Google Restricts Android Sideloading—What It Means for User Autonomy and the Future of Mobile Freedom – Purism
Technology
95
Beiträge
63
Kommentatoren
0
Aufrufe
-
From what I can tell, all of this shit is on Google versions of Android. If you are on AOSP such as lineage or graphene, from what I understand this has no effect whatsoever.
But this is not the only aspect of Google's autocratization; Apps who's developers have enabled the Google Play Integrity APIs will not run on custom roms.
-
This is my immediate first thought seeing this. This fucking sucks. Part of the whole benefit of something like LineageOS or e (OS?) was being able to use Fdroid to stay away from Google as much as possible. Now this is going to potentially make things weird.
doesn't do anything to f-droid, but probably kills aurora a bit. the developer can prevent their app from being sideloaded. why would one prevent that if they are distributing via f-droid too?
-
But this is not the only aspect of Google's autocratization; Apps who's developers have enabled the Google Play Integrity APIs will not run on custom roms.
cool, any dev who requires that is acting in bad faith against my privacy and doesn't deserve my support.
-
cool, any dev who requires that is acting in bad faith against my privacy and doesn't deserve my support.
The problem comes when it's not an app you're using for the app's sake, but because it's the app of some company you have a real-world relationship with. Your bank's app being the most important one that comes to my mind, considering I've already heard about some banks trying to restrict users to only Google's flavour of Android before this.
-
So you can't use banking apps, or you mean like you cant even use F-Droid FOSS apps at all?
Fortunately I haven't had to do this for anything like my bank app or its multifactor code app, but yeah it would be like that. For apps not published on the play store, they continue working.
-
That doesnt appear to be true, the restriction seems to be on apps being installed from file managers, web browsers, messaging, etc.
F-droid and the like are not part of that list.
This still isn't good, but it doesnt stop you from having F-droid manage your messaging apps it would seem.
Edit: If you're down voting because you think its using the same method as a file manager as the user that replied to me, this is incorrect. This is also an issue going back several versions.
F-Droid uses a session installer method for 3rd party app stores, it does not use the same method as a file manager.
For an article about a similar issue brought up by similar restrictions in previous updates, you can refer to this article:
Android 15 cracks down on sideloaded apps even harder to protect users
Android 15 places new restrictions on what permissions sideloaded apps can be easily granted. Here's what you need to know.
Android Authority (www.androidauthority.com)
You can also refer to this thread in the F-Droid forums which covers this as well, from 2 1/2 years ago:
Sideloading restrictions or removal in future, how it effects fdroid?
recently there is rumour or fact about sideloading apps in android 14. google is making mandatory of minimum api or os version for all apps on google play store [ gps ] and perhaps it will give toast message [ warnin…
F-Droid Forum (forum.f-droid.org)
Which also includes a merged discussion from the last time this came up 9 months ago.
F-Droid has been using the session installer method for quite some time.
F-Droid uses the same way to install packages as the file manager does.
-
Purism is sketchy btw:
(Louis Rossman videos explaining how a customer was denied a refund for a "pre-order" and then they tried to coerce Louis to take down the video.)
Edit: typo
Never had an issue with them. Writing from my Librem 5
-
But this is not the only aspect of Google's autocratization; Apps who's developers have enabled the Google Play Integrity APIs will not run on custom roms.
I'm sorry, but in that case, it wasn't worth running the app to begin with. You can either find a third-party app that lets you access the same content, such as Newpipe and YouTube, or you can use it from a web browser, such as your bank, and if you can't do either of those, then just don't fucking use that service.
I was willing to totally switch banks because my previous bank required me to use a mobile app and I did not want to do so. If I must go through some annoyance to use something that works properly, I will.
For me at least, running as much open source as I can possibly do is worth more than the inconvenience caused by not being able to use these shit services.
-
The problem comes when it's not an app you're using for the app's sake, but because it's the app of some company you have a real-world relationship with. Your bank's app being the most important one that comes to my mind, considering I've already heard about some banks trying to restrict users to only Google's flavour of Android before this.
and that's important why? pick a different bank, or don't use the app at all.
I get that some folks think using the app is a requirement. that may be true for some but not all.
don't support shitty services and these companies won't continue to abuse us.
-
Well, both will be unable to install certain types of apps.
Aaaaand now I'm carrying around a laptop again, at least mini pcs are tiny now, maybe a small handheld would do...
if any of this shit hinders me, I'll get a dumb phone and the cheapest iphone available for manditory work-based things and say so-long to being a mobile OS user.
-
In Singapore, lots of boomers are downloading scam apps from facebook lured by promises of discounts and free gifts, handing out accessibility privileges, and they'll even argue vehemently against loved ones and bank staff when confronted. When it all inevitably blows up, they blame absolutely everyone except themselves, including praising Apple for some reason.
Being the largest voting block, they managed to get banks responsible for reimbursing their losses and there was even an idea floated of getting everyone to contribute to a shitty scam insurance fund. Many major banking apps are paranoid af and block usage from simple things like usb debugging turned on.
Absolutely stupidity. And there's nothing we can do about it when the politicians love them so much.
Usb debugging is sketchy as shit. You should almost never turn that on, and immediately turn it off once you're finished with whatever it is you're doing with that on.
-
F-Droid uses the same way to install packages as the file manager does.
F-Droid uses Session Installer, which is an "app store" method.
This is not a new issue:
Android 15 cracks down on sideloaded apps even harder to protect users
Android 15 places new restrictions on what permissions sideloaded apps can be easily granted. Here's what you need to know.
Android Authority (www.androidauthority.com)
-
I'm sorry, but in that case, it wasn't worth running the app to begin with. You can either find a third-party app that lets you access the same content, such as Newpipe and YouTube, or you can use it from a web browser, such as your bank, and if you can't do either of those, then just don't fucking use that service.
I was willing to totally switch banks because my previous bank required me to use a mobile app and I did not want to do so. If I must go through some annoyance to use something that works properly, I will.
For me at least, running as much open source as I can possibly do is worth more than the inconvenience caused by not being able to use these shit services.
I use open source whenever I can, but sometimes that just isn't an option in the real world. I work in IT at a hospital that REQUIRES Duo. I use GrapheneOS. I was able to get it to work, but it was a horrible experience.
-
Usb debugging is sketchy as shit. You should almost never turn that on, and immediately turn it off once you're finished with whatever it is you're doing with that on.
agree completely. But I recently broke my phone screen, the usual Samsung green screen of death, and I wish I had that turned on to copy the data over lol.
-
I use open source whenever I can, but sometimes that just isn't an option in the real world. I work in IT at a hospital that REQUIRES Duo. I use GrapheneOS. I was able to get it to work, but it was a horrible experience.
I’d be telling them to provide a work phone.
-
Aaaaand now I'm carrying around a laptop again, at least mini pcs are tiny now, maybe a small handheld would do...
if any of this shit hinders me, I'll get a dumb phone and the cheapest iphone available for manditory work-based things and say so-long to being a mobile OS user.
I recently started carrying a GPD microPC because of this bullshit.
It's like a very bulky phone. Pocketable but kinda chonk. Thumb typing kinda thing.
But it runs Fedora + gnome with no problems.
My phone is now just for quick stuff and a way to make a WiFi hotspot.
-
The article says it only applied to apps requesting certain permissions. I agree I'm an ideal world it would be nice to get f-droid directly from the Play store but at least according to the article the ability to install it isn't being blocked here.
Allowing fdroid from to come from the play store is NOT a solution by any means. Users should have the right to never touch the play store or agree to googles TOS.
-
This post did not contain any content.
Are they talking about the changes that were made that allow a dev to prevent their app from launching if it fails a Play integrity check?
If so I don’t see that as a big deal since it is up to the dev to use it. OSS devs that want to distribute their app via apk download won’t enable it, and anyone distributing cracked apks will just disable that along with whatever other changes they are making.
-
This post did not contain any content.
The restrictions on apk access over the past 10 years have already been an annoying pita. Many of the best power user apks have had to gut themselves over their original functionality, all while obtaining root access over your owned devices has become harder or next to impossible.
-
The restrictions on apk access over the past 10 years have already been an annoying pita. Many of the best power user apks have had to gut themselves over their original functionality, all while obtaining root access over your owned devices has become harder or next to impossible.
Let them keep those. I hereby declare that if I don't own the thing, I ain't buying it. So no root, no $$$.
