I will be switching to Graphene OS🇨🇦 full time to keep my access to f-droid.
Never bought an Android and never will because I saw this exact shit coming
Continue to not own a mobile phone as I have done since the 80s
Probably find something else to pursue that doesn’t require dystopian technology. I can’t imagine that I would just sit there and despair over it.
I think this will be the first and last time I got a flagship model. I’m going back to upper-middle range Samsungs, that still have the headphone jack. My 10+ years old ThinkPad is much better to use than my S23 Ultra, the only thing that is locked down is the WLAN card slot (really need to do that hack, I already bought the necessary tools for it).
I would rather have a netbook with a cellular modem than a phone at this point. They are all 6" diagonal slabs of brain cancer.
I’m fairly happy with my Linux phone. Not too worried :P
Man I wish we could all agree to use the most superior date format:
YYYY MM DD
That’s Canada’s standard.
[Angry ISO-8601 noises]
Don’t wait, do it now
android 8.1 fur me >:3 this phone probably has at least 10 CVE’s I’m sure of it
The package (com.google.android.verifier) will be introduced on devices running Android 8 or higher, granting Google the ability to block the installation of unverified apps.
GrapheneOS currently, I have decided this is the last I’ll have though. Back to the landline when this one breaks/is locked out of the walled gardens
Landlines are all VOIP now unfortunately
I’m on lineage for now. But android as a whole isn’t safe anymore
Just enable the bypass now in preparation. Only took at second Google search:
Google provides a built-in “escape hatch” in the settings, though it is intentionally designed with significant friction to prevent social engineering attacks. [1] (https://keepandroidopen.org/), [2] (https://www.gadgets360.com/apps/features/how-to-bypass-android-24-hour-delay-and-install-third-party-apps-on-your-phone-11243027)
Unlock Developer Mode: Open your device Settings, go to About Phone, and tap Build Number 7 times.
Enable Unverified Packages: Go to Settings > System > Developer Options and scroll until you find Allow Unverified Packages.
Verify Intentions: Flip the toggle, confirm that you are not being coerced by a third party, and enter your device PIN or password.
Reboot: Restart your smartphone.
Wait out the Delay: You must wait exactly 24 hours. Google enforces this mandatory cooling-off period.
Finalize: After 24 hours have passed, return to the Unverified Packages menu to select either a temporary (7 days) or indefinite installation window.
It must be stated: Google is malicious! The language used here and elsewhere conceals the fact that: a) Google is a for-profit company with no morals (they work with militaries and surveillance-agencies to kill); b) they operate in a monopolistic manner; c) they’re eroding control of your personal-property.
This is just another move by Google to consolidate control over the AOSP. It doesn’t matter that this convoluted sequence can temporarily ‘bypass’ Google’s wishes–in fact I would state this is clearly worse. Removing the ability to install non-Google-endorsed software on your own private-property could be illegal. This is perhaps the only thing they could do to prevent lawsuits, only they’ve made it so asininely convoluted that only 0.01% will actually complete the process that it should be illegal monopolistic behaviour. American courts have absolutely failed everyone by allowing this rampant malicious behaviour to be the norm in American-software.
Google’s Android already created friction for installing software outside their ecosystem. There is no justification for this behaviour. It cannot be defended. Stop following their market-speak. This is belligerent and malicious behaviour!
To put a finer point on this: Google is charging a recurring fee to anyone who wants to distribute software to phones–Android-phones. If you have a need to distribute software to your organisation’s mobile-computers you now need to pay a recurring fee to Google, or… jump on one foot, spin around, touch the ground and hope Google doesn’t bully you further. Oh, and you have to do this dance personally for all 438 mobile-computers you manage. The absurdity of the situation is appalling! The fact you have users defending–and that is what these sort of responses are doing: defending one of the most profitable companies in existence–“oh, just do the dance now so it won’t inconvenience you later”.
The “escape hatch” is down that corridor, to the left, left, right, left, left, up, right & behind the book-case; take the stairs up, down five flights; depart at Washington D.C. and on arrival you’ll see a button. Press it. It might not do anything.
–Google
No doubt it’s a pain in the ass and it’s not just a protective measure. But pretty much every company isn’t doing stuff in the best interests of customers anymore (the bigger the company, the worse it is).
But I work with what I’ve got available at the moment.
I’d love for a free uncontrolled option to become available, but there’s not really any good choices at the moment.
MVP here. Thank you for posting this.
Fyi mine was under “apps from unverified developers” in developer options.
Mine was also named “Apps from unverified developers”. However, I’m not sure it actually got applied when I did it just now. Pressing on that quickly flashed something on the screen, but it disappeared before I could see what it was. I didn’t get to flip a toggle nor enter the PIN. Pressing “Apps from unverified developers” again doesn’t do anything now (not even the quick flash from the first time).
Appreciate any help!
EDIT: I restarted my phone just in case it did work, and checked again, the option is just gone. I’m unsure if this means something went wrong, or if it means it did work, and I’m currently in the 24 hour cooldown period.
I just did this and now I have a timer, but the toggle is still off.
It makes you wait 24hr before you can confirm if you want it set permanently. You’ll have to go back to that setting tomorrow to continue.
Ah yeah, I understood that part. It’s just that this step never happened for me: “Verify Intentions: Flip the toggle, confirm that you are not being coerced by a third party, and enter your device PIN or password.”
So, I just checked and the button is back. Looks like the fuckers actually made it two days to wiggle out from under their entrapment-like gimmick. Now I have to wait another 24 hours.
Yup, just checked and it’s the same here. Button is back and I was able to turn on the countdown.
Mine, it was difficult to find in the list and didn’t come up at all when searching the menu. But it was still there, I’m just waiting for the countdown to complete. Maybe it got buried in the list? 🤷
Just had the same issue. Now I will have to try and remember to tap this fucking button again at 4am tomorrow…
Thank you. Truly insane they added all those steps to the process.
I guess gotta protect those who don’t understand tech or something. At least there’s a mildly inconvenient way to bypass it
I know there are scams that convince people to install malicious apps that steal crypto or whatever. So long as there’s always a workaround, I guess I’m not super opposed to protecting people who are… easily scammed. I don’t like the waiting period part though.
Gonna be pretty embarrassing when people still get scammed even with this feature in place. I’ve already heard stories of some old person buying like $2500 worth of gift cards and the cashier, who has been prepped for this exact scenario, is powerless to stop them.
“Is someone telling you to buy these gift cards to settle a payment?”
“…n. n. no I need them for Christmas gifts.”
“It’s common for scammers to tell people to lie about why they’re buying the gift cards. If someone told you to say that to me, they’re lying to you. No legitimate business or government agency will require you to settle a payment using gift cards.”
*clearly nervous but also now getting angry*
“No I need these for my grandkids!”*sighs. Starts scanning cards*
The idea is to make it so convoluted that normal users won’t go through with this, if a friend tells them this is how to install an app that actually acts in the interest of the device owner. Either that, or it becomes so normal that most people will just do it without a thought, and then it fails to protect anyone from anything.
I like the cooldown as a protection, though. But given what else you can do with an unlocked phone without a cooldown, it seems overkill.
I wouldn’t stop at “mildly”
Or, you know? Just use Shizuku with install with options. Aurora store and Droid-ify both support built in install options with Shizuku.
I switched to GrapheneOS soon after the Pixel 8 came out, so ~2.5 years ago. DeGoogled last year. DeAmerican’d as much as possible this year.
I’m hoping Android getting locked down will motivate more people to work on Linux for mobile devices.
Going to have to try out postmarket soon, but want to find a job irl before then.
I am on grapheneOS.
