Sideloading Android apps will become such a hassle that the practice will effectively die.

  • INeedMana@piefed.zip
    link
    fedilink
    English
    arrow-up
    25
    ·
    15 hours ago

    the company’s analysis found sideloading is responsible for “50 times more malware from internet-sideloaded sources than on apps available through Google Play.”

    Yeaah, sure…

    • piccolo@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      8
      ·
      edit-2
      11 hours ago

      I never heard of grandmas side loading apps… but plenty clicking a link to the playstore and getting all kinds of garbage… 🤔

      • Natanael@infosec.pub
        link
        fedilink
        English
        arrow-up
        3
        ·
        edit-2
        10 hours ago

        All adware bullshit I cleaned from my mom’s and relatives’ phones was from the play store

        • TachyonTele_Esq@piefed.social
          link
          fedilink
          English
          arrow-up
          3
          ·
          10 hours ago

          I just got a new phone recently. Android installes games on your new phone like crazy. It’s not always the users fault now.

    • Kairos@lemmy.today
      link
      fedilink
      English
      arrow-up
      3
      ·
      10 hours ago

      It really depends on how “malware” is defined.

      Also, the sentence is either wrong or outright malicious. “Sideloading is responsible for … from internet-sideloaded sources…”

  • stopforgettingit@lemmy.world
    link
    fedilink
    English
    arrow-up
    88
    ·
    edit-2
    1 day ago

    Something else that I only found out from comments on another thread about this is that once you start the 24 hour timer, you have to allow unverified apps within one hour after the timer stops. If you miss this one hour window you have to wait a full 24 hours again. And it will not give a notification when the 24 hours is up, you need to set your own alarm.

    EDIT: found the thread where others are talking about having to wait an additional 24 hours after missing the one hour window https://lemmy.world/post/51966349/25850937

    To clarify - the one hour window is how much time you have to turn on the setting after waiting the 24 hour timer. As in, you have one hour to push this button. If you miss this window to turn the setting on, you have to request to turn it on again and it resets the 24 hour timer.

    Once you turn the setting on you can select the option to turn it on forever.

    • Zwuzelmaus@feddit.org
      link
      fedilink
      English
      arrow-up
      7
      ·
      22 hours ago

      Once you turn the setting on you can select the option to turn it on forever.

      I have to follow the hilarious procedure only once on each device?

          • adarza@lemmy.ca
            link
            fedilink
            English
            arrow-up
            6
            ·
            10 hours ago

            day 274. fuck it all. i missed it again. i haven’t slept in weeks. i haven’t seen or talked to another person in i dunno how long. i’ve been chained to the radiator next to a power outlet ever since a low battery fucked my chance back on day 47. i’m almost out of the food i can reach from the pantry. the dry pasta isn’t as bad as it sounds. i’ve only chipped two teeth from not waiting long enough for it to soften. it hasn’t rained in a week, so so cup sitting on the window ledge hasn’t been filled. i think a bird shit in it yesterday. the stench from the shit in the corner has finally faded. or perhaps i’ve just grown so used to it it doesn’t bother me anymore.

        • stopforgettingit@lemmy.world
          link
          fedilink
          English
          arrow-up
          3
          ·
          1 day ago

          I’ve corrected you a couple times now because you keep repeating the wrong info.

          The one hour widow is where you have to TURN ON the setting after waiting 24 hours. You will not get a notification for when the 24 hour timer is up, you have to set you own alarm.

          Once you turn on the setting you can have it on indefinitely.

      • stopforgettingit@lemmy.world
        link
        fedilink
        English
        arrow-up
        18
        arrow-down
        1
        ·
        1 day ago

        You are confusing 2 things

        1. After the 24 hours waiting period is up you have 1 hour to turn the setting on or you have to wait 24 hours again to have the opportunity to turn the setting on. This is not noted in any docs, I only heard this from another Lemmy thread where several ppl confirmed this happened to them.

        2. Once you turn the setting on you can select if you want it turned on for 7 days or forever.

        • timochka@lemmy.zip
          link
          fedilink
          English
          arrow-up
          5
          ·
          edit-2
          1 day ago

          I just tested it - well, rather, 26 hours ago I did. And I was just reminded and went “shit, have I missed the 1hr window.”

          But evidently not. I went back and it said I now have until this time tomorrow to turn it on. So there is a second timer, but it’s clearly more than 1hr - maybe 24hr.

          ETA: FML, it’s late; I’ve just realised it’s Friday already (hey, it’s 2am). And now I’m not sure, I think it said “you have until 2.20am Friday…”, in which case yeah, the second window is short, but maybe 2 hours not 1 (it was roughly 12.20am Thursday that I hit the button.)

        • Cris_Citrus (he/him <3)@piefed.zip
          link
          fedilink
          English
          arrow-up
          2
          ·
          edit-2
          1 day ago

          Ohhhh, I was misunderstanding you

          I’m just gonna delete my comments cause now your comments make very clear what the correct understanding of how it works is. Sorry for all the clutter I just stress a lot about misunderstandings, it’s a social anxiety thing 😅

          Thank you for correcting me!

    • TheMadCodger@piefed.social
      link
      fedilink
      English
      arrow-up
      4
      ·
      1 day ago

      Can confirm. I restarted the phone and waited for the 24 hours to be over. Forgot about it because it was a day later and life. By the time I did remember it was too late and I had to restart the phone all over again. So stupid.

    • guillem@aussie.zone
      link
      fedilink
      English
      arrow-up
      5
      ·
      1 day ago

      On Zdnet it says “Now the user is ready to install apps from unverified developers, and they’ll also have the option to enable the approach for seven days or allow it indefinitely.” What I understand is that it’s a one-off thing, am I missing something?

      • stopforgettingit@lemmy.world
        link
        fedilink
        English
        arrow-up
        8
        ·
        1 day ago

        I just did it. After the 24 hour timer you have to answer a question - turn this on for 7 days or turn it on forever. If you turn it on Forever its one off. I assume if you do t for 7 days only you have to go thru the 24 hour waiting period again if you want to turn it on again.

      • stopforgettingit@lemmy.world
        link
        fedilink
        English
        arrow-up
        5
        ·
        edit-2
        1 day ago

        I just did this, I can confirm that turn on indefinitely option exists. If it works like they say it works? 🤷‍♀️

        I selected it when I turned this on today, I can check back in 8 days and let you know if it turned off

  • CerebralHawks@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    26
    arrow-down
    1
    ·
    1 day ago

    Every savvy user will make this the first thing they do on a new Android phone.

    As an iPhone guy — say what you will about my savviness — it’s the first thing I’d do on a new Android phone.

    But I don’t want a Pixel, I want that new Fairphone. In green. I just don’t have $650 laying around to piss away on a phone.

  • guillem@aussie.zone
    link
    fedilink
    English
    arrow-up
    17
    ·
    1 day ago

    This mechanism, which Google calls Advanced Flow, won’t be part of the open-source element of Android, but will instead form part of the closed-source, proprietary Google Play Services platform.

    Graphene is safe for now, then, right?

    • shortwavesurfer@lemmy.zip
      link
      fedilink
      English
      arrow-up
      16
      ·
      1 day ago

      Yes, anything without Google spy services, aka play services, will be fine.

      And even if you have Google spy services installed on graphene, it is in user mode, not admin mode, so it can’t control that.

    • DarkSirrush@piefed.ca
      link
      fedilink
      English
      arrow-up
      7
      ·
      1 day ago

      Pretty sure graphene explicitly stated they would never allow it to affect them, and they don’t ship the closed source parts of google’s android stuff.

      No idea if it will affect installing google play apps on a graphene phone though

  • IDew@lemmy.zip
    link
    fedilink
    English
    arrow-up
    12
    ·
    edit-2
    16 hours ago

    Can it be bypassed by setting the phones date ahead of time? It works on Samsung devices that force you to wait 7 days to unluck the bootloader