Earlier quoted context omitted.
You live in a bubble. The roles are inversed. This is "ruining" Android for the 0.001% of power users that install .apk files and improving it for the huge chunk of population that are still getting hit by malicious ads that try to push app installs onto you.
Who is hosting these ads? Might it be Google?
Google details new 24-hour process to sideload unverified Android apps
911–920 of 1001 posts
Re: Google details new 24-hour process to sideload unverified Android apps
#912Earlier quoted context omitted.
I worked at a bank on the backend for architecture and security.. and I've posted this attestation here before, but the sheer volume of fraud and fraud attempts in the whole network is astonishing. Our device fingerprinting and no-jailbreak-rules weren't even close to an attempt at control. It was defense, based on network volume and hard losses. Should we ever suffer a significant loss of customer identity data and/…
How does preventing people from running software of their choice on their own device (what you call jailbreaking) prevent fraud in practice? It's a pretty strong claim you're making there. And it's being made frequently by institutions, yet I have never seen it actually explained and backed up with any real security model. All the information and experience I ever got tells me this is security theater by institutions…
Those are based on APIs available from the mobile devices. Google and Apple can offer other means by which to secure these things, and to validate that the device hasn't been cracked and is submitting false attestations. But even a significant financial institution has no relationship with Apple on the dev side of things.. Apple does what it decides to do and the financial institution builds to what is available.
These controls work -- over time fraud and risk go down.
Re: Google details new 24-hour process to sideload unverified Android apps
#913Earlier quoted context omitted.
I worked at a bank on the backend for architecture and security.. and I've posted this attestation here before, but the sheer volume of fraud and fraud attempts in the whole network is astonishing. Our device fingerprinting and no-jailbreak-rules weren't even close to an attempt at control. It was defense, based on network volume and hard losses. Should we ever suffer a significant loss of customer identity data and/…
Then don't issue an app. Issue people cards to pay with and let them come to the bank for weird transactions.
Re: Google details new 24-hour process to sideload unverified Android apps
#914Earlier quoted context omitted.
I worked at a bank on the backend for architecture and security.. and I've posted this attestation here before, but the sheer volume of fraud and fraud attempts in the whole network is astonishing. Our device fingerprinting and no-jailbreak-rules weren't even close to an attempt at control. It was defense, based on network volume and hard losses. Should we ever suffer a significant loss of customer identity data and/…
Do you allow customers to log in to their account with a web browser on a windows machine?
Re: Google details new 24-hour process to sideload unverified Android apps
#915Earlier quoted context omitted.
Who is hosting these ads? Might it be Google?
No real counter argument? Do better HN
Yet they host the very ads that are part of these scams and profit from them. If Google wanted and actually cared about scams they would stop hosting these scam ads en mass.
It clearly is a pretense. This is not about scams and it will not stop with a ridiculous 24h waiting period to enable installing software. They will remove the option altogether.
Re: Google details new 24-hour process to sideload unverified Android apps
#916It is way past time to build a 'people's phone', funding it through a platform like LiberaPay [1][2] or Open Collective [3][4], with a requirement for the device to be completely open-source. [1] https://liberapay.com/ [2] https://en.wikipedia.org/wiki/Liberapay [3] https://opencollective.com/ [4] https://en.wikipedia.org/wiki/Open_Collective If we start today, we could have a new phone in 2-3 years. Future generatio…
Can you explain what open society means?
Re: Google details new 24-hour process to sideload unverified Android apps
#917The fact that I can sideload whatever I need and stay out of Google's ecosystem is the whole reason I use Android. Given the miserable choice between two fully locked-down platforms, why would I pick theirs?
Re: Google details new 24-hour process to sideload unverified Android apps
#918The part in the flow where you select between allowing app installs for 7 days or forever is a glimpse into the future. That toggle shows the thought process that's going on at Google. I can bet that a few versions down the line, the "Not recommended" option of allowing installs indefinitely will become so not recommended that they'll remove it outright. Then shrink the 7 day window to 3 days or less. Or only give us…
what's your solution to combat scammers?
Re: Google details new 24-hour process to sideload unverified Android apps
#919It is way past time to build a 'people's phone', funding it through a platform like LiberaPay [1][2] or Open Collective [3][4], with a requirement for the device to be completely open-source. [1] https://liberapay.com/ [2] https://en.wikipedia.org/wiki/Liberapay [3] https://opencollective.com/ [4] https://en.wikipedia.org/wiki/Open_Collective If we start today, we could have a new phone in 2-3 years. Future generatio…
Can you explain what open society means?
An open society is a society where people can freely express ideas, question authority, practice different beliefs, and participate in public life under the protection of laws and individual rights. It is usually marked by free speech, rule of law, pluralism, relatively open debate, and institutions that allow peaceful change.