Hacker Newsnew | past | comments | ask | show | jobs | submit | more bitpush's commentslogin

It matches my lived experience. None of my friends use AVP. It is gathering dust. Do you have data on the contrary that AVP is growing gangbusters (like say, Macbook Neo?)


The argument is "there is no significant evidence to support the claim that Apple has given up on the Vision Pro".

I don't think anybody is arguing that it's selling amazingly well or is a growing market.

And I agree with the argument. It seems a little premature to make this claim now, so close to WWDC.

If WWDC comes and goes with no major announcement for the future of visionOS or the Vision Pro, that would be a significant indicator of Apple having given up.


That’s a bit of an absurd rebuttal.

1. I’m not making the claim it’s selling well. I’m just saying the article puts forth no supporting claim beyond the authors own repetitive opinion.

2. Your lived experience is (no offence intended) meaningless to the discussion unless you somehow live a very related lifestyle. Conversely many of my friends have Vision Pros because they use them professionally. I wouldn’t extrapolate anything from that.


This is such an interesting take. Thank you.


Seconding that, not sure if it's the full take I'd stand behind but the perspective is definitely food for thought and way more thought out than my own.


Ads dont need click to be effective.


I don't think I've ever clicked on an ad on purpose


Yet, ads are super effective. Think of the many Apple ads you watch, and how enticing those devices look.

Brand awareness is all that matters. Apple isnt counting on me clicking on the ad to buy the macbook


> In the future if LLMs are more efficient and eventually commoditized, needing less infraestructure to be run (think on-device as chip efficiency increases).

You speak as if this is given. Sure, LLMs are gonna get effective but frontier ones are always going to be hosted.

Also, on-device LLMs are gonna have a 'cutoff' for training data. You cant ask a gpt-oss4 about "Who won Arsenal x Athetico Madrid game". It has to go to the internet, and do the 'search'. You certainly cant ask the local model "What was Google's Q1 2026 earnings".

The self-hosted / on-device LLMs are going to do a lot, but not all and the moment 'search' is involved, people will reach for Google.

--

Lots of commercial queries need to be 'fresh' ("Build me an itinerary for Paris"). While a self-hosted LLM can do it, you might not want to trust it, because its info might be stale.

I encourage you to go beyond group think (HN is guilty of that) and really evaluate your position is actually valid or not.


Someone more skilled than me start killedbyapple.com


Setting it up with Ghost blog or whatever is the easy part.

Not getting sued or harassed by Apple fanboys is difficult.


> I also don't understand why people aren't more upset about the privacy issues.

Because nobody is forcing you to take a Waymo? I dont think it is as hard to understand.

Its like saying "You dont understand why people arent more upset about spicy food because your stomach cant handle it.."


Isnt the title a bit dramatic? I remember reading you can still install apps but you just need to click a few buttons.


In addition to what others have said, it means some developers who were building for Android are going to stop. You can't install an app when someone is obstructed from building it in the first place.

> every Android app developer must register centrally with Google before their software can be installed on any device. Not just Play Store apps: all apps.

> Registration requires:

> Paying a fee to Google

> Agreeing to Google's Terms and Conditions

> Surrendering your government-issued identification

> Providing evidence of your private signing key

> Listing all current and all future application identifiers

Google is not an entity you can can trust with this.


From TFA:

    Delve into System Settings, find Developer Options
    Tap the build number seven times to enable Developer Mode
    Dismiss scare screens about coercion
    Enter your PIN
    Restart the device
    Wait 24 hours
    Come back, dismiss more scare screens
    Pick "allow temporarily" (7 days) or "allow indefinitely"
    Confirm, again, that you understand "the risks"

    Nine steps. A mandatory 24-hour cooling-off period. For installing 
    software on a device you own.


You left out the crucial bit:

    Worse: this flow runs entirely through Google Play Services, not the Android OS. Google can change it, tighten it, or kill it at any time, with no OS update required and no consent needed.
    And as of today, it hasn't shipped in any beta, preview, or canary build.
    It exists only as a blog post and some mockups.


that seems better, not worse, that they don't implement this on OS level, so no gapps users are not affected at all


Sounds a bit like trying to transfer my own money to myself at the bank. I.e. it seems designed to prevent old people getting scammed.


That's exactly what this is: Google is trying to prevent tech illiterate users from installing malware.

(Or at least, that's their take on this. You can choose to read between the lines, or not, as to whether they have other motivations also.)


Of course they have other motivations

But for 1 person wanting to run their own software there are hundreds of people with the potential to install malware/crapware/etc


Had to read that sentence twice. You really think that there's more people getting scammed via "please tap the build number seven times and then go to extra settings and enable untrusted installs and then go to this website that I will dictate the URL of and you should ignore that install warning" etc etc etc. to install an apk to run software that can barely access more than a simple webpage could, than there are people (like HN'ers) who install apk files from github and f-droid?!

(Also note that "crapware" describes basically every app you find in google's store. I try on occasion, when nobody made an open source this-or-that, and it's such a minefield. If that's the thing you're trying to avoid, I don't know how you could possibly feel positive about a requirement to only use the Play Store for the tech-illiterate)


> more people getting scammed via "please tap the build number seven times and then go to extra settings and enable untrusted installs and then go to this website that I will dictate the URL of and you should ignore that install warning" etc etc etc.

I don't really understand. You seem to be against the 'annoyance' of the protections, but that annoyance is precisely why the scammed count is lower, no?

I certainly believe _more generally_ that the market for scam victims is much bigger than the market for sideloaders, for example.


What I'm against is the mandatory registration to get a key signed by a party we don't elect, who controls all (soft-mandatory^1) devices that aren't controlled by the other party we didn't elect, and both are controlled by a government that we have no say in and is acting increasingly hostile towards everyone but fellow belligerents (Israel, Russia.. seeing a pattern here).

Your "it's just a bit annoying" argument seems irrelevant compared to that, even if it would reduce scams, which I have seen no evidence for or against. Did you find or come across any evidence for it?

^1 https://news.ycombinator.com/item?id=47940687

> the market for scam victims is much bigger than the market for sideloaders

That makes no sense. Of course the market for "scam victims" is current-earth-population.com minus one (the person doing the scamming); this is a universal constant you're comparing against

If you mean the number of people who would potentially get scammed by being told to do a dozen steps to install some app which can barely do more to aid the scam than a webpage could, then I'm interested in how you end up with those figures!

Given that maybe every 20th person is decently tech-literate and that I have yet to come across a scam where installing software on your phone is a component of it (including via google's; just any kind of mobile software installation), the way I figure the "market sizes" are about 400 million to somewhere around nil


> You really think that there's more people getting scammed via "please tap the build number seven times

Yes, because this whole procedure is new

> Also note that "crapware" describes basically every app you find in google's store

Go back to emacs then I guess


Installing apks has required going into settings for years now. 'Scary' steps aren't new

> Go back to emacs then I guess

way to have a conversation


Define malware.


The scams this directly targets are well known and common. Someone gets a phishing message, they have someone install some sort of malware on the device, then their bank accounts are drained into some offshore account never to be seen again.

That's why there's a requirement for restarting the phone and waiting 24 hours.

The restart ends the connection for any remote-access software or phone call that might be driving the operation -- and the 24 hour wait period breaks the "urgency" part of the scam that prevents other people who know better from stopping the vicim from continuing.


Malware is whatever Google says it is.


Yes! That is because banking malware is specifically what is being targeted here: https://android-developers.googleblog.com/2026/03/android-de...


To be fair, that's a one time process. You do not need to do that for every app you want to sideload.

The malware issue that the flow is designed to mitigate is a very real problem. Perhaps there is a better way, but it's not immediately clear what that is.


I see zero trouble as long as it requires no additional identification, no additional payment, and no mandatory time limit for the sideloaded apps.

That is, fine by me. I can wait for 24 hours once in a few years when I acquire a new mobile phone.


You are thinking about it from the point of view of an enthusiast/hacker who wants to put their homebrew stuff on it. But this is also tightening around developers who may want to distribute their applications to lay users.


Lay users use Play Store.

Users who use F-Droid are already not as lay. If you distribute stuff that Play Store would ban, your users are likely not as lay, too.

Yes, it's inconvenient, but I see it as a good-faith attempt to limit exposure of lay users to scams, not some power grab.


Those developers will pay $25 for identity verification and have no issues.


Unless they do something google doesn't like, or trip one of their many automated systems that ban them without recourse. Or they are compelled to revoke a key by a government.


Revocations are for apps being malware and nothing else, much like macOS Gatekeeper (Apple doesn't even revoke certs used by Warez groups to sign cracked apps).

Automated bans can be an issue, but that's an edge case. Google already had the functionality to 'revoke' an app if ordered to do so by a legal authority.

It is much more important to make a real world attack - something that is draining wallets of ordinary people across Thailand/Brazil/SEA in general - harder to achieve. One thing is a political goal of some people in the west, the other is an ordinary person not having the money to feed themselves because a scammer stole it all.


I can't trust Google will keep to that, sorry. Nor can I accept harms being twisted into a further centralised accumulation of power (especially when Google, with all their resources, could likely do much more to prevent these scams than grabbing that power for themselves)


Well, the very good news is that Google is not seeking your trust. You have no say at all. This is the new system, it benefits actual real people over HN commenters and you will just have to deal with it.

Google doesn't have the ability to change the way banking apps work with regards to transferring money from one account to another in Malaysia/Brazil/Thailand. That would be a matter for the national Governments. This is the best approach available.


I'm aware I lack power here, but you seem to be trying to convince me it's a good thing.


It is, because your objectives disregard things that are far more important. Have a nice day.


Drivers license leaks are surging.


Google's identity verification system relies on multiple factors, not solely drivers licensees or other national identity documents.


There are exactly two groups of people who sideload APKs:

* people who know what they're doing

* people who are being victimized


Why would you do all that to install an app in a device that you own? It's bollocks.


Because grandmas all over the world are getting swindled by scam apps.

Look, I can't locally install a web extension I wrote on an open-source Firefox browser, because security. I have to install a Developer Edition, or get the extension reviewed and signed by Mozilla, for the very same reasons of thwarting scammers. Is this stifling, or is it making my browser not mine? Is anybody making a big deal out of that?

The world we inhabit is not always friendly. It has a ton of determined and sophisticated bad actors, and a lot of people with less technical savvy than you and me. We have to deal with that, instead of being cantankerous.


It's not obvious to me that this will help much with scamming. Especially when it affects safer app repositories like F-droid more than the cesspit that is the official Play store.


F-Droid is not a safer app repository:

https://privsec.dev/posts/android/f-droid-security-issues/

And most Android banking malware is distributed through unsafe sideload installs (as opposed to much safer Gatekeeper-style installs, which is what is coming) and are fed to victims through complex attacks involving obtaining a victim's personal information and calling them while credibly pretending to be a local authority or a bank representative. You can read about this wherever you get news about cyber crime.

This is a scourge in South East Asia and Google can do some good here. The only cost is whining from non-technical people. Everyone else will go pay $25 or whatever and sign their app.


Play Store being a cesspit is indeed a problem! But it still is making a constant effort to drive away scammers, so scams don't last too long there. Scammers show sleek-looking web pages offering to install an "official app" from their own apk. Or they have an app that clandestinely sideloads another app. This is being curbed.

But it's limited to a one-time action, not encumbered by additional papers or payment. I don't foresee any trouble using F-Droid (which I use a lot) after I have dismissed the scary screens and confirmed that I know what I'm doing.


>It's not obvious to me that this will help much with scamming.

Because as a reader to this forum, you're probably more tech savvy that the average person. Moreover this type of scam seems to be more common in Asia than the West, see:

https://cdn.economistdatateam.com/videos/cyber-scams/fake-vi...

https://www.economist.com/interactive/asia/2026/04/10/scam-i...

They convince users to download a "government app", grant it accessibility permissions, then use that to take over their phone and drain their bank accounts.

>Especially when it affects safer app repositories like F-droid more than the cesspit that is the official Play store.

Where do you draw the line? If you whitelist f-droid, do you have to whitelist third party f-droid repos too? What about other app "stores" like obtanium? Moreover f-droid being less of a "cesspool" is likely because its reach is smaller, not because it has better moderation.


I'm aware of the way the scams work. I'm also aware that scammers tend to be much more motivated to jump through hoops that are put in front them (more so than legitimate users!). Scammers can also talk people through many, many warning signs.


Scammers cannot talk people past a 24 hour wait. This attack is built upon pressure and operates at a scale that makes stealing many identies, building different-enough apps to avoid getting flagged by Google and signing them all non-viable.


>Scammers cannot talk people past a 24 hour wait.

Oh yeah, I forgot they're bound to some code of rules they follow. Scammers, of all people.


You're being dumb.

Not a 'code of rules'. The scam itself relies on urgency. Breaking the spell by allowing people to talk to friends/family/their bank makes the scam not work.


Please follow the site guidelines regarding (avoiding) personal attacks.

I can think of plenty of scams that take days in the making. Even the classic "redeem" ones have people hooked in the thing for like a week ...


>Wait 24 hours

Somehow bank vaults and heroin storage boxes don’t take this long.


The 24 hour wait period is so the scammer can't use the element of urgency to keep the victim on the phone where they don't have the opportunity to speak with trusted friends/family who would stop the scam.


See also https://en.wikipedia.org/wiki/Cooling-off_period_(consumer_r.... It's an old solution to an old problem: give the potential victim a chance to think clearly while the damage can still be undone.


This isn't referring to the efforts Google has gone to try to thwart sideloading.

It is another requirement of Google's, where all developers must be registered to them and apps must be signed by them and anything that isn't will be blocked.


From NewPipe : https://github.com/woheller69/FreeDroidWarn?tab=readme-ov-fi...

I wouldn't consider this "a few buttons", it's enough to turn off the less savvy users


Less savy and unmotivated users.. maybe? Whats the main use cases for newpipe? Let me guess: get premium features for free (no ads, downloads etc).

Do you think people wont click 9 buttons and wait 24hs for this?

Its like people forgot how pirated windows/sw used to run on millions (billions) on devices in the past until ads (and some convenience from non-so-cheap-anymore subscriptions) became the norm


Huh? Why are you railing against Google? Because of YouTube? How's Google Search making you addicted to screens.

At this rate, you'll hate Apple for making iPhones so damn good, or Starlink for giving really good internet access.

You line of thinking is - gosh, these companies are providing an excellent service, and I hate them for that?


The incentive for those Adtech is to keep you hooked as long as possible so they can sell you more ads, and making you lose your only real currency in life: time.

The incentive for Apple or Microsoft is to make a good product that you will gladly pay for. This is very different.

A good restaurant makes an excellent product bit it doesn't mean that I will spend 5 hours there.


I use Google products. Between YouTube premium and uBlock origin, I don't really see any ads at all.


Google Analytics has >80% market share. Most of the websites you visit are helping them build a profile of everything you do on the internet with the goal of selling targeted advertisement. That is their business, it's what pays for everything else they do. I think that is what is meant by surveillance capitalism.


So?

Every iPhone that people buy gives direct money to Apple, centralizing their power. This means, they get to dictate what apps can / cannot run on the device.

So what? Nobody is forcing anyone to buy iPhones. Similarly, nobody is forcing anyone to install Google Analytics, or go to that website.


Nobody is forcing people to do Heroin or Cocaine. We should start giving it for free to people in the street. Everyone can then decide if they want to take it or not. Oh yes and once you are hooked we should definitely never keep the dealer accountable. It's the users who always decides to use it! They are the ones to blame, never the giga corporation making money on your back!

That surely would work very very well in society. Literally the same thing is happening with Google, Facebook, TikTok etc.

You probably work for bigtech and your salary depends on people losing their braincells so I don't expect you to suddenly get some ethics and understand all of this.


Now do alcohol.


I think you just proved my point! It's not because it is allowed that those things are good.

Google and Facebook are allowed. They are still a net negative on society.

The world would be a better place without them.


I was told that Apple was playing 4D chess when they introduced Liquid Glass which is the design language of Vision Pro, and they were priming everyone to be a world with only VR glasses.


They’re playing 3.5D chess,

the new layering system is obviously to automatically support more of today-built apps on their AR and VR gear.

Is that lame?, yes, is VR kind of lame?, yes.

I’m interested in AR, though, and do think it will be a popular segment.


I’ve always doubted this take, if you look at the history of Apple software design you will see that they regularly pull visual ideas across from one platform to another just because they’re fond of them at the time. I think that this is like that, they decided it was time for a refresh.


> hey are just focused on privacy and are likely waiting for the time when local models become efficient enough to run on iPhones (which is quickly becoming a reality).

This is such revisionist history. They were not strategicially waiting. They tried, really really hard. The entire iPhone 16 pro was built on AI. Heck, they even (re)named it as Apple Intelligence.

Remember, this is the same time when Microsoft launched Copilot (RIP), Google launched Gemini, OpenAI with ChatGPT etc.

--- They had to walk back hard because it was a flop. They might be accidentally successful because they are a company with multiple strengths, but dont think of it as they were sitting AI out.


Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: