• Kissaki@feddit.org
    link
    fedilink
    English
    arrow-up
    81
    ·
    16 hours ago

    The company says it is now developing an “advanced flow that allows experienced users to accept the risks of installing software that isn’t verified.” This installation flow will include safeguards to protect people who are being coerced into installing a dangerous app, or tricked by a scammer, along with “clear warnings to ensure users fully understand the risks involved.”

    IIRC we already had to enable a setting and confirm a warning popup. What are they gonna do? Add more popups? A captcha-“puzzle”? Less easy to accept dialogs?

    • leftascenter@jlai.lu
      link
      fedilink
      English
      arrow-up
      2
      ·
      edit-2
      6 hours ago

      My guess is they’ll enforce a xiaomi-style thing where you have to login, wait, go through hoops, wait again,…

    • TWeaK@lemmy.today
      link
      fedilink
      English
      arrow-up
      15
      ·
      14 hours ago

      Probably a captcha puzzle, or some other thing that requires you to connect to them and surrender your data for free for their commercial purposes.

    • Holytimes@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      10
      arrow-down
      43
      ·
      15 hours ago

      Honestly a less easy to accept dialog would go a long way.

      Just make it require ADB. Iv had my grandfather fall victim to a crypto scam that got him to install a app on his phone.

      As much as we hate it, google is the only one who has any power to prevent abuse of the stupid, elderly and gullible. Someone has too.

      There is a line of going to far to protect people that just makes things worse for everyone. But the reality is, our freedom comes at the expense of others freedom.

      Finding the balance is hard.

      • As much as we hate it, google is the only one who has any power to prevent abuse of the stupid, elderly and gullible. Someone has too.

        Not far enough. We should require a government agent to be with people to verify there isn’t any fraud before allowing any money transactions to happen.

        Wanna buy food at the grocery store? Please wait for your assigned NSA agent to verify that you’re not being scammed.

        (Is /s even needed?)

      • Dekkia@this.doesnotcut.it
        link
        fedilink
        English
        arrow-up
        33
        ·
        15 hours ago

        Hot take: We shouldn’t lock down devices by default to a point where they protect even the most vulnerable.

        Child safety locks exist for a reason and can also be used for the elderly.

        • chiliedogg@lemmy.world
          link
          fedilink
          English
          arrow-up
          2
          ·
          5 hours ago

          Prescription pill bottles are a perfect balance.

          You can put the cap on one way to lock them in place to keep kids out, requiring the lid to be pressed down and twisted to open, or you can flip the lid over over to make the pills easily accessible by simply unscrewing it. I’d be 100% okay with a step on phone setup (that can also be run at any other time) that allows the phone to be set up similarly.

      • adavis@lemmy.world
        link
        fedilink
        English
        arrow-up
        24
        ·
        14 hours ago

        Nah screw needing adb, that absolutely kills free and open source software stores like fdroid, and fdroid have said as much that Google’s then planned signing requirements would lead fdroid to stop.

        The only way I’d even be remotely OK with another adb requirement is if

        1. it’s a requirement to unlock the ability to install unsigned apps, ie it’s not to an install an app but set a flag
        2. #1 becomes a requirement for Google certification so all manufacturers have to allow it
        3. It doesn’t cause other types of attestation to fail that we see with unlocked, rooted and third party roms failing certain checks preventing some apps, most commonly banking ones from working
        • UnbrokenTaco@lemmy.world
          link
          fedilink
          English
          arrow-up
          9
          ·
          edit-2
          13 hours ago

          I think whatever is required for third party apps and stores should also be required for play store. No special treatment for their own files.

          Eg: “Warning: Are you sure you trust GooglePlayStore.apk? This software might be harmful.”

          I reckon that Google would magically get the messaging exactly right with that requirement.

        • Fiery@lemmy.dbzer0.com
          link
          fedilink
          English
          arrow-up
          1
          ·
          14 hours ago

          At least with something like shizuku one can effectively adb to your own phone, so even if adb became required to install non-google-approved apps on one’s own phone… It will not block FOSS for long.

      • dumbadoor@lemmy.zip
        link
        fedilink
        English
        arrow-up
        7
        arrow-down
        3
        ·
        13 hours ago

        In today’s society everything needs to be baby proofed. Protect this protect that. People need to take responsibility for their actions.

        Your grandpa got greedy and wanted to invest money to make more money. Now he got scammed and he learned his lesson. Next time guided by prior experience he should/will be more careful. If not he will loose more money until he realises he shouldn’t be clicking and installing everything he sees.

        And that applies to everyone. You alone are responsible for your actions, not anybody else

        • helpImTrappedOnline@lemmy.world
          link
          fedilink
          English
          arrow-up
          2
          arrow-down
          5
          ·
          edit-2
          11 hours ago

          Until he has early dementia and forgets the lessons learned, but of course he’ll forget he invested anything tomorrow and do it again!

          I’m all for holding people personally responsible, but sometimes we gotta help each other out. Also blaming the victim for being scammed is not helpful. Scammers do so many underhand tactics its impossible for any us to keep track of it all alone.

          I’m okay with more tools to help us protect people. Maybe instead of needing ADB, you have to boot into save mode, and can enable 3rd party sources from there? This way you can still enable it on the phone while preventing a script or app can’t automate enabling it. Oh and because there’s more scam shit on google play than Fdroid, we’ll need google play to be enabled via the same method too.

          • dumbadoor@lemmy.zip
            link
            fedilink
            English
            arrow-up
            1
            ·
            10 hours ago

            Í get what you are saying, I also have an elderly mother that is bad with technology. But she ask anything that is outside of her usual usage.

            If she starts doing some stupid stuff and she isn’t aware of her problem then I’m responsible for her actions. Because its not only her problem then but all of ours family. And again usually I’m the one that is stuck with the problem.

            Then when dialogue doesn’t help I’m locking the device and make sure she doesn’t do something stupid like that again.

            I need the company to provide the necessary tools to prevent fraund so that I can use it.

            Not that the company polices what I can or can’t do with my device that I paid