4 ms·

Like most security features that can be trivially disabled, if it's simple to turn it off, bad actors will just say "OK, first click 'Turn this off', just click

Like most security features that can be trivially disabled, if it's simple to turn it off, bad actors will just say "OK, first click 'Turn this off', just click 'Yes' on all the mumbo-jumbo that comes up, and then you can use our software that will give you [free money/a better love life/etc]". Many people who would've gotten far enough to install the app in the first place will be able to follow the prompts to disable the safeguards, and voila. I agree with you that it's a tricky line to walk, but the UX issue can't be dismissed as a triviality. You can go through the process now with Amazon Underground, Prime Video, and several other Amazon apps for Android. The user is prompted to sideload Amazon's apps that contain functionality disallowed in Google's app store. Amazon shows step-by-step dialogs teaching users how to do it. It would be really interesting to know how many "non-power-user" users have actually stepped through that process at Amazon's behest.

danShumway 8y ago
But again, if moderated app stores are good enough for the average user, why are they going through Amazon's tutorial to begin with? Why isn't Amazon on the official channel? It feels circular to me: "Most users are better served by a gatekeeper" -> "Because if users had a choice to go outside the system they would" -> "Therefore the gatekeeper must be mandatory" -> "Because most users are better served by a gatekeeper". At what point do we have to step back and say, "maybe users just don't want gatekeepers?" Especially bearing in mind that, again, anyone who actually did want a gatekeeper could still use one and be fully protected. We're assuming that every casual user who sideloads an app on Android is doing it because they're uneducated. What if they're not? What if they just feel like it's an acceptable risk? What if the reason we can't trust the average user to stay in a moderated system is that moderated systems are not scalable, adaptable, or reliable enough to meet the needs of even an average user?
- codedokode 8y ago
  Being able to install apps without Apple's permission also means being able to sell apps without paying 30% to Apple.
caf 8y ago
What would be more interesting is how many users who have stepped through that process to install the Amazon apps, have then gone on to use the same process to sideload malware. This is because it is actually pretty reasonable to make the judgement that Amazon is trustworthy enough to sideload their applications despite the dire warnings, so what you really want to find out is how many people are making unreasonable judgements on what is trustworthy enough to sideload.

danShumway 8y ago

But again, if moderated app stores are good enough for the average user, why are they going through Amazon's tutorial to begin with? Why isn't Amazon on the official channel? It feels circular to me: "Most users are better served by a gatekeeper" -> "Because if users had a choice to go outside the system they would" -> "Therefore the gatekeeper must be mandatory" -> "Because most users are better served by a gatekeeper". At what point do we have to step back and say, "maybe users just don't want gatekeepers?" Especially bearing in mind that, again, anyone who actually did want a gatekeeper could still use one and be fully protected. We're assuming that every casual user who sideloads an app on Android is doing it because they're uneducated. What if they're not? What if they just feel like it's an acceptable risk? What if the reason we can't trust the average user to stay in a moderated system is that moderated systems are not scalable, adaptable, or reliable enough to meet the needs of even an average user?

codedokode 8y ago
Being able to install apps without Apple's permission also means being able to sell apps without paying 30% to Apple.

caf 8y ago

What would be more interesting is how many users who have stepped through that process to install the Amazon apps, have then gone on to use the same process to sideload malware. This is because it is actually pretty reasonable to make the judgement that Amazon is trustworthy enough to sideload their applications despite the dire warnings, so what you really want to find out is how many people are making unreasonable judgements on what is trustworthy enough to sideload.