Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Google details new 24-hour process to sideload unverified Android apps

arstechnica.com

Post reply on HN
Print view View original

121–130 of 1001 posts

Re: Google details new 24-hour process to sideload unverified Android apps

#121

Post by Evidlo »

MishaalRahman wrote: post #47
janice1999 wrote: post #19

Earlier quoted context omitted.

Developers, including non-US citizens, are forced to give Google their government ID to distribute apps. This enables Google to track and censor projects, like NewPipe, an alternative open source Youtube frontend, by revoking signing permissions for developers.

>Developers, including non-US citizens, are forced to give Google their government ID to distribute apps. Developers can choose to not undergo verification, thereby remaining anonymous. The only change is that their applications will need to be installed via ADB and/or this new advanced flow on certified Android devices. Either way, you can still distribute your apps wherever you want. If you verify your identity, th…

My friend's little kid likes to make games that he and his friends can play. As far as I am aware, these apps don't require any permissions.

Are apps like this more dangerous than browsing to a website? I thought they were entirely sandboxed from the rest of the device?

Re: Google details new 24-hour process to sideload unverified Android apps

#122

Post by foepys »

cenamus wrote: post #116
NullPrefix wrote: post #106

Earlier quoted context omitted.

>They should probably not have a bank account at all and just stick to cash Pretty much illegal in some parts of EU

Source? Also how is it related to the EU if it only affects certain places? Could have just said certain places in Europe

Not illegal per se in Germany but you won't find a legal job that doesn't require you to have a bank account. Benefits will also only be paid electronically (exceptions for some asylum seekers apply).

You also cannot get a tax refund or pay taxes without a bank account.

Re: Google details new 24-hour process to sideload unverified Android apps

#123

Post by pfortuny »

grishka wrote: post #119
NullPrefix wrote: post #106

Earlier quoted context omitted.

>They should probably not have a bank account at all and just stick to cash Pretty much illegal in some parts of EU

Not sure how it works in countries that didn't go through 80 years of socialism, but I assume that you're saying that in those countries, your salary is required to go to your bank account and can't be paid in cash. Then you can still pretty much "stick to cash" by withdrawing the whole thing on your payday. But then idk, maybe everyone in those countries is aware of the risks related to keeping their money in a bank…

All withdrawals of more than 1000€ in Spain must be accounted for and more than 5000€ must be authorized.

You "may" but maybe you "cannot".

Re: Google details new 24-hour process to sideload unverified Android apps

#124

Post by andrewaylett »

rtkwe wrote: post #35
astra1701 wrote: post #14

This is going to hurt legitimate sideloading way more than actually necessary to reduce scams: - Must enable developer mode -- some apps (e.g., banking apps) will refuse to operate and such when developer mode is on, and so if you depend on such apps, I guess you just can't sideload? - One-day (day!!!) waiting period to activate (one-time) -- the vast majority of people who need to sideload something will probably no…

> - Must enable developer mode -- some apps (e.g., banking apps) will refuse to operate and such when developer mode is on, and so if you depend on such apps, I guess you just can't sideload? What apps are those? I've yet to run into any of my banking apps that refuse to run with developer mode enabled. I've seen a few that do that for rooted phones but that's a different story. I've been running android for a decade…

SumUp won't let you use your phone to accept contactless payments while developer mode is enabled. You can still use an external card reader though.

Re: Google details new 24-hour process to sideload unverified Android apps

#125

Post by MishaalRahman »

wolvoleo wrote: post #73
MishaalRahman wrote: post #40

Earlier quoted context omitted.

>- Must enable developer mode -- some apps (e.g., banking apps) will refuse to operate and such when developer mode is on, and so if you depend on such apps, I guess you just can't sideload? Hi, I'm the community engagement manager @ Android. It's my understanding that you don't have to keep developer options enabled after you enable the advanced flow. Once you make the change on your device, it's enabled. If you tur…

Do I need to be signed in to Google play to get the sideloading exception turned on? I don't sign in to it because I don't want to have my phone associated with a Google account. But I can't uninstall play completely on the devices I have. It says something about 'restart your phone and reauthenticate' that's why I'm asking. What do you autenticate? > ADB installs are not impacted by the waiting period, so that is an…

>It says something about 'restart your phone and reauthenticate' that's why I'm asking. What do you autenticate?

You're authenticating that you're the device owner (via your device's saved biometrics or PIN/pattern/password).

>Um yeah but then do I have to install every update via adb? I want to just use F-Droid.

No, once you go through the advanced flow and choose the option to allow installing unregistered apps indefinitely, you can both install and update unregistered apps without going through the flow again (or using ADB).

Re: Google details new 24-hour process to sideload unverified Android apps

#126

Post by lvales »

astra1701 wrote: post #14

This is going to hurt legitimate sideloading way more than actually necessary to reduce scams: - Must enable developer mode -- some apps (e.g., banking apps) will refuse to operate and such when developer mode is on, and so if you depend on such apps, I guess you just can't sideload? - One-day (day!!!) waiting period to activate (one-time) -- the vast majority of people who need to sideload something will probably no…

> This is going to hurt legitimate sideloading way more than actually necessary to reduce scams

Isn't that the objective? "Reducing scams" is the same kind of argument as "what about the children"; it's supposed to make you stop thinking about what it means, because the intentions are so good.

Re: Google details new 24-hour process to sideload unverified Android apps

#127

Post by nullc »

silver_sun wrote: post #34

It's a little inconvenient for someone setting up a new phone to have to wait a full day to install unregistered apps. But while I can't speak for others, it's a price I'm personally willing to pay to make the types of scams they mention much less effective. The perfect is the enemy of the good.

On what basis do you believe that it will meaningfully reduce the dollars lost or persons harmed by fraud, as opposed to simple shuffling around the exact means used?

Re: Google details new 24-hour process to sideload unverified Android apps

#129

Post by MishaalRahman »

catgirlinspace wrote: post #102
wolvoleo wrote: post #73

Earlier quoted context omitted.

Do I need to be signed in to Google play to get the sideloading exception turned on? I don't sign in to it because I don't want to have my phone associated with a Google account. But I can't uninstall play completely on the devices I have. It says something about 'restart your phone and reauthenticate' that's why I'm asking. What do you autenticate? > ADB installs are not impacted by the waiting period, so that is an…

I think the authentication is doing your face/fingerprint/passcode unlock?

Correct.

Re: Google details new 24-hour process to sideload unverified Android apps

#130

Post by zadikian »

grishka wrote: post #87

At this point I'm convinced that there's something deeply wrong with how our society treats technology. Ruining Android for everyone to try to maybe help some rather technologically-hopeless groups of people is the wrong solution. It's unsustainable in the long run. Also, the last thing this world needs right now is even more centralization of power. Especially around yet another US company. People who are unwilling…

Is this even the reason? If Android phonemakers are simply concerned about tech-illiterate users switching to iPhone, they could sell a locked-down Android phone that requires some know-how to unlock.
Post reply on HN