Did we win? - Lemmy.zip

Lemmy

Making users wait 24 hours doesn’t improve security; it’s an anti-competitive change designed to make the Google Play store seem like less of a hassle in comparison.

I can actually see where it can improve security against scammers trying to scam elderly and non-tech savvy people.

  • Scammer tries to get someone to install malware from their site
  • Victim isn’t familiar with sideloading, but scammer instructs them
  • Victim hits the first time 24 hour block and has to restart and wait
  • The restart alone breaks contact with the scammer, scam thwarted

For the rest of us that know our way around Android, it’s just a one time annoyance, after completing all the steps to enable sideloading, you won’t have to wait 24 hours anymore.

Lets be real though, currently they already have to blow through 4 other warnings about installing unsigned APK and enabled the browser or file manager to be able to install applications. It’s almost certain if they are that far deep/commited, they are going to call the scammer back if the scammer left a number.

Yes this might allow for a time delay where the scammers number could be disabled if reported by enough people, or someone else to be like “yo this is a scam” if they mentioned it but, I don’t think this is as secure as they are saying it will be. The target audience for this is very unlikely to be thwarted by a time delay. Plus, the scammer will make some excuse about how the warning is just a safety percaucion and doesn’t need to be followed as this is a normal usage of the toggle, and then have them call back after the delay is done.

For clarification: the target audience doesn’t know about the scam, and all they care about is that someone is seemingly willing to assist with an issue or problem they have. Said person knows the solution and they just have to wait for the timer to be done to be able to do said solution. They have no reason of telling others about it (unless they were complaining about googles time delay) as they already got someone who is seemingly able to assist.

Honestly, having to have the user type “I agree that I have verified the application i am trying to install is genuine and not a fraudulent app” or a listbox of checkmarks to toggle in order to enable it would be far more efficient for this case.

Hell take the example image the article on the dev page has and make it into toggles instead and it would work far better than a timer does.

Honestly, having to have the user type “I agree that I have verified the application i am trying to install is genuine and not a fraudulent app”

Yeah, this would be the most promising approach IMO. Whenever I was forced to write something, I did pay more attention to what that said than if I ticked a box next to it.

Maybe even have them write “I am not instructed to install this app by someone else. I am aware that following instructions to install an app this way often have fraudulent intentions”.

(Also if the language was changed recently, it should ask to write it in all languages that were set within the last 14 days or so. Otherwise the scammer will have them switch the language so they don’t understand what they’re writing)