6 ms·

Samsung Galaxy update removes Android recovery menu tools, including sideloading

176 points by pabs3 8mo ago

superkuh 8mo ago
No, not ", including sideloading." It's ", including installing software". Lets not let the enemy of general purpose computing define the framing of the discussion.
- deleted 8mo ago
  [deleted]
  - deleted 8mo ago
    [deleted]
- chenxiaolong 8mo ago
  This article isn't about the installation of regular apps. The "sideloading" it's referring to is the option to use the "adb sideload <OTA file>" command when booted into recovery mode to install OS updates. The functionality being removed is being able to install a proper OEM-signed OS update from a local file.
tchebb 8mo ago
Note that this menu item was not used to install Android apps, which is what people often mean by "sideloading", especially with all the discourse around Google's new developer verification requirements. This menu item was used to manually install an OS update from a .zip file and already required that file to be signed by Samsung on locked devices. On unlocked devices, you can install your own recovery that still has the option. So the removal doesn't prevent too much in practice. That ship sailed when Samsung stopped allowing bootloader unlocking on most of their phones.
- nocturn9x 8mo ago
  That's still possible so long as you're on a version of OneUI 8 that allows downgrading to OneUI 7. I did that and then patched the OneUI 8 firmware with Magisk and substituted the new bootloader for the old one and it works. Literally did this like in the past 2 days. Didn't even have the time to sound like a conspiracy theorist.
  - stavros 8mo ago
    What's the conspiracy theory here? That Samsung don't allow unlocking the bootloader?
Paddyz 8mo ago
[dead]
- jajuuka 8mo ago
  Just part of the continued plan by Google and Samsung to lock down and make Android more like iOS.
- sidewndr46 8mo ago
  Well it's better for Samsung as they can probably sell you a new phone
- chii 8mo ago
  > every year the justification is "security." when they say security, they meant security for them.
  - Terr_ 8mo ago
    Security against "Felony Contempt of Business Model".
  - Sabinus 8mo ago
    Securing revenue streams.
  - Paddyz 8mo ago
    [dead]
- Haven880 8mo ago
  Don't buy Samsung. They have rights to turn monopolistic ignoring existing customer base. They did that with Chinese market and decimated from 90% to now less than 1%. I boycott their stuff for 10 years and restart using their product across multiple product line around 2015. Then in 2022 I conclude another boycott is necessary. This time is 20 years. Hopefully my grandkids will get to see this embargo lifted. Their LG got eqiivalent suffered similar fate just that faster because smaller. Good luck Sammy. You dont need me.
bitwize 8mo ago
Old versions of Android do not comply with OS age-checking regulations in California, Brazil, and elsewhere. Samsung face legal repercussions including fines if residents of such jurisdictions are allowed to run an old OS. Yes, the laws apply to entities outside the borders of the territory.
- deleted 8mo ago
  [deleted]
- deaux 8mo ago
  GDPR applies to entities outside the borders of the territory, yet most of the world doesn't give a shit.
  - SoftTalker 8mo ago
    Because it can't be enforced outside the borders of the territory.
- jimrandomh 8mo ago
  That's not how those laws work.
  - bitwize 8mo ago
    Oh but it is. If you are an operating system provider and you make available an OS that does not have age verification, the State of California can sue you for $7500 for each instance where a resident of California who is a minor uses that OS. If you allow OS downgrades to a previous version, you could still be liable.
nunez 8mo ago
Not surprising for Samsung to do this. Hacking on their devices (which are second to Apple at a hardware level) went downhill fast after they implemented eFuse-secured bootloaders. What's interesting is that they tried hard to cater to the tinkerers before going in this direction. They "bought" (acqui-hired) CyanogenMod, contributed to open-source and had developer builds of their ROMs. I think they even had clean AOSP builds with the HAL and ABIs for their hardware baked in at some point. SafetyNet made it realistically impossible to daily a rooted phone in 2026 if you want to use banking, healthcare or most music apps, so it's safer for OEMs to tighten the screws on access to their hardware in kind. My take is that they saw all of this as a risk to profits they could make from catering to regulated industries who would deploy their hardware en masse. It also didn't make sense to continue this investment after banks and healthcare put pressure on Google to step up privacy in Android, especially after Apple implemented Secure Enclave. It's a pyrrhic victory regardless, in my opinion. If you're going to run a super-locked down Android device, you might as well go all-in with Apple. Their hardware ecosystem is better, their cloud services are better, they get first-priority for mobile apps, you get Blue Bubble Benefits, and their support (in-store and online) is on another level. Even MDM is better with Apple devices (through iOS Profiles). Shoot, even privacy-minded folks are better off on iOS with Lockdown mode.
- kelvinjps10 8mo ago
  Android is still more open, you can side load apps. For example I like newtube and revanced, it's easier to sync local files like when using syncthing. AnkiDroid is a fantastic app. I can use extensions in Firefox, and real alternatives browsers. If android gets so locked down so it's almost as using an Apple phone, I'll use graphene or just stop using a smartphone altogether.
  - charcircuit 8mo ago
    I recently switched to iOS and found alternative for those. For YouTube without ads and background playback you can use Brave. For syncing files between devices AirDrop is easy and doesn't require internet. There is an official Anki app for iOS where AnkiDroid is a third party app. In regards to extensions Safari does support them, along with Orion, but I decided to forgo using them. >real alternatives browsers Using webkit as the underlying engine within the different browsers on the platform has provided enough customization. The parts I actually care about in regards to the browser are the parts actually handling the user experience and not the engine itself. Webkit has evolved enough that it is good enough for my needs at least.
JustinGoldberg9 8mo ago
Grapheneos fuxors this
goku12 8mo ago
I haven't used Samsung phones in a while. So I didn't realize that the situation got this bad. That's ample enough reason to continue the 'haven't used Samsung' part indefinitely. Yet another brand hits the do-not-buy list. But at this point, I think it's worth choosing a brand that explicitly supports reflashing and customizability, rather than taking a chance with all these leaches.
- aboringusername 8mo ago
  Unfortunately that's a rather vanishingly small list now. I would not be surprised if, in a few years, these options are gone from all android devices. People mention GrapheneOS but that relies entirely on Google. Yes they are working with an OEM (leaked as Motorola) and we'll see how that goes, it may be the last hope.
  - goku12 7mo ago
    > Unfortunately that's a rather vanishingly small list now. > I would not be surprised if, in a few years, these options are gone from all android devices. I'm afraid, I agree. > People mention GrapheneOS but that relies entirely on Google. I really admire the developers of various AOSP distros for their tenacity, technical brilliance and empathy. But honestly, I don't see AOSP as a solution. It's a deliberately moving target that wastes their time in chasing down the shifting goal posts and hurdles. The only viable solution is to go for a fully open mobile OS, probably based on Linux or a BSD. There are two big difficulties here. The first is as you mentioned, most devices are severely locked down and their internal details hidden behind NDAs. Getting even the basic set of drivers working is a challenge. The solution is to ask friendly vendors (like Fairphone) for support and then aggressively purse compatibility with them. I'm very much willing to restrict my purchase choices to vendors who agree to such collaborations. If this works, others will follow eventually - like what we've seen with Linux on desktops and laptops. The second problem is the app ecosystem. It's a chicken and egg problem. You need customers for software vendors to support the platform. But you need a large software ecosystem to attract customers. At least some customers will have to forgo convenience in the beginning and put up with the limitations, in pursuit of a better future. Again, I'm willing. But I don't know if the entire community is big enough to make a difference. Nevertheless, these are worthy goals to pursue. Once the basic framework is established, the rest of the ecosystem will progress rapidly, since the developers can focus on functionality rather than fighting the never-ending parade of capricious 'safety features'. I'm just tired of putting up with all the wanton consumer abuse by these infinitely greedy corporations.
realusername 8mo ago
The legality of this update is also dubious in the EU as they are remotely crippling the device bought without any prior information, warning or way to go back. Goodbye Samsung anyways, I've been with them since 2013 but it's time to go now.
- layer8 7mo ago
  It’s unlikely to be a problem legally unless it was an advertised feature.
  - realusername 7mo ago
    I'm thinking about the PS3 Linux compatibility for example which definitely wasn't advertised and was mostly there for tax purposes.
    - layer8 7mo ago
      Sony definitely advertised the capability, for example: https://www.gamesindustry.biz/ps3-is-linux-supercomputer-claims-kutaragi https://www.gamesindustry.biz/ps3-is-linux-supercomputer-cla... (first link I could find in a hurry, the lawsuit likely has better examples)
Animats 8mo ago
Can you still install F-Droid? Can you still run without a Google account?
- bunbun69 8mo ago
  Read the article
  - Animats 7mo ago
    The article doesn't address this issue. Right now, you can install F-Droid from an APK file without rooting the phone or installing a new boot loader. Google is threatening to take that capability away, via another mod. This seems to be part of a comprehensive program to keep the Google boot on the customer's face. Also, currently, with difficulty, you can initialize a new unlocked Android phone without a Google account. Is that capability going away? All these are related. This seems to be part of a comprehensive program to keep the Google boot on the customer's face.
- mctt 7mo ago
  The article does not say anything about F-droid. However, there was discussion about this a few months ago; F-Droid and Google's developer registration decree https://news.ycombinator.com/item?id=45409794 https://news.ycombinator.com/item?id=45409794 F-Droid warns that Google's new "Developer Verification System" will require all Android app developers, even those outside the Play Store, to register personal data and pay a fee to Google to remain installable. The project argues this mandate threatens the existence of free and open-source ecosystems like F-Droid by ending anonymous development and stripping users of the right to choose their own software. So that is one threat to what we have now. Right now you can install an APK that you trust and have been using for years. What the article does say is that Samsung is removing several core options from the Android recovery menu, including the ability to sideload updates via ADB or SD cards and the "wipe cache partition" tool. While the reason for this change remains unconfirmed, it appears to be a permanent security policy shift tied to the One UI 8.5 update and the February 2026 security patch. So why does this matter? Well some users like nocturn9x [0] have been able to take back control of their devices by installing: 1. An Unlocked Boot Loader. 2. An Unlocked OneUI/ROM 3. And then F-droid style installs are not problem. Specifically, you can still install your trusted APK if you perform these steps, own a device where the hardware eFuses have not been blown and decline "Play Protect" nag screens and OneUI updates. [0] https://news.ycombinator.com/item?id=47205434 https://news.ycombinator.com/item?id=47205434
theturtle 8mo ago
[dead]
Kim_Bruning 8mo ago
I returned the last samsung phone I bought due to all the shenanigans already, and I explicitly dis-reccomend it to people. Which is a bit funny I suppose, since a lot of people around where I live seem to assume that smartphone means either Samsung or Apple. Currently I'm using Fairphone (Made by a Dutch company, and now can be bought with a degoogled android from France)
methuselah_in 7mo ago
Its time to ditch google and move to linux for phones as well. It was fun till it lasted
h4kunamata 7mo ago
So Samsung has joined Apple!! I used Samsung for decades but since buying a Pixel 7 PRO to install GrapheneOS on it, I am never using another non-GrapheneOS phone again period. I can do everything, have full control over my phone, receive security updates that other phones will take half year to receive to name a few. The only thing that doesn't work on GOS is Google Wallet, but since I have gone De-Google with Proton Mail and what not, I couldn't care less. Important apps like banking and gov apps do work without problems. And to avoid dependency on Google hardware, GrapheneOS is releasing their own EOM phone most likely by the end of 2027.

176 points by pabs3 8mo ago

No, not ", including sideloading." It's ", including installing software". Lets not let the enemy of general purpose computing define the framing of the discussion.

deleted 8mo ago
[deleted]
- deleted 8mo ago
  [deleted]
chenxiaolong 8mo ago
This article isn't about the installation of regular apps. The "sideloading" it's referring to is the option to use the "adb sideload <OTA file>" command when booted into recovery mode to install OS updates. The functionality being removed is being able to install a proper OEM-signed OS update from a local file.

tchebb 8mo ago

Note that this menu item was not used to install Android apps, which is what people often mean by "sideloading", especially with all the discourse around Google's new developer verification requirements. This menu item was used to manually install an OS update from a .zip file and already required that file to be signed by Samsung on locked devices. On unlocked devices, you can install your own recovery that still has the option. So the removal doesn't prevent too much in practice. That ship sailed when Samsung stopped allowing bootloader unlocking on most of their phones.

nocturn9x 8mo ago
That's still possible so long as you're on a version of OneUI 8 that allows downgrading to OneUI 7. I did that and then patched the OneUI 8 firmware with Magisk and substituted the new bootloader for the old one and it works. Literally did this like in the past 2 days. Didn't even have the time to sound like a conspiracy theorist.
- stavros 8mo ago
  What's the conspiracy theory here? That Samsung don't allow unlocking the bootloader?

Paddyz 8mo ago

[dead]

jajuuka 8mo ago
Just part of the continued plan by Google and Samsung to lock down and make Android more like iOS.
sidewndr46 8mo ago
Well it's better for Samsung as they can probably sell you a new phone
chii 8mo ago
> every year the justification is "security." when they say security, they meant security for them.
- Terr_ 8mo ago
  Security against "Felony Contempt of Business Model".
- Sabinus 8mo ago
  Securing revenue streams.
- Paddyz 8mo ago
  [dead]
Haven880 8mo ago
Don't buy Samsung. They have rights to turn monopolistic ignoring existing customer base. They did that with Chinese market and decimated from 90% to now less than 1%. I boycott their stuff for 10 years and restart using their product across multiple product line around 2015. Then in 2022 I conclude another boycott is necessary. This time is 20 years. Hopefully my grandkids will get to see this embargo lifted. Their LG got eqiivalent suffered similar fate just that faster because smaller. Good luck Sammy. You dont need me.

bitwize 8mo ago

Old versions of Android do not comply with OS age-checking regulations in California, Brazil, and elsewhere. Samsung face legal repercussions including fines if residents of such jurisdictions are allowed to run an old OS. Yes, the laws apply to entities outside the borders of the territory.

deleted 8mo ago
[deleted]
deaux 8mo ago
GDPR applies to entities outside the borders of the territory, yet most of the world doesn't give a shit.
- SoftTalker 8mo ago
  Because it can't be enforced outside the borders of the territory.
jimrandomh 8mo ago
That's not how those laws work.
- bitwize 8mo ago
  Oh but it is. If you are an operating system provider and you make available an OS that does not have age verification, the State of California can sue you for $7500 for each instance where a resident of California who is a minor uses that OS. If you allow OS downgrades to a previous version, you could still be liable.

nunez 8mo ago

Not surprising for Samsung to do this. Hacking on their devices (which are second to Apple at a hardware level) went downhill fast after they implemented eFuse-secured bootloaders. What's interesting is that they tried hard to cater to the tinkerers before going in this direction. They "bought" (acqui-hired) CyanogenMod, contributed to open-source and had developer builds of their ROMs. I think they even had clean AOSP builds with the HAL and ABIs for their hardware baked in at some point. SafetyNet made it realistically impossible to daily a rooted phone in 2026 if you want to use banking, healthcare or most music apps, so it's safer for OEMs to tighten the screws on access to their hardware in kind. My take is that they saw all of this as a risk to profits they could make from catering to regulated industries who would deploy their hardware en masse. It also didn't make sense to continue this investment after banks and healthcare put pressure on Google to step up privacy in Android, especially after Apple implemented Secure Enclave. It's a pyrrhic victory regardless, in my opinion. If you're going to run a super-locked down Android device, you might as well go all-in with Apple. Their hardware ecosystem is better, their cloud services are better, they get first-priority for mobile apps, you get Blue Bubble Benefits, and their support (in-store and online) is on another level. Even MDM is better with Apple devices (through iOS Profiles). Shoot, even privacy-minded folks are better off on iOS with Lockdown mode.

kelvinjps10 8mo ago
Android is still more open, you can side load apps. For example I like newtube and revanced, it's easier to sync local files like when using syncthing. AnkiDroid is a fantastic app. I can use extensions in Firefox, and real alternatives browsers. If android gets so locked down so it's almost as using an Apple phone, I'll use graphene or just stop using a smartphone altogether.
- charcircuit 8mo ago
  I recently switched to iOS and found alternative for those. For YouTube without ads and background playback you can use Brave. For syncing files between devices AirDrop is easy and doesn't require internet. There is an official Anki app for iOS where AnkiDroid is a third party app. In regards to extensions Safari does support them, along with Orion, but I decided to forgo using them. >real alternatives browsers Using webkit as the underlying engine within the different browsers on the platform has provided enough customization. The parts I actually care about in regards to the browser are the parts actually handling the user experience and not the engine itself. Webkit has evolved enough that it is good enough for my needs at least.

JustinGoldberg9 8mo ago

Grapheneos fuxors this

goku12 8mo ago

I haven't used Samsung phones in a while. So I didn't realize that the situation got this bad. That's ample enough reason to continue the 'haven't used Samsung' part indefinitely. Yet another brand hits the do-not-buy list. But at this point, I think it's worth choosing a brand that explicitly supports reflashing and customizability, rather than taking a chance with all these leaches.

aboringusername 8mo ago
Unfortunately that's a rather vanishingly small list now. I would not be surprised if, in a few years, these options are gone from all android devices. People mention GrapheneOS but that relies entirely on Google. Yes they are working with an OEM (leaked as Motorola) and we'll see how that goes, it may be the last hope.
- goku12 7mo ago
  > Unfortunately that's a rather vanishingly small list now. > I would not be surprised if, in a few years, these options are gone from all android devices. I'm afraid, I agree. > People mention GrapheneOS but that relies entirely on Google. I really admire the developers of various AOSP distros for their tenacity, technical brilliance and empathy. But honestly, I don't see AOSP as a solution. It's a deliberately moving target that wastes their time in chasing down the shifting goal posts and hurdles. The only viable solution is to go for a fully open mobile OS, probably based on Linux or a BSD. There are two big difficulties here. The first is as you mentioned, most devices are severely locked down and their internal details hidden behind NDAs. Getting even the basic set of drivers working is a challenge. The solution is to ask friendly vendors (like Fairphone) for support and then aggressively purse compatibility with them. I'm very much willing to restrict my purchase choices to vendors who agree to such collaborations. If this works, others will follow eventually - like what we've seen with Linux on desktops and laptops. The second problem is the app ecosystem. It's a chicken and egg problem. You need customers for software vendors to support the platform. But you need a large software ecosystem to attract customers. At least some customers will have to forgo convenience in the beginning and put up with the limitations, in pursuit of a better future. Again, I'm willing. But I don't know if the entire community is big enough to make a difference. Nevertheless, these are worthy goals to pursue. Once the basic framework is established, the rest of the ecosystem will progress rapidly, since the developers can focus on functionality rather than fighting the never-ending parade of capricious 'safety features'. I'm just tired of putting up with all the wanton consumer abuse by these infinitely greedy corporations.

realusername 8mo ago

The legality of this update is also dubious in the EU as they are remotely crippling the device bought without any prior information, warning or way to go back. Goodbye Samsung anyways, I've been with them since 2013 but it's time to go now.

layer8 7mo ago
It’s unlikely to be a problem legally unless it was an advertised feature.
- realusername 7mo ago
  I'm thinking about the PS3 Linux compatibility for example which definitely wasn't advertised and was mostly there for tax purposes.
  - layer8 7mo ago
    Sony definitely advertised the capability, for example: https://www.gamesindustry.biz/ps3-is-linux-supercomputer-claims-kutaragi https://www.gamesindustry.biz/ps3-is-linux-supercomputer-cla... (first link I could find in a hurry, the lawsuit likely has better examples)

Animats 8mo ago

Can you still install F-Droid? Can you still run without a Google account?

bunbun69 8mo ago
Read the article
- Animats 7mo ago
  The article doesn't address this issue. Right now, you can install F-Droid from an APK file without rooting the phone or installing a new boot loader. Google is threatening to take that capability away, via another mod. This seems to be part of a comprehensive program to keep the Google boot on the customer's face. Also, currently, with difficulty, you can initialize a new unlocked Android phone without a Google account. Is that capability going away? All these are related. This seems to be part of a comprehensive program to keep the Google boot on the customer's face.
mctt 7mo ago
The article does not say anything about F-droid. However, there was discussion about this a few months ago; F-Droid and Google's developer registration decree https://news.ycombinator.com/item?id=45409794 https://news.ycombinator.com/item?id=45409794 F-Droid warns that Google's new "Developer Verification System" will require all Android app developers, even those outside the Play Store, to register personal data and pay a fee to Google to remain installable. The project argues this mandate threatens the existence of free and open-source ecosystems like F-Droid by ending anonymous development and stripping users of the right to choose their own software. So that is one threat to what we have now. Right now you can install an APK that you trust and have been using for years. What the article does say is that Samsung is removing several core options from the Android recovery menu, including the ability to sideload updates via ADB or SD cards and the "wipe cache partition" tool. While the reason for this change remains unconfirmed, it appears to be a permanent security policy shift tied to the One UI 8.5 update and the February 2026 security patch. So why does this matter? Well some users like nocturn9x [0] have been able to take back control of their devices by installing: 1. An Unlocked Boot Loader. 2. An Unlocked OneUI/ROM 3. And then F-droid style installs are not problem. Specifically, you can still install your trusted APK if you perform these steps, own a device where the hardware eFuses have not been blown and decline "Play Protect" nag screens and OneUI updates. [0] https://news.ycombinator.com/item?id=47205434 https://news.ycombinator.com/item?id=47205434

theturtle 8mo ago

[dead]

Kim_Bruning 8mo ago

I returned the last samsung phone I bought due to all the shenanigans already, and I explicitly dis-reccomend it to people. Which is a bit funny I suppose, since a lot of people around where I live seem to assume that smartphone means either Samsung or Apple. Currently I'm using Fairphone (Made by a Dutch company, and now can be bought with a degoogled android from France)

methuselah_in 7mo ago

Its time to ditch google and move to linux for phones as well. It was fun till it lasted

h4kunamata 7mo ago

So Samsung has joined Apple!! I used Samsung for decades but since buying a Pixel 7 PRO to install GrapheneOS on it, I am never using another non-GrapheneOS phone again period. I can do everything, have full control over my phone, receive security updates that other phones will take half year to receive to name a few. The only thing that doesn't work on GOS is Google Wallet, but since I have gone De-Google with Proton Mail and what not, I couldn't care less. Important apps like banking and gov apps do work without problems. And to avoid dependency on Google hardware, GrapheneOS is releasing their own EOM phone most likely by the end of 2027.