Side note. We need to do something, now. Only problem is, I don't know what
post
I don't think it's about the data. There's not much volume here. I think instead it's about blocking apps they don't like. Like some pesky ad blocking apps for YouTube. They know more people would reach for YouTube adblockers as they keep increasing the ads on the free tier as well as the price of the Premium tier. The way to prevent that is to make it extremely difficult to install such apps.
Do you think they won't have a provision to revoke developer's signing keys for reasons they determine? If they don't, the whole malware-fighting angle would be meaningless. Once developer's keys are revoked, their apps become uninstallable on Android that ships with Google apps. They could also easily uninstall apps signed with revoked keys.
I assume they'll do this using chain of trust where they give signing keys to verified devs so that the apps don't have to be signed by Google, but Android can still check if an app was signed by a Google-issued key.
E: Looking at this it says:
Register your apps
You'll need to prove you own your apps by providing your app package name and app signing keys.
So you give your keys and I suppose they allowlist that package and keys. That means they'll be able to revoke individual apps as well as dev keys.
Is that right!?
Giving up the app signing keys would allow Google to publish anything in your name. This sounds like a nightmare.
Surely there could be some equivalent to DNS confirmation by adding a key provided by Google to a txt record (or the signed app)
Code signing is expensive, and will force out some smaller devs from the market, and is the main scare tactic Microsoft is using on Windows.
Are there currently any viable alternatives to Android and iPhone?
the easiest path would be Chinese phones without GMS like Huawei,OPPO,vivo,Xiaomi,Honor
Or use graphene os without google play services. No google play, no restrictions.
Didn't they ban Huawei phones in the US
Yeah this is going to affect android in multiple ways. I'm guessing that the emulators and YouTube apps are out, the Devs will have all their apps banned if they bother to register.
Personally I have a developer account but some apps I give away as open source. Now I'm going to have to register those apps and if one of them isn't up to Google's standards (whatever they say that is on the day) then ALL of my apps get banned!
I have multiple old android devices which can't use lineagos because they are locked or just too obscure. But right now they can be used with f-droid apps for games and ad-free content. I'm guessing that's going to change.
The barrier to entry will go up and even more old android devices will be thrown away. Make sure you buy a mainstream device that has a chance of being supported beyond the manufacturers 2 year support window - in my experience mobile and tablets actual lifespan is 4-5 years, up to 10 with new battery. Why are we forced to throw them away after 2 years? It's a total scam.
Of course it's a scam. But its also a money grab and a power grab. Google is completely gone from "do no evil" to "heil Trump"
What's worse, is that I do self hosting and almost all self host apps are open source on the android side, so now I may loose several of those apps if they don't want to sign or are banned by Google.
The developer registers not the app.
Graphene OS is working well for me and installation was pretty straightforward. As people have said, though, it needs access to the bootloader.
And a Pixel - the only device it currently runs on (not a criticism, it's because Pixel is the only device with a TPM).
Lineage runs on a lot more phones. It's nit as secure as Graphene, but arguably more secure than what a phone ships with.
Yep. Unfortunately, Graphene requires further investment in google products. Buy used/refurbished! Or go with Lineage.
I'd say its as secure but not as private as Graphene.
I think you are mixing up the two terms.
Lineage OS is way less secure than Graphene OS. Lineage OS doesn't even officially support Re-Locking of bootloader under custom keys, so it could be easily tampered with, and they also lack all the hardening that Graphene OS have.
I find this unbeliable.
But, maybe, this will finally make some viable mobile Linux alternatives exist?
I'm curious to understand how Google defines "malicious apps" that they're using as the justification for this.
Conceivably, google revoking a certificate will mean an app installed outside of google play, will stop working for users.
How do they feel about celebrite? And the other companies that violate user privacy as their sole reason for existing. Will they still get "permission" for their apps? Seems like a great way to protect users by not issuing one to them...
This will be an amazing gift to open-source devices. Android has been the elephant in the room, open and free enough and too huge to ignore.
When the elephant goes away, a lot of people will be free to innovate.
Ubuntu Touch is really nice. But I'm not aware of many phones that support it.
...and after doing my own homework...
Huh. PinePhone for $199
Big disclaimer: beta software for Linux experts.
Edit: I guess it is the year of the Linux Phone
It's so upsetting. Makes me want to start recommending iPhones (only partially out of spite).
Edit: you can downvote, but can you tell me what the difference is at this point?
You can still get some Android phones with relatively easily repaired hardware. And for innovative third party hardware your only option is still going to be Android.
I wish there were some way to effectively protest this decision they've made, but I can't think of anything they'd actually care about unless nearly all developers objected.
I may have been a little hyperbolic but it's still a huge selling point lost for the majority.
To add bootloader unlocking probably isn't going anywhere soon so at least you have the option to run something like graphene on Android devices.
only works for pixels unfortunately.
Graphene is only supported on Pixels for now, but by their own FAQ this isn't the plan forever. With Google blocking third party apps at their own discretion on Android, there will certainly be motivation to officially support more devices.
This only affects android phones with Google Play Services installed. So degoogled phones won't have any issue. Please look into custom ROMS or alternatives.
Sadly they are clamping down on that front too. AOSP is no longer being developed in the open. They are also moving to a standardised internal emulator instead of releasing the "recipe" to build on real hardware development platforms (aka pixel phones)
Oh cool, looks like my next phone is going to be an apple huh...
Minimal apps, heavily browser reliant, and android can go fuck itself.
You realize Apple is already the same way, right? You have to jailbreak them to install anything outside of the app store.
My man, I get the sentiment, but as someone who regularly has to do work on an apple for my fiancee, it's still not worth it.
top 98 comments