I’m writing an app that I will distribute only through f-droid. The people I would like to share it with are typical, non-technical android users. Before those changes I could just send them a link to f-droid apk and explain it’s just another app store or send a link to the apk directly and probably most of them would be able to install it. Now I would have to tell them to do all those weird things first, things that look suspicious and that they would not understand the purpose of. I don’t think anyone will be wiling to do it. This is not a win. The effect will be exactly the same - serious limits on distributing apps though alternative channels.
the win in this is that many people realise how locked google has made android and how blatantly and arbitrarily google exerts their control over it. hopefully that will be input to some consumer decision (when sailfish becomes an alternative) and a tiny bit more people will consider their choice when getting a new phone. and maybe it also helps some regulation to be agreed (in europe, obviously).
It is always like this. Make a very anti consumer decision that everyone hates, then tone it down so the half of those people will say “we won”. This is a loss.
My galaxy will let me install but then I get this when I try to run the app:
I had this too. I installed it from playstore but maintain the software now via aurora. So far it works…
Christ
no.
i’ll look into this, but they seem to have used the old strategy of announcing something absurd then back down to what they wanted because of “community pressure”
bonus for not looking bad in comparison, while still being bad.
Then make the wait period a week, a month. Have this privilege expire every so often etc.
Try to pull warranty shenanigans if you ever went through the process.
Of course we didn’t win. the more hoops you have to jump through, the fewer people who will install their own apps and then you lose all of the community support. And Google didn’t promise not to change their plans in the future. So you know that they’ll promise this now. Maybe they’ll backtrack a little if they have to and they will try to ratchet things up six months later anyway.
Real solutions involve either breaking up monopolies or breaking up monopolies, which is why some of the other cell phone vendors’ actions recently look positive. If there are two versions of Android that are popularly used, then the banks will have to support both of them and then everyone can run away from Google whenever they feel like it. But if there’s only one popular version and Android itself gets more and more locked down then that is Google seizing the entire market and they will cut out all of the other cell phone manufacturers as soon as they can. that will be just as bad as Apple.
I kind of wish they hadn’t. Fully blocking these apps would’ve really lit a fire in the open source world to create a serious alternative. Now people will just put up with the 1 day wait and carry on.
So fucking glad that GrapheneOS will probably be available for the new Motorola phones next year. I’ve been on pixels since they were Nexus, and if not for GrapheneOS, I would have jumped ship after the Pixel 4 and moved to Crapple.
I too am excited. I wish they’d just put it on a flagship Motorola now so I could buy it.
with a 24 hour delay guarunteed to punish anyone who wants to have their device their way.
Microsoft appeared to walk back Recall until they suddenly brought it back unannounced and doubled down. So I’ll believe it when I see it
Yeah corpos don’t respect consumers or norms of human dignity, they’ll just do what they want more quietly if you complain. The only real solution is to break up monopolies (ideally for the last several decades).
Making users wait 24 hours doesn’t improve security; it’s an anti-competitive change designed to make the Google Play store seem like less of a hassle in comparison.
I can actually see where it can improve security against scammers trying to scam elderly and non-tech savvy people.
- Scammer tries to get someone to install malware from their site
- Victim isn’t familiar with sideloading, but scammer instructs them
- Victim hits the first time 24 hour block and has to restart and wait
- The restart alone breaks contact with the scammer, scam thwarted
For the rest of us that know our way around Android, it’s just a one time annoyance, after completing all the steps to enable sideloading, you won’t have to wait 24 hours anymore.
Solution in search of a problem?
I have never seen a scam call involving sideloading an app on a phone… Why would they whenTeamViwer is in the Google app store?
Fuck I dunno, I haven’t used the Play Store since Covid lockdown. I rather prefer to sideload most apps and avoid Google for the most part anyways.
Lets be real though, currently they already have to blow through 4 other warnings about installing unsigned APK and enabled the browser or file manager to be able to install applications. It’s almost certain if they are that far deep/commited, they are going to call the scammer back if the scammer left a number.
Yes this might allow for a time delay where the scammers number could be disabled if reported by enough people, or someone else to be like “yo this is a scam” if they mentioned it but, I don’t think this is as secure as they are saying it will be. The target audience for this is very unlikely to be thwarted by a time delay. Plus, the scammer will make some excuse about how the warning is just a safety percaucion and doesn’t need to be followed as this is a normal usage of the toggle, and then have them call back after the delay is done.
For clarification: the target audience doesn’t know about the scam, and all they care about is that someone is seemingly willing to assist with an issue or problem they have. Said person knows the solution and they just have to wait for the timer to be done to be able to do said solution. They have no reason of telling others about it (unless they were complaining about googles time delay) as they already got someone who is seemingly able to assist.
Honestly, having to have the user type “I agree that I have verified the application i am trying to install is genuine and not a fraudulent app” or a listbox of checkmarks to toggle in order to enable it would be far more efficient for this case.
Hell take the example image the article on the dev page has and make it into toggles instead and it would work far better than a timer does.
Sadly, there’s truth in everything you say. Scammers are gonna be scammers, and they’ll just find a new technique plus the long standing social engineering to continue their efforts to rip people off of whatever they can.
Still, it’s something in the middleground, to help grandma be less likely to get scammed, while also giving power users an out and way to keep using their devices the way they want.
Honestly, having to have the user type “I agree that I have verified the application i am trying to install is genuine and not a fraudulent app”
Yeah, this would be the most promising approach IMO. Whenever I was forced to write something, I did pay more attention to what that said than if I ticked a box next to it.
Maybe even have them write “I am not instructed to install this app by someone else. I am aware that following instructions to install an app this way often have fraudulent intentions”.
(Also if the language was changed recently, it should ask to write it in all languages that were set within the last 14 days or so. Otherwise the scammer will have them switch the language so they don’t understand what they’re writing)
I’d believe that if most Pig Butchering scams weren’t using apps from Google Play already.
Fair enough, you have a point. Although, I do think the developer verification thing will make it easier for Google to weed out bad actor developers altogether from the Play Store.
Sure there’s no perfect solution, but at least they’re trying to make it a lot more difficult for the scammers out there, while still leaving power users a path to keep using Android the way we want.
I think it is absolutely delusional to assume any of this actually has anything to do with security or safety of users. Google just wants more power and control over, well, everything they can get.
It’s going to be effective, but it’s a sad world where you have to create a total nanny state because there exist a subset of users who are INCREDIBLY stupid.
Is it still a subset when it’s the majority?
And to be honest, the level of effort scammers are willing to go through is shocking, and AI’s just making it easier for them.
Evidence that any significant percentage of people, never mind the majority, is getting scammed? Then how many of them via app installs?
And to be honest, the level of effort scammers are willing to go through is shocking
Is it? If you live in a country like India, then a single successful scam will be able to pay for years of living expenses
Anything less than the whole is a subset, yes.
Something about the smartest bears vs the dumbest humans.
So, we will have to enable developer mode for that? How long before banking and government apps refuse to run if you have “sideloaded” apps installed? This will be the same as not allowing the majority of people to sideload. No win in here, just an advanced strategy from google to make us conform
I totally agree.
I am so tired of this “slow boil”, bs.
This is already the case if the developer mode toggle is enabled for some. I have to turn it off any time I’m traveling for work because the app we have to use to file expense reports refuses to run with developer mode enabled.
You should NEVER be using work apps on a personal device. EVER.
At that point you should tell your work to get a work only device for you… I always refuse to use my phone for work shit. I used to explain to them why, now I just lie and say my device is too old to have anything installed on it.
Yeah, but I travel for work. I dont want to carry two phones, as the one colpany offers is a shitty samsung a-series and I use graphene on my Pixel
Yeah, totally understandable.
I mentioned to the other guy how my dad got a dual-sim phone (not a shitty one) just by sort of mentioning having to carry two phones. I guess some employers are nicer than others :D
lmao, no arguments here. My boss’s phone got bit by the construction site so I think we might finally be getting some movement on that front, at least for anyone who finds themselves in the field doing shit.
For what it’s worth, I don’t generally mind using my phone for work shit because it’s convenient to do so. MDM on android works in a container, so I don’t even care about that if they want to implement it.
Yeah I get the convenience of it.
My dad was complaining out loud to his boss, not requesting anything, just complaining about having to bring two phones with him when he was out and about. So his boss got him a dual-sim work phone lol. The convenience can work out that way as well :)
Or if you’re rooted, or run something other than your OEM image. I use grapheneos and I’m lucky that my bank doesn’t enforce that like some do. I still can’t use cards to tap with Google wallet because it’s not certified by Google.
But what if they starting requiring that you remove the sideloaded apps? We’re getting trapped
deleted by creator
Riddle me this, why do people use banking apps on mobile devices in the first place? Why put all your financial data in an eggshell just waiting to get dropped or stolen?
Bank cards have had the whole tap to pay thing for quite a while now. I drop my phone, busted. I drop my bank card, it’s fine, I just pick it right back up, and it stays in my wallet unless in use, not in my hand where it’s infinitely more likely to get lost or stolen.
You want a banking app, do so from your home computer, not a fragile mobile device literally designed to fail if it so much as falls out of your hands.
Anyways, riddle me that…
Because they incentivize it. Some banks are better at incentivizing it than others. My bank for example, allows the highest daily limit (by a factor of 5x) if you use the app. Online banking has a lower limit, and cards lower still. I don’t appreciate them holding my own money hostage, but the sad reality we live in precludes me from having enough remaining mental bandwidth and effort reserve to commit it to fighting against it in such an empty and unwinnable battle. Money is a scam anyway.
Money is a scam anyway.
I couldn’t agree more 👍
In the US, I largely agree with you. Or use a website from a mobile browser. Different story in different countries where a smartphone might be the only compute the average person has, or where state services are tied to a mobile ID or bank app.
Not saying that should be the case, but if the choice is between running niche FOSS apps and removing yourself from societal benefits structures, I know what most people will pick. That’s the real danger of allowing one company to own an entire ecosystem and have enough power that they have conversations directly with governments about their people instead of with their people.
I don’t know how online banking access is around the world, but here in brazil, they made it completely impractical to use from computers by applying artificial restrictions. Some payment institutions doesn’t even support access from computers anymore. Meanwhile, accessing from the phones has been made easier and less restrictive, so basically everyone has to do banking from the phone. It has even become a popular thing to have a separate “banking phone” to use at home, but many people can’t affort that.
I have a concrete and very stupid example.
We got a large gift card as an incentive to renew our lease at our current apartment vs moving. The format they sent it in had no physical card and would only work on either online stores or through a service like Google Wallet AKA a banking app on a mobile device as you mentioned.
So to get groceries while waiting on a tax refund (thanks crappy American economy and taxation methods) we had no choice but to connect and use it that way.
Oh, I have a choice alright, I chose to withdraw all my money and cancel my bank account like 11 years ago, because my bank refused to accept my tax return as a direct deposit. TurboTax had to reprocess it and send my return as a paper check after the bank refused a fucking direct deposit!
Besides, when the electricity goes out for two weeks after a hurricane or other natural or manmade disaster, how you gonna get groceries or gasoline with electronic money anyways? Give me a paper check to exchange for paper money, paper money still spends even when the electricity goes out.
If it’s a service that only deals with electronic transfers, well I ain’t signing up, and you can just keep that gift card if it requires an app to even use.
Every single day I assume that tomorrow there might not be electricity, it’s amazing to me that people have come to rely on it so much and assume it’ll always be there.
Ask anyone in Cuba how that’s going right now…
Oh I have lived outside the USA at one point and I’m well aware electricity isn’t magic. There were other places too but Guyana most definitely doesn’t have a stable power grid.
I’m not going to starve my kids over that kind of stance on cash only either though.
I can’t understand why banks are as stupid as they often are. Why would you refuse money from the federal government. What do you think we successfully stole money from the IRS through a direct deposit?
Yeah, if that process wouldn’t need developer mode (or stayed active after disabling it again) that wouldn’t be that bad (still annoying). But having to choose between the ability to install apps or use those apps that only work without developer mode certainly isn’t a win.
Huh I’m unfamiliar with this, but I’ve been running graphene for years and before that lineage
No we didn’t win. This is Google making it harder to install the programs you want, rather than the programs Google wants you to have.
