Google’s big Android sideloading crackdown has a 24-hour catch – how the new limits work

https://www.zdnet.com/article/how-google-android-sideloading-crackdown-works-limits/

Sideloading Android apps will become such a hassle that the practice will effectively die.

171 points · 39 comments · view on lemmy.world

39 Comments

CubitOom@infosec.pub · 112 pts · 1d

Sideloading Installing

stopforgettingit@lemmy.world · 89 pts · 1d (18 replies)

Something else that I only found out from comments on another thread about this is that once you start the 24 hour timer, you have to allow unverified apps within one hour after the timer stops. If you miss this one hour window you have to wait a full 24 hours again. And it will not give a notification when the 24 hours is up, you need to set your own alarm.

EDIT: found the thread where others are talking about having to wait an additional 24 hours after missing the one hour window https://lemmy.world/post/51966349/25850937

To clarify - the one hour window is how much time you have to turn on the setting after waiting the 24 hour timer. As in, you have one hour to push this button. If you miss this window to turn the setting on, you have to request to turn it on again and it resets the 24 hour timer.

Once you turn the setting on you can select the option to turn it on forever.

Sunshine@lemmy.ca · 16 pts · 1d (3 replies)

This needs to be posted everywhere on lemmy before it happens.

Cris_Citrus@piefed.zip · 1 pts · 1d (2 replies)
[ removed ]
stopforgettingit@lemmy.world · 3 pts · 1d (1 reply)

I've corrected you a couple times now because you keep repeating the wrong info.

The one hour widow is where you have to TURN ON the setting after waiting 24 hours. You will not get a notification for when the 24 hour timer is up, you have to set you own alarm.

Once you turn on the setting you can have it on indefinitely.

Onomatopoeia@lemmy.cafe · 5 pts · 1d

Oh FFS even more bullshit? Wow, doesn't even remind you.

Thanks for the info.

Cris_Citrus@piefed.zip · 13 pts · 1d (4 replies)
[ removed ]
stopforgettingit@lemmy.world · 17 pts · 1d (2 replies)

You are confusing 2 things

  1. After the 24 hours waiting period is up you have 1 hour to turn the setting on or you have to wait 24 hours again to have the opportunity to turn the setting on. This is not noted in any docs, I only heard this from another Lemmy thread where several ppl confirmed this happened to them.

  2. Once you turn the setting on you can select if you want it turned on for 7 days or forever.

timochka@lemmy.zip · 5 pts · 1d

I just tested it - well, rather, 26 hours ago I did. And I was just reminded and went "shit, have I missed the 1hr window."

But evidently not. I went back and it said I now have until this time tomorrow to turn it on. So there is a second timer, but it's clearly more than 1hr - maybe 24hr.

ETA: FML, it's late; I've just realised it's Friday already (hey, it's 2am). And now I'm not sure, I think it said "you have until 2.20am Friday...", in which case yeah, the second window is short, but maybe 2 hours not 1 (it was roughly 12.20am Thursday that I hit the button.)

Cris_Citrus@piefed.zip · 2 pts · 1d

Ohhhh, I was misunderstanding you

I'm just gonna delete my comments cause now your comments make very clear what the correct understanding of how it works is. Sorry for all the clutter I just stress a lot about misunderstandings, it's a social anxiety thing 😅

Thank you for correcting me!

Sunshine@lemmy.ca · 15 pts · 1d

Can't have you thinking outside of the google box.

Zwuzelmaus@feddit.org · 7 pts · 1d (3 replies)

Once you turn the setting on you can select the option to turn it on forever.

I have to follow the hilarious procedure only once on each device?

MonkderVierte@lemmy.zip · 13 pts · 1d (2 replies)

Until Google decides otherwise, yes.

Zwuzelmaus@feddit.org · 3 pts · 1d (1 reply)

I can survive it once. I am sure that I can.

adarza@lemmy.ca · 6 pts · 20h

day 274. fuck it all. i missed it again. i haven't slept in weeks. i haven't seen or talked to another person in i dunno how long. i've been chained to the radiator next to a power outlet ever since a low battery fucked my chance back on day 47. i'm almost out of the food i can reach from the pantry. the dry pasta isn't as bad as it sounds. i've only chipped two teeth from not waiting long enough for it to soften. it hasn't rained in a week, so so cup sitting on the window ledge hasn't been filled. i think a bird shit in it yesterday. the stench from the shit in the corner has finally faded. or perhaps i've just grown so used to it it doesn't bother me anymore.

guillem@aussie.zone · 5 pts · 1d (1 reply)

On Zdnet it says "Now the user is ready to install apps from unverified developers, and they’ll also have the option to enable the approach for seven days or allow it indefinitely." What I understand is that it's a one-off thing, am I missing something?

stopforgettingit@lemmy.world · 8 pts · 1d

I just did it. After the 24 hour timer you have to answer a question - turn this on for 7 days or turn it on forever. If you turn it on Forever its one off. I assume if you do t for 7 days only you have to go thru the 24 hour waiting period again if you want to turn it on again.

TheMadCodger@piefed.social · 4 pts · 1d

Can confirm. I restarted the phone and waited for the 24 hours to be over. Forgot about it because it was a day later and life. By the time I did remember it was too late and I had to restart the phone all over again. So stupid.

Cris_Citrus@piefed.zip · 1 pts · 1d (1 reply)
[ removed ]
stopforgettingit@lemmy.world · 4 pts · 1d

I just did this, I can confirm that turn on indefinitely option exists. If it works like they say it works? 🤷‍♀️

I selected it when I turned this on today, I can check back in 8 days and let you know if it turned off

bravesilvernest@lemmy.ml · 79 pts · 1d

Installing* Android apps

prex@aussie.zone · 27 pts · 1d (3 replies)

hanrahan@slrpnk.net · 2 pts · 1d

surely you've seen iphone ?

for years i was raging against people getting Iphones as any popularity of closed ecosystems would just encourage google and here we are.

MonkderVierte@lemmy.zip · 2 pts · 1d

SubArcticTundra@lemmy.ml · 1 pts · 1d

cerebralhawks@lemmy.dbzer0.com · 26 pts · 1d (3 replies)

Every savvy user will make this the first thing they do on a new Android phone.

As an iPhone guy — say what you will about my savviness — it’s the first thing I’d do on a new Android phone.

But I don’t want a Pixel, I want that new Fairphone. In green. I just don’t have $650 laying around to piss away on a phone.

drdalek@lemmy.dbzer0.com · 6 pts · 1d

I am waiting with bated breath on some Linux phones in the pipes

FridaVanMercury@discuss.tchncs.de · 5 pts · 1d (1 reply)

If you buy a fairphone you can select a non-stock Android being preinstalled, these allegedly are not affected by this change as far as I understood it.

cerebralhawks@lemmy.dbzer0.com · 6 pts · 1d

I knew there was a custom firmware option, but I didn't know you could select it from the factory. That's neat.

INeedMana@piefed.zip · 26 pts · 1d (4 replies)

the company’s analysis found sideloading is responsible for “50 times more malware from internet-sideloaded sources than on apps available through Google Play.”

Yeaah, sure...

Zozano@aussie.zone · 14 pts · 1d

piccolo@sh.itjust.works · 7 pts · 21h (1 reply)

I never heard of grandmas side loading apps... but plenty clicking a link to the playstore and getting all kinds of garbage... 🤔

Natanael@infosec.pub · 2 pts · 20h

All adware bullshit I cleaned from my mom's and relatives' phones was from the play store

LodeMike@lemmy.today · 3 pts · 20h

It really depends on how "malware" is defined.

Also, the sentence is either wrong or outright malicious. "Sideloading is responsible for ... from internet-sideloaded sources..."

guillem@aussie.zone · 17 pts · 1d (3 replies)

This mechanism, which Google calls Advanced Flow, won’t be part of the open-source element of Android, but will instead form part of the closed-source, proprietary Google Play Services platform.

Graphene is safe for now, then, right?

shortwavesurfer@lemmy.zip · 16 pts · 1d

Yes, anything without Google spy services, aka play services, will be fine.

And even if you have Google spy services installed on graphene, it is in user mode, not admin mode, so it can't control that.

DarkSirrush@piefed.ca · 7 pts · 1d (1 reply)

Pretty sure graphene explicitly stated they would never allow it to affect them, and they don't ship the closed source parts of google's android stuff.

No idea if it will affect installing google play apps on a graphene phone though

Onomatopoeia@lemmy.cafe · 1 pts · 1d

It probably comes via Play Services.

IDew@lemmy.zip · 12 pts · 1d (1 reply)

Can it be bypassed by setting the phones date ahead of time? It works on Samsung devices that force you to wait 7 days to unluck the bootloader

stopforgettingit@lemmy.world · 7 pts · 1d

no its a timer tied to the setting, its a countdown, it does not look at the date.

cybernihongo@reddthat.com · 10 pts · 1d (1 reply)

Literally WHO ASKED FOR THIS

Gradually_Adjusting@lemmy.ca · 5 pts · 1d

Billy O'Nares

archchan@lemmy.ml · 4 pts · 1d
[ removed ]