Half arse solutions that will not work.
post
This is just like when they threatened to take ad blocking away from Chrome. They backed down once or twice. Then they went ahead and did it.
Remember, the only reason they're going after sideloading is ad blockers. They don't care if you torrent (steal content from others — their worst-case scenario for that use case, not my opinion) or emulate (emulators are in the Play Store... and the App Store on the Apple side). They just don't want you blocking ads.
Consider, on an iPhone, which cannot block ads at the HOSTS level, so you use DNS filtering (which I'm pretty sure is how un-rooted Android phones do it as well). This routes all ad hosts (or at least most of them, the goal is to get them all but it's a cat-and-mouse game of whack-a-mole) into a wall (localhost) and lets legitimate traffic through. If you use any Google app, the app will actually tunnel around your DNS filter to force ads onto your device. That is a thing Google does... on iPhone. I'm not sure if they do it on Android as well. Probably do. On Android, I Google via Firefox with uBlock Origin. On iPhone, I mean using the Google app itself (which is a mistake for that reason). Obviously if you have Safari (or any browser, they all route through Safari's engine) and a decent content blocker, you can go to Google.com and get pages without ads.
The best reasons to use Android over iPhone have been taken away by Google. First, Android was never open source — AOSP was, and is. Android that ships on phones is not open source, and most of the commercial Google apps (e.g. Gmail, Play Store) are not open source at all. AOSP does include an open source email app, but it is very basic. When the iPhone 7 removed the headphone jack, Google made fun of them for doing it, and then did the same thing the very next year. Google's own branded phones have never, ever given you a memory card slot. Not Nexus and not Pixel. The ones that have, are taking it away. When Apple stopped including chargers, again, they were shamed for it, and everyone followed suit. Now Google is coming for sideloading.
I'm not saying go get an iPhone. Apple has its own problems (the keyboard sucks for one; for two, Tim Cook keeps sucking up to fascists). But if Google is going to take away the advantages of Android, demand that the next Pixel be as powerful as the latest iPhone if it's going to be the same price, or demand that they stop selling your personal information. Tell them they can't have both. Or, you know, get an iPhone. It's five generations ahead, raw power wise, than the Pixel. The Pixel 10 (2025) has the processing power of the iPhone 11 (2019). That's fine if that's what you want and they're open source and you get a headphone jack and a memory card and they don't sell your personal data. If they wanna take all those things and sell your personal data, demand they make the phone comparative to the latest iPhone. Or grow a pair and take your money elsewhere.
I'm not saying take your business to Apple, though that's what I did. Even as an iPhone guy, I like what Samsung's doing. I like what the OnePlus 15 is doing, except I hear its cameras aren't great. Still kinda want one. I remember the old OnePlus phones couldn't be used in the US. Now that "everyone" does 5G, I'm sure it can be used, I'm just not sure it supports all the bands. But it's Android, and it's an Android fork that is designed to look like iOS. Which is weird. If I have just one phone, I don't care, give me the best experience. But as a guy with a 2024 iPhone and a 2019 Android (Galaxy S10), if I replace my old Android phone, I don't want it to be an iPhone clone, I want it... to be an Android phone. Though, I'd much rather have a Linux phone. They're making them, it's not exactly a pipe dream, but they aren't competitive and they aren't everywhere yet.
It feels unclear just how much friction they're adding here to installing from an apk. Near the end it says
Meanwhile, work on a “dedicated account type for students and hobbyists” continues. This will allow for app distribution to a “limited number of devices without going through the full verification requirements.”
Does that mean the way to install unverified apps will require a special type of account, and only be useful for disceminating a small number of an app you're working on or something?
I think thats a separate thing that thing they were already doing, hence "meanwhile... work continues", but I really wish it was worded less ambiguously
How generous of them that we’re allowed to install software on our mobile computers that we own.
I feel like experienced users is going to be people who know how to use ADB, which means that they didn't change anything from their original statement. That's just my concern.
Remember when Google backed off the changes to Chrome that prevented adblockers from working and a short time later implemented those changes anyway? Why TF would Google start caring about what users want now, especially since this issue is way less visible to most people? Google wants people to think they have a voice about what happens with Android, not to actually give them one.
Blocking side loading will force apps and any generated revenue into Google's Play store which is exactly the point of this no matter what Google says.
The bloviating Google is doing now is irrelevant. The company will move forward with blocking side loading within the next few months, guaranteed.
Exactly. They'll back down a little bit to reduce some of the bad publicity, and then later they'll quietly expand the remit until the same end is reached anyway.
The frog is boiled slowly.
Google has far too much power. We should not be subject to the whims of a company that does not and cannot have our best interests at heart. For this reason, my next phone will be a Fairphone or, I hope, the new Graphene phone when it comes out late next year.
In this day and age, I'd be not at all surprised if you had to pay a monthly "developer fee" or similar to get access to sideloading.
I was just talking to a friend of mine last night over beers about how he'd pay to not have all these companies foist AI on him, and my response then was what it is now. Don't give them any ideas.
Oh no, I'm going to try and attract Murphy, hoping that his law still holds.
Oh I suuuuure wish we would have to pay a subscription for sideloading! I suuuure would hate if we got the feature for free permanently! Man, I soooo want to pay a subscription for this basic feature soooooo baaaaad!
What counts as "experienced"? Because I'm capable of installing a custom ROM
On another article I read, according to Google:
Anyone who's not gullible enough to turn off multiple protections, by following directions of someone scamming you.
Installing a custom ROM is rookie numbers. Removing a faulty wallpaper through TWRP (sRGB palette was not supported on Android 9 or something), THIS is the real skill xD
I have family members who can't change their phone wallpaper through the GUI. Your standards are far too high!
You're not wrong and you even kind of support my point. The barrier must be pretty low, equal to the difficulty of installing a ROM
ZOOM!! Watch out for low-flying obtuseness...
Honestly if they add a test you have to pass to install anything even from the Play Store and this test blocks my mum, I'm all here for it. 😑 Some people ought to just not be allowed to install apps.
"Please correctly tap the TWRP Logo within 1 second"
shows a bunch of random symbols spread out on the screen
There's no way a granma would be quick enough to get to it.
so long as 'wedding album' apk shared on whatsapp don't get installed, i'm content.
I've been using Android since gingerbread, does that make me an "experienced user"?
I am concerned that they haven't explained how they're going to implement this for (and who counts as) experienced users.
I am also concerned that they have probably found a work around to get what they want while paying us lip service.
That's the problem; handset makers don't believe you own the phone. They think it's their phone that you're paying to use temporarily.
There are billions of comparatively clueless users
It's worse than simply "doesn't bother with customizations", people these days just watch short-form videos algorithmically fed to them with zero interaction. These are my parents, WeChat short-videos, on loud speakers in the livingroom. You can hear it upstairs. Also, there are occasional horizontal videos they watch in portrait mode. The fuck? Who watches a landscape video in portait? 🤣
Boomers and Gen Alpha are actually quite similar (well my parents aren't "boomers", but they have boomer mindset)
Why google is doing this? I just want to download apps from F-Driod. I just want to install software on a device that I own!
Give me root assholes. I'll show you experience.
I'll root your asshole!
No thanks your mom said you aren't very good at it.
We are designing this flow specifically to resist coercion, ensuring that users aren’t tricked into bypassing these safety checks while under pressure from a scammer. It will also include clear warnings to ensure users fully understand the risks involved, but ultimately, it puts the choice in their hands.
That sounds great actually! Lets see how they actually implement it though. After how they communicated this previously, I'm hesitant to get my hopes up.
A one hour cooldown period, a scammer would not want to be on the phone with you for over an hour to try to wait for the timer to run out, and any experienced user will enable it when they very first get their phone, so won't have to ever deal with it again. LOL.
Does anyone have one of these phones https://linuxstans.com/linux-phone/ and can say anything about it?
Other Linuxphones would be fine by me as well :)
[rant]
I'm strongly feeling there's an end coming for using Android in the way I used to.
Google Play Integrity bullshit is putting the nail in the coffin, if killing F-Droid doesn't come first.
Too many lickspittle app developers cave to Google's monopoly.
Then again, I was able to grow up without a portable computer and while the world has changed quite a bit since that, I'm sure I can go back to that.
[/rant]
They cave because the amount of people who sideload anything is a rounding error of users. Most just load from the Play store.
And what good is 'sideloading' (imo a loaded expression), if you can't use your phone the way you want because of the Google Play Integrity crap that fails on custom ROMs?
Btw. I don't think that the amount of F-Droid users are a rounding error, but I may be wrong.
Dear GrapheneOS or Linux, please create a usable phone ASAP. They are all crazy. Sincerely.
Also the Phone must be at or under 200$ no matter the build quality. I get it, linux users are likely to be cushy financially well off opsec nerds will pay out the wazoo for hardkill switches which I guess is your bread and butter whales to target in this market. Please release something economical for us plebs it can be like a walmart tracphone for all I care.
PinePhone is $200. But the manufacturer offloaded all development onto the community.
Librem actually pays some developers, but their phones are $700+. And you will find many complaints about refunds.
Cheap prices are possible by economies of scale by manufacturers, but same manufacturers guard their proprietary hardware.
Also, how "pleb" are we talking about? Many people DGAF and just want their calls/text/apps to work.
Google says verification forces bad actors to use “real identity to distribute malware, making attacks significantly harder and more costly to scale.”
You are already doing that and somehow there is still malware in YOUR APP STORE
Kindly fuck right off a cliff into a mountain of cati Google
So they're backing out, but in a way that would still conveniently kill f-droid?
Technically not. But only technically. The only reason to allow side loading at all is to allow "experienced users" to put unverified apps on their devices. Otherwise it doesn't make much sense to even make such a concession.
It looks like they're going to have two different solutions: one for power users and one for hobbyists and students.
My main problem with this is twofold. They explain exactly nothing about how they achieve "experienced user sideloading", they don't explain what an "experienced user" is, and they don't explain in any detail whether or not they're going to allow sideloaded apps to be unverified.
The other part of the problem is that I don't trust Google. There's way too many instances of them backing down publicly from a decision they made and then implementing it in a different way over time.
The truth is this announcement doesn't give us any details so all we can make are assumptions.
The mere phasing of it as them "letting" users do it shows that they fundamentally Do Not Get It and are still failing to respect device owners' property rights.
I've already switched my pc to Linux. I'm willing to switch my phone to Linux too. My only problem with current alternatives is that none of them feel like a finished product Software-wise. And hardware-wise I have a galaxy ultra so the downgrade would be a lot especially in the performance and cameras.
We need a Linux based/Open-source alternative that could compete with the likes of Apple, Google, and Samsung. It's not impossible especially with current available technology, but I can see why the market incentives are very low.
I was hoping new laws could at least keep the status quo for a bit longer but it turns out as always relying on politicians is a bad idea.
There's a thread about this on HN that I'm having trouble finding now, but I looked at it a couple days ago. It said you'll be able to install unverified programs, but other programs will be able to tell that you have done so. E.g. your banking app could consider your phone "contaminated" and refuse to run, if it knows you're running something unverified, that's presumptively intercepting your typing or whatever.
They already do this.
My banking app won't let me use it if I have bitwarden from f-droid active. Play store is fine.
Do Insular and silimiar apps block app from scanning?
Idk what Insular is, but I don't think scanning is involved. Installing the unverified app sets a flag in the OS that other apps can read.
So are they requiring ADB installations or what?
We don't know exactly yet, but it sounds like they're transitioning away from that requirement.
It sounds like they're just going to put up more scary banners and/or hide the option in the developer menu.
Wished Apple would do this.
What counts as an experienced user?
all 3 comments