this post was submitted on 31 Aug 2025
1423 points (98.8% liked)

Technology

74708 readers
2854 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
top 50 comments
sorted by: hot top controversial new old
[–] peetabix@sh.itjust.works 1 points 1 hour ago

Is Linux viable as a mobile os yet?

[–] pfr@lemmy.sdf.org 9 points 10 hours ago (1 children)

I just hope that the Graphene devs continue to support the last supported versions of Android that allow installing apks.

I couldn't be happier with my P7 that has been running Graphene since day one. Zero Google. Zero problems

[–] frozenpopsicle@lemmy.dbzer0.com 1 points 3 hours ago

It's wonderful isn't it?

[–] Fedegenerate@lemmynsfw.com 5 points 9 hours ago

Christ. Some cheap phone for calls, SMS and banking. Some other device for literally everything else, perhaps I can get it with a headphone jack again.

[–] MystikIncarnate@lemmy.ca 40 points 15 hours ago (1 children)

This is the risk of "trusted computing" architectures. Who is governing the "trusted" part of that.

These cryptographic signatures are not as much of a death knell for Android as some would have you believe. The trick is to get a common code signing cert into your device, that is then used to sign any third party APK you want to run. You can avoid the Google tax this way. I assume that's how most sideloading sites and apps are going to handle this.

The question is, how do you add that certificate? Is it easy and straight forward (with plenty of scary warnings), as a user? Or is it going to be a developer options deal? Or will I need root to add the cert?

I'm not sure what that answer is right now.

I just want to finish this post with a few words about trusted computing models. Plainly: Apple has been doing this for years ... That's why you download basically everything from an app store with Apple. Whether on your Mac OS device, your iPhone, iPad or whatever iDevice.... Whether the devs need to sign it, or the app gets signed when it lands on the store, there's a signature to ensure that the app hasn't been tampered with and that Apple has given the app it's security blessings, that it is safe to run. Microsoft and Google have both been climbing towards the same forever. Apple embedded their root of trust in their own proprietary TPM which has been included with every Mac, and iDevice for a long ass time. Google also has a TPM, the Titan security module, I believe that was introduced around pixel 3? Or 4?... Microsoft made huge waves requiring it for Windows 11, and we all know what that discussion looks like. Apple requires a TPM (which they supply, so nobody noticed), Google has been adding a TPM and TPM functionality to their phones for years, and now Windows is the same. None of this is a bad thing. Trusted computing can eliminate much of the need for antivirus software, among other things. I digress. We've been going this way for a long time. Google is just more or less, doing what Apple has already done, and what Microsoft will very likely do very soon, making it a requirement. Battlefield 6 I think, was one of the first to require trusted computing on Windows and it will, for damned sure, not be the last that does. The only real hurdle here is managing what is trusted. So far, each vendor has kept the keys to their own kingdoms, but this is contrary to computing concepts. Like the Internet, it should be able to be done without needing trust from a specific provider. That's how SSL works, that's how the Internet works, that's how trusted computing should work. The only thing that should be secret is the private signing keys. What Google, Apple, and Microsoft should be doing, is issuing intermediary keys that can sign code signing certs. So trusted institutions that create apps, like... Idk, valve as an example, can create a signature key for steam and sign Steam with it, so the trust goes from MS root to intermediary key for valve, to steam code signing key, and suddenly you have an app that's trusted. Valve can then use their key to sign software on their store that may not have a coffee signing key of it's own. This is just one example based on Windows. And above all of this, the user should be able to import a trusted code signing cert, or an intermediary cert signing cert, to their service as trusted.

Anyways, thanks for coming to my Ted talk.

[–] cardfire@sh.itjust.works 1 points 2 hours ago

Thanks for sharing all of that. I got to think a little bit about stuff that normally I would take for granted.

Meanwhile...

[–] humanspiral@lemmy.ca 14 points 13 hours ago (5 children)

This is an android 16 feature, scheduled for sept 2026 "prerelease" and 2027 rollout. I expect/hope some phones will have a setting to disable "the security". If not, there is great opportunty for high end hardware linux first phones, with good android emulation software.

load more comments (5 replies)
[–] DudenessBoy@sh.itjust.works 6 points 12 hours ago (2 children)

What even is the reason for this? All this is going to accomplish is less Android market share.

[–] JeremyHuntQW12@lemmy.world 1 points 5 hours ago (1 children)

Because of people installing malware.
Its only recently that most Android phone owners even used the internet features, now you need apps just to park your car. There's nothing stopping someone from having you install malware from a pirate QR code someone puts over the proper sticker.

[–] kcuf@lemmy.world 8 points 3 hours ago* (last edited 3 hours ago)

My guess is that it's because people are using apps to get around Google's revenue generating mechanisms, like apps to get YouTube without ads.

[–] F_OFF_Reddit@lemmy.world 25 points 16 hours ago (2 children)

So yeah we'll do a decentralized Linux phone of sorts, if Google is going full 3rd Reich with Android we'll move to a Linux based OS phone.

Simple as that.

[–] cardfire@sh.itjust.works 1 points 1 hour ago

Dude. On what hardware? My 1 years old AND 4 years old Samsung phones now lock their bootloader.

Random, fly by night China phones won't have enough documentation or enough consistency in hardware to be a viable rally point for firmware devs, will they?

Don't get me wrong. I will buy exactly that Linux Phone for my next device if it gives me three browsers and enough untracked fundamental functionality like calculators and contact lists.

But I'm genuinely worried there won't be a hardware vendor in the game in my market (the land of Y'allQaeda) to sell me a compatible device that plays nice with the three mobile providers that still exist here.

[–] jmf@lemmy.dbzer0.com 14 points 15 hours ago (5 children)

Who is we? what group of people has the dev funding and time to produce FOSS hardware and software to compete with the average android phone?

load more comments (5 replies)
[–] ClydapusGotwald@lemmy.world 13 points 15 hours ago (2 children)

This was the main reason I have a spare android phone to install whatever I want on it and just factory reset if there’s an issue. Android / Google is really shooting itself in the foot cause there isn’t a point in owning an android after this imo

[–] zipzoopaboop@lemmynsfw.com 3 points 14 hours ago

Yeah I'm going graphene and if it's too problematic may as well go apple. Freedom was the whole reason for choosing Android over Apple

load more comments (1 replies)
[–] Gemini24601@lemmy.world 14 points 17 hours ago (4 children)

When it comes to the current final frontier, Linux phones, what brands/models would be the best option? Or are you all really recommending iPhones?

[–] JeremyHuntQW12@lemmy.world 0 points 5 hours ago* (last edited 5 hours ago)

You can't sideload in Linux.

"All" you need to do is reflash your phone and reinstall Android/Chromium (soon to be renamed Android). Since you are not a certified supplier, the checking is not activated.

On Chromebooks the setting will be on, since they are used in schools, but since it has a terminal you can remove the block, it won't be simple, probably terminal commands and changing configuration files, but it won't be impossible.

[–] REDACTED@infosec.pub 7 points 16 hours ago

Recommending iPhone because of freedom restrictions feels quite ironic

[–] devedeset@lemmy.zip 4 points 15 hours ago

I'm looking at Fairphone 6. EU based, has an option called /e/os which is basically degoogled Android, and it also has full support for Ubuntu Touch (Linux phone).

load more comments (1 replies)
[–] tias@discuss.tchncs.de 41 points 22 hours ago (3 children)

If they only cared about thwarting malware they could have just relied on code signing via public certificate authorities, like with binaries on Windows.

load more comments (3 replies)
[–] HeavyRaptor@lemmy.zip 90 points 1 day ago (5 children)

This is about Revanced, isn't it? They failed to kill it via the YouTube backend so now it's down to lock down the os and browsers as much as possible to keep feeding people the juicy ads.

[–] ook@discuss.tchncs.de 48 points 23 hours ago (2 children)

This is bigger than "just" Revanced though. It is about using any open source software that could replace a Google app and losen Google's grip on your data.

load more comments (2 replies)
load more comments (4 replies)
[–] Ilandar@lemmy.today 71 points 1 day ago (20 children)

I find it very strange how many people in the comments here think the solution is to buy an iPhone. Maybe you are all just rich and can afford to spend $1000+ based on vibes, but considering the Android market still has a massive value advantage I'm not really sure what the point of switching is. This all feels very similar to how some Westerners decided Chinese tech and even the Chinese government were suddenly problem-free just because Americans elected Trump for a second time.

load more comments (20 replies)
load more comments
view more: next ›