• someone [comrade/them, they/them]@hexbear.net
    link
    fedilink
    English
    arrow-up
    27
    arrow-down
    1
    ·
    2 days ago

    Looking throught the changes, it seems all this isn’t quite as awful as it sounds at first. It’s more about requiring that apps-that-install-apps use the purpose-built API to do it, which was designed so that alternative app stores would be able to do things like easy installs, automatic updates, those sorts of things. I’d like to hear from the F-Droid folks give their thoughts on this.

    • OptimusSubprime [he/him, they/them]@hexbear.netOP
      link
      fedilink
      English
      arrow-up
      11
      arrow-down
      1
      ·
      edit-2
      1 day ago

      Okay but here’s the kicker:

      If you have an alternative OS like GrapheneOS, you won’t be able to side load there either.

      https://arstechnica.com/gadgets/2024/09/android-now-allows-apps-to-block-sideloading-and-push-a-google-play-version/

      Google’s Play Integrity API is how apps have previously blocked access when loaded onto phones that are in some way modified from a stock OS with all Google Play integrations intact. Recently, a popular two-factor authentication app blocked access on phones with modified firmware, including GrapheneOS, which aims to surpass the security of Android’s stock system. Apps can call the Play Integrity API and get back an “integrity verdict,” relaying if the phone has a “trustworthy” software environment, has Google Play Protect enabled, and passes other software checks.

      Might look reasonable on it’s face, but if I need to fix an app, or possibly get an app that was removed from Google Play, I’m blocked from that. What control I had over my Android phone is gone with Android 15, if I ever get that update. And switching to something else like GrapheneOS or Lineage, I’m blocked if I ever install GApps / GPlay.

      Edit: grammar, clarity.

    • CarbonScored [any]@hexbear.net
      link
      fedilink
      English
      arrow-up
      4
      ·
      edit-2
      2 days ago

      I mean, that’s pretty bad. Only being able to use the API severely restricts the kinds of apps you can install, making a user controlling their own device significantly harder and massively strengthening the hold of the Play Store.