• BenderRodriguez@lemmy.world
    link
    fedilink
    English
    arrow-up
    57
    arrow-down
    1
    ·
    23 hours ago

    So, I will no longer be allowed to install APKs that aren’t from the Play Store? I thought they backed down on that.

    • quick_snail@feddit.nl
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 hour ago

      Only if you have gapps installed. So just reinstall your OS. It’s absent by default.

      Problem solved.

    • pkjqpg1h@lemmy.zipOP
      link
      fedilink
      English
      arrow-up
      69
      arrow-down
      2
      ·
      edit-2
      6 hours ago

      not just play store it’s worse, if the developer didn’t pay to google and give ID to Google, no-one can install that app

      Right now the best solution is using custom ROMs *without Google Play Services

      • Onomatopoeia@lemmy.cafe
        link
        fedilink
        English
        arrow-up
        3
        ·
        19 hours ago

        That would only apply if Play services are involved.

        I’ve installed many apps on devices with no play store, no networking, etc.

        Google will need a mechanism to enforce this, that will be Play Services.

    • artyom@piefed.social
      link
      fedilink
      English
      arrow-up
      37
      arrow-down
      1
      ·
      edit-2
      22 hours ago

      A lot of people reported that they did. I don’t know why. Nothing in their statement said that. They did say they were going to add some “advanced workflows” but didn’t elaborate anymore than that. It says it right in the link in OP:

      Update: Google has not “backed down” from developer verification: Contrary to a vague mention of a possible “advanced flow” that may eventually allow “experienced users to accept the risks of installing software that isn’t verified”, Google’s description of the program continues to state plainly that: “Starting in September 2026, Android will require all apps to be registered by verified developers in order to be installed on certified Android devices”. Until such time that they have shown evidence that it will be possible to bypass the verification process without undue friction, we must believe what is stated on their official page: that all apps from non-registered developers will be blocked once their lock-down goes into effect.

  • pkjqpg1h@lemmy.zipOP
    link
    fedilink
    English
    arrow-up
    40
    arrow-down
    2
    ·
    23 hours ago

    Use Custom ROMs with MicroG

    Here is active and good custom ROMs

    LineageOS (many devices) e/os (many devices) crDroid (many devices) GrapheneOS (only pixel)

    • Luminous5481 [they/them]@anarchist.nexus
      link
      fedilink
      English
      arrow-up
      49
      arrow-down
      1
      ·
      22 hours ago

      that’s just it, they’re targeting custom ROMs with this too. the number of security updates for AOSP is being cut by Google in order to make custom ROMs less secure, so that they can then close down the project while claiming it’s to protect users. make no mistake, the end goal here is make everyone who uses Android have to do so on their terms.

      it’s why Linux phones being mainstream is an absolute priority.

      • pkjqpg1h@lemmy.zipOP
        link
        fedilink
        English
        arrow-up
        10
        arrow-down
        5
        ·
        21 hours ago

        the number of security updates for AOSP is being cut by Google in order to make custom ROMs less secure

        Please don’t spread misinformation. Google didn’t cut security updates. You can still get monthly security updates on Custom ROMs.

        Also it’s just on certified devices

        Starting next year, Android will require all apps to be registered by verified developers in order to be installed by users on certified Android devices. source

        • Luminous5481 [they/them]@anarchist.nexus
          link
          fedilink
          English
          arrow-up
          1
          ·
          2 hours ago

          Please don’t spread misinformation.

          it’s not misinformation, you weird little google fanboy.

          Also it’s just on certified devices

          which is every single major western brand that operates outside of china, and even some that are for that market specifically. you would know that if you had, I don’t know, actually looked at the list of certified devices on google’s own website.

          https://www.android.com/certified/partners/

          • pkjqpg1h@lemmy.zipOP
            link
            fedilink
            English
            arrow-up
            7
            ·
            21 hours ago

            Here is a good information from LineageOS;

            Over the last few years, AOSP has been shifting to a quarterly release cadence, meaning that new features and bug fixes are released every three months. link

              • pkjqpg1h@lemmy.zipOP
                link
                fedilink
                English
                arrow-up
                1
                ·
                6 hours ago

                “Android Security Bulletins will still be released, and picked to all supported LineageOS versions monthly.” LineageOS

                • CmdrShepard49@sh.itjust.works
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  ·
                  4 hours ago

                  Given how large and complex the Android operating system and its underlying components are, it’s not unusual to see a dozen or more vulnerabilities documented in a bulletin. However, the July 2025 bulletin broke this decade-long trend: out of the 120 bulletins published up to that point, it was the first ever to not list a single vulnerability.

                  Instead of bundling all available security patches into the next ASB, Google now prioritizes shipping only “high-risk” vulnerabilities in its monthly releases. The majority of security fixes, meanwhile, will be shipped in quarterly ASBs.

    • JustEnoughDucks@feddit.nl
      link
      fedilink
      English
      arrow-up
      1
      ·
      11 hours ago

      My girlfriend and I both need new phones from her failing and buggy Samsung A52 and my Xperia 5ii. We are not going Samsung anymore because they are putting unremovable Israeli spyware baked into their devices, fairphone 6 still seems very buggy and we had a friend with a fairphone 4 with 99 problems with it, and I don’t want to give google money and we want SD card slots instead of almost no memory to force cloud subscriptions.

      2027 is starting to be a big ask though.

      • slamphear@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        5 hours ago

        For what its worth, I’ve been daily driving a Fairphone 6 with /e/OS for over 4 months now and it seems quite polished to me. I’ve had a small number of issues that I’ve had to work through (as has been the case with every phone I’ve ever used), but I definitely wouldn’t describe it as “very buggy.”

  • themurphy@lemmy.ml
    link
    fedilink
    English
    arrow-up
    14
    ·
    23 hours ago

    This is only fuel on the EU open source initiatives.

    But I’m pretty sure Google wont get away with locking down EU customers anyway, as this is clearly a breach of the DMA.

    • brucethemoose@lemmy.world
      link
      fedilink
      English
      arrow-up
      6
      ·
      21 hours ago

      They could clam a web app is the “alternative” I guess.

      They’ll shut that down too. Somehow. For “security” I’m sure, even as the Play Store is infested with scam apps.

      • pkjqpg1h@lemmy.zipOP
        link
        fedilink
        English
        arrow-up
        6
        ·
        21 hours ago

        Play Store is infested with scam apps

        Last time when I checked most of the apps was scam

      • themurphy@lemmy.ml
        link
        fedilink
        English
        arrow-up
        3
        ·
        21 hours ago

        They mandate 3rd party app stores. I think we are passed that.

        Google is just power grapping what they can towards everyone else to make up for lost profit.

    • Zak@lemmy.world
      link
      fedilink
      English
      arrow-up
      5
      ·
      22 hours ago

      this is clearly a breach of the DMA

      Is it? I think the DMA should have been written so that it is, but Apple does essentially the same thing and EU regulators don’t seem to be claiming that it’s a violation.

      • themurphy@lemmy.ml
        link
        fedilink
        English
        arrow-up
        1
        ·
        21 hours ago

        They mandate 3rd party app stores for Apple also. You can “side load” in the EU on an iPhone.

        • Auli@lemmy.ca
          link
          fedilink
          English
          arrow-up
          3
          ·
          13 hours ago

          And have you seen Apples rules for app stores? Its pathetic that EU allows it.

  • LedgeDrop@lemmy.zip
    link
    fedilink
    English
    arrow-up
    14
    arrow-down
    1
    ·
    23 hours ago

    So, I guess this means that f-droid can only be installed via Google Play. /s

    I’m getting flashbacks to using Internet Explorer to install Firefox.

    edit: made sarcasm more obvious.

  • IronBird@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    14 hours ago

    i was gonna try turning a steam deck into all-in-one device including phone, with portable GSM router of whatever i’d to use it for calls (it does have a mic, right?)

    not sure if/how that’ll work out

    • some_kind_of_guy@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      ·
      15 hours ago

      You could feasibly replace the m.2 SSD with one of these bad boys: https://ebay.us/m/JgLTUU

      You would have to then boot from SD card, not sure if that’s supported. There are also docks with extra m.2 slots.

      I’m reading that the steam deck has 8 pcie lanes. Theoretically there are plenty of possibilities for expansion (at a cost to portability and practicality).

  • roofuskit@lemmy.world
    link
    fedilink
    English
    arrow-up
    6
    arrow-down
    5
    ·
    23 hours ago

    Locked down platforms don’t have opt outs for the locks. Though it is a concerning move in the wrong direction.

    • Ulrich@feddit.org
      link
      fedilink
      English
      arrow-up
      6
      arrow-down
      2
      ·
      23 hours ago

      What opt outs are you referring to? Installing an alternative OS?

      • roofuskit@lemmy.world
        link
        fedilink
        English
        arrow-up
        4
        arrow-down
        3
        ·
        23 hours ago

        Not sure if you’ve been following but the app lockdown does not prevent you from installing apps. You can opt out of the controls they are implementing. They backtracked after the outrage.

        • davidgro@lemmy.world
          link
          fedilink
          English
          arrow-up
          2
          ·
          14 hours ago

          Did you actually read the link? They address this in a big red box:

          Update: Google has not “backed down” from developer verification

          Contrary to a vague mention of a possible “advanced flow” that may eventually allow “experienced users to accept the risks of installing software that isn’t verified”, Google’s description of the program continues to state plainly that:

          Starting in September 2026, Android will require all apps to be registered by verified developers in order to be installed on certified Android devices

          Until such time that they have shown evidence that it will be possible to bypass the verification process without undue friction, we must believe what is stated on their official page: that all apps from non-registered developers will be blocked once their lock-down goes into effect.

          • roofuskit@lemmy.world
            link
            fedilink
            English
            arrow-up
            5
            arrow-down
            2
            ·
            23 hours ago

            Yup, which is why we have to be diligent and prepared. But false information doesn’t solve that issue because you get dismissed.

        • Feyd@programming.dev
          link
          fedilink
          English
          arrow-up
          10
          arrow-down
          2
          ·
          23 hours ago

          They didn’t fully backtrack. They haven’t given details but there are still questions about what “advanced flow” means and whether it’ll involve Google spying on what people install. Even if they backed off the worst part of it, this is still monopolist, anti-consumer, and likely privacy-violating behavior, and the correct action isn’t to go “eh they compromise a little so I’ll shut up and eat my slop”

        • Ulrich@feddit.org
          link
          fedilink
          English
          arrow-up
          7
          arrow-down
          3
          ·
          23 hours ago

          Not sure if you’ve been following but there’s no way to opt out. They did not backtrack on anything, despite widespread erroneous reporting. If you click the OP, it says as much. If you have a source that shows they did, please share it because I’d love to read it.

            • Luminous5481 [they/them]@anarchist.nexus
              link
              fedilink
              English
              arrow-up
              7
              arrow-down
              1
              ·
              22 hours ago

              that’s not backing down at all. they speak of a possible workflow, but they don’t say you’ll be able to install unverified apps. they still say they’ll require it, in fact.

              Starting in September 2026, Android will require all apps to be registered by verified developers in order to be installed on certified Android devices

              • cowfodder@lemmy.world
                link
                fedilink
                English
                arrow-up
                1
                ·
                21 hours ago

                Empowering experienced users

                While security is crucial, we’ve also heard from developers and power users who have a higher risk tolerance and want the ability to download unverified apps.

                Based on this feedback and our ongoing conversations with the community, we are building a new advanced flow that allows experienced users to accept the risks of installing software that isn’t verified. We are designing this flow specifically to resist coercion, ensuring that users aren’t tricked into bypassing these safety checks while under pressure from a scammer. It will also include clear warnings to ensure users fully understand the risks involved, but ultimately, it puts the choice in their hands. We are gathering early feedback on the design of this feature now and will share more details in the coming months.

                • Luminous5481 [they/them]@anarchist.nexus
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  arrow-down
                  1
                  ·
                  2 hours ago

                  yeah, that’s a whole lot of corporate speak that says absolutely nothing. they wrote two whole paragraphs that promise nothing and don’t back down on their verification plans. and you fell for it, too.

                  you have no idea what that “advanced flow” means, or what it entails, or even if it will actually be there to begin with, or how long it will be there until they discontinue it.

              • Auli@lemmy.ca
                link
                fedilink
                English
                arrow-up
                1
                ·
                13 hours ago

                I mean what they pasted here sure sounds like that us what it says.

              • cowfodder@lemmy.world
                link
                fedilink
                English
                arrow-up
                1
                ·
                21 hours ago

                Sure did. Did you?

                "Empowering experienced users

                While security is crucial, we’ve also heard from developers and power users who have a higher risk tolerance and want the ability to download unverified apps.

                Based on this feedback and our ongoing conversations with the community, we are building a new advanced flow that allows experienced users to accept the risks of installing software that isn’t verified. We are designing this flow specifically to resist coercion, ensuring that users aren’t tricked into bypassing these safety checks while under pressure from a scammer. It will also include clear warnings to ensure users fully understand the risks involved, but ultimately, it puts the choice in their hands. We are gathering early feedback on the design of this feature now and will share more details in the coming months. "

                • Ulrich@feddit.org
                  link
                  fedilink
                  English
                  arrow-up
                  4
                  ·
                  20 hours ago

                  As I said earlier, only a vague mention of an “advanced flow” that’s still in the works. Nothing saying they are no longer going to require distributors to register with Google, but it does say that they will require it on Google’s own website:

                  Starting in September 2026, Android will require all apps to be registered by verified developers in order to be installed on certified Android devices

        • pkjqpg1h@lemmy.zipOP
          link
          fedilink
          English
          arrow-up
          1
          arrow-down
          1
          ·
          23 hours ago

          you can only do that if you use a custom ROM

          but on official ROM, no you can’t

          • roofuskit@lemmy.world
            link
            fedilink
            English
            arrow-up
            0
            arrow-down
            1
            ·
            19 hours ago

            All Google has said is that “it’s not a sideloading restriction, but an ‘Accountability Layer.’ Advanced users will be able to’Install without verifying,’ but expect a high-friction flow designed to help users understand the risks.”

            That quote comes from the director of product management from Google Play. It has not been altered or deleted since posted.

            • Ulrich@feddit.org
              link
              fedilink
              English
              arrow-up
              1
              arrow-down
              1
              ·
              19 hours ago

              Again, a bunch of vague nonsensical horseshit. That sounds like their previous strategy where they said you could use adb, which is completely unrealistic, and is 1000% a sideloading restriction.

  • John Richard@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    4
    ·
    22 hours ago

    Time to finally move to GrapheneOS. Hope they finish polishing it, including things like automated backups. I’m going to donate to them. They have consistently proved themselves to be a legitimate project.

      • John Richard@lemmy.world
        link
        fedilink
        English
        arrow-up
        3
        arrow-down
        2
        ·
        18 hours ago

        They have an amazing reputation on open source. I think you’re conflating reputation on open source with reputation because of their willingness to understand & criticize issues with some other open source products. The issues with F-Droid’s security model have long been known & discussed by other prominent developers. It is why Obtanium has become increasingly popular. Heck, it is even mentioned on Privacy Guides. Their criticism towards Firefox is to my knowledge more specific to the Android security model & the reality is that Chromium provides significantly better sandboxing there. That isn’t an attack on Firefox itself but design choices or lack or commitment to the fundamentals, which Mozilla has routinely engaged in with Pocket, reselling Mullvad while breaking their browser support for tab container VPN integration if a user has Mullvad installed, their recent AI push, etc. But again they are specifically evaluating & criticizing the security or technical decisions in such instances. Likewise, it is fair to hate on Manifestat v3 used in newer Chrome extensions because not all the v2 features were supported out of the box, but there is no question that the security model in Manifest v2 was significantly worse & would be very easy for a malicious developer to have intercepted & logged all the requests. Manifest v3 solves that & they have uBlock Origin Lite now. I hope to see further improvements in this area. But criticizing the decisions of an open source project, especially as it pertains to security, does not make them anti-open source.

        • pkjqpg1h@lemmy.zipOP
          link
          fedilink
          English
          arrow-up
          2
          arrow-down
          1
          ·
          8 hours ago

          F-Droid’s security model has long been known and discussed by other prominent developers.

          Yeah, by privsec.dev (which is owned by a GrapheneOS employee and ex-developer: akc3n and TommyTran732),

          and madaidan (who is a GrapheneOS fan),

          and Privacy Guides (there are many GrapheneOS developers in this project).

          Just give me up-to-date information about F-Droid from someone not related to GrapheneOS.


          They have uBlock Origin Lite now.

          Yeah, a handicapped version of uBlock Origin.

          And you really believe that they killed V2 for security? If you do, I have a cheap bridge for you.

          But criticizing the decisions of an open-source project

          If they smear projects that are a real choice for quitting Google and Microsoft (which are F-Droid, Firefox, and Linux), of course I’ll criticize.

    • skuzz
      link
      fedilink
      English
      arrow-up
      4
      ·
      21 hours ago

      What Google has been doing to Android the past few years puts the future of Graphene in jeopardy. Especially with closing off third-party access to the binary blobs needed to enable newer Pixel hardware.

    • Maestro@fedia.io
      link
      fedilink
      arrow-up
      2
      ·
      22 hours ago

      Is it possible to try Graphene out, like dual booting on PCs? Without throwing the existing Android setup away or bricking it?

      • frongt@lemmy.zip
        link
        fedilink
        English
        arrow-up
        1
        ·
        22 hours ago

        Yes, but I don’t know if it works with grapheneos. You can live-boot an image with fastboot boot boot.img. You need the grapheneos img file obviously, and a working fastboot connection, and an unlocked bootloader. Usually unlocking the bootloader means wiping the device before you can do anything else though.

        If you have a pixel, grapheneos should work just fine. Except adding payment cards to Google wallet (non-payment cards and digital tickets work fine though). Some apps may refuse to work on uncertified devices. RCS support depends on your carrier. Outside of those things, though, literally everything else I’ve done has worked.