News for hackers. Stuff that matters.
Re:Google to require developer verification to install and s... by wvenable on Monday August 25, 2025 @06:14PM (#45019756)
I predict Windows will end up going this route before Google backtracks on it.

This is the future; partially fuelled by malware, partially fuelled by the desire for platform control, and partially fuelled by government regulation.

Re:Google to require developer verification to install and s... by dhx on Monday August 25, 2025 @07:37PM (#45020524)
As an example of government regulation driving this change, see [1].

This regulation of NSW, Australia considers rooted devices with extra non-Google/non-Apple approved security features such as a duress/wipe PIN (a standard feature of GrapheneOS[2]) as a "dedicated encrypted criminal communication device". How the device is being used doesn't matter. It's how it _could_ be used.

[1] https://classic.austlii.edu.au/au/legis/nsw/consol_act/ca190...

[2] https://grapheneos.org/features#duress

Re:Google to require developer verification to install and s... by femto on Monday August 25, 2025 @07:46PM (#45020582)
I don't know that it's that simple. Further down that section (1920) in reference [1] reads

"(3) A dedicated encrypted criminal communication device does not include-- (a) a device if-- (i) the device has been designed, modified or equipped with software or security features, and (ii) a reasonable person would consider the software or security features have been applied for a primary purpose other than facilitating communication between persons involved in criminal activity to defeat law enforcement detection,"

It's not automatic: depending on what a reasonable person thinks and the definition of criminal activity.

Re:Google to require developer verification to install and s... by dkarl on Monday August 25, 2025 @07:59PM (#45020654)
> applied for a primary purpose other than facilitating communication between persons involved in criminal activity to defeat law enforcement detection

Does the jurisdiction matter? For example, if an activist was using a device to do things in another country that would be legal in Australia but were crimes in the other country.

Re:Google to require developer verification to install and s... by ViscountPenguin on Monday August 25, 2025 @08:46PM (#45020955)
I doubt a judge would interpret the law that way.
Re:Google to require developer verification to install and s... by ekidd on Monday August 25, 2025 @09:32PM (#45021259)
I mean, in my country, it's increasingly unclear to me whether things like "loudly criticizing the executive branch" are now considered criminal. Recent executive branch statements on this issue seem to indicate that they may consider some critics criminal just for being critics. But it's hard to be sure. And so far, every critic they've threatened to arrest has also been accused of committing other crimes.

So "the government only considers a duress PIN illegal if it is used to facilitate crime" seems like a potentially tricky standard to apply.

Re:Google to require developer verification to install and s... by wredcoll on Monday August 25, 2025 @09:42PM (#45021326)
I love how this statement could apply to so many different countries right now!
Re:Google to require developer verification to install and s... by eviks on Monday August 25, 2025 @10:54PM (#45021779)
> depending on what a reasonable person thinks

But this is just legal fiction, so not a barrier to "automatic"

Re:Google to require developer verification to install and s... by meltyness on Monday August 25, 2025 @08:47PM (#45020960)
This is uncanny and worryingly specific, and I'm not a lawyer, but if you're not already under suspicion of being a criminal, then installing graphene doesn't match this definition I think
Re:Google to require developer verification to install and s... by bandrami on Monday August 25, 2025 @09:10PM (#45021121)
"This regulation will only apply to people who are already criminals" is a line that has never held
Re:Google to require developer verification to install and s... by lucb1e on Monday August 25, 2025 @09:34PM (#45021269)
Suspect, they wrote, and that happens all the time. If you go into a store on the way home from work, and 99 days this works fine but the 100th day they want to look in your bag, but you can't show them confidential drawings of the Google Pixel 14 Max that you carry as part of your work, now they'll think you really did steal something and you went from no suspicion (spot check) to definitely a suspect and new things start to apply to you, e.g. if you leave without resolving the suspicion the police might have grounds to enter your house or search you when you walk out next time. The suspicion is based on being a suspect, not on any actual evidence (nobody saw you put anything in your bag)
Re:Google to require developer verification to install and s... by meltyness on Monday August 25, 2025 @10:05PM (#45021467)
I mean, you don't really have to speculate about what this is for, it's for an authority providing for lawful search, it seems pretty well-scoped, and similar to any old search warrant, which is not a new thing, really https://classic.austlii.edu.au/au/legis/nsw/consol_act/deccd...

Basically, they're not really setting up for a blanket ban on personal security features, that interpretation is obviously catastrophizing. Not that there aren't hamfisted laws somewhere like this, but NSWs implementation seems OK I guess

Re:Google to require developer verification to install and s... by ekianjo on Monday August 25, 2025 @10:11PM (#45021516)
We have mass surveillance already in all 5 eyes countries that assumes that anyone can be a criminal at all times.
Re:Google to require developer verification to install and s... by germandiago on Monday August 25, 2025 @08:59PM (#45021050)
At the pace of regulations we have, one day everything will be forbidden and we will all be criminals just for protecting our own wealth or security from these... yes, from these mafias.
Re:Google to require developer verification to install and s... by rixed on Monday August 25, 2025 @11:15PM (#45021891)
And we will all rationalise it and believe it's normal and has always been like that.
Re:Google to require developer verification to install and s... by germandiago on Monday August 25, 2025 @11:29PM (#45021959)
Sad but true for so many people.
Re:Google to require developer verification to install and s... by stevefan1999 on Monday August 25, 2025 @10:12PM (#45021523)
I could use a knife to chop meat, not people; I could use a car to commute, not as a high speed bullet; I could use a gun to eliminate pests, not to kill people. Just because I can use something to do something nefarious doesn't mean it should be banned, of we should not use Internet at all because it facilitates scammers.

It is always the human mind that dictates the action, not the tool. It is futile to try and ban the tool, and I bet 100% they knew that.

Re:Google to require developer verification to install and s... by positron26 on Tuesday August 26, 2025 @05:02AM (#45024085)
And the problems of government regulation are why we need empowerment through good open technology, not the protection of the other side of the over-concentrated power see-saw.
Re:Google to require developer verification to install and s... by bloomca on Monday August 25, 2025 @06:22PM (#45019851)
Microsoft has way too much of legacy software people use, banning it all overnight will not go well at all. They understand that as well.

They tried to pull a similar move with WinRT/UWP, but nobody wanted it, so now you can continue with Win32.

They would love to do so, but legacy compatibility is a major business advantage.

Re:Google to require developer verification to install and s... by wvenable on Monday August 25, 2025 @06:35PM (#45019979)
Microsoft mismanaged it but there was a potential parallel universe where they were successful at that plan and consumer versions of Windows would be locked to the Microsoft store.

They did a bunch of terrible inept rollouts with confusing technology for both users and developers and effectively shot themselves in the foot. But it did not have to go down that way.

Re:Google to require developer verification to install and s... by donmcronald on Monday August 25, 2025 @06:50PM (#45020113)
Yep. They fumbled the ball on step 1 of demand aggregation and we got lucky there was nothing of value for the 99% of users that will blindly take the easy path.
Re:Google to require developer verification to install and s... by georgemcbay on Monday August 25, 2025 @08:27PM (#45020840)
> there was a potential parallel universe where they were successful at that plan and consumer versions of Windows would be locked to the Microsoft store.

Sounds like a nightmare universe.

I've got a hobby app in kotlin multiplatform with iOS/Android/Windows/WASM builds and while I have no issues with Apple's App Store or Google Play, I've had nothing but problems trying to support Windows Store.

The MSIX installer format is horrendous to deal with and the certification process for new releases on Windows Store is always far too long and in the cases they do find issues the reports of the issue that they log are entirely worthless.

I ended up just pulling the app off the Windows Store entirely and making it a downloadable *.msi installer. While the extra layer of presumed integrity of the app being on the Microsoft Store would be nice it wasn't remotely worth the effort for the tiny amount of people who were using the Windows version in the first place, especially given the app is free.

Re:Google to require developer verification to install and s... by wvenable on Monday August 25, 2025 @09:00PM (#45021060)
That's funny because I don't presume anything on the Windows store has integrity and feel safer downloading the MSI from the official source.
Re:Google to require developer verification to install and s... by tonyhart7 on Monday August 25, 2025 @09:04PM (#45021087)
this is literally just an xbox lol
Re:Google to require developer verification to install and s... by Stevvo on Tuesday August 26, 2025 @10:31AM (#45027089)
Well, no, that was never the plan, except in the heads of conspiracy theorists.
Re:Google to require developer verification to install and s... by autoexec on Monday August 25, 2025 @06:49PM (#45020103)
> Microsoft has way too much of legacy software people use, banning it all overnight will not go well at all.

A lot of legacy software was killed off with the move to 64-bit Windows. Consumers survived that and for businesses registering their software with MS isn't a problem. They're already handing Microsoft all of their company email, their documents, their spreadsheets, etc. and paying Microsoft for the privilege. MS doesn't care at all about consumers.

Re:Google to require developer verification to install and s... by pdntspa on Monday August 25, 2025 @08:09PM (#45020735)
Was it? WOW64 runs 32-bit software fine enough. Or are you talking about 16-bit applications?
Re:Google to require developer verification to install and s... by ethbr1 on Monday August 25, 2025 @07:28PM (#45020475)
MS is now competing against businesses that see their users as profit centers. (Google, Meta, Apple)

Windows was never going to go another way than this.

Users who care about hardware and/or software freedom should be on linux.

Re:Google to require developer verification to install and s... by numpad0 on Monday August 25, 2025 @06:40PM (#45020028)
They can just require hash of legacy binaries sent to Microsoft and rubberstamped back. Eventually they'll have a near comprehensive list of legacy binaries in common use, and move to block unknown binaries in circulation as "malware".
Re:Google to require developer verification to install and s... by dafelst on Monday August 25, 2025 @06:55PM (#45020156)
Microsoft basically already has this (and has for the last ~20 years) as SmartScreen.
Re:Google to require developer verification to install and s... by reactordev on Monday August 25, 2025 @08:03PM (#45020690)
When was the last time you opened your start menu?
Re:Google to require developer verification to install and s... by RedComet on Monday August 25, 2025 @06:31PM (#45019949)
The malware excuse is just a palatable false pretense. "We have to protect granny!" Of course, she is getting fleeced by plain scam calls, not somehow sideloading apks onto her idevice, but the truth doesn't help advance their narrative.
Re:Google to require developer verification to install and s... by imhoguy on Monday August 25, 2025 @08:17PM (#45020781)
My mother in law is constantly worried by some Google Ads in random apps that her phone is hacked...
Re:Google to require developer verification to install and s... by goku12 on Monday August 25, 2025 @10:01PM (#45021439)
Did she ever get anything side loaded like that? I have downloaded malware by mistake before. Not once were they allowed to proceed with installation. The only way I got anything side loaded was if I installed the first one (which is always Fdroid) deliberately via ADB after I enabled the developer mode.
Re:Google to require developer verification to install and s... by imhoguy on Friday August 29, 2025 @11:49AM (#45065634)
No, her phone is clean. The point is GAds quite often are of questionable quality with bullshit scaring unaware people. But then as a solution G worry of grannies being tricked into installing APKs so they turn into gatekeepers of side loading completely for everyone - absurd.
Re:Google to require developer verification to install and s... by steve_taylor on Monday August 25, 2025 @07:31PM (#45020484)
Granny can get scammed using Anydesk, available on Google Play.
Re:Google to require developer verification to install and s... by yupyupyups on Monday August 25, 2025 @07:55PM (#45020629)
Imagine that methaphorical granny that in an instant catches fire and turns into ash if the governments and large corporations don't have complete control over our lives.

What a lovely granny that totally exists.

Re:Google to require developer verification to install and s... by Gigachad on Monday August 25, 2025 @07:15PM (#45020339)
I suspect it's not grandma getting scammed by APKs, but people installing cracked versions of spotify/youtube/paid games.
Re:Google to require developer verification to install and s... by fn-mote on Monday August 25, 2025 @07:26PM (#45020460)
> cracked versions of spotify/youtube/paid games

This doesn't make much sense to me.

To put the strongest face on it, by "cracked" youtube, you mean a version that shows the cracker's ads and maybe somehow generates extra clicks (or whatever) so they can get money out of it?

Cracked spotify? In my mind that's just like YouTube, almost entirely server-side. I guess you're talking about hijacking ads here, too? I feel like a "real" crack of Spotify would let you listen to music for free, but that should be impossible (unless their SWE's are incompetent).

Re:Google to require developer verification to install and s... by 867-5309 on Monday August 25, 2025 @07:50PM (#45020604)
no, cracked as in the ad-free premium versions, without paying for them
Re:Google to require developer verification to install and s... by miki123211 on Monday August 25, 2025 @08:33PM (#45020880)
Those "cracked" versions often require extra permissions.

My favorite was a local "discover which on your contacts is on the leaked Covid quarantine list[1]" scam app. It claimed that the extra permission dialogs are just fearmongering by Google, who is in cahoots with big pharma, and wants covid to spread to sell more medications.

[1] In fact, no such leak has ever taken place, its existence was just part of the setup for the scam.

Re:Google to require developer verification to install and s... by thephyber on Monday August 25, 2025 @08:52PM (#45020998)
You are approaching as is the malicious developer was trying to add useful features for the users.

But in practice, these “apps that lookalike popular apps” are not intended to just be adware-less versions of the popular apps. They are frequently “hide the ads, inject the malware with more permissions” Trojan horses.

Re:Google to require developer verification to install and s... by Gigachad on Tuesday August 26, 2025 @12:12AM (#45022191)
I think there is likely a dual motive from Google where they both want to stop malware _and_ stop people blocking youtube ads. The malware problem is real though.
Re:Google to require developer verification to install and s... by const_cast on Tuesday August 26, 2025 @01:36PM (#45029753)
Yes but using a real problem as a vehicle for increased control and permission is, in it of itself, a Trojan horse.

Google is doing the same thing the fake apps are doing. Real problem: bad ads. Solution: cracked app. Trojan: too many permissions, steals data.

Google: problem: bad apps. Solution: advanced Google DRM. Trojan: too many permissions, steals data.

Re:Google to require developer verification to install and s... by johnmaguire on Monday August 25, 2025 @09:51PM (#45021374)
They mean apps like SmartTube, Vanced, Instander, Spotify Premium Mod which block ads or grant other premium features for free.
Re:Google to require developer verification to install and s... by chmod775 on Monday August 25, 2025 @08:10PM (#45020744)
> I predict Windows will end up going this route before Google backtracks on it.

It will not happen in the next 10 years. Right now people would just make generic launchers and then use them to manually load and execute any binary they please. Options include just writing your thingy in a scripting language and run it in node.exe, python.exe, or compile it to WASM, use native bindings of a scripting language, abuse a random verified electron app, etc etc.

Even remotely getting to the point where locking Windows down to that degree would be possible is going to take MS a long time, fighting friction from users all the way. The whole ecosystem would have to change drastically for that sort of control to even be possible and make sense.

Re:Google to require developer verification to install and s... by rafark on Monday August 25, 2025 @07:41PM (#45020560)
> This is the future; partially fuelled by malware, partially fuelled by the desire for platform control, and partially fuelled by government regulation. I would say it’s really 50% platform control, 50% government regulation.
Re:Google to require developer verification to install and s... by martin-t on Monday August 25, 2025 @06:30PM (#45019931)
Malware is the excuse. Control is the goal. Extracting as much money from people while providing less actual value.

The saddest part is this is to the detriment of literally everyone except a couple rich owners of those companies. And everyone has the right to vote. But western democracy is so indirect the people who understand and care have no way to change the law because their signal is lost in all the noise by those who don't know or don't care.

If the vote came down to people in favor of walled gardens or in favor of forcing companies to open their platforms, with everyone else not voting, it would be a landslide. But there's no way to vote on it this way.

Re:Google to require developer verification to install and s... by Barbing on Monday August 25, 2025 @10:04PM (#45021458)
“western democracy is so indirect the people who understand and care have no way to change the law because their signal is lost in all the noise by those who don't know or don't care”

Wow, how fix (WITHOUT intelligence tests as voting requirement) :(

Re:Google to require developer verification to install and s... by martin-t on Tuesday August 26, 2025 @06:33AM (#45024695)
I don't think there's anything wrong with inteligence or knowledge tests. People obviously have wildly different abilities to make good decisions.

The real issue is that western societies are built on individualism and the is that everyone is equal when they are obviously not and this would expose the lie.

---

However, the real issue is that decisions are packaged together. People vote for a party which they agree with on a few issues (or just one) and the rest become the noise.

So we need to split voting by issue. You could have one vote to determine which issues people care about most, then have multiple separate parlaments - but there would need to be a mechanism to force them to only write laws for the specific issue which is hard.

---

We could also allow people to override the votes of their representatives. The more people vote directly, the less weight the representatives have.

Re:Google to require developer verification to install and s... by echelon on Monday August 25, 2025 @06:38PM (#45020006)
I just want to say:

I am so sick of Google.

This is a monopoly with annual gross revenues bigger than all but 42 countries behaving this way.

They have conspired to control the web, browsers, mobile computing, and soon AI. It's sickening how much bad behavior they get away with.

They were able to use YouTube to bludgeon Windows Phone to death and become the de-facto mobile duopoly. Then they were able to get their shitty search engine on all the panes of glass, didn't care one iota about search quality (just ads), but were able to leverage their browser engine control to remove adblocking capabilities.

I hope the DOJ/FTC split Google into a dozen companies.

Sincerely.

Re:Google to require developer verification to install and s... by autoexec on Monday August 25, 2025 @06:56PM (#45020173)
> I hope the DOJ/FTC split Google into a dozen companies.

There's no chance of that under the current regime. It loves bribery and Google has the money to get whatever they want.

Re:Google to require developer verification to install and s... by mindslight on Monday August 25, 2025 @11:47PM (#45022064)
Yeah, it is so weird to read comments based on some assumption that the current government is aimed at any semblance of justice. I guess they're just still drinking the Kool-aid?

Trump was a breath of fresh air talking about frustrations with the status quo that other politicians wouldn't acknowledge. But the only reason he was bringing them up was to use as a cudgel to shake down companies to enrich himself. He will very most certainly go after big tech monopolies and break them up... iff those big tech monopolies don't put bribes into his pocket. As long as his pockets get fatter, then the status quo is just peachy. It's called "making a deal".

Re:Google to require developer verification to install and s... by jjani on Tuesday August 26, 2025 @12:09PM (#45028489)
> I hope the DOJ/FTC split Google into a dozen companies.

This is just such an insane thing to say. It's like a Russian posting "I really hope our DOJ/FTC splits up Lukoil into a dozen companies!". But Russians don't post that because they're actually sensible.

Re:Google to require developer verification to install and s... by actionfromafar on Monday August 25, 2025 @06:21PM (#45019832)
control=surveillance
Re:Google to require developer verification to install and s... by autoexec on Monday August 25, 2025 @06:43PM (#45020050)
control is the entire point of the surveillance
Re:Google to require developer verification to install and s... by Y_Y on Monday August 25, 2025 @06:27PM (#45019903)
This whole thing is getting totally out of surveillance!

Someone should hit surveillance-alt-delete!

Re:Google to require developer verification to install and s... by campground on Monday August 25, 2025 @08:32PM (#45020878)
This is the year of Linux on the Desktop!
Re:Google to require developer verification to install and s... by platevoltage on Monday August 25, 2025 @09:52PM (#45021384)
I think the first thing Windows loses dominance in is Gaming, and that will be the beginning of the end.

Are there still people who like using Windows?

Re:Google to require developer verification to install and s... by goku12 on Monday August 25, 2025 @10:08PM (#45021493)
> Are there still people who like using Windows?

You are assuming that everyone knows about or ever experienced the alternatives. Windows way is the only way for many.

Re:Google to require developer verification to install and s... by hedora on Monday August 25, 2025 @10:19PM (#45021568)
Linux is at 5% desktop market share this year, and I gave up on running windows games without steam a decade ago.

On average my game library works much better under Linux than Windows (Mac is a distant third — probably worse than FreeBSD).

Anyway, at 1 in 20, most people probably know someone that runs Linux.

Re:Google to require developer verification to install and s... by goku12 on Tuesday August 26, 2025 @03:38AM (#45023447)
Have you considered the possibility that those 5% may be concentrated in certain markets, since it's mostly accounted by steamos?
Re:Google to require developer verification to install and s... by platevoltage on Tuesday August 26, 2025 @01:15AM (#45022510)
No I'm not. I asked if anyone likes Windows. These people presumably have no opinion, it's just a means to an end. The closest thing I think you'll get is "I liked Windows 7" or something like that.
Re:Google to require developer verification to install and s... by goku12 on Tuesday August 26, 2025 @03:36AM (#45023426)
Those replies corroborate my point, if you think about it. They would have had an opinion if they had seen the alternatives. They would at least wish that Microsoft stopped doing these annoying modifications. I would know, because I have a rather large circle of friends who use only Linux or BSD.
Re:Google to require developer verification to install and s... by NooneAtAll3 on Monday August 25, 2025 @09:01PM (#45021071)
government unregulation
Re:Google to require developer verification to install and s... by goku12 on Monday August 25, 2025 @10:11PM (#45021517)
It's still government regulation. It's just that they have changed the target or regulation from commercial entities to regular individuals like you.
Re:Google to require developer verification to install and s... by eikenberry on Monday August 25, 2025 @10:17PM (#45021548)
This would also mean eliminating WSL2.
Re:Google to require developer verification to install and s... by anticensor on Sunday August 31, 2025 @05:02PM (#45087051)
They would just sandbox it to the point of unfitness for purpose.
Re:Google to require developer verification to install and s... by LocalH on Monday August 25, 2025 @10:27PM (#45021622)
Malware is the excuse. I went, without super skill, 40 years while only contracting two viruses ever (one was Kakworm, the other was inert at the time because I was an Amiga user who kept a copy of Scorched Earth on a floppy, which never infected my Amiga).