cross-posted from: https://jlai.lu/post/24787719

Starting next year, Google will begin to verify the identities of developers distributing their apps on Android devices, not just those who distribute via the Play Store.

  • StarlightDust@lemmy.blahaj.zone
    link
    fedilink
    arrow-up
    0
    ·
    2 months ago

    While I won’t tell people exactly what to search, I can guarantee that I can find malware first try on Google Play. Google Play Integrity is just as dodgy.

    • floofloof@lemmy.ca
      link
      fedilink
      arrow-up
      0
      ·
      edit-2
      2 months ago

      When a preventative measure very obviously won’t solve the stated problem, that may not be what it’s really there to solve. This is another of Google’s anti-open-source moves designed to bring all Android devices entirely under their control and surveillance. It goes along with their bringinh all Android development in house and making it harder for third parties to make their own custom versions of Android (Graphene OS etc.). It also seems a little odd that this happens right when several countries are introducing requirements that users supply ID to visit websites.

    • aurelar@lemmy.ml
      link
      fedilink
      arrow-up
      0
      ·
      2 months ago

      Apparently they’re doing it to comply with the EU’s Digital Services Act. But they’re doing it in the USA too.

  • Wrrzag@lemmy.ml
    link
    fedilink
    arrow-up
    0
    ·
    2 months ago

    Is this just a signature check when installing? Could it be bypassed by getting your dev cert and just signing everything you want to install? Things like obtainium and fdroid could even have a “load your own cert” option and automate this.

  • apfelwoiSchoppen@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    2 months ago

    Wish we lived in a world where open source was funded even at a single percentage of what this oligopoly pulls in each year. We’d have a viable alternative to the duopoly by now.

    • smiletolerantly@awful.systems
      link
      fedilink
      arrow-up
      0
      ·
      2 months ago

      Baby steps: I wish it was mandated that any software receiving even a penny in public funding must be open source down to the last byte.

  • ScoffingLizard@lemmy.dbzer0.com
    link
    fedilink
    arrow-up
    0
    ·
    2 months ago

    My personal favorite is how they are doing it to prevent data theft and malware. All they have ever done is trick people out of data. All of their shitty apps that I can not remove from my Samsung phone ARE the malware I do not want. Fuck Google and every person that works there!

  • ScoffingLizard@lemmy.dbzer0.com
    link
    fedilink
    arrow-up
    0
    ·
    2 months ago

    For fucks sake, let’s find out what Fairphone needs in the US to be used with other services and create a gofundme for them to get it. Goddamn I am beyond sick of Google’s shit right now. It is constantly a nightmare to get around their bloatware and deal with the rest of the surveillance nightmare on a daily basis. Fairphone works on T Mobile but they suck!

  • ☂️-@lemmy.ml
    link
    fedilink
    arrow-up
    0
    ·
    edit-2
    2 months ago

    yup, they are closing in. i wonder why the surveillance wing of the fascist regime wants to control everyone’s digital life that more tightly.

    you guys may have the power to protest this before it goes worldwide. i wonder if there will be real pushback.

    • SugarCatDestroyer@lemmy.world
      link
      fedilink
      English
      arrow-up
      0
      ·
      2 months ago

      It is unlikely that there will be a real resistance, the majority will resign themselves like submissive cattle and only a few will try to fight to the end, I have already seen this in history.

    • Echedelle (she/her)@lemmy.blahaj.zone
      link
      fedilink
      arrow-up
      0
      ·
      edit-2
      2 months ago

      I mean, some of us did when GrapheneOS and folks started to bootlick goolag for their walled garden in pro of security as well as the economical breach they did not cover (Pixels are not available to everynyan) and even incentivated.

      Yet here we are again.

  • tomenzgg@midwest.social
    link
    fedilink
    English
    arrow-up
    0
    ·
    2 months ago

    I’m probably going to spam this around a bit, since most people don’t seem to know about it, but a reminder that FuriLabs has a (GNU+)Linux phone with decent spec.s and the ability to run Android app.s (from what I’ve heard) pretty decently: https://furilabs.com/

    Biggest drawback is it’s based on Halium. Usual growing pains of a new product/company apply but apparently the company is pretty responsive and their dev.s have worked with customers to get things like calling working with the carrier and bands of their country where it hasn’t worked before so improvements move pretty quickly.

    Collection of different experiences I’ve variously seen online over the last year or so:

    I don’t own one, myself, so I can’t give any personal experience but I’ve seen it around for a few years now but most people don’t seem to even know about it. Maybe there’s a reason for that? But none I’ve ever seen anyone say.

    • Revan343@lemmy.ca
      link
      fedilink
      arrow-up
      0
      ·
      2 months ago

      With a microSD slot and a 3.5mm jack, too. I’m just gonna go ahead and save this

    • root@aussie.zone
      link
      fedilink
      English
      arrow-up
      0
      ·
      2 months ago

      Why does every interesting / unique phone have to be phablet sized. ;(

        • root@aussie.zone
          link
          fedilink
          English
          arrow-up
          0
          ·
          edit-2
          13 days ago

          Still too big for me to comfortably use and carry around, unfortunately.

          • tomenzgg@midwest.social
            link
            fedilink
            English
            arrow-up
            0
            ·
            12 days ago

            That sucks; if I hear anything about any decently-operating Linux phones of reasonable size, I’ll try and let you know.

  • utopiah@lemmy.ml
    link
    fedilink
    arrow-up
    0
    ·
    2 months ago

    Time to fund /e/OS GraoheneOS etc but also bridges like Waydroid until we can use e.g. PmOS and avoid Android altogether.

    • rezad@lemmy.world
      link
      fedilink
      arrow-up
      0
      ·
      edit-2
      2 months ago

      Time to fund /e/OS GraoheneOS

      no.

      those are just android with some modification. two years from now google can easily disrupt them too.

      phones need a copyleft new OS. not a foss one, an actual copyleft one. with an independent group managing it.

      an OS that a company can decide what app I can run on it is just a surveillance apparatus gadget.

      google never wanted user to have control of their phone even 10 years ago.

      the easiest way to check this is to see if you can stop an installed app to ever do stuff without you explicitly opening it. they are so many “triggers” that apps can register and run based on them that user cant do anything about them. “wifi connected” “wifi disconnected” and so on.

      if an app can “listen” to these triggers and I cant disable it from listening to them (even for non-system apps) them I don’t really own my phone. then android is just a attention stealing spam machine at best and spying and terror gadget for world’s supremacist regimes too.

      I think even apple iOS has that option (disabling backgournd refresh per app ) and in that regard is better than android. If I wasn’t against non-foss software and I didn’t live in Iran, at this point apple iOS is not that different fro google and is more polished too.

      • utopiah@lemmy.ml
        link
        fedilink
        arrow-up
        0
        ·
        2 months ago

        Sure I’d support that, is there such a project or starting one? If not what’s the closest?

  • Echedelle (she/her)@lemmy.blahaj.zone
    link
    fedilink
    arrow-up
    0
    ·
    2 months ago

    Is sad that PinePhone are inaccesible in a lot of places. They dont send where I live because they use DHL (shitty service which charges 34 euros to send from the capital city to where I live because is “remote area” despite is the city in the airport and is nearer than the capital city) and the pricing was 1.5 times the price of the product so they cancelled the option (as well as they dont know the different custom that may exist in special zones in the same country).

      • Echedelle (she/her)@lemmy.blahaj.zone
        link
        fedilink
        arrow-up
        0
        ·
        2 months ago

        The provided (Pine64) could just use a different shipping company for those cases, such as Seur which is more reilable and fair than DHL. Yet they hold themselves in that.

      • Echedelle (she/her)@lemmy.blahaj.zone
        link
        fedilink
        arrow-up
        0
        ·
        edit-2
        2 months ago

        Those proxy services usually do not target custom stores (Banango and Guanxe Prime).

        Also, it leaves you unprotected if something is bad with the goods, as the return parcel ticket targets the initial destination.

  • Zerush@lemmy.ml
    link
    fedilink
    arrow-up
    0
    ·
    2 months ago

    The terrible risk that you install apps which don’t use google-tagmanager, googleanalytics and don’t send logging and user data to Alphabet.