this post was submitted on 11 Sep 2024
4 points (100.0% liked)

Technology

59651 readers
2617 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
 

You might sideload an Android app, or manually install its APK package, if you're using a custom version of Android that doesn't include Google's Play Store. Alternately, the app might be experimental, under development, or perhaps no longer maintained and offered by its developer. Until now, the existence of sideload-ready APKs on the web was something that seemed to be tolerated, if warned against, by Google.

This quiet standstill is being shaken up by a new feature in Google's Play Integrity API. As reported by Android Authority, developer tools to push "remediation" dialogs during sideloading debuted at Google's I/O conference in May, have begun showing up on users' phones. Sideloaders of apps from the British shop Tesco, fandom app BeyBlade X, and ChatGPT have reported "Get this app from Play" prompts, which cannot be worked around. An Android gaming handheld user encountered a similarly worded prompt from Diablo Immortal on their device three months ago.

Google's Play Integrity API is how apps have previously blocked access when loaded onto phones that are in some way modified from a stock OS with all Google Play integrations intact. Recently, a popular two-factor authentication app blocked access on rooted phones, including the security-minded GrapheneOS. Apps can call the Play Integrity API and get back an "integrity verdict," relaying if the phone has a "trustworthy" software environment, has Google Play Protect enabled, and passes other software checks.

Graphene has questioned the veracity of Google's Integrity API and SafetyNet Attestation systems, recommending instead standard Android hardware attestation. Rahman notes that apps do not have to take an all-or-nothing approach to integrity checking. Rather than block installation entirely, apps could call on the API only during sensitive actions, issuing a warning there. But not having a Play Store connection can also deprive developers of metrics, allow for installation on incompatible devices (and resulting bad reviews), and, of course, open the door to paid app piracy.

(page 2) 50 comments
sorted by: hot top controversial new old
[–] heavy@sh.itjust.works 0 points 2 months ago (7 children)

Androids best advantage used to be full control of the device... Those were the days. Then it started with saying they know better than you, then locking you out. Now I'm waiting on a new, better solution.

Honestly it's not like native Linux is too far fetched, but there would have to be a big open source common ground device collaboration.

[–] EddoWagt@feddit.nl 0 points 2 months ago

Man I really hate how they stripped your permissions to access the internal and external storage, files can no longer access data from other apps even if you say allow all file access. Also if your phone supports SD cards, you might notice that you don't have write access to it for some reason on later versions of android. (I really struggled with this with my Galaxy S9 on Lineage), had to use apps that remounted my SD card and what not

load more comments (6 replies)
[–] vext01@lemmy.sdf.org 0 points 2 months ago (1 children)

I have an android DAP (music player) that runs Android 7. It's a box with a headphone jack (remember those?) and it's sole purpose is to play offline music from an SD card.

I side-loaded a few music players, because there's no way I'm putting my Google password in android 7 in 2024.

I'd be upset if I couldn't side load. These DAPs never have an up to date android.

Let's hope the music apps I use don't block sideloading.

Poweramp won't. Musicolet?

load more comments (1 replies)
[–] tilefan@lemm.ee 0 points 2 months ago (1 children)

gee I wonder how long it will be before I can download the custom patches to get around this

load more comments (1 replies)
[–] tabular@lemmy.world 0 points 2 months ago

Google Pain Services. Google Pisses Itself API.

[–] thisbenzingring@lemmy.sdf.org 0 points 2 months ago (3 children)

the google store environment is such a pain, at work we have android based Zebra barcode readers... today when I was sideloading our app one of the devices kept uninstalling it because of google play... what a fucking pain in the ass

only when intune fully took it over did it stop...

DONT MAKE ME LIKE INTUNE GOOGLE.... JFK

load more comments (3 replies)
[–] 0x0@programming.dev 0 points 2 months ago (13 children)

So the EU's been forcing Apple to allow sideloading and Google goes Nah, it'll be fine?

[–] flatlined@lemmy.dbzer0.com 0 points 2 months ago (1 children)

No but you see we at Google aren't locking down sideloading. It's the individual app developers. With the api we gave them for that express purpose. Totally not us locking stuff down though, so EU please ignore us trying to indirectly close doors in our walled garden?

load more comments (1 replies)
load more comments (12 replies)
load more comments
view more: ‹ prev next ›