I'm sorry, but in that case, it wasn't worth running the app to begin with. You can either find a third-party app that lets you access the same content, such as Newpipe and YouTube, or you can use it from a web browser, such as your bank, and if you can't do either of those, then just don't fucking use that service.

I was willing to totally switch banks because my previous bank required me to use a mobile app and I did not want to do so. If I must go through some annoyance to use something that works properly, I will.

For me at least, running as much open source as I can possibly do is worth more than the inconvenience caused by not being able to use these shit services.

and that's important why? pick a different bank, or don't use the app at all.

I get that some folks think using the app is a requirement. that may be true for some but not all.

don't support shitty services and these companies won't continue to abuse us.

Aaaaand now I'm carrying around a laptop again, at least mini pcs are tiny now, maybe a small handheld would do...

if any of this shit hinders me, I'll get a dumb phone and the cheapest iphone available for manditory work-based things and say so-long to being a mobile OS user.

Usb debugging is sketchy as shit. You should almost never turn that on, and immediately turn it off once you're finished with whatever it is you're doing with that on.

F-Droid uses Session Installer, which is an "app store" method.

This is not a new issue:

Android 15 cracks down on sideloaded apps even harder to protect users

Android 15 places new restrictions on what permissions sideloaded apps can be easily granted. Here's what you need to know.

Android Authority (www.androidauthority.com)

I use open source whenever I can, but sometimes that just isn't an option in the real world. I work in IT at a hospital that REQUIRES Duo. I use GrapheneOS. I was able to get it to work, but it was a horrible experience.

agree completely. But I recently broke my phone screen, the usual Samsung green screen of death, and I wish I had that turned on to copy the data over lol.

I’d be telling them to provide a work phone.

I recently started carrying a GPD microPC because of this bullshit.

It's like a very bulky phone. Pocketable but kinda chonk. Thumb typing kinda thing.

But it runs Fedora + gnome with no problems.

My phone is now just for quick stuff and a way to make a WiFi hotspot.

Allowing fdroid from to come from the play store is NOT a solution by any means. Users should have the right to never touch the play store or agree to googles TOS.

Are they talking about the changes that were made that allow a dev to prevent their app from launching if it fails a Play integrity check?

If so I don’t see that as a big deal since it is up to the dev to use it. OSS devs that want to distribute their app via apk download won’t enable it, and anyone distributing cracked apks will just disable that along with whatever other changes they are making.

The restrictions on apk access over the past 10 years have already been an annoying pita. Many of the best power user apks have had to gut themselves over their original functionality, all while obtaining root access over your owned devices has become harder or next to impossible.

Let them keep those. I hereby declare that if I don't own the thing, I ain't buying it. So no root, no $$$.

I did honestly think about this, but its honestly more trouble than it's worth. Carrying around two phones is just kind of am eh experience, plus I'm new, and I don't wanna be that guy. If I kept having issues with it, that is probably the route I would have ended up taking, but it's working as expected now. I'm not a FOSS purest or anything either way. I have a librebooted thinkpad, but I also have several proprietary apps on my phone. Its all about usability for me.

Yeah, but I still really like my micro SD card slot and pen on my note 20 ultra. Dunno what I'll do when I have to replace it.

Some apps only require 'basic' play integrity verification, but now check to see if they're installed via the Play Store. They refuse to run if they're installed via an alternative source.

This has been a problem for GrapheneOS, since some apps filter themselves out of the Play Store search if you don't pass strong play integrity, despite the fact that they don't require it. Luckily Graphene now had a bypass for this.

Eh, if you are still on a Gservices Version of Android you are lost anyway

So I just urge y'all to step back and watch at this clownshow.

There is exactly one app I use that is available only on play store - my bank.

I don't really need the app.

They have a website.

I have a few phones, just got one that now has grapheneOS.

I've been using it for a few weeks to see how it works before I switch over anything to use it as my main. it has a lot of very interesting privacy/security features to test out.

Either way, I don't get anything from the play store anymore.

It's F(L)OSS or a website.

As god intended.

Lol. So this API for 'security' and 'integrity' basically has a built in malware trojan:

Avoid caching integrity verdicts
Caching integrity verdicts increases the risk of proxying, which is an attack where a bad actor reuses a verdict from a good device for abusive purposes in another environment. Instead of caching responses, you can make a standard API request to get a verdict on demand.

It's funny because one browser I use is downloaded from the browsers website which I then use to install the update to said browser.

Google needs a Luigi.