"Sideloading" is the rentseeker word for "being able to run software of your choosing on a computing device you purchased". There is no reasonable case for an operating system developer having a say over what programs you run on your hardware.

#Android #Google

in reply to Eugen Rochko

I agree in spirit, but man... Its only 50% rentseeking... My elderly parents and computer illiterate siblings and coworkers would get in trouble fast if they weren't constrained by 3 software platforms: mint software manager, android play, and MS whatchamacallit. I have pounded it into their heads: never download software candy from strangers. (I live in an anti-apple pocket of the world)

But then, i guess all three of those do let you do your own thing to varying degrees.

in reply to Eugen Rochko

the review process at Google can be a PITA, but for a good reason. Permissions to access more than an app really needs can be exploited for harvesting private information on a seemless update that most won't even notice. Side loaded apps downloaded from say APK mirror can have been tampered with using smali edits and you won't know. What Google should do is certified dev signing keys to trace and confirm if an APK is legit or not and coming from the actual dev, regardless of being side loaded.
in reply to Eugen Rochko

I'd argue there's a critical reason besides rent-seeking: security.

It's a genuine conflict between user rights and the need to protect the average person. Phones hold our banking apps, 2FA tokens, mics, cameras, and countless secrets.

When a sideloaded app steals data, the user doesn't say, "My sideloaded app failed." They say, "My Android/iPhone got hacked." The OS developer takes the blame.

Android's approach—allowing it, but behind a clear security warning—seems like a decent compromise in this difficult balancing act.

in reply to Eugen Rochko

I agree: if someone buys a "computer" or a general purpose device, your point certainly holds.

But on the other side of a fine line I imagine (perhaps older) game consoles: when the original Nintendo came out, that company was not expected to help you run Atari software on their hardware.

They'd not prevent it - if you could figure out it, good on you. But Nintendo shouldn't be expected to make that work.

Not-supporting versus actively-preventing is the key difference for me.

This entry was edited (6 months ago)
in reply to Eugen Rochko

As someone who developed operating systems for 50 years I know that there are reasonable cases; but, as none are relevant to Google’s latest behavior, I will not elaborate.

Since a mobile device is mostly a general purpose system you should be able to run any software that doesn’t violate laws and it’s not the OS vendor’s responsibility to enforce laws except those regulating the radios in the device.

in reply to Eugen Rochko

It is known that sideloading is a real risk for most of Android users*

*The bad guy comes to your home, enable ADB debug, you let him connect your phone, you give him your pin, you let him few moment to load a naughty apk (bring coffees) and VOILÀ ! 🔥

BTW I had today to clean a fully stock up to date Android (you even can install bank app on) because of a "legit" Play Store bloatware setup'd lots of other adware apks 👍

in reply to Eugen Rochko

This list of replies is a hilarious string of people pretending that they’ve never looked at someone’s Windows machine *so completely fucked up with malware and viruses that the owner just blithely clicked on and installed* that the only solution was to nuke it from space and *buy a whole new computer*

For a good fifteen years the number one reason for tossing perfectly good hardware and buying a newer Win PC was virus/malware infestation. Might still be, I have no idea.

This entry was edited (6 months ago)
in reply to Eugen Rochko

Especially as this newest move of Google is redundant: play protect is already built in all Google play services using phones.

It already flashed and remains suspicious Appa and known malware from all sources.

So how exactly is locking down the signing keys for apps that are allowed to run at all and connecting them with government ID for developers helping security?

This purely an anticompetitive measure.

This website uses cookies. If you continue browsing this website, you agree to the usage of cookies.