Live data from Hacker News

Google details new 24-hour process to sideload unverified Android apps

arstechnica.com

911–920 of 1001 posts

Re: Google details new 24-hour process to sideload unverified Android apps

#911

Earlier quoted context omitted.

You live in a bubble. The roles are inversed. This is "ruining" Android for the 0.001% of power users that install .apk files and improving it for the huge chunk of population that are still getting hit by malicious ads that try to push app installs onto you.

Who is hosting these ads? Might it be Google?

No real counter argument? Do better HN

Re: Google details new 24-hour process to sideload unverified Android apps

#912

Earlier quoted context omitted.

I worked at a bank on the backend for architecture and security.. and I've posted this attestation here before, but the sheer volume of fraud and fraud attempts in the whole network is astonishing. Our device fingerprinting and no-jailbreak-rules weren't even close to an attempt at control. It was defense, based on network volume and hard losses. Should we ever suffer a significant loss of customer identity data and/…

How does preventing people from running software of their choice on their own device (what you call jailbreaking) prevent fraud in practice? It's a pretty strong claim you're making there. And it's being made frequently by institutions, yet I have never seen it actually explained and backed up with any real security model. All the information and experience I ever got tells me this is security theater by institutions…

The app does fingerprinting and requires certain secure device profile characteristics before the app lets a user initiate certain kinds of financial transactions.

Those are based on APIs available from the mobile devices. Google and Apple can offer other means by which to secure these things, and to validate that the device hasn't been cracked and is submitting false attestations. But even a significant financial institution has no relationship with Apple on the dev side of things.. Apple does what it decides to do and the financial institution builds to what is available.

These controls work -- over time fraud and risk go down.

Re: Google details new 24-hour process to sideload unverified Android apps

#913
post #222

Earlier quoted context omitted.

I worked at a bank on the backend for architecture and security.. and I've posted this attestation here before, but the sheer volume of fraud and fraud attempts in the whole network is astonishing. Our device fingerprinting and no-jailbreak-rules weren't even close to an attempt at control. It was defense, based on network volume and hard losses. Should we ever suffer a significant loss of customer identity data and/…

Then don't issue an app. Issue people cards to pay with and let them come to the bank for weird transactions.

Go find a bank without an app.

Re: Google details new 24-hour process to sideload unverified Android apps

#914
post #273

Earlier quoted context omitted.

I worked at a bank on the backend for architecture and security.. and I've posted this attestation here before, but the sheer volume of fraud and fraud attempts in the whole network is astonishing. Our device fingerprinting and no-jailbreak-rules weren't even close to an attempt at control. It was defense, based on network volume and hard losses. Should we ever suffer a significant loss of customer identity data and/…

Do you allow customers to log in to their account with a web browser on a windows machine?

Web browsers are secure fingerprinted as well, on a sliding scale of access requests, from login to "initiate a wire transfer for $1M".

Re: Google details new 24-hour process to sideload unverified Android apps

#915

Earlier quoted context omitted.

Who is hosting these ads? Might it be Google?

No real counter argument? Do better HN

Google is using scams as an argument for dismantling ownership and restricting the owner of a device from installing software of their own choice on their own device.

Yet they host the very ads that are part of these scams and profit from them. If Google wanted and actually cared about scams they would stop hosting these scam ads en mass.

It clearly is a pretense. This is not about scams and it will not stop with a ridiculous 24h waiting period to enable installing software. They will remove the option altogether.

Re: Google details new 24-hour process to sideload unverified Android apps

#916

It is way past time to build a 'people's phone', funding it through a platform like LiberaPay [1][2] or Open Collective [3][4], with a requirement for the device to be completely open-source. [1] https://liberapay.com/ [2] https://en.wikipedia.org/wiki/Liberapay [3] https://opencollective.com/ [4] https://en.wikipedia.org/wiki/Open_Collective If we start today, we could have a new phone in 2-3 years. Future generatio…

Can you explain what open society means?

https://en.wikipedia.org/wiki/Open_society

Re: Google details new 24-hour process to sideload unverified Android apps

#918
post #387

The part in the flow where you select between allowing app installs for 7 days or forever is a glimpse into the future. That toggle shows the thought process that's going on at Google. I can bet that a few versions down the line, the "Not recommended" option of allowing installs indefinitely will become so not recommended that they'll remove it outright. Then shrink the 7 day window to 3 days or less. Or only give us…

what's your solution to combat scammers?

education

Re: Google details new 24-hour process to sideload unverified Android apps

#919

It is way past time to build a 'people's phone', funding it through a platform like LiberaPay [1][2] or Open Collective [3][4], with a requirement for the device to be completely open-source. [1] https://liberapay.com/ [2] https://en.wikipedia.org/wiki/Liberapay [3] https://opencollective.com/ [4] https://en.wikipedia.org/wiki/Open_Collective If we start today, we could have a new phone in 2-3 years. Future generatio…

Can you explain what open society means?

> Can you explain what open society means?

An open society is a society where people can freely express ideas, question authority, practice different beliefs, and participate in public life under the protection of laws and individual rights. It is usually marked by free speech, rule of law, pluralism, relatively open debate, and institutions that allow peaceful change.

Post reply on HN