Repo timestamp expected blah blah... toast coming out of nowhere is such a bad design. Really, the architecture in which you absolutely have to download the multi-MB index is as well.
Very cool, the visual redesign was very much needed and I had been using Droid-ify for a while because of this. I'll switch back to the official app, congrats to the contributors!
> All new code in this effort uses modern Android code standards and designs. This gives us a codebase that is easier to maintain, test, and easier to extend with new features in the future.
No, this increases the overall complexity of the system. Android will hopefully eventually collapse under its own weight.
For people who are die-hard F Droid users, do you get all your apps from it? I have tried in the past but it seemed like even when I restricted my use to basics it was missing things I needed to make my phone feel useful. Wonder if it has gotten better.
Similar experience for me. I find f-droid a great supplement store but cutting out the default store entirely has felt like more of a commitment than I'm interested in so far.
No I have Obtainium side by side with F-Droid. There are some closed source apps or apps that are not published on F-Droid (like Wireguard) that unfortunately I need. Obtainium is great for that.
Fossify Clock has the best accidental feature: when your alarm is going off, there's no way to stop it except for unlocking your phone, opening the app, finding the current alarm in the list of alarms, and disabling it.
I only use it to install the apps that aren't available on the Play store (e.g. Öffi, an excellent public transit app that gave up on dealing with the Play store after one too many arbitrary removals, Termux, and NewPipe).
The user experience was just too broken for too long to consider it usable (didn't support background updates for about two years after Google made it available, and generally just too much jank and random errors/failures). I might look into it the next time I'm setting up a device, but I think for the majority of apps I'll still go through the Play store - I don't trust F-Droid to be stable/reliable enough yet.
> Also, F-Droid Privileged Extension (FPE) is not currently supported by 2.0. That means even if FPE is installed, F-Droid 2.0 won’t use it. This overhaul focused on full featured support for the Android “session” installer. That lets F-Droid run background updates on any recent Android version without requiring FPE. Like with any of the changes here, we welcome feedback.
This is a shame. Is the privileged extension a large maintenance burden?
When Google added the "session" installer to AOSP, we thought it would replace F-Droid Privileged Extension (FPE). So we stopped development on it. The answer now is that the "session" installer mostly replaces FPE, but not fully. So we're exploring reviving development:
https://gitlab.com/fdroid/privileged-extension/-/work_items/...
I have been using droid-ify on GrapheneOS for a few years now; because F-Droid ui is terrible, and the privilege extention has been such a pain to configure and get working without issues on my previous lineageOS phone. Happy to see this major overhaul; and i'm glad the FPE is being phased out.
I tried Neostore. All the info it shows is pretty cool, but ultimately I felt the expierence suffered from all the extra information shown compared to the simpler UI in Droid-ify.
I love Neo Store, because in my book complex > simple. Simplicity of interface = process handcuffs most of the time (IMO). Complexity done right permits so much diversity in composability. I would never ever want a 'simpler' After Effects or GIMP or Blender or Siemens NX. GNOME did it back with GNOME 3 and it has been trash in my book ever since! vomitface.gif
Sometim... err more times than not... there should be a "Your IQ must be at least this high" bar for good software. Stop appealing to the lower common denominators!
I wasn't aware of that app. I will check that one out too.
FYI the obtainx sources current list is: Fdroid, Fdroid 3rd party, Forgejo(Codeberg), GitHub, GitLab, IzzyOnDroid, CoolApk, Tencent App Store, vivo App Store (CN).
So "Fdroid, Fdroid 3rd party, Forgejo(Codeberg), GitHub, GitLab, IzzyOnDroid, CoolApk, Tencent App Store, vivo App Store (CN)"
VS
"APKMirror, Aptoide, F-Droid, IzzyOnDroid, APKPure, GitLab and GitHub"
so 3 chinese app stores vs APKMirror, APKPure and Aptoide, I think I'd trust more APKM over the rest, personally I update only from Github/Fdroid and APKPure/Aptoide I have disabled
I think it is great that there are multiple clients out there, so people have a choice of user experience. One thing that I think is too often overlooked look is if they have implemented the same security and privacy standards as F-Droid, if that's important to you. For example, last I checked, the third party clients where still using index-v1, which is signed using SHA1. Maybe NeoStore updated to index-v2? And there is also quite a bit of effort put into the client-side to make sure it leaks as little as possible to the servers. There are libraries of the official core pieces for third party clients to use to gain many of these protections:
https://f-droid.org/2023/05/02/three-client-libraries.html
They could always close off access claiming ai scraping. If reddit shut their api down now instead of back then they could have also blamed ai and no one would’ve been mad.
Thank you. Used it to uninstall F-droid and roll back to v1 after trying out this new update (ooof... full-blown material ui is not for me. Those progress bars, oh my eyes!)
The old f-droid client made selecting app updates easy. With both v2 and droid-ify, you have to click through for each app. Not a great interface decision :( Why do updates always dumb interfaces down these days?
I tried it with 3 random apps for a while, but instantly got into issues. Two stopped updating due to Obtanium falling behind how app releases - for instance, developer changed version numbering scheme but Obtanium didn't expect that, so an outdated version was always presented. It wasn't fixed for quite a while.
I have 23 currently. It's surprising how fast it happened... I don't have any problems, but I don't pay much attention to it and apps seem to update automatically sometimes and after a manual refresh other times.
I've found Droid-ify more reliable at doing background updates, though it still only manages it sometimes (possibly due in some way to how I installed the apps). Hopefully Fdroid's app will be better at this.
I tried Obtainium a while back and didn't like it too much, finding apps seemed difficult.
Then I discovered https://apps.obtainium.imranr.dev/ which makes it very easy. I feel like Obtainium should make this more obvious. It would help adoption a lot.
I use F-Droid precisely because I don't want that. When https://news.ycombinator.com/item?id=38505229 happened - and when the same thing happens again in the future, because it will - I explicitly want F-Droid doing some basic due diligence on updates before shipping them to me. Cutting out the middleman is the opposite of what I want.
Counterpoint: I use NewPipe pretty much daily for watching YouTube. One day, YT introduced an API change that broke NewPipe, and so I patiently waited for an update.
A few days passed, and I eventually get a notification from NewPipe prompting for an update. But I can't install it just yet, because of mismatching signatures between the F-Droid and GitHub versions (yes, that's the point, I know...). The F-Droid build took so long to release, that in the meantime, another version of NewPipe came out...
Notably, this is still cutting out the middleman and bypassing the extra review that that entails. It's fine as long as you trust everybody involved in publishing the repo, which is probably fine here, but a thing to keep in mind.
This issue happens to some extent within liunux distros too. I think specifically for youtube maybe it would be beneficial for a single core library that deals with the API and is shared by every single project that cares to interface with youtube. Rather than dozens of projects trying to chase youtube changes and overburdening repository maintainers, there would only be a single library whose updates would be fast tracked. This also requires there to be mo embedding it in anything too, I don't know how feasible this would be on android, but it kinda already happens with yt-dlp in linux distros, but yt-dlp isn't a proper library nor does it deals with all youtube endpoints that a proper youtube frontend would require.
It would perhaps be nice if yt-dlp could eject it's youtube api handling into it's own project that is then augmented to handle anything youtube related and turns into THE library for dealing with youtube.. maybe even call it libyt :)
I've never actually had this issue, for whatever reason. In-app updates to NewPipe (and the various forks) install just fine even if I originally downloaded from F-Droid. Not sure how that works exactly.
I ran into the same issue. The good news is that app is the only one I've had to uninstall and reinstall from an apk because fdroid was so insanely slow. I wish they made an effort to keep up with apps where they need to be updated frequently and stop working entirely if they aren't updated. I can't imagine there are too many apps like that
Dear F-Droud, please stop redirecting me to the Mandarin version automatically without an option to read the original message. Just because I have a Chinese keyboard layout available.
First hit for 'check http headers', in case that helps find out why websites think you want Chinese content. Maybe it's a bug in the website; maybe it's set as your first preference. Please report the bug if there is one!
That's strange, sounds worth reporting. They should be able to tell you if there's anything else to check (maybe some javascript interface says Chinese is the way to go) or if it's really just some strange bug on their end (misdetection of the ip address or so)
Since F-Droid (i.e., the repositories, not the app) builds all apps, a practical solution would be for the repositories (i.e., their signing keys) to be recognized by El Goog. Whether and how much help / obstacle the "maybe we do evil" company puts up for / against this is a different question.
It seems to me this is a blocker to use if google can restrict sideloading like this. Its not going to end with just get people requiring to register their app with an identity. Wont they be able to put presser on f-droid devs to lock out software they consider a threat to some business model?
If the issue Google has with sideloading is really just the rampant app piracy (and the malware that comes with cracked apps) that might be something F-Droid can accomodate.
I don't think malware is the problem, as most malware comes directly via Google's ecosystem carried by ads. Just recently I had to uninstall some app from the play store since it tried to distribute malware through scary pop-ups and had it replaced with something from f-droid for someone I know.
> most malware comes directly via Google's ecosystem carried by ads.
Google's own Play Store is filled with outright malware too, no ads needed. The idea that Google has to control what people are allowed to install on their phones isn't really for the protection of anyone except Google.
That newspeak term should just disappeared. It only contributes to the image that downloading and installing an app is something that is outside the "happy path". Installing software of your choice on a device you own shouldn't be demonised
Surely you see how installing unvetted software on a device that holds your entire life, bank info, photos, etc. probably shouldn't be part of the "happy path" for most people. You shouldn't even install software you haven't fully vetted from the google play store. This should be drilled into non-technical people.
Those of us who want to can easily bypass it. My mom who doesn't know what she's doing and gets a phishing email with a fancy apk attached should probably have a hard time using it.
Today people get in debt to have the latest orange iPhone, for a long time before that most people in, ok, developed countries somehow got hold of a computer.
It was true then and it is true now. Outside businesspeople and students and the middle class of OECD countries (all amounting to a low single-digit percentage of the world population), ordinary people never bought desktop or laptop computers. By contrast, everyone has a mobile one in their pocket today.
More likely you're living in a bubble unrepresentative of the rest of the world. I just did some research, inconclusive because nobody is tracking this data. Personal-computer ownership in rich countries (i.e. "OECD") is indeed high. But only 12% of the world's population lives in Europe and North America combined. The figure is much much lower elsewhere in the world, where everyone lives. For example, 16 computers per 100 people in Brazil in the 2010s. [1] Most people in the world have never touched a laptop or desktop. Now that computing has gone mobile-first, the figure is only going to keep dropping.
> a device that holds your entire life, bank info, photos, etc.
I'd see it the other way around and say that a device running an operating system controlled by some company shouldn't hold your entire life, bank info, photos, etc.
How do you get around this? Literally every bank, brokerage, etc... is hell bent on you using your phone for everything from 2FA to passkeys, etc... They dont even imagine people have computers anymore or want two+ physical devices/controls on what can be done with which factors
It requires collective action. Ideally with laws to force interoperability, so folks can move among platforms with ease. Then standards will arise to keep that feasible for app makers.
Without regulation markets coalesce as the winners eat each other like a game of snake. It's a miracle Apple hasn't yet eliminated Android. Although I suppose for some institutions there is only iPhone.
Certainly you can use those, but they're not mandatory (here in Canada at least). Can easily get a card and use physical bank and ATM to do everything, and website logins use email as 2fa.
Have you ever tried to educate a 70+ year old person on this kind of stuff? Their eyes gloss over and they don't care. I've told my mother not to install random apps on her phone several times yet she still does it. I could probably send her a phishing e-mail right now that 'looks like' it's from me (so long as my name is in the from: field that's enough) and she'd follow the instructions to install a malicious apk too.
"Everyone should just be smarter/more educated" is what I used to think as well. I now fully understand some people have no desire to be educated in any way and it's a net good for society to not have a large % of devices compromised.
yes, got my father on linux a decade (or more) ago. He's 84. No problem. Most recently we discussed being vigilant against vishing.
Now my in-laws (similar age) one very demented, the other thinks he knows best because he was a chemical engineer...they could use some built in protections
so ultimately I think some default level of "guardrail" is appropriate, but it should have a not too burdensome escape hatch
The answer to people refusing to care about important things in life is not to put restrictions upon everyone's freedom. Ultimately, being an adult means you have to take responsibility for your actions (or lack thereof). It isn't hard to learn how to use a computer responsibly, and I've known plenty of older people who did so just fine. There's no excuse here.
You do understand we've broadly come to the conclusion that this isn't how society should work though, correct? It's why there's warning labels on everything, liability for not warning people for even the dumbest of things they might do with your product or in your establishment, extremely strict laws for things like driving a car, flying an airplane, or using any kind of heavy machinery, responsibility of servers to cut people off if they've had too much alcohol, the list goes on. I find intelligent people often have this mindset that all "real adults" are just as responsible as they are. It's just not the case.
And I generally wouldn't care "have at it" if their phone/computer being compromised only harmed them. But a bulk amount of compromised devices harms us all.
"Think of how stupid the average person is and then realize half of them are stupider than that!" -George Carlin
It is like saying that you should not have free speech because someone might influence 70+ to say stupid stuff (well, that is already happening...).
Family should be responsible on education or making phone of people that are not educated enough (minors, elderly, etc.) limited - I do that using Family Link. I have there my child and also my in-laws - both of them can't install new apps without my permission.
So the tech is already there, one just needs to use it.
What about an entire family of people who have no interest in learning technology they just want the shady ad-free youtube on their phone? I find it perplexing you've never met people like this. I'd wager it's more common than not in our world.
That would be like requiring people taking driving lessons before driving cars - what nonsense! Just let them behind the wheel & they will figure it out just fine!
The Emacs version for Android makes uses of something like this IIRC by signing a version of Termux with the same key and distributing it in the same SourceForge repo such that Emacs on Android can access CLI tooling like git for example.
Honestly not as bad as I feared it would be. Still not great and it's moving us farther from the idea that people who paid for the device should be allowed to install what they want on it, but as it stands it's a workable process. We'll see how quickly it takes Google to make it worse
Currently, switching to GrapheneOS means giving Google money. Next year's Motorola-based alternative is also likely going to be several price classes above the Pixels you can currently put GrapheneOS on.
Then buy a Pixel second-hand or when they hit rock-bottom prices, which usually happens after 6 months or so. At some point Google is probably not making a lot of profit from the devices anymore and they want to sell it to you for tracking and to sell Google One subscriptions, which are mostly irrelevant if you use GrapheneOS.
I followed Pixel prices for the last year, and rock-bottom for a 256gb version (the current absolute minimum for a device without an sd, to my eyes) meant 450€.
There are occasional good deals for (unused) older models on eBay, but they're surprisingly rare.
I wonder if Google demands stores to give the old models back, after the release of newer ones.
Interesting, here you can still buy the P10 and P10P for hundreds of Euros off and the prices are still trending down. Also many stores still have them. This is not surprising, because Google still sells them themselves, just in fewer colors and storage tiers.
I've tried $1000 phones before and found that they don't do anything different than my cheap phone, other than taking better quality pictures. But at least my cheap phone has an SD card slot and a headphone jack.
The latest pixels are a complete downgrade from the previous year (worse components). That's one huge reason to buy a last year phone (as opposed to a current one).
Updates on this have been slowly trickling out and the best I can discern is you will be able to still install apps from stores like F-Droid, but you have to go through a manual "advanced flow" which will most likely make you wait 24 hours before installing it and make you go through other hoops.
In short, google has referred to this as "increased user friction" to try and deter people from doing this. Essentially not making it impossible; just really frustrating for users so they get sick of the process and just install verified apps through them.
The only way I know around this is to install a custom rom like GrapheneOS or Lineage OS since this change targets Because the policy targets the Google Mobile Services (GMS) framework rather than the foundational Android Open Source Project (AOSP).
It seems google is going to allow an "advanced flow" that is scam resistant by requiring the user to wait 24 hours before they can start installing their own apps. It sucks, but assuming they don't change the plan again, F-Droid should be able to continue working.
It's already live, I had to go through it last week. It's in developer options, then it asks if you're moving the selector to allow the installation of non-play store apps because you're being asked to by someone.
Then it starts a 24 hour timer. When that hits zero, you have 1 hour to go back in and select that you want to install apps on a device you own and paid money to own.
It's not scam-resistant at all. Any scammer will gladly work around this and send someone to one of many malicious apps in the play store, or a malicious URL, or even just set an appointment to call Grandma back the next day.
What? It only stays enabled for exactly 1 hour after the 24 hour timer?
I was under the impression that it would stay enabled permanently after waiting the 24 hours once.
IIRC, it's the button to permanently activate it that is only available for one hour. Once you do manage to press it, you've permanently enabled it. If you miss the window, you have to start the 24 hours again.
They're not necessarily wrong about it being scam resistant, based on some of the research into the psychology of scams. Adding time defuses the urgency of phone scams, leaving plenty of time to seek a second opinion from family members or the internet, and forcing the scammer to re-explain what the original goal was. It's too much time to breathe and defuses the fight or flight reaction needed for a high success rate. You mention URLs, but a web browser based scam page doesn't accomplish much, because the scammer's goal with fake apps is to acquire persistent remote access (akin to how the AnyDesk Android app uses accessibility permissions for Teamviewer-like remote access to an entire phone).
But yeah, it's hilarious that they're pushing this so hard when the Google Play Store still has so much malware.
So basically Google is being now more of an asshole than Apple (that now allows app sideloading and third party stores, at least in the EU). I'm and Android user since the beginning and for once I'm start considering for the next phone that I could as well get an iPhone, basically all the good open stuff of Android is long gone (back in the days I used to flash a new ROM every week), and at least Apple is better in regards of privacy than Google.
The current lockdown plan is that you'll need to wait 24 hours before installing the first unauthorized app, right? So probably exactly the same as it is now except setting up a phone will take 24 hours longer.
There is an entire world of Android phones not controlled by Google, including GrapheneOS, LineageOS, and countless variations in China and other places where Google is effectively banned.
It looks exactly the same as now. You will have to do Google's 24 hour flow thing, but it's not like that's going to stop anyone who appreciates what F-droid brings to the table.
Users and maintained packages would probably go down due to less users being able to use it, but users of Android (see GrapheneOS, LineageOS) without Google's Rookit can and will still continue to use it.
From an Android developer perspective, not good. All apps on f-droid will have to be certified by the developer with Google (it's per-app I checked) otherwise they won't work at all. And the process of not easy, even for a verified play store developer, I still have to jump through hoops to register.
Then you have to explain to users how to enable this. Not too mention the onerous F-droid requirements for publishing, it's bad enough as it is.
Average users are not going to do this, just like Google wants. Hopefully someone sues them and wins or we get Linux phones, not holding my breath though
Can't you at least see and file issues and discussions on the respective app's code repo site? This is often although not always sufficient, as the repo owner can censor issues and discussions.
Google has for years censored app reviews anyway on its Play Store, and also allowed too many low-value reviews which drown out useful reviews.
In addition to F-Droid on the device, I'd love an F-Droid "package manager client" on a computer, that allows installing apps on an Android device via adb:
# update repo lists
fdr update
# upgrade all apps on the connected device
fdr upgrade
# search packages
fdr search vlc # lists org.videolan.vlc
# install on the device
fdr install org.mozilla.firefox
# download the apk
fdr download org.mozilla.firefox
# uninstall
fdr uninstall org.mozilla.firefox
Of course, all operations would verify the signatures first.
Amazing news! I mainly use the F-droid Basic version which does automatic updating of apps. The regular one needs user confirmation for updates if I remember correctly.
Can someone recommend a good F/OSS ebook reader on F-Droid? The existing ones I have tested have too many knobs and options and are not really user-friendly.... My wife started to get into reading, but I could not get her to get out of the Kindle/Play Books ecosystem because of the user-friendliness and easy synchronisation across devices that Kindle gives.
Try storyteller. It’s an awesome app that does the whispersync thing where you get the audiobook and ebook together, can switch between the two and not lose place, can read both at the same time where the ebook underlines what’s being said. All self hosted though so you need to have a way to…obtain drm free e/audio books.
If you want a cross platform option that's pretty good across Android/iOS/Mac/Windows/Linux, Readest[1] Is another great option. It supports syncing a library of ebooks and is AGPL licensed[2].
Koreader is far and away the best. Definitely suffers from the top many knobs problem but if you spend a little time to go through the settings and install a plugin like SimpleUI and Bookends you can get something set up that's ultimately pretty end user friendly and still very powerful. You can use anything you want to sync your library, Google drive, syncthing, self hosted solutions that expose opds, etc.
Yeah I tried that and I actually still have it installed. It's better for pdfs because of reflow but the ui is too much with all the buttons. Ty for the suggestion though.
Librera. I found it daunting at first launch, but gave it a chance and once set up it's perfect. You could set it up for her and it would be as friendly as it gets.
For example, my usage now only ever goes like this:
1- Open Librera. Presented with a scrollable page of all book covers.
2- Scroll down to the epub I'm currently reading. Tap it once.
3- Resumes the book where I left off, with previous view settings. In my case full screen text with zero UI (tap once to hide the UI).
334 comments
[ 0.12 ms ] story [ 34.1 ms ] threadhttps://f-droid.org/repo/org.fdroid.fdroid_2000050.apk
No, this increases the overall complexity of the system. Android will hopefully eventually collapse under its own weight.
This means you're definitely awake.
I'm being sarcastic.
The user experience was just too broken for too long to consider it usable (didn't support background updates for about two years after Google made it available, and generally just too much jank and random errors/failures). I might look into it the next time I'm setting up a device, but I think for the majority of apps I'll still go through the Play store - I don't trust F-Droid to be stable/reliable enough yet.
This is a shame. Is the privileged extension a large maintenance burden?
F-Droid took until now to use those APIs.
After 10 years of F-droid, I'm bummed I only found droid-ify a couple of months ago. Sooo much better than F-droid.
Sometim... err more times than not... there should be a "Your IQ must be at least this high" bar for good software. Stop appealing to the lower common denominators!
https://github.com/rumboalla/apkupdater
FYI the obtainx sources current list is: Fdroid, Fdroid 3rd party, Forgejo(Codeberg), GitHub, GitLab, IzzyOnDroid, CoolApk, Tencent App Store, vivo App Store (CN).
I only ever used Github so far.
VS
"APKMirror, Aptoide, F-Droid, IzzyOnDroid, APKPure, GitLab and GitHub"
so 3 chinese app stores vs APKMirror, APKPure and Aptoide, I think I'd trust more APKM over the rest, personally I update only from Github/Fdroid and APKPure/Aptoide I have disabled
The old f-droid client made selecting app updates easy. With both v2 and droid-ify, you have to click through for each app. Not a great interface decision :( Why do updates always dumb interfaces down these days?
https://github.com/rumboalla/apkupdater
I don't really need app to discover other apps, I need app to install/update the apps I already know.
I tried it with 3 random apps for a while, but instantly got into issues. Two stopped updating due to Obtanium falling behind how app releases - for instance, developer changed version numbering scheme but Obtanium didn't expect that, so an outdated version was always presented. It wasn't fixed for quite a while.
Then I discovered https://apps.obtainium.imranr.dev/ which makes it very easy. I feel like Obtainium should make this more obvious. It would help adoption a lot.
A few days passed, and I eventually get a notification from NewPipe prompting for an update. But I can't install it just yet, because of mismatching signatures between the F-Droid and GitHub versions (yes, that's the point, I know...). The F-Droid build took so long to release, that in the meantime, another version of NewPipe came out...
https://newpipe.net/FAQ/tutorials/install-add-fdroid-repo/
It would perhaps be nice if yt-dlp could eject it's youtube api handling into it's own project that is then augmented to handle anything youtube related and turns into THE library for dealing with youtube.. maybe even call it libyt :)
First hit for 'check http headers', in case that helps find out why websites think you want Chinese content. Maybe it's a bug in the website; maybe it's set as your first preference. Please report the bug if there is one!
I have no idea why it selected Mandarin. I can switch back to English by using the "desktop site" feature that _does_ have a language dropdown.
Google's own Play Store is filled with outright malware too, no ads needed. The idea that Google has to control what people are allowed to install on their phones isn't really for the protection of anyone except Google.
That newspeak term should just disappeared. It only contributes to the image that downloading and installing an app is something that is outside the "happy path". Installing software of your choice on a device you own shouldn't be demonised
Those of us who want to can easily bypass it. My mom who doesn't know what she's doing and gets a phishing email with a fancy apk attached should probably have a hard time using it.
That device was called personal computer for decades, and the world didn't end for the simplicity of installing software on it.
To be fair, mobile phones being locked down probably contributed to the mass adoption of e.g. mobile payments and banking.
Today people get in debt to have the latest orange iPhone, for a long time before that most people in, ok, developed countries somehow got hold of a computer.
Maybe with less brain cells burned by
[1] https://worldpopulationreview.com/country-rankings/computers...
I'd see it the other way around and say that a device running an operating system controlled by some company shouldn't hold your entire life, bank info, photos, etc.
Without regulation markets coalesce as the winners eat each other like a game of snake. It's a miracle Apple hasn't yet eliminated Android. Although I suppose for some institutions there is only iPhone.
Blocking apps is like blocking buying of knifes because one can hurt themselves.
There's not an easy answer, but the non-answer of "people just need to be educated" is trivially dismissed.
"Everyone should just be smarter/more educated" is what I used to think as well. I now fully understand some people have no desire to be educated in any way and it's a net good for society to not have a large % of devices compromised.
The logical conclusion is that fdroid should be allowed and google play banned by default.
Now my in-laws (similar age) one very demented, the other thinks he knows best because he was a chemical engineer...they could use some built in protections
so ultimately I think some default level of "guardrail" is appropriate, but it should have a not too burdensome escape hatch
And I generally wouldn't care "have at it" if their phone/computer being compromised only harmed them. But a bulk amount of compromised devices harms us all.
"Think of how stupid the average person is and then realize half of them are stupider than that!" -George Carlin
Family should be responsible on education or making phone of people that are not educated enough (minors, elderly, etc.) limited - I do that using Family Link. I have there my child and also my in-laws - both of them can't install new apps without my permission.
So the tech is already there, one just needs to use it.
There are occasional good deals for (unused) older models on eBay, but they're surprisingly rare.
I wonder if Google demands stores to give the old models back, after the release of newer ones.
In short, google has referred to this as "increased user friction" to try and deter people from doing this. Essentially not making it impossible; just really frustrating for users so they get sick of the process and just install verified apps through them.
The only way I know around this is to install a custom rom like GrapheneOS or Lineage OS since this change targets Because the policy targets the Google Mobile Services (GMS) framework rather than the foundational Android Open Source Project (AOSP).
Knowing Google, that's a big assumption
Then it starts a 24 hour timer. When that hits zero, you have 1 hour to go back in and select that you want to install apps on a device you own and paid money to own.
It's not scam-resistant at all. Any scammer will gladly work around this and send someone to one of many malicious apps in the play store, or a malicious URL, or even just set an appointment to call Grandma back the next day.
But yeah, it's hilarious that they're pushing this so hard when the Google Play Store still has so much malware.
Getting some 9-11 security theater vibes.
But dear... Google has no idea that they have/had the genuine nerds and are blowing it.
Then you have to explain to users how to enable this. Not too mention the onerous F-droid requirements for publishing, it's bad enough as it is.
Average users are not going to do this, just like Google wants. Hopefully someone sues them and wins or we get Linux phones, not holding my breath though
Not that Apple is better, but they lose a huge selling point.
Google has for years censored app reviews anyway on its Play Store, and also allowed too many low-value reviews which drown out useful reviews.
Even greater HN conversation about all the to-me-unknown alternatives. I used neostore as a replacement, but maybe time to try f-Droid again
https://web.archive.org/web/20260924152713/https://f-droid.o...
The only options are stripping the DRM from kobo books or piracy, last I checked.
Piracy and stripping DRMs though definitely work.
If you want a cross platform option that's pretty good across Android/iOS/Mac/Windows/Linux, Readest[1] Is another great option. It supports syncing a library of ebooks and is AGPL licensed[2].
[1]: https://readest.com/
[2]: https://github.com/readest/readest
Supposedly it can interface with various sync providers, but I've not tried this myself. The rendering is lovely.
Unfortunately I have had to go proprietary and use readera premium, which works fine for epubs.
You can thank me later (in 20 years).
For example, my usage now only ever goes like this:
1- Open Librera. Presented with a scrollable page of all book covers.
2- Scroll down to the epub I'm currently reading. Tap it once.
3- Resumes the book where I left off, with previous view settings. In my case full screen text with zero UI (tap once to hide the UI).