cross-posted from: https://discuss.tchncs.de/post/45277582

Opening my weather app this morning I was greeted by this warning:

Google has announced that, starting in 2026/2027, all apps on certified Android devices will require the developer to submit personal identity details directly to Google. Since the developers of this app do not agree to this requirement, this app will no longer work on certified Android devices after that time.

It’s the first time I hear about this, seems to be about:

Tech crunch article from august, “google will require developer verification for android apps outside the play store”

Cirrus app: Github

Was this a big thing I somehow missed? I hope more devs will follow suit.

  • WIZARD POPE💫@lemmy.world
    link
    fedilink
    English
    arrow-up
    49
    ·
    25 days ago

    Can’t have shit in a closed system. Fuck google.

    Linux on phones needs to become a thing. If they start locking down like apple does I will literally go back to a dumb phone.

  • rumba@lemmy.zip
    link
    fedilink
    English
    arrow-up
    21
    ·
    25 days ago

    Seems to me like there’s about to be one hell of a market for phones that you can run alternative operating systems.

    • HobbitFoot @thelemmy.club
      link
      fedilink
      English
      arrow-up
      9
      ·
      25 days ago

      Except the economics for it are trash. Google uses Android as a loss leader to make money on Google’s services.

      • Spice Hoarder@lemmy.zip
        link
        fedilink
        English
        arrow-up
        3
        arrow-down
        1
        ·
        25 days ago

        Damn the economics. The only people who care about “cheaper phone” are those who don’t care about other things

        • ulterno@programming.dev
          link
          fedilink
          English
          arrow-up
          6
          ·
          25 days ago

          I am going to refute you over here.
          I can’t seem afford a Linux phone (or any mobile device really), simply because they tend to be made by labour in high-pay countries, while I am in a low pay country (which means I am not paid as much either).

          And then I can’t afford to try any possibly existing Linux ROMs on my phone, because I can’t afford to brick it at all.

        • hdnclr@beehaw.org
          link
          fedilink
          English
          arrow-up
          4
          ·
          edit-2
          25 days ago
          1. A shitton of people have lived economic realities that don’t allow them to splurge on a phone at all, even if they’d really like digital freedom or privacy. See: half of the global smartphone market, where Android Go and KaiOS enabling cheap smartphones lead to millions of sales.

          2. People who can and want to don’t even make the jump because the reality of owning a non-iOS/Android phone is that it requires sacrifices. I went to a concert last night that required me to have the Ticketmaster app to even get in. Everyone at that concert had to have either an iOS or Android phone, myself included. I’m testing Ubuntu Touch on a second phone, but if I make it my daily driver, I’m going to have to keep a second phone around for stuff like that. Ecosystems are too locked down now, and unfortunately you will have to either miss out on some things, or adapt hard-core.

          3. The devices and software have to be there. Right now there are only a handful of truly modern devices thar you can load Ubuntu Touch or another Linux distro on, and they’re… not quite straightforward for non-techy people to get up and running. Which is, believe it or not, the vast majority of users.

          2025 being the year of the alternative smartphone OS seems just about as likely as any other year being the year of the Linux desktop.

    • jcarax@beehaw.org
      link
      fedilink
      English
      arrow-up
      7
      ·
      25 days ago

      Unfortunately, I think the vast majority who care are already using one. However, with Google device tree and other shenanigans on Pixel devices, it probably makes substantial room within the niche market for the likes of Fairphone and Shiftphone to get into new regions.

      On the other hand, mandates for major operating systems to report illegal activity that are in the pipeline could have a larger effect.

      I dunno, I’m talking out my ass.

      • Turret3857@infosec.pub
        link
        fedilink
        English
        arrow-up
        5
        ·
        25 days ago

        If I didnt have to pay 2x - 3x the price for a fairphone in the US I would’ve already switched. Unfortunately, $1k for a device with USB 2.0 is really not worth it for me or anyone else I know.

        • jcarax@beehaw.org
          link
          fedilink
          English
          arrow-up
          2
          ·
          25 days ago

          Agreed, though if it weren’t for tariffs it wouldn’t be too expensive to ship from the likes of Clove Technologies. If the extra cost were going to Calyx instead of Murena I might pull the trigger.

        • splendoruranium@infosec.pub
          link
          fedilink
          English
          arrow-up
          1
          ·
          24 days ago

          If I didnt have to pay 2x - 3x the price for a fairphone in the US I would’ve already switched. Unfortunately, $1k for a device with USB 2.0 is really not worth it for me or anyone else I know.

          Going for a used FP4 should address both those concerns!

          • Turret3857@infosec.pub
            link
            fedilink
            English
            arrow-up
            1
            ·
            24 days ago

            Thr cheapest one I can find is $600, for a phone that is 4 years old. I would prefer not to do that.

            • splendoruranium@infosec.pub
              link
              fedilink
              English
              arrow-up
              1
              ·
              16 days ago

              Thr cheapest one I can find is $600, for a phone that is 4 years old. I would prefer not to do that.

              Reasonable, I suppose, although age really shouldn’t matter that much if the hardware features are sufficient and you’re running your own OS.
              The low-end models around here have become cheap enough that I’m considering a second one as a testing environment/travel phone/untrusted device 😅

        • GandalftheBlack@feddit.org
          link
          fedilink
          English
          arrow-up
          1
          ·
          25 days ago

          But you don’t need to buy a Fairphone to use /e/OS. You can install it for free on any supported phone, so it’s worth checking the website to see if your phone is supported. Switching to /e/OS has breathed new life into my Moto g 7 without having to spend a penny on hardware.

          • Turret3857@infosec.pub
            link
            fedilink
            English
            arrow-up
            2
            ·
            25 days ago

            I’m not sure why you mentioned /e/OS lol. I use iodeOD, I was using CalyxOS before that. I don’t feel entirely comfortable using /e/OS given their recent controversy with using OpenAI for STT. I want a fairphone because I dont want to buy a Pixel just to be able to relock my bootloader + I like their philosophy of carbon neutral phones w long support

      • Lka1988@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        2
        ·
        edit-2
        24 days ago

        However, with Google device tree and other shenanigans on Pixel devices,

        It’s not impossible to make a custom ROM with that caveat, it’s just more work. I would love to contribute, but I can’t code for shit, so I toss devs some cash whenever I can.

        • jcarax@beehaw.org
          link
          fedilink
          English
          arrow-up
          1
          ·
          24 days ago

          I know, but this stuff is adding up where Pixels might stop being the golden child of the custom OS market.

      • rumba@lemmy.zip
        link
        fedilink
        English
        arrow-up
        2
        ·
        25 days ago

        On the other hand, mandates for major operating systems to report illegal activity that are in the pipeline could have a larger effect.

        That’s pretty much what I’m afraid of, full 1984

        • jcarax@beehaw.org
          link
          fedilink
          English
          arrow-up
          3
          ·
          25 days ago

          And massive propaganda campaigns are turning people’s civic energy back on themselves, and their own communities. Ain’t life grand?

    • skuzz@discuss.tchncs.de
      link
      fedilink
      English
      arrow-up
      1
      ·
      25 days ago

      The ability to create them will become increasingly challenging. Carriers will increasingly not approve them.

      Hopefully chip manufacturers like Qualcomm that will continue to lose revenue from Apple see the need for more generic, open hardware.

  • lath@piefed.social
    link
    fedilink
    English
    arrow-up
    12
    ·
    25 days ago

    Technically, this would allow the identification of malware providers in Google’s app store.

    Practically, every us citizen’s personal identification details were taken by doge idiots and are likely by now up for sale at a cheap price, so false identification by malware providers is pretty much guaranteed.

    It’s a “we covered our ass” policy same as any “save the children” that does anything but the implied thing.

    • wizardbeard@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      9
      ·
      25 days ago

      This is about all app makers, not just ones in the Google Play Store. This also applies to third party app devs and hobbiests making open source apps to put up on alternative app stores like the all open source F-Droid.

    • ReversalHatchery@beehaw.org
      link
      fedilink
      English
      arrow-up
      4
      ·
      25 days ago

      Technically, this would allow the identification of malware providers in Google’s app store.

      play store publishers are already needed to submit (and publish) their name and address. they made it a requirement ~5 years ago.

      • lath@piefed.social
        link
        fedilink
        English
        arrow-up
        1
        ·
        24 days ago

        Obviously fictional. An ID and a picture of yourself holding today’s paper are also needed to confirm authenticity.

      • Zangoose@lemmy.world
        link
        fedilink
        English
        arrow-up
        3
        ·
        25 days ago

        Note that if you’re in the US, Samsung doesn’t unlock the bootloaders at all and afaik Motorola is also hit or miss. Importing a phone is also risky as international versions might not have the cell bands required for US carriers.

        If you want a custom ROM in the US you basically have to buy a pixel, and at that point you might as well go with GrapheneOS since it’s the most secure

      • jcarax@beehaw.org
        link
        fedilink
        English
        arrow-up
        1
        ·
        25 days ago

        Just to note, Calyx currently has a questionable future, and at best has frozen new installations while they work out new signing keys after some developers left the project. My understanding is that there will be one or no further updates to anyone that has a current installation, and a fresh install will be required if they do continue development.

        • Turret3857@infosec.pub
          link
          fedilink
          English
          arrow-up
          2
          ·
          25 days ago

          Their gerrit is extremely active, and it was only one Dev that left, cdesai, who is also a lead Dev for Lineage. While its possible they dont come back, given the very active gerrit (and the fact that the other person who left was Nick, who was really only a PR person) i think theres a good chance the project comes back fine.

          • jcarax@beehaw.org
            link
            fedilink
            English
            arrow-up
            3
            ·
            25 days ago

            Man, I hope so. I’m on Graphene for now, but I’d like to move away from Pixel devices.

            A security chip is great if you know what it’s doing, but we really have no idea what Titan might be doing in the background. And Google is becoming more and more abusive to the FOSS community.

            I’m seriously considering trying to import a Jolla C2. I ported my number to jmp.chat, so as long as I can run Cheogram or some other XMPP client that handles the PSTN gateway well, I honestly don’t even care much about cellular connectivity anymore. My phone is basically a wifi phone with Signal, downloaded maps, authenticator app, and my music at this point.

            • Turret3857@infosec.pub
              link
              fedilink
              English
              arrow-up
              2
              ·
              25 days ago

              I felt the same way about getting a OnePlus 6 or Pixel 3 for PostMarketOS. I’m currently on iodeOS which supports a lot of devices, even some EoL pixels with bootloader relocking. Its similar enough to Calyx. I tried Graphene but it wasn’t for me. I’m hoping someone within Google makes sure AOSP stays the A_OS_P, but if not I guess its time for us to start throwing money at rhe PMOS devs.

      • Railcar8095@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        25 days ago

        Why the Chinese phone would work? In Europe they have Google play services and thus are also affected. Maybe it’s the Chinese version of those? Not sure if they have Google play services there

  • rkk@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    2
    ·
    25 days ago

    I guess if you are using any of these, (which I do and like them a lot) then the chance is high to get this message. I think this is about the russian hunt that came in effect after a US presidental order. No russian devs allowed even in the linux kernel developement. Big cleansing went down to secure IT from sabotage. Google has to oblige.

    • takeda@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      1
      ·
      25 days ago

      The same president that paused cybersecurity defense program, the same that first blocked funding for Radio Free Europe and when judge reinstated it he just blocked the satellites over Russia, the same president that suggested to have joint cybersecurity program with Russia?

      If anything, this move is there to restrict further access to information for us.

  • node815@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    11
    ·
    25 days ago

    I have a bird identifier which listens to the mic when you run it and it easily identifies the birds and it gave me that tonight when I opened it. I’m thinking that F-Droid (where it came from ) may be injecting that in the installs for those devs which have yet agreed to Google’s changes or otherwise flat out said they wouldn’t. I’m not sure if that would be the case with this app, but since you got the same one I did, it makes me wonder if that is the case.