← Back to context

Comment by ragequittah

7 hours ago

Surely you see how installing unvetted software on a device that holds your entire life, bank info, photos, etc. probably shouldn't be part of the "happy path" for most people. You shouldn't even install software you haven't fully vetted from the google play store. This should be drilled into non-technical people.

Those of us who want to can easily bypass it. My mom who doesn't know what she's doing and gets a phishing email with a fancy apk attached should probably have a hard time using it.

> a device that holds your entire life, bank info, photos, etc.

I'd see it the other way around and say that a device running an operating system controlled by some company shouldn't hold your entire life, bank info, photos, etc.

  • How do you get around this? Literally every bank, brokerage, etc... is hell bent on you using your phone for everything from 2FA to passkeys, etc... They dont even imagine people have computers anymore or want two+ physical devices/controls on what can be done with which factors

    • It requires collective action. Ideally with laws to force interoperability, so folks can move among platforms with ease. Then standards will arise to keep that feasible for app makers.

      Without regulation markets coalesce as the winners eat each other like a game of snake. It's a miracle Apple hasn't yet eliminated Android. Although I suppose for some institutions there is only iPhone.

That means education for people: don't perform actions that are in emails.

Blocking apps is like blocking buying of knifes because one can hurt themselves.

  • Have you ever tried to educate a 70+ year old person on this kind of stuff? Their eyes gloss over and they don't care. I've told my mother not to install random apps on her phone several times yet she still does it. I could probably send her a phishing e-mail right now that 'looks like' it's from me (so long as my name is in the from: field that's enough) and she'd follow the instructions to install a malicious apk too.

    "Everyone should just be smarter/more educated" is what I used to think as well. I now fully understand some people have no desire to be educated in any way and it's a net good for society to not have a large % of devices compromised.

    • yes, got my father on linux a decade (or more) ago. He's 84. No problem. Most recently we discussed being vigilant against vishing.

      Now my in-laws (similar age) one very demented, the other thinks he knows best because he was a chemical engineer...they could use some built in protections

      so ultimately I think some default level of "guardrail" is appropriate, but it should have a not too burdensome escape hatch

      2 replies →

    • The answer to people refusing to care about important things in life is not to put restrictions upon everyone's freedom. Ultimately, being an adult means you have to take responsibility for your actions (or lack thereof). It isn't hard to learn how to use a computer responsibly, and I've known plenty of older people who did so just fine. There's no excuse here.

    • It's full of malicious apps on google play. There are none on f-droid.

      The logical conclusion is that fdroid should be allowed and google play banned by default.

  • Because education has worked so well on Windows.

    There's not an easy answer, but the non-answer of "people just need to be educated" is trivially dismissed.

    • I'm not sure the situations are comparable when Windows doesn't have this permission system where the apps are still very limited in what they can access unless you grant specific directory access or access to the contact list or such

      1 reply →

> a device that holds your entire life, bank info, photos, etc

That device was called personal computer for decades, and the world didn't end for the simplicity of installing software on it.

  • The difference is that the only people who used those personal computers were (are) an educated subset of the middle class in developed countries.

    • No. Plenty of people with no technical knowledge.

      Today people get in debt to have the latest orange iPhone, for a long time before that most people in, ok, developed countries somehow got hold of a computer.

      Maybe with less brain cells burned by

  • > That device was called personal computer

    To be fair, mobile phones being locked down probably contributed to the mass adoption of e.g. mobile payments and banking.

    • Web banking was offered by all banks long before banking apps, and you could of course access it from smartphones

      The move to apps made things more difficult, if anything

      2 replies →

  • The world may not of ended but to of people have been hurt by malware ruining their computer, cryptolocking all of their company's files for ransom, stealing all of your login credentials, stealing cryptocurrency, taking secret photos with your webcam, screen recording what you are doing on your computer, etc.

    The "personal computer" has a terrible track record.

Block installs outside of playstore ON/OFF (ON by default) isn't any less secure. "Sideloading" is scaremongering.