Top
Best
New

Posted by robtherobber 8/31/2025

Google: 'Your $1000 phone needs our permission to install apps now' [video](www.youtube.com)
564 points | 570 commentspage 2
latchkey 8/31/2025|
He says one thing that isn't true. He blames Apple for standardizing the concept of not being able to install applications on your "computer" (phone).

This was the case long before Apple, and started at the carrier telco's. Apple was the one who wrestled the control of the app store from the telco's, who were even worse!

Myself and a buddy built cool fun a bartender app (recipes for alcohol drinks) for the Danger Hiptop. It was rejected by the telco (t-mobile) because they were afraid of lawsuits due to the 21+ nature of the app. We never really got a formal rejection notice, they just stopped responding to us. It was also one of those things where you had to build the app first, submit it (to Danger, who then presented it to the telco), take the risk on everything yourself, and then get silently rejected. What a mess.

mathiaspoint 8/31/2025|
The problem was the belief we all had that smartphones would mean phones become computers the way we think of them.

In effect fewer people use computers now than used to. They're all online but not empowered the way we had hoped. It's all vice with none of the good parts.

joshlemer 8/31/2025||
I'm a little bit unclear about this, will Google's changes here also affect other android distributions like LineageOS, OxygenOS, etc? If not, then I could see that Google locking down their Android Distributions like this could breath a lot of life into some alternative distribution(s). If yes, then perhaps forks of Android or even competitors to android altogether.
mayama 8/31/2025||
Google has delayed releasing pixel 10 sources and unlocking bootloader for new phones is becoming increasingly rare. They may lock it down too going forward.
nilsherzig 8/31/2025||
I don’t think so, but it’s getting harder to flash custom ROMs (locked bootloaders) and there are even legislations in planning which would make it illegal (at least in the eu).

It’s already cumbersome to run your banking app (and other „required“ apps) on a custom ROM with all the attestation going on. I assume these distributions will bleed users and see a reduction in new ones due to higher entry barriers.

whywhywhywhy 8/31/2025||
Timing of this with other privacy and computing/internet freedom pushbacks speaks volumes.
freefaler 8/31/2025||
13 years ago, Cory Doctorow warned us:

https://www.youtube.com/watch?v=gbYXBJOFgeI

So basically market forces and profit optimization is at work here as always.

However, if we can still unlock the boot loader and install Lineage OS or something like that and have a way to pay for developers to release their apps on stores like f-droid we can use the hardware.

The biggest problem with having freedom to use our devices is that the model is broken for the developers who support them. You "can donate", but from the numbers I've seen it's like 1 in 1000 donate. No pay == developers can't invest their time to improve the software.

So if there is "really" a substantial number of enthusiasts that are ready to pay for the freedom they crave, then companies like Librem will have enough customers to create decent and usable products for this audience. Want digital freedom - prepare to support the people who provide it.

Yes, that might mean that we'll need to have 2 devices, 1 for "banking/government services" that is "certified" and one for our own usage. Shitty but we'll be forced to do that sooner on later. The efficiencies for the government to enforce the policies is so strong that they can't helps themselves. And corporations like to have more data to squeeze every cent from the customer.

So if there is a working business model for "freedom" we might have a partial freedom. If there isn't we'd be just a digital farm animals to be optimized for max profits and max compliance.

bonoboTP 8/31/2025|
> 13 years ago, Cory Doctorow warned us:

> https://www.youtube.com/watch?v=gbYXBJOFgeI

Wow, that's in Talks at Google. Listening to the Q&A is just so weird. The audience (I assume Google employees) are openly advocating for digital freedoms and the classic hacker ethos. Crazy how much the Overton window has shifted. I wonder where those people are now.

kamranjon 8/31/2025||
What are the implications of this for GrapheneOS? Because it’s based on android, will that project die off?
janice1999 8/31/2025||
They can choose not to enforce it. The problem is that both Google and other phone manufacturers are making custom ROMS more difficult (restricting access to binaries needed to get the phone to work, not providing bootloader unlock etc). The other issue is if governments choose to go after them. Some police services are already trying to equate custom ROMS, and in particular GrapheneOS, with criminal drug-dealing gangs.
justoreply 8/31/2025||
it doesn't matter, if GrapheneOS is going to be the only one to allow "side-loading", then the market for application installable without a store will disappear
slashtab 8/31/2025||
No, GOS is fine.
loloquwowndueo 8/31/2025||
You paid $1000 for the metal, but the software is licensed and owned by Google.

You could install a free os on the phone instead and own the whole thing.

yupyupyups 8/31/2025||
No, people pay for more than just "metal". We pay to access services which society expects us to have access to, a society which is increasingly becoming more unhospitable to those who lack that access. There is no moral obligation on our part to let two large corporations use that against us, by spying on us and robbing us.
otterley 8/31/2025|||
> people pay for more than just "metal"

Correct. They are paying for the physical device and the license to use the installed software.

dotancohen 8/31/2025|||
I'm not sure which two large corporations you are referring to, but I'll take a guess.

My Samsung phone is not linked to my Google account and I don't have a Samsung account. I have no WhatsApp/Facebook/Meta account. I don't use Apple devices or have an Apple account.

Possibly the only apps on my phone that have an account linked with them are Telegram and AnkiDroid.

_aavaa_ 8/31/2025|||
Ridiculous argument.

You didn’t buy a physical book, you bought the paper, but the words are owned and licensed by the publisher.

You will need their permission to read it under an approved light, to sell it again, and even it lend it.

Wrapping the bs in a thin veneer or “software” doesn’t magically make it okay.

ipaddr 8/31/2025|||
You do not need permission to read a book in your hands, lend it to a friend or sell it at your local bookstore.

You are overly restricting yourself.

MereInterest 8/31/2025|||
You are correct that no such permission is required to use, lend, or resell a book. It would be unethical for a seller to impose a requirement for such permission. By the poster’s analogy, it is similarly unethical to impose a requirement for permission prior to the owner’s use, lend, or resale of a computer. Since Google sells computers that cannot later be used without Google’s permission, Google is imposing such an unethical requirement.
_aavaa_ 8/31/2025||||
That was not always the case. See older books that have legal hocus pocus written on the first page stating that you cannot resell this books without the express written consent of the publisher.

Now we have the first sale doctrine for many physical items. It’s not being applied to digital goods since we buy a license to the thing instead of a copy of the thing itself; or so the companies want to argue.

isaacremuant 8/31/2025||||
Books can be made illegal.

Stop giving in to authoritianism by licking proverbial boots and using their excuses for them.

const_cast 8/31/2025||||
Yes that's his entire point.
GeoAtreides 8/31/2025|||
ah, metaphors, gen z worst and least understood enemy
b_e_n_t_o_n 8/31/2025||||
You need their permission to copy it. You actually don't own the words.
otterley 8/31/2025|||
> You didn’t buy a physical book, you bought the paper, but the words are owned and licensed by the publisher.

Correct.

> You will need their permission to read it under an approved light, to sell it again, and even it lend it.

No. The physical media is transferable and the implied license carries with it. You just can’t make a copy and then retain it if you give the original copy away.

johnnienaked 8/31/2025|||
What you are allowed to do is governed by whatever laws are written.
otterley 8/31/2025||
This sounds like agreement. Otherwise I’m not sure what the meaning of this reply is.
johnnienaked 9/1/2025||
It means whatever you want it to mean
lelandbatey 8/31/2025||||
Ah yes, copyright, where in its furthest future form says "though shall not remeber or recall anything anyone owns unless you pay for it again". I cant wait to pay Disney to remember movies from my childhood once we have a neuralink.
_aavaa_ 8/31/2025|||
Incorrect. You own that entire physical copy, not a license to it.
fluidcruft 8/31/2025|||
Could you? From what I understand Google is hell-bent on making that difficult nowadays as well.

https://www.androidauthority.com/google-not-killing-aosp-356...

ylk 8/31/2025|||
> Android 16 no longer provides device trees for Pixels as part of the Android Open Source Project. It's important to note it doesn't provide those for any other devices. There are no other OEMs providing similar AOSP support. [...]

by strcat, Graphene OS founder https://news.ycombinator.com/item?id=44679100

fluidcruft 8/31/2025|||
Way back before I made the jump to a Nexus S, I was maintainer of a CyanogenMod port. Granted there were other challenges involved with that (bypassing locked bootloaders with kernel module exploits) but I am well aware of what's involved. What Google is doing is a fucking waste of people's time for no reason whatsoever. And it's not just on the AOSP front--it's clearly a strategic platform decision.

I'm done with Google. On every front they are being assholes. The DOJ should have exploded Microsoft into bits and pieces back in the day the way they handled AT&T so that Google would fear the same.

fluidcruft 8/31/2025||||
Yeah, so? Pixel becoming no better than the competition isn't exactly the selling point you hold it out to be.
gruez 8/31/2025|||
AFAIK the impact of that is overblown, because "device trees" are just files that can be extracted from the stock ROMs. Moreover drivers and kernels are still provided by google, albeit in code dump format (no git history).
lawn 8/31/2025|||
GrapheneOS still works fine (support for Pixel 10 will most likely come).

What the future holds is unknown however.

randunel 8/31/2025|||
My banking app, my city hall's app and my kids' school app for parents wouldn't work on non-google OS for "security" reasons.

Many more national services require an original OS to function, even if I don't personally use them yet https://github.com/eu-digital-identity-wallet/av-app-android...

uallo 8/31/2025|||
Complain to them, give them a bad rating in the Play Store. This is likely caused by using the obsolete SafetyNet Attestation API as outlined here: https://grapheneos.org/articles/attestation-compatibility-gu...
codedokode 8/31/2025||||
I never install banking apps (not secure - no second factor, spyware risks) so I don't think it is important to have them. What is important is a phone that no other party can remotely control.
conradfr 8/31/2025|||
Because your bank doesn't force you to verify yourself on the mobile app to log in on desktop ... yet.
speckx 8/31/2025|||
Curious. Do you use the bank's website via a browser from a computer? What about in-person banking? Do you go to the bank?
codedokode 9/1/2025||
Website from desktop + SMS code is used as a second factor for login and for confirmation of operations. So the attacker would need to hack a desktop to read information and both devices to actually steal money. Or they would need a phone and a card number to login without password.

I am surprised why so many people use banking apps on phones. The apps often use SMS or even push notification (because it's cheaper) for confirmation and once you got access to the phone you can do whatever you want. Also banking apps tend to spam users with distracting notifications, and they often require extended rights, for example to scan other apps, to access contact list etc. For example, one of Russian banking apps includes an antivirus.

> What about in-person banking?

Rarely. Last time I went in-person, I found that the bank switched to a model (don't remember how it's called) where the office looks like a cafe with tables and employees come between them with laptops and there was really long waiting time so I got an impression that they don't want people to come in-person. Although I had some fun overhearing an angry customer complaining that his card was blocked for receiving transfers and immediately withdrawing large sums of money. He wasn't able to explain the source of the money or provide any documents but got a promise that his card would be unblocked.

Luckily there are still banks with traditional offices.

lawn 8/31/2025||||
That's very unfortunate.

Most apps work fine though, including all Swedish banking and authentication apps I've tried.

worldsayshi 8/31/2025||
Oh, really, Swish and BankID works on Graphene OS?
lawn 8/31/2025||
Yes. I only had to enable some permissions when I copied BankID to the new phone but otherwise everything seems to work.
ipaddr 8/31/2025|||
Use your banks website. Installing a banking app is asking for trouble.

City hall should have information on its website why do you need an app?

Kids school app sounds like the worst idea. What information are you missing by not downloading it?

jbstack 8/31/2025|||
> Use your banks website. Installing a banking app is asking for trouble.

If you can. In order to be able to login to my bank's website I need a OTP which is generated by... can you guess? Yes, their app. Which I can now only run if my Android settings meet their standards. The other day it took me half an hour to access my banking because the app kept complaining that my device wasn't "secure", until I figured out the magic combination of settings to undo to make it work (including for third party apps that should be none of the bank's business).

const_cast 8/31/2025||
There are numerous TOTP services that we know are perfectly secure.

They should just use one of those. These banks are assholes. They're trying to get you to download the app for advertising, marketing, and data collection purposes. Not security.

tomatocracy 8/31/2025||
This is in part driven in turn by regulations like PSD2 in the EU requiring "Strong Customer Authentication". Most banks seem to have decided that a TOTP-style challenge does not meet the requirements of the regulation (this may even be an explicit ruling, I don't know).
randunel 9/1/2025|||
> Use your banks website. Installing a banking app is asking for trouble.

My bank enforces 2fa and the app must be used to log in their website. SMS is an alternative for logging in, but NOT for 3dsecure.

> City hall should have information on its website why do you need an app?

Certain functionality, such as reporting city hall relevant violations (parking on pavement being an example), absolutely requires using their app to submit the photos.

> Kids school app sounds like the worst idea. What information are you missing by not downloading it?

All announcements are exclusive to the app. Trips, injuries, etc.

fluidcruft 8/31/2025||||
If Apple made iOS more customizable (i.e. replacing launchers etc) I wouldn't see a reason to keep with Android. I certainly don't see any reason to replace my Pixel with another Pixel at this point (been fiercely loyal to the Nexus/Pixel line since Nexus S).

Hostility is hostility, and when limited to choosing among devices that are a pain in my ass, Pixel no longer has any advantage. Google is converting Pixel into leverage for the rest of their products. Bye.

lawn 8/31/2025||
Why would you move to Apple when you're upset that Google is copying what Apple has done for many years?

And even after that, the Apple ecosystem is even more closed down than Android.

const_cast 8/31/2025|||
Because the android ecosystem and android devices like the Pixel have a lot of disadvantages - we just look past them because of the customizability and openness-ish of android.

Of android just becomes iOS but worse, then just use iOS. Currently android is iOS but different. But for many years now it seems Google has been shooting for iOS but worse.

fluidcruft 8/31/2025|||
Because using Android is always extra friction in my life. I have tolerated it because of the ideals of Pixel and Android (which Google has slowly and deliberately evaporated).

Also Apple does a better job at standing up to government bullshit (where Google tends to stay suspiciously silent). So when they are on equal ideological footing, Apple as a consumer product company wins against the Google surveillance apparatus.

Basically: Apple is a better Apple if Google wants to turn itself into even more of a pathetic Apple wannabe.

ekianjo 8/31/2025||||
Only on specific models
subscribed 8/31/2025||
Currently from 6 to 9a inclusive.

4 and 5 are no longer supported (not covered under normal release channels) but you can still download images under legacy extended support.

ekianjo 9/1/2025||
What I mean is, only Pixel phones. That's like a very small part of the whole range of Android devices.
OutOfHere 8/31/2025|||
(deleted)
Klonoar 8/31/2025|||
GrapheneOS project people were literally in comments here in the past month or so indicating they’re in talks with another device maker to have an alternative to the Pixel.
lawn 8/31/2025||||
What's with this annoying and false narrative that it's all over for GrapheneOS?

Everything suggests that they will be able to support the new Pixel models.

> We've received the Pixel 10 we ordered and have confirmed it supports unlocking, flashing another verified boot key and locking again.

https://grapheneos.social/@GrapheneOS/115102473921005918

RadiozRadioz 8/31/2025|||
Part of the issue is that phone manufacturers actively make this difficult. Hardly bootloaders are unlocked, barely any drivers are freely available, all the hardware is so tightly intertwined & locked in that you can still brick these things with no recourse (though this has improved). Not to mention 3rd party apps that have built with dependency on Google Play Services which needs to be replaced, banking apps with "security" attestation - using free software on a phone is magnitudes more hostile than doing so on a PC.
codedokode 8/31/2025|||
You couldn't - many phones do not support installing third-party OS and do not have public specifications. So your options are either become a product or do not have a phone.
bill_joy_fanboy 8/31/2025|||
Your comment makes it sound like this is reasonable. It is not.

This is a complete and total ripoff. Everyone knows it.

loloquwowndueo 8/31/2025|||
Oh I agree it’s entirely unreasonable. But that’s what you signed up for - it’s okay to be angry, I would too, but pretending that’s not what the deal was from the start is pretty naive.
spacebacon 8/31/2025|||
Everyone knows it’s a complete and total ripoff however people like that with good narratives write the laws all day.
orbital-decay 9/1/2025|||
It's not realistically possible because hardware makers collude with Google and keep their specs secret from anyone who isn't using Google's software. (among a myriad other reasons)
oh_my_goodness 8/31/2025||
No matter how dystopian things get, there's always somebody rooting for the dystopifiers.
loloquwowndueo 8/31/2025||
Indeed. But that someone is not me. Screw Google!

Just pointing out that the deal with Google is implicit in the piece of metal you bought - and with some phones you have at least the choice of a free system. It’s more of a choice than I have with my iPhone.

oh_my_goodness 8/31/2025||
I totally dig it. Saying it's the consumer's fault is just your unique way of protecting us. Groovy.
pkphilip 8/31/2025||
It is time to get the government to recognise mobile phones as being full fledged computers and which require the same consumer protections. Just because you are carrying it around all the time doesn't make it any less a computer.
CharlesW 8/31/2025|
> It is time to get the government to recognise mobile phones as being full fledged computers…

Mobile phones are not, and have never been, general-purpose computers. If you think they're locked down now, you'd be completely astounded to learn what the industry was like pre-iPhone/pre-App Store.

homebrewer 8/31/2025|||
I was hacking on firmware for the couple Sony Ericssons I had, replacing major system components like sound drivers with no problems. Installing third-party applications without first asking for permission from your master was normal and expected. They were about as open as current Android is, and probably more so than Android in another five years.
pkphilip 9/1/2025||||
What is a "general purpose" computer? who decides what is "general" or not? what can you not do in a mobile phone which you cannot do on a regular desktop / laptop computer? If anything, a mobile phone has MORE capabilities - such as GPS, the gyro etc. So it is a superset of features of a "general" computer like a desktop or a laptop and not a subset of features making it a "non-general" limited computer.
fsflover 9/1/2025|||
Openmoko, Nokia N900, Pinephone, Librem 5 enter the chat.
Fire-Dragon-DoL 8/31/2025||
What drives me nuts is: this is for your own good right?

I can still put metal in my microwave and set my home on fire, but I cannot sideload apps.

wkat4242 9/1/2025|
This is because nobody makes money when you set your house on fire. Apple makes a ton of money off that app store.
ayaros 8/31/2025||
Both Apple and Google should just bite the fucking bullet and let people install whatever they want.

Apple, for their part, should have just buried the option to "sideload" deep in the settings. They could have put up a dialog, or maybe 5 dialogs in a row, each one scarier than the last, warning the user that if someone told them to do this, they are being scammed. They could have done it every time someone installs an app from outside the App Store. Make the user wait 10 seconds or a minute between each dialog. Put the option behind their passcode, or their Apple ID password. Void AppleCare if they do it, for all I care. They could have done any of this. Anyone actually concerned about their security would have avoided it anyway.

This is what they should have done. Now it looks like regulators are going force their hand. Why Google is doing this now, of all times, is beyond me. Have they read the news lately?

The regulation should be for phones, computers, and game consoles too.

I know this isn't an unpopular opinion... whatever. I gotta vent somewhere.

Squid_Tamer 8/31/2025||
For real. They could even gate sideloading behind a 10 question multiple-choice-answer quiz on the consequences of sideloading. That's how we license dangerous abilities in the 'real world' - demonstrated competence via standardized test.

It feels so transparent that their concern isn't actually user safety here.

laweijfmvo 8/31/2025||
I actually don’t want this, especially for non tech savvy older relatives. Someone calls them and gets them to allow remote access to their PC, easily. Ever heard of the Android UI (bugs) that allowed apps to hijacking dialogs etc? I’d rather they just had a phone where security was the only option.
ayaros 8/31/2025|||
This is a very real problem, and I understand it well... I have my fair share of relatives who are technologically incompetent.

The solution is to integrate sideloading into the parental controls. There are already existing permissions in iOS to restrict the installation and deletion of apps, so adding a sideloading permission should be straightforward. (They can still leave it disabled by default and bury it a bit behind a few menus and dialogs...) If a family member is really so technologically inept they can't be trusted with their own phone, then you should already be making use of parental controls in some fashion. Set a pin for them which you know and they don't know. It's as simple as that.

Perhaps that's a bit harsh, but we should not be sacrificing these freedoms at all, let alone at a time when there are already existing solutions for protecting those who are vulnerable.

(The relative simplicity of this solution is yet another piece of evidence this issue is not really about the security of users.)

const_cast 8/31/2025||||
Doesn't matter, most malware is on the playstore.

Play integrity doesn't protect anything, disallowing side loading has no security benefits. Thats just a lie, a convenient piece of propaganda to convince you to advocate against yourself.

There is no security on the play store. Can apps ask for way too many permissions? Yes. Are they open source? No. Are builds reproducible? No. Does Google check the code? No. Is it almost all adware and spyware? Why, yes!

Google does not give a flying fuck about the quality of the play store and anyone who disagrees is legitimately delusional. Have we looked at the play store? Seen what's recommended?

I mean, for fucks sake you can't download a goddamn calendar app without it asking for phone permissions and showing you popup ads.

Look - Google allows malware on the playstore because they have to. They make money off of ads sold on the playstore and advertisments in apps. Google has ZERO incentive to stamp malware. But they have every incentive to prop it up.

I don't need Grandma to download an unsigned binary from the internet to compromise her. Get fucking real dude. I call her, ask her to install anydesk, and remote control her device, all Google approved.

reorder9695 8/31/2025|||
Why not have it so you could choose to have it like that, but also choose to run whatever you want? No reason this is impossible
hungmung 8/31/2025|
So I paid $1000 for a Pixel 9 Pro 1TB, then Syncthing wasn't able to keep maintaining their android app because of Google, and now Google wants to block me from using F-Droid. Google, you've fucked me in the ass for the last goddamn time, I'm completely de-Googling over this. I refuse to subsidize the surveillance state any longer. Fucking fascists.
More comments...