Remix.run Logo
tavavex 10 hours ago

The part in the flow where you select between allowing app installs for 7 days or forever is a glimpse into the future. That toggle shows the thought process that's going on at Google.

I can bet that a few versions down the line, the "Not recommended" option of allowing installs indefinitely will become so not recommended that they'll remove it outright. Then shrink the 7 day window to 3 days or less. Or only give users one allowed attempt at installing an app, after which it's another 24 hour waiting period for you. Then ask the user to verify themselves as a developer if they want to install whatever they want. Whatever helps them turn people away from alternatives and shrink the odds of someone dislodging their monopoly, they will do. Anything to drive people to Google Play only.

lelandfe 7 hours ago | parent | next [-]

An actual example of this lives in the Gmail iOS app. Click a link in an email and every x days, a sheet appears: https://imgur.com/a/nlGS4Yk

1. Chrome

2. Google

3. Default browser app (w/unfamiliar generic logo)

They removed the option for Safari some time in the last two years; here's how it looked in 2024: https://imgur.com/1iBVFfc

And the cherry on top of dark UX patterns: an unchecked toggle rests at the bottom. "Ask me which app to use every time." You cannot stop getting these.

pea 3 hours ago | parent | next [-]

The darkest UX pattern I have ever hit is trying to cancel Google Workspace; whereby they disable the scrollbar on the page so you cannot actually get to the cancel button.

kowbell 7 hours ago | parent | prev | next [-]

I was so mad when they removed the fourth option. I can't remember which one was which, but one meant "open in a webview inside this app" and the other was "open in a new tab in your default browser". It was still terrible UX but I liked at least having that choice.

kdheiwns 2 hours ago | parent | prev | next [-]

An annoying extension of this is opening a Google maps link on mobile. It always prompts to open Google Maps (the app) no matter what. If you click no, its bugs the fuck out and opens an App Store link. If you click yes, even if you have Google Maps installed, it bugs the fuck out and opens an app store link. In neither case will it properly show the location on a first attempt. It's been like this for years. I'd ask what they're thinking when they came up with this, but I remain unconvinced that any such activity happens inside any Google offices today.

smelendez 2 hours ago | parent [-]

I think this is an Apple bug.

I’ve seen it with non-Google apps too. I’m not sure what causes it, but I believe sometimes you can long tap the link and select the correct option.

I believe the behavior where you say no and it still tries to open the app is because the default behavior on Google Maps links is to open Google Maps.

al_borland 5 hours ago | parent | prev | next [-]

I hate this pop-up so much. I don’t even have Chrome installed on my phone. How about open up on the only browser I have installed…

This kind of thing should be illegal. The default browser is the default for a reason, to avoid this kind of stuff.

I think I’ve reported this as a bug to Google a couple times, in a couple different apps… as they do it in their other apps too.

The only thing that bothers me more are the, “sign-in with Google”, prompts on 90% of websites now. How about just giving the option to login with Google if so choose to login, and not spam it on every website just for visiting?

Google really has made the internet and worse place in so many ways.

abustamam 2 hours ago | parent | next [-]

> I think I’ve reported this as a bug to Google a couple times, in a couple different apps… as they do it in their other apps too.

Alas, I don't think it's a bug. A PM or VP probably got a bonus for this.

> How about just giving the option to login with Google if so choose to login, and not spam it on every website just for visiting?

Yeah this is kinda weird. I don't know if it's browser specific though. I use Firefox on my main computer and I think I still see it. Which means that the website owner opted into this weird pattern. No other auth providers do this. Just Google.

5 hours ago | parent | prev | next [-]
[deleted]
b112 4 hours ago | parent | prev | next [-]

It's OK. This is the dying, last gasp effort that a company makes when it has no way to innovate, no way to add any real value, no capacity to drive change internally, and has become completely non-user focused.

In short, it's what companies like IBM and Broadcom are now.

Shallow husks of their former self, mere holding companies for patents, with a complete lack of care and concern about any end-user retention.

Google search has turned completely into junk over the last two weeks. You may think "two weeks only?!", and you're right there, but this is a whole new level of stupid.

You may not be getting this where you are, but here searches are constantly prepended with human checks, searches can take up to 5+ seconds, you name it. They literally spend so little on maintaining and working on their search engine, that it's effectively unusable much of the time now. I don't care whether it's bot traffic, or what, and no it's not just me, or my ISP. This is wide-scale.

It takes so long I just click on an alternate search engine and search there. I don't have time to waste in their inanity.

Any sane and sensible company wouldn't entirely trash and destroy their mainline product, which is key to drive users to experience Google products. But this degree of sheer, unbridled arrogance is what topples empires. The thought that it really doesn't matter, flows off of google as a foul stench.

Look at Microsoft of old, the god of arrogance. Once the most dominant, powerful tech company in the world. They were king. Browser king. OS king. Everything king. Now they are barely noticed by large swaths of the market.

So goes Alphabet these days.

al_borland 2 hours ago | parent | next [-]

The problem is that these companies can remain on life support for decades, phoning it in and making things continuously worse as their desperation grows.

If they follow the path of IBM and Broadcom, they will move away from the consumer market and focus more on the enterprise. If Google fully realized that vision it would be extremely disruptive. Them shutting down Google Reader practically killed RSS for quite a while. Imagine that level of disruption with products that have mainstream appeal… mail, maps, docs, search, etc. It would be pandemonium.

still_grokking an hour ago | parent [-]

> mail, maps, docs, search, etc. It would be pandemonium

I would hardly notice, TBH.

There are alternatives for all of that.

still_grokking an hour ago | parent | prev | next [-]

I'm not sure where you are but at least here Microslop is still ruling more or less everywhere besides the online ad market.

They are big in everything that is mass scale developer oriented with things like GitHub, VSCode, or all their libs, tools, and integrations (they "own" in large parts for example Python, TS, and Rust). Governments and public services are all running on Azure. So do a lot of companies; more or less all small and mid sized. They are still dominant in the gaming market, and get stronger there with every year.

Microslop was always, and still is the same Microslop. They are very successful with what they do since decades. Whether one likes that or not.

Scoring6931 3 minutes ago | parent [-]

They haven't been dominant in the gaming market for a long time now. Since the beginning of the last generation (Xbox One, PS4, Nintendo Switch), Microsoft has had the worst selling game consoles. And they are getting weaker with every year: the Xbox director was fired just a few weeks ago.

lobf 2 hours ago | parent | prev [-]

>Look at Microsoft of old, the god of arrogance. Once the most dominant, powerful tech company in the world. They were king. Browser king. OS king. Everything king. Now they are barely noticed by large swaths of the market.

Have they ever been more valuable than now?

al_borland an hour ago | parent | next [-]

I think it’s more about how they are perceived. They’re making a lot of money somehow, but they have been losing desktop OS marketshare for at least 15 years, they completely missed mobile, Xbox seems to be failing, they completely gave up on the browser and just threw a skin on Chrome. They have O365 in the enterprise, sure, but that was a market they once owned… now they share it with Google Docs and a host of others. They had to shove Linux into Windows just to get developers to stick around. They had the PC gaming market on lockdown, but Valve is coming for them with all their Linux based efforts… we have PewDiePie as an Arch user now. How bad does Microsoft need to screw up to push someone all the way to Arch? All their consumer facing products seem to be trending down.

Everyone loves to talk about FAANG… there is no M, why not? One would think Microsoft would belong more in that collection than Netflix, yet here we are.

In terms of technology and looking forward, what is Microsoft doing really right? Even their investment in AI seems questionable and they pushed it into their products so hard that everyone hates it. They have GitHub and VS Code, but that was an acquisition and people are always nervous, because they don’t really trust Microsoft based on their track record. Azure is fairly popular, but AWS is still the benchmark everyone talks about. There is their enterprise management software… that helped take Styker completely down last week (maybe not totally Microsoft’s fault and more the admin, but that’s still some really bad press). Did I forget something big?

still_grokking 33 minutes ago | parent [-]

TBH, you could change a few terms and that text wouldn't look much different in the 90's. Microslop never gave a shit on end-users and what they think. Nobody ever "liked" Microslop. People were always complaining that Windows is shit, Office is shit, MS Servers are a joke, etc. Nobody at Microslop ever cared. They always cared only about having all the companies and governments in ransom, which was always their golden egg goose. The only other thing they care about, to make the first thing happen, are developers. They put a lot money into keeping people developing using their tech, and this actually works. Even on Linux it's hard to avoid Miroslop tech. (I've got just today a Pipewire update which pulled in some MS libs for ML; and there is for sure more as they have even code in the Kernel.) Microslop's EEE strategy is a long game, which is actually pretty hard to beat.

cmcaleer an hour ago | parent | prev | next [-]

I think if, 10 years ago, you spun Microsoft into several different companies with everything playing out exactly as it has today in the product management side, the most direct consumer-facing sections like Windows Desktop and Xbox would have cratered and most analysts would say that they have bleak futures, while Azure and 365 would have grossly overperformed and would have been titans.

MS has been successful despite fucking up the monolithic position they held in desktop and gaming, because they managed to find a particularly valuable golden goose. It's just that in doing so they allowed the other golden geese they have to become quite sick.

If you took out cloud rev MS would have been much more motivated to not let the rest of the company's products turn in to the sorry state they're in.

solid_fuel 18 minutes ago | parent | next [-]

If you had separated them, 365 would probably run on AWS and have better cross-browser support.

still_grokking an hour ago | parent | prev [-]

Most client PC are still running on Microslop Windows.

They are, as always, using Windows to sell all their other crap, especially Azure and 365. Things like their AD or office tools are tightly integrated into the cloud so you realistically can't even use the one without using the other.

avhception 27 minutes ago | parent [-]

At work, we needed a PC for a Linux-based Webkiosk the other day. The computer proposed by the colleague who actually orders stuff comes with a Windows license. I said we don't need that. A fruitless, lame effort was made to locate a substitute w/o a Windows license. I renewed my protest, but the feeling that the problem is me was already floating in the air. I gave up. We purchased a Windows license to run Linux. For the umpteenth time. It's like a Microsoft tax on PCs.

yehat 2 hours ago | parent | prev [-]

Do you feel they're? As user, not as investor.

paulddraper 4 hours ago | parent | prev [-]

> not spam it on every website just for visiting?

It's the website that spamming that.

Either via google.accounts.id.prompt(), or options provided to loaded Google scripts.

Google is guilty only insofar as that feature is possible.

al_borland 2 hours ago | parent | next [-]

There is no way this many sites did it organically without Google pushing it in some way, not to mention they built the thing in the first place (as you mentioned). There also doesn’t seem to be any way to disable it (other than maybe an extension that I saw recently, but at $15 I needed to think about how much I want to spend just because Google is obnoxious).

I’m sure the real goal of this “feature” is to get people to sign-up for the site without them actually realizing they are signing up. They click OK just so the modal goes away and now the site has their email address. They can use that growing email list to seek higher prices from sponsors when they put an add in their newsletter the user will now be spammed with.

Imagine if the other auth providers followed suit. Open a news article and you need to close the Google auth, Apple auth, Facebook auth, Microsoft auth, GutHub auth, X auth… I’m sure I’m forgetting some. After closing those 6 modals, reject the cookie prompt, close the newsletter modal, and maybe now we can start reading the article if there is an auto-playing video ad covering some of the content.

All of this is really pushing me away from the internet in general and souring me on the tech industry as a whole. I’m at that point where I find myself casually browsing for jobs that won’t require I ever touch a computer again.

still_grokking 29 minutes ago | parent [-]

Just use µBlock Origin for most of the annoyances, and for the stupid google popup a simple Stylus CSS rule is enough.

harry8 4 hours ago | parent | prev [-]

Google is guilty

hilbert42 2 hours ago | parent [-]

Trouble is we cognoscenti know it but the great unwashed do not and or don't give a damn about the fact.

Google and all of Big Tech well know of our objections but unfortunately we are only hardly perceptible noise to be ignored on their way to even greater profits.

froddd an hour ago | parent | prev | next [-]

I’m in the UK and use the Gmail app, I don’t ever see this sheet. Is this US-only?

I don’t see the sheet for imgur.com either because, well, they’ve blocked access completely for UK users. :shrug:

tonyedgecombe an hour ago | parent [-]

I see it in the UK.

hutattedonmyarm 2 hours ago | parent | prev | next [-]

the YouTube app does the same. Infuriating. I don't have Chrome installed and it doesn't list the only third party browser I _do_ have installed: Orion

notyourwork 4 hours ago | parent | prev | next [-]

Gatekeepers have to gatekeeper. Sigh.

vachina 6 hours ago | parent | prev [-]

Why are you even using the Gmail as your mail app?

al_borland 5 hours ago | parent [-]

The switching cost on a 20+ year old email address is high. It’s basically impossible to totally migrate away from. On top of that, since Google does their own thing, it doesn’t fit well into standard IMAP that most clients use.

Sparrow made Gmail a great experience, but Google bought it and shut it down. I’m still rather bitter about that. It’s the only email client that actually made me enjoy email.

ninjagoo 5 hours ago | parent | next [-]

> The switching cost on a 20+ year old email address is high. It’s basically impossible to totally migrate away from.

Not that hard. Get new email, autoforward old email to new. In old email, set reply-to as new email.

After suitable time has elapsed, disable old email.

al_borland 3 hours ago | parent | next [-]

This doesn’t solve the root of the problem. Google is still the backbone of a significant amount of the email and no meaningful progress would be made toward the day when I could delete the Google account.

It would require systematically changing my email at the 300+ sites I’m aware of, assuming they allow that, or deleting the account if they allow that. I’ve been making efforts here and it’s painful. Many companies don’t have good systems for that, if any at all. Even big companies like Amazon and Sony, I was told to just abandon old accounts and let them hang out there forever… I had duplicate Audible and PlayStation accounts. No way to delete them. I found this particularly upsetting with Sony, considering how many times they’ve been hacked. On some sites I also ended up in captcha purgatory.

Then there are the hundreds more who have my email somewhere. I tied to change my email 13 years ago. My own mother still sends to my old gmail account. I think she used the new one a few times, but do I really want to nag my 70 year old mother about using the wrong address? My dad is the only one who reliably uses it, because he uses his contacts app properly. Over a decade and the progress has been almost non-existent. All this effort did was make email and logins harder to manage by spreading it out.

The pragmatic approach is to go back to Gmail, since most stuff is still there. I don’t want to be in bed with Google, but at least it’s only one thing to think about.

Thinking about it, my Gmail account is also my Apple ID. I think Apple only recently made an option available to change that, but it feels risky.

ribosometronome 2 hours ago | parent [-]

I changed my Amazon sign in a few weeks back, no real issue. I just popped over to Audible and there seems to be a pretty straight forward flow to changing your email, although I didn’t actually try it out. What issue did you have? Was it awhile back? Not trying to be contentious but curious / you may have some luck now if you struggled with it in the past. It’s certainly not trivial to just abandon one email for another, especially if you have been using the same for two decades.

al_borland an hour ago | parent [-]

I had 2 accounts. A legacy Audible account and my main Amazon account. The Audible account was created before Amazon bought them, and I think after the acquisition I just started using my Amazon account.

My main Amazon account has all the Audible stuff I actually care about, as well as copies of the stuff on my legacy account, so I wouldn’t lose anything that mattered if they deleted it.

My goal was to delete the legacy account and all my personal data related to it (which I believe is required by law in some places).

I ended up on the phone with support and talked to them for quite a while. They said there was nothing that could be done. This was probably a year ago, Best I could do I guess is delete as much as I can, if they allow it, change the email to a 10 minute email, and then let it go. This is what I had to do for Papa John’s last week and a couple other places, but I’d rather my account actually be deleted so I don’t have to worry about a future data breach on an account I would no longer be able to get into. I don’t know how their database is setup, if I change something I can see, is it actually gone or does the DB keep a history? There are a lot of unknowns that make me uncomfortable with just abandoning an account.

With Sony it was worse. At least Amazon talked to me. Similar situation with 2 accounts. Their website said to call to have your account deleted. I called, waited on hold for 40 minutes, then was told they couldn’t do it. They hung up on me while I was trying to tell them their website said to call the number.

This past weekend I migrated out of 1Password, which I had been using for 18 years. That was a fairly big job. The export/import did OK, but I still had to go one-by-one through 600+ entires to sure things up and fix little things. The main job is done, but I have a little more I’d like to do. The email job is bigger and has lots of other people involved, which is where the real challenge is, as they’re all different.

hallway_monitor 4 hours ago | parent | prev [-]

I hate to say it but you are right. It might be finally time to cut the gcord

wafflemaker 3 hours ago | parent | prev | next [-]

>The switching cost on a 20+ year old email address is high. It’s basically impossible

You can use mobile Thunderbird with a Gmail account.

3 hours ago | parent | prev | next [-]
[deleted]
asutekku 5 hours ago | parent | prev | next [-]

Spark is a good replacement for Sparrow.

al_borland 3 hours ago | parent [-]

I just checked out a video. I don’t think it’ll do it for me. What I liked about Sparrow is it made email feel more like Messages or Twitter. Going back and forth in email didn’t feel so formal. I didn’t see that in Spark. They also seem to be leaning really hard into AI, which is a bit of a turn off.

komali2 4 hours ago | parent | prev [-]

I've not had issues plugging Gmail into Thunderbird, aquamail, k-9 mail, maybe you could try one of those?

al_borland 3 hours ago | parent [-]

The issues I had (granted this was probably a decade ago), was that Gmail uses tags and IMAP uses folders. The translation there always felt messy and cumbersome. To me, this is why I felt Gmail wasn’t good in generic mail clients and really needed one built for Gmail.

Maybe all those apps have since updated to natively support all Gmail’s features, but that is also a cat and mouse game with all the stuff they try that doesn’t fit neatly into established mail protocols.

stavros 6 hours ago | parent | prev | next [-]

I hope the EU cracks down on them like they did with Apple.

pred_ 16 minutes ago | parent | next [-]

Has the Apple situation really improved?

I'm probably out of the loop, but last I checked, to put an app somewhere that's not the official App Store, they required you to pay their hefty fee for putting it in the App Store (even if you weren't going to do that), _and_ an additional Core Technology Fee.

(And if that's still accurate, one thing I don't get is how that isn't also anti-competitive.)

matheusmoreira 5 hours ago | parent | prev [-]

Merely regulating them isn't enough. The world needs to start enforcing antitrust laws. If we don't break up all these big tech companies, our future will be a technofeudalist cyberpunk dystopia.

deaux 2 hours ago | parent [-]

We haven't broken up all these big tech companies, and we are living in a technofeudalist cyberpunk dystopia.

still_grokking 18 minutes ago | parent [-]

That escalated quickly.

I think that's actually true. But what does it mean, what's the way forward?

wlesieutre 10 hours ago | parent | prev | next [-]

Pay verification fee to continue

tom1337 9 hours ago | parent | next [-]

so Apple then? They require you to pay the $99 yearly fee to sideload for more than 7 days

GeekyBear 8 hours ago | parent | next [-]

Apple was clear that they were offering the safety of a walled garden from the start.

Apple didn't lie about supporting a user's freedom to run anything they like, only to execute a rug pull after they successfully drove the other open options out of the marketplace.

TheDong 3 hours ago | parent | next [-]

> Apple didn't lie about supporting a user's freedom to run anything they like, only to execute a rug pull after they successfully drove the other open options out of the marketplace.

They did execute a rugpull, and they aren't offering safety anymore.

The rug pull is ads in the app store. If I go to the app store now and search for my bank's name, the first result is a different bank. If I search for 'anki', the first 3 results are spam ad-ware tracking-cookie trash.

If I search "password store" I get 4 results before the "password store" app. I had a family member try to install one of the google-docs suite of apps, and the first result was some spamware that opened a full-screen ad, which on click resulted in a phishing site.

My family can't safely use the app store anymore because they click the first result, and the first result for most searches is now adware infested crap because of apple's "sponsored results".

What's the point of charging huge overhead on the hardware, and then an astounding 30% tax, and also a $100/year developer fee, if you then double-dip and screw over the users who want your app by selling user's clicks to the highest bidder?

still_grokking 11 minutes ago | parent [-]

Don't forget that Apple is spying on their users even more then Google does (which is gross in its own). Apple controls much more user data then Google does.

At the same time Apple keeps telling their users some fairy-tales about "privacy".

No, Apple isn't honest. Definitely not.

AnthonyMouse 2 hours ago | parent | prev | next [-]

> Apple was clear that they were offering the safety of a walled garden from the start.

This is a red herring. Is Google a hypocrite for lying about it first? Sure. But suppose Android dies and gets replaced by something that never claimed to be open. Or gets replaced by nothing so there is only iOS. Is that fine then?

Of course not, because the problem is the lack of alternatives, and having your choice glued to an entire ecosystem full of other choices so that everything is all or nothing and the choices you would make the other way are coerced by them all being tied together into something with a network effect.

supern0va 8 hours ago | parent | prev [-]

If Google actually takes away the ability to run unsigned code, my next phone will be an iPhone. And I rarely even run unsigned code.

Honestly, it might finally result in me fully exiting the Google ecosystem.

still_grokking 8 minutes ago | parent | next [-]

Just to switch to an even more aggressively monitored and tightly controlled walled garden?

People sometimes act as if the one would be an viable alternative to the other. Even both are effectively the exact same shit for the exact same reasons.

How about we move instead to open systems?

matheusmoreira 5 hours ago | parent | prev | next [-]

> If Google actually takes away the ability to run unsigned code, my next phone will be an iPhone. And I rarely even run unsigned code.

Same here. If I must be in a walled garden, then I will choose the better kept garden and it sure as hell isn't one of Google's crappy platforms.

The only reason to put up with the shittiness of Android is freedom. The same freedom they keep eroding with their constant, never ending attempts to force remote attestation and sideloading limits.

GrapheneOS is the last hope for Android as far as I'm concerned. Hopefully Google won't find ways to screw that up.

> it might finally result in me fully exiting the Google ecosystem

Don't wait for them to push you away. Start exiting now. Setting up mail on my own domain and distancing myself from gmail is one of the best things I've ever done. Highly recommended.

b112 4 hours ago | parent [-]

I've noticed with GrapheneOS, that more recent builds are exhibiting weird issues. This isn't their fault, it's upstream ASOP issues. For example, just in the last few weeks:

* The date has now gone missing from my lockscreen, only showing the time.

* I can no longer see signal strength on my phone for mobile, if wiki is off. I turn wifi on, and now I can. I use a larger font, but it used to be just fine.

There are all sorts of little changes like this I've noticed recently.

It makes me wonder if Google is slowly mangling default ASOP so projects like GrapheneOS will have a crappier daily build experience.

And GrapheneOS doesn't have time to manage features changes like this, they focus on their key security improvements and fixes. If Google is doing this on purpose, it has real potential to seriously degrade ASOP as usable without lots of fixes and changes.

They already rug-pulled security updates or whatever it was a few months back.

And it really seems like the sort of sneaky, underhanded way Google would handle things.

garciansmith 3 hours ago | parent [-]

Odd, I don't have those issues (date is on the lock screen, network signal strength when wifi is off is there). Played around with font settings but that changed nothing. Up to date stable version of Graphene on an 8a. Are these beta versions? Or maybe it's phone dependent.

b112 2 hours ago | parent [-]

Do you have 'Receive security preview updates' on?

Google stopped publishing any info about security updates until (I think) quarterlies come out. GrapheneOS had to sign some sort of non-disclosure for them, in order to roll them into updates.

If you don't have that on, then you're not fully up to date with security updates. This could be the difference.

still_grokking 2 minutes ago | parent [-]

> GrapheneOS had to sign some sort of non-disclosure for them, in order to roll them into updates.

So doesn't this mean GrapheneOS is effectively controlled by Google now?

Also, how is keeping anything secret under NDA possible at all if you want to know what's in a security update and be actually able to build that update yourself from source?

state_less 7 hours ago | parent | prev | next [-]

Buy a cheap unlocked smartphone and run GrapheneOS[0]. I want my smartphone to be like my linux computers where I run them for as long as the hardware works and is still relevant. My iPhone 12 is getting close to its end of life support, yet it is still working well. We should expect better from trillion dollar companies. So I'm not supporting them with dollars wherever I can afford not to. That and I think it's more enjoyable to run something off the beaten path. I like to explore the space a little.

I swapped out my MBP for an Asus Pro Art running linux last year and that's been working out pretty well. Hopefully my cheap motorola phone will be supported by GrapheneOS soon and that will work out too.

https://news.ycombinator.com/item?id=47241551

drnick1 5 hours ago | parent | next [-]

> Buy a cheap unlocked smartphone and run GrapheneOS

Note that this needs to be a Pixel at the moment.

ysnp 3 hours ago | parent | prev [-]

GrapheneOS will support future Morotola phones that meet a subset of their requirements, rather than existing phones. Less likely to be budget lines for now.

ipaddr 5 hours ago | parent | prev [-]

One walled garden to a bigger walled garden.

intrasight 4 hours ago | parent [-]

That is the human condition - up to the scale of the planet, which is the ultimate walled garden at the moment.

rezonant 8 hours ago | parent | prev [-]

Which increases the limit to whatever time is left on your current payment period. After which the app will stop working and need to be reinstalled by an authenticated developer who has a current Apple Developer Subscription.

EDIT: Edited the above which previously said 90 days incorrectly. Not sure where my brain pulled that from but I posted the correct details here prior: https://news.ycombinator.com/item?id=45743615

Notably if you install a month before your subscription expires you need to reinstall the app in 1 month.

tom1337 8 hours ago | parent [-]

> Which increases the limit to 90 days

It increases to 365 days, no? At least thats the longest I can sign my app and I use a personal but paid Apple Developer Account

rezonant 8 hours ago | parent [-]

Oops yes you're correct. Edited post and put a note about the correction and a link to my previous post describing the correct details.

But it's only 365 days if you install the app on day 1 of your $99 subscription period.

observationist 10 hours ago | parent | prev [-]

>"PLEASE DRINK VERIFICATION CAN TO CONTINUE"

andai 9 hours ago | parent [-]

Context: https://files.catbox.moe/eqg0b2.png

I think they later made a Black Mirror episode along these lines. "Resume viewing... Resume viewing..."

matheusmoreira 5 hours ago | parent | next [-]

Fiften Million Merits. The one where advertisers literally torture a man with loud high pitched noises because he refused to view ads and didn't have enough money to skip them.

jacquesm 5 hours ago | parent [-]

Every one of BM's episodes is extremely good. Fifty Million Merits has so many parts that show precisely how evil technology can be.

matheusmoreira 4 hours ago | parent [-]

Common People is utterly terrifying. Woman falls into a coma, so startup uploads her mind to the cloud so it can stream her mind back to her. Then they start to enshittify the poor woman's life. Can't even sleep because they're using her brain as a CPU. She gets mercy killed while blurting out ads for antidepressants to the person doing it.

Metalhead is also among my favorites. Those kill bots put Skynet to shame.

userbinator 6 hours ago | parent | prev [-]

That meme was 13 years ago.

wswin 8 hours ago | parent | prev | next [-]

what's your solution to combat scammers?

whatshisface 8 hours ago | parent | next [-]

Let's say I'm sitting outside of your office with a bazooka and boxes of high explosives. You ask my why, and I say, "someone might try to rob this office." You say, "somehow, that does not persuade me that a stranger should loiter outside of my workplace with a massive stockpile of ordinance." I reply, "what's your solution to combat robberies?"

rtpg 7 hours ago | parent [-]

let's say I put a lock on an office door. You say "Why? Bazookas will get through the door anyways".

I don't know how I feel about this change but context does in fact matter about whether something is a good idea or not

kelvinjps10 3 hours ago | parent | next [-]

it already has a lock, by default you're not allowed to install apps in android you have to accepts a bunch of prompts and configurations (the key) and now you won't even have the key

fsniper 6 hours ago | parent | prev [-]

Is it a lock? I buy a building and the builder put an id verification lock on the doors and I am not allowed to remove it. And they also require a separate one time fee of 2 to 5 percent of the purchase price.

strogonoff 4 hours ago | parent | next [-]

Metaphors have their limits.

In physical world, there’s only so many people who can rob you if you do something stupid (like constantly give away copies of your keys to strangers), they will be very noticeable when they are doing so, and if you feel like something’s off you can always change the lock.

On the Internet, an you are fair game to anyone and everyone in the entire world (where in some jurisdictions even if it’s known precisely who is the figurative robber they wouldn’t face any consequences), you could get pwned as a result of an undirected mass attack, and if you do get pwned you get pwned invisibly and persistently.

Some might say in these circumstances the management company installing a (figurative) biometric lock is warranted, and the most reliable way to stop unsuspecting residents from figuratively giving access to random masked strangers (in exchange for often very minor promised convenience) is to require money to change hands. Of course, that is predicated on that figurative management company 1) constantly upping their defences against tenacious, well-funded adversaries across the globe and 2) themselves being careful about their roster of approved trusted parties, whom they make it easy to grant access to your premises to.

AnthonyMouse an hour ago | parent [-]

The trouble with your analogy is that physical reality works the same way. People have been committing mail fraud since the advent of post offices. Spies have been planting bugs on delivered goods since the invention of bugs. The thing that causes this isn't digital devices, it's long-distance delivery of goods and messages.

Meanwhile installing software on your own device is the thing that isn't that. They're preventing it even when you're the owner of the device and have physical access to it. They're not installing a lock so that only you can get in, they're locking you out of your own building so they can install a toll booth on the door.

rtpg 4 hours ago | parent | prev [-]

totally my point here. The actual shape of the thing starts mattering so much that at one point your metaphor is just completely useless for judging the actual tradeoffs

bonoboTP 8 hours ago | parent | prev | next [-]

Do you think regular desktop computer should be locked down like this too? Scammers can also tell people to run Windows programs. Should that be banned too?

I'm fine with an opt-in lock-down feature so people can do it for their parents/grandparents/children.

Also, just let people get used to it. People will get burned, then tell their friends and they will then know not to simply follow what a stranger guides them to do over the phone. Maybe they will actually have second thoughts about what personal data they enter on their phone and when and where and who it may be sent to.

Same as with emails telling you to buy gift cards at the gas station. Should the clerk tell people to come back tomorrow if they want to buy a gift card, just in case they are being "guided" by a Nigerian prince scammer?

flomo 3 hours ago | parent | next [-]

Keep in mind that Android has like a billion users who have never touched a Windows computer. (And unmanaged Windows was/is also a disaster zone.) Coming at this from a internet forum perspective is missing the scope of the problem.

> I'm fine with an opt-in lock-down feature

Me too, but it's really just some UI semantics whether this is 'opt-in' or 'opt-out'. Essentially it would be an option to set up the phone in "developer mode".

Dylan16807 an hour ago | parent [-]

There is a big difference between opt-in and opt-out that isn't semantics. You can't slowly discourage, deprecate and delete the default the way you can an opt-in, because too many people keep using it.

flomo 17 minutes ago | parent [-]

Yeah, I predict that "developer mode" will eventually be a setup option in the trust store, so you'd have reset the phone to get to it.

With billions of Android users, there's only millions of people who need or really want this. So like 1%. My point is stop thinking about your mom's windows box and consider the scale.

pas 4 hours ago | parent | prev [-]

Maybe? Let people form CAs, and if a CA gives out certs for malicious apps remove them. (Old apps continue to work, to publish new one get new cert.)

Yes, sad, but works.

People will learn about scams, but scammers are unfortunately a few steps ahead. (Lots of scammers, good techniques spread faster among them than among the general public.)

ajb 13 minutes ago | parent | prev | next [-]

The choice is not between "individuals are on their own against scammers" and "users are locked into Google vetting their phone". Users should be able to choose another organisation to do the vetting. They bought a phone, they didn't sell their life to Google.

RobotToaster 8 hours ago | parent | prev | next [-]

'Those who would give up essential liberty to purchase a little temporary safety, deserve neither liberty nor safety.' - Benjamin Franklin

fluidcruft 8 hours ago | parent [-]

'essential' means can't be bothered to wait 24 hours (once)?

yehat an hour ago | parent | next [-]

Stockholm syndrome is so pity when detected.

bonoboTP 8 hours ago | parent | prev | next [-]

Boiling the frog.

xp84 5 hours ago | parent | next [-]

I have to completely concur that it's probably one step toward an increasingly restrictive final state. Add a few "Are you sure?? You'll brick your phone!!!" warnings, then ID and age-verification mandatory (think of the children!!)

hparadiz 5 hours ago | parent [-]

Maybe it's not good idea for our entire civilization to use only two mobile operating systems controlled by companies that only want to make money.

fluidcruft 5 hours ago | parent | prev [-]

Boiling the scammers and criminals is good.

3842056935870 3 hours ago | parent [-]

[dead]

dare944 5 hours ago | parent | prev | next [-]

To do what I want with my own property seems pretty essential to me.

fluidcruft 5 hours ago | parent [-]

So install a different ROM

JoshTriplett 4 hours ago | parent [-]

And when you do that, you lose access to your bank, because bank apps routinely refuse to run on devices that leave the user in control (e.g. unlocked bootloader, rooted phone). Graphene and similar would be a much more acceptable solution if remote attestation of a locked bootloader were banned.

FpUser 42 minutes ago | parent | prev | next [-]

>"'essential' means can't be bothered to wait 24 hours (once)?"

Essential means to get fucking lost and let me do with the hardware I paid for whatever I want.

fsniper 6 hours ago | parent | prev [-]

You are missing the part that new 24 hour process was a response to backlash. It was not even in their plan.

JoshTriplett 4 hours ago | parent [-]

Sounds like backlash needs to continue until it's clear that that isn't acceptable either.

supern0va 8 hours ago | parent | prev | next [-]

Would you support Microsoft doing the same thing to Windows?

These are general purpose computing devices. It's sure taking a long time, but Cory Doctorow's talk on the war on general purpose computing is sure starting to become a depressing reality: https://www.youtube.com/watch?v=HUEvRyemKSg

tredre3 8 hours ago | parent [-]

Microsoft is doing the same thing, they call it S-mode. A surprisingly large amount of computers are sold with Windows S. Thankfully S-Mode can usually be disabled even if your computer shipped with it enabled.

   Windows S mode is a streamlined version of Windows designed for enhanced security and performance, allowing only apps from the Microsoft Store and requiring Microsoft Edge for safe browsing.
tadfisher 5 hours ago | parent [-]

Which is frankly hilarious because the Microsoft Store is the worst offender when it comes to hosting straight-up scams.

I'm not the only one who has noticed: https://www.reddit.com/r/windows/s/6y39VNaLUh

lukeschlather 8 hours ago | parent | prev | next [-]

All apps should be open source and subject to verification by nonprofit repositories like F-Droid which have scary warnings on software that does undesirable things. For-profit appstores like Google and Apple that allow closed source software are too friendly to scams and malware.

hasperdi 8 hours ago | parent | next [-]

I don't think that's a realistic suggestion as as the quantity of applications are huge who are going to spend time reviewing them one by one. And and even then it's not realistic to expect that that undesirable things can be detected as these things can be hidden externally for instance or obfuscated

lukeschlather 8 hours ago | parent | next [-]

F-Droid exists and they have a much better track record than Google. I'm not actually serious, I just think if there's a single app repo that should be allowed to install apps without a scary 24h verification cooldown, it's Google's proprietary closed-source app store that needs the scary process, not F-Droid.

silver_sun 7 hours ago | parent [-]

Users don't have to wait 24 hours because Google Play store already has registered developers. Scammers can be held liable when Google knows who the developer of the malicious app is.

xp84 5 hours ago | parent [-]

Really though? Who is in jail right now for Play Store malware offenses? Or are we just talking about some random person in China or Russia who signed up with a prepaid card and fake information had their Google account shut off eventually.

collabs 8 hours ago | parent | prev [-]

I think compared to the alternatives, this is the best answer.

Even if you are a bank or whatever, you shouldn't store global secrets on the app itself, obfuscated or not. And once you have good engineering practices to not store global secrets (user specific secrets is ok), then there is no reason why the source code couldn't be public.

staticassertion 8 hours ago | parent | prev [-]

That's absurd.

RobotToaster 8 hours ago | parent | next [-]

No more absurd than letting a megacorp control what I install on my own device.

staticassertion 6 hours ago | parent [-]

Instead the megacorp forces open source licensing, which doesn't solve any of this shit anyway lol

array_key_first 7 hours ago | parent | prev [-]

It's also true, the best way to audit software is source-code and behavior analysis. Google and Apple do surprisingly minimal amounts of auditing of the software they allow on the Play Store and App Store, mostly because they can't, by design. It should shock absolutely nobody then that those distribution methods are much more at risk of malware.

staticassertion 6 hours ago | parent [-]

No one is auditing. Behavior analysis works on closed source software too.

dataflow 8 hours ago | parent | prev | next [-]

Not the parent or agreeing/disagreeing with them, but to your question: if you get creative, there are a lot of things you could do, some more unorthodox than others.

Tongue-in-cheek example, just to get the point across: instead of calling it Developer Mode, call it "Scam mode (dangerous)". Require pressing a button that says "Someone might be scamming me right now." Then require the user to type (not paste) in a long sentence like "STOP! DO NOT CONTINUE IF SOMEONE IS TELLING YOU TO DO THIS! THIS IS A SCAM!"... you get the idea. Maybe ask them to type in some Linux command with special symbols to find the contents of some file with a random name. Then require a reboot for good measure and maybe require typing in another bit of text like "If a stranger told me to do this, it's a scam." Basically, make it as ridiculous and obnoxious as possible so that the message gets across loud and clear to anybody who doesn't know what they're doing.

anonym29 8 hours ago | parent [-]

The people falling for social engineering now won't be protected by this either. You could gate the functionality behind verification of an anti-scam awareness and education training and certification course, scammers would coach people through the entire course and the verification step, and people would still be victimized.

AnthonyMouse an hour ago | parent | next [-]

> You could gate the functionality behind verification of an anti-scam awareness and education training and certification course, scammers would coach people through the entire course and the verification step, and people would still be victimized.

The problem with this line of reasoning is that it proves too much, which really gets to the heart of the issue.

If people are willing to be led to the slaughterhouse in a blindfold then it's not just installing third party code which is a problem. You can't allow them to use the official bank app on an approved device to transfer money because a scammer could convince them to do it (and then string them along until the dispute window is closed). You can't allow them to read their own email or SMS or they'll give the scammer the code. If the user is willing to follow malicious instructions then the attacker doesn't need the device to be running malicious code.

Whereas if you can expect them to think for two seconds before doing something, what's wrong with letting them make their own choices about what to install?

fc417fc802 6 hours ago | parent | prev | next [-]

That's unfortunate if true but it isn't a convincing argument to force the rest of society to live in proverbial padded cells. There's a minimum bar here. Some people probably shouldn't have online accounts and aren't responsible enough to manage their own finances. The rest of us are (hopefully at least marginally) functional adults.

xp84 5 hours ago | parent [-]

This is actually a really interesting problem. Some portion of the public (nerds) are competent to understand what running software even means and the rest (let's call them "sheep") are naive and helpless. A portion of the nerds (Evil Hackers) are easily able to coach any sheep to do any action. Obviously everyone should default to being a Sheep, and obviously it would be ideal if Nerds could have root on their own damn hardware. But how can one ever self-certify that they're actually a Nerd in a way that an Evil Hacker can't coach a Sheep through? "Yes, now at the prompt that says 'Do not use this feature unless you are a software engineer. Especially don't click this button if someone contacts you and asks you to go through this process.'... type 'I am sure I know what I am doing' and click 'Enable dangerous mode.'"

AnthonyMouse 2 hours ago | parent | next [-]

> Obviously everyone should default to being a Sheep

This isn't actually that obvious, for a number of reasons.

The first is that it causes there to be more sheep. If you add friction to running your own software then fewer people start learning about it to begin with. Cynical cliches about the government wanting a stupid population aside, as a matter of policy that's bad. You don't want a default that erodes the inherent defenses of people to being victimized and forces them to rely on a corporate bureaucracy that doesn't always work. And it's not just bad because it makes people easier to scam. You don't want to be eroding your industrial base of nerds. They tend to be pretty important if you ever want anything new to be invented, or have to fight a war, or even just want to continue building bridges that don't fall down and planes that don't fall out of the sky.

Another major one is that it's massively anti-competitive. If the incumbents get a veto, guess what they're going to veto. This is, of course, the thing the incumbents are using the scams as an excuse to do on purpose. But destroying competition is also bad, even for sheep. Nobody benefits from an oligopoly except the incumbents.

And it's not just competition between platforms. Think about how "scratch that itch" apps get created: Some nerd writes the app and it has only one feature and is full of bugs, but they post it on the internet for other people to try. If trying it is easy, other people do, and then they get bug reports, other people contribute code, etc. Eventually it gets good enough that everyone, including the sheep, will want to use it, and by that point it might even be in the big app store. But if trying it is hard when it's still a pile of bugs and the original author isn't sure anybody else even wants to use it, then nobody else tries it and it never gets developed to the point that ordinary people can use it.

So maybe the scam we should most be worried about here is the one where scams are used as an excuse to justify making it hard for people to try new apps and competing app stores, and deal with the other scams in a different way. Like putting the people who commit fraud in prison.

fc417fc802 4 hours ago | parent | prev [-]

> easily able to coach any sheep to do any action

No. This assumption is the core fault with the entire line of reasoning. The typical sheep will not do arbitrary things for a stranger such as sending you his entire bank account because you told him he needed to pay an IRS penalty in crypto to avoid being picked up by the state police who are already en route in 15 minutes.

It's a continuum. The question is how much of the low end needs to be protected by the system.

Binning into discreet blocks to match your example, the question is where to place the dividers between the three categories - nerd, sheep, and incompetent. We don't care to accommodate the third.

dataflow 7 hours ago | parent | prev [-]

Nothing is perfect, but by what percentage would you think scams that leverage sideloading would drop? 1%? 10%? 50%? 90%? 99%?

anonym29 6 hours ago | parent [-]

Compared the current paradigm, where you already need to enable developer options, allow installation from untrusted sources, and tap through a warning screen for each apk to be installed?

Maybe 10-20%, generously. The people who are falling for it under current protections clearly are not reading anything they're looking at or thinking about security at all, they've fallen for social engineering scams and sincerely believe they're at imminent risk of being arrested by the FBI or that their adult child is about to be killed. They're in fight or flight mode already, not critical thinking and careful deliberation mode.

If you were to rank everyone by gullibility, these people would largely be clustered in the top 1-2% of most gullible people. There is very little you can do to protect these people, realistically.

Dylan16807 36 minutes ago | parent | next [-]

> They're in fight or flight mode already, not critical thinking and careful deliberation mode.

That actually sounds like an argument is favor of this restriction. If someone is in a position of deep trust with the scammer then waiting a day is nothing. But if they're in a panic, not thinking things through or calling anyone for advice, that state probably won't last 24 hours.

dataflow 5 hours ago | parent | prev [-]

I guess I just don't believe your estimate. I think you're grossly underestimating how far we can get through these kinds of approaches.

anonym29 4 hours ago | parent [-]

That's fair, reasonable minds can disagree on the numbers and even magnitude here.

What I would challenge you to consider is this: where do we draw the "good enough" line, where we finally stop sacrificing freedom over the devices we purchased under terms that originally included freedom, control, and ownership at the altar of protecting the vulnerable?

Do scam victims need to be 0.1% of all Android users? 0.01%? 0.0001%? Should this extend to computers too - should local admin become completely unavailable to all Windows users? Should root become unavailable to all Mac users? To all Linux users? Should you be allowed to own technology at all, or merely rent it as a managed service, to protect those who cannot be trusted to own devices without getting scammed?

dataflow 2 hours ago | parent [-]

It really feels like you're replying to a completely different comment than mine? Absolutely nothing you're responding to here is consistent with what I wrote (except your very first sentence)...

> What I would challenge you to consider is this: where do we draw the "good enough" line, where we finally stop sacrificing freedom over the devices we purchased under terms that originally included freedom, control, and ownership at the altar of protecting the vulnerable?

There's nothing to challenge here. The method I proposed keeps you fully in control and owning your device. Anybody can follow that process if they want. It's not like I said each person has to get approval from Google before enabling developer mode on their phone.

> Do scam victims need to be 0.1% of all Android users? 0.01%? 0.0001%?

This is not some kind of paradox like you're making it out to be. A very reasonable starting point would be "get this scam rate down to match {that of another less-common scam}". Iterate until/unless new data comes along suggesting otherwise.

> Should this extend to computers too - should local admin become completely unavailable to all Windows users? Should root become unavailable to all Mac users? To all Linux users?

"Too"?! Where did I ever suggest root should be "completely unavailable" to all Android users?

> Should you be allowed to own technology at all, or merely rent it as a managed service, to protect those who cannot be trusted to own devices without getting scammed?

Where did I suggest any of this?

dminik 8 hours ago | parent | prev | next [-]

I'm going to break your kneecaps. Oh, what's that? You don't like it? Well, what's your solution to P=NP?

singpolyma3 8 hours ago | parent | prev | next [-]

If cooldowns work, put them on granting permissions.

There are just as many scam apps in play store and this system does nothing to help with those.

GeekyBear 8 hours ago | parent | prev | next [-]

Tell the unsophisticated users that they would be safer inside the ecosystem that has always been a walled garden.

Why destroy the ecosystem that gives you the freedom to shoot yourself in the foot?

Turning Android into another walled garden removes user choice from the equation.

8 hours ago | parent [-]
[deleted]
passwordoops 7 hours ago | parent | prev | next [-]

Like the ones constantly advertising across Google's plethora of platforms without any repercussions or possibility of recourse with Google? For my safety, of course.

fluidcruft 8 hours ago | parent | prev | next [-]

I suppose you could make the cooldown apply to the actual installed app. Like... when it's first installed it won't work for 24 hours and the clock doesn't start until you reboot. And then on boot it scares you again before starting the clock. And then "scares" you again after the cooldown.

themafia an hour ago | parent | prev | next [-]

Force the phones to be open so I can install my own OS on them.

Then Google can do whatever they want with their OS and I can do what I need with mine. You might actually get phone OS competition. This is what the walled garden is actually meant to prevent.

JoshTriplett 4 hours ago | parent | prev | next [-]

"Warning: if someone is talking to you and walking you through this screen, you may be being scammed!"

Done.

ReptileMan 2 hours ago | parent | prev | next [-]

China just executed couple of them that operated in Myanmar. Since we are hurling towards the bad parts in their dystopia anyway, why not also get the good ones?

steve_woody 18 minutes ago | parent | prev | next [-]

Don't install crap on your phone

jaimex2 3 hours ago | parent | prev | next [-]

We need to remove the play store from Android phones. People have been scammed there more than any other store.

userbinator 6 hours ago | parent | prev | next [-]

Something called personal responsibility and intelligence.

...which clearly companies don't want, because complacent mindless idiots are easier to brainwash, control, and milk.

lyu07282 6 hours ago | parent | prev | next [-]

But this has nothing to do with combating scammers in the first place, have you never used the play store before? It's overwhelmingly scam apps with the most intrusive ad/tracking shit imaginable. There are scammers openly buying sponsored search results for names of popular apps so their malicious app with similar name appears as the first result.

skeaker 8 hours ago | parent | prev [-]

[flagged]

wswin 8 hours ago | parent | next [-]

You didn't even slightly research the topic of phone malware, browse /r/isthisascam for starters. I don't say the problem is an "epidemic" and it doesn't have to be an epidemic to be addressed.

scoofy 8 hours ago | parent | prev | next [-]

It's very obviously not irrelevant. Google is not going to let their main phone app product become associated with Grandma losing her savings! That's not going to help the free software folks... it's going to send everyone over to iOS.

tavavex 7 hours ago | parent [-]

> Google is not going to let their main phone app product become associated with Grandma losing her savings!

How did they manage to survive as the grandma-account-draining brand for over 15 years, though? They're still the market leader.

One of the best arguing tactics the pro-control side has come up with is "The way it works right now is JUST not good enough". And then you don't need to argue any further or substantiate that. You just force your opponent into coming up with new measures because obviously right now we have an emergency that must be dealt with immediately. So far, this reasoning has worked for program install restrictions, de-anonymizing internet users, all sorts of other random attestation and verification measures, and it will be used for so much more.

My question to all that is - what has happened NOW that changed the situation from how it was just a couple years back?. Google hasn't been sitting idle for all these years, they've been adding measures to Android to detect malicious software and prevent app installs by clueless users - measures that were striking a balance between safety and freedom. Why is everything safety-related in the last few years suddenly an emergency that must be rectified by our corporate overlords immediately and in the most radical ways? How did we even survive the 2010s if people are less secure and more prone to being scammed with the new restrictions right now than they were back then?

I'm not saying there's not an issue, but without hard stats, these issues will always be magnified by companies as much as possible as the wedge to put in measures that benefit them in ways other than the good-natured safeguarding of the consumer. In an open society, there's always a point where you balance the ability to act freely with ensuring that the worst actors can't prosper in the environment. Only one of these things is bad, but you can't have both. You need a middle ground.

scoofy 7 hours ago | parent | next [-]

> How did they manage to survive as the grandma-account-draining brand for over 15 years, though?

15 years ago ransomware effectively didn't exist and virtually nobody's grandparents did their banking on their phones.

Dylan16807 28 minutes ago | parent [-]

Insufficient answer. "The past 15 years" is asking about that entire period. If you want to compare a specific point in time, they asked what changed since "a couple years ago". A fair point-in-time comparison might stretch "couple" as far back as 2020 because of how they talked about surviving the 10s, but no further.

So, 2020 or 2023 or so. Plenty of ransomware, plenty of phone banking. What changed since then?

lyu07282 6 hours ago | parent | prev [-]

It's for the same reason governments all over started to implement "age verification" laws all of a sudden, they never tell us their real motivation. That we can only speculate on, but for many people it seems they just go along with it and believe them all on face value, that's what all the media does anyway. The overarching goal they all work towards seems to be total control and surveillance of people's information sources and communication.

fluidcruft 8 hours ago | parent | prev [-]

I wonder whether scammers will switch to using PWA.

pie_flavor 8 hours ago | parent | prev [-]

[flagged]

parrellel 8 hours ago | parent | next [-]

I suppose the question is, who is actually willing to believe Google is going to deal in Good Faith. Why would anyone ever even begin to think that?

pie_flavor 8 hours ago | parent [-]

[flagged]

b00ty4breakfast 5 hours ago | parent | next [-]

I see a bull charging full-sprint at me, I'm not going to sit here and consider whether he's merely reacting to a loud noise or if he's actively trying to gore me to death. Incidentally limiting user freedom is indistinguishable from purposefully limiting user freedom.

schubidubiduba 7 hours ago | parent | prev | next [-]

Google has a fetish for controlling what I can install because they earn money by sitting on the brdige between me and the app developer. That is not a conspiracy theory like you try to portray it. That is basic economics.

parrellel 7 hours ago | parent | prev [-]

Alex Jones is a bit much, yathink?

They're an amoral monopolistic megacorp that should have been broken up a year ago.

They are performing the ritual of maximalist offensive position -> half-hearted walk back to a worse status quo.

Is the problem they claim to want to solve real? Maybe. I haven't seen a convincing breakdown that doesn't lump a lot of unrelated fraud in the unvetted APK bucket.

That's beside the point though. No one should applaud this utterly predictable and disgusting behavior.

I don't accept it when Unity does it. I don't accept it when Hasbro does it. I won't accept it here either.

tavavex 8 hours ago | parent | prev [-]

> "That's just FURTHER PROOF that you're secretly trying to destroy my phone."

What a ridiculous strawman. I outlined a specific issue with what they introduced. To make it even more clear - the new flow Google created would work just the same with just the 24 hour delay, but the way how they introduced the "For how long should you be able to install apps?" question comes out of left field and suddenly makes you think about timing. Why would they ask you that? After all, you jumped through a sufficient number of hoops for Google, they probably estimated that anyone who has gone that far out of their way should know what they're doing. So why ask a developer or power user about the duration when this feature works? The very unsubtle hint here is that the question is asked because soon enough, 'Forever' will not be an option anymore. It's a very common tactic - restrictions start light, and then are ratcheted up into a nagging reminder that works to dissuade everyone but the most dedicated.

> You understand there's a real goal being pursued here, right? Suppose Google is dealing in good faith.

I do. But why are you so implicitly adamant that the only goals here are good, noble, moral goals? Google will do everything in its interests, regardless of how good or bad it is for people. Decreasing the vectors of attack on their platform is profitable for them, and it also coincides with the public interest of not getting hacked. But ensuring that other brands, OEMs or developers can't interfere with them building an app distribution monopoly is also good for them. Being the sole arbiters of what goes on the devices that have now become mandatory for participating in society is extremely good for them. Do you think they're only pursuing the first one of the three?

> How should they solve it differently?

You're not going to like the answer, but there's no clean, perfect solution that balances everyone's interests. Companies are pushing the safety angle in pursuit of the three interests I listed above. You can see just how much it ramped up in the last few years, even though we've been living under this status quo for decades. But it's not as simple as turning devices into grandma-phones with approved functionality only, because both extremes have big drawbacks. If you have 90s-style insecure fully-privileged computing for everyone, that's a path towards extremely unsafe and vulnerable systems, worked on by people who don't know what they're doing. If you have full lock-down, you're awarding current market leaders with an endless reign of power by insulating them from competition and giving them more control over users. The way we were doing things before this crackdown was striking a good balance of keeping most grandmas out while not choking the abilities of the hobbyists or third-party app distributors too much. If you want an alternative, an ADB flag that you have to change once through a command prompt would've been good too.