this post was submitted on 19 Mar 2026
523 points (96.9% liked)

Technology

82882 readers
2987 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] over_clox@lemmy.world 95 points 2 days ago (7 children)

I can actually see where it can improve security against scammers trying to scam elderly and non-tech savvy people.

  • Scammer tries to get someone to install malware from their site
  • Victim isn't familiar with sideloading, but scammer instructs them
  • Victim hits the first time 24 hour block and has to restart and wait
  • The restart alone breaks contact with the scammer, scam thwarted

For the rest of us that know our way around Android, it's just a one time annoyance, after completing all the steps to enable sideloading, you won't have to wait 24 hours anymore.

[–] zzffyfajzkzhnsweqm@sh.itjust.works 12 points 1 day ago (1 children)

Scammers almost always install remote desktop app from play store. This is just anti competitiveness....

[–] BackgrndNoize@lemmy.world 6 points 1 day ago

This is only the first step, they will keep adding more bullshit like this in the name of security till you end up with a device that's nothing more than a advertisement terminal for google

[–] pennomi@lemmy.world 69 points 2 days ago (2 children)

It’s going to be effective, but it’s a sad world where you have to create a total nanny state because there exist a subset of users who are INCREDIBLY stupid.

[–] PseudorandomNoise@lemmy.dbzer0.com 35 points 2 days ago (4 children)

Is it still a subset when it's the majority?

And to be honest, the level of effort scammers are willing to go through is shocking, and AI's just making it easier for them.

[–] ParlimentOfDoom@piefed.zip 32 points 2 days ago (1 children)

Anything less than the whole is a subset, yes.

Strictly mathematically even the whole world is a subset of the whole world.

[–] freeman@sh.itjust.works 3 points 1 day ago

Evidence that any significant percentage of people, never mind the majority, is getting scammed? Then how many of them via app installs?

[–] Anivia@feddit.org 2 points 1 day ago

And to be honest, the level of effort scammers are willing to go through is shocking

Is it? If you live in a country like India, then a single successful scam will be able to pay for years of living expenses

[–] CainTheLongshot@lemmy.world 1 points 1 day ago

Something about the smartest bears vs the dumbest humans.

[–] Cocodapuf@lemmy.world 4 points 1 day ago

It's sad, but this is the world we live in. It's constantly disappointing.

But I do want to push back a bit, the people getting scammed are not incredibly stupid, they're incredibly vulnerable. They're often people who are generally less tech savvy, but also they're people who don't have a lot to lose, it's a bit counterintuitive, but it's easier to scam people who take money very seriously.

[–] Pika@sh.itjust.works 33 points 2 days ago* (last edited 2 days ago) (2 children)

Lets be real though, currently they already have to blow through 4 other warnings about installing unsigned APK and enabled the browser or file manager to be able to install applications. It's almost certain if they are that far deep/commited, they are going to call the scammer back if the scammer left a number.

Yes this might allow for a time delay where the scammers number could be disabled if reported by enough people, or someone else to be like "yo this is a scam" if they mentioned it but, I don't think this is as secure as they are saying it will be. The target audience for this is very unlikely to be thwarted by a time delay. Plus, the scammer will make some excuse about how the warning is just a safety percaucion and doesn't need to be followed as this is a normal usage of the toggle, and then have them call back after the delay is done.

For clarification: the target audience doesn't know about the scam, and all they care about is that someone is seemingly willing to assist with an issue or problem they have. Said person knows the solution and they just have to wait for the timer to be done to be able to do said solution. They have no reason of telling others about it (unless they were complaining about googles time delay) as they already got someone who is seemingly able to assist.

Honestly, having to have the user type "I agree that I have verified the application i am trying to install is genuine and not a fraudulent app" or a listbox of checkmarks to toggle in order to enable it would be far more efficient for this case.

Hell take the example image the article on the dev page has and make it into toggles instead and it would work far better than a timer does.

[–] grue@lemmy.world 5 points 1 day ago* (last edited 1 day ago) (1 children)

Honestly, having to have the user type “I agree that I have verified the application i am trying to install is genuine and not a fraudulent app”

Ask Other Linus how well that sort of thing ("Yes, do as I say!") works, LOL!

I agree with you that Google's anti-competitive time delay BS is likely to be ineffective for its claimed purpose, but frankly, I don't think any other reasonable (i.e. non-rights-infringing) strategies would be effective either. Honestly, there's a limit to how much effort you should go through to save idiots from themselves -- and how much annoyance you impose on everyone else in the process! -- and I think we've already hit it.

[–] Pika@sh.itjust.works 3 points 1 day ago (1 children)

I have never seen that page before, but that's hilarious. I somewhat hope that he did that as a demonstration of, hey, someone may do this because it's hard for me to wrap my head around someone who uses a computer for a living, doing something like that.

Being said, I think that prompt went above and beyond what was needed. At some point you just need to let the user touch the hot stove top... It stated what it was going to do, stated that it was going to be potentially dangerous and unlikely what the user wanted, and then reiterated that it was core essential packages needed for it to run... I don't know what else they could do there. I would definitely be against adding further restrictions though. If he was willing to type that in, I don't know what would stop him from doing that, to be honest, Maybe a..." I acknowledge this would break my system..." instead of it being yes-do as I say. But I don't know.

Being said hard agree there is zero reason that a package like steam should be able to uninstall your desktop., That was definitely a bug or a misconfiguration with the steam package. That was unexcusable. I just think they gave more than enough information of what that would do and he did it anyway.

I firmly agree at some point the ends don't justify the means and Android has definitely got to that point with unsigned packages prior to making this change., And I don't think the ends justify the means to implement such a system. And I definitely think there is ulterior motives for implementing it.

[–] grue@lemmy.world 3 points 1 day ago (1 children)

I somewhat hope that he did that as a demonstration of, hey, someone may do this because it’s hard for me to wrap my head around someone who uses a computer for a living, doing something like that.

Nope, he genuinely didn't bother to understand the warning before typing it. He may use computers for a living, but that just means he has a lot of very ingrained Windows bad habits to un-learn.

It was some pretty big Internet drama when it happened and he's still trying to defend himself from the near-universal lambasting he got for it. Although I included the link just in case, I'm kinda surprised you (being a person tech-savvy enough to be posting on Lemmy) didn't already hear of it.

He's actually making a second attempt to switch to Linux right now (four years later), initially picked Pop!_OS again, and had some more problems with it. 🤦 He has a second channel where he posts clips from his podcast, and he keeps whining about how the other people doing it with him are having little to no trouble and he's just cursed, LOL.

[–] Pika@sh.itjust.works 2 points 1 day ago

Yeah, I had never heard of it, I generally stray away from video based mediums, but I am a little surprised I didn't come across articles for it, I can only assume that none of the creators I followed covered it.

Although it was kind of funny to see the beginning of that second video, him still trying to do damage control, it looked for a second like he was going to agree that he had screwed up that install because he said it was 100% his fault and then he Backtracked and said that it wasn't his fault and I'm like so close lol.

[–] over_clox@lemmy.world 6 points 2 days ago (1 children)

Sadly, there's truth in everything you say. Scammers are gonna be scammers, and they'll just find a new technique plus the long standing social engineering to continue their efforts to rip people off of whatever they can.

Still, it's something in the middleground, to help grandma be less likely to get scammed, while also giving power users an out and way to keep using their devices the way they want.

[–] grandma@sh.itjust.works 1 points 1 day ago

I bet they will end up having granny use adb over WebUSB a la GrapheneOS

[–] Crozekiel@lemmy.zip 52 points 2 days ago (1 children)

I'd believe that if most Pig Butchering scams weren't using apps from Google Play already.

The problem with this is that most of the apps used in scams are already on the play store. I haven't ever seen a scam which requests the user to download a third party app, although I'm sure it's happened on occasion.

My point is that this won't stop most scams, and primarily cause annoyance for actual power users.

[–] 3abas@lemmy.world 14 points 1 day ago (1 children)

Solution in search of a problem?

I have never seen a scam call involving sideloading an app on a phone... Why would they whenTeamViwer is in the Google app store?

[–] over_clox@lemmy.world 2 points 1 day ago

Fuck I dunno, I haven't used the Play Store since Covid lockdown. I rather prefer to sideload most apps and avoid Google for the most part anyways.