Making sideloading harder has only one goal - growing the wall around the garden a bit higher, piece by piece, layer by layer, while everything within slowly grows more toxic.
In fact I don’t know anyone among any of my friends or family that have ever had that issue.
Every last one of my non-technical friends and family have been hit by spyware on their windows devices.
To say I’m extremely skeptical that this has anything to do with protecting users is an understatement.
In fact I’m willing to go out on a limb and say it’s a nearly non-existent issue outside of people being targeted by nation states.
Would love to see some numbers backing up the claim that sideloading is resulting in mass exploiting of Android devices because I can’t find them.
1. Live in a country where Android is much more popular than iOS?
2. Live in an environment where piracy is rampant?
3. Are used to sideloading apps to get free movies / soccer?
To resolve the problem, scammers would deceive the victims into downloading a malicious app, in an Android Package Kit (APK) file format, sent through WhatsApp.
If there's a reputation, that means it's reasonably widespread. 5% doesn't seem like much.
Does this mean there are so many advanced users sideloading apps to compromise them?
Except users aren't so advanced that they are getting scammed because of side loading?
Or might it be the cascading delays in security updates that don't seem to reach devices between Google, manufacturers, and telcos? This is a much more massive (the 95%) of security hole and backdoors for scams to enter.
These arguments don't really seem to fit together or make sense.
Happy to get some links to read more about all of the statements.
Google could let users add their own signing keys (like browsers allow), and it might be they will let students or power users do this, or they could do what F-Droid does in packaging FOSS apps without developers having to provide extra PII information. If they do neither of these things, it de facto means they're only after control at the expense of normal users.
Both phone users have no idea how to sideload, everything was installed from the Play store.
Android has a reputation for being unsafe precisely because of sideloading (as well as low Google Play fees, looser app review, accessibility services and remote access).
This policy is bad for us HNers, but objectively good for the 95+% of people who will never sideload a legitimate Android app, but are extremely likely to get caught by scammers.
The heavy US skew of HN really distorts the arguments here, as Android-based scams aren't as common in AMerica due to the prevalence of iOS in that region.