This is Android's new 'advanced flow' for sideloading apps without verification, includes one-day waiting period

https://lemmy.ml/post/44733788

This is Android's new 'advanced flow' for sideloading apps without verification, includes one-day waiting period - Lemmy

Lemmy

A one day wait period to install an app on your mobile pocket computer. Fucken bullshit.

It appears that the “security wait” will be a one time thing when you first allow installing from unverified sources. After enabling it it will remain on indefiniately.

Not quite as bad as I was fearing, but will kinda annoying.

“Not quire as bad”? My dude, you have to ask for permission from a corporation to installa an app on your phone that you supposedly own and paid for. On what planet is this not awful?

It looks like a glorified ‘developer mode’ switch that has the 1 day wait to prevent someone from grabbing your phone, turning on sideloading, installing some hazardous app, and then having their way with your info. This appears to be the best of both worlds.

Like when unlocking your bootloader wiped your info. Just do it first. not a year in to using your device, if thats your plan.

If they’re already into your phone there’s so many legitimate ways to extract your data. The ability to sideload an app won’t impact that.
Technically installing an app allows continuous spying instead of one-time offloading. It’s an actual consideration with spyware like Pegasus: it might’ve been used as a bug to listen to offline conversations.
The OS is the spyware, they’re ensuring you cannot remove it.
10 years ago I would have called that a stretch. After Windows 11, there is no doubt that Windows is spyware.

What % of users side load apps vs what % of users had someone else install a bug on their phone?

It’s a situation that statistically doesn’t happen, and now every legitimate user is being inconvenienced to stop it? This if like agree verification laws being sold as “protecting children” as an excuse to spy on and control people.

Oh really, so the Pegasus attacks on Galina Timchenko and dozens of other people, including Jamal Khashoggi, never happened?

Google could’ve implemented better measures to circumvent bugging, like iPhones’ ‘lockdown’ mode, but claiming that infecting with spyware never happens on Android is plain disingenuous and idiotic.

The Pegasus spyware attack on Meduza

Meduza speaks to Access Now tech-legal counsel Natalia Krapiva and Citizen Lab senior researcher John Scott-Railton about the Pegasus spyware attack on Meduza co-founder and CEO Galina Timchenko.

Meduza
“statistically doesn’t happen” is not equivalent to “has never happened”. It means the number of times it has happened is such a statistically insignificant % of the user base that it does not pass the smell test for being the reason to inconvenience every user.
That’s nice. Now please evaluate the statistical utility of the CEO of an independent opposition-aligned media outlet, like Galina Timchenko, or journalist like Jamal Khashoggi, against an average phone user.
Perhaps a CEO of an independent opposition-aligned media outlet should be using more strict security measures far above what is necessary or even accessible to an average phone user.
Oh indeed, all journalists around the world should receive NSA training, then no regular user would ever suffer inconvenience to ensure their security: they would simply be cannon fodder for the police tracking their location around the clock.
The average user does not need the same level of device security and lock down as a CEO of an independent opposition-aligned media outlet. It’s absurd that you seem to be arguing otherwise.