Couldn't someone just build that Signal APK without spyware and then get it signed/verified by Google?

The Google change means that every APK has to be signed and linked to a developer with a verified identity.

Unless Google might not be willing to approve this alternative version of Signal, but is there any indication of that? The Signal clients are open source with a permissive license so there's nothing unauthorized about building and distributing a modified version yourself.

▲

jcarrano 2 days ago | parent | next [-]

If the developer is in the EU, they can come after them. If not, the EU can direct Google to revoke the verification. The commission has a big lever to pull with fines which are pretty much arbitrary.

▲

mort96 2 days ago | parent | prev | next [-]

The point is, before, you could run apps on your Android phone without anyone's permission. Now, you need Google's permission. You're relying on Google authorizing a Signal build which circumvents laws, and that's not at all a given.

▲

sneak 2 days ago | parent | prev | next [-]

If you do this with Apple they will deny it as “too similar”.

They have no obligation to sign anything, and they aren’t in the business of fighting city hall. Quite the opposite.

▲

NewJazz 2 days ago | parent | prev | next [-]

Is there any indication that Google will obey the laws of the EU when they have no vested interest in the outcome?

They only break the law when it earns them bundles of money.

▲

munksbeer 2 days ago | parent [-]

>Is there any indication that Google will obey the laws of the EU when they have no vested interest in the outcome?

In this context it isn't EU laws. The upcoming Android change in 2026 will stop anyone installing a non-verified app on their Android devices. This seems to be something Google arrived at "independently". But I would bet the US and EU and whoever else have put pressure on them.

▲

NewJazz 2 days ago | parent [-]

The law would be "don't sign apps unless they follow these regulations". Google has put themselves in the position of being able to enforce these regs, but that doesn't mean they aren't law.

▲

munksbeer 2 days ago | parent [-]

I'm not following. What law are you referring to? A theoretical law you're speculating on, or one that exists today?

▲

NewJazz a day ago | parent [-]

The law that is under discussion in this thread.

▲

munksbeer 14 hours ago | parent [-]

But Google moved independently of that. It isn't even a law.

	▲	NewJazz 11 hours ago \| parent [-]
		You keep talking past me.

▲

rdm_blackhole 2 days ago | parent | prev [-]

> Couldn't someone just build that Signal APK without spyware and then get it signed/verified by Google?

The Signal CEO aid that they would pull out entirely from the EU if Chat Control comes to pass.

> Unless Google might not be willing to approve this alternative version of Signal, but is there any indication of that?

In this scenario, Signal will still be allowed to be distributed outside of the EU so you could get it from the Play store hosted out of the EU.