Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

They are signed, though. Just not by Google.


Signed by any non-authorised signature is the same as unsigned from security perspective.


“Running binaries signed either by yourself or by whoever wants to spy on you.”

That last part there is the problem.


Let's ignore all of the preinstalled programs, which are signed by Google and do a great deal of spying.

Do you think the 100 most popular F-Droid apps do more spying than the 100 most popular Play store apps?


No, that’s a straw man. The popular ones are not the concern.


A straw man in your favor, maybe. Shall we compare the 100 least popular of each store?

Those are more likely to be outright malware on Play.


The popularity in app stores has no bearing. Some problem apps can be on no store, just locally installed. This has been well covered in the past and you are playing catch up. It’s about abusive household members who spy on their grown children, siblings, roommates, girlfriends, parents, etc. with apps they install on their devices if given a route to do so.


The sideloading change doesn't protect against abusive household members, though. Simple lock screen hygiene and periodic reminders about invasive permissions (e.g. accessibility & location) would do more. And let us not even pretend that is the true motivation for the change. An incidental consequence that you find defensible is simply that.


It's an excuse. Give me the option to install the software I see fit. Period.


Is this not a meaningless differentiation if Google does no assume any responsibility for apps on the Play Store?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: