91

If I am already using a rooted but proprietary smartphone (Samsung Galaxy S23), downloading my apps from other sources than Google Play, how would Google be able to control what I do with it? If necessary, I could just stay on my current OS build as well. All in all, while politically and philosophically, Google's new policy is bad, I don't feel threatened by it with my current understand of the situation and technology...

top 21 comments
sorted by: hot top controversial new old
[-] circuscritic@lemmy.ca 39 points 1 month ago* (last edited 1 month ago)

They reversed course, so it's not an immediate issue.

But to answer your question, they would have provided an OS update to only allows app installations from verified developers, no matter the source.

To get verified developers have to submit identification to Google and go through a Google process.

So it wouldn't matter if the install source was a third-party repo, or Google Play, the system would not have installed any applications not signed by a Google authorized certificate.

That becomes very problematic because it gives Google the ability to restrict applications outside of the Google Play Store ecosystem.

They were copying Apple's playbook from the EU wherein Apple was legally mandated to allow third-party app stores, and in response Apple required all apps to be signed by an Apple verified developer certificate, no matter the repo.

And wouldn't you know it, Apple either revoked or would not provide certificates to developers of apps Apple didn't like, such as BitTorrent clients.

[-] INeedMana@piefed.zip 21 points 1 month ago

They reversed course, so it’s not an immediate issue.

I'm not convinced yet

Some article as I can't find my Xitter password to see the source

designed an "advanced flow" for installing unverified apps. This new system is specifically intended for developers and power users who have a higher risk tolerance and want the ability to download unverified apps.

It is not a casual toggle. The advanced flow is built to resist exploitation. The company emphasizes that the flow is designed to resist coercion, ensuring users aren't tricked into bypassing safety checks under pressure from scammers. Social engineering often walks victims through dismissing every warning on screen, so Google is adding friction that fights back.

That can very well mean we'll be compiling everything by hand and sending it via USB app by app

[-] circuscritic@lemmy.ca 8 points 1 month ago

I don't necessarily disagree, but the fact they walked back the original policy because it was so unpopular leads me to believe they are trying to save face by implementing a PITA way of enabling unknown sources, such as through ADB.

The reason why I suspect that is because even with the original policy change, they were still going to allow unsigned apps to be installed via ADB.

But I guess we'll just have to wait and find out.

[-] INeedMana@piefed.zip 3 points 1 month ago

I think they got afraid such strict policy would put wind in the sails of Linux Phone initiatives

But I might be jaded

[-] WhyJiffie@sh.itjust.works 6 points 1 month ago

I don't think so, shareholder driven companies don't think long term

[-] ScoffingLizard@lemmy.dbzer0.com 2 points 2 weeks ago

I think you're more overly optimistic regarding the amount of concern and knowledge of the general public. I have never met a single person that cares about privacy and alternative phone issues, and I've been complaining nonstop.

[-] INeedMana@piefed.zip 2 points 2 weeks ago

But the opposite would mean some point did make them go about their sense. And for me that is even more unrealistically optimistic

Hence "I might be jaded"

[-] bl4kers@lemmy.ml 2 points 1 month ago

I'd argue it's already a small minority of users. Any change is very likely to be negative

[-] WhyJiffie@sh.itjust.works 4 points 1 month ago

That can very well mean we'll be compiling everything by hand and sending it via USB app by app

I think USB/ADB installation would have been allowed in their plans even before they reversed course

[-] emotional_soup_88@programming.dev 5 points 1 month ago

Right, then I'll just stay on my current build, being careful not to flash an OS update 😈

But in all seriousness, couldn't one manage without OS updates - relying on only proper cyber hygiene and opsec - until a more viable solution comes up? 🤔

[-] Sir_Kevin@lemmy.dbzer0.com 7 points 1 month ago

couldn't one manage without OS updates - relying on only proper cyber hygiene and opsec - until a more viable solution comes up?

That's been my plan. I just replaced all my android devices with new (to me) devices which are all unlocked, flashed/degoogled and rooted.

I should be good for 5+ years. Hopefully by then the community has come up with a solution to whatever bullshit google has done.

[-] Zak@lemmy.world 15 points 1 month ago

Google has partly backed away from this plan, and it was only announced for "certified" Android devices, which yours isn't after rooting.

It does affect you indirectly though. If open source on Android gets harder, fewer people will do it.

[-] INeedMana@piefed.zip 12 points 1 month ago

From what has been explained to me in some other posts, the issue is that most probably this will land on AOSP level from which all de-Googled androids fork. And with Linux phones not quite ready yet (I'm observing https://liberux.net/ though) that leaves us at their mercy

[-] specialwall@midwest.social 7 points 1 month ago

De-Googled forks of Android would have just reversed that limitation

[-] markz@suppo.fi 6 points 1 month ago

Reversing malicious changes is an extra burden. Google has been slowly making everything worse for years and the forks haven't been able to do much about it.

[-] ScoffingLizard@lemmy.dbzer0.com 1 points 2 weeks ago

In have e/OS on the Fairphone 6 that comes degoogled. It's great. I was pissed that microG had calls home, but I just uninstalled it and everything is fine. Most people probably need MicroG for banking, purchases, etc. It could probably harm their sales to not include it. Even if I didn't delete it, there are so many security layers in this thing and so many obfuscation efforts that I don't know that it matters. I use NextDNS and deny all Google queries too. So at this point, my battery life is so good that I now am even more alarmed at how many resources are used by corporate bloatware and malware. I still had 97% battery at the end of the day recently. Previously, I frequently charged during the day.

[-] INeedMana@piefed.zip 3 points 1 month ago

I'm guessing that maintaining such forks would be prohibitive. Especially since they do have resources to play cat and mice

But I don't really know much about Android code, I'm just relying what I've heard

[-] emotional_soup_88@programming.dev 4 points 1 month ago

LOL AdAway blocked liberux.net wtf😂 but thanks! The specs are surprisingly good too! :O

[-] MasterBlaster@lemmy.world 4 points 1 month ago

Looks nice, but I tried this sort of thing with the FXTec Pro, and never received it. After 4 years, they announced the last ones going out, and they apparently "lost" mine. Contacted them and their response was equivalent to a shrug. Next time I buy a product, it's going to be verifiably on sale publicly.

[-] INeedMana@piefed.zip 2 points 1 month ago
[-] MasterBlaster@lemmy.world 2 points 1 month ago

Hmmm. I'll take a closer look.

this post was submitted on 28 Nov 2025
91 points (98.9% liked)

Privacy

44365 readers
250 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 6 years ago
MODERATORS