• JohnEdwa@sopuli.xyz
      link
      fedilink
      English
      arrow-up
      46
      ·
      edit-2
      2 months ago

      It is, because it’s actually the term that defines the process of transferring files not from an external networked device - downloading - or to an external networked device - uploading - but between two local devices - sideloading.

      It’s over two decades old, you downloaded an mp3 from kazaa, and then sideloaded it to your player.

      For android apps, I believe the term originates from the method of using ADB to directly write the app to the phone memory, the command of which is “adb sideload filename”

      • ideonek@piefed.social
        link
        fedilink
        English
        arrow-up
        19
        ·
        2 months ago

        And companies ofted do it. Thay recoined jaywalking to put the blaim of the accidents to pedestrians and take away the road from them. They change what littering means in attrmpt to delute the responsibility for polution… We are better than that this time, right?

        • Ulrich@feddit.org
          link
          fedilink
          English
          arrow-up
          2
          ·
          2 months ago

          Thay recoined jaywalking to put the blaim of the accidents to pedestrians and take away the road from them.

          How do you suppose that works, exactly?

          • ozymandias117@lemmy.world
            link
            fedilink
            English
            arrow-up
            22
            ·
            2 months ago

            I assume you’re unaware of the concerted advertising campaigns by auto manufacturers to take public streets away from pedestrians, including things like

            The industry hired actors dressed in old-fashioned clothing to illegally cross streets, making the behavior seem outdated

            https://missedhistory.com/1800/lobbying-trick-blamed-pedestrians-inventing-jaywalking/

            “Jay” had started as a word for drivers driving on the wrong side of the road

            jaywalker was pre-dated by jay-driver – a driver of a horse-drawn carriage or automobile that refused to abide by the traffic laws by driving on the wrong side of the road

            https://debrabernier.com/the-history-of-jaywalking-in-the-u-s/

            • Ulrich@feddit.org
              link
              fedilink
              English
              arrow-up
              2
              ·
              2 months ago

              I assume you’re unaware of the concerted advertising campaigns

              Maybe try to stay on topic?

              jay-driver – a driver of a horse-drawn carriage or automobile that refused to abide by the traffic laws

              So jay-walker seems appropriate, does it not?

              • ozymandias117@lemmy.world
                link
                fedilink
                English
                arrow-up
                19
                ·
                2 months ago

                It’s extremely on topic for the thread you responded to.

                Google has a concerted effort to make “sideloading” bad, so they can remove it without public backlash

                The next comment in the chain mentioned how auto manufacturers did the same thing, villainizing people using public spaces by calling it “jaywalking” until it became illegal to walk on public roads

                That was done to take public spaces away from pedestrians and give it to cars

                This is being done to take software outside of Google Play away and give the only profit to google

                • Ulrich@feddit.org
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  ·
                  edit-2
                  2 months ago

                  The topic was how the existence of the term “jaywalking” “blames pedestrians” when they’re not actually to blame.

    • G3NI5Y5@piefed.social
      link
      fedilink
      English
      arrow-up
      7
      ·
      2 months ago

      Like “Jaywalking”, suddenly, walking is no longer the norm, but the car is preferred. The victims are seen as perpetrators.

      • ideonek@piefed.social
        link
        fedilink
        English
        arrow-up
        1
        ·
        2 months ago

        And “littering” is the “real” culprit why we all drawn in uneccesey plastic. We should blame consumers not the polluters.

        Corporations do it all the time.

    • yardratianSoma@lemmy.ca
      link
      fedilink
      English
      arrow-up
      6
      ·
      2 months ago

      Don’t forget “side effects”, when really, medications only have “effects”. Whether the effects are intended or not doesn’t change the fact that they happen.

      • knitwitt@lemmy.world
        link
        fedilink
        English
        arrow-up
        27
        ·
        2 months ago

        Cough medicine can induce drowsiness, but you probably shouldn’t be taking it as a sleep aid. The distinction between intended vs unintended effects is an important distinction to make, in my opinion, to prevent drugs from being unintentionally misused.

        • badgermurphy@lemmy.world
          link
          fedilink
          English
          arrow-up
          4
          ·
          2 months ago

          While that is true, it does not invalidate the poster’s point. All of the effects of drugs are just “effects”. They could just as easily market cough syrup as a sleep aid with the “side effect” that it suppresses coughing.

          The difference in definition in this context is simply that “drug uses” is the list of its effects that they were going for, and “side effects” are a list of effects that they were not. Its entirely a man made distinction. Extend that reasoning to the “installing” vs. “side loading” discussion to see the poster’s point.

          I believe him to be suggesting that “side loading” is a very different word for “installing” that can be loaded by PR people to shift public opinion against the practice. Whether or not they are doing that I can’t say myself, but that appears to be the point being made.

          They could just as easily have coined it “direct installing” or “USB installing”, but they didn’t even though those terms are more descriptive. Draw from that whatever you will.

        • yardratianSoma@lemmy.ca
          link
          fedilink
          English
          arrow-up
          2
          ·
          2 months ago

          Talking to the wrong guy here, I’ve taken many a medications against their intended purpose: I am a curious guy.

          But that sounds like saying, in the context of Google’s intention of disabling app sideloading, that warning users that it poses a security risk because it’s their intended purpose for android, is fine because the authority on android is Google.

          Don’t just take the word of authority at face value, when they prioritize profit and mindshare over personal freedom.

          • grue@lemmy.world
            link
            fedilink
            English
            arrow-up
            23
            ·
            2 months ago

            The point is, there shouldn’t be a distinction. To make one is to support prejudice against installing software from elsewhere.

            If you use “installing” for stuff from the Google store but any other word for stuff from other sources, you are aiding and abetting Google’s anti-property-rights propaganda.

            • Ulrich@feddit.org
              link
              fedilink
              English
              arrow-up
              1
              ·
              2 months ago

              there shouldn’t be a distinction.

              There has to be. When 99% of installs come from one location, there needs to be a way to describe that other than “Installing apps from outside the default app store”.

              To make one is to support prejudice against installing software from elsewhere.

              No? It isn’t.

              • Vespair@lemmy.zip
                link
                fedilink
                English
                arrow-up
                4
                ·
                2 months ago

                The majority of PC game sales happen via steam but we don’t call games purchased from GOG “sideloaded.”

                There is no necessary reason to make the distinction

          • BootLoop@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            18
            ·
            2 months ago

            The same word that I use to when I get software that’s not on the Microsoft Store, the Mac App Store, or whatever distro’s Software GUI when I am using my desktop…

            • Ulrich@feddit.org
              link
              fedilink
              English
              arrow-up
              1
              ·
              2 months ago

              If the MS Store and Mac App store made up 99% of installs, that might make sense.

              • ideonek@piefed.social
                link
                fedilink
                English
                arrow-up
                6
                ·
                2 months ago

                Why? That’s a perfect example. There is no qualitative difrence between Microsoft Store and Play Store. Why quantitative difference in the market share would make any distinction in the terminology we use around the process?

          • Cethin@lemmy.zip
            link
            fedilink
            English
            arrow-up
            12
            ·
            2 months ago

            When I install software from the Arch User Repository I still just call it installing, even though it isn’t through the standard path. Everywhere else, you don’t make the distinction. For some reason on phones we’ve come to call it sideloading, even though the software is just software —it doesn’t care where it came from.

              • Cethin@lemmy.zip
                link
                fedilink
                English
                arrow-up
                3
                ·
                edit-2
                2 months ago

                Again, when I install something from the AUR (which is not where most software comes from —99+% are from official repositories) it isn’t given a special term. It’s the exact same situation as “sideloading” but we just call it installing. Can you explain what the difference is between them?

              • yardratianSoma@lemmy.ca
                link
                fedilink
                English
                arrow-up
                2
                ·
                2 months ago

                even within android, if you attempt to install an apk directly, it doesn’t say “would you like to sideload this application?”, but instead says, “Do you want to install this app?”.

                Even Google’s own OS doesn’t use made up language.

  • Ulrich@feddit.org
    link
    fedilink
    English
    arrow-up
    112
    ·
    2 months ago

    tl;dr you can still “sideload” via adb.

    This is so incredibly inconvenient as to be meaningless.

    • gaylord_fartmaster@lemmy.world
      link
      fedilink
      English
      arrow-up
      48
      ·
      2 months ago

      It’s not completely meaningless because if it’s truly the only option I’m going to be using it until I eventually replace my current phone with one with an unlocked bootloader.

      • Ulrich@feddit.org
        link
        fedilink
        English
        arrow-up
        26
        ·
        2 months ago

        I’m afraid that won’t help. There will be even fewer people developing apps specifically for the 0.01% of us using custom ROMs.

        • gaylord_fartmaster@lemmy.world
          link
          fedilink
          English
          arrow-up
          14
          ·
          2 months ago

          They’re already developing the apps for the 1% of us not just using proprietary apps from the play store. I don’t think this just kills open source app development.

          • Ulrich@feddit.org
            link
            fedilink
            English
            arrow-up
            10
            ·
            2 months ago

            That’s not who we’re talking about. We’re talking about the 0.1% who have custom ROMs.

            It won’t kill it completely but it will severely hurt it. Apps like Syncthing have already discontinued development due to Google shenanigans + lack of users. That’ll only get worse as the userbase shrinks.

        • JohnEdwa@sopuli.xyz
          link
          fedilink
          English
          arrow-up
          6
          ·
          edit-2
          2 months ago

          There are plenty of people developing apps that require root, and users who run those are already jumping through a million hoops of cat and mouse to keep their fucking mcdonalds app detecting it so they can get cheaper coffees and free fries.

          Like seriously, wtf McDonalds, your app is like the ultimate root/safetynet/device id detection tool, I don’t think there exists even a banking app that is as hard to fool.

    • blargh513@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      14
      ·
      2 months ago

      It will be stupid, but I presume there will be a rise in desktop apps or webapps that require you to only plug the phone in and it will handle the rest.

      • gaylord_fartmaster@lemmy.world
        link
        fedilink
        English
        arrow-up
        5
        ·
        2 months ago

        Yeah, if something like Obtanium needs to run on my desktop instead of my phone and I have to plug it in every once in a while, that’s not the end of the world.

        • Sckharshantallas@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          ·
          2 months ago

          I think adb can also work over Wi-Fi, just like Android Studio can connect to the phone and build and install without plugging it.

      • KSP Atlas@sopuli.xyz
        link
        fedilink
        English
        arrow-up
        1
        ·
        2 months ago

        There are already android apps that allow you to ADB into your own phone without root, so you could VERY EASILY just make an app store that utilises that, you only need to install the app from desktop once

    • hansolo@lemmy.today
      link
      fedilink
      English
      arrow-up
      3
      ·
      edit-2
      2 months ago

      Not at all, just get comfortable with ADB and use Claude to walk you through the steps.

      I see this as an absolute win. /s

      Edit: Y’all, ADB isn’t hard to use. At all.

      • Ulrich@feddit.org
        link
        fedilink
        English
        arrow-up
        8
        ·
        2 months ago

        No one thinks it’s hard. It is, however, as I said, extremely inconvenient and time-consuming to do this every day, and no one wants to do that.

    • cmnybo@discuss.tchncs.de
      link
      fedilink
      English
      arrow-up
      3
      ·
      2 months ago

      We already have to do that to install older apps. It’s inconvenient, but not as bad as having to boot up an ancient phone every time you need to use the app.

    • Arghblarg@lemmy.ca
      link
      fedilink
      English
      arrow-up
      1
      ·
      2 months ago

      Perhaps someone could write an ‘adb loopback’ app – get that into the official app store, and said app would then squirt other .apk files through adb on the phone to itself, thus sideloading it.

      • Ulrich@feddit.org
        link
        fedilink
        English
        arrow-up
        2
        ·
        edit-2
        2 months ago

        As far as I know, ADB needs to be run on another device which is plugged into the phone.

        I suppose one could write a script/app that detects the device is plugged in, and automatically looks for and installs updates using adb. That would be the least amount of friction.

  • gnuplusmatt@reddthat.com
    link
    fedilink
    English
    arrow-up
    53
    ·
    2 months ago

    I’m not sure why google is over engineering this, proper mainline distros have this solved since forever. Let the community setup trusted repos with gpg keys, then let me trust the repos. If Fdroid trusts the package and I trust Fdroid, who should care?

    • Lemminary@lemmy.world
      link
      fedilink
      English
      arrow-up
      50
      ·
      2 months ago

      Probably because they want to target software that cracks theirs to avoid ads, like ReVanced.

      • SaharaMaleikuhm@feddit.org
        link
        fedilink
        English
        arrow-up
        16
        ·
        2 months ago

        Ding ding ding ding ding. It’s so obvious, it’s because Google wants to be in control and block apps it would rather not exist. Newpipe, FreeTube, Revanced and the like.

      • Xatolos@reddthat.com
        link
        fedilink
        English
        arrow-up
        1
        ·
        2 months ago

        Then why aren’t they already doing that by blocking DuckDuckGo?

        The DuckDuckGo app blocks all apps from sending to Google (and other advertisers) tracking/ad data on a system level. And it’s freely available on the Play Store (has been for years.

        https://play.google.com/store/apps/details?id=com.duckduckgo.mobile.android

        If they wanted to prevent apps from blocking their ad abilities, this app would never have been allowed on the Play Store.

  • Zak@lemmy.world
    link
    fedilink
    English
    arrow-up
    50
    ·
    2 months ago

    If Google wanted to add developer verification without being evil, it could use SSL certificates connected to domain names. I think the whole concept is ill-conceived, though I’ll admit to a modest bias against protecting people from themselves.

    • tauonite@lemmy.world
      link
      fedilink
      English
      arrow-up
      7
      ·
      2 months ago

      They couldn’t. Domains and SSL certificates can be obtained very easily anonymously and thus wouldn’t let Google identify the developers of malicious apps, which is the goal of this

      • coolmojo@lemmy.world
        link
        fedilink
        English
        arrow-up
        19
        ·
        2 months ago

        The trouble is Google’s definition of malicious apps. Are adblockers malicious? How about alternative apps for YouTube? Based on the recent history, I don’t think you will be able to install those apps on the phone you purchased.

      • Zak@lemmy.world
        link
        fedilink
        English
        arrow-up
        11
        ·
        2 months ago

        It provides a way to open an investigation into a malicious developer without giving Google the ability to ban anyone it doesn’t like.

      • Squiddork@lemmy.world
        link
        fedilink
        English
        arrow-up
        5
        ·
        2 months ago

        Yeah I mean some form of asymmetric encryption/validation would work but it stops the real reason why Google wants to implement this.

    • Kairos@lemmy.today
      link
      fedilink
      English
      arrow-up
      2
      ·
      2 months ago

      The problem with that is that certificates expire before someone would want to keep using the app.

        • Kairos@lemmy.today
          link
          fedilink
          English
          arrow-up
          4
          ·
          2 months ago

          Correction: SSL certificates can expire before someone would want to continue being able to install any given app.

          • Zak@lemmy.world
            link
            fedilink
            English
            arrow-up
            6
            ·
            2 months ago

            Sure, the developer needs to keep the certificate up to date and re-sign the APK on occasion.

            • Kairos@lemmy.today
              link
              fedilink
              English
              arrow-up
              3
              ·
              2 months ago

              So any APK I download will just expire at some point in time that’s probably really annoying to know, and then I have to dig through the internet again so I can install the app again?

              • Pycorax@sh.itjust.works
                link
                fedilink
                English
                arrow-up
                1
                ·
                2 months ago

                If it’s anything like how Windows does it, you would still be able to override it. It just gives you a scary warning and hides the option unless you click “more info” or something.

      • xthexder@l.sw0.com
        link
        fedilink
        English
        arrow-up
        3
        ·
        2 months ago

        Code signing certificates work a little differently than SSL certificates. A timestamp is included in the signature so the certificate only needs to be valid at the time of signing. The executable will remain valid forever, even if the certificate later expires. (This is how it works on Windows)

  • 6nk06@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    44
    ·
    2 months ago

    We hope that Google keeps its word and preserves ADB installation

    lol, adb is the first loophole that will be closed.

    • Sckharshantallas@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      2 months ago

      I don’t know, even people here are already considering it a loss of the only way is through ADB, because it’s not practical for everyday usage. But it’s better than nothing.

  • katy ✨@piefed.blahaj.zone
    link
    fedilink
    English
    arrow-up
    35
    ·
    edit-2
    2 months ago

    why can google not just code something like this into android:

    allow apps from:
    ( ) All sources (how it is now; allow each app to install apps from external sources)
    ( ) Just Google Play
    ( ) Apps which have been verified by Google Developer Program

    • palordrolap@fedia.io
      link
      fedilink
      arrow-up
      37
      ·
      2 months ago

      Option 1 is a potential cause of “lost” revenue.

      Late stage capitalism absolutely forbids anything that could cause that, even if the cost of implementation outweighs any potential gain.

    • SanctimoniousApe@lemmings.world
      link
      fedilink
      English
      arrow-up
      10
      ·
      edit-2
      2 months ago

      Taking Google at their word for a moment, it’s far too easy to scam the clueless masses into selecting the first one. Might work okay if it’s strictly an ADB command, tho.

      • Zak@lemmy.world
        link
        fedilink
        English
        arrow-up
        10
        ·
        2 months ago

        I’m inclined to think that’s not the job of an OS vendor to prevent. Sure, put a warning label on it, but it’s the user’s device; once they say they know what they’re doing, that should be that.

        • dust_accelerator@discuss.tchncs.de
          link
          fedilink
          English
          arrow-up
          3
          ·
          2 months ago

          The implication here is, if they implement this, is that they volunteer to assume liability, should e.g., your bank account be drained despite undergoing their forced strict lockdown on paid and owned devices.

          Fat chance, because laws are meaningless to crime syndicates

          • Zak@lemmy.world
            link
            fedilink
            English
            arrow-up
            4
            ·
            2 months ago

            It might be a reasonable trade for users to make if Google assumed liability. In fact, that would be an interesting way to implement laws to discourage practices like these.

      • Ulrich@feddit.org
        link
        fedilink
        English
        arrow-up
        5
        ·
        2 months ago

        If someone can be socially engineered into disabling security mechanisms, then that should just be their fate. There’s no sense in fucking everyone else in order to protect them.

        • SanctimoniousApe@lemmings.world
          link
          fedilink
          English
          arrow-up
          5
          ·
          edit-2
          2 months ago

          That would just continue to ensure lock-in, and at least the EU would never go for that (& neither would I). Sideloading should still be allowed.

          Google’s Play Store security has never been all that stellar, anyway.

  • VeryFrugal@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    6
    ·
    2 months ago

    I honestly think that this is just not going to happen. It’s already a giant pain in the ass to install apps from anywhere else than Play Store. With Shizuku it got much, much better.

    • viking@infosec.pub
      link
      fedilink
      English
      arrow-up
      9
      ·
      2 months ago

      Huh? Downloading an apk and clicking open with -> package installer is nothing but straightforward.

        • Pycorax@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          1
          ·
          2 months ago

          What kind of apps are you installing? I’ve never ever had any issue with installing APKs on Samsung, you just have to allow the app that triggered it to install APKs one time and every subsequent time, it just works.

          • VeryFrugal@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            1
            ·
            2 months ago

            In some regions, afaik, you just CANNOT install certain apps without adb, this in my experience includes: KDEConnect, Fdroid, Newpipe…etc. The list changes time to time.

      • Hawk@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        2
        ·
        2 months ago

        This simply doesn’t work anymore for all apps on my Pixel 8.

        Many I installed manually just redirect to the Play store with the message it could harm your device and you should download from Play.

          • faerbit@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            1
            ·
            edit-2
            2 months ago

            Pixel 8a on stock here. I have no idea what @Hawk is talking about. I just install any app, that I want. I might had to alter some settings, to do it, but I don’t remember doing that.

    • GreenShimada@lemmy.world
      link
      fedilink
      English
      arrow-up
      9
      ·
      2 months ago

      You may want to re-evaluate how you’re installing non-Play apps. I use F-droid all the time and never had anything even approach “inconvenient.”

      • VeryFrugal@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        1
        ·
        2 months ago

        Like I said, Samsung does this crap in certain regions, specifically South Korea. I’m using Shizuku now and couldn’t be happier.

  • Dr. Moose@lemmy.world
    link
    fedilink
    English
    arrow-up
    5
    ·
    2 months ago

    This is actually worse than integration in Play Protect which can be disabled very easily. Now you can only install unsigned apps via ADB which means just developers can do it.