frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

NanoChat – The best ChatGPT that $100 can buy

https://github.com/karpathy/nanochat
211•huseyinkeles•3h ago•27 comments

Show HN: SQLite Online – 11 years of solo development, 11K daily users

https://sqliteonline.com/
232•sqliteonline•5h ago•90 comments

Environment variables are a legacy mess: Let's dive deep into them

https://allvpv.org/haotic-journey-through-envvars/
128•signa11•1h ago•78 comments

Spotlight on pdfly, the Swiss Army knife for PDF files

https://chezsoi.org/lucas/blog/spotlight-on-pdfly.html
259•Lucas-C•9h ago•79 comments

From Millions to Billions

https://www.geocod.io/code-and-coordinates/2025-10-02-from-millions-to-billions/
20•mjwhansen•5d ago•0 comments

More random home lab things I've recently learned

https://chollinger.com/blog/2025/10/more-homelab-things-ive-recently-learned/
145•otter-in-a-suit•1w ago•66 comments

JSON River – Parse JSON incrementally as it streams in

https://github.com/rictic/jsonriver
54•rickcarlino•5d ago•40 comments

Optery (YC W22) – Hiring Tech Lead with Node.js Experience (U.S. & Latin America)

https://www.optery.com/careers/
1•beyondd•1h ago

American solar farms

https://tech.marksblogg.com/american-solar-farms.html
146•marklit•8h ago•183 comments

The Sveriges Riksbank Prize in Economic Sciences in Memory of Alfred Nobel 2025

https://www.nobelprize.org/prizes/economic-sciences/2025/summary/
96•k2enemy•7h ago•113 comments

Smartphones and being present

https://herman.bearblog.dev/being-present/
112•articsputnik•4h ago•77 comments

MPTCP for Linux

https://www.mptcp.dev/
84•SweetSoftPillow•9h ago•12 comments

AI and the Future of American Politics

https://www.schneier.com/blog/archives/2025/10/ai-and-the-future-of-american-politics.html
65•zdw•3h ago•22 comments

Control your Canon Camera wirelessly

https://github.com/JulianSchroden/cine_remote
69•nklswbr•6d ago•13 comments

CRDT and SQLite: Local-First Value Synchronization

https://marcobambini.substack.com/p/the-secret-life-of-a-local-first
5•marcobambini•4d ago•0 comments

A16Z-backed data firms Fivetran, dbt Labs to merge in all-stock deal

https://www.reuters.com/business/a16z-backed-data-firms-fivetran-dbt-labs-merge-all-stock-deal-20...
81•mjirv•3h ago•28 comments

Ofcom fines 4chan £20K and counting for violating UK's Online Safety Act

https://www.theregister.com/2025/10/13/4chan_ofcom_fine/
109•klez•4h ago•103 comments

Matrices can be your Friends

https://www.sjbaker.org/steve/omniv/matrices_can_be_your_friends.html
100•todsacerdoti•8h ago•72 comments

Android's sideloading limits are its most anti-consumer move yet

https://www.makeuseof.com/androids-sideloading-limits-are-anti-consumer-move-yet/
206•josephcsible•3h ago•101 comments

Putting a dumb weather station on the internet

https://colincogle.name/blog/byo-weather-station/
129•todsacerdoti•5d ago•36 comments

Two Paths to Memory Safety: CHERI and OMA

https://ednutting.com/2025/10/05/cheri-vs-oma.html
39•yvdriess•8h ago•26 comments

LaTeXpOsEd: A Systematic Analysis of Information Leakage in Preprint Archives

https://arxiv.org/abs/2510.03761
60•oldfuture•10h ago•15 comments

Clockss: Digital preservation services run by academic publishers and libraries

https://clockss.org/
43•robtherobber•5d ago•7 comments

Jeep software update bricks vehicles, leaves owners stranded

https://www.thestack.technology/jeep-software-update-bricks-vehicles-leaves-owners-stranded/
42•croes•2h ago•1 comments

Ask HN: What are you working on? (October 2025)

307•david927•22h ago•859 comments

Roger Dean – His legendary artwork in gaming history (Psygnosis)

https://spillhistorie.no/2025/10/03/legends-of-the-games-industry-roger-dean/
9•thelok•4h ago•0 comments

Tauri binding for Python through Pyo3

https://github.com/pytauri/pytauri
151•0x1997•5d ago•47 comments

Some graphene firms have reaped its potential but others are struggling

https://www.theguardian.com/business/2025/oct/13/lab-to-fab-are-promises-of-a-graphene-revolution...
60•robaato•9h ago•30 comments

Making regular GPS ultra-precise

https://norwegianscitechnews.com/2025/10/making-regular-gps-ultra-precise/
48•giuliomagnifico•6d ago•52 comments

MicroPythonOS – An Android-like OS for microcontrollers

https://micropythonos.com
158•alefnula•4d ago•57 comments
Open in hackernews

Android's sideloading limits are its most anti-consumer move yet

https://www.makeuseof.com/androids-sideloading-limits-are-anti-consumer-move-yet/
206•josephcsible•3h ago

Comments

itg•2h ago
Installing any app I want outside the Play Store was the primary reason I decided to go with Android, despite most of the people I know using iPhones. If I can't do this anymore, I may as well switch and be able to use iMessage and FaceTime with them.
brazukadev•2h ago
> Installing any app I want outside the Play Store was the primary reason I decided to go with Android

You still can do that with PWAs in Android. Let's see for how long.

_imnothere•2h ago
> PWAs

And I wonder when can we stop lying to ourselves pretending "web"-apps are real (native) apps?

llbbdd•1h ago
Why?
jadbox•2h ago
You can still install apps outside the play store, but the developer does need to verify their signing information. Effectively this means that any app you install must have a paper trail to the originating developer, even if its not on the app store. On one hand, I can see the need for this to track down virus creators, but on the other, it provides Google transparency and control over side loaded app. It IS a concerning move, but currently this is far from 'killing' non-appstore apps for most of the market.
detectivestory•1h ago
From a quick glance at /r/GooglePlayDeveloper/ it looks like Google is just as interested in killing playstore apps! It seems that they only want to support the existing larger apps now. I think they are giving a clear message to developers that its not really worth developing for that platform anymore. I think we will all agree that the playstore needed a purge but they seem to be making it impossible for any new solo devs at this point.
jadbox•1h ago
I have no idea what this means. How does this change "kill playstore apps"?
andrewl-hn•1h ago
Not related to this particular news item, but several high-profile App developers are either killing their apps on Android entirely (like iA Writer) or removing features due to Google tightening submission requirements and increasing costs for apps that integrate with their services.
omnimus•1h ago
Yeah... no. This is normal with desktop computers. Let's stop handholding people. If I trust the source, I trust the domain... I want to be able to install app from its source.

Googles/Apples argument would have been much stronger if their stores managed to not allow scams/malware/bad apps to their store but this is not the case. They want to have the full control without having the full responsibility. It's just powergrab.

raw_anon_1111•7m ago
And you are completely ignoring viruses, ransomware, keyloggers, the 50 toolbars etc that has been the staple of Windows and before that DOS for over 40 years.

Scam apps are rife in the iOS App Store. But what they can’t do easily install viruses that affect anything out of its sandbox, keyloggers, etc

close04•1h ago
> need for this to track down virus creators

I think they’re just going to track down a random person in a random country who put their name down in exchange for a modest sum of money. That’s if there’s even a real person at the other end. Do you really think that malware creators will stumble on this?

This has to be about controlling apps that are inconvenient to Google. Those that are used to bypass Google’s control and hits their ad revenue or data collection efforts.

blaze33•1h ago
Pretty sure virus creators could just pick a real ID leaked by the "adult only logins" shenanigans, whereas legit app developers probably wouldn't want to commit identity fraud.
gjsman-1000•1h ago
If it gets that bad; Google can do what they already do with business listings - send a letter to the physical address matching the ID, containing a code, which then must be entered into the online portal.

Do that + identity check = bans for virus makers are not easily evaded, regardless of where they live.

voxl•20m ago
Can you imagine what you're suggesting for a Linux machine? It's absurd. My box my rules, I'll run any damn code I please.
msh•46m ago
It also makes it easy for google to blacklist a developer, if for example the trump administration don’t like them (the same way apple removing apps documenting ICE).
pkulak•35m ago
And basically every corporation with any business in the US has proven _more_ than willing to instantly capitulate to any demand made by the administration.
AdmiralAsshat•10m ago
So let's pick a random example app that might be popular on F-Droid today. Oh, I dunno...newpipe.

Given that Google both owns Android/Google Play Store and YouTube: what do you think they would do with the developer information of someone who makes an app that skirts their ad-model for YouTube?

63stack•2h ago
Same, I'm tempted to call android just a shittier iPhone now
Aachen•57m ago
What part of cheaper, better, and open source is shittier exactly?
pkulak•30m ago
> What part of cheaper

The iPhone 17 is the same price as the Pixel 10

> better

But the iPhone 17 has better hardware features, like UWB, better cameras, and a _far_ faster CPU.

> open source

Only if you install Graphene, and then never install anything that requires Google Play Services, which is basically every commercial app.

blackbear_•9m ago
GOS allows you to install and use apps from the Play Store and the vast majority of them works flawlessly.
array_key_first•6m ago
1. Not cheaper.

2. I think it's better, I like the UX but that's subjective.

3. Not open source. AOSP is open source. Android is not open source.

wiether•1h ago
And in the EU you can install apps outside of the AppStore on your iPhone!
gumby271•1h ago
But not outside of Apple's control, they have a very similar mechanism to this verification process with 3rd party app stores.
gdulli•1h ago
Then you'd be rewarding the company that pioneered and normalized taking away these rights. The next rights you'll lose will probably originate on Apple again years before Google takes them away too.
HiPhish•2h ago
We need to stop calling it "sideloading", we should call it freely installing software. The term "sideloading" makes it sound shady and hacky when in reality it is what we have been able to do on our computers since forever. These are not phones, they are computers shaped like phones, computer which we fully bought with our money, and I we shall install what we want on our own computers.
tomall•1h ago
I like the term "direct install" which someone suggested in one of the previous threads.
znort_•1h ago
indeed, but they're not talking about your phone, they're talking about android, which is something you don't buy nor own, you buy a license to use it on the provider's terms.

linux phones can't come soon enough ...

your point about the termn "sideloading" is spot on, though. perverting the language is the first step of manipulation: installing software is "sideloading", sharing files is "piracy", legitimate resistance is "terrorism", genocide is "right to defend oneself" ...

spankibalt•1h ago
> "your point about the termn "sideloading" is spot on, though. perverting the language is the first step of manipulation [...]."

Precisely.

alejoar•1h ago
I wonder where the term started?

Android itself calls it "install" when you open an APK file, there's not mention of "sideload" in Android at all as far as I can tell.

viernullvier•1h ago
There is, actually, but in a different context. The `adb sideload` command allows you to boot a device from an image without flashing it.
chasil•1h ago
This command is also used to install 3rd-party ROMs.

There is an option in the TWRP recovery tool to sideload any capable .ZIP file.

viktorcode•1h ago
I call "running unsigned binaries"
RedComet•1h ago
They are signed, though. Just not by Google.
natch•9m ago
“Running binaries signed either by yourself or by whoever wants to spy on you.”

That last part there is the problem.

gruez•1h ago
>The term "sideloading" makes it sound shady and hacky

"side" refers to the fact that it's not going through the first party app store, and doesn't have any negative connotations beyond that. Maybe if it was called "backloading" you'd have a point, but this whole language thing feels like a kerfuffle over nothing.

unlikelytomato•39m ago
I get where you are coming from. However, language like this matters when it comes to legislation. People outside there space will be guided by the sideload language to think it's just "something extra on the side so why should I care?"
grepex•35m ago
Agreed. "Sideloading" has been marketed as a boogeyman opening doors to malware, when in fact malware exists on the play store anyway.
SoftTalker•31m ago
Sounds like "sidestepping" i.e. doing something illegitimately or at least outside the normal path.
ta1243•1h ago
> when in reality it is what we have been able to do on our computers since forever

You do realise that's been changing right? Slowly of course, there's no single villain that James Bond could take down, or that a charistmatic leader could get elected could change. The oil tanker has been moving in that direction for decades. There are legions defending the right to run your own software, but it's a continual war of attrition.

The vast majority of people on this site (especially those who entered the industry post dot-com crash) ridicule Stallman.

"Dan would eventually find out about the free kernels, even entire free operating systems, that had existed around the turn of the century. But not only were they illegal, like debuggers—you could not install one if you had one, without knowing your computer's root password. And neither the FBI nor Microsoft Support would tell you that."

https://www.gnu.org/philosophy/right-to-read.en.html

gjsman-1000•1h ago
If you want a real blackpill (I think this is the right word), consider the famous Cathedral and the Bazaar.

I recently had a realization: I can name Cathedrals, that are 800 years old, and still standing. I can't name a single Bazaar stall more than 50 years old around any Cathedral that's still standing. The Cathedral's builders no doubt bought countless stone and food from the Bazaar, making the Bazaar very useful for building Cathedrals with, but the Bazaar was historically ephemeral.

The very title of the essay predicts failure. The very metaphor for the philosophy was broken from the start. Or, in a twisted accidentally correct way, it was the perfect metaphor for how open-source ends up as Cathedral supplies.

spookie•54m ago
I fail to see the link, businesses come and go. Their software dies with them.
gjsman-1000•53m ago
Businesses die. Cathedrals don't. IBM is 114 years old. Microsoft is 50. Google is 27. Disney is 101. Nintendo is 136 (they'll outlive Steam and the next nuclear war at this rate). The COBOL running banks is 65 years old. Windows NT architecture is 32. The platforms become infrastructure, too embedded to replace.

How many bazaar projects from even 10 years ago are still maintained? Go through GitHub's trending repos from 2015. Most are abandoned. The successes transform - GitLab, Linux, Kubernetes, more Cathedral than Bazaar.

mariusor•16m ago
Any of the BSDs (well 2BSD is the oldest on a quick search), the linux project, the GNU C lib and GCC, etc. Just because you can't think of it, it does not mean it doesn't exist.
gjsman-1000•11m ago
> Any of the BSDs (well 2BSD is the oldest on a quick search), the linux project, the GNU C lib, etc. Just because you can't think of it, it does not mean it doesn't exist.

Did BSD defeat Linux? No. Which BSD is even the right one? BSD's biggest success is living on as the foundation of Apple's Cathedral in XNU, and PlayStation's Cathedral in the PS4 and PS5.

Did Linux stay a bazaar vendor? No - 90% of code has been corporate contributed since 2004. Less than 3% of the Linux Foundation budget goes towards kernel development. Linux is a Cathedral, by every definition, and only exists today because Cathedrals invest in it for collective benefit. It's a Cathedral, run as a Cathedral joint venture, to be abandoned if a better thing for the investing Cathedrals ever came along.

GCC? Being clobbered by Clang. Less relevant every year. Same with GNU coreutils, slowly getting killed by uutils.

Firefox? Firefox only still exists because a Cathedral called Google funds it.

LibreOffice, Apache, PHP, Blender? Professional foundations that get very picky about who is allowed to contribute what. They aren't amateurs and they all depend on Cathedral funding. Blender only got good when it started collecting checks from Qualcomm, NVIDIA, AMD, Intel, and Adobe.

iamnothere•11m ago
> How many bazaar projects from even 10 years ago are still maintained?

Uhh, all the big ones in common use? GNU’s massive portfolio of software, Linux, multiple BSDs, Apache, Firefox, BusyBox, PHP, Perl, the many lineages of StarOffice, LaTeX, Debian, vim, fish, tmux, I mean this barely scratches the surface. Are you kidding me?

How many startups have failed over the last decade? I would argue that the norm is for any project to eventually cease. Only useful things with an active community (whether that community is for-profit or not) tend to last, until they are no longer valued enough to maintain. This goes for things in the physical world just as it does for software.

nerdsniper•47m ago
There are definitely bazaars which have a very old history. Being that the word "bazaar" has middle-eastern origins it feels appropriate to highlight middle eastern bazaars. Al-Madina Souq in Aleppo is one such bazaar with quite a few shops/stalls/"souqs" dating back to the 1300's or 1400's, such as Khan al-Qadi (est. 1450). Khan el-Khalili in Cairo has its economic marketplace origins rooted in the 1100's-1300's.
gjsman-1000•45m ago
Name a single bazaar vendor that's still going more than 50 years in any of them. The bazaar as an institution remains, as it does today, but there's no permanence with a bazaar, just as open-source will never have a permanent victory without becoming a cathedral. Bazaars persist through constant replacement, churn, not victory.

Windows NT will be with us longer than systemd and flatpak.

PaulDavisThe1st•11m ago
Windows NT is younger than Unix. I'd say the smart money is on the Unix-derived line of operating systems outliving Windows NT by a considerable amount.

However ... the domain of operating systems is subject to weird constraints, and so it's not really appropriate to make some of the observations one might make in other domains. Nevertheless, I thought the point was that we want things to improve via replacement (a "bazaar" model), rather than stand for all time. We don't actually want technology "cathedrals" at all, even if we do appreciate architectural ones.

bigstrat2003•8m ago
Cathedrals change organizations too. You can't compare the longevity of a physical edifice (a cathedral) to an individual or organization (a bazaar vendor). They are different classes of things.
nerdsniper•7m ago
No I meant there are individual shops inside the bazaars that are still going under the same brand name for hundreds of years. The El-Fishawy Cafe inside Cairo's Khan el-Khalili bazaar has been operating under the same name since the 1700's[0]. Bakdash ice cream parlor inside Damacus' Al-Hamidiyah Souq was established in 1895.

For me, walking through an old Souq gives me a similar feeling of awe / mortality / insignificance as viewing a cathedral or looking from the Colorado ranch land up to the Rocky Mountains.

Also some cathedrals have remained "Catholic" since their raising, but there are a lot that have changed from Christian to Islamic to Protestant ... both the cathedral and the bazaar's physical buildings are still present from the same era and both are used for their original purpose (marketplace or worship). And both have delibly shaped their regions by being engines of culture, innovation, and power.

0: https://en.wikipedia.org/wiki/El-Fishawy_Café

1: https://en.wikipedia.org/wiki/Bakdash_(ice_cream_parlor)

api•12m ago
The title also correctly describes the relationship between FOSS and cloud SaaS. FOSS is the bone yard and parts catalog that devs go to when building closed platforms to lock in users. It largely exists today to be free labor for SaaS.
api•6m ago
> The vast majority of people on this site (especially those who entered the industry post dot-com crash) ridicule Stallman.

I've been in tech and startup culture for over a thousand programmer-years (25-30 normal years). It wasn't dot-com or the crash. It was mobile. The mobile ecosystem has always been user-hostile and built around the exploitation of the customer rather than serving the customer. When the huge mobile wave hit (remember "mobile is the future" being repeated the way political pundits repeat talking points?) the entire industry was bent in that direction.

I'm not sure why this is. It could have been designed and planned, or it could have evolved out of the fact that mobile devices were initially forced to be locked down by cell carriers. I remember how hard it was for Blackberry and Apple to get cell carriers to allow any kind of custom software on a user device. They were desperately terrified of being commoditized the way the Internet has commoditized telcos and cable companies. Maybe the ecosystem, by being forced to start out in a locked-down way, evolved to embrace it. This is known as path-dependence in evolution.

Edit: another factor, I think, is that the Internet had no built in payment system. As a result there was a real scramble to find a way to make it work as a business. I've come to believe that if a business doesn't bake in a viable and honest business model from day zero, it will eventually be forced to adopt a sketchy one. All the companies that have most aggressively followed the "build a giant user base, then monetize" formula have turned to total shit.

chasil•1h ago
If Google provides a permanent mechanism to disable this in developer settings, then this devolves to an inconvenience.

The setting to allow unsigned apps could be per appstore tracked by an on-device sqlite database, so a badly-behaving app will be known by its installer.

sidewndr46•1h ago
Have you read anything about this? What you are proposing is exactly what is being disabled.
chasil•51m ago
Let's say that Google implements this restriction, but allows F-Droid a permanent permission to disable it for apps installed through their store.

Then there is both increased protection and accountability.

sidewndr46•34m ago
Why would google implement a restriction then allow someone to disable it? That's literally how it works today. By default your Android phone with Googled-OS installs only from Play store, where all apps are verified. When you want to install non verified apps you need to explicitly allow it first.
observationist•8m ago
Time to figure out how to live without a phone - gotta find some sort of ultramobile pocket pc with 5G and run your own FreePBX for text and calling, etc. I've been wanting to do this forever, anyway. Using Starlink 5G would make it palatable, or maybe even preferable, assuming the performance is solid.
ptrl600•1h ago
Mandatory googleloading.
api•14m ago
I always found this term utterly bizarre. It first showed up in the early days of the mobile "revolution" and felt astroturfed, since no developer would think we need a fundamentally new term for downloading software. It felt like something some dark patterns team came up with to discourage free installation of software on your own device.

Of course maybe I'm overthinking it. It's common for people deep in the bowels of an industry to invent pointless jargon, like "deplane" for getting off an airplane. Anyone know where the term "sideload" was coined or by whom?

wkat4242•37s ago
I like your point. Never thought of it that way. Totally agree
nadermx•2h ago
Why having your own website is essential
kypro•2h ago
As someone who doesn't really care about apps, if I wanted to move away from Android what phones and OSs are worth considering?
sfdlkj3jk342a•1h ago
GrapheneOS on a Pixel
moffkalast•1h ago
It's kind of ironic that you have to actually give Google money in order to not use Android. I'm still amazed that there's no Graphene support for any other device.
la_fayette•1h ago
Let's see what will the future of Graphene be, since Google is not publishing the device tree anymore for Pixel devices...
gruez•1h ago
That's a non-issue for them: https://grapheneos.social/@GrapheneOS/115299586595207105
IlikeKitties•21m ago
It's not a non-issue i'm sure it's quite annoying to deal with, they just work around it. I hope the deal with their unnamed OEM works out and we get a native GrapheneOS Device. I'd buy it day one.
Batman8675309•1h ago
They are building their own device trees now.
ivanmontillam•1h ago
You don't really have a choice: it's either Android or Apple iOS.
yndoendo•1h ago
Don't know how the Google's actions with affect AOSP. There are few options depending on location / country with base band frequencies.

Murena with e/OS/ [0], Purism with PureOS [1], Volla with Volla OS or Ubuntu Touch [2], and Furei Labs with FuriOS [3].

Those are the companies actually trying to sell a phone versus Pin64 selling a device to tinker with.

Alternative is checking personally managed OSes like postmarketOS [4] and Ubuntu Touch [5].

[0] https://murena.com/ [1] https://puri.sm/ [2] https://volla.online/en/ [3] https://furilabs.com/ [4] https://postmarketos.org/ [5] https://www.ubuntu-touch.io/

mariusor•5m ago
I've been using Sailfish OS for quite some time, but I don't do all of my computing on the phone. There's quite a high friction for using any of the mainstream Android apps, so usually you have to find an alternative if possible.
jim201•2h ago
Antitrust action is badly needed in this area. It is ridiculous that I need permission from my device manufacturer to install software on hardware I own. There is no viable alternative than to live in Apple and Google’s ecosystems. This duopoly cannot be allowed to keep this much control of the mobile platforms.
spogbiper•1h ago
There needs to be a mandatory override for any lock down put in place by a manufacturer. I understand the need for security, but it should be illegal to prevent me from bypassing security if I decide to on my own device. Make it take multiple clicks and show me scary warnings, that's fine.

Technically Android still allows installation of anything if you use the debugging tool. Maybe that is where we have to draw the line, I'm not sure.

billev2k•1h ago
The Android Developer Blog called it "an ID check at the airport which confirms a traveler's identity but is separate from the security screening of their bags."

From the mouths of rubes, I guess. The ID check at the airport has zero to do with safety or security and everything to do with the airlines' business model (no secondary market for tickets), enforced by government.

gruez•1h ago
>The ID check at the airport has zero to do with safety or security and everything to do with the airlines' business model (no secondary market for tickets), enforced by government.

If it's really about protecting "airlines' business model", why did TSA recently start requiring REAL ID to board flights? Were airlines really losing substantial amounts of money through forged drivers licenses that they felt they needed to crack down?

moffkalast•1h ago
As with manifest v3, Google is once again misusing their position as a source of open standards to benefit their adware business. Hopefully the EU fines them once again.

A weird hill to choose to die on given that in practice it's not really a meaningful percentage of people that are using adblockers and the negative PR they get from these oversteps is massive.

bitpush•44m ago
Didnt EU rule that it was OK for Apple to do, and Google is just just mirroring that?
gpm•33m ago
I believed the EU specifically ruled that Apple's rules which include this are NOT ok. And they're currently fighting Apple about it. Unless I missed something.
mixologic•1h ago
If you want to install software on your Microsoft Windows computer, it has to be signed by a verified developer, otherwise you get an overridable warning that the developer cannot be verified, the software may contain malware etc.

If you want to install software on you MacOS machine, the same thing applies. It must come from a verified developer with an apple account, otherwise you get a warning and must jump through hoops to override. As of macos15.1 this is considerably more difficult to override.

If you want to install iOS apps, the apps have to be signed by a verified developer. Theres no exceptions.

I just dont see a future where being able to create and publish an app anonymously is going to be supported.

Becoming a verified developer is a PITA, and can take a while or be impossible (i.e. getting a DUNS number if you're in a sanctioned country might be not at all possible) but at the same time, eliminating the ability of our devices from running any old code it downloads and runs is a huge safety win.

yjftsjthsd-h•1h ago
There is a world of difference between "the OS throws up a bunch of warnings" and "the OS won't let you run unsigned software"
like_any_other•45m ago
But Apple will change those "warnings" into straight-up lies, and fail to mention the user can override them, and hide those overrides in non-discoverable places:

Whenever I try to open an unverified app, this popup comes up saying "[AppName] Not Opened" "Apple could not verify [AppName] is free of malware that may harm your Mac or compromise your privacy." Then there's only two options to either press "Done" or "Move to Trash." - https://old.reddit.com/r/mac/comments/1ekv55h/cant_right_cli...

Your only option is to click on OK button, which won’t open the app. So how do you do it? - http://www.peter-cohen.com/2016/12/how-to-open-a-mac-app-fro...

Apple knowingly falsely claiming unsigned apps are "damaged": https://appletoolbox.com/app-is-damaged-cannot-be-opened-mac...

yjftsjthsd-h•39m ago
And yet, that is still less bad than what Android is doing.
SoftTalker•7m ago
This also implies that Apple does verify that app store apps are free from malware, when that's not the case. It only verifies that they are from a developer who paid the fee and whose apps pass Apple's automated screens.
gumby271•1h ago
I dunno man, it doesn't feel like a "huge safety win" that my computer has to check with a singular US tech company before it will let me use any software on it.
ptrl600•1h ago
I'd be fine if it was just any old code "it" downloads. The problem is that it's any old code "I" download too.
kspacewalk2•1h ago
I'm okay with overridable warnings, having to open system settings to override the verification, etc. It's a "huge safety win" for the 80% of users who don't really know what they're doing, security wise. But not for me.

I won't be using any OS that doesn't allow me to step outside its walled garden, if I have any alternatives at all. With macOS it's quite simple - the second they won't allow apps from unverified/unsigned developers, I'm switching to Linux. On mobile, I might as well switch to iOS, since I'm not really sure what else Android offers anymore that's so compelling, other than being able to install apps directly. And then I'll just wait for a Linux phone or something.

iszomer•26m ago
Or you can try not updating Android or continue using a device already EOL. Can't have your cake and eat it too on releases and security patches.
Krssst•1h ago
> I just dont see a future where being able to create and publish an app anonymously is going to be supported.

This is strongly needed if surveillance laws like Chat Control are not to be trivially bypassed. This way applications that don't offer governments the required surveillance features can be banned and the developpers can be sued. Not looking forward to that.

throw10920•1h ago
> eliminating the ability of our devices from running any old code it downloads and runs is a huge safety win

No, this is just false. There's numerous, well-documented instances of malware making it past gatekeepers security checks. This move is exclusively about Google asserting control over users and developers and has nothing to do with security or safety.

The only "huge safety win" comes from designing more secure execution models (capabilities, sandboxing, virtual machines) that are a property of the operating system, not manual inspection by some megacorp (or other human organization).

rclkrtrzckr•1h ago
> This logic is flawed: historically, we've seen malware slip through the Play Store—signed and “verified”—several times.

Yeah, check for all the fake sora apps in the play store.

bitpush•42m ago
This is a weak argument. If things have slipped through the cracks with someone actively reviewing it, the alternative cant be 'lets not do any checking whatsoever'.

There are better arguments against this that other commenters here have provided (including "my device, my rule") but this isnt a strong argument.

hollow-moe•1h ago
They saw apple getting away with it under the DMA so they're just doing the same. You can't do anything about it.
casenmgreen•1h ago
This is the beginning of the end of Android.

Google have over-reached.

It is unacceptable to software developers to be unable to install software on their own phones, and this will lead to a successor to Android.

It will take time, but it will now happen.

bitpush•43m ago
> beginning of the end of Android.

You underestimate how much money & effort it takes to make an operating system.

bryan_w•1h ago
Meh, I can still install what I want via adb. It's probably a good thing most people won't be able to click a link and have a new program installed by an anonymous person. Especially in an ecosystem where .apks are passed around manually
ohman876•1h ago
I know this is side topic but if buying the Android or iPhone hardware gives us hardware we don't control, then what alternatives we realistically have? I do own pinephone (and I was recently reading that they kinda staled with development of new phones hardware), I know about librem.. is there anything else on the market?
freefaler•1h ago
Yes, it's a very unfriendly decision by Google.

However, I don't think they haven't measured the number of users installing apps outside of the Play store. May be they just don't care about the small % of total users who are a large % here on HN.

This is a part of a bigger trend, Cory Doctorow spoke about 13 years ago in his "The coming war on general computing": https://www.youtube.com/watch?v=HUEvRyemKSg

And this will creep out to the major desktop systems too, Apple is doing it with their stupid "non-verified app" and Windows looks more likely to do so with their "need Microsoft account to login" to windows.

user2722•21m ago
Check Stallman's The Right to Read short story.
uyzstvqs•29m ago
I just wish BlackBerry went in a different direction. If during the early-mid 2010s they decided to dedicate to open-source and privacy-first, as well as keeping their flagship QWERTY format with the optimized BlackBerryOS, they could still be around serving a particularly large niche in the smartphone market: Those who use their phone for communication and utility over entertainment.

Maybe they can make a comeback. If anyone at BlackBerry is reading this, just do it, please and thank you.

cmxch•15m ago
The way Google is going, you might as well just have Apple and fully embrace consumer hostility.