Technology

Lets be real though, currently they already have to blow through 4 other warnings about installing unsigned APK and enabled the browser or file manager to be able to install applications. It's almost certain if they are that far deep/commited, they are going to call the scammer back if the scammer left a number.

Yes this might allow for a time delay where the scammers number could be disabled if reported by enough people, or someone else to be like "yo this is a scam" if they mentioned it but, I don't think this is as secure as they are saying it will be. The target audience for this is very unlikely to be thwarted by a time delay. Plus, the scammer will make some excuse about how the warning is just a safety percaucion and doesn't need to be followed as this is a normal usage of the toggle, and then have them call back after the delay is done.

For clarification: the target audience doesn't know about the scam, and all they care about is that someone is seemingly willing to assist with an issue or problem they have. Said person knows the solution and they just have to wait for the timer to be done to be able to do said solution. They have no reason of telling others about it (unless they were complaining about googles time delay) as they already got someone who is seemingly able to assist.

Honestly, having to have the user type "I agree that I have verified the application i am trying to install is genuine and not a fraudulent app" or a listbox of checkmarks to toggle in order to enable it would be far more efficient for this case.

Hell take the example image the article on the dev page has and make it into toggles instead and it would work far better than a timer does.

I'd believe that if most Pig Butchering scams weren't using apps from Google Play already.

It’s going to be effective, but it’s a sad world where you have to create a total nanny state because there exist a subset of users who are INCREDIBLY stupid.

Because they incentivize it. Some banks are better at incentivizing it than others. My bank for example, allows the highest daily limit (by a factor of 5x) if you use the app. Online banking has a lower limit, and cards lower still. I don't appreciate them holding my own money hostage, but the sad reality we live in precludes me from having enough remaining mental bandwidth and effort reserve to commit it to fighting against it in such an empty and unwinnable battle. Money is a scam anyway.

In the US, I largely agree with you. Or use a website from a mobile browser. Different story in different countries where a smartphone might be the only compute the average person has, or where state services are tied to a mobile ID or bank app.

Not saying that should be the case, but if the choice is between running niche FOSS apps and removing yourself from societal benefits structures, I know what most people will pick. That's the real danger of allowing one company to own an entire ecosystem and have enough power that they have conversations directly with governments about their people instead of with their people.

I don't know how online banking access is around the world, but here in brazil, they made it completely impractical to use from computers by applying artificial restrictions. Some payment institutions doesn't even support access from computers anymore. Meanwhile, accessing from the phones has been made easier and less restrictive, so basically everyone has to do banking from the phone. It has even become a popular thing to have a separate "banking phone" to use at home, but many people can't affort that.

I have a concrete and very stupid example.

We got a large gift card as an incentive to renew our lease at our current apartment vs moving. The format they sent it in had no physical card and would only work on either online stores or through a service like Google Wallet AKA a banking app on a mobile device as you mentioned.

So to get groceries while waiting on a tax refund (thanks crappy American economy and taxation methods) we had no choice but to connect and use it that way.

At that point you should tell your work to get a work only device for you... I always refuse to use my phone for work shit. I used to explain to them why, now I just lie and say my device is too old to have anything installed on it.

Android runs apps sandboxed, so no app can access what you write in another like your banking app, or the unencrypted packages it sends.

You're liable if someone shares their credentials? Even if they did it accidentally by installing a keylogger, that seems like user error.

Just like Anthropic and OpenAI's willingness to kill people en masse, then walking it back to a nonexistent standard.