Live data from Hacker News

Google have declared Droidscript is malware

groups.google.com

21–30 of 665 posts

Re: Google have declared Droidscript is malware

#21
I can't find it now, but I read a story that's been repeatedly posted here about someone who got an idea, dropped everything, built an MVP, showed it to potential customers who loved it... and was told "I definitely need this, but I wouldn't pay for it." And then the person realized that the customer was right (the worst kind of right), and that the idea was both awesome and unmonetizable.

In the same vein... question.

Google is absolutely terrible at customer support and handling these kinds of issues. I once read in a comment posted here that they apparently don't even regard issues as valid signal unless 10,000 users are affected. (I've personally always instinctively shied away from app/site feedback buttons myself, and now I know why.) I'm guessing it's because con$i$tent ridiculou$ adverti$ing revenue ("we can do no wrong") has caused the death/deselection of normal customer support feedback loops.

Sooo... could a startup, or startups, fill the absolutely massive vacuum that is being created here?

For every story that trends on HN, how many more false negatives of people being bankrupted are there that never see the light of day? :(

I can only think that this number is probably remarkably high given that stories have to trend on social media and/or popular websites, for multiple days, before a connection is made and the problem can be fixed.

Once again, the more I look at this, the more I get the impression that this is a huge hole that could be filled to great benefit.

But thinking about it, I don't think it would be monetisable:

- It would ultimately be a company taking people's money to leverage a few private contacts. It doesn't take much squinting to see this as extortion and gatekeeping, which happens everywhere but would legally be very interesting to defend (especially against a company the size of Google). :/

- The contact issues only exist because of process and organizational failure, so even if private contacts were successfully established, the signal/noise ratio was ideal, and this company did perfect triage, it wouldn't take long for manglement to hear of the situation and decree that no Google employee were allowed to interact with the company professionally

- The whole thing would have to operate under the radar to operate at all... and maybe such operations exist and are successful, we've just never heard of them. Problem.

Running the whole thing as a volunteer operation maybe sounds like it could work though.

And if issues don't get fixed until >10,000 people "notice" maybe such an operation could have noticeable presence before being acknowledged.

Just thinking out loud. What think?

Re: Google have declared Droidscript is malware

#22
post #14

I had to go look to see what this was: "DroidScript is an easy to use, portable coding tool which simplifies mobile App development. It dramatically improves productivity by speeding up development by as much as 10x compared with using the standard development tools. It’s also an ideal tool for learning JavaScript, you can literally code anywhere with DroidScript, it’s not cloud based and doesn’t require an internet…

Time for one of these again. So... having read through their marketing material, this is an on-device tool that opens up what appears to be most of the Android application API to at least the user of the device, and potentially to any Droidscript applications they grab from other sources, and... maybe to other apps on the device? It's not clear from a quick read how extensive the runtime control is. So just right out…

I think your thoughts on this are plausible, if not likely. However, the usual complete lack of communication by google is the actual problem. Perhaps droidscripts could mitigate googles concerns, if they had the decency to explain them.

Re: Google have declared Droidscript is malware

#23

I had to go look to see what this was: "DroidScript is an easy to use, portable coding tool which simplifies mobile App development. It dramatically improves productivity by speeding up development by as much as 10x compared with using the standard development tools. It’s also an ideal tool for learning JavaScript, you can literally code anywhere with DroidScript, it’s not cloud based and doesn’t require an internet…

Was it used to publish malware? Given that it's a general purpose scripting tool I can imagine that some people would abuse it and use it as some sort of backdoor to get clueless users to run malware without having to publish it on the app store.

If that's the argument I can sort of see Google's point here. The Play Store is supposed to be curated and the application should follow certain guidelines. This tool as I understand it effectively provides a loophole that lets people run non-curated code without jailbreak. I know that Apple removed apps for similar reasons in the past.

TFA is a bit misleading, the whole "AD FRAUD" angle is frankly irrelevant, it's just that since Google considers that the app violates the guidelines it can't be eligible for the ad program.

Re: Google have declared Droidscript is malware

#24
post #5

Why not just publish it on f-droid?

They have a subscription model and ads which are not allowed on FDroid. FDroid also requires the software to be opensource.

This is true for the official FDroid repository but independent repo can be created [0]. This helps manage independent signing as well.

[0] : https://www.f-droid.org/en/docs/Setup_an_F-Droid_App_Repo/

Re: Google have declared Droidscript is malware

#25
It's seriously time to re-embrace the idea of ownership and control of our devices, and reject Android and iOS altogether. Developing for those platforms has become worse and more restrictive over the years, and this kind of crap is now just everyday news.

How good are Pinephones[1]? Are there better alternatives?

[1] https://www.pine64.org/pinephone/

Re: Google have declared Droidscript is malware

#26
> We don't allow apps with any code that could put a user, a user’s data, or a device at risk.

If Google thinks the ability to execute arbitrary code puts users' data at risk why don't they go the full iOS route and ban everything, from scripting apps to other JS engines beside Chromium?

I am so sick of their behaviour, the only reason I am still on Android because things like F-Droid still exists and iOS is even more closely guarded.

Re: Google have declared Droidscript is malware

#27
post #14

I had to go look to see what this was: "DroidScript is an easy to use, portable coding tool which simplifies mobile App development. It dramatically improves productivity by speeding up development by as much as 10x compared with using the standard development tools. It’s also an ideal tool for learning JavaScript, you can literally code anywhere with DroidScript, it’s not cloud based and doesn’t require an internet…

Time for one of these again. So... having read through their marketing material, this is an on-device tool that opens up what appears to be most of the Android application API to at least the user of the device, and potentially to any Droidscript applications they grab from other sources, and... maybe to other apps on the device? It's not clear from a quick read how extensive the runtime control is. So just right out…

> Add to that that it's a closed source IDE for an open platform, and my intuition sides with Google here.

If I can't ship my closed source IDE on the platform is the platform really open?

> My guess is that when details come out it will turn out that at-least-plausibly harmful Droidscript garbage was being pushed to users and Google decided to kill it.

Of course they will say it was because x, y, and z were done to protect the users. But is it really for the users' benefit or just about control over their walled garden?

Re: Google have declared Droidscript is malware

#28
post #22
post #14

Earlier quoted context omitted.

Time for one of these again. So... having read through their marketing material, this is an on-device tool that opens up what appears to be most of the Android application API to at least the user of the device, and potentially to any Droidscript applications they grab from other sources, and... maybe to other apps on the device? It's not clear from a quick read how extensive the runtime control is. So just right out…

I think your thoughts on this are plausible, if not likely. However, the usual complete lack of communication by google is the actual problem. Perhaps droidscripts could mitigate googles concerns, if they had the decency to explain them.

> However, the usual complete lack of communication by google is the actual problem.

Uh... Seems like the actual problem (given that scenario) is that adware is being pushed to users, not whether or not Google defended its ban in public. Complaints about customer service (from everyone, not just Google) are a dime a dozen, actual user security is clearly more important, right?

Your answer presupposes a frame where Droidscript is innocent. What if it's not, and it knowingly nodded to a community of junkware being pushed to its users (again, I have no evidence!). In that case you'd want it banned without "decency", right?

Re: Google have declared Droidscript is malware

#29
post #14

Earlier quoted context omitted.

Time for one of these again. So... having read through their marketing material, this is an on-device tool that opens up what appears to be most of the Android application API to at least the user of the device, and potentially to any Droidscript applications they grab from other sources, and... maybe to other apps on the device? It's not clear from a quick read how extensive the runtime control is. So just right out…

> Add to that that it's a closed source IDE for an open platform, and my intuition sides with Google here. If I can't ship my closed source IDE on the platform is the platform really open? > My guess is that when details come out it will turn out that at-least-plausibly harmful Droidscript garbage was being pushed to users and Google decided to kill it. Of course they will say it was because x, y, and z were done to…

> If I can't ship my closed source IDE on the platform is the platform really open?

For clarity: the Play Store is not an open platform. The Android API being exposed by Droidscript very much is.

Re: Google have declared Droidscript is malware

#30
post #19

The writing style of the piece looks like a political mailer. > The Google Play system has declared DroidScript is Malware and accused us of committing Ad Fraud! Needless to say, we are extremely upset and totally flabbergasted at this shocking allegation! That kind of hyperbole sets off all my BS detectors. As I go through the back and forth, DroidScript speculates this: > Our main guess was that one of our users wa…

[deleted]
Post reply on HN