3 ms·
I think what is missing here is the growing trend of scammers convincing people they are their bank (or whatever) and walking them through enabling side-loading
by lokar 9mo ago
I think what is missing here is the growing trend of scammers convincing people they are their bank (or whatever) and walking them through enabling side-loading and then installing malware (sometimes to address some urgent security issues with their account).
This is meant to counter an actual issues that is affecting many many users.
- seg_lol 9mo agoIs the solution to make it harder? Or is the threat of scammers and the insecurity of the OS used as false flag to make installing software outside of the profitable walled garden much much harder?
- lokar 9mo agoI doubt that side-loading impacts revenue all that much. Alternate stores are the real, potential, risk to $. I think the solution is to come up with a balance between the needs of different groups of users. People here see the phone as a general purpose computer they should be able to modify and use for all kinds of novel tasks. This is great, and should be fully supported. But there are also many, many more people who see the phone as an important way to enable a higher standard of living. Giving them access to information, government services and banking for the first time. They are not technically sophisticated, and don't need or want a general purpose computer. So, we need platform providers to come up with ways to work out who is who, and give each side what they need.
- ronsor 9mo agoThis has been going on since the Internet became widespread and Windows users started regularly downloading random executables from random websites.
- sofixa 9mo agoAnd many things have been done, including Windows telling you in bold red letters that this software is dangerous if it wasn't signed by a trusted signer with lots of installs.
- curt15 9mo agoAnd why are those not sufficient for Android?
- lokar 9mo agoThis is not a theoretical issue. It’s a major problem is several countries, the governments are getting involved.
- ronsor 9mo agoYes, but governments are getting involved because governments always like increasing control and reducing freedom; the "major problem" is merely a pretext.
- lokar 9mo agoPeople are loosing their life savings
- ThunderSizzle 9mo agoIf you need to sacrifice your freedom for a little bit of security, then you deserve neither. It's true with this too. Most rules/laws don't actually stop problems, they just hide them.
- curt15 9mo agoAre the governments also coercing Microsoft to restrict Windows users to the Windows app store?
- lokar 9mo agoNo. In the impacted nations the issue is with the (vast) majority of people who only own an android phone.
- IshKebab 9mo agoWhat do they use the app to do?
- lokar 9mo agoSteal banking credentials, I think
- IshKebab 9mo agoHow though? Just did the vulnerabilities that allow that.
- dns_snek 9mo agoIt's not a vulnerability necessarily, but "Display over other apps" permission allows malicious apps to intercept interactions like users entering passwords and trick them into performing actions (clickjacking).
- choo-t 9mo agoIf you can convince the user your are their bank, can convince them to install software and walk them through how to do it and enable side loading, you can also convince them to input their logging into any webpage.
- lokar 9mo agoSomehow that’s not working for them, it would be simpler
- deleted 9mo ago[deleted]
- koolala 9mo agoShould we whitelist the whole web for this reason too? Why does that trend use apps and not websites?
- lokar 9mo agoIn the impacted nations people only use phones, and the local banking ecosystem is really focused on apps. I think most people would never think to use their bank website.
- koolala 9mo agoIf someone is tricking you over the phone to sideload would a 'official' bank website really be a deal breaker?
- behnamoh 9mo ago> This is meant to counter an actual issues that is affecting many many users. No, that's an excuse. Google just wants a tighter grip on their software chain, which is understandable if they were Apple but they're not.
- gmueckl 9mo agoThis is not simply an excuse. Android phones are prevalent in countries where smartphones offer the only realistic access to banking and cashless payments to the majority of the population. Scamming schemes targeting those users are also very frequent in many, if not most of these countries, and educating people about them is hard. Like it or not, this change is likely going to be a net positive for many people.
- lokar 9mo agoAnd in at lest one case Google is getting direct pressure from the government to do something
- shiandow 9mo agoI have no trust in a solution that mostly benefits the proposer. By all means let people curate and use safe lists of software, but let's not pretend that making the life harder for the few registries containing solely open source and vetted software is in any way about making people safer.
- rockemsockem 9mo agoThis solution clearly mostly benefits the ignorant phone users of the world who are susceptible to scams. There is a minuscule number of people sideloading Android apps on their phones compared to the greater population. Like I strongly believe that sideloading should be possible on phones, I don't even do it myself anymore but it can be very helpful and is part of what makes the Android platform fundamentally more open than iOS. I was VERY opposed to their original idea of closing off sideloading altogether, but having to mark it in your settings manually seems like a very good compromise.
- einpoklum 9mo agoIt seems you think what is missing here is some FUD, which is what I believe you are feeding us with here. If there's anyone people need to be protected against, it's Alphabet and Apple and the entities they let in intentionally, rather than specter of "growing trend of scammers".
- riedel 9mo agoIf that was the only reason, they would proactively cooperate with alternative app-stores like F-Droid to allow them to provide a lesser friction flow for open source releases. My question would be why I they see themselves as the only possible trust anchor here. A high friction method to install a different app store, once, IMHO would be OK.
- chmod775 9mo agoYou cannot save these people by technical means. They'll just fall for something else instead. The only one who can protect them is a family member or appointed guardian. Or maybe, just maybe, we start doing something about the criminals and those who protect them. It's ridiculous how these industrial-scale scam operations are allowed to exist.