121–130 of 154 posts
Android Studio on its deathbed. Just release VSCode plugin and kill it for good, it has been a buggy, slow mess for the last 3 years or so.
IDEs are (were? :-/) a very personal choice. Maybe I'm an AI but I would have loved a CLI-centric workflow. It would have kept options open.
Earlier quoted context omitted.
Android CLI can write a tool that wraps android-cli and automatically passes the flag based on an env variable. How would Google have enough data about a brand new product without collecting that data?
> How would Google have enough data about a brand new product without collecting that data? They wouldn't. But on the other hand, they probably have a large amount of in-house Android app developers on whom they can conduct such metrics collection. I wouldn't expect outsiders to have vastly different workflows, because when you get out of the happy path with Android all you get is pain.
Earlier quoted context omitted.
I don't know, I don't use/want to use Xcode. What I'm interested is in the CLI tool for my own use, not necessarily for agents.
Come on now, you're going to need Xcode at some point during development.
The install command shown for Windows is 404. `curl -fsSL https://dl.google.com/android/cli/latest/windows_x86_64/inst... | bash` The URL shown for individual OSs work, but the script errors for me. `curl.exe -fsSL https://dl.google.com/android/cli/latest/windows_x86_64/inst... -o "%TEMP%\i.cmd" && "%TEMP%\i.cmd"` I manually downloaded the exe, but it say socket error. vibe coding is going strong!
I honestly have no idea what is going on. Lots of broken things in what's supposed to be front products for Google and other "high name" brands. I don't get it: Where is everybody? Is there no one there? Are these companies really dead inside?
Maybe it's a size thing.
Earlier quoted context omitted.
> Good, it shouldn't be two clicks for elderly people to install trojans on their phone that then drain their bank account. And what makes you think that most scams involve fancy zero days/CVEs/hijacking the OS, and not simple social engineering? You do not require a malicious apk to receive 2FA codes, or for the gullible user to read them aloud to the scammer. All phones come with an SMS and phone app. You do not re…
We can and should address more than one problem at a time. Malicious APKs are a real problem that exists. I work tangentially in this space. > But blocking 3rd party apps for this is like using a cannon to shoot a mosquito. I’d agree, if that was what was going to happen. But it isn’t. Google is not going to block 3rd party apps.
Very much agree. Here in India, one of the big telecos has now rolled out a system where if you're on a call with an unknown number, OTPs are not sent to the phone till the call ends. IMO systems like this (or ironically - using OEM installed on device AI as a MITM to stop a call when an OTP is heard) are very good ideas.
> Malicious APKs are a real problem that exists. I work tangentially in this space.
Not doubting it for a moment. I've myself installed an app (that in my defense I pretty much suspected to be malware) that was malware. Even a few weeks ago I helped someone remove a hidden app that was draining their battery like anything (idk doing what, crypto mining or something I guess?). Ofc this app had accessibility permissions and would close settings if you tried to uninstall it.
On the flip side, I've also been stopped by my own phone to give accessibility permissions... to TapTap (a FOSS app by legendary developer quinny98) [1].
I should probably add - here in India, UPI scams use(d?) to be very common, let alone "giving someone your OTP" scams. I personally know someone very close who's lost a good bit of money, purely via someone social engineering them to hand over OTPs.
Even today, scamsters call and threaten a "digital arrest" (whatever the fuck that is) to unsuspecting victims. Presumably many hand over their money.
I have absolutely nothing against technical solutions. But IMO social education to never install apps from outside the play store, combined with "Digital Arrest does not exist" ads that the Indian govt is already running, are significantly stronger and resistant to much more things (like I mentioned - pig butchering or gift card scams).
I would be very curious if you had stats for how much is lost to scams via social engineering, vs malware. I asked Gemini (I can share the chat link via some private method of communication if you're interested), and apparently per IC3, it's 13.7B USD for social engineering, vs 1.57B USD for malware. If you have better data, I'd be happy to know more.
> I’d agree, if that was what was going to happen. But it isn’t. Google is not going to block 3rd party apps.
Perhaps I'm a cynical guy (which is true!), but I see zero reason to give google the benefit of doubt when it comes to control. I understand you're perhaps a googler (or you work on the same side) - nothing against it at all. Hardening is 100% helpful.
But companies famously like to increase revenue, and do not care about users. Every app on the play store (and btw there are a ton of scammy ones - I know because I get their ads on Youtube :) nets google some money. There's nothing stopping google from going "Actually we decided to stop all apk installs as people get scammed by them" tomorrow?
There is no fundamental reason to believe them beyond trusting them at their word. And there are many reasons to not believe them, unfortunately.
IMO, the old adage holds true - beating tech is hard, beating humans (with a wrench ;) is easy. Aka, XKCD 538.
1. https://github.com/KieronQuinn/TapTap 2. https://xkcd.com/538/
Earlier quoted context omitted.
I honestly have no idea what is going on. Lots of broken things in what's supposed to be front products for Google and other "high name" brands. I don't get it: Where is everybody? Is there no one there? Are these companies really dead inside?
Same for Microsoft. Redirects to the void, 5-level-deep sign-in prompts, "contact your administrator" who doesn't exist... Maybe it's a size thing.
Earlier quoted context omitted.
We can and should address more than one problem at a time. Malicious APKs are a real problem that exists. I work tangentially in this space. > But blocking 3rd party apps for this is like using a cannon to shoot a mosquito. I’d agree, if that was what was going to happen. But it isn’t. Google is not going to block 3rd party apps.
> We can and should address more than one problem at a time. Very much agree. Here in India, one of the big telecos has now rolled out a system where if you're on a call with an unknown number, OTPs are not sent to the phone till the call ends. IMO systems like this (or ironically - using OEM installed on device AI as a MITM to stop a call when an OTP is heard) are very good ideas. > Malicious APKs are a real problem…
A decent amount of this fraud is not solely malware or solely social engineering -- there's often elements of both -- where they fool the person into installing the malware which helps to further facilitate the scheme. And in these cases, urgency is often used as part of the SE vector. So I think a 24 waiting period and warning about scams is particularly a good idea to mitigate these issues.
Earlier quoted context omitted.
I don't know, I don't use/want to use Xcode. What I'm interested is in the CLI tool for my own use, not necessarily for agents.
Come on now, you're going to need Xcode at some point during development.
So far I’ve been shipping internal apps without it! Even notarizing works :)
Apparently Audio Units v3 is only available with Xcode, which is why I’m only doing v2.
The install command shown for Windows is 404. `curl -fsSL https://dl.google.com/android/cli/latest/windows_x86_64/inst... | bash` The URL shown for individual OSs work, but the script errors for me. `curl.exe -fsSL https://dl.google.com/android/cli/latest/windows_x86_64/inst... -o "%TEMP%\i.cmd" && "%TEMP%\i.cmd"` I manually downloaded the exe, but it say socket error. vibe coding is going strong!