How is this going to be enforced if you are just downloading apks? It states they will enforce verification across sources outside of the play store. This doesn’t sound possible unless they just make stock android unable to side load

  • Ulrich@feddit.org
    link
    fedilink
    English
    arrow-up
    49
    ·
    3 days ago

    Between this, Play Integrity API, and Google removing source code, they’re basically declaring war on the openness of their own platform.

    • tomyhaw@lemmy.worldOP
      link
      fedilink
      English
      arrow-up
      13
      ·
      3 days ago

      Well I think we are such a small percentage of users that care that it probably does not matter in the grand scheme. I just got on android in 24’ when rcs started working because my large family network was always worried they would lose communication with me. Because you know the little green text bubble things don’t get pictures and stuff from non iOS… People have no clue and don’t care as long as the phone works to swipe on sorry videos

      • Ulrich@feddit.org
        link
        fedilink
        English
        arrow-up
        3
        ·
        edit-2
        3 days ago

        I didn’t think they would either but it sure seems like they suddenly do…

    • eleitl@lemmy.zip
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 day ago

      I do not call it side-loading. Two of my tablets don’t have any Google on it. The phone is running Play Services in a sandbox, as one of several options to get software.

    • tomyhaw@lemmy.worldOP
      link
      fedilink
      English
      arrow-up
      26
      ·
      3 days ago

      I’m not really understanding. I buy a phone. Peter codes and app with foss tools and emails it to me. No copyright or anything bad like a to do app. I want to use said app on my purchased phone. Now Peter will have to show his license and stuff? I guess developers are criminals.

      • folkrav@lemmy.ca
        link
        fedilink
        English
        arrow-up
        7
        ·
        edit-2
        3 days ago

        That’s the thing, downloading from another source is not opposed to downloading from the official store. It’s the same thing - downloading an executable and installing it on your device - with a different UX and warning screens.

  • MTK@lemmy.world
    link
    fedilink
    English
    arrow-up
    26
    ·
    3 days ago

    Classic corporate move: come in attractive (open, rootable, etc) and once the competition is gone slowly make it more profitable on the customers expense.

    • tomyhaw@lemmy.worldOP
      link
      fedilink
      English
      arrow-up
      5
      ·
      3 days ago

      Well it says next year. And a lot could happen between then and now. Some comments think they will run into anti trust issues trying this.

  • tomalley8342@lemmy.world
    link
    fedilink
    English
    arrow-up
    20
    ·
    3 days ago

    How is this going to be enforced if you are just downloading apks? It states they will enforce verification across sources outside of the play store. This doesn’t sound possible unless they just make stock android unable to side load

    apks will have to be cryptographically signed through Google’s developer console, and this signature will be checked by the operating system at install time regardless of where you got the apk from. It’s like how windows has signed applications for smartscreen, except in this case all applications must be signed through Google, and in order to sign it, you have to let Google know where you live, and unsigned applications will simply be denied instead of just being presented with a warning.

    • tomyhaw@lemmy.worldOP
      link
      fedilink
      English
      arrow-up
      6
      ·
      3 days ago

      Makes sense. Is Google play store just apk files as well? I thought there was some other special sauce with it as well besides just running spyware in the background. This all sounds like a good way to get full names for YouTube add less app makers…

      • tomalley8342@lemmy.world
        link
        fedilink
        English
        arrow-up
        7
        ·
        3 days ago

        You are likely thinking of google play protect, which does the same verification on their platform’s end (to try to remove bad actor developer accounts as soon as possible), and the local device end as well (to remove said developers apps if they are already installed on your device). But yes, at the base level, what arrives on your phone from the play store are just signed apk files. That’s why mirror sites like apkmirror or apkpure can do what they do, by extracting said apks after they have been released onto the play store.

        • EarMaster@lemmy.world
          link
          fedilink
          English
          arrow-up
          2
          ·
          2 days ago

          That’s not quite all of it. It can also do diff updates (so you don’t have to download the whole apk), staged rollouts and different builds for different devices. And of course it provides APIs for license management, in app purchases, update notifications, etc. All of this could be achieved by using other services (like F-Droid) or custom build websites, but the convenience for the everyday user isn’t quite the same.

        • tomyhaw@lemmy.worldOP
          link
          fedilink
          English
          arrow-up
          2
          ·
          3 days ago

          Thanks for the explanation. So essentially custom roms with Google play services removed will actually be needed to download to he good apps like new pipe and the like

      • Moonrise2473@feddit.it
        link
        fedilink
        English
        arrow-up
        3
        ·
        1 day ago

        yes and no, unfortunately i need to use banking apps and the product managers who are giving the instructions for the app are complete assholes who put the most draconian detection systems

  • Tollana1234567@lemmy.today
    link
    fedilink
    English
    arrow-up
    6
    arrow-down
    1
    ·
    3 days ago

    they want to identify them, and issue cease and desist, or buy them out, thats the real reason, and to acquire thier OS to lock down android even harder

  • hellequin67@lemmy.zip
    link
    fedilink
    English
    arrow-up
    9
    arrow-down
    2
    ·
    3 days ago

    Maybe time to think of Huawei and remove Google from the mix at least there I can side-load.

    • Ilandar@lemmy.today
      link
      fedilink
      English
      arrow-up
      1
      ·
      8 hours ago

      Huawei no longer builds HarmonyOS on top of Android code, meaning APK files no longer install. It is a closed system, possibly the worst of all three considering its small, localised market share.

    • guismo@aussie.zone
      link
      fedilink
      English
      arrow-up
      6
      ·
      3 days ago

      Except that they are so hostile to open source and custom roms.

      I always check if they are an option since the phone is guaranteed to be free from google garbage on boot and I’m always disappointed.

      They could be the go to for everyone who hates google but they just shot themselves in the food instead.

    • Xylight@lemdro.id
      link
      fedilink
      English
      arrow-up
      3
      ·
      2 days ago

      Would it be possible to adb force remove them and then no longer have a “certified” device?

  • deadcatbounce@reddthat.com
    link
    fedilink
    English
    arrow-up
    7
    arrow-down
    2
    ·
    edit-2
    3 days ago

    They can’t go to far down this line, they’ll have antitrust issues. They’re a mature company doing what mature companies do and letting the middle (marketing) managers who couldn’t run a bath, run the company by focusing on cost reduction not earnings growth, and bury it.

    We saw this with HP. Remember how we all used to buy HP printers for Linux? I still have my 1990s - please god - LaserJet and can still get toner.