Android Developer Verification: Threat masquerading as protection

Post by einpoklum » Fri, Jul 03, 2026, 9:35 PM UTC

grapheneos wrote: post #649

einpoklum wrote: post #645

Earlier quoted context omitted.

> Traditional Linux distributions don't have a standard set of core components or configuration Huh? Of course they do. A standard set of components and configuration is at the core of (most) OS distributions.

System administrators of a traditional Linux distribution assemble their own OS out of their package and configuration choices. There isn't a well defined standard base OS. That's part of what makes it the traditional approach and is inherently incompatible with the privacy and security approach of AOSP or iOS in many ways. Linux distributions use different implementations of init systems, shells, command-line tools…

Post by fossman » Fri, Jul 03, 2026, 10:45 PM UTC

lbrito wrote: post #656

karussell wrote: post #258

Earlier quoted context omitted.

Not useless. It is like the missing printer driver for Linux Desktop. It makes the experience ugly, but this is not the fault of the Linux OSes. Also the bank should not require apps (instead they can offer hardware key support or desktop apps) and in fact some - at least in Germany - offer a different authentication possibility. Also the app for the German ID is published on fdroid and does not rely on Google servic…

Probably not the case for most people. I'm living abroad and had to do something on the Brazilian e-gov platform. To log in I had to confirm my ID with an Android app. Not only is it exclusively on Play store, but it also refuses to install on any rooted device, so I had to boot an old non-rooted Android I had stored somewhere. I'm confident this is a very common experience worldwide, be it with gov IDs or banks.

Post by fossman » Fri, Jul 03, 2026, 10:59 PM UTC

carlosjobim wrote: post #559

codedokode wrote: post #505

Earlier quoted context omitted.

In my country, partially due to sanctions, you can access the bank via browser and receive 2FA codes on $15 dumb phone. Also why do you need bank app on your phone? Do you like to give money to random strangers on the street? Only scammers need money urgently. Also it is not secure to use the phone as a single factor to access the bank. I do not have any bank apps on my phone (it is not even connected to the Internet…

Some banks require 2FA through their phone app to login to internet banking on the computer.

Post by fossman » Sat, Jul 04, 2026, 12:29 AM UTC

grosswait wrote: post #303

nirui wrote: post #213

Emotional talk aside, there's not many good solution to this problem, unless of course F-Droid starts to make their own phones. But then, Librem 5 Phone was just failed few years ago, telling the story that people who care about their rights are still sensitive to how much they would pay (which is a form of rights too). Also but, there is the thing, making a phone is not easy. If you reach deep enough, you'll eventua…

I was surprised to hear Librem failed, but a quick search show this is not true. Quite alive and hopefully well.

Post by fossman » Sat, Jul 04, 2026, 6:05 AM UTC

avra wrote: post #111

linuxhansl wrote: post #29

What Google is doing is shameful. One of the promises of Android was being more open than the restrictive Apple ecosystem. Now that they reached penetration they do the switch - under the guise of security. Just let me do with my hardware what I want to do it. Let it be my responsibility to install whatever I want (and stop calling it "side-loading", as if I am doing something shady from the "side"). We need to resis…

> We need to resist this! I agree. What do you suggest? How can we contribute to the resistance?