Live data from Hacker News

Google details new 24-hour process to sideload unverified Android apps

arstechnica.com

211–220 of 1001 posts

Re: Google details new 24-hour process to sideload unverified Android apps

#211
post #169

Earlier quoted context omitted.

Because estimates suggest Americans lose about $119 billion annually to financial scams, which is a not insignificant fraction of our entire military budget, or more than 5% of annual social security expenditures.

So put a disclaimer in... Same way tons of other stuff works...

Nobody reads disclaimers, and people who get scammed and lose their life savings won't be made whole by being told "you accepted the disclaimer, nothing we can do."

Re: Google details new 24-hour process to sideload unverified Android apps

#212

I'm not in agreement with most of you, hn. They've found a decent compromise that works for power users and the general population. Your status as a power user does not invalidate the need to help the more vulnerable. Having to wait a day for a one off isn't a big deal, if they kept it looser then you'd be shouting about the amount of scams that propagate on the platform.

This helping the vulnerable framing is naive at best. This is about an American ad company consolidating their power over what people can do with devices they bought and are reliant on daily.

Helping the vulnerable should not involve that. If your only idea on how to help the vulnerable involves that, think of better ideas.

Re: Google details new 24-hour process to sideload unverified Android apps

#213
post #150
post #87

At this point I'm convinced that there's something deeply wrong with how our society treats technology. Ruining Android for everyone to try to maybe help some rather technologically-hopeless groups of people is the wrong solution. It's unsustainable in the long run. Also, the last thing this world needs right now is even more centralization of power. Especially around yet another US company. People who are unwilling…

> People who are unwilling to figure out the risks just should not use smartphones and the internet. Sounds great in theory, but just today I was reminded how impossible this is when walking back from lunch, I noticed all the parking meters covered with a hood, labelled with instructions on how to pay with the app. https://www.cbc.ca/news/canada/saskatchewan/city-of-regina-r...

It's kinda dumb that you can't tap your card. At least they have a phone option, but really, why no CC?

Re: Google details new 24-hour process to sideload unverified Android apps

#216

Honestly, if coerced sideloading is a real attack vector , then this seems to be a pretty fair compromise. I just remain skeptical that this tactic is successful on modern Android, with all the settings and scare screens you need to go through in order to sideload an app and grant dangerous permissions. I expect scammers will move to pre-packaged software with a bundled ADB client for Windows/Mac, then the flow is "e…

[flagged]

Re: Google details new 24-hour process to sideload unverified Android apps

#217
post #87

At this point I'm convinced that there's something deeply wrong with how our society treats technology. Ruining Android for everyone to try to maybe help some rather technologically-hopeless groups of people is the wrong solution. It's unsustainable in the long run. Also, the last thing this world needs right now is even more centralization of power. Especially around yet another US company. People who are unwilling…

I don't know if Google is making the right choice here, but I do believe that technology should be for anyone (anyone who wants it, at least).

How do you plan to decide who gets to use internet banking and who doesn't? That doesn't seem like a good road to be going down, either.

Re: Google details new 24-hour process to sideload unverified Android apps

#218
post #112

I'm generally OK with this, but the 24 hour hang time does seem a bit onerous. Most of the apps on my phone are installed from F-Droid. I guess the next time I get a new phone I'll have to wait at least 24 hours for it to become useful. I'm seriously considering Graphene for a next personal device and whatever the cheapest iOS device is for work.

This is hopefully an exciting time to consider a Motorola device, since they are partnering with GrapheneOS, but I worry that Google will block Google Play Services on any device that doesn't comply, so this might actually be a demoralizing time to be a GrapheneOS fan, when we watch them worm their stupid walled garden nonsense into the Motorola version of it.

You don't need Google Play at all on GrapheneOS. You have to option of installing a sandboxed version of Google Play, but it isn't installed by default. Google's verification shenanigans are otherwise irrelevant to Graphene, it only applies to apps distributed through the Google store.

Re: Google details new 24-hour process to sideload unverified Android apps

#219
The secret reason they are doing this is because governments want to be able to identify everyone online everywhere it matters at all time. They want to strip anonymity from computing.

Apple and Google can now credibly claim to governments to have nearly ubiquitous computing platforms that they can guarantee do not run any software that is not approved or antithetical to the goals of authorities. This makes the device safe for storing things like government IDs. OSs and Browsers will be required to present these IDs or at first just attest to them.

Before posting online, renting a server, using an app you will have to idenitfy yourself using your phone or similarly locked down PC (i.e. mac).

The introduction is under the guise as always of protecting the children. In reality they are removing your rights to privacy and free speech.

Post reply on HN