We need to fight Google's new ID requirement for app developers. It isn't like showing ID at the airport. More like showing it at the printing press and only IDed authors are allowed to print books.
What Google doesn't talk about is that they build this ID system to ban developers and their apps.
People saying "But I use a degoogled custom ROM, so I won't be affected" are missing the point. Apps not on Google Play are already a niche. Banning them on most people's devices is a big issue, even if some people can still escape.
Also the general trend of Google becoming more closed may make even custom ROMs impossible eventually.
Under-reported detail: If you don't pay a fee to Google, they limit how many people can install your apps and how many apps you are allowed to have.
Source: https://developer.android.com/developer-verification/guides/android-developer-console
Google asks what we think of their plans to block Android app installs outside of Google Play (unless the developers let Google verify their identity and pay a fee).
Want to tell them your opinion, just submit this form:
Use this form to submit questions or feedback about the new Android developer verification requirements announced in August 2025. You can learn more about the requirements in the Android developer verification guide. Sign up for early access here.
The documentation also talks about a "developer verification policy" that may allow "the user to bypass a verification failure caused by network issues".
Also, there will be a "lite version of the developer verification", but what this means is still unclear.
Google exec A: "Let's measure public opinion on this"
Google exec B: "Why? We'll still do what we already decided."
A: "So we can set the lobbying and marketing budget high enough, but not too high".
It’s really stupid as well since apparently you can now bring back the “allow apps from… Anywhere” option in macOS sequoia by entering the command ‘sudo spctl --master-disable` in the terminal.
I personally wouldn’t recommend this, but if you hate authority telling you what to install, it’s there.
This policy change feels like an effort by google to maintain their monopoly while still complying in letter with the EUs laws on requiring support for multiple app stores.
Well, EU actually requires them to not gatekeep, which they wouldn't comply with.
@[email protected] I only know that it is linked to at the bottom of this official page: https://developer.android.com/developer-verification
Do i understand it right, that having open source Apps from F-Droid would be no longer be technically possible on an Android phone that is not degoogled (like Murena)?
So you'd only be able to download Apps from Playstore if this becomes reality?
And ANY App developer has to pay a fee to google in order to he "verified" as allowed App?
Which gives Google finally complete controll over the App market on Android side from that day on?
But i would be still able to do sideloading with say a Murena phone?
I doubt that Google will allow sideloading Apps like NewPipe that matter of factly do stuff they don't like, like allowing to watch Youtube with playlists but without showing your own IP.
This plan is complete monopolization to app usage on google and i hope they get sued.
People saying "But I use a degoogled custom ROM, so I won't be affected" are missing the point. Apps not on Google Play are already a niche. Banning them on most people's devices is a big issue, even if some people can still escape. Also the general trend of Google becoming more closed may make even custom ROMs impossible eventually.
At the end of the day there is only solutions to prevent this from becoming reality ( google voluntarily stopping their world domination fantasys is not one of them.)
- legislature stops them to take complete controll over every function the moble phone usage on the Android side
- companies offer their Apps on other stores ( which Google will try to prevent too by telling them: if you do, you will be banned from playstore)
If this is not stopped ny law, google is inavertable.
@grote @v_d_richards So on a phone that is not supported by any 3ed party ROM, ADB uninstalling Google Play Services kills this?
That would work for me, though apps from non-ID uploading devs will not be able to coexist on the same phone with Gapps. That might limit the availability of such apps, though it won't effect anyone writing apps for non-Google Play devices only.
I refuse to allow any part of Google Play into any device containing my contacts, files or any sensitive communications apps
Fun fact: i also entertained that idea.
And maybe from this workaround could stem a niche gadget alternative.
Like:
A phone, that is simple/small like the old ones. You can phone/SMS/take photos on the Device itself ( + some retro snake games and shit) and it can serve as hotspot.
Combined with
A second device between smartphone and tablet size that uses Linux based software that has a simplified surface for easy access to programms like Signal and Co
I rather think it will be PlayStore and not PlayServices. PlayStore contains PlayProtect and currently it can be switched off there. Probably this switch simply will not exist anymore in future.
MicroG /e/OS, LineageOS, Calyx... 📳 Looking for information? A small summary: (...microG is a partial reimplementation of some of the functionality in the Google Mobile Services (GMS) app. Unfortunately, this approach has significant drawbacks. In order to install microG, your version of Android OS needs support for spoofing the cryptographic signatures of apps. Some OSes like LineageOS and CalyxOS allow this. See...) https://news.ycombinator.com/item?id=30170255 (...microG downloads proprietary Google libraries and then uses them...) https://discuss.grapheneos.org/d/10793-clarification-about-microg-what-is-it-is-it-insecure/3 /e/OS is heavily marketed as private but in reality it has enormous privacy issues like this with their default apps and services. It's also heavily marketed as avoiding Google services but yet has privileged integration for Google services and connects to multiple by default. https://grapheneos.social/@GrapheneOS/114880787210183683 /e/OS doesn't keep up with basic privacy or security patches for the OS or browser engine used not only for the default browser but also the WebView used by many apps including email clients and far more for rendering web-based content. For more info see https://discuss.grapheneos.org/d/24134-devices-lacking-standard-privacysecurity-patches-and-protections-arent-private. /e/OS is an extraordinarily insecure and non-private OS. The feature you're talking about heavily misrepresents what it does and doesn't prevent app tracking as it claims. What they provide is a poor implementation of DNS-based filtering to block connections not required for apps to function. The vast majority of privacy invasive behavior is left intact. It's also trivial for apps to fully bypass it for anything they want to do, and many apps do bypass it already. https://grapheneos.social/@GrapheneOS/114881066260884661 Murena is scamming people at a large scale for profit. They're pretending to provide a private OS which is in reality not at all private. We've explained how it lacks the most basic privacy and security. It even sends sensitive user data to OpenAI without informing users, which is far worse than how Apple and Google are handling speech-to-text from a privacy perspective. Contrary to their marketing, it gives extensive privileged access to Google services and always connects to them. https://grapheneos.social/@GrapheneOS/114881101019302892 /e/OS and Murena are scammers causing substantial harm to people through selling them extraordinarily insecure and non-private devices. It's a blatant grift for profit, not a serious attempt to provide people with better privacy or security. They do the opposite of that. @[email protected] We currently support every device meeting the very reasonable requirements listed at https://grapheneos.org/faq#future-devices. The purpose of GrapheneOS is providing people with privacy, not scamming them like /e/OS. https://grapheneos.social/@GrapheneOS/114881674418740613 /e/OS does not provide basic Android and Chromium privacy/security patches without huge delays while misleading users about it. They outright fail to ship huge portions of the patches for many months or even years. They substantially roll back the standard privacy/security model and features too. They aren't doing the bare minimum to protect user privacy and security. They're streaming's people microphone audio to OpenAI without telling them beyond a Terms of beyond https://grapheneos.social/@GrapheneOS/114881915272221151 /e/OS is streaming user's microphone audio to OpenAI without telling them when they use speech-to-text. Meanwhile, Apple and Google at least support doing it locally. /e/OS is misleading users about the many missing privacy and security patches including setting a false Android security patch level and changing the user interface to downplay it. What's that if not having backdoors? /e/OS has repeatedly covered up their security weaknesses and vulnerabilities. https://grapheneos.social/@GrapheneOS/114882333091531816 Here's information from the founder of DivestOS: Issues with /e/OS: https://codeberg.org/divested-mobile/divestos-website/raw/commit/c7447de50bc8fadd20a30d4cbf1dcd8cf14805a0/static/misc/e.txt ASB update history: https://web.archive.org/web/20241231003546/https://divestos.org/pages/patch_history Chromium update history: https://web.archive.org/web/20250119212018/https://divestos.org/misc/ch-dates.txt Chromium update summary: https://infosec.exchange/@divested/112815308307602739 Here's an article from a privacy and security expert (Mike Kuketz) which touches on various issues including severely delayed patches, user tracking in the update client and privacy invasive default connections: https://kuketz-blog.de/e-datenschutzfr https://grapheneos.social/@GrapheneOS/114897292162814250 LineageOS is not a private or secure OS. microG is not a good implementation of providing compatibility with apps depending on Google Play and contrary to many people's misconceptions does not avoid using Google Play code as part of each app using it. We're building our own replacements for Google apps and services with a focus on privacy, security and providing fully comparable functionality and usability. We avoided microG because it doesn't meet our privacy and security standards. https://grapheneos.social/@GrapheneOS/114880999016665611 - eos987
@grote Done.
I do not expect to hear back from them in 5 business days...
Thank you @grote for sharing this.
In addition to telling #Google that locking down #Android is bad, I'd also recommend every app developer to write to the @EUCommission's #DMA enforcement team and tell them that this practically circumvents Article 6(4) of the #DigitalMarketsAct, which was supposed to *enable* 3rd party app (stores).
The EC is discussing the same question with #Apple atm and they have to understand what happens if they let this happen.
Contact form:
https://digital-markets-act.ec.europa.eu/contact-dma-team_en
Good idea, didn't know what the formal process for that was up until now.
Hope that just mentioning the @EUCommission is already enough for them to get active by their own accords especially because this is an ongoing for multiple years by now...
@agowa338 I would certainly love that but I fear the EU Commission's Mastodon account isn't monitored by policy staff. But who knows maybe I'm overly pessimistic :)
Well back then when every company and organisation still were at Twitter contacting their social media accounts used to be the best available form to actually get your point across and have it forwarded internally to the responsible person...
@ilumium @grote @EUCommission
Wrote this:
Google plans to require all developers only being allowed to publish apps through their play store and nowhere else. This to control malware. Which is not the real reason as people get most of malware from the google play store and not via alternate ways.
Many small hobbyist apps will stop existing as those developers even don't have the money to pay google to get verified.
@ilumium
The
@EUCommission responded: "the DMA also permits Google to introduce strictly necessary and proportionate measures to ensure that third-party software apps or app stores do not endanger the integrity of the hardware or operating system or to enable end users to effectively protect security."
So the question is if it is necessary and proportionate.
The Commission has conducted a study on security of mobile devices, and several FS people and projects took part. The initiative was kept under strict confidentiality, but I guess these factors of proportionality and necessity were in scope of the study.