Top
Best
New

Posted by erohead 9 hours ago

Google will allow users to sideload Android apps without verification(android-developers.googleblog.com)
713 points | 288 commentspage 4
gowthamgts12 6 hours ago|
so still distributing with f-droid is messed up? i now have to pay a fee to develop an open-source app via f-droid to everyone?

this is a misleading title. they only allow side-loading unverified apps only on fewer devices.

rbits 2 hours ago|
Don't know if you read the whole article

> Based on this feedback and our ongoing conversations with the community, we are building a new advanced flow that allows experienced users to accept the risks of installing software that isn't verified. We are designing this flow specifically to resist coercion, ensuring that users aren't tricked into bypassing these safety checks while under pressure from a scammer. It will also include clear warnings to ensure users fully understand the risks involved, but ultimately, it puts the choice in their hands.

Or am I misreading your comment?

arunc 4 hours ago||
Southeast Asian scammers - they could've directly said from India/Pakistan.
DeathArrow 3 hours ago||
I can access any website or webapp without verification. I can install any app on my PC without verification.

I assume the results of my actions and I accept that if something bad is going to happen, it's my fault. I am fine with that.

I want the same kind of freedom on my phone, a device I own and I payed for with my own money. I am not smarter when using the PC and dumber when using the phone. I want to be able to opt out of verification and install whatever I want.

rbits 2 hours ago|
Don't know if I misunderstood your comment, but that's what the article is saying. You will be able to opt out of unverified app blocking.
aboringusername 7 hours ago||
We really need to banish the term "sideloading". Installing apps on a terminal is just that, and for as long as I remember on windows, Linux it has always been just that.

Google mentions about being on a call, and being tricked into handing over codes. So why not use signals and huristics to decide?

If user is on a call, block any ability to install a shady app. Implement a cool down before that functionality is restored (say 24 hours). It can also detect where the user is based to add additional protection (such as mandating the use of play protect to scan the app before it's activated and add another cool down regardless).

There's lots of ways to help protect the user but it's wrong to ultimately control them. The real world is full of scary dangers that technology is trying to solve but is actively making things worse (such as computerized safety systems in cars).

Ultimately, the user is responsible and whilst it's palpable Google would want to reduce harm in this specific way, we know authoritarian governments would also love to be able to dictate what software people can run. The harm to democracy is simply too great in favor of saving a few people's money.

anonymousiam 7 hours ago||
"Based on this feedback and our ongoing conversations with the community, we are building a new advanced flow that allows experienced users to accept the risks of installing software that isn't verified. We are designing this flow specifically to resist coercion, ensuring that users aren't tricked into bypassing these safety checks while under pressure from a scammer. It will also include clear warnings to ensure users fully understand the risks involved, but ultimately, it puts the choice in their hands. We are gathering early feedback on the design of this feature now and will share more details in the coming months."

So they haven't actually changed anything yet, but they say that they will "in the coming months."

rbits 2 hours ago|
That's because developer verification outside of Google Play isn't required yet.
seandoe 6 hours ago||
This is great news to me. I'm going to celebrate it. As evil as everyone thinks they are, they did the right thing here. Thanks google.
moi2388 2 hours ago||
Good job everybody, just don’t start complaining when your family members installed malware, their banking and health information is leaked, and you have to fix this for them.
Seattle3503 4 hours ago||
The Tyranny of the Marginal User strikes again.
CodeCrusader 6 hours ago||
Over the long run this might help Android a lot
999900000999 6 hours ago|
Ahh yes,the slow boiling continues.

So if I want to release a free android game my options are.

A: Hope Google doesn't change course again.

B: Give Google a copy of my apartment lease,

Would be too hard for them to ya know actually implement sandboxing which would prevent this.

Anything aside from full bootloader access means I'm renting my device.

Too late now though.

WorldPeas 4 hours ago|
I still remember when I could give my friends an exe of the stupid little games I made, worry free.

I guess that makes me a cybercriminal, doesn't it.

More comments...