Live data from Hacker News

Google will allow only apps from verified developers to be installed on Android

9to5google.com

91–100 of 1001 posts

Re: Google will allow only apps from verified developers to be installed on Android

#91

While I like to jump on the Google bash train as much as anyone, this is to comply with EU laws. Apple implemented a similar change for the EU App Store earlier this year to comply with the Digital Services Act (DSA), a regulation that now requires app developers to provide their “trader status” to submit new apps or app updates for distribution.

> for distribution.

I.e. it doesn't require this at all, it merely requires Google require verification for apps that they themselves distribute. What they've been doing all along until now plus or minus minor bookkeeping details on what data they collect.

Re: Google will allow only apps from verified developers to be installed on Android

#92
post #61

Mobile phone platforms are reverting back to the pre-iOS/Android reality where you have to jump through tons of hoops to even make an app let alone run a viable business with it.

I don't recall having to send government ID to any companies to publish MIDlets back in the day. I just uploaded them to getjar.

Re: Google will allow only apps from verified developers to be installed on Android

#93

So that's it then. If this actually goes through, there will be no option in the mobile OS market for an OS that both: a) allows the installation of apps without any contractual relationship with any party, and b) allows the use of mainstream and secure apps like banking

In time, you will only be able to access banking from your desktop using an approved OS and browser with attestation...

For what conceivable reason would they make the users go on desktop, considering mobile is in the process of being fully locked down?

If anything, they'd eventually deny access from desktop, forcing everyone to login via the fully manages mobile devices without any user freedom.

Some banks are already getting there btw, as their preferred 2fa is a companion app... One small step away from making that the only option, effectively denying access to anyone without a locked down mobile device.

Re: Google will allow only apps from verified developers to be installed on Android

#95

While I like to jump on the Google bash train as much as anyone, this is to comply with EU laws. Apple implemented a similar change for the EU App Store earlier this year to comply with the Digital Services Act (DSA), a regulation that now requires app developers to provide their “trader status” to submit new apps or app updates for distribution.

But this is for apps outside the Play store, so the DSA isn’t at play here insofar as Google needs to be concerned. I don’t think there’s any solid decision on whether third-party app distribution is subject to the trader requirements, but if/when there is, it’d presumably be on the alternative distribution platform to enforce, not Google. Plus, Google already adjusted its policies to comply with the DSA.

For the record, Apple notes that the DSA requirements only impact developers distributing through the App Store, not through alternative distribution [1].

[1]: https://developer.apple.com/help/app-store-connect/manage-co...

Re: Google will allow only apps from verified developers to be installed on Android

#96
> Google will begin to verify the identities of developers distributing their apps on Android devices, not just those who distribute via the Play Store

This is absolutely unacceptable. That's like you having to submit your personal details to Microsoft in order to just run a program on Windows. Absolutely nuts and it will not go as they think it will.

Re: Google will allow only apps from verified developers to be installed on Android

#97
Disgusting, horrifying, but utterly predictable. A dark day indeed, once no major mobile platform allows running whatever code you wish. Sideloading isn't really sideloading if the app has to be signed by the gatekeeper.

Isn't this a death knell for F-Droid, at least for running on most hardware? Since they require their own builds/attestation?

The Overton Window for computing keeps inching towards gatekeepers having total control over devices. I can't help but imagine myself lurching along on the last somewhat open hardware I can cobble together in a couple of decades, because I refuse to drink the verification can to continue...

Re: Google will allow only apps from verified developers to be installed on Android

#98

[flagged]

I would be surprised if Android has a reputational issue among users. Maybe at the margins, but not enough to significantly affect market share. Most people have already sorted into iOS and Android camps already.

To whatever extent Google may be responding to an issue arising from the market, it is likely at the behest of large companies, especially payment processors, payment card networks, banks, etc. These institutions lately have begun to exert increasing influence over end-user activities, and it would not surprise me if they are playing a part here, too.

Re: Google will allow only apps from verified developers to be installed on Android

#99
post #73

Imagine MS doing the same for Windows. It’s sad that smartphones now hold so much personal and private data but aren’t really under the control of their users.

> Imagine MS doing the same for Windows.

It will happen. We've been the frogs boiled in the pot for years, accepting forced attestation. Eventually they'll close off running unsigned code, and the PCs will probably have bootloaders locked to Windows as well, so you can't escape.

Re: Google will allow only apps from verified developers to be installed on Android

#100
post #73

Imagine MS doing the same for Windows. It’s sad that smartphones now hold so much personal and private data but aren’t really under the control of their users.

> Imagine MS doing the same for Windows.

They already have a version of that - it's called Windows S Mode (Windows Store apps only, no EXEs or scripts, Edge only for browsing). If they get away with it, they would make it the default. Required Microsoft accounts was a step in that direction.

Post reply on HN