this post was submitted on 19 Mar 2026
98 points (95.4% liked)

Technology

82801 readers
3350 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
top 50 comments
sorted by: hot top controversial new old
[–] mrgoosmoos@lemmy.ca 1 points 1 minute ago

at best this is not losing at this very moment

[–] DonPiano@lemmy.ca 1 points 11 minutes ago

This is a premature April Fool's joke, right?

[–] SomeDudeFromSpace@lemmy.ml 24 points 1 hour ago (1 children)

We will win when nobody can tell you what you can or can’t put in your own fucking device.

[–] invertedspear@lemmy.zip 1 points 29 minutes ago

Counterpoint: my software allows you to access your banking needs. I’m financially on the hook if fraud occurs. Fraud occurs because your favorite “slap the monkey” game also installs a keylogger and network monitor. So I don’t allow my software to work if you have that installed.

I think you’re right that companies should not be able to tell you what software you can run, but users also can’t be trusted to keep their devices safe.

A lot of network, banking, and telephony protocols historically rely on trusting that there are no bad actors in the chain. Technology has added more links to the chain increasing the opportunities for bad actors to tap into it.

It’s a situation that needs better fixes. Maybe we just need to hand the current internet over to the bots and start a new one with security and privacy built in from the ground up.

[–] morto@piefed.social 28 points 2 hours ago (2 children)

So, we will have to enable developer mode for that? How long before banking and government apps refuse to run if you have "sideloaded" apps installed? This will be the same as not allowing the majority of people to sideload. No win in here, just an advanced strategy from google to make us conform

[–] SkavarSharraddas@gehirneimer.de 1 points 20 minutes ago

Yeah, if that process wouldn't need developer mode (or stayed active after disabling it again) that wouldn't be that bad (still annoying). But having to choose between the ability to install apps or use those apps that only work without developer mode certainly isn't a win.

[–] osaerisxero@kbin.melroy.org 5 points 1 hour ago (3 children)

This is already the case if the developer mode toggle is enabled for some. I have to turn it off any time I'm traveling for work because the app we have to use to file expense reports refuses to run with developer mode enabled.

[–] frongt@lemmy.zip 2 points 55 minutes ago

Or if you're rooted, or run something other than your OEM image. I use grapheneos and I'm lucky that my bank doesn't enforce that like some do. I still can't use cards to tap with Google wallet because it's not certified by Google.

[–] HuudaHarkiten@piefed.social 4 points 1 hour ago (1 children)

At that point you should tell your work to get a work only device for you... I always refuse to use my phone for work shit. I used to explain to them why, now I just lie and say my device is too old to have anything installed on it.

[–] osaerisxero@kbin.melroy.org 1 points 56 minutes ago (1 children)

lmao, no arguments here. My boss's phone got bit by the construction site so I think we might finally be getting some movement on that front, at least for anyone who finds themselves in the field doing shit.

For what it's worth, I don't generally mind using my phone for work shit because it's convenient to do so. MDM on android works in a container, so I don't even care about that if they want to implement it.

[–] HuudaHarkiten@piefed.social 1 points 52 minutes ago

Yeah I get the convenience of it.

My dad was complaining out loud to his boss, not requesting anything, just complaining about having to bring two phones with him when he was out and about. So his boss got him a dual-sim work phone lol. The convenience can work out that way as well :)

[–] morto@piefed.social 3 points 1 hour ago

But what if they starting requiring that you remove the sideloaded apps? We're getting trapped

[–] 18107@aussie.zone 4 points 52 minutes ago

The square app will not run on a phone that has developer mode enabled. I turned developer mode on to disable annoying animations, so now I can't take card payments unless I carry around a second phone.

If Google goes through with this, my payment phone won't be able to run any third party apps.

[–] smeg@infosec.pub 20 points 2 hours ago (1 children)
  • enable developer options
  • confirm that you are not tricked
  • restart phone and re-authenticate
  • wait one day
  • confirm with biometrics that you know what you are doing
  • decide if you only want unrestricted installs for 1 week or forever
  • confirm that you accept the risks
  • enjoy the few apps that still have developers motivated to develop for a user-base willing to put up with this
[–] FaceDeer@fedia.io 3 points 1 hour ago

A classic case of making a ridiculously restrictive change, then "walking it back" to a merely semi-ridiculous change and having everyone sigh in relief.

[–] Zedstrian@sopuli.xyz 88 points 3 hours ago (1 children)

Making users wait 24 hours doesn't improve security; it's an anti-competitive change designed to make the Google Play store seem like less of a hassle in comparison.

[–] over_clox@lemmy.world 29 points 2 hours ago (2 children)

I can actually see where it can improve security against scammers trying to scam elderly and non-tech savvy people.

  • Scammer tries to get someone to install malware from their site
  • Victim isn't familiar with sideloading, but scammer instructs them
  • Victim hits the first time 24 hour block and has to restart and wait
  • The restart alone breaks contact with the scammer, scam thwarted

For the rest of us that know our way around Android, it's just a one time annoyance, after completing all the steps to enable sideloading, you won't have to wait 24 hours anymore.

[–] Crozekiel@lemmy.zip 7 points 1 hour ago (1 children)

I'd believe that if most Pig Butchering scams weren't using apps from Google Play already.

load more comments (1 replies)
[–] pennomi@lemmy.world 15 points 2 hours ago (1 children)

It’s going to be effective, but it’s a sad world where you have to create a total nanny state because there exist a subset of users who are INCREDIBLY stupid.

[–] PseudorandomNoise@lemmy.dbzer0.com 7 points 1 hour ago (1 children)

Is it still a subset when it's the majority?

And to be honest, the level of effort scammers are willing to go through is shocking, and AI's just making it easier for them.

[–] ParlimentOfDoom@piefed.zip 4 points 1 hour ago

Anything less than the whole is a subset, yes.

[–] CubitOom@infosec.pub 6 points 1 hour ago

"side loading" == installing

[–] RamRabbit@lemmy.world 53 points 3 hours ago

No we didn't win. This is Google making it harder to install the programs you want, rather than the programs Google wants you to have.

[–] XLE@piefed.social 3 points 1 hour ago

I want an extra day added to the warranty of any device I purchase, as it will be useless during that time

[–] commander@lemmy.world 25 points 2 hours ago

Still worse than it was before. There's no win in that

[–] zod000@lemmy.dbzer0.com 25 points 2 hours ago

This isn't a win, this is Google making things shitty for the benefit of no one but themselves.

[–] org@lemmy.org 13 points 2 hours ago (2 children)

Time for another OS. Android is over.

[–] BennyTheExplorer@lemmy.world 3 points 31 minutes ago

Postmarketos is looking pretty promising right now.

[–] mannycalavera@feddit.uk 1 points 33 minutes ago

The year of the Linux phone is upon us brethren!

[–] Goodlucksil@lemmy.dbzer0.com 2 points 1 hour ago

"Scammers" also exist on the Play Store. Google should start by cleaning it up.

[–] shortwavesurfer@lemmy.zip 5 points 2 hours ago

I haven't read the article yet, but I'm about to. But no matter what, I'm still looking a lot more seriously into Linux on mobile, such as PostmarketOS than I was before.

[–] Rentlar@lemmy.ca 5 points 2 hours ago (2 children)

If the process doesn't include any phone home stuff, and is just a one-time cool off period to prevent scammers, this is acceptable to me. That should be enough to get potential victims to self-question, ask more knowledgeable people of what's going on to avoid being unknowingly hacked, without being naggy everytime for users that want to do what they want.

Making a software "foolproof" will probanly invent a bigger better, fool hoping for some sort of free crypto app jumping through these hoops, but this should weed out most of the basic scams.

[–] Wildmimic@anarchist.nexus 8 points 1 hour ago (1 children)

It still sets your phone in a state that marks it as security compromised. This could lead i.e. to banking apps not working. I'm not so sure about the "acceptable" state of things here.

[–] Rentlar@lemmy.ca 1 points 21 minutes ago

Yeah, I take issue with that, but I don't think it would be used if people complain to banks that reading the flag bricks the app.

[–] gwl@lemmy.blahaj.zone 0 points 53 minutes ago (1 children)

Sounds to me like you're willing to give up liberties in exchange for comforts, that's always a bad idea

[–] Rentlar@lemmy.ca 1 points 36 minutes ago

I tend to favour privacy over big tech control, but I recognize we have to at least consider the cost-benefit of these tradeoffs, to live in a society. Of course I'd prefer a phone with no warnings, no nagging, if you get scammed that's my fault and I will keep my phone that way if it means I will stay off Android 15 and de-Google my next phone. But Google's plan is within the realm of an acceptable compromise to me because sideloading is still available to everyone without registration with Google. Each person will feel differently about it.

Taking your position to the extreme, if trading liberty for comfort is "always" a bad idea with no exceptions, you can turn off your phone and do without the comfort of it. (Only saying this because always is the word you chose to use.) To accept cellular and home internet services to communicate in the public realm requires you to give up some level of privacy, though of course it can be possible to stop a lot of the unnecessary surveillance that happens along with the necessary tradeoff.

[–] db2@lemmy.world 9 points 2 hours ago (10 children)

I don't care if it's android or anything else, the moment my phone does that is the moment I switch to something else.

[–] hark@sh.itjust.works 9 points 2 hours ago

Yup, I got a pixel 10a that I will be putting graphene on as soon as it releases.

load more comments (9 replies)
[–] tabular@lemmy.world 5 points 2 hours ago

Software freedom or demise. While Google is capable of imposing anything then Android is already dead to me.

[–] artyom@piefed.social 5 points 2 hours ago

Its seems fine, other than the whole "coaching" thing. Like, nobody knows how to do this today, so someone will have to "coach" them through it, even if it's Google themselves.

But I would wait and see exactly how it's implemented before calling off the resistance.

Nah, American companies cannot be relied upon by definition. Even if the people running one are fine (and many are), they are still based in what is essentially a pro-crime, pro-corruption jurisdiction.

[–] Bloefz@lemmy.world 2 points 2 hours ago (1 children)

What do they mean reauthenticate after 24h? I can't authenticate as I don't have a Google account. Although I do unfortunately have Google play installed, my phones can't have it removed.

[–] SkavarSharraddas@gehirneimer.de 1 points 27 minutes ago

Whatever you use to login, password / pin / pattern / body part.

[–] webkitten@piefed.social 3 points 2 hours ago (1 children)

You win by disabling software updates at Android 15.

[–] SkavarSharraddas@gehirneimer.de 3 points 2 hours ago

Not if it's implemented in the Google Play Services, then every device will refuse to install unverified apps after the deadline, even if it's not on the newest Android versions.

load more comments
view more: next ›