Google Says Developer Verification Makes Android Safer. Critics Say It Just Makes Android More Closed

Found this article via The Linux Experiment podcast’s daily episode today:

Under the new rules, F-Droid has no workable path forward. Compelling volunteer contributors to register their identities with Google runs against what the platform stands for.

“But claiming those app identifiers on developers’ behalf is equally impossible, since that would give F-Droid a kind of exclusive ownership over apps it has no right to own.

“F-Droid has been clear that if Google goes through this, it effectively ends the project as it currently exists.”

This truly concerns me, because I heavily rely on software outside the Play Store, and if DevVer rolls out it’ll be like being kicked out of your house even if you paid your bills responsibly and going homeless just because Big Tech wants…

2 Likes

Ah yes -“Safety”.

The magic word that thinly veils a reason to grab more control. Or just a reason to do anything you want, I guess.

Anyway, I guess this is the endless balance of safety vs individual autonomy.

But why does Google suddenly care about this? If this is such a safety concern, why did they let alternative app sources operate for 15 years?

Apple is obviously worse for this, but at least they started hostile to alt installs out of the gate.

I haven’t used F-Droid in a while, but it sucks that a project like this can just vanish up in smoke.

3 Likes

Hopefully, 2027 will be the year of the (non-Android) Linux phone.

(its not gonna happen, but I can dream right?)

4 Likes

This is mad. I’ve switched from degogled phone back to regular OEM device, but still have most of my applications installed from F-droid. Some of them are not even available in playstore.

Regardless of this, I plan to purchase iphones for my family members from now on, even though we’ve never had such expensive devices in family. But 2nd hand SE models can be found for OK price. And for myself, probably some lineageOS/linux/sailfishOS, maybe even feature phone, with cheapest possible andoird device always at home for government/banking apps. I managed to ditch Microsoft in my home for the same stupid behaviour, Google is next.

Thinking about this right now. I have a Pixel 6a that I bought on release. I’ve been using it for the last few years and have recently considered upgrading it. I want to stick with Graphene OS but I don’t want to drop $500+ for a new Pixel just to have developer verification cripple F-Droid in the near future. Not to mention Google limiting AOSP releases to the public. Part of me is wondering if I should just go back to iPhone instead of taking the risk of staying with GOS on a Pixel and having Google pull some more stupidity that makes utilizing GOS harder or impossible within the life of my next phone.

Y’all, F-Droid is not the only (or even best) way to get apps on an Android or GOS phone.

1 Like

Wouldn’t this affect all alternate app stores and development of all serious apps that are can run on Android devices?

One of my teenage kids has been using a phone with Droidian installed on it for the past 3 or more months, mostly without a hitch! There is a Linux mobile app that enables reading and responding to your Signal messages, which is a significant step forward for daily use.

The ability to sideload apps seems like it will continue, as will the GOS project. If this was putting GOS in danger they would say so, but they have actually stated it will not endanger their project. (They are also working towards developing their OS independent of G**gle, I believe.)

This method of installing apps works very well for anyone who is moderately tech savvy. As a fall back, you can continue using the Play Store on GOS, and can use it in a completely separate profile from your apps if you want to. (I haven’t seen updates on Aurora, but it’s also possible Aurora will continue running.) If you care about your privacy, switching from GOS to Android or another Android variant, or even switching to Apple’s AI riddled OS would be a weird choice to make.

2 Likes

Thanks for the useful article link. It does look a little involved, but I can try it. I currently use Side of Burritos’ method of updating all apps across different profiles from the main profile, which I only use for that.

However, it would be a shame to see motivation for developing FOSS apps for people to really use disappear with Google demanding everyone register with them and pay the fees. The article I linked to above says

“…any app installed on a certified Android device will need to come from a developer who has gone through Google’s new verification process. This applies regardless of where the app comes from: the Play Store, a third-party storefront, or a direct APK download.”

Does this not mean that any app developer or alternative store front would be at risk of being hounded by Google if people try to run their apps on Google Android phones?

Out of interest, I looked how many GOS users there are, and last year it was around 300k - Market share - GrapheneOS Discussion Forum . That is a good number, but it seems to me a small market to develop apps for specifically, if you are a developer who wants to avoid joining Google’s scheme.

1 Like

Side of Burritos method is the other method I think will continue to be effective. If you can handle that method, the Obtainium method is just as easy.

1 Like

Well, if F-Droid ceases to exist, i will ditch Android for sure. I do not need another IOS.

I hope this will give a punch for OEMs to either allow more easier flashing, either develop some linux phones (like Pine64 does). Because for now this (linux phones) are super niche.

Other way - just get tablet from some Chuwi that have native bios/UEFI with built-in modem, install Linux (luckily now Linux have ModemManager to work with built-in modems) and use it as a phone.

Another thing - how this will be implemented? If on OS level - then this is crappy. If on Google Play Services level - i will just toss them off with ADB.

But that’s super unfortunate…

1 Like

Safe ?

How …. I can’t imagine

This is a complete scam.

If the GrapheneOS+Moto deal isn’t feasible, then yeah it seems the best way is to sling around a Linux laptop everywhere we go…

It would be a bit tedious, but also kinda cool. Phone calls would be a pain lol (Signal and a headset, I guess). But I do this already for my work so it wouldn’t be too weird for me.

Oh yeah and lug around a dedicated camera too.

Anyway, I hope a good Linux phone would appear on the market, but I don’t think it will be feasible for a long time. :frowning:

1 Like

The thing is while I don’t fully trust Google and especially with how dystopian our world is getting a part of me cant help but keep wondering how blown out proportion this is. Im somewhat skeptical as people serious made a big deal out of the transition to MV3 which turned out to be a major nothing burgers (atleast so far) There IS a security advantage to restricting the majority of users away from nonverified apps and if this was an implemtation similar to installing apps on macOS no one will necessarily be disadvantaged but requiring ID for devs specifically where this is trippy and confusing not only from a privsec perspective but because isnt most software made collectively by its nature and lead developers can rotate frequently? so im curious how this applies across companies, organizations and startups. Im sure lobbying Google is all it takes to be the exception. (ex: Epic) I wouldnt put it past Google to copy iOS model here. trying to escape us? well you still have to pay us to do that

Sideloading on iOS is already ridiculous you either have to constantly renew app certificates or be in a $100 developer a year dev account for the ability to use YOUR device how YOU please when in all honesty if I have already went through the trouble of putting my iPhone in developer mode that should be enough friction for most normies to avoid malware. I really want to see how this turns out.

Because say the day comes where major privacy apps are removed from the corpo appstores then what?Would we have to cripple major security features in favor of privacy? I’d rather not. Im already hella annoyed that advanced device protections on Stock Android basically forces you to use the playstore unless you’re willing to fiddle with ADB. I think there will always be a way out because of enterprise customers dont want alot of this nonsense

can someone explain to me how this “ends” the F-droid project? I thought that this would not affect those who are on degoogled phones as that would not be a “certified” device

See the article linked at the top. F-Droid can’t compel app developers to register with Google, nor can it assume ownership of the FOSS apps, as it doesn’t own them.

It could stay as it is, but couldn’t be used on official Google Android devices, only custom ROMs / de-googled phones. And I suppose both F-droid and developers wouldn’t bother.

Unrelated

I hate when journalists use the formula:
X says A, but critics say B.

B is true. A is only partially true (F-Droid is safer than Play Store[1]).

A better title would be “Google justifies developer verification with safety, but developers warn it will make Android more closed”

[1] Please DON’T start an entire argument on why F-Droid sucks, this is totally not the subject.

1 Like