Did we win? - Lemmy.zip

Lemmy

Making users wait 24 hours doesn’t improve security; it’s an anti-competitive change designed to make the Google Play store seem like less of a hassle in comparison.

I can actually see where it can improve security against scammers trying to scam elderly and non-tech savvy people.

  • Scammer tries to get someone to install malware from their site
  • Victim isn’t familiar with sideloading, but scammer instructs them
  • Victim hits the first time 24 hour block and has to restart and wait
  • The restart alone breaks contact with the scammer, scam thwarted

For the rest of us that know our way around Android, it’s just a one time annoyance, after completing all the steps to enable sideloading, you won’t have to wait 24 hours anymore.

Lets be real though, currently they already have to blow through 4 other warnings about installing unsigned APK and enabled the browser or file manager to be able to install applications. It’s almost certain if they are that far deep/commited, they are going to call the scammer back if the scammer left a number.

Yes this might allow for a time delay where the scammers number could be disabled if reported by enough people, or someone else to be like “yo this is a scam” if they mentioned it but, I don’t think this is as secure as they are saying it will be. The target audience for this is very unlikely to be thwarted by a time delay. Plus, the scammer will make some excuse about how the warning is just a safety percaucion and doesn’t need to be followed as this is a normal usage of the toggle, and then have them call back after the delay is done.

For clarification: the target audience doesn’t know about the scam, and all they care about is that someone is seemingly willing to assist with an issue or problem they have. Said person knows the solution and they just have to wait for the timer to be done to be able to do said solution. They have no reason of telling others about it (unless they were complaining about googles time delay) as they already got someone who is seemingly able to assist.

Honestly, having to have the user type “I agree that I have verified the application i am trying to install is genuine and not a fraudulent app” or a listbox of checkmarks to toggle in order to enable it would be far more efficient for this case.

Hell take the example image the article on the dev page has and make it into toggles instead and it would work far better than a timer does.

Sadly, there’s truth in everything you say. Scammers are gonna be scammers, and they’ll just find a new technique plus the long standing social engineering to continue their efforts to rip people off of whatever they can.

Still, it’s something in the middleground, to help grandma be less likely to get scammed, while also giving power users an out and way to keep using their devices the way they want.

I bet they will end up having granny use adb over WebUSB a la GrapheneOS