148 days to go...

"""
Google announced that as of September 2026, it will no longer be possible to develop apps for the Android platform without first registering centrally with Google.

This registration will involve:

- Paying a fee to Google
- Agreeing to Google’s Terms and Conditions
- Providing government identification
- Uploading evidence of the developer’s private signing key
- Listing all current and future application identifiers
"""

https://keepandroidopen.org/

#FuckGoogle #KeepAndroidOpen

Keep Android Open

Advocating for Android as a free, open platform for everyone to build apps on.

@alice So much for "don't be Evil!" (yes, yes, long gone).
@ai6yr @alice
"Look, we did the math and evil paid better." - Google, probably
@TheGreatLlama @ai6yr @alice not even evil in the "I'm gonna kill a lot of people and steal stuff to establish my view of a perfect world" sense but rather the "I don't care about losses as long as I get even more money" way that absolutely deserves no respect
@alchemicacht @ai6yr @alice
Less "the banality of evil," and more "the VENALITY of evil."

@alice

Is it possible to disable #android auto-updates? I'm guessing 'no'.

@teledyn if you happen to have a Pixel device, I'd highly recommend GrapheneOS.

I don't know if you can disable auto-updates in stock Android, but I know Google can remotely remove apps from it.

@alice I do expect they can do anything they like 'cause no matter who I paid what, it isn't MY phone, but my griping aside, what I want to block are System updates; they give me an option to _delay_, but I want similar to Linux where I can simply stop checking for updates.

Which brings up #GrapheneOS; it is said run on my Samsung S20, but (a) it is a one way trip and (b) I am not yet completely off my Google Workspace that also includes family members (all reluctant to change), so I would still be tied to Google and not sure how Graphene sits in that situation. As much as I try to use FDroid apps, there are still many I can only get via Google although perhaps there will be a Reform Movement in the pirate apk shops, trojan-free like it used to be.

@teledyn @alice not an expert, but from what I understood, Graphene allows running any app that runs on a Google Android, except those that require play services are sandboxed.

@teledyn @alice

I have been using GraphineOS for about a year and there's no problem running sandboxed Google Play apps, including the security apps for work. It is my daily driver and never a hassle. But having a hardened system in today's world is important to my physical health.

@dianea @alice

So all I really need is courage? πŸ˜…

@dianea @teledyn @alice Does Microsoft Authenticator work? I'd love to run Graphene if it did!

@zymurgeek I use 2FAS on GrapheneOS for auth stuff, but I haven't run into any apps that don't work except Google Wallet (which might work now, but fuck Google, so πŸ’πŸΌβ€β™€οΈ).

@dianea @teledyn

@alice @zymurgeek @dianea

Is there any alternative to Google Wallet? I tap to pay almost daily.

@teledyn I put my NFC card in my phone case, then just tap my phone πŸ˜‹

@zymurgeek @dianea

@zymurgeek @dianea @teledyn @alice yes, Microsoft Authenticator works in the attached exploit protection configuration!

Genuinely everything works on GrapheneOS, you just might have to hit that little compatibility mode toggle at the top.

Also, install sandboxed Play Services on a profile separate from your main profile to mitigate any big tech surveillance concerns without reducing the capabilities of your daily driver. Enhanced user profiles are very useful

@ProbablyNotAFed @zymurgeek @alice

+1 on @dianea 's comment - been using a P7Pro for daily driver and P6a for "experimenting" and both have run GrapheneOS just fine for some time now. My best geeking days are behind me and the install was brainless and have only had a couple minor gotchas which have turned out to be documented on the interwebs.

@teledyn As far as Google Workspace, I have that for family as well and no issues. Am not aware of any way to stop GrapheneOS updates if you migrate.

FWIW I use Ageis for 2FA today and Authy previously, also no issues.

@dianea @teledyn @alice I also need apps I can only get on the Google play store. Graphene OS runs them perfectly. It's been my daily driver for a couple of years. I also control the access the play store and Google play services have to my phone. They get the bare minimum. It's the best compromise you'll get.
@alice I wrote a blog post about the current state of Android and how (I believe) Android was never destined to be open whatsoever - https://burgeronthe.net/googles-android.html
burger's site

@burger @alice Android was always Google's iOS.
@burger @alice i mean .. it has always had internal data folders with apps that you cannot modify .. it has always had to jump through a thousand hoops for root access .. and it has always been trying to close that off and restrict that more and more ..

@alice
Honestly, I think it's dead anyway. The best thing that will happen is that Google postpones this for next year. Again. It is what they want, so it is what they will do.

I know the alternatives are bad, but I believe this is the time to leave the sinking ship and throw all that energy into making Linux Mobile better.

@momo @alice linux on phone would be very nice. so far I'm having good experiences with Lineage

@alchemicacht
Which is based on AOSP, the Open Source release of Android, which is dying since Google closed-source Android.

I had more stuff like Ubuntu Touch or postmarketOS in mind. None of these are drop-in replacements or can cover all hardware features. None of these ever will for all devices available on the market. That is why I think we should put our energy on these instead and let Googles Android die.
@alice

@alice the requirement to upload the private key is particularly sketchy because what other reason is there than to distribute tampered APKs, probably for the purpose of "law enforcement" that will 1000% be done only with a warrant
@reiddragon @alice
The web page and the toot say "evidence of the developer’s private signing key" - what does "evidence" mean?
@martinrust @alice quite frankly I don't know where that's even from considering the android.com page makes no mention of the word "evidence", though that's not to say it provides any clarity on the matter.
Android | Mehr MΓΆglichkeiten mit Google fΓΌr Android-Smartphones und -GerΓ€te

Finde mehr ΓΌber Android heraus und entdecke, wie du mit Android-GerΓ€ten das Beste von Google noch besser nutzen kannst β€“ dank hervorragender KonnektivitΓ€t, leistungsstarkem Schutz, vielseitigen Google-Apps und Quick Share.

Android
@martinrust @reiddragon @alice I would have thought that it meant you can prove you have the private key by signing a message back to Google with it, and then they verify by using the public key to decrypt.
@khleedril @martinrust @alice quite frankly I don't even know how it works anymore. Google has never been clear about it, and an earlier version of it made it sound like Google would hand out keys like a CA hands SSL certs for "verified" developers.
@martinrust @reiddragon @alice i had been under the impression that "evidence" just meant "proof that you have access to that key" i.e. a very basic test where they send you random data, you encrypt it with your Private Key, and they verify with your Public Key. I've done no reading on this topic tho. Is that not the case then?
@riverpunk @martinrust @alice I have absolutely no idea because the proof of private keys is brought up on keepandroidopen but there's not a mention of proof anywhere on Google's own pages about it, and the phrasing that is there is so ambiguous it might as well be a confused shrug emote
@reiddragon @alice thats not typically what evidence of the private key means .. however uploading private keys to google has been a thing on google play for awhile .. they have this whole 'google enchanced security' thing where you just give them your keys and that improves security somehow iirc..
@Li @alice again, though, read Google's own site and that one never mentions proof of anything. The vague concept of proof of private keys is NOT what Google is saying, it's an interpretation of what google said because they made everything so vague there's no functional difference between Google's posts on the topic and a David Lynch movie: everyone kinda just understands something different and none of it is wrong because the original text technically didn't actually say anything concrete.
@alice @jrdepriest Linux phones are going to be taking off quite soon it seems.
@GuyDudeman @alice @jrdepriest My thoughts exactly, when Android was first released πŸ˜›
@GuyDudeman @alice @jrdepriest well we have Jolla and Sailfish OS
@N0dex014 @alice @jrdepriest Yes. My next phone will be Linux.

@GuyDudeman @N0dex014 @alice

As soon as I pay off my Pixel 7 Pro from the carrier, I am going to go to a store to ask them to unlock it so I can put GrapheneOS on it.

@alice Isn't this what essentially killed Nokia? I still remember how back in the days their apps were crap, I actually wrote my own stopwatch app but never managed to publish because the whole process was too complicated (at least for me).

Edit: Of course the resistive screen was also very bad.

@alice side loading a fork in 147 days.
@nomenloony @alice you don't HAVE to wait until the deadline πŸ˜ƒ

@alice

#FuckGoogle #KeepAndroidOpen

We've got until September to develope an answer to this. They don't typically backpeddle on these kinds of things, so it's likely to happen no matter what we do, so finding a solution that circumvents whatever it is they are doing is our best bet.

I use these tools, and have a *very* basic understaning of how they work, so these may be useless in this situation, but here are some tools that come to mind that maybe useful:

## Definitely Useful
- Magisk: If your phone has the abilitly to be rooted, this is ideal. Root it, remove android and install a custom ROM. (Visit xdaforums.com and search for your device with the keyword root to see if your phone can be rooted)

## Maybe useful
let me know what y'all think. Again, I know what they do, but I don't have a full grasp so may be not helpful
- Shizuku
- Opens up some filepaths and gives some extra permissions by taking advantage of wireless ADB (Android Debug Bridge). If you aren't able to root your phone, this is the next best thing.
- Debloater
- Can we use this to get rid of whatever system app Android will enforce this with?
- MicroG
- Application for spoofing Play Services, which admittedly can be a pain to set up because Google is trying real hard to keep you from using this. Honestly, probably one of the big reasons for what they're doing.

That's all i can think of for now. What do y'all think, can we use any of this to avoid this bullshit.

@alice

Google announced that as of September 2026, it will no longer be possible to develop apps for the Android platform without first registering centrally with Google.

@EU Commission, still waiting for legislation to prevent yet another google/usa monopoly and controll over user devices as well at their data.

it is about META, once/ still silently a subsidiary of us intelligence agency's.

@alice

Thank goodness my tablet is Ubuntu Touch and my mobile /e/OS, hopefully they will be less affected by this!

@alice this shit, coupled with Apples age verification demand to even use their phones properly is why I’m moving to grapheneOS

@alice Last i heard this changed to allowing unverified developers to keep making apps and allowing them to be installed but putting in a one-time Brady Bill "wait period" for installing them

edit: yeah it's right there on the page and as stupid as it is (i get it, middle ground and such), i actually don't like this group's final line here:

"Until Google provides a shipping implementation that can be independently verified, our position remains unchanged: all apps from non-
registered developers will be blocked once their lockdown goes into effect in September 2026."

i mean they've specifically said they won't block apps so it's a little facetious of this group to scream "our position remains unchanged: *ALL APPS WILL BE BLOCKED*".

ruins credibility, moves goalposts.

https://www.theverge.com/tech/897420/android-sideloading-unverified-developers-process

@quasirealsmiths 10 steps involving a 24 hour wait period, secret developer menus, and a bunch of "here be dragons, are you sure??" warnings hardly seems "unblocked".

@alice it definitely isn't "you cannot install ANY apps"

and the waiting period is stupid but it's a one-time. would be better if they just made you sign a waiver.

I'm just commenting on sending info saying it's going to be impossible unless you register for a developer account. that's not accurate

@quasirealsmiths the article specifically said "without first registering centrally with Google", so I don't see the contradiction.

@quasirealsmiths you misread the article and jumped to conclusions.

Currently, I can make an app, package it up, and send it to whoever I want. I can post it in other app stores. I can sell it on my website.

Soon, I won't be able to do that without Google's permission.

Requiring registration, having a waiting period before I can install non-Google apps, having the "free" registration option limited to 20 devicesβ€”that's not open. That's a multibillion dollar US corporation gatekeeping what you can do with your own "open" hardware, on an "open" OS.

@alice i've read this again and don't see it
it sounds like the limited developer is what you're citing, but they also allow completely "unverified developers" which to me sounds like just installing and building APKs like you've said

do i like a 3 tiered developer system? no. it seems it's more of a way to control the store's contents better.

unless i'm missing something readin this, i'll still be an unverified developer making my APKs for around here and i'll be able to install them on my phones but will have to do a stupid 24 hour waiting period one time to do it.

i take issue with the keepandroidopen people saying flat out "our position remains unchanged. *ALL* apps from non-registered developers *WILL BE BLOCKED*

that doesn't sound true. i don't like misleading fear mongering when there's plenty to be annoyed with that's legit from this.

https://developer.android.com/developer-verification

there is a link on that page specifically saying "For Developers who don't want to verify" that leads here: https://android-developers.googleblog.com/2026/03/android-developer-verification.html

where am i misreading and jumping to conclusions?

@quasirealsmiths @alice android apps targeting less than android 6 now cannot be installed on android 14+, however they can with the adb flag --bypass-low-target-sdk-block this is also a hard block on all old apps even if technically you can bypass it its the same here, their still blocking access even if you can jump through a thousand hoops ..
@alice
πŸ‡ͺπŸ‡ΊπŸ‡ͺπŸ‡ΊπŸ‡ͺπŸ‡ΊπŸ‡ͺπŸ‡ΊπŸ‡ͺπŸ‡Ί
@EUCommission ACT & do it quickly!!
πŸ‡ͺπŸ‡ΊπŸ‡ͺπŸ‡ΊπŸ‡ͺπŸ‡ΊπŸ‡ͺπŸ‡ΊπŸ‡ͺπŸ‡Ί
@alice years of Android development knowledge now worthless.
Time to find a new platform that has some notion of user experience and quality rather than just a bunch of money grabbing morons running the shop
@alice where is the fee?

@DaveFlater from Google's announcement link, by omission:

"""
If you are a developer who doesn't distribute apps widely, we recognize that your needs may be different from commercial developers and have provided this free account for you. To maintain ecosystem security, apps can be installed on up to 20 devices that end-users have explicitly authorized.
"""

"Free limited account" implies the "developer" account isn't.

There's no dollar amount in the announcement, however.

https://developer.android.com/developer-verification

Android developer verification  |  Android Developers

Get started building your Android apps.

Android Developers
@alice @DaveFlater google devleoper accounts have always costed money, smh google effectively stole money from me when they changed their policy to be 'you must publicly dox yourself to publish anything on google play' and then removed everything i had published, but then also wouldn't refund it because i had apparently already published an app on the store :/