Live data from Hacker News

What we talk about when we talk about sideloading

f-droid.org

631–640 of 646 posts

Re: What we talk about when we talk about sideloading

#631
post #570

Earlier quoted context omitted.

Also, let's stop using the term "sideloading", as if it's something bad or shady. It's called "installing apps".

You didn’t read the article?

Of course the poster did. The question is why does everyone else prefer to use the Apple/Google-coined term rather than the standard "installing" verbiage.

Re: What we talk about when we talk about sideloading

#632

Earlier quoted context omitted.

> This community has pockets of people who like authoritarian control, Alternatively, we've spent our lives helping our parents out. Last year my mom just got completely owned, total taken over of all her financial accounts. The most likely vector was that her phone was out of date and not receiving security patches anymore. Luckily her bank's anti fraud systems kicked in before too much damage was done. Prior to sma…

> my mom just got completely owned Any evidence this was caused by "sideloading"?

They mentioned the likely cause in the next sentence:

> The most likely vector was that her phone was out of date and not receiving security patches anymore.

I believe these individuals are suggesting that locked-down ecosystems can be beneficial in certain situations. They help prevent regular users from compromising their device security... assuming they keep them updated...

Re: What we talk about when we talk about sideloading

#633
post #303

Earlier quoted context omitted.

My HSA just implemented some bullshit where even the web interface requires a near-new phone to even log in. For now I'm just switching HSA providers rather than buying a new phone. I'm also worried about the future.

Wow, what are they checking for, newer OS?

Basically. It's just not built for any older OS.

Re: What we talk about when we talk about sideloading

#634

I think this misses the forest for the trees here. The platforms behavior here is a symptom and not the core problem. I think the following are pretty clearly correct: 1. It's your damn phone and you should be able to install whatever the hell you want on it 2. Having an approved channel for verified app loading is a valuable security tool and greatly reduces the number of malicious apps installed on users devices Gi…

> In a normal market there would be no incentive to side load because legitimate app owners would have no incentive not to have users load apps outside of the secure channel of the official app store, and users would have no incentive to go outside of it.

> Solve the platform tax, solve the side loading issue.

I think maybe for a large part of legitimate app owners there would be no incentive, but there are other reasons/incetives for legitimate app owners to go outside the official app store even in the case of no tax, a few that pop to mind are:

- open source devs might have the preference to publish their app on a community-led store.

- users trying to keep an old phone functioning using an unofficial custom android, with no support for the store.

- developers creating apps for themselves and their friends not needing to publish the app publicly.

- companies creating apps just for work phones wanting to keep them private outside of any store.

- A company providing "build-your-app-with-AI" service preferring to just provide a final apk file.

I think it's important to remember that there are loads of other reasons outside the financial one to keep the ability to install what you want on your phone. If google dropped any tax they put on their store now, the problem with these new changes would still be there

(edits: formatting issues)

Re: What we talk about when we talk about sideloading

#635
post #607

Earlier quoted context omitted.

I hope that's true. Do you have a source?

"About 80% of kernel contributors are paid – by their employer!" -- https://newsletter.pragmaticengineer.com/p/how-linux-is-buil... (from 2025) Check out "Most active 5.10 employers" table (it's from 2020) on https://lwn.net/Articles/839772/ "Seventy-five percent of all kernel development is done by developers who are being paid for their work" -- https://www.linuxfoundation.org/press/press-release/the-linu... (from…

This is actually a super encouraging thing. I wonder why it doesn't work as well for the Gnu apps.

Re: What we talk about when we talk about sideloading

#636

Earlier quoted context omitted.

> but many people never registered. Which leads to things not getting patched, more bugs, and more computers getting hacked. A great system... I'll also add that if it was a big enough bug that it'd end up on the news and that's how people got informed. Otherwise, like you suggest, good luck. But it was possible. It is baffling to me that we are having this conversation on Hacker News of all places. Aren't we a commu…

I won't deny that all software is going to have bugs. But I think there has been a real shift in mindset over time. When it was harder to patch and, there was greater incentive to make each release a well-tested, coherent product that offered clear advantages over the last one. As it's become easier to patch, it's become more tempting to make each release just a sort of snapshot of what's more or less ready at a cert…

  > But I think there has been a real shift in mindset over time.
With this I'm in full agreement. We've moved even further now to where we're selling products that do not yet even exist. It was bad enough we were selling stuff that wasn't fully tested, but worse that we're selling things on a promise.

I'd even go so far as to say that the selling of hype creates an environment where we almost certainly will have worse products. The business people are most interested in the sale, not maintaining the customer. The incentives to fix things or bring them out of alpha or beta release disappears. Even if this is harmful to the longevity of the company. But that doesn't matter either if you're only thinking one quarter at a time...

The point was never that it is easier to patch now and back then it wasn't possible. The point of this conversation was that we can't begin to solve the actual problems if we can't recognize why they happened in the first place. To base our premise on products being finished in the past will only lead to us cycling back to where we are. Someone just has to come up with the /brilliant idea/ of "what if instead of mailing patches, we send them over the internet!" It is good intentioned and will result in more users getting patches. We should not throw out the baby with the bathwater!

But the abuse of the environment is an entirely different problem. You're right that the ease of shipping patches lubricates this abuse of shipping to prod to early. But it isn't a causal variable. The causality here is the business people being uncaring about the quality of the product. The causality here is engineers not taking enough pride in their work to push back against the business people. The causality is that we've structured our work environment to reinforce this behavior and promote those who fall in line instead of those who do quality work. (quantity over quality) The causality here is that customers cannot differentiate a well designed product from a half baked idea and a promise. The causality here is that we call product vision a product demo (demonstrating what we want the product to be, not what the product is).

There's more causal variables, but these are clearly part of the chain of problems. The problem is that the situation is complex! But we can't fix complex problems by oversimplification and denial of their complexity. We have to break them down into simpler parts and address those smaller and more manageable problems. I mean we use this same procedure every day to write code and do numerous complex tasks!

But we can't solve complex problems if we deny the existence of their complexity.

Re: What we talk about when we talk about sideloading

#637
post #617

Earlier quoted context omitted.

> Did you read my comment at all? :-) Did you read * MY* comment at all?! Everything @mechanicalpulse said was accurate. To answer @grishka's question (because it seems you also don't know) > What did that look like? Well I literally answered that in my comment! >>> Back when software came on physical media we still had patches. We had patches that came through the internet AND WE HAD PATCHES THAT CAME THROUGH PHYSIC…

I didn't say it was impossible to put a patch on a physical media. I was saying that in my experience as a user, I never, EVER received a patch or got any mean to request one. My point being that the expectation was that what I was buying was "finished". When there was a bug, FOR ME, it was there forever. With modern software, I encounter so many bugs everyday that I don't even realise anymore. Look at someone using…

  > I didn't say it was impossible to put a patch on a physical media.
You never said those exact words but you heavily implied it. You cannot tell me that it was an unreasonable interpretation.

  > Did you live at a time where Internet was not a thing?
You came out swinging. You can't throw out punches and expect to not have one thrown back.

  > My point being that
My point was

  > When there was a bug, it was there forever.
I stated this quite clearly

  >>>> Software isn't "ever finished" because we are not omniscient writers who can foresee all problems, fix all bugs, and write software that is unhackable.

  > With modern software, I encounter so many bugs everyday that I 
I encounter so many bugs it drives me crazy.

Look, we don't disagree on this fact. I'm not encouraging the shipping of low quality or untested software. But patches coming through online was a good thing. We were finally able to fix those bugs effectively, not leaving tons of users stranded and vulnerable. This feature is not going to go away because it provides such high utility.

But shipping low quality software is a completely different issue. The ability to patch easily is not the cause of shipping low quality work. It is the abuse of this high utility feature. It is based on the greed and lack of pride in the product. There are so many little things that add up and create this larger problem. But pretending that software was ever finished is ignoring these problems. It oversimplifies the reasons we got to this point. We won't actually solve the problem *that we are both concerned about* if we oversimplify. We need to understand why things happened if we're going to stop it.

Re: What we talk about when we talk about sideloading

#638
post #617

Earlier quoted context omitted.

I didn't say it was impossible to put a patch on a physical media. I was saying that in my experience as a user, I never, EVER received a patch or got any mean to request one. My point being that the expectation was that what I was buying was "finished". When there was a bug, FOR ME, it was there forever. With modern software, I encounter so many bugs everyday that I don't even realise anymore. Look at someone using…

> I didn't say it was impossible to put a patch on a physical media. You never said those exact words but you heavily implied it. You cannot tell me that it was an unreasonable interpretation. > Did you live at a time where Internet was not a thing? You came out swinging. You can't throw out punches and expect to not have one thrown back. > My point being that My point was > When there was a bug, it was there forever…

> You came out swinging. You can't throw out punches and expect to not have one thrown back.

I was not throwing punches. One can be 25 years old now and never have lived in a world without smartphones or social media.

> But pretending that software was ever finished

I'm not saying it was perfect (or bug-free). I'm saying that when you shipped, in many situations there was no way to patch the bugs. And even when there was a way, it was painful. So when you shipped, it was finished, as in "fully functional". Doesn't mean there wasn't any bad software or that good software did not have bug. But the teams shipping a product had to finish it before.

Nowadays, the norm is to ship unfinished software, with the expectation that there will be plenty of bugs, and those that are deemed worth fixing will be fixed.

And I do believe that it became like that precisely because it's easy to send patches. It's now economically viable to ship bad software, because people are used to having to wait for bugfixes. I'm guessing that back then, people would not have bought twice from the same company if the first time had ended up with unusable software.

> if we're going to stop it.

There is no stopping it. The quality of software is going down because it's economically viable, and I don't see that changing anytime soon (especially with LLMs).

Re: What we talk about when we talk about sideloading

#639
post #638

Earlier quoted context omitted.

> I didn't say it was impossible to put a patch on a physical media. You never said those exact words but you heavily implied it. You cannot tell me that it was an unreasonable interpretation. > Did you live at a time where Internet was not a thing? You came out swinging. You can't throw out punches and expect to not have one thrown back. > My point being that My point was > When there was a bug, it was there forever…

> You came out swinging. You can't throw out punches and expect to not have one thrown back. I was not throwing punches. One can be 25 years old now and never have lived in a world without smartphones or social media. > But pretending that software was ever finished I'm not saying it was perfect (or bug-free). I'm saying that when you shipped, in many situations there was no way to patch the bugs. And even when there…

  > I'm saying that when you shipped, in many situations there was no way to patch the bugs.
This was never in disagreement.

  >>>>>> We had patches that [...] that came through physical media. ***The latter making it harder to patch.***

  > And I do believe that it became like that precisely because it's easy to send patches.
Look, we aren't going to go back to a setting where we don't patch software. That's a WORSE place to be. It leaves people vulnerable for long times. Devices carry more valuable information now and the threat model is much more sophisticated. We do not want to do this.

Besides that, I just don't believe you can blame the ability to patch over the internet as the reason for shoddy work.

Is Linux full of bugs and shipping half built products? I don't think so.

  > There is no stopping it. The quality of software is going down because it's economically viable, and I don't see that changing anytime soon (especially with LLMs).
The great thing about the future is that it is in our hands to control.

The bad thing about the future is we need foresight and to work together to avoid pitfalls.

Luckily humans are quite adept at having foresight. I mean here we are talking about likely future problems. But we're also often feeling helpless to address those issues. But this is an observation bias. Look at the Y2K bug, it is a perfect example. The average person brushes it off as if we made too big of a deal about it. But the thing is, it was a big deal. The thing is... we solved it before it created major issues. We also had similar success in big problems like fixing the ozone layer. We've done this countless times. We just have a tendency to focus on problems that are still problems and not look back and use our success as motivation to keep going.

Every big problem can be broken down into many smaller problems that are much more manageable. "They" win by making us believe that the little things don't matter. "They" win because it means we aren't taking the first steps or making progress, killing any momentum. The worst thing that can happen is to make us feel like the problem is too big to be solved. But that's a lie. We've created this mess and frankly I would like to try to fix things before it becomes an even bigger mess. Personally, I'm a big fan of not doing unnecessary and avoidable work.

So the question is are you with me? Are you going to help try to fix this problem? Or are you going to just sit by and let it grow worse? Hoping that it just solves itself or someone else solves it? Frankly, we need as many people in on this as we can. You don't need to do a lot of work. All I ask is that you speak up and question when the teams you work for are trying to push unfinished products. All I ask is that you help encourage others to do quality work, and not let slop just slip by. I'm not asking you to change the world, certainly not over night. I'm asking if you will make just a modest attempt to address the problem in your own sphere of influence.

Re: What we talk about when we talk about sideloading

#640
post #238

Earlier quoted context omitted.

“Install from play store” vs the unspecific “install”, obviously.

Neither of those is a name for the kind of installing that Google is trying to prevent.

Google is actively trying to make installing (not from the play store) harder. Motivation not withstanding I don’t think this is a controversial take.
Post reply on HN