Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Google will allow only apps from verified developers to be installed on Android

9to5google.com

Post reply on HN
Print view View original

431–440 of 1001 posts

Re: Google will allow only apps from verified developers to be installed on Android

#431

Post by itake »

ricudis wrote: post #424

Before quickly running to dismiss this move, please at least do your research with regards to the situation in the countries mentioned in the article, especially Singapore and Thailand. Side-loaded malware has been an epidemic in SE Asia, and there are MILLIONS of dollars stolen (mostly from pensioners!) via side-loaded malware disguised as gambling apps - the local population is particularly suspectible to gambling,…

Private app companies should be and are doing more to protect against malware.

Banking apps in Malaysia are required to include malware detection software [0]. Companies should have better fraud and trust teams to identity and block fraud activities.

The rest of the world shouldn't suffer because a handful of banking companies refuse to offer basic fraud protections for their users.

[0] - https://www.abm.org.my/press-releases/banks-to-enable-malwar...

Re: Google will allow only apps from verified developers to be installed on Android

#432

Post by computerdork »

ricudis wrote: post #424

Before quickly running to dismiss this move, please at least do your research with regards to the situation in the countries mentioned in the article, especially Singapore and Thailand. Side-loaded malware has been an epidemic in SE Asia, and there are MILLIONS of dollars stolen (mostly from pensioners!) via side-loaded malware disguised as gambling apps - the local population is particularly suspectible to gambling,…

Brave of you to say this. Yeah, in my humble opinion, agree with you, android and ios devices target the mainstream users more than say a PC or Mac's, and should be more locked down. We can keep PC's and Mac's relative open (although they are getting more secure too, which might be good?), but for devices that truly target the masses, secure them as much as possible (why would typical users like my parent's need to install a remote access server on their phone?).

Yeah, my Dad got hacked only a month ago, through a tech-support phishing phone-call. He uses a windows PC which makes him vulnerable, and the scammers did install tons of evil crap. He really should be using an android or ios tablet, to reduce his chances of being hacked like this. I know these devices are still vulnerable, but they do seem more secure based on how much more locked down they are.

Re: Google will allow only apps from verified developers to be installed on Android

#433

Post by _heimdall »

medhir wrote: post #407

Every day we stray farther from the premise that we should be allowed to install / modify software on the computers we own. Will once again re-up the concept of a “right to root access”, to prevent big corps from pulling this bs over and over again: https://medhir.com/blog/right-to-root-access

The question really isn't whether we should be able to modify computers we own, its whether we own them at all.

Re: Google will allow only apps from verified developers to be installed on Android

#434

Post by realusername »

earthicus wrote: post #415
throw10920 wrote: post #393

This is really bad. I think that most people on HN will agree with that. The problem is that most normal people (HN is not normal - mostly for the better) don't even understand what sideloading is - let alone actually care . How can we fix this? (aside from making people care - apathy enables so many political problems in the current age, but it's such a huge problem that this definitely isn't going to be the impetus…

This certainly won't solve the problem, but I would at least like to banish the term "side load", which is a kind of Orwellian word that takes something everyone used to do all the time and makes it sound obscure and a bit nefarious. Maybe we, the tech literate, can start calling sideloading a "free install" or something. When asked, we can clarify that the 'free' stands for both freedom, and not paying middlemen 30%…

I call it "direct install" personally. It's how you are supposed to be able to install programs, directly from the source.

If anything, it's the playstore and appstore which are side channels.

Re: Google will allow only apps from verified developers to be installed on Android

#435

Post by realusername »

black3r wrote: post #148
87636899376 wrote: post #14

Official announcement: https://android-developers.googleblog.com/2025/08/elevating-... More info: https://developer.android.com/developer-verification https://support.google.com/googleplay/android-developer/answ... Personally...we all know the Play Store is chock full of malicious garbage, so the verification requirements there don't do jack to protect users. The way I see it, this is nothing but a power grab, a way…

> This is such an odd statement. I mean, surely they have to be willing to review the contents of apps at some point (if only to suspend the accounts of developers who are actually producing malware), or else this whole affair does nothing but introduce friction. Requiring company verification helps against some app pretending to be made by a legitimate institution, e.g. your bank. Requiring public key registration f…

> Typical issue - I want to download an app that's not on available "in my country" - because I'm on a holiday and want to try some local app,

The solution here is just to get rid of artificial country limitations which make some users download APKs. None of those make sense in the online world anyways.

Re: Google will allow only apps from verified developers to be installed on Android

#436

Post by Springtime »

ricudis wrote: post #424

Before quickly running to dismiss this move, please at least do your research with regards to the situation in the countries mentioned in the article, especially Singapore and Thailand. Side-loaded malware has been an epidemic in SE Asia, and there are MILLIONS of dollars stolen (mostly from pensioners!) via side-loaded malware disguised as gambling apps - the local population is particularly suspectible to gambling,…

The requirement per Google's post is rolling out globally though in a couple years. There was nothing stopping per country governments that this may disproportionately affect from requiring this for Play Protect/GMS certified Android devices sold in their region but enforcing it worldwide for such non-AOSP devices I don't find surprising to be controversial.

Re: Google will allow only apps from verified developers to be installed on Android

#437

Post by safety1st »

prism56 wrote: post #39
EMIRELADERO wrote: post #19

So that's it then. If this actually goes through, there will be no option in the mobile OS market for an OS that both: a) allows the installation of apps without any contractual relationship with any party, and b) allows the use of mainstream and secure apps like banking

I'll just have to disable it and choose a banking app that works on the browser. Tonnes of my apps are sideloaded. Quite a few are on the playstore or the dev might upload their details.

Is it confirmed that we will even be able to disable this?

Re: Google will allow only apps from verified developers to be installed on Android

#438

Post by paulcole »

medhir wrote: post #407

Every day we stray farther from the premise that we should be allowed to install / modify software on the computers we own. Will once again re-up the concept of a “right to root access”, to prevent big corps from pulling this bs over and over again: https://medhir.com/blog/right-to-root-access

> Every day we stray farther from the premise that we should be allowed to install / modify software on the computers we own.

I’ve never agreed with this premise.

I buy things that mostly meet my needs and desires in every other walk of life. I’m personally OK with extending this to computers as well.

Re: Google will allow only apps from verified developers to be installed on Android

#439

Post by altfredd »

throw10920 wrote: post #393

This is really bad. I think that most people on HN will agree with that. The problem is that most normal people (HN is not normal - mostly for the better) don't even understand what sideloading is - let alone actually care . How can we fix this? (aside from making people care - apathy enables so many political problems in the current age, but it's such a huge problem that this definitely isn't going to be the impetus…

> most normal people... don't even understand what sideloading is

Actually, they understand it just fine. The concept is very simple too.

Before this change you could install Android apps without registering your passport/driving license with Google.

After this change you will have to tell Google your real name and home address to install anything on your Android device. This is all. It can take a convoluted form of registering Google account or a more direct form of sending Google your identity documents to confirm "developer privileges". But you will no longer be able to use non-hacked Android devices to install anything without doing those steps.

P.S. I recall that some people still believe that they can create Google account without giving Google your personal details, phone etc. This is simply a self-delusion. If Google does not immediately demand you to cough up a phone numbers under pretense of "suspicious activity", that's because they already know who you are (you probably told them yourself by registering another account elsewhere).

No, "burner SIM cards" aren't real. This is just another form of self-delusion, — this time architected by US security agencies. You don't become anonymous by using those, you become watched.

Re: Google will allow only apps from verified developers to be installed on Android

#440

Post by yesbut »

_heimdall wrote: post #433
medhir wrote: post #407

Every day we stray farther from the premise that we should be allowed to install / modify software on the computers we own. Will once again re-up the concept of a “right to root access”, to prevent big corps from pulling this bs over and over again: https://medhir.com/blog/right-to-root-access

The question really isn't whether we should be able to modify computers we own, its whether we own them at all.

regardless of what the corporations say we do own the devices we purchase.
Post reply on HN