Google confirms 'high-friction' sideloading flow is coming to Android
androidauthority.com
Google confirms 'high-friction' sideloading flow is coming to Android
1–10 of 762 posts
Re: Google confirms 'high-friction' sideloading flow is coming to Android
#2TBH this doesn't seem a particularly high friction change. It seems very like what we have to do already, or like what we do on OSX.
Re: Google confirms 'high-friction' sideloading flow is coming to Android
#3TBH this doesn't seem a particularly high friction change. It seems very like what we have to do already, or like what we do on OSX.
> like what we do on OSX.
...which is so much of a complicated nuisance that most people simply give up. If this will go the way I think it will prepare to have to skip 10 things, write 3 ADB commands and submit a video of you spinning around for 30 seconds just to install your pirated game.
Re: Google confirms 'high-friction' sideloading flow is coming to Android
#4TBH this doesn't seem a particularly high friction change. It seems very like what we have to do already, or like what we do on OSX.
> like what we do on OSX. ...which is so much of a complicated nuisance that most people simply give up. If this will go the way I think it will prepare to have to skip 10 things, write 3 ADB commands and submit a video of you spinning around for 30 seconds just to install your pirated game.
> so much of a complicated nuisance that most people simply give up
Most people should give up.
The number of legitimate unsigned apps for MacOS that your grandparents should frictionlessly one-click-to-install is essentially nil.
Meanwhile, they're receiving countless bullying demands a day to install keyloggers and drain their bank accounts.
The threat model tradeoffs are clear.
Re: Google confirms 'high-friction' sideloading flow is coming to Android
#5TBH this doesn't seem a particularly high friction change. It seems very like what we have to do already, or like what we do on OSX.
> like what we do on OSX. ...which is so much of a complicated nuisance that most people simply give up. If this will go the way I think it will prepare to have to skip 10 things, write 3 ADB commands and submit a video of you spinning around for 30 seconds just to install your pirated game.
Just to install a proper call recorder or a better Work Profile manager.
Turning a possibility to install software outside of the app store should be about as normal as the fact you're using a laptop or desktop to install your pirated games.
Yeah, you.
If someone having access to "side load" an app has it to install a pirated game, then you have your OS, where you are not limited only to Apple/Amazon/Google store, simply for installing pirated software.
QED :)
Re: Google confirms 'high-friction' sideloading flow is coming to Android
#6TBH this doesn't seem a particularly high friction change. It seems very like what we have to do already, or like what we do on OSX.
I absolutely HATED the first time I had to deal with it... at least now it works a little better.. but the first version didn't actually tell you that you needed to go into security settings right after to enable the install.
Still not a big fan of it... though admittedly mostly just install stuff via brew/cask more than direct downloads as a result.
Re: Google confirms 'high-friction' sideloading flow is coming to Android
#7Earlier quoted context omitted.
> like what we do on OSX. ...which is so much of a complicated nuisance that most people simply give up. If this will go the way I think it will prepare to have to skip 10 things, write 3 ADB commands and submit a video of you spinning around for 30 seconds just to install your pirated game.
> so much of a complicated nuisance that most people simply give up Most people should give up. The number of legitimate unsigned apps for MacOS that your grandparents should frictionlessly one-click-to-install is essentially nil. Meanwhile, they're receiving countless bullying demands a day to install keyloggers and drain their bank accounts. The threat model tradeoffs are clear.
The threat model doesn't work. It depends on Apple doing their job, and even $99/year doesn't prevent Apple from signing a Trojan horse of your competitor: https://blog.lastpass.com/posts/warning-fraudulent-app-imper...
You want to talk about confusing Grandma? Why isn't Lastpass the first entry on the App Store when you search for it verbatim? At the going rate, installing signed software is more deceptive than searching for the official installer online.
Re: Google confirms 'high-friction' sideloading flow is coming to Android
#8TBH this doesn't seem a particularly high friction change. It seems very like what we have to do already, or like what we do on OSX.
They did not specify what exactly is the new workflow is/what is high friction about it in the post no?
Re: Google confirms 'high-friction' sideloading flow is coming to Android
#9Earlier quoted context omitted.
> like what we do on OSX. ...which is so much of a complicated nuisance that most people simply give up. If this will go the way I think it will prepare to have to skip 10 things, write 3 ADB commands and submit a video of you spinning around for 30 seconds just to install your pirated game.
> so much of a complicated nuisance that most people simply give up Most people should give up. The number of legitimate unsigned apps for MacOS that your grandparents should frictionlessly one-click-to-install is essentially nil. Meanwhile, they're receiving countless bullying demands a day to install keyloggers and drain their bank accounts. The threat model tradeoffs are clear.
A single scary warning per source (ie per new certificate that you choose to trust) would be fine. If I had to jump through a few hoops to install f-droid on a stock device that would be fine. But once I've authorized f-droid the OS needs to shut up and stay out of the way for good. No "are you sure you want f-droid installing this other thing" nonsense.
Re: Google confirms 'high-friction' sideloading flow is coming to Android
#10How does this relate to the announcement from a while back about introducing signatures that tie back to Google? (IE trusted developer program or whatever they're calling that horse shit.)