Mishaal Rahman

📢 Important update on sideloading on Android

It’s of course here to stay. The team’s been listening carefully to feedback from power users who want a way (apart from ADB) to install apps that don’t go through developer verification.

Today, we have more details on the advanced flow that gives you this option.

Read the post👇 for more info

https://goo.gle/advance-flow

Android developer verification: Balancing openness and choice with safety

News and insights on the Android platform, developer tools, and events.

Android Developers Blog
Mar 19 at 5:08pmWeb
Show threadMarcus Scott2d ago

@MishaalRahman

"Come back after the protective waiting period and verify: There is a one-time, one-day wait and then you can confirm that this is really you who’s making this change with our ....."

One full day, that's wild. One hour I could see, but one full day?

Show threadAxel Leroy2d ago
@Fumbles @MishaalRahman Imagine setting up a new phone, and having to wait 24 hours to install apps from F-Droid...
Show threadMishaal Rahman2d ago
@axeleroy @Fumbles If you don't wish to wait, installations via ADB will work as usual.
Show threadMarcus Scott2d ago
@MishaalRahman @axeleroy Interesting. That's at least slightly better. One whole day is still way too long imo. Maybe the solution is to meet in the middle and adb could be used to enable sideloading without a wait.
Show threadTorsten Grote2d ago
@MishaalRahman @axeleroy @Fumbles The few people that can do that then may be able to install F-Droid like that and then what? How do they install the apps from F-Droid if they aren't verified?
Show threadTorsten Grote2d ago

@MishaalRahman Can you imagine the average @fdroidorg user going through this to still be able to install those apps? Or even to install F-Droid itself in the first place?

Why not just check user isn't on the phone like for enabling accessibility controls and only apply this to apps with dangerous permissions?

Show threadBenjamin Monjoie2d ago

@grote @MishaalRahman People could be walking you through the process over a call on your computer or a landline. Also, a malicious app could be a fake banking app with only the internet permission.

I'm not too keen on having more frictions to be able to sideload apps, because I'm a power user and I know what I'm doing. But I also understand this could potentially save my less tech savvy relatives from being robbed.

Show threadTorsten Grote2d ago
@Xzan I happen to live in a country that is used as justification and I get these scam calls as well, but landline is not really a thing here anymore and people falling for scams don't have computers to receive calls on.
Show threadBenjamin Monjoie2d ago
@grote Both my mom, my step dad, my mother in law, and sister in law, are very likely to fall for this kind of scam and they all have a computer they can and do receive calls on.
Show threadMikołaj 🏳️‍🌈2d ago
@MishaalRahman now that's annoying.
Show threadDevin Prater :blind:2d ago
@MishaalRahman Can you add alt text to this image on that page? “slide v3 (2).png” https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgDFnydrwIbLJ80C81Gb5lXmnd4nuK9R77M4hJvTw_RePRm5RdpFoNe4YG0DWT_6Hsmq4i3nwtRE7ca-a19hhuM46jZQGUWF7IcOEOknmMlcSE0mXyOmUkUmf3aWeUvWU1mut2IP0IlHYTakGLjahJpeLdQOGBs8Lb8A2QK2sG0Uc1_1DTPUObyGjLpdgU/s16000/slide%20v3%20(2).png
Show threadMishaal Rahman2d ago

@pixelate Passing the message along! For your reference, it says, "Sideloading is here to stay" with a screenshot of a dialog box with two buttons that read: "Don't install" and "Install anyway."

And there's text on the right that says, "Once you confirm you understand the risks, you can install apps from unverified developers"

Show threadDevin Prater :blind:2d ago
@MishaalRahman Thanks so much!
Show threadLyubomir Ganev 2d ago

@MishaalRahman please stop calling it side loading. That is a made up term that is part of the problem. Even the ADB command is called "adb install", not "adb sideload". Refuse the Google propaganda.

Edit: nevermind, just saw you now work at Google. Well, then you obviously can't do what I asked. Oh well.

Show threadMishaal Rahman2d ago
@luboganev I've been using the term sideloading LONG before I joined Google. Maybe over a decade? I'm fine calling it installing, but sideloading is the term that my followers are very familiar with!
Show threadLyubomir Ganev 2d ago
@MishaalRahman in my opinion you've been using the wrong term all this time. Words matter, especially when you have followers. You should consider a change if you can do it without getting into trouble at work. And about the news - seems Android is kind of safe for now. It's a good attempt, and surely protects against scammers, but I don't think we will stay at that for long. Google lost my trust for many reasons and I can't believe this is done only to protect the vulnerable users.
Show threadBacteria2d ago

@MishaalRahman

Few questions:

1) Once I am done with the process, can I disable developer options? Why? Because my bank app doesn't allow Developer Options enabled.

2) Does that mean there won't be any auto-update mechanism for unverified apps?

3) Do i need a google account to go through this process?

Every step reminds me here that I don't own my phone. 🫠

#sideloading #google #android

Show threadTrickster2d ago
@MishaalRahman Now I have to put all these steps on a separate page or section (which is not something I would like to do, as any other writers), in order to guide how to install apps. Is this considered as coaching? Factually it is, but then users can't continue. After all, during 24 hour wait period users will just forget what they wanted to install.
Show threadSanat2d ago
@MishaalRahman will this be exposed to the Google SafetyNet stuff? So is this flag exposed to banking apps so they can randomly decide to stop working because they don't like it?