"Sideloading" is the rentseeker word for "being able to run software of your choosing on a computing device you purchased". There is no reasonable case for an operating system developer having a say over what programs you run on your hardware.
@Gargron I think this just became so acceptable and the inertia from the consumers just allowed both Apple and Google to do pretty much what they please..
@Gargron I agree in spirit, but man... Its only 50% rentseeking... My elderly parents and computer illiterate siblings and coworkers would get in trouble fast if they weren't constrained by 3 software platforms: mint software manager, android play, and MS whatchamacallit. I have pounded it into their heads: never download software candy from strangers. (I live in an anti-apple pocket of the world)
But then, i guess all three of those do let you do your own thing to varying degrees.
@Gargron Google is actually brilliant here. Unlike Apple, they don't need to manufacture all the devices. They can just create a software walled garden on anything running their OS.
@Gargron I like Samsung's Auto Blocker. It runs my phone in pure mode with everything locked down and secure. But with flip of a switch and fingerprint scan, I can use Dev tools or sideload apps. Then flip it back and all of it still works. I'd be furious if this was the only way.
@Gargron IMO the only long-term solution to this is Android getting completely separated from Google. The "annoy users into submission" approach they take with Play Protect right now is already very much overstepping.
@Gargron Those who make these decisions have goals to make as much profit as possible. And in fact we get a regression. Debian is the friendliest system for civil society.
@Gargron This list is a hilarious string of people pretending that they’ve never looked at someone’s Windows machine *so completely fucked up with malware and viruses that the owner just blithely clicked on and installed* that the only solution was to nuke it from space and *buy a whole new computer*
For a good fifteen years the number one reason for tossing perfectly good hardware and buying a newer Win PC was virus/malware infestation.
@Gargron Especially as this newest move of Google is redundant: play protect is already built in all Google play services using phones.
It already flashed and remains suspicious Appa and known malware from all sources.
So how exactly is locking down the signing keys for apps that are allowed to run at all and connecting them with government ID for developers helping security?
@Zergling_man@Gargron There is https://replicant.us/ which hopefully won't implement such restrictions (unfortunately it seems to implement he restriction of apks requiring whatever signature to install - which makes some apk edits a pain in the ass).
@Gargron counter-point: run your software outside this rentseekers sandbox then. it’s absolutely a bad look for them if something happens to you while in their ecosystem (randsomware, malware, identity theft, etc.)
just because you own the physical memory registers doesn’t mean you’re ever making use of them without this rentseekers work and IP.
@Gargron exactement , a croire qu'ils veulent tous faire des systèmes totalement fermé et intrusifs. Je me demande parfois s'il ne cherchent pas a dévelloper le hacking autour de leur Os ..
@TrimTab@Gargron Yes, people seem unable to keep in mind two things at once: 1. Apple and Google are somewhat protecting users by locking them in to “approved” apps. 2. By financially placing themselves between the users and the apps, their incentives are in the wrong place, which hurts users.
> s a genuine conflict between user rights and the need to protect the average person.
No, there isn't. The average person needs to be protected FROM google.
> Phones hold our banking apps,
The banking apps themselves, which are proprietary to a one ARE what users need to be protected against. Users should be able to access crypto from their phones
> mics, cameras,
Which on modern hardware (such as https://puri.sm/ librem5 ) you can physically turn off
> and countless secrets.
And giving all your countless secrets to some proprietary malware vendor like google /samsung is not the answer.
> 2FA tokens,
there is no 'conflict' here. Keeping 2FA tokens contained enough that the user & only the user has access to them isn't something that sideloading does a damn thing about either way
@Gargron I'd argue there's a critical reason besides rent-seeking: security.
It's a genuine conflict between user rights and the need to protect the average person. Phones hold our banking apps, 2FA tokens, mics, cameras, and countless secrets.
When a sideloaded app steals data, the user doesn't say, "My sideloaded app failed." They say, "My Android/iPhone got hacked." The OS developer takes the blame.
Android's approach—allowing it, but behind a clear security warning—seems like a decent compromise in this difficult balancing act.
Ma and Pa _need_ some form of sandbox. Sandboxing should be optional. But some form of sandboxing should exist when non-tech people will use computers.
> that the only solution was to nuke it from space and *buy a whole new computer*
Installing GNU+Linux was *always* a better solution to that, until very recently (ie until the hidden low-level proprietary software layer / BIOS's made that less effective at removing the malware)
the problem was ALWAYS proprietary software frustrated the user's ability to understand what was going on, provide depth in defence and so on. The 'people installing viruses problem on windows' was ALWAYS about users not actually having control over the computer enough to do what they needed to do / understand programs they were running. "Running all executables" is a form of learned helplessness fomented BY the likes of microsoft because all of *their* executables are malware/black boxes too and so they *couldn't* teach users to not use them
@grishka@Gargron It's not just 'annoy users into submission' it's 'keep users from having control over the platform/rebuilding the OS'
this is important to keep in mind, since if it were mere annoying prompts, if users had the ability to change the control flow of app installation (ie if they had the source code and an ability to build/run their modified build -- ie the 4 fundamental freedoms, this would be fixed very quickly given how many are annoyed by this particular antifeature)