Google plans to begin verifying the identity of all developers who distribute apps on Android, even if it's outside the Play Store, starting September 2026 (android-developers.googleblog.com)
from Pro@programming.dev to technology@lemmy.world on 26 Aug 07:44
https://programming.dev/post/36341073

cross-posted from: programming.dev/post/36316138

Comments

- Hackernews; - Lobsters.

#technology

threaded - newest

optissima@lemmy.ml on 26 Aug 09:44 next collapse

They’re afraid of more ICE trackers

pdxfed@lemmy.world on 26 Aug 14:19 collapse

Remember, it’s important that technology and advancement only be used by capital, never by the underclass.

notso@feddit.org on 26 Aug 15:45 collapse

Yeah, imagine a world where plebs had control over and ownership of the devices they use… (shudders)

Asafum@feddit.nl on 26 Aug 13:31 next collapse

I’m sure the newpipe devs are going to coincidentally not be allowed to be verified… Oops no YouTube viewer… Ughhh…

altphoto@lemmy.today on 26 Aug 19:18 collapse

Fixed that…remove YouTube!

WhyJiffie@sh.itjust.works on 26 Aug 21:12 next collapse

and how do you explain that to your family? you got off youtube, but they won’t be happy.

altphoto@lemmy.today on 27 Aug 02:38 collapse

Cold Turkey. Screw Google!

TheFrirish@jlai.lu on 27 Aug 06:35 collapse

As a backup I have installed YouTube as a PWA (added to home screen) from Fennec and installed uBlock, YouTube HD and Sponsorblock. It’s good I even get recommendations but not as straightforward as NewPipe

[deleted] on 26 Aug 13:35 next collapse

.

Badabinski@kbin.earth on 26 Aug 14:39 collapse

Lovely, thank you for this. I've left my feedback, and I hope many, many other people do as well.

xcjs@programming.dev on 26 Aug 14:40 next collapse

That is my hope as well.

Poem_for_your_sprog@lemmy.world on 26 Aug 16:05 collapse

All he said was removed by mod? What are you thanking him for?

Badabinski@kbin.earth on 26 Aug 16:53 next collapse

it was a form from Google soliciting feedback on the thing.

Poem_for_your_sprog@lemmy.world on 26 Aug 18:30 collapse

Removed by mod

eleitl@lemmy.zip on 27 Aug 05:51 collapse

Your comment was removed by a mod, fyi.

WhyJiffie@sh.itjust.works on 26 Aug 21:13 collapse

modlog: photon.lemmy.world/modlog?user=1015020

the mod who removed it L3s refers to rule 2, which is totally irrelevant on comments, and in any case it does not apply here:

Only tech related news or articles.

@xcjs@programming.dev mwybe you want to know

avidamoeba@lemmy.ca on 26 Aug 15:32 next collapse

OK, this sounds problematic. I don’t see any obvious language for opting out and it doesn’t seem there’s intent to opt out. There’s probably going to be a dev option to allow it but that would probably still make installing from sources like F-Droid impractical.

WhyJiffie@sh.itjust.works on 26 Aug 21:10 next collapse

there is already a dev option that users need to enable to use fdroid and such, and google wants to change that now. I doubt that they will just add a 2nd dev option, because that wouldn’t change anything.

avidamoeba@lemmy.ca on 26 Aug 22:21 collapse

It’s not a dev option at the moment. It’s a permission setting and it doesn’t require enabling developer options.

WhyJiffie@sh.itjust.works on 26 Aug 22:28 collapse

oh, right, my bad. I so rarely go to that menu that I forgot it.

avidamoeba@lemmy.ca on 27 Aug 01:26 collapse

Yup, makes sense. You do it in the beginning and then you forget about it. Until you change a phone. 😊

eleitl@lemmy.zip on 27 Aug 05:50 collapse

If you want to opt out, use alternative ROMs.

MangoPenguin@lemmy.blahaj.zone on 26 Aug 19:12 next collapse

Their ‘verified’ app store already has tons of fake malware apps being distributed on it, maybe they should clean up their act first.

phoenixz@lemmy.ca on 26 Aug 19:54 next collapse

Whatever the hell I do outside the playstore is none of Googles business and though this too is handwaved away by claiming improved security, we all know this has fuck all to do with security.

This is just again Google being a monopoly and wanting to stay that way by pushing out other developers

I guarantee you that newpipe devs will not be able to get verified, and now Google can block yet another app

Fuck. google. (Also apple and gicrosoft

eleitl@lemmy.zip on 27 Aug 05:49 collapse

If you want improved security, use GrapheneOS.

sefra1@lemmy.zip on 27 Aug 06:14 collapse

You know that not everyone can shell out 400 Euros on a phone, right?

astropenguin5@lemmy.world on 27 Aug 06:55 next collapse

Graphene should be able to run on anything they can run android though? Not sure what you mean

sefra1@lemmy.zip on 27 Aug 07:04 next collapse

What? Graphene OS only runs on Google Pixel devices.

Even ROMs with wider hardware support like Lineage OS only run on expensive devices too (Or very old discontinued ones that you can’t find anywhere and have no firmware or kernel updates).

PieMePlenty@lemmy.world on 27 Aug 07:41 collapse

Run? Probably. Work flawlessly? Questionable. It needs to be built (as with every OS update) for every specific device. The developers only do builds for pixel devices (faq). You can take the source and build it for your device. I have no idea how you’d even begin to do that or what that would entail, but most probably, you’d to be able to add drivers for things like fingerprint sensors or cameras unless you are ok with losing access to some functionalities.

My understanding is that phones are hard to support with one “do all” operating system. Thats why all manufacturers take AOSP and modify it with their own code - specific to each device and make builds for each. A bit different mentality to what we do on PCs, where one build of an operating system will just work everywhere.

eleitl@lemmy.zip on 27 Aug 08:57 next collapse

Buy on sale and used. That’s on par with chinese hardware.

sefra1@lemmy.zip on 27 Aug 09:40 collapse

Tried, but at least in Europe the only cheap pixels I could find were old unsupported ones where the batteries where probably either dead or dying.

eleitl@lemmy.zip on 27 Aug 15:56 collapse

Paid 335 eur for Pixel 7a new last December on Amazon Germany. Not cheap, but GOS was worth it.

shortwavesurfer@lemmy.zip on 27 Aug 10:26 collapse

Then make sure your next device is capable of running linear joes without Google Play services before you purchase it.

These days I do not make a phone purchase without making sure it will run lineage OS first.

sefra1@lemmy.zip on 27 Aug 11:18 collapse

I did my research before buying my current phone, but turned out all phones that could run lineage OS were too expensive, not a single affordable phone was supported. (With the exception of really super old discontinued models that are too slow to even open a webpage and battery past it’s useful life)

shortwavesurfer@lemmy.zip on 27 Aug 11:27 collapse

When I purchased my device in 2023, I purchased the OnePlus Nord N200 5G, which was released in 2021, brand new in the box, because it supported Lineage OS, and I’m still using it today.

It’s because I only charge my phone between 30 and 80%. It still has less than 400 charge cycles on the battery. And so I’m basically using a 4-year-old device as a 2-year-old device and it still works fine with lineage OS.

I also paid $300 for it brand new in the box.

sefra1@lemmy.zip on 27 Aug 11:57 collapse

Unfortunately $300 is still the double if what I’m willing to pay for a phone, I paid 150 for my spyware phone, and while I hate the lack of privacy and freedom such device provides, it does everything I need it to do with the apps from f-droid. I just don’t use it for anything that requires secrecy.

I guess I will just stop updating when the new “feature” rolls out and see what happens.

shortwavesurfer@lemmy.zip on 27 Aug 12:00 collapse

Yeah, I’m not sure just how low of a device you can get and get Lineage OS on it. I know that I generally don’t pay less than about 300 for devices because otherwise they get too slow for my use case.

I definitely don’t need a $700 device or above, but 300 to about 400 is my sweet spot.

Wispy2891@lemmy.world on 26 Aug 22:39 next collapse

I’m praying that there’s a toggle like for play protect

I don’t want an iOS clone

cupcakezealot@piefed.blahaj.zone on 27 Aug 00:01 next collapse

and what happens for trans ppl who live in areas that make it impossible to get a matching id google? fuck off with this "we're protecting you" bullshit

eleitl@lemmy.zip on 27 Aug 05:47 next collapse

Good thing I use custom ROMs.

cmhe@lemmy.world on 27 Aug 07:19 collapse

This isn’t about you.

Also this kind of liberal argument of, ‘The gestapo cannot catch me because I bought skates!’ is stupid and tiring.

eleitl@lemmy.zip on 27 Aug 08:55 collapse

It is precisely about me and a small group of technical users who care about freedom. The rest of the users, that’s strictly their own problem. If the gestapo outlaws skates and I can’t get them on the black market and the society is fine with concentration camps that’s also allright. I’m too old to care.

rdri@lemmy.world on 27 Aug 09:30 next collapse

Is there any explanation why this will be effective? Like, “if we find a malware app, we will do this and that to the author’s personal data, and it will help you in that way” etc.

ExLisper@lemmy.curiana.net on 27 Aug 09:59 collapse

What personal data? They will invalidate this dev’s cert and ban him from getting a new one.

rdri@lemmy.world on 27 Aug 12:40 collapse

Should that help people who were unfortunate to install that malware before the dev is banned? Also how exactly do they hope to identify the dev as already banned if he tries to register again?

ExLisper@lemmy.curiana.net on 27 Aug 12:47 collapse

Should that help people who were unfortunate to install that malware before the dev is banned?

It doesn’t say but it would make sense to check the certs periodically and not just on install.

Also how exactly do they hope to identify the dev as already banned if he tries to register again?

<img alt="" src="https://lemmy.curiana.net/pictrs/image/9aa9da2c-db4c-4114-a633-bdef1fc9d8e7.png">

rdri@lemmy.world on 27 Aug 13:45 collapse

Yeah, how would they verify that uploaded documents are real?

ExLisper@lemmy.curiana.net on 27 Aug 14:02 collapse

How online banks like Revolut do it? How crypto exchanges do it? How Google’s age verification does it? I guess they will do the same.

rdri@lemmy.world on 27 Aug 22:14 collapse

Don’t know about age verification, but revolut and crypto likely require manual review. I can’t imagine google relying on the same process and assuming it will help to deter malicious actors.

cryptix@discuss.tchncs.de on 27 Aug 09:36 collapse

Without play service this won’t get enforced right? Or will graphine os be affected? Its an monopoly power play anyways.

shortwavesurfer@lemmy.zip on 27 Aug 10:25 collapse

Now, any device without Google Play Services will be totally unaffected. Any device with Google Play Services will be fucked.

Scrollone@feddit.it on 27 Aug 16:20 collapse

I regret buying a Pixel.

shortwavesurfer@lemmy.zip on 27 Aug 16:27 collapse

GrapheneOS