Verified developer
Google wants to make sideloading Android apps safer by verifying developers’ identities
How is this going to be enforced if you are just downloading apks? It states they will enforce verification across sources outside of the play store. This doesn't sound possible unless they just make stock android unable to side load
Between this, Play Integrity API, and Google removing source code, they're basically declaring war on the openness of their own platform.
Well I think we are such a small percentage of users that care that it probably does not matter in the grand scheme. I just got on android in 24' when rcs started working because my large family network was always worried they would lose communication with me. Because you know the little green text bubble things don't get pictures and stuff from non iOS... People have no clue and don't care as long as the phone works to swipe on sorry videos
I didn't think they would either but it sure seems like they suddenly do...
How is this going to be enforced if you are just downloading apks? It states they will enforce verification across sources outside of the play store. This doesn’t sound possible unless they just make stock android unable to side load
apks will have to be cryptographically signed through Google's developer console, and this signature will be checked by the operating system at install time regardless of where you got the apk from. It's like how windows has signed applications for smartscreen, except in this case all applications must be signed through Google, and in order to sign it, you have to let Google know where you live, and unsigned applications will simply be denied instead of just being presented with a warning.
windows has signed applications for smartscreen
Funny thing is, Microsoft executables are not signed, and I get smartscreen warnings lol
Makes sense. Is Google play store just apk files as well? I thought there was some other special sauce with it as well besides just running spyware in the background. This all sounds like a good way to get full names for YouTube add less app makers...
You are likely thinking of google play protect, which does the same verification on their platform's end (to try to remove bad actor developer accounts as soon as possible), and the local device end as well (to remove said developers apps if they are already installed on your device). But yes, at the base level, what arrives on your phone from the play store are just signed apk files. That's why mirror sites like apkmirror or apkpure can do what they do, by extracting said apks after they have been released onto the play store.
It can be disabled, right? Right?
Yes. It's called custom ROMs.
yes and no, unfortunately i need to use banking apps and the product managers who are giving the instructions for the app are complete assholes who put the most draconian detection systems
i do not like this, will third party ROMs be the only options going forward?
Well it says next year. And a lot could happen between then and now. Some comments think they will run into anti trust issues trying this.
I recommend you look into them, no matter what happens.
Maybe time to think of Huawei and remove Google from the mix at least there I can side-load.
Except that they are so hostile to open source and custom roms.
I always check if they are an option since the phone is guaranteed to be free from google garbage on boot and I'm always disappointed.
They could be the go to for everyone who hates google but they just shot themselves in the food instead.
Huawei no longer builds HarmonyOS on top of Android code, meaning APK files no longer install. It is a closed system, possibly the worst of all three considering its small, localised market share.
Guess that sucks then. So basically Android is going to become a Google walled garden.
Doesn't this clearly breach the DMA?
They can't go to far down this line, they'll have antitrust issues. They're a mature company doing what mature companies do and letting the middle (marketing) managers who couldn't run a bath, run the company by focusing on cost reduction not earnings growth, and bury it.
We saw this with HP. Remember how we all used to buy HP printers for Linux? I still have my 1990s - please god - LaserJet and can still get toner.
they want to identify them, and issue cease and desist, or buy them out, thats the real reason, and to acquire thier OS to lock down android even harder
Why do we even call it "sideloading"? I can install whatever I want on desktop, even whatever OS, so why not my phone? It is my phone, right?
I'm not really understanding. I buy a phone. Peter codes and app with foss tools and emails it to me. No copyright or anything bad like a to do app. I want to use said app on my purchased phone. Now Peter will have to show his license and stuff? I guess developers are criminals.
But you are understanding. Google sees us all as criminals.
I do not call it side-loading. Two of my tablets don't have any Google on it. The phone is running Play Services in a sandbox, as one of several options to get software.
That’s the thing, downloading from another source is not opposed to downloading from the official store. It’s the same thing - downloading an executable and installing it on your device - with a different UX and warning screens.