• smeg@infosec.pub
    link
    fedilink
    English
    arrow-up
    56
    ·
    3 months ago
    • enable developer options
    • confirm that you are not tricked
    • restart phone and re-authenticate
    • wait one day
    • confirm with biometrics that you know what you are doing
    • decide if you only want unrestricted installs for 1 week or forever
    • confirm that you accept the risks
    • enjoy the few apps that still have developers motivated to develop for a user-base willing to put up with this
    • wonderingwanderer@sopuli.xyz
      link
      fedilink
      English
      arrow-up
      2
      ·
      3 months ago

      Combined with the news that they’re going to start requiring developer age verification even in the alternate app repositories…

    • FauxLiving@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      arrow-down
      11
      ·
      3 months ago

      I can understand this workflow being created to protect the legions of people who are tricked into installing spyware.

      It doesn’t remotely affect me because I use GrapheneOS and if this is an issue for you then you’re probably someone who should look at installing GOS or Lineage.

      I don’t think Google should be able to do this and it is likely part of a longer-term strategy to strangle any competition. At the same time, I can understand how this change will save a lot of grandparents from clicking a link in a text from their ‘grandchildren’ and installing spyware that’ll steal all of their bank information.

      • AHemlocksLie@lemmy.zip
        link
        fedilink
        English
        arrow-up
        6
        ·
        3 months ago

        GrapheneOS is built on AOSP, which is where the change is being made. Graphene and other custom ROMs will need to maintain a fork that cuts out the feature if they want to avoid. Google is also starting to close off Android to make that more difficult, so it’ll become a genuine project to maintain the fork well.

      • AHemlocksLie@lemmy.zip
        link
        fedilink
        English
        arrow-up
        2
        ·
        3 months ago

        GrapheneOS is built on AOSP, which is where the change is being made. Graphene and other custom ROMs will need to maintain a fork that cuts out the feature if they want to avoid. Google is also starting to close off Android to make that more difficult, so it’ll become a genuine project to maintain the fork well.

      • fallaciousBasis@lemmy.worldBanned from community
        link
        fedilink
        English
        arrow-up
        1
        ·
        3 months ago

        I mean… This is kind of why I never let people use my phone.

        I have installations from various sources enabled… Like my browser, because I know what I’m doing. But I wouldn’t trust anyone as the process is currently effortless…

        If someone is trying to install spyware on you (like a partner or parent.) this might offer some notification and prevention.

        I don’t really see the big deal. You do it once, enable it forever, and wipe up those tears.

        I think a better way would just to have maybe like a biometric/pin confirmation upon installation. Simple. Clean.

        • FauxLiving@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          ·
          3 months ago

          The delay is almost assuredly to prevent live scamming. Like a grandparent picking up a random call or text and being tricked into thinking they’re a family member/bank worker/etc.

          I’ll admit it’s annoying, and could be used by Google later to do more annoying shit.

          Taking their explanations in good faith and looking at it from an customer security point of view, I can see this cutting back on some common scam types. This is kind of like how, when you go to rustdesk.com there’s a giant ‘YOU’RE PROBABLY GETTING SCAMMED’ banner across the top of the page:

          These little steps can seems pointless or annoying to us, as most of us are probably in the upper range of tech skills, but consider the average user and it starts to make a lot more sense.

      • ThirdConsul@lemmy.zip
        link
        fedilink
        English
        arrow-up
        1
        arrow-down
        1
        ·
        3 months ago

        I can understand this workflow being created to protect the legions of people who are tricked into installing spyware.

        Then you’re stupid, as most people install third party spyware through the Google Play store.

      • Ada@piefed.blahaj.zone
        link
        fedilink
        English
        arrow-up
        38
        arrow-down
        1
        ·
        3 months ago

        At this stage, I’m thinking one of the Motorola phones that will run Graphene out of the box.

        • Zetta@mander.xyz
          link
          fedilink
          English
          arrow-up
          9
          ·
          3 months ago

          I use graphene on a pixel. Graphene is Android, albeit a much better version of Android.

          • Ada@piefed.blahaj.zone
            link
            fedilink
            English
            arrow-up
            9
            ·
            3 months ago

            I don’t care whether it’s technically android or not, I care that it’s not a tool to let google in to my life.

        • Fetus@lemmy.world
          link
          fedilink
          English
          arrow-up
          3
          arrow-down
          1
          ·
          3 months ago

          I’m hoping it’s smaller than any of their current offerings. I really want to support a “factory” GrapheneOS phone, but can’t stand the size of current generation phones.

      • somethingDotExe@lemmy.world
        link
        fedilink
        English
        arrow-up
        4
        ·
        3 months ago

        Fairphone with /e/os or Jolla phone with sailfishos (waiting for the reviews of their new preordered flagship phone coming out this fall.)

        • Lost_My_Mind@lemmy.world
          link
          fedilink
          English
          arrow-up
          3
          arrow-down
          4
          ·
          3 months ago

          Well, that runs into a different problem with the same results.

          Sure, GOOGLE can’t hinder you from installing apps, but the fact that nobody has heard of these OS’s before means your selection of available apps is what hinders your ability to install apps.

          • Zak@lemmy.world
            link
            fedilink
            English
            arrow-up
            6
            ·
            3 months ago

            /e/os is Android without Google proprietary stuff. It runs most Android apps.

          • somethingDotExe@lemmy.world
            link
            fedilink
            English
            arrow-up
            6
            arrow-down
            1
            ·
            3 months ago

            “Nobody has Heard of these os’” - wtf you talk about? They are gaining popularity here in EU as well as in Turkey. It’s getting popular to de-google/de-americanize. People are hating on the monopoly iOS and Android has on the industry. Better to do something than being a sheep about it, and just let thos mofos suck the data out of your life forever?

  • Ganbat@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    42
    ·
    3 months ago

    In addition to the advanced flow we’re building free, limited distribution accounts for students and hobbyists. This allows you to share apps with a small group (up to 20 devices) without needing to provide a government-issued ID or pay a registration fee.

    Fuck you sideways, Google.

  • kbal@fedia.io
    link
    fedilink
    arrow-up
    37
    ·
    3 months ago

    Just think of all the other things that could benefit from a “protective waiting period” to enhance your safety.

    Turning off location tracking, using a web browser other than Chrome, using a mail server other than Gmail, visiting duckduckgo.com — if Google really cared about your privacy and security they’d add a 24-hour delay to all these dangerous activities.

  • shrek_is_love@lemmy.ml
    link
    fedilink
    English
    arrow-up
    24
    ·
    3 months ago

    They think this will take some of the heat off of them. Hopefully no one actually thinks this is a reasonable compromise. If I want to help an elderly family member install something on their phone during Thanksgiving dinner or a family reunion, I’m not gonna want to wait a day. Uncle Paul’s flying back to Florida tomorrow morning!

      • Fedditor385@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        3 months ago

        According to Wikipedia, they basically have no representative nowhere… I would rather vote for a more established party which actually has the power do influence the decision. Surely there must be one mainstream party that has the same stance.

  • MountainMan@lemmy.zip
    link
    fedilink
    English
    arrow-up
    11
    arrow-down
    1
    ·
    3 months ago

    They will just redefine what 24h means!

    Don’t think for a second that these companies are working in good faith, and would change their evil plans due to some pushback from the rabble. They will just find ways to circumvent things. They have everyone by the nads, there are no competitors.

    • MasterNerd@lemmy.zip
      link
      fedilink
      English
      arrow-up
      2
      ·
      3 months ago

      Bruh what? You’re gonna be waiting a long time for that. Better to use one of the pre-existing alternatives than wait for an OS that probably won’t ever exist, and probably won’t support your hardware if it ever does.

  • shortwavesurfer@lemmy.zip
    link
    fedilink
    English
    arrow-up
    4
    ·
    3 months ago

    This would not have affected me since I use Lineage OS without Google Play Services, but I am now more seriously than ever looking into using a Linux phone like Postmarket OS.

  • tidderuuf@lemmy.world
    link
    fedilink
    English
    arrow-up
    4
    arrow-down
    1
    ·
    3 months ago

    I hate how much more difficult my work or life has to be because some people shouldn’t have a smartphone.

  • shortwavesurfer@lemmy.zip
    link
    fedilink
    English
    arrow-up
    3
    ·
    3 months ago

    This would not have affected me since I use Lineage OS without Google Play Services, but I am now more seriously than ever looking into using a Linux phone like Postmarket OS.

    • fluxx@mander.xyz
      link
      fedilink
      English
      arrow-up
      12
      ·
      3 months ago

      It would affect a lot of users, then it will indirectly affect you too, as a lot of devs won’t be as interested in maintaining their apps for so few users. But I hope it will at least give a bit of a push to developing postmarket os. I personally am sure going to get a second hand phone to install postmarketos too and hope I can contribute at least a little bit. I am prepared to suffer, at least a little bit for the right cause.

    • Squizzy@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      ·
      3 months ago
      1. Camera
      2. Phone projection for cars
      3. Contactless pay/ wallet/pay alternative

      Give me a device that can do these and I am in for ditching android. I only use browsers or off store apps that have linux support mainly anymore anyway.

      • fluxx@mander.xyz
        link
        fedilink
        English
        arrow-up
        3
        ·
        3 months ago

        At least the last one won’t happen, as banks would have to be on board. And banks are not on your side with this one.

        • Squizzy@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          ·
          3 months ago

          To be honest this one is in hand, curve has an alternative product and a lot of banks across EU have nativr NFC. My country does not have those banks though. I hope revolut bring it in.

          I do want something that takes me tickets for shows and flights and membership cards too though

          • fluxx@mander.xyz
            link
            fedilink
            English
            arrow-up
            1
            ·
            3 months ago

            Yeah, im in a similar situation. Curve doesn’t work in my country and banks don’t have their own solution. And google pay won’t work on my grapheneos pixel.

            • Squizzy@lemmy.world
              link
              fedilink
              English
              arrow-up
              1
              ·
              3 months ago

              I got a pixel for graphene but had to go back for android auto and payments. The camera was lacking compared to pixelOS but that was fixable.

              Sucks to be with google more than ever