If the legal system dictates that open = monopoly and closed = fair game, then you get dumb shit like this.
Probably one of the dumbest rulings in tech ever, but few people know about it. Basically set precedent to never share your platform if you don't want legal scrutiny.
https://linmob.net/my-setup-with-danctnix-archlinuxarm/ (2021)
Two types of people will benefit: 1. the genuine & naive who want to help but don't make much progress; 2. those who attended Harvard.
I'd just turn off my phone before midnight, boot it into fastboot and reflash lineage 2 days later, missing the window for them to push anything. No gapps btw.
I think what's interesting, and what our grandchildren will look back on, was how naive the early internet was. There was almost this sense of "the government is powerless" whether it be piracy or jailbreaking or casual death threats [8647 style] or who knows what else. Combined with also a sense that devices will always be exploitable, there's always a way around, resistance from government and corporations will always be futile.
There is a very concerning amount of illegal apps/scams distributed through ads that I've casual users install somewhat banally with the aid of short walkthroughs.
Any sufficiently advanced user is barely affected by this, as the procedure is just complex enough to block average people from getting scammed/using illegal services unknowingly, but simple enough to barely be an inconvenience for anyone who cares enough and can go through it.
24h delay is not all of it, there's developer verification.
I believe this is usually referred to as "boiling the frog".
Any sources for this claim? I don't buy it.
You can disagree with the tradeoff, but if you don't acknowledge it you're just doing propaganda.
Personally, I think the 24h cooldown is an excellent compromise to allow user freedom while slowing down attackers sufficiently to mitigate the harm.
Tech is cool, but it's not an end in itself. Serving people should be. And if people are getting hurt, it's not working well, even if those people are not the ones that read Hacker News.
I think this was probably a very easy decision for Google after they weighed benefits and harms to users and developers.
Also. I regularly remove malware from people's android phones pro bono in and around my community. It all comes from the play store.
They are recommending installing F-droid.. and not accepting android's demands. Its time to have open source smart phone operating system that can not be taken hostage.
otherwise my next phone will be linux
whats the way forward?
You can't just click a random apk in a website and install it. At least without the 24 hour wait workaround, done once per device.
Before you @ me, HN, I run GrapheneOS. I fully understand and practice "own your own hardware". Most people probably shouldn't, though, because they lack the technical ability / interest to do so safely, and throwing them to the wolves strikes me as ideology pushed to the point of foolishness.
Now, y'all can flame my ass.
Even with Android becoming much more closed, it's still more open than Apple.
I had "sideloaded" all the APKs for the software I used on the old phone and saved the APKs. Moving to a new phone was just a matter of loading all the software and copying my rsync'd backups onto the new phone. It was wonderful. Just like moving to a new PC.
I guess I'm happy I got to have this experience for a little while.
Fear, uncertainty, and doubt is a propaganda technique that tech companies have used for long against open source and competitors. The propaganda is to pretend that a 24 hour cooldown and making it difficult to install externals apps is for the good of the user meanwhile stealing their data and giving it to anybody that pays for it.
People are getting hurt. Mass spying should stop now.
1) make it optional
2) don't put it on a timer. What's most damning, in my opinion, is that this is the very definition of a bait-and-switch. Any rational person thinks this won't apply to their existing phone because it came before the rollout, right? It's only android 15 and onward? No. That's wrong, it'll apply to YOUR phone. Google. Non-Google. Doesn't matter. Android 12, 13, 14? Nope applies to them all. That's just an accident then?
It's just a public confession that none of these organizations - not the carriers, not the government, and not Evil Google, are fit for the responsibilities they've claimed.
Small businesses getting blocked by Gmail, Twilio, etc. for legitimate activities is constant.
The propaganda I'm seeing is coming from Google. I can't tell you how many times lately I've seen ads on TV/streaming pushing the security narrative for Play Store. Google knows what it is doing is blatantly anti-consumer and they very much want public sentiment to think it's not.
There will always be means to scam individuals through technology. Pulling stunts like this is not justified simply because it closes off one means of doing so.
And then you have the option:
- unverified packages either temporarily (7 days)
- or indefinitely
Official docs here:
https://android-developers.googleblog.com/2026/03/android-de...
I have many coworkers who work very hard on this problem.
The claim that Google does not care about ads integrity runs counter to my experience.
The real problem here is not that Google is doing this bad thing. The real problem is that they can do this bad thing. They shouldn't have this power. Something needs to be done to rain in Google and take back Android as an open platform.
Nobody reads warnings or errors. StackOverflow is full of questions where someone pastes a clear error message and asks what they have to do when the very error message tells them the solution.
Also, scammers just tell people to ignore warnings and they do it. If someone is able to convince you that your child is in danger and that you have to bypass all warnings to help them, you _will_ do it.
Should Google be less than an asshole in all things? Yes.
I think there’s this like “something must be done now!” attitude of self-important, busybodies I can’t get behind… even if they’re right.
Why have people convinced themselves into thinking now is the most important thing in the world? That if it doesn’t happen now so that it makes me happy instantly it isn’t an option?
Evolution; social, tech, biological, legal, just fucking takes time, and that’s a feature.
There will be a period in which there’s a ton of food over there but your little fishy fins can’t get to it, and that sucks, but deal with it yourself, or just chill and let things happen. I promise if it’s important someone will solve it eventually and the scales do not need to be tipped for every little thing like phone app permissiveness.
In the meantime, you are free to not buy an android phone if you don’t like the system that Google has produced. You seem to think that because you can see its insides that it is collectively owned. It isn’t. Google owns it. Talk of talking it from its owners, is theft.
Don’t make me defend Google, I fucking hate Google.
The best solution would have been to be able to mark ANY alternative app store like fdroid as trusted and no such cooldown period would hit every time people install an app from there. This avoids that people can immediately use installed apps downloaded from an arbitrary URL but at the same time keeps the alternative app stores as a good alternative. Google decided to play unfair again.
I'm pretty convinced it is just Google testing boiling the water steady and slowly :)
It's not 100% perfect, but it helps reduce scams.
If you know you want your phone unlocked, just start the process as soon as you get your phone.
Full disclosure, I am an iPhone user in part because I personally like living in the walled garden. But I also acknowledge that it has its downsides. I have a separate Android device just for language learning because the open source language learning app ecosystem is basically nonexistent on Apple’s locked-down platform. I’m not thrilled about the possibility of that ecosystem withering and dying on Android, too.
> You can disagree with the tradeoff, but if you don't acknowledge it you're just doing propaganda.
I would turn this right around and say that until the proponents of this measure acknowledge that the Play Store is not safe and is in fact a primary vector for scams, you're just doing propaganda.
The correct move is to remove the (icon for) the google app store from inexperienced user's phones. (I'm dead serious, and it works)
Unfortunately, that's exactly the move that now gets sabotaged by this google change.
So sure I'll acknowledge the very real risk to users that this is meant to mitigate. It does in fact marginally mitigate the precise narrow risk they state, but introduces a fatal flaw in its place. Probably unwise to let naive users use android at all anymore after this.
The vast majority of tech support scams come through apps on the Play Store. Not only that, but malicious apps get approved on the Play Store constantly.
There is no reason to take any claim that this change is meant to mitigate scams seriously, because there's no evidence to support that it makes a noticeable dent in such activity.
What this change does noticeably and impactfully do, is prevent, via chilling effects, users from being able to use their phones in ways that could lose Google and its partner vendors post-sales revenue.
As you said, serving people should be the end in itself, and this change doesn't do that - it hurts people.
There are people at my gym who often have very bad form who I worry about. I will occasionally chat them up so they're not, for example, shoulder pressing with their arms outside of the scapular plane or benching without any arch in their back. Sometimes they appreciate it and ask me more questions. Sometimes they give me a terse 'thanks' and go back to doing it the way they want to do it.
If somehow every gym started forbidding people from using any equipment with which they could harm themselves unless they could prove, with a 24h cooling off period, that they knew the form and dangers in detail, I'm sure it would probably save a few people from suffering temporary injuries. I think it would also drive a lot of people away from any kind of sustained resistance training and be an overall net negative for public health.
Personally, I don't think such a nanny-state implementation is necessary? That you should be able to easily toggle off such a feature if you like and what happens to you happens. Perhaps there should be a 'tech-illiterate' mode toggled on by default but easily toggled off if you know how to access Developer Options with a little more forewarning about common scams. Perhaps gyms (or Google) could pay people to proactively assist and help people they see as the most vulnerable to certain kinds of exploits. Perhaps there are more pro-social, less-draconian ways of tackling this.
Simply add a setting to the phone for the technologically illiterate and/or young and old.
I can't even imagine how locked down and terrible the internet would be if we had this rhetoric around in the 90s.
...
30 cents out of every dollar, you say?
NackerHughes•1h ago
Every app and every device, worldwide, with no opt-out.
This includes apps shared between friends, distributed through F-Droid, built by hobbyists for personal use.
Independent developers, church and community groups, and hobbyists alike will all be frozen out of being able to develop and distribute their software.
Registration requires:
- Paying a fee to Google - Agreeing to Google's Terms and Conditions - Surrendering your government-issued identification - Providing evidence of your private signing key - Listing all current and all future application identifiers
If a developer does not comply, their apps get silently blocked on every Android device worldwide.
electric_mayhem•53m ago
Aozora7•42m ago
nkjoep•29m ago
The issue will be your bank, your gov, your uni, and school not releasing a compatible app for you.
And nowadays a device that cannot communicate or be trusted by other actors of the network (internet) is pretty much useless.
I hope those entities will wake up and start serving equivalents functionalities via the open web.
That is why we have the good old WWW for.
echelon•22m ago
We can use AI to take back the entire tech stack.
Every moat, every walled garden, every infrastructure piece can be rebuilt with AI.
We're seeing it with desktop apps, with games. It will happen to infrastructure and platforms. I'm itching at the opportunity to build open cloud primitives and P2P social protocols.
We don't need big tech anymore. We just need to be able to run our models.
cheesemonk66•21m ago
other8026•17m ago
glorth•10m ago
Honestly at this point, I'm just gonna start transitioning to Ubuntu Touch. The Android experiment has run its course.
rjh29•50m ago
As it runs through Google Play Services, it's pretty likely they'll boil the frog and make it even harder in the future. Moving to an open platform is a good idea.
KMnO4•16m ago
Obviously this does not affect “every device worldwide”. I don’t have a single Android phone, and the devices I own that do run Android are not affected.