-INF/services/kotlinx.coroutines.CoroutineExceptionHandler not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/.
WARNING: META-INF/services/kotlinx.coroutines.internal.MainDispatcherFactory not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/.
INFO: SourceStamp: No digests are available in the source stamp for signature scheme: 31

$ /home/test/Android/Sdk/build-tools/35.0.1/apksigner verify --print-certs "com.google.android.youtube_17.34.36-1531307456_minAPI23(arm64-v8a,armeabi-v7a,x86,x86_64)(nodpi)_apkmirror.com.apk"
Signer (minSdkVersion=33, maxSdkVersion=2147483647) certificate DN: CN=Android, OU=Android, O=Google Inc., L=Mountain View, ST=California, C=US
Signer (minSdkVersion=33, maxSdkVersion=2147483647) certificate SHA-256 digest: 5aad2bee6db95d17e05a08d7d1e64c10a1511879154483916b6ae6c7fd9cb0c6
Signer (minSdkVersion=33, maxSdkVersion=2147483647) certificate SHA-1 digest: f8456b1d9986acf9ce21fb450b0d32b895f36885
Signer (minSdkVersion=33, maxSdkVersion=2147483647) certificate MD5 digest: 0ea37f3786c8273287600bee47186c32
Signer (minSdkVersion=24, maxSdkVersion=32) certificate DN: CN=Unknown, OU="Google, Inc", O="Google, Inc", L=Mountain View, ST=CA, C=US
Signer (minSdkVersion=24, maxSdkVersion=32) certificate SHA-256 digest: 3d7a1223019aa39d9ea0e3436ab7c0896bfb4fb679f4de5fe7c23f326c8f994a
Signer (minSdkVersion=24, maxSdkVersion=32) certificate SHA-1 digest: 24bb24c05e47e0aefa68a58a766179d9b613a600
Signer (minSdkVersion=24, maxSdkVersion=32) certificate MD5 digest: d046fc5d1fc3cd0e57c5444097cd5449
Source Stamp Signer certificate DN: CN=Android, OU=Android, O=Google Inc., L=Mountain View, ST=California, C=US
Source Stamp Signer certificate SHA-256 digest: 3257d599a49d2c961a471ca9843f59d341a405884583fc087df4237b733bbd6d
Source Stamp Signer certificate SHA-1 digest: b1af3a0bf998aeede1a8716a539e5a59da1d86d6
Source Stamp Signer certificate MD5 digest: 577b8a9fbc7e308321aec6411169d2fb
WARNING: META-INF/services/com.google.protobuf.GeneratedExtensionRegistryLoader not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/.
WARNING: META-INF/services/kotlinx.coroutines.CoroutineExceptionHandler not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/.
WARNING: META-INF/services/kotlinx.coroutines.internal.MainDispatcherFactory not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/.
INFO: SourceStamp: No digests are available in the source stamp for signature scheme: 31

The apk I tried to patch wasn't a split apk youtube-original-v17.34.35.apk.
I didn't think comparing signatures :). I just assumed 3rd party apk isn't safe. Does this show the apkmirror's apk is not tampered with?

[kitadai31]

Does this show the apkmirror's apk is not tampered with?

Yes.
Some users believe that all APKs available online are unsafe, but this is not true.
If you have a genuine APK of other versions of same app, you can verify that the APK online has not been modified with by comparing certificate fingerprints.
If someone modified an APK, it must be re-signed and cannot use the original author's signing key, so certificate fingerprint will always be different.
(Unless the original author's signing key has been leaked)

By the way, APKMirror also shows signature fingerprints in the download page, so you can compare it with easily (But you may want to check fingerprint by yourself).

This shows 3d7a1223019aa39d9ea0e3436ab7c0896bfb4fb679f4de5fe7c23f326c8f994a

[wupwupper001]

I extracted apk files of version 17.34.35 and 17.34.36 with apktool to compare contents. All smali files are same. The only difference is lib,original and res folders. So, the patches should've worked for version 17.34.35. I must've made a mistake.

After browsing through revanced-cli repo I found:

// https://github.com/ReVanced/revanced-cli/blob/main/src/main/kotlin/app/revanced/cli/command/PatchCommand.kt#L100
@CommandLine.Option(
        names = ["-f", "--force"],
        description = ["Don't check for compatibility with the supplied APK's version."],
        showDefaultValue = ALWAYS,
    )

I didn't know revanced-cli has an option like this. I used "--force" parameter with revanced-cli and it successfully patched version 17.34.35 apk.

$ java -jar revanced-cli-5.0.0-all.jar patch "youtube-original-v17.34.35.apk" --force -p patches-5.2.1.rvp

I installed patched apk and so far it is working fine.

[kitadai31]

Oh, I didn't know that smali is same between 17.34.35 and 17.34.36
Thanks

Yes, you can apply patch ignoring the target version
In ReVanced Manager, it is called "Require suggested version" and "Version compatibility check"