Google has news on what you will need to do for still being able to sideload apps:

[tezoatlipoca@mas.to]

@lexinova @grote or.. like make a fucking sandbox an official part of the platform, like plugins are sandboxed in the browser. Sideload all the garbage apps you like in sandbox mode, but they get locked the F down and all I/O or perms have to be re-vetted by the user periodically and/or leaves an transaction trail that can be rolled back or whatever.

I mean isn't snap really just a sandboxed-in-user-space-with-additional-restrictions deployment platform?

[nazokiyoubinbou@urusai.social]

@argv_minus_one @FifiSch @grote

If the installation fails for some reason, and leaves your phone in an unbootable state, is there some way to recover it?

Yes. Just reflash the image. In a worst case just flash the stock OS back. But it's pretty hard to mess up to that extent when you're copying and pasting.

Like you'd have to yank the cable out while it's transferring or something.

EDIT: Oh, as a side note, many do dual partitions now. If you flash it flashes to the other. So you can still just simply boot the first which remains untouched.

[lexinova@cyberplace.social]

@tezoatlipoca @grote but that don't allow them to maintain monopoly so they won't care, google cannot care less about your security.

their end goal is monopoly in android.

[ryanprior@mastodon.social]

@lumi @grote wait, this sounds really good though. Blocks in place for bad actors, super impossible to do by accident, but ultimately still full freedom to install anything you want, with a convenient way to revert to a more restricted install mode after a week passes.

This is _inconvenient_ for sure, but it seems designed to be asymmetrically more inconvenient for threat actors than for legit users. And we need serious meaningful friction to thwart scammers, domestic abusers, and them

[syn@plasmatrap.com]

@grote@chaos.social maybe bro should build an advanced flow for keeping the microphone a consistent distance from his mouth

[li@tech.lgbt]

@agowa338 @grote i mean its more 'sorry that the world is like this'

fuck hierachy, fuck power, fuck masters, fuck kings; no kings no masters, right?

.. but they'll never be effected by something thats supposed to give more power to your masters, and strip power from you;

[tay@tech.lgbt]

@grote a full 24 hour is crazy.

even apple have their security delay be only 1 hour

[nazokiyoubinbou@urusai.social]

@lexinova @FifiSch @grote I'm sorry, I don't understand this post in that context.

[woosh@social.linux.pizza]

@grote It feels reasonable to me. I haven't realized the scale of the scamming problem they are dealing with. Perhaps we, as power users, underestimate this problem but I bet Google has some good amount of data on that.

[lexinova@cyberplace.social]

@nazokiyoubinbou @FifiSch @grote you don't need to "install" graphene os on the motorola partner.

the motorola graphene edition will already have graphene in it when buying it.

so people who want installing app but don't want to flash their device will naturally buy motorola

[_davd@mastodon.social]

@grote Well that's stupid 🙄

[hellomiakoda@pdx.social]

@lumi @grote This is why I put up with constant issues to carry a Linux phone.
Microsoft and Google are the best at convincing me to be patient with #Linux.

[azurearmageddon@mastodon.online]

@grote They should be jailed together with the scammers for doing this...

Meanwhile malware still being hawked on the play store...

Linux phones growing to be an ever more urgent project.

[pitchingniblick@mastodonapp.uk]

@grote
I already have developer options enabled. Will I just be jumped to "4. Enable the settings"? And how?

[nazokiyoubinbou@urusai.social]

@lexinova @FifiSch @grote Yeah, and they very possibly won't have any other option. Like I said, the dev is pretty... stubborn about things...

But it won't be in stores most likely. You'll have to buy them online. Which means people will have to know of them first. And you know service providers aren't going to go out of their way to tell anyone.

And, like I said, it's going to be a very very limited set of options and probably quite costly. (The dev seems to have no problem expecting us to pay a lot.) That's if going commercial doesn't further ruin it all...

Not saying it's a bad thing, just that we can't count on this to open things up.

[argv_minus_one@mastodon.sdf.org]

@nazokiyoubinbou

Apparently this is how you unlock the boot loader on a phone in order to install a different OS:

https://www.ifixit.com/Guide/How+to+unlock+the+bootloader+of+an+Android+Phone/152629

And I thought having to turn off UEFI Secure Boot was offensive. Yikes! That's an awful lot of hoops to jump through, can't be done without first agreeing to the stock OS terms and conditions (my inner Stallman is very upset with that), and it requires a whole separate computer to do it with!

@FifiSch @grote

[epic_null@infosec.exchange]

@nazokiyoubinbou @FifiSch @grote Consider the failure state. If a user fails to set up installing outside programs, they can still use their phone and make calls. If a user fails to install a new OS, they have no phone until they succeed.

[31113@kolektiva.social]

@terminaltilt for the average person it's probably much more likely that someone's going to try to look over your shoulder or that one of the infinite surveillance cameras captures you entering your pin than it is that the cops force their finger on the fingerprint scanner. In that way biometrics are more secure and people should use them. Biometrics should just also be very easy to disable in moments where that threat is present

[lexinova@cyberplace.social]

@nazokiyoubinbou @FifiSch @grote sadly we don't have any other credible alternative.

bank and country already have great difficulty accepting the very hardened graphene os.

so don't expect linux phone or lineage to be allowed anytime soon :/

[snejpro@digitalcourage.social]

@woosh @grote

Yeah, the only problem i have with this approach: when I get a new phone I have to wait 24h until I can install my apps.