Google has news on what you will need to do for still being able to sideload apps:

[clarfonthey@toot.cat]

@grote here, "sideloading" means "installing apps from developers who have not submitted a drop of blood to Google"

the drop of blood thing is an exaggeration; we don't yet know if something more, like an entire finger, will be required

[doragasu@mastodon.sdf.org]

@grote Judging by the attached image, biometrics are not mandatory, device PIN should work. Very bad, but mandatory biometrics is what would make it terrible, at least for me.

[timwardcam@c.im]

@tedmielczarek @grote I'm thinking of a small company with a dozen or so developers who have one Android app that talks to their back end, for use by a few dozen installation crews. Anything with "enterprise" in its name would be *vastly* too expensive to be of any use to a company like that.

[agowa338@chaos.social]

@Li @grote

Well I still think this approach from google is a good first draft to start a discussion.

But all of the border agent stuff was more of a "making the best out of a shitty situation".

[alvarord@framapiaf.org]

@grote

First point is:
* be evil

[karl@infosec.exchange]

@grote Google always finds new ways to give me a reason to say fuck google.

[raymaccarthy@mastodon.ie]

@CalcProgrammer1 @itsFriday @grote
And it's not even about malware. Plenty in the Playstore. It's about Google deciding they are in control of your phone. You only rented it.

[burnitdown@beige.party]

@grote

"scammers often pressure victims into disabling security measures"

gee Google, i wonder where they might find malware that would bypass those "security measures" without any pressure at all??? oh well not fucking important i guess.

[tedmielczarek@mastodon.social]

@grote buried in the FAQ, but note that they are saying that installation via ADB will not be affected by these changes: https://developer.android.com/developer-verification/guides/faq
So these sideloading changes are to cover "download an APK file from the internet and install it without using a secondary device".

[alisynthesis@io.waxandleather.com]

@LexYeen @grote little do they know calling it "sideloading" just makes it seem like i'm a hacker and i feel cool for doing it

[liquor_american@universeodon.com]

@grote Nope.

[itsfriday@toot.community]

@Li @CalcProgrammer1 @grote It could be skipped on the very first startup with a question: "Would you like to do some settings for advanced user? Please only click 'yes' if you informed yourselve extensive beforehand."

[sowophie@chaos.social]

@grote Can we please use this flow for enabling macros in MS Office?

[nazokiyoubinbou@urusai.social]

@argv_minus_one I'm strongly against using ARM for desktops, but I'll be first in line to agree that they are good for laptops and other portable devices.

It is a shame it isn't used more. There is literally no reason this has to be specific to Apple.

I think a lot of people forget that laptops shouldn't be behemoths built to do 1/3rd to 1/2 of what a desktop can do at 2-3x the cost tied down to a desk running super hot and loud with a keyboard, mouse, and monitor plugged in. (Seriously, why do people do this???) They should be small, light, and efficient because they're meant to be portable.

But they also shouldn't be locked down walled gardens (see Chromebook crap.)

I did see a neat little open laptop thing on my feed, but it seems to be not available yet?

[itsfriday@toot.community]

@raymaccarthy @CalcProgrammer1 @grote Yes. That is why I think the 24h is the only reasonable part.

[epic_null@infosec.exchange]

@nazokiyoubinbou @FifiSch @grote You said you don't understand why the process of installing a new OS on your phone is so scary for the average user? I was responding to that part - it's scary because if you fuck it up, the only way through it is to not fuck it up.

[linkachus17@furry.engineer]

@grote Unnecessary steps to install apps on Android outside Play Store

[leanderlindahl@social.folkdata.se]

@grote please don't call installing software sideloading... We should refuse to use that term.

[raymaccarthy@mastodon.ie]

@utf_7 @kevinrns @grote
The problem is stupid Bank apps with no Web version that only run on vanilla unmodified Apple iOS or Alphabet Android.

I demoed Debian on a 4G prototype VOIP phone in 2007. it was better than Android today! We are being forced to be beholding to Apple or Alphabet.

[nazokiyoubinbou@urusai.social]

@Epic_Null @FifiSch @grote And I'm saying it's not scary if you mess it up is because you can just simply try again and not do something really stupid like yanking out the cable the second time.

I'm also saying most have dual partition layouts where if you do screw up the second one you can go back to booting the first.

Also, there's nothing wrong with the old tried and true "just ask someone who knows this stuff" like people used to do back in the day. I don't know why everyone decided that they had to just buy stuff certain ways and if it wasn't right toss it and buy a new thing rather than just asking someone who knows the thing like everyone used to do...