Related
[UPDATED] Android Market Apps I bought for my Hero: Are they "paid for" on my Desire?
Updated April 18, 2010
Now I get it. See Post #6 below. Google's dragging their ass on "fingerprint" approval. They need to be SHAMED virally across the web for sheer incompetence -- or intentional malice toward purchasers of a phone that competes with their Nexus One. "Do No Evil" my ass.
========== My Original Posting =========
I bought maybe 6-7 apps for my hero -- 2 different keyboards, "Executive Assistant", some kind of alarm clock... When on my Hero, even after factory reset and resetting up my phone, when I went to MARKET and "My Downloads", those paid for apps showed up as available to install again on my Hero.
I have been using my Desire -- but thus far only for Wifi as I set it up and get acquainted with the phone. Perhaps stupidly (!) I am still using the Hero as my "phone" til I have all my apps and widgets and layouts replicated on my Desire.
Though I do not have my carrier's SIM card installed in my Desire, 90% of the device works fine, especially all wifi usages, Market downloads, email, web, etc... I did set up my Gmail account as well.
It's one's Gmail account which is your linkage to PAID FOR apps, via Google Checkout. So, I am surprised that when I select "My downloads" i don't see any indication of paid for apps.
Is this tied to a SIM card? (if so seems ridiculous)
RELATED: I can't even find BETTER KEYBOARD app in the Market now, nor "SMART KEYBOARD" ... Does the market auto-filter out apps that do not run on Android 2.1 ?
thank you
the paid apps are tied with your google account.
(no longer relevant)
From what I read, some paid and free apps should appear as soon as google finishes some signature thing related to that! so it's a matter of time.
By the way, do you see paid apps in general? For me, I always had to use Market Enabaler on the Hero to open Market to paid apps.
A temporary solution, you can use your Hero to extract the paid applications (apk files) using Root Explorer, copy them to the Desire SD card and install them using any file manager. The only limitation here is that you have to keep checking for updates on the Hero.
Re: Android Market > Apps I bought for my Hero: Are they "paid for" on my Desire?
as far as I know, and experts correct me if wrong, the ability to get access are directly connected to the sim from which you connect.
which is why market enabler used to spoof the apn's from which paid apps were available.
with no sim card you should only be able to get free apps or nothing at all.
I live in Sweden, no paid apps.
was at friends last night who has an old UK sim card, popped that in and I got access to some paid apps. but still with the limitations as previously discussed in this forum. (waiting for Google to get it straightened out)
so, yes & no, the apps are tied to your sim, cuz it tells the phone which apn/ network your phone is connecting from...
Sent from my HTC Desire using the XDA mobile application powered by Tapatalk
I just read a few other threads, with links to the official Android Market forums. First off, I have to ask some basic vocabulary:
What are "protected apps" ?
I have no idea what this means.
Second: salahag, thanks for your reply. I didn't respond initially because I didn't understand it at all. Paid apps showed up in my Hero from day 1 and that was for me October 2009. I was baffled because I had no context for even thinking "is everything that's available showing here?" because by default my brain had no reason to pose that question. I just assumed the Market worked one way, and I was seeing everything the way everyone else sees it.
I'm suddenly quite baffled by this emerging mystery now that I can't find a bunch of apps for my DESIRE. But now the mystery of "where are my paid apps that I bought on my Hero?" is solved, replaced by "why are hundreds of apps that were available on my Hero not available on my Desire?"
XDA-devs to the rescue, via another thread here about "Missing apps in the Market" linking to this posting in Android Market forums:
by nprussell - 4/8/10 (LINK to this posting at Android Market forums)
Hi all,
I'm an Android developer from the XDA forum & VillainROM.co.uk. I've primarily worked on the Hero, but I received my Desire yesterday.
I can confirm that I too am missing several apps from the market. I also have an answer to your question.
First things first, it's protected apps that are missing from the market. There are generally two reasons why apps will be missing from the market.
(1) When a new ROM/Phone is released, the manufacturer, in this case HTC, sends the build to Google, which includes a 'Fingerprint' (a unique line of text which governs its market access) in the build.prop file. Generally, it states the name of the phone and Android version in the fingerprint. With Root & system write access, this fingerprint can easily be changed... but we don't have that luxury right now.
Once Google approve the build, the fingerprint will be added to their allowed database to view protected apps on the market.
(2) The other cause for apps missing from the market in builds (such as twidroid, layar, barcode scanner etc) is that these apps require permissions to use the camera/auto focus. They are NOT protected apps. If the XML permission files are missing from system/etc/permissions, then Google Market will simply block these apps from showing.
So again... to answer your question... we'll see the protected apps as soon as either:
a) HTC chase up Google
b) Google get around to activating the fingerprint
Click to expand...
Click to collapse
Un-frikkin-believable.
It's like the equivalence of a dumb low-IQ bureaucrat holding up a long line for Drivers' License renewals at the "Department of Motor Vehicles". No reason at all for the stupid delay other than some asshole letting some work order sit on his desktop til he feels like getting to it.
No wonder the author (gogol) of that other related thread recommends consumer activism or we just stand in line each time and just wait to get ****'d in the ass by beaurocratic process that sounds WAY more like Microsoft than "the smartest guys in the room" at Google -- who pride themselves on only hiring Ivy-league grads and equivalents, like from Stanford. They ought to be ridiculed out of town with this.
gogol writes: I really cannot believe Google screws this great Android platform like this. Think about the next firmware update, from Google or HTC ... We will AGAIN get this issue ... Then wait again very long. I am really mad and hate this.
If one of you guys is capable of writing a good professional article or blog regarding this issue, we could spread the voice all over the internet / twitter / facebook / blogs / news so Google could "end" or "fix" this.
Click to expand...
Click to collapse
I'm game to SHAME GOOGLE into getting their f-ing act together or be ridiculed for incompetence -- everywhere we can post that message on the web. And they have the nerve to criticize APPLE for their ridiculous App Store totalitarianism?
.
xrrkrrkx said:
I live in Sweden, no paid apps. Was at friends last night who has an old UK sim card, popped that in and I got access to some paid apps. but still with the limitations as previously discussed in this forum. (waiting for Google to get it straightened out)
so, yes & no, the apps are tied to your sim, cuz it tells the phone which apn/ network your phone is connecting from...
Click to expand...
Click to collapse
Can you clarify this further. Thank you for information related to SIM card needing to be in use in order to access paid apps -- god only knows why -- it's retarded to me.
But is it correct that I have read other places that there are LOCALIZATION ISSUES? where some apps are only available to certain regions? (Like YouTube does) -- Or can you shoot that one down as rumor. I don't get this. Open source OS. Google's entire revenue model based on ads. More phones = more ad impressions = more money to Google. What possible motivation is there to block access to apps in a marketplace that I am willing to pay for -- where Google gets % of all sales, as well as transactional revenue thru Google Checkout? -- Something doesn't make sense. And usually when that's the case, SOMEONE IS BEING PROTECTED in some corporate deal.
What's the story. Is this another CARRIER-TAINTED example of holding customers hostage? If so, I can't wait til the day we can blow up that Carrier-driven model that strangles the free marketplace. They should make it or break it based on direct delivery of services at competitive pricing. I am so tired of Boardroom Protectionist Policies agreed to by major competitors, to ensure a baseline profit well above anything deserved if there was open competition. ... But I could be off on my little side rant and it has nothing to do with this issue, in which case, .... ooops. sorry
salahag said:
From what I read, some paid and free apps should appear as soon as google finishes some signature thing related to that! so it's a matter of time.
By the way, do you see paid apps in general? For me, I always had to use Market Enabaler on the Hero to open Market to paid apps.
A temporary solution, you can use your Hero to extract the paid applications (apk files) using Root Explorer, copy them to the Desire SD card and install them using any file manager. The only limitation here is that you have to keep checking for updates on the Hero.
Click to expand...
Click to collapse
Many thanks - I never even thought to do this. Rooted my Hero, copied the apks (they're in /data/app-private) to the Desire and installed. I now have National Rail and Locale Lockscreen back again
Ta.
you can use your Hero to extract the paid applications (apk files) using Root Explorer, copy them to the Desire SD card and install them using any file manager.
Click to expand...
Click to collapse
I meant to ask: Is Root Explorer an app from the Market (I'll check of course), and does it only work on rooted Heroes? Mine is unrooted. But I have used Astro app many times for moving stuff from my computer to Hero, and now my Desire. So, it would just be a matter of my knowing which folder/directory to look in on my Hero to access the .apk files.
(EDIT: I see now from daern above: they're in /data/app-private ... well Astro Explorer shows me root folder and data folder but both say "directory is empty", so I am guessing unless I root my Hero i can't access this stuff... right?)
So, thanks from ME also!
Easy. Install "InstantRook.apk" on the Hero (Google for it, download directly to the device and run from Astro).
Once installed, it will announce "your device is rooted". Now fire up Root Explorer and note that you can see the /data folder. Copy the private apk files to /sdcard and away you go.
It really is as easy as that. It may stuff your Hero (it didn't affect mine in the slightest) but as I'm assuming that you're replacing it anyway, the worst it would require would be a hard-boot anyway.
Took < 5 mins
I just recently switched my ADP1 for a Desire and really love the Device (except for the Screen) but I have some issues with the Market.
I'm used to my ADP1 with CM on it so I had access to all the apps paid and free. On my Desire I have access to free and paid apps but not all of them. Sometimes the free Demo is available but not the paid version. As I live in Switzerland, I'm not sure if this is because of country restrictions of the Market or because Google didn't sign off the Desire to be a Device which is allowed to install protected apps. Some reports say it's because of Google, some say because of the country separation of the Market...
Does anyone know for sure?
Lots of threads in the forums regarding missing apps mate.
Search and Ye shall find.
Regards
MoJo
Look here: http://forum.xda-developers.com/showthread.php?t=664729
wrong Link.
I'm sorry, that I opened a duplicate thread.
I have an app (calorie counter) that keeps showing a notification there is an update. I don't want to update it because the new permissions seem intrusive (allowing hardware controls - take picture and video).
Does anyone know how I can disable getting a notification about the update?
Cheers,
Open Google play, go to settings and uncheck " notifications" option.
Sent from my Galaxy Nexus using xda premium
That will turn off notifications for all apps though, which I'd rather not do.
Sent from my Galaxy Nexus using Tapatalk 2
Gucci.Nexus said:
That will turn off notifications for all apps though, which I'd rather not do.
Sent from my Galaxy Nexus using Tapatalk 2
Click to expand...
Click to collapse
You could use titanium backup to disassociate the app with the Google Play store. I've personally never done it myself, but I think this is the solution you're looking for
Sent from my HTC One XL using xda premium
Gucci.Nexus said:
That will turn off notifications for all apps though, which I'd rather not do.
Sent from my Galaxy Nexus using Tapatalk 2
Click to expand...
Click to collapse
You can also specify it on a per app basis. Just open the app in Google play and uncheck the checkbox.
Sent from my Galaxy Nexus using Tapatalk 2
Petrovski80 said:
You can also specify it on a per app basis. Just open the app in Google play and uncheck the checkbox.
Sent from my Galaxy Nexus using Tapatalk 2
Click to expand...
Click to collapse
No, you can't
The only check box is for Automatic Updates, not update notifications.
Go to settings, apps, select the app, uncheck notifications.
Solution by using ZipSigner 2
I just came across a solution (android.stackexchange.com/a/25527)
If you've got root access and have the original apk of the version you want to keep at hand (via Titanium backup or copied out of your \data\app folder), you can use ZipSigner 2 to give that apk a different key (auto-testkey).
When you install the apk with its new key, the Play Store will not recognize the installed app and will therefore not try to search or push any updates. :good:
ZipSigner 2 is available for free in the Play Store: play.google.com/store/apps/details?id=kellinwood.zipsigner2
If you have root, you can simply use ti backup to detach an app from the market.
It was assumed op doesn't have root though.
Sent from my Galaxy Nexus using Tapatalk 2
Petrovski80 said:
If you have root, you can simply use ti backup to detach an app from the market.
Click to expand...
Click to collapse
It was my understanding that detaching an app in Titanium does not work anymore since an update from Google Play has more checks on the server side.
http://www.titaniumtrack.com/changelog/titanium-backup/4-8-4-1
Djezpur said:
I just came across a solution (android.stackexchange.com/a/25527)
If you've got root access and have the original apk of the version you want to keep at hand (via Titanium backup or copied out of your \data\app folder), you can use ZipSigner 2 to give that apk a different key (auto-testkey).
When you install the apk with its new key, the Play Store will not recognize the installed app and will therefore not try to search or push any updates. :good:
ZipSigner 2 is available for free in the Play Store: play.google.com/store/apps/details?id=kellinwood.zipsigner2
Click to expand...
Click to collapse
Thanks for this. What a quick and easy solution. Now I can keep the old Foursquare without getting it automatically updated to that new version.
Please note: ZipSigner 2 does not require root!
The solution probably still works. Thanks for the hint!
Now I did test it.
1. Use App Backup and Restore to save the apk
2. Use Zipsigner to give the apk a different autokey
3. Uninstall original app
4. Install the apk modified by Zipsigner, you may need some file manager like TotalCommander for this
It is all possible without root and works well
Gucci.Nexus said:
I have an app (calorie counter) that keeps showing a notification there is an update. I don't want to update it because the new permissions seem intrusive (allowing hardware controls - take picture and video).
Does anyone know how I can disable getting a notification about the update?
Cheers,
Click to expand...
Click to collapse
I know this is an old thread. And I understand that Ti Backup used to work for detaching an app from Play Store. But I also understand that this works no longer. For those who are interested, I have created an app that does a pretty good job of this. It is called Hide Updates In Play Store. There is a video showing the app at work. It does require a rooted device. Thanks
Let me summarize:
- it costs money
- it needs root
- it needs an additional app
- the solution may not persist if you uninstall the controlling app
All these disadvantages can be avoided by reading just one posting higher ...
tag68 said:
Let me summarize:
- it costs money
- it needs root
- it needs an additional app
- the solution may not persist if you uninstall the controlling app
All these disadvantages can be avoided by reading just one posting higher ...
Click to expand...
Click to collapse
You are, of course, correct in the disadvantages. But the above method has its own limitations:
1) I wonder how/if it will work with system apps unless you have root. For instance, I actually wanted to get rid of updates to Google Search since later versions hose-up Utter.
2) It is something of a pain to "undo" since you will loose any settings or data (unless you are VERY CAREFUL) related to the app when you uninstall the "fake-signed" app and re-install the "real" app. Of course, this would also happen during the install of the "fake-signed" app in the first place. In some cases, this may be trivial but in others, it may not. And App Backup/Restore - which I use - fine app - only processes the .apk file.
3) It requires a minimum 2 apps be installed.
4) It isn't terribly easy to do. Developers would likely be able/willing to handle this - or even know what signing is or what to do. But how about others? The first one would be hardest for sure.
Like my solution, it also seems not likely to work with paid apps or apps having in-app purchases. I am not 100% sure, but would guess that the re-signing will mess up most Play Store license checking. Indeed, App Backup/Restore handles these differently and with far less functionality.
Still, for someone who is willing to do it and for those lacking root, the solution suggested above seems like it will work and those who are rooted can certainly save that $1 which can be used to make a one-time purchase of maybe 1/2 cup of coffee at the nearest Starbucks
Cheers!
David, if you would have mentioned the possibility of resigning in the description of your app, maybe even give the manual how to do without your app, I'd much more be willing to believe and support you.
Without that hint it has a little smell of betraying for me, not showing people who do not know better or do not have root that there are cost-free alternatives. But probably I have just to admit that you seem to be good at selling. I usually don't like people who are good at selling.
tag68 said:
David, if you would have mentioned the possibility of resigning in the description of your app, maybe even give the manual how to do without your app, I'd much more be willing to believe and support you.
Without that hint it has a little smell of betraying for me, not showing people who do not know better or do not have root that there are cost-free alternatives. But probably I have just to admit that you seem to be good at selling. I usually don't like people who are good at selling.
Click to expand...
Click to collapse
First, I developed and posted my app on Play Store before I even saw this forum thread with its reference to resigning apps. So I was not aware at the time.
Second, I still have not even tried to confirm that the re-signing approach will work (although I can see that it might). I will take the word of the person who posted this technique that it does indeed work. But I now have a solution that I like and use. So I have no real need to find and test other solutions.
Third, there are often many possible solutions to a given problem. In fact, my original approach to this particular problem was done via Tasker and shell scripts. It worked but was not particularly user friendly. I tried to remedy that in my app. It seems you are saying that a person (me) choosing to implement one possible solution must also run down, verify, and advertise all other approaches. If so, I think that is a bit ridiculous and would appreciate a list of examples of app authors who are doing this who you do "believe and support." I do not think it is very common.
Fourth, I found this thread via a google search. I think it is fair to believe others will as well if they are seeking alternative approaches. So they too can learn about the resigning approach and decide for themselves how to proceed. I never claimed (here on in my app) that mine is the only approach. I never say it is the "best" approach. I do not denigrate proponents of other approaches. I only implemented one approach that seemed reasonable to me. I posted here so others who suffer from this weakness in Play Store can, if they wish, can check it out for themselves. Play Store gives buyers 2 hours or so to test the solution and decide if it works for them. If not, they are free to return the app and cancel the sale and charge.
Fifth, if you check my list of apps on Play Store, you will see that they are all very small apps and all are either free or very low cost. All of these apps were the result of my trying to resolve situations that I found personally irritating. I then thought that maybe others would find them useful as well. If you look at the number of installs for all of my apps combined, I think you will find that I am NOT at all good at "selling". Indeed, if the net proceeds from all of my paid apps combined exceeded much more than $300 total it would be a miracle. With programming, testing, and support time this likely works out to be maybe $0.10 per hour. I figure the market for this app will be no larger than my previous apps and at $1 per sale, it will be a while before I can use the proceeds to buy even a six pack of beer (especially after Google takes their cut). So I can hardly be considered a successful salesman. If only that were true! I do sell some of my apps. But truth be told I really do this, not for the money, but so I can show some revenue to the tax authorities so they permit me to write off some computer-related expenses.
I am sorry you feel "betrayed" by me somehow. And I am sorry that you have somehow decided that you don't like me for the rather limited reasons you have managed to list here. I really do not think I have given you or anyone else cause to reach such conclusions. It really makes me kind of sad. But you are entitled to your opinions and I will leave it at that as I walk away in wonder.
You admit that you googled where you could post ads for your app, did not even have a look what was last written in the thread and then sent your ad? In my opinion that IS Spam, nothing else ...
So thank you for the offer, and for staying away from this thread in future. For everyone who needs a good working solution free of cost and less use of resources but with a bit more manual handling of apk-files, have a look at posting #13 of this thread.
Djezpur said:
I just came across a solution (android.stackexchange.com/a/25527)
If you've got root access and have the original apk of the version you want to keep at hand (via Titanium backup or copied out of your \data\app folder), you can use ZipSigner 2 to give that apk a different key (auto-testkey).
When you install the apk with its new key, the Play Store will not recognize the installed app and will therefore not try to search or push any updates. :good:
ZipSigner 2 is available for free in the Play Store: play.google.com/store/apps/details?id=kellinwood.zipsigner2
Click to expand...
Click to collapse
Thank-you! That worked like charm!!
OK so I have spying software on my phn but I do not know who or what it is I do not want to wipe my phn any app that can block others from sniffing on my phn privacy??
Sent from iPhones worst enemy THE SGS3
I use anti spy mobile free. Just got some spyware off my gf and her mom's phone.
I ran it on this one and it says suspicious activity on 2 of my apps which have suspicious activity.
White pages caller id. And the s voice apk you can install on aosp.
Sent from my SGH-T999 using xda premium
Very helpful I'm going to try and how the s voice helps here?
Sent from iPhones worst enemy THE SGS3
Va ya con dios!
elrene101 said:
OK so I have spying software on my phn but I do not know who or what it is I do not want to wipe my phn any app that can block others from sniffing on my phn privacy??
Sent from iPhones worst enemy THE SGS3
Click to expand...
Click to collapse
Ok elrene101, this might sound silly but please bear with me.....
How do you know that it is spying on you or like you have Spyware installed?
Do you see banners & popups? if so then it is not spyware, it is adware.
To get rid it is us usually straight forward and simple, just uninstall the app in question.
Lots of time you will probably not know which one of the apps it is with those banner that pops up in the notice area.
So Rule number one, Do not install free apps found on the internet.
Rule number two, Do not install free apps found on line.
Rule number three, Do not install free apps period.
Now I know that these rules may seem harsh, but the fact of the matter is that most of the free apps are free because the developers of these apps need to get paid and they seek payment from sponsors who place these banners or ads into these apps and even into the notice area of your android. Years ago, I too was happy to install cool apps that I found on line and I was slap happy with apps. In the early days of the androids there were very little oversight, most developers were slapping code or copying code found from other apps or from sources on line. The whole app install process was a hit or miss, apps were not being designed for the specific phone model yet. It was either an android app or a iPhone app. You had to install it and hope that it would work on your phone. The stuff that went into the apps were quite unethical with the poor Q&A or the constant freezes, random reboots. Some of the untold stories of an Android developer who has a great following in only like 12 years old. (what does that tell you about best practices?)
Then I started to notice, that these apps were causing my phone to become slow with lag and the battery life was like hole in a bucket.
I then removed all free apps, all of them. just kept the stock, then eventually went for root to get rid of them all.
Install only apps from the market or what is now call the Play & when you can, look for a pro version or a adfree version to reduce the bloat ware or ad ware on your phone. There are a lot of free apps on the market and most of them are great to use, but you have to read the fine print because they will require access to your network or phone to schedule an update or to shut down when an incoming phone call comes in.
I have my android for some time now and upgraded to the S3.... Over the months, I too have tried apps and when I see that the banners are worse the benefit of the app, the app get the boot. Over the months, I have a nice collection of paid apps that I have purchased from the market. So if the app serves no purpose, it will be removed. Now the phone has only the apps that I use on a weekly basis. If there is an app that I have not used in a month, it gets removed. This helps the phone with battery and keeps the rom running smoothly.
If you follow these principles, you will be fine and will not have to format your phone. If you do, dont be afraid to ask for assistance or for some pointers on how to make a back up or how to odin your phone.
Youtube it.
Youtube has helped me with clues and have gaven me a lot of knowledge over a wide range of topics beyound the android.
With that said elrene101, Va ya con dios!
I also would like to hear what exactly leads you to believe you have spyware on your phone....other than CarrierIQ and SysScope, Im assuming.
I HIGHLY recommend using TrevE's Logging Test App. It can detect all sorts of stuff and can even assist you in opt out of a number of companies advertising and data mining. This is one of my favorite tools around, and the dev has some wonderful information for you.
The app is free, but there is a Pro Key available on the market for only a buck. I seriously recommend getting it. It significantly increases the power of the tool and automates a lot of the removal processes. (The free version detects, and you can read his thread to learn how to manually remove any threats). Its only $1!
Note: You download the app from his website, and then the Pro Key from the store. You can disregard what Serendipityguy said about not downloading apps from the internet for this one. I am currently using it and have for quite some time. I guarantee it is safe and ad-free!
If nothing else, I encourage you to go to both his XDA thread and his website and read, read, read! There is a lot to take in, but it is absolutely worth the time!
TrevE's website and home to Logging Test App
Android Security Test Home Page
TrevE's XDA Thread
[DEV|APPv14] CIQ / HTC & Google Checkin / HTC loggers / Tell HTC Info & Removal
Good Luck, and if you need further help, please provide more details pertaining to your situation!
Since I am new I have spent the last few hours reading posts on the XDA site so that once I make my post hopefully I won't get attacked with "that information is/was listed on" or "I've already posted that" or "you should read previous information before posting". I'm sure you get the idea. Anyway, I can't find any consensus on having virus/malware/spyware/adware installed on the Note 2014 or Galaxy SIII. Even amongst senior moderators. I've ready the links some have attached to their emails and still no consensus. Do mobile devices need them or is it just "scare tactics" as one article referred to them as. Forgive me for saying this and no name calling please, but I come from a long line of BlackBerry devices before switching to android. I haven't switched my contacts and calendars over to my tablet or phone yet because BB was known for its security protections. I didn't have to give apps half as many permissions as I do in the play store and the app would still work!
Also please help me understand how you can tell if an app from the play store is a "safe" app or not? I can't base it on names I know since as most of you probably already know BB didn't have a great app selection and didn't support android unless you rooted your tablet.
Can I get some feedback from a moderator please.
to know if any app is safe or not is reading permission list before install it...
and as far as i know there is no reason to install antivirus in android device... it wil make your device very slow...
What are some of the things to look out for when apps ask for permissions?
Well there are different things. A game does not need to read your contacs, nor your gps. But most android apps are using more permissions as they would need. My advice is : download only the apps you need and not every junk...
Gesendet von meinem GT-I9505 mit Tapatalk
Any app that has been in the playstore for a reasonable amount of time, has a reasonable amount of downloads and you guess it reasonable rating will be perfectly safe.
Obviously people will have different thoughts as to what reasonable is but if you're new to Android. Google best Android apps for doing "This" and you'll get heaps of suggested apps that have been tried and tested and are perfectly safe.
Do that and no you won't need antivirus but follow the same rules you wouldd with a PC..... opening links in dodgy email etc.
You shouldn't have any problems browsing the web either, even with "unknown sources" ticked you still have to give the app permission to install.
Also this tablet has a fair amount of resources available, if it was going to put your mind at ease I don't think getting an antivirus app like AVG (most recommended I think) is going to have a noticeable or at least only minimal effect on performance.