Top
Best
New

Posted by erohead 11 hours ago

Google will allow users to sideload Android apps without verification(android-developers.googleblog.com)
889 points | 373 commentspage 5
lobeai 6 hours ago|
Oh thank goodness, hopefully its implemented in a way thats not annoying for pro users
wheybags 9 hours ago||
"We have realised that boiling the frog this fast will result in it jumping out of the water. Therefore we have slowed down, but remain steadfastly devoted to seeing this frog boiled"
tauntz 3 hours ago||
That blog post really downplays the issue that people have with the verification requirement and is tone-deaf. The resistance to get Google's blessing for app distribution is definitely not limited to students and hobbyists - and I don't think that's even the biggest affected group.
gowthamgts12 9 hours ago||
so still distributing with f-droid is messed up? i now have to pay a fee to develop an open-source app via f-droid to everyone?

this is a misleading title. they only allow side-loading unverified apps only on fewer devices.

rbits 4 hours ago|
Don't know if you read the whole article

> Based on this feedback and our ongoing conversations with the community, we are building a new advanced flow that allows experienced users to accept the risks of installing software that isn't verified. We are designing this flow specifically to resist coercion, ensuring that users aren't tricked into bypassing these safety checks while under pressure from a scammer. It will also include clear warnings to ensure users fully understand the risks involved, but ultimately, it puts the choice in their hands.

Or am I misreading your comment?

aboringusername 9 hours ago||
We really need to banish the term "sideloading". Installing apps on a terminal is just that, and for as long as I remember on windows, Linux it has always been just that.

Google mentions about being on a call, and being tricked into handing over codes. So why not use signals and huristics to decide?

If user is on a call, block any ability to install a shady app. Implement a cool down before that functionality is restored (say 24 hours). It can also detect where the user is based to add additional protection (such as mandating the use of play protect to scan the app before it's activated and add another cool down regardless).

There's lots of ways to help protect the user but it's wrong to ultimately control them. The real world is full of scary dangers that technology is trying to solve but is actively making things worse (such as computerized safety systems in cars).

Ultimately, the user is responsible and whilst it's palpable Google would want to reduce harm in this specific way, we know authoritarian governments would also love to be able to dictate what software people can run. The harm to democracy is simply too great in favor of saving a few people's money.

anonymousiam 9 hours ago||
"Based on this feedback and our ongoing conversations with the community, we are building a new advanced flow that allows experienced users to accept the risks of installing software that isn't verified. We are designing this flow specifically to resist coercion, ensuring that users aren't tricked into bypassing these safety checks while under pressure from a scammer. It will also include clear warnings to ensure users fully understand the risks involved, but ultimately, it puts the choice in their hands. We are gathering early feedback on the design of this feature now and will share more details in the coming months."

So they haven't actually changed anything yet, but they say that they will "in the coming months."

rbits 4 hours ago|
That's because developer verification outside of Google Play isn't required yet.
seandoe 8 hours ago||
This is great news to me. I'm going to celebrate it. As evil as everyone thinks they are, they did the right thing here. Thanks google.
arunc 6 hours ago||
Southeast Asian scammers - they could've directly said from India/Pakistan.
Seattle3503 6 hours ago||
The Tyranny of the Marginal User strikes again.
DeathArrow 5 hours ago|
I can access any website or webapp without verification. I can install any app on my PC without verification.

I assume the results of my actions and I accept that if something bad is going to happen, it's my fault. I am fine with that.

I want the same kind of freedom on my phone, a device I own and I payed for with my own money. I am not smarter when using the PC and dumber when using the phone. I want to be able to opt out of verification and install whatever I want.

rbits 4 hours ago|
Don't know if I misunderstood your comment, but that's what the article is saying. You will be able to opt out of unverified app blocking.
More comments...