this post was submitted on 31 Dec 2024
162 points (100.0% liked)

Android

18785 readers
135 users here now

The new home of /r/Android on Lemmy and the Fediverse!

Android news, reviews, tips, and discussions about rooting, tutorials, and apps.

πŸ”—Universal Link: [email protected]


πŸ’‘Content Philosophy:

Content which benefits the community (news, rumours, and discussions) is generally allowed and is valued over content which benefits only the individual (technical questions, help buying/selling, rants, self-promotion, etc.) which will be removed if it's in violation of the rules.


Support, technical, or app related questions belong in: [email protected]

For fresh communities, lemmy apps, and instance updates: [email protected]

πŸ’¬Matrix Chat

πŸ’¬Telegram channels / chats

πŸ“°Our communities below


Rules

  1. Stay on topic: All posts should be related to the Android OS or ecosystem.

  2. No support questions, recommendation requests, rants, or bug reports: Posts must benefit the community rather than the individual. Please post to [email protected].

  3. Describe images/videos, no memes: Please include a text description when sharing images or videos. Post memes to [email protected].

  4. No self-promotion spam: Active community members can post their apps if they answer any questions in the comments. Please do not post links to your own website, YouTube, blog content, or communities.

  5. No reposts or rehosted content: Share only the original source of an article, unless it's not available in English or requires logging in (like Twitter). Avoid reposting the same topic from other sources.

  6. No editorializing titles: You can add the author or website's name if helpful, but keep article titles unchanged.

  7. No piracy or unverified APKs: Do not share links or direct people to pirated content or unverified APKs, which may contain malicious code.

  8. No unauthorized polls, bots, or giveaways: Do not create polls, use bots, or organize giveaways without first contacting mods for approval.

  9. No offensive or low-effort content: Don't post offensive or unhelpful content. Keep it civil and friendly!

  10. No affiliate links: Posting affiliate links is not allowed.

Quick Links

Our Communities

Lemmy App List

Chat and More


founded 2 years ago
MODERATORS
top 50 comments
sorted by: hot top controversial new old
[–] [email protected] 67 points 3 months ago (1 children)

If Google is going to turn Android into iPhone, why tf I shouldn't get an iPhone itself?

[–] [email protected] 14 points 3 months ago (4 children)

If Google is going to turn Android into iPhone,

It's not. The change is definitively for the worse but still a far cry from Apple where you cannot just download an app off the internet and install it which you can even on Android 15, the permission management is just worse in such a case.

Also, surely community ROMs will probably change this.

why tf I shouldn’t get an iPhone itself?

Why TF would it be a benefit over Android? Still worse compatibility, still more expensive, still no innovation.

[–] [email protected] 9 points 3 months ago (1 children)

Android has been getting worse and worse every iteration. Are you asking me to wait until it is an identical clone of iOS?

Also, surely community ROMs will probably change this.

I don't have time or desire to fiddle with it, just like mods for Bethesda games. It should not be acceptable to shrug at enshittification and hope some volunteers fix it.

[–] [email protected] 5 points 3 months ago (1 children)

Android has been getting worse and worse every iteration.

Android added seamless background updates from 3rd party sources a while back. That's an objective improvement.

Are you asking me to wait until it is an identical clone of iOS?

I don't ask anything of you. If you are such a big Apple fan, just get an iPhone and stop complaining.

[–] [email protected] 3 points 3 months ago

If you are such a big Apple fan

I'm not but feels like Google is.

Triggered much?

[–] [email protected] 8 points 3 months ago (1 children)

I don’t understand why you are being downvoted. that is simply the truth.

I have been using an iphone 12 pro for the past 3 weeks ,while my pixel 6 is getting its battery replaced and it’s been painful.

i’m missing a lot of apps, the ones I do find are limited or asking for monthly subscriptions.

i am unable to play a downloaded mp3 unless i go through hoops&hurdles .

i am no longer able to watch a youtube video without ads (unless I do 3 steps of passing them to adguard), or using sponsorblock ( i am on ios 18.2, otherwise I would have jail broken it to oblivion).

android is simpy better in terms of freedom. IF or when it’ll become a locked garden like ios, it’ll truly be a sad day for the mobile world.

load more comments (1 replies)
load more comments (2 replies)
[–] [email protected] 35 points 3 months ago* (last edited 3 months ago) (10 children)

I've been an Android user since the HTC Desire in 2010.

I'm unsure what the author of the article is advocating, since the "raw deal" appears to be geared towards making the Android environment more secure.

The author laments that they now have to manually enable security bypass settings and that some (they call it developers, but I'm not sure if they're referring to Application Development or Phone Platform Development) "developers" can lock down with further API checks.

I've been an ICT professional for over 40 years and security is always a balance. On the one end it looks like a phone in a locked room, inaccessible to anyone, on the other end it's a free-for-all, open to anyone.

I'm not at all sure what the author wants, except for wanting to roll back time to something less secure.

[–] [email protected] 66 points 3 months ago (1 children)

Ultimately, the user should be able to decide for themselves how much security they are willing to compromise for power and flexibility. Whether this particular compromise is acceptable would depend on just how annoying it is in practice, but it's a trend I'm not a fan of.

On the plus side, if this compromises third party app store usage even more, it may be more fuel for the anti-trust lawsuits aimed at Google (although who knows how that will play out given who is becoming president).

[–] [email protected] 4 points 3 months ago (2 children)

These new security features do not (and can not) apply to apps distributed outside of the Play Store, so it won't compromise third party stores whatsoever.

[–] [email protected] 24 points 3 months ago

They do apply to Apps only distributed Outside Play Store and certain Approved third Party stores, did you even read the article?

[–] [email protected] 11 points 3 months ago

they do. that's the definition of sideloading. or why do you think the opposite?

[–] [email protected] 39 points 3 months ago* (last edited 3 months ago)

As someone who's always been side loading apps and doing custom configs, it's just so much harder compared to what it used to be. So many hidden settings. So many menus you have to go through in the right order. So many reverts that happen each update.

You say it's in the name of security, but I don't see it. Something is fundamentally broken here, if Google really believes this is the best path forward

Edit: and btw, I work in big tech too. I know how this update came to be. Some L6 looking for his packet decided to "decrease infected devices by 10%" by adding this friction, and everyone nodded along since the negative impact isn't measurable.

[–] [email protected] 36 points 3 months ago (1 children)

It makes it frustrating to use, not secure. When installed program stops working after 30 or whatever days of me not using it because my great white master decided that it doesn't need what was granted by me at installation is not security it's just spitting in my face. I don't care about what "developers" want why should anyone?

[–] [email protected] 36 points 3 months ago

Users are further forced to sacrifice their privacy to Google and Google Play rather than use something like F-droid.

[–] [email protected] 20 points 3 months ago (2 children)

Somehow No One needs that much Holding Hand or "Security" on the Computer, where No revenue streams of Google/Apple are affected

[–] [email protected] 4 points 3 months ago (1 children)

You have a very distorted view of security. The Apple computer ecosystem closely mirrors their phone and tablet system.

Microsoft Windows is an absolute shitshow and continues to get worse at every iteration.

[–] [email protected] 26 points 3 months ago* (last edited 3 months ago) (1 children)

I can Install on a Mac without any Roadblocks another Operating System, and I can Install Apps without the need for a Developer Account or a certificate unrestricted.

Otherwise I'm using GNU/Linux which also doesn't try to "protect" me in the interest of some Corporation

[–] [email protected] 6 points 3 months ago (2 children)

Actually, no you cannot. You need to adjust and grant permissions for anything you install on a Mac OS system today.

Source: I own a Mac, it's less than six months old. Installing stuff is full of permission requests.

As for Linux, I've used and installed it for over 25 years. It's not ready for 3 billion home users and at the rate it's going, it won't ever get there.

Yes, I know, Android is Linux, well done, here's an elephant stamp.

[–] [email protected] 9 points 3 months ago

I've also been using Linux for a similar amount of time, and it's only at work now I have to use Windows.

And as for home users using Linux? I have a few family members quite happy with Ubuntu / Firefox since all they need is a browser and VLC for their "PC", so I don't know where you got that "it'll never get there" metric from.

Alright they don't have a clue how Jellyfin works on that box, but they sure do appreciate and use it a lot these days now they've got used to it / dumping Netflix.

[–] [email protected] 4 points 3 months ago

Of course you can Install Asahi Linux on a modern Mac, and you can Sideload Apps too. Both Things which are Not possible on iOS without Major Roadblocks

load more comments (1 replies)
[–] [email protected] 19 points 3 months ago (1 children)

As an It professional I must disagree. Dumbing down the platform isn't good. Let's hope Magisk Deny list keeps working.

[–] [email protected] 5 points 3 months ago (10 children)

Happy to debate.

According to the article there are now more than 3 billion Android users. I have no information to the contrary.

How do you expect to attempt to secure that many devices by allowing the platform to continue as it was?

You call it dumbing down, which I understand, but how do you stop all the click-happy people from installing the next nefarious "game", when they already have little to no chance to avoid email spam and SMS scams, let alone LLM generated "custom targeted" exploits.

I get that there are users who use this (now) vanishing functionality, but are they representative of the total user base, or edge cases? Neither you nor I have any hard data on that, but I know that as an ICT professional, I'm an outlier.

I'm no friend of Google's business model, but I don't believe that they're purposefully shooting themselves in the foot,mind you, I'll concede that it has a poor track record in the past few years.

Let's progress the conversation.

How would you protect essentially computer and security illiterate users from malware in a scalable and sustainable manner?

As an aside, I'm a long term (25+ years) Linux user and have used pretty much everything since the 6502 was part of the picture. In my professional opinion we haven't begun to figure out how to do this in the desktop world, Android is so far the closest we've managed and I'm not seeing anything here (yet) that makes me see this as a mistake.

[–] [email protected] 12 points 3 months ago (1 children)

I dont really have the time to participate in what looks like an interesting debate but I have a few notes on your post.

How do you expect to attempt to secure that many devices by allowing the platform to continue as it was?

Secure what? Against what type of threat? This type of vague question results in vague answers. If the threat is social engineering I would argue not many protection would be effective beside educating the user about that.

You call it dumbing down, which I understand, but how do you stop all the click-happy people from installing the next nefarious "game", when they already have little to no chance to avoid email spam and SMS scams, let alone LLM generated "custom targeted" exploits.

You don't stop them. You ask them and show them a disclaimer when they activate sideloading and that's it. They are on their own. If the user doesn't understand the risk after (skipping) the disclaimer. That's their own fault. I don't want to be put in prison just to make sure nothing bad ever happen to me. If a user purposefully disable protections they are on their own. But they should always be able to disable them.

I get that there are users who use this (now) vanishing functionality, but are they representative of the total user base, or edge cases? Neither you nor I have any hard data on that, but I know that as an ICT professional, I'm an outlier.

This is the openness of the OG Android. Welcoming as many users as possible even if they are not your mean average user. It doesn't matter if these user are a minority. They should be able to override any security they want. As long as they have acknowledged that they understand the risk and will not sue Google for it. I don't see the problem.

I have worked on a custom ROM based on AOSP and that's the other trend that worries me. The fact that less and less of "Android" seems to go to AOSP was already a concern years ago. Google wants to close their OS to better compete with Apple. This means severing those annoying minority power users from the rest of the community.

I see a very paradoxical response from you coming from Linux. If you enjoy Linux for its openness why would you accept Google rhetoric like that is really surprising. Let users do complicated stuff on your software as long as they have signed a virtual "I AM IN DANGER" form that's OK. If you remove these advanced settings features anyway then it's not for the user, it's a PR move to protect the perception of your software.

Sorry if this comment seems a bit aggressive. In my opinion you are arguing for Android to slowly transform into IOS and ad someone working on Linux for decades, this is very weird.

[–] [email protected] 4 points 3 months ago (1 children)

It appears that you think that I'm holding contradictory opinions. It's possible.

The "ICT aware" population is not what I'm concerned about and whilst that likely excludes both of us, it's the retired widow who needs a phone to track her diary and call an ambulance, it's the pig farmer who uses 123456789 as their email password and uses internet banking to pay his employees, it's the impatient mother of three who is running between venues to get her kids to drama, soccer and music lessons.

I have made house calls to these actual people and hundreds more who do not, will not, cannot, read warnings. They simply don't have the context to understand their severity. They don't understand why a camera has no requirement to read your address book or connect to the internet. They don't understand what a calculator needs to keep your screen on, or not. They "don't have anything to hide" and have no understanding how their address book and diary can be used to defraud them of their life savings.

I've spent a lifetime educating people like this. It's a drop in the ocean and all that happens is I'm pissing in the wind getting wet.

Is locking down Android helpful for you and I, perhaps not. But if I don't get a phonecall in the middle of the night because one of my clients just lost their life savings because their phone got "hacked", I'm a happy little vegimite.

Linux isn't ready for prime time because novice users have no chance to just do simple stuff like plug in a phone, download a video and tweak it, let alone open a spreadsheet or make a Christmas card and print it out.

You and I can do this, my partner cannot.

Another way to look at this is a 30 year academic with Mac and Windows experience who cannot figure out how to migrate to Linux.

[–] [email protected] 7 points 3 months ago (2 children)

Usually as an IT professional people assume I lost touch with the average people abilities with technology. I'm used to that by now.

I understand very well most people want a phone to be simple and easy to use.

This is not a justification to remove this advanced options for power users. None of the user you mention in your post will ever activate sideloading. This is just an option for that minority of people.

Android is not much more complicated to use than IOS if you stick to basic use; social networks, taking pics, picking up calls. That's it.

You can do all of that without ever knowing about sideloading or advanced permissions and so on.

So thank you but I'm with well aware I shouldn't use my perception of Android as the norm. But I'll definitely say that the average user literally doesn't ever go in those advanced settings so whether they exist or not doesn't matter to them. But out of openness I think it's important the power users can still have this OPTION available.

Also if you really want a simple phone and super easy to use. Get them an IPhone and call it a day it's simple as that. Obviously if you can't afford one then Android should still be fine anyway.

Somehow I doubt any less technology enthusiastic person would favor an Android phone over an Apple one to then complain that there is too many options available in the settings.

load more comments (2 replies)
load more comments (9 replies)
[–] [email protected] 9 points 3 months ago (1 children)

Yeah, the author and people are fussing over without reason. Regular users do not understand the implication of sideloading apps. I have had people get their telegram/whatsapp hacked because someone sent them a malicious link and they sent their login credentials to that website/app.

Restricting sensitive permissions will mean such people are better protected from such mistakes. Advanced users can still bypass the requirements even though it may be slightly complicated.

[–] [email protected] 4 points 3 months ago (1 children)

One can justify it however they like but it's going to end up making the experience worse for competent users anyway. Much like this Android 12 security change that made it permanently more annoying to manipulate files.

[–] [email protected] 2 points 3 months ago

Yeah, this change (scoped storage) is annoying. You need adb, root or system level apps to bypass the requirement. File access is also slow. That's the reason image loading and image deletion is slow in Google Photos app compared to the native gallery app of my smartphone.

Anyway, the trend is clear. More security for the end user. You can root, flash a custom rom, or use a linux based smartphone if you do not like the restrictions. It's more friction but that's not going to change for the better.

[–] [email protected] 3 points 3 months ago

I just wish the system had a global setting for "I know what I am doing, stop trying to protect me". Stop revoking permissions you think I don't need. stop restricting everything. Just turn all of those things off by default. I only have a couple apps installed, let me be the judge of me. And stop having me reconfigure every app individually just so you'll let it run for as long as I want it to.

load more comments (2 replies)
[–] [email protected] 31 points 3 months ago (1 children)

POV: You're Google and think EU didn't fine you enough lately.

[–] [email protected] 9 points 3 months ago (1 children)
[–] [email protected] 10 points 3 months ago

Not really with the huge EU fines. Google eventually does what EU wants, though it takes a while because EU is fucking slow.

[–] [email protected] 19 points 3 months ago (2 children)

Though I understand the reason, I find this ironic given how invasive play store apps can be. My cars official app requires full location access all the time, otherwise it pops up asking for it every time you open it. Meanwhile some FOSS app that can be code reviewed and sideloaded is more difficult to give needed acess.

[–] [email protected] 6 points 3 months ago

and FOSS apps that can be fully code reviewed and confirmed safe, unlike anything proprietary, will still cause banking apps to refuse to run on your unrooted device. I had to go back to carrying a physical key around with me. (the foss apps were there first)

[–] [email protected] 4 points 3 months ago (1 children)

Not to defend the shitty app, but it's probably Google's fault. Location access is needed to just query WiFi or do a hotspot. Probably features the app needs. They should've make that more granular.

[–] [email protected] 4 points 3 months ago (3 children)

They need it for 2 things I believe.

  1. They show a map where vehivle last parked compared to you.
  2. They could use it for their proprietary phone as key feature that doesn't work and is unreliable compared to using UWB.
  3. Gonna add this one since its totally the reason, sell your data. They store the car data, why not get the phones location data so you can get them all the time!
load more comments (3 replies)
[–] [email protected] 17 points 3 months ago (1 children)

This is why I decided to not use Google services this Graphene install. I have zero doubt Google is going to try and lock down the ability to use anything outside of the PlayStore in an IOS type move. Just hope a better Linux based phone gets done quickly because I'm not sure how many iterations of alternate Android OS generations will be able to exist as they lock things down.

load more comments (1 replies)
[–] [email protected] 15 points 3 months ago (2 children)

Sideloading is the only reason i use android over ios...

[–] [email protected] 3 points 3 months ago (1 children)

Ironically sideloading is pretty easy on iOS nowadays

load more comments (1 replies)
load more comments (1 replies)
[–] [email protected] 13 points 3 months ago (1 children)

all it does is prevent sideloaded apps from having access to sensitive permissions by default, which is a good thing.

[–] [email protected] 4 points 3 months ago (1 children)

True, but if it's good for users, it should be the rule for ALL apps

load more comments (1 replies)
[–] [email protected] 9 points 3 months ago

Anything short of "it's your device, it obeys you" is theft.

[–] [email protected] 6 points 3 months ago

Personally, I like the first one and wouldn't use an option to automatically give those permissions to all apps.

Being a power user doesn't make anyone immune from malware, it just needs to pass some sniff tests. It was by luck that that backdoor in the Linux kernel was found and it's naive to believe every single malware app is going to be obvious with unrealistic promises and/or bad grammar and spelling. Permissions requests are a clue that an app is doing something it shouldn't be. And Facebook is considered trusted by many despite an insider even confirming the "talk about something near your phone and fb will advertise it to you" being real.

When you download an app, unless you either wrote it yourself (including all libraries) or have checked the source for open source apps (again including libraries), you can only guess at what it is really doing. And just because an app does what it claims to do doesn't mean it isn't doing anything else, so the "well, it does work" test isn't a great security test.

For the app developers being able to block side loading, it says it uses meta data to enforce that. Couldn't modders just modify that meta data so that it doesn't realize X' app is actually a modified X app? It would need to do something more complex than a checksum or hash to detect it's the same app.

I mean, I love "fuck Google" bandwagons, but either I'm missing something or this one doesn't seem like that big of a deal.

[–] [email protected] 4 points 3 months ago (1 children)

Wait, am I to understand they're intending on making it that you cannot just install any apk you choose because it's your phone and your business? Is that going to be no longer possible?

[–] [email protected] 6 points 3 months ago (1 children)

If you were to read the article you'd find that sideloaded apps will have restricted permissions that the user will have to un-restrict one by one.

[–] [email protected] 2 points 3 months ago

Ewww. Such fucking useless imposition of restrictions that should be the user's decision. Like almost everything else in technology nowadays where control is being taken away from the user.

I'm only ever going to use devices that I can put whatever custom ROM I want on or that natively supports the options I want.

As long as the general public just bends over and accepts this shit, they'll keep doing stuff like this.

[–] [email protected] 3 points 3 months ago (2 children)

The pros for Android is sadly gone :(

load more comments (2 replies)
[–] [email protected] 2 points 3 months ago

Now I'm actually glad I'm stuck on Android 13.

load more comments
view more: next β€Ί