275
Android is making it harder to install unverified APKs (lemmy.world)
submitted 7 months ago by to c/android@lemmy.world
61 comments fedilink hide all child comments
 

Starting in August, installing APKs from unverified developers will require a new procedure called Advanced Flow. It involves enabling developer mode, rebooting the device, and waiting 24 hours with biometric verification.

After that, you choose: allow the APK installation for 7 days or indefinitely. The procedure is a one-time process and applies to all versions of Android.

Will the 24-hour wait stop you from installing APKs outside the store?

you are viewing a single comment's thread
view the rest of the comments
[–] 58 points 7 months ago (15 children)

PSA: GrapheneOS is not affected by this, one of many good reasons to use it.

  • permalink
  • fedilink
  • source
  • hideshow 15 child comments
    •
  • [–] 10 points 7 months ago (2 children)

    Will other custom ROMs still allow for sideloading? Like PostmarketOS, e/OS/, LineageOS etc.?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 17 points 7 months ago (1 child)

    Yes, and PostmarketOS isn't even Android

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 6 points 7 months ago

    Right, honestly forgot about that. Not something I use personally, but hear a lot of buzz about. Anyhow, could a good thing be then to support companies like Fairphone, who sells their phones with e/OS/ already installed? I'll try and recommend it to my friends, if that is the case.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 11 points 7 months ago* (7 children)

    It is still going to affect us indirectly. The problem is that Google is demanding developers to go through KYC even if they are not distributing their app through the Play Store. Not going through with it means nobody with a stock device will be able to install their app, unless they do that crazy workaround Google claims is going to implement.

    This means open source app developers will be called to choose between doxing themselves to Google, or keep developing for us, the 0.01% who is on custom ROMs. It's not hard to imagine that many will just decide to move on and invest their time on doing something else.

    https://keepandroidopen.org/

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 7 child comments
    •
  • [–] 0 points 7 months ago (6 children)

    You should read that link you posted because your info is out of date

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 1 point 7 months ago* (5 children)

    If you are referring to the suggested "advanced flow" this is what I am referring to as "crazy workaround" in my original comment. And in practice that doesn't mean anything.

    Until Google provides a shipping implementation that can be independently verified, our position remains unchanged: all apps from non-registered developers will be blocked once their lockdown goes into effect in September 2026.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 0 points 7 months ago (4 children)

    It means there is no demand for KYC, as you suggested.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 1 point 7 months ago* (3 children)

    Yes, you do. Unless you are developing an app just for your friends, or you expect everyone not on a custom ROM to go through the ridiculous "advanced flow".

    In addition to the advanced flow we’re building free, limited distribution accounts for students and hobbyists. This allows you to share apps with a small group (up to 20 devices) without needing to provide a government-issued ID or pay a registration fee. This ensures Android remains an open platform for learning and experimentation while maintaining robust protections for the broader community.

    The above is from the official update by Google.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 0 points 7 months ago* (2 children)

    No, you don't.

    or you expect everyone not on a custom ROM to go through the ridiculous "advanced flow".

    That is the expectation.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 0 points 7 months ago* (1 child)

    If you expect regular users to go through with this ridiculous process you are just naive. Anyone who distributes their app through something like F-Droid will either, have to choose between going through with giving Google their ID or lose 85% of their users, if they are lucky.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] [S] 8 points 7 months ago (2 children)

    GraphenOS is supported only by Pixel. So we're waiting for a port to other devices! Although I think it's impossible, since only Pixel has a security chip.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 7 months ago*

    I'd switch but it's not available for my Fold 7, and I don't want to get a different foldable because I like that this one is as thin and light as a non-foldable when folded. Plus I actually like the gimmicks exclusive to Samsungs (Good Lock is a game-changer). Do I even have any other OS options for this device? Pretty sure the bootloader is uncrackable due to some BS tamper-evident seal in the hardware itself.

    (And no, I won't get a regular phone. Once you go foldable, there's no going back. The benefits far outweigh the negatives.)

  • permalink
  • fedilink
  • source
  • parent