Google has news on what you will need to do for still being able to sideload apps:

[tedmielczarek@mastodon.social]

@grote @TimWardCam Google has a whole "Managed Google Play" as part of Enterprise Android support: https://support.google.com/work/android/answer/9495634?hl=en
I don't think companies doing such things will be fussed by this at all. A company using Android devices but not using enterprise management would already be in a pretty self-inflicted state of badness.
Edit: https://developer.android.com/developer-verification/guides/faq explicitly says this doesn't affect enterprise apps.

[itsfriday@toot.community]

@Li @CalcProgrammer1 @grote Yes, that's why I think the 24h are the only reasonable steps.

[li@tech.lgbt]

@agowa338 @grote bleh ive been seeing techbros unironically supporting this because "muh scammers" .. as if they wont just switch to using a fucking web app overnight

[hidoni@meow.social]

@grote the point about requiring biometrics is incorrect. The blog post states that you need to confirm with "biometric authentication [...] or device PIN."

[clarfonthey@toot.cat]

@grote here, "sideloading" means "installing apps from developers who have not submitted a drop of blood to Google"

the drop of blood thing is an exaggeration; we don't yet know if something more, like an entire finger, will be required

[doragasu@mastodon.sdf.org]

@grote Judging by the attached image, biometrics are not mandatory, device PIN should work. Very bad, but mandatory biometrics is what would make it terrible, at least for me.

[timwardcam@c.im]

@tedmielczarek @grote I'm thinking of a small company with a dozen or so developers who have one Android app that talks to their back end, for use by a few dozen installation crews. Anything with "enterprise" in its name would be *vastly* too expensive to be of any use to a company like that.

[agowa338@chaos.social]

@Li @grote

Well I still think this approach from google is a good first draft to start a discussion.

But all of the border agent stuff was more of a "making the best out of a shitty situation".

[alvarord@framapiaf.org]

@grote

First point is:
* be evil

[karl@infosec.exchange]

@grote Google always finds new ways to give me a reason to say fuck google.

[raymaccarthy@mastodon.ie]

@CalcProgrammer1 @itsFriday @grote
And it's not even about malware. Plenty in the Playstore. It's about Google deciding they are in control of your phone. You only rented it.

[burnitdown@beige.party]

@grote

"scammers often pressure victims into disabling security measures"

gee Google, i wonder where they might find malware that would bypass those "security measures" without any pressure at all??? oh well not fucking important i guess.

[tedmielczarek@mastodon.social]

@grote buried in the FAQ, but note that they are saying that installation via ADB will not be affected by these changes: https://developer.android.com/developer-verification/guides/faq
So these sideloading changes are to cover "download an APK file from the internet and install it without using a secondary device".

[alisynthesis@io.waxandleather.com]

@LexYeen @grote little do they know calling it "sideloading" just makes it seem like i'm a hacker and i feel cool for doing it

[liquor_american@universeodon.com]

@grote Nope.

[itsfriday@toot.community]

@Li @CalcProgrammer1 @grote It could be skipped on the very first startup with a question: "Would you like to do some settings for advanced user? Please only click 'yes' if you informed yourselve extensive beforehand."

[sowophie@chaos.social]

@grote Can we please use this flow for enabling macros in MS Office?

[nazokiyoubinbou@urusai.social]

@argv_minus_one I'm strongly against using ARM for desktops, but I'll be first in line to agree that they are good for laptops and other portable devices.

It is a shame it isn't used more. There is literally no reason this has to be specific to Apple.

I think a lot of people forget that laptops shouldn't be behemoths built to do 1/3rd to 1/2 of what a desktop can do at 2-3x the cost tied down to a desk running super hot and loud with a keyboard, mouse, and monitor plugged in. (Seriously, why do people do this???) They should be small, light, and efficient because they're meant to be portable.

But they also shouldn't be locked down walled gardens (see Chromebook crap.)

I did see a neat little open laptop thing on my feed, but it seems to be not available yet?

[itsfriday@toot.community]

@raymaccarthy @CalcProgrammer1 @grote Yes. That is why I think the 24h is the only reasonable part.

[epic_null@infosec.exchange]

@nazokiyoubinbou @FifiSch @grote You said you don't understand why the process of installing a new OS on your phone is so scary for the average user? I was responding to that part - it's scary because if you fuck it up, the only way through it is to not fuck it up.