Questions remain as Google prepares to lock down Android app distribution in the name of security.
See full article...
See full article...
Interestingly enough, not having a smartphone today is one of the most rebellious things you can do. And it's also grounds for suspicion,... or even getting you put on some kind of watch list.Well there's also a third way, albeit slightly more difficult:
Don't have a (smart)phone.
Yeah, it's virtually impossible because [service/job] requires us to have one.
But we should start to think about changing that requirement, no?
If anything, we could at least start having serious discussions about this, for example through forum posts or comments at certain well known tech related news outlets.
I view it less as “duped” and more “found the trade-off worth it”. I exclusively used Android (since 2013) until I picked up a used iPhone in 2022. I still keep my Android devices around, running third-party OSes, but I haven’t switched back to any of them as my daily driver.You have been duped for 20 years and way too easily. It’s always been about google stealing and selling everything you do on your phone.
No. I was referring to the user ability to understand how things work. Not the simple availability of magic button tools. Also the community ability to even keep PhD level computer science people around to maintain those tools—which has been shown to be extremely fragile. The number of people left who can understand this stuff is tiny. It has been that way since COVID.
Android has become a Rube Goldberg machine WRT to both security and “security”.
Welcome to pretty much every choice you have in the postethics twenty-first century.
Not exactly. My bank sends a push notification to my phone via their app that I have to accept in order to log in on their website on my desktop.There's always web pages.
But also, just because you've got a non-google store doesn't mean you can't install the google store.
I'm an Android guy for now. For me going forward, I will just bypass both Apple and Google app stores and build web apps (not always an option, I know). That was Steve Jobs vision at the beginning, so maybe we've come full-circle.I wrote an app for my wife that I side-loaded for her. Will I have to create a dev account and cough up some money to Google just so she can have it in future? We still don't have a good answer.
For what its worth. I have rooted & ROM'd every phone since my Samsung Captivate. And my banking apps work just fine.For most people, Google's locked-down Android is the only choice because most banks only distribute their app via Google App Store, and only Google's locked-down Android can load apps from Google App Store.
Not Google's Android means no banking app. For banks that require you to use their app to confirm payments, or to use online banking, no banking app almost means no banking.
I've got an app that covers almost everything: it's called a browser.For most people, Google's locked-down Android is the only choice because most banks only distribute their app via Google App Store, and only Google's locked-down Android can load apps from Google App Store.
Not Google's Android means no banking app. For banks that require you to use their app to confirm payments, or to use online banking, no banking app almost means no banking.
This is super interesting! Thanks. I’ve always been curious about the slow death of small-shop android projects. I’ve read interesting thing on Ars and elsewhere, but I’m not plugged into the developer world.The thing with AOSP master.... Googlers view it as a "starting point" to build stuff with. I've chatted with a few of them and ranted to them about it.
The problem with their viewpoint...AOSP master is so buggy, to start with, it takes a team of nearly-professional developers days of work to even get the AOSP master repo to even compile nevermind the product to boot. And people with that kind of skill--don't work for free. It didn't used to be that bad back with Gingerbread where everyone could just jump in and learn....now it is. Which means, today, only very large teams of skilled devs bother with it. All the small one-man shop community ROMs are basically gone.
Which...is actually a problem that bites Google. Android used to be an applied way for newbies to learn coding and OS development--and get skills to enter the workforce with. Now they've short circuited their own skills and recruitment pipeline by making it nearly impossible to work with, just so they can lock things down and serve more ads.
It depends on the bank. When I was an HSBC customer, their app didn't work at all. My current bank's mobile application works, but certain rather useful features don't work, with misleading error messages.For what its worth. I have rooted & ROM'd every phone since my Samsung Captivate. And my banking apps work just fine.
graphene os has a list of banks that work on it and it's pretty long. and now motorola (lenovo) is going to make a phone with graphene os. so there's that.For most people, Google's locked-down Android is the only choice because most banks only distribute their app via Google App Store, and only Google's locked-down Android can load apps from Google App Store.
Not Google's Android means no banking app. For banks that require you to use their app to confirm payments, or to use online banking, no banking app almost means no banking.
A lot of ROMs--notablely Graphene--are based on it.In 2026, I kinda think open source android is a bit of a sham already. Outside of its state sponsored Chinese version, does anyone actually use AOPS for anything? It’s not exactly Darwin Unix, but it’s starting to look like it.
^ This should have been the headline to the article.It turns out when you have an operating system written by an advertising company that makes money via surveillance capitalism....they don't like it when you do things that deny them more data.
PWAs are useful and I have many installed on my devices. However, I have found most feel like websites - it's difficult to make a 'website' feel and operate like a native app.Moving to webapps could work for some, but thats super limiting. It's times like this I wished FirefoxOS took off. We really fucked ourselves with this mobile duopoly.
* Long story and unimportant story: I was promised a fake set of 'loyalty' deals over the phone to keep me from transferring my 14 line account (partner's immediate family and several friends are all on my plan) to T-Mobile just long enough to miss out on their holiday new customer deals. T-Mobile would have saved me over $100/mo on my bill and all 14 people would qualify for trade in deals for new phones. Subsequent calls, totaling over 2 hours, were met with hostility. Normally, I give CSRs a lot of leeway because they have a shit job and little autonomy to do what I ask for. However, after 2 hours of being treated as if any sort of compensation for bold face lying was asking for the moon I lost my patience and emailed their executive team. 5 days later (after numerous and profuse apologies from a nice lady on the phone) I received a new iPhone Pro Max and a year long monthly credit.My solution is a Pixel 10 Pro Fold running GrapheneOS as my primary device. It has a dual eSIM between Mint Mobile and a free Verizon line - neither of which I use for the phone number. I also have an iPhone 17 Pro Max which I got for free from Verizon executive support* running my primary number but it's not used for much outside of Signal, Apple Pay, and business related phone calls. However, depending on how the next few years go I may need to reconsider what devices I use.
Assuming no changes, you can push the app to her phone over ADB. Google also says there will be a hobbyist version of verification that lets you install on a small number of devices for free as well. You do have to register for that, though.I wrote an app for my wife that I side-loaded for her. Will I have to create a dev account and cough up some money to Google just so she can have it in future? We still don't have a good answer.
the GrapheneOS community has a list you can check out to see if your bank works or not. You also can just change your workflow to use the website instead. https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos/Straight to the point. I've been hearing chatter about these security changes for a while, and I really appreciate this article breaking it down. Thank you Ryan for an excellent piece of journalism!
One thing I would want to know more about -- near the end of this article, it seems like alternative operating systems like GrapheneOS aren't as affected as it initially sounded they might be from online chatter. Could anyone more knowledgeable than I elaborate on this?
I've also heard before that banking/wallet apps tend to have difficulties too, but I'm not as up-to-date on these details as I'd like, and as a layman, it's difficult to sort wheat from chaff when attempting to educate myself with info online.
Edits: clarified mid-quote attribution
There's other things that fed into it. Cue the historionics of XDA-Developers:This is super interesting! Thanks. I’ve always been curious about the slow death of small-shop android projects. I’ve read interesting thing on Ars and elsewhere, but I’m not plugged into the developer world.
The graphene community maintains a list of banking apps that are compatible. It doesn't have everything but I think you would be surprised with how many banking apps actually do work on grapheneOS. https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos/For most people, Google's locked-down Android is the only choice because most banks only distribute their app via Google App Store, and only Google's locked-down Android can load apps from Google App Store.
Not Google's Android means no banking app. For banks that require you to use their app to confirm payments, or to use online banking, no banking app almost means no banking.
I wish that real Linux phones were more viable.
I have Ubuntu Touch installed on a beat-up Pixel 3a I acquired a while back, and the OS seems slick. But I have no idea how much of the phone side of the equation works, and apps are barely there.
We’ve got a renaissance of Linux on the desktop, and I can only hope that this incoming lockdown will restart the Year of Linux in our pockets campaign.
Seriously? You're blaming Apple? google have what sort of worldwide marketshare of the smartphone market, ~90%? So they're going to be envious of Apple's tiny slice?Christoph Hebeisen said:I think Google probably looked at Apple and wondered ‘why has it worked for them?’
https://meincmagazine.com/gadgets/202...-threatens-to-dismantle-androids-open-legacy/Ryan Whitwam said:Early on, Google allowed system-level ad-blockers in its store, but tightening restrictions eventually led to most of those tools being banned.
I have some bad news for you. It's not a quest to make everything better. It's google's regular ongoing quest for more control.Nathan Freitas said:In their quest to make everything better, they’ve made the process more onerous.
Oh, they say it's "doing protection for customers" but it's more about stopping those nasty ad-blockers, alternative youtube clients, & etc.Ryan Whitwam said:If you can’t unlock the bootloader on your phone, you’re stuck with the stock software and any security changes implemented by Google and the device maker. And increasingly, it looks like they’re going to decide you need protection from yourself.
But think of the positive side: Jumping from the frying pan into the fire, then jumping from the fire back to the frying pan, and then jumping again from the frying pan into the fire, and back again into the frying pan is great cardiovascular exercise and will make you a stronger, fitter person!13+ years using Android... thought of getting a new pixel but im gonna stick with my current one and see what happens... if Google removes sideloading and removes AOSP then im def changing back to iOS. no reason to stick to android.
My solution to that concern was to move my number to an Internet-based phone service years ago. Now I just need a data connection, and that could even be provided by a hotspot if my preferred mini tablet couldn't connect to the cell network directly. (I haven't had any issues connecting to every major network with my OnePlus 6.)Switching to Apple isn't going to improve your control over your device, obviously. I guess there is no real competition anymore when there are only two competitors left: one company can lay down the hammer, then the other will now happily follow the same. It's now a choice of ideologies.
I'm glad Mr. Whitwam pointed out that cellular companies are gatekeepers as well, and they potentially pushed for this sort of overwatch on both companies. Would FirefoxOS get any support by today's Verizon, or would it be outright blocked by the network?
What happened to using banking websitesFor most people, Google's locked-down Android is the only choice because most banks only distribute their app via Google App Store, and only Google's locked-down Android can load apps from Google App Store.
Not Google's Android means no banking app. For banks that require you to use their app to confirm payments, or to use online banking, no banking app almost means no banking.
It’s been nearly 20 years since Google revealed Android
The bank forces you to install their app to use them?Not exactly. My bank sends a push notification to my phone via their app that I have to accept in order to log in on their website on my desktop.
Well, it’s that simple for iOS. In fact, it’s been that simple there for over a decade, so maybe google will just copy what works, pretend it’s free, and then change it six times before coming up with something new, adding their own style.I wrote an app for my wife that I side-loaded for her. Will I have to create a dev account and cough up some money to Google just so she can have it in future? We still don't have a good answer.
When I look at the box for such things, most are running Android. Just without the nice screen.Don't have a (smart)phone.
Apple gives away their IDE, with which you can write your own apps and side load them all day long for up to 100 devices.Apple has always been the jailer, holding the keys and never letting you touch them. Android let you hold the keys, it isn't a jail, yet...