Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror

Comment Re:As intended (Score 1) 136

Overproduction is an absolute requirement for a market economy to function, you incredible dummy.

Yes, overproduction is necessary. But it's also waste. And if you get too much of it, then it's unsustainable.

You people are so pig fucking ignorant about everything

Fine words from a coward.

Comment Re:Stop calling it Firefox (Score 1) 25

I don't want anything in the browser that I have to worry about whether it's turned on and spying on me or not.

Anything like that should be an add-on so it can be not just disabled but removed (assuming it's shipped with the browser.)

My pet Firefox peeve is with mobile. It's shitty and getting shittier. Not only does it have a javascript-related memory leak they haven't bothered to fix for many years, but now it's hanging when trying to upload images. It works once or twice and then on the third try the browser hangs. It takes a long time to get through to kill it too so it looks frankly like yet another memory leak.

Comment Re:No because... (Score 1) 119

Android github app is not allowed to save files into pyDriod3 data directory.

Android file manager app is not allowed to copy files to/from ibochs android app data directory.

In general data owned by app A is not readable/writable by app B. This is a pretty important security feature. There are ways for apps to choose to share data, but by default every app's data is private to that app.

I can see how that might inconvenience you, but I think it's Really Good Idea.

Comment Re:At least something (Score 1) 33

I guess they read a few EU laws and came to the conclusion that they need to provide a bare minimum by themselves if they don't want the EU to decide what they are required to provide.

Nah, their previous plan already provided the bare minimum, since it didn't restrict sideloading of unverified apps via ADB. This is just an attempt to calm the complaints by offering an even easier sideloading option. Unfortunately, it will probably make the whole scheme pointless, since malware authors will just train users to click through the scary warnings.

Comment Re:Already an option for 'advanced users' (Score 2) 33

Whatever method it is, it will probably defeat the purpose of ending unsigned side loading. Whatever the hoops are, users will be trained to jump through them.

This is sadly true. They're going to attempt to throw up a lot of warning dialogs to dissuade users, but we know from long experience that users will click through anything to get to cat videos.

This is actually not a change, really, since they were already going to leave sideloading via ADB open, so their plan already included an "advanced user option" which users could be trained to do. This new thing must presumably be easier than ADB. My guess is that it will feature more scary warnings than enabling ADB, but will allow sideloading without using a USB cable to connect to another computer so that on balance it will be approximately as hard.

During another discussion of this I posted a story that an Android OEM related to me when I worked on Android security, when they asked me when we were going to "close the USB vulnerability", i.e. disable ADB.

Comment Re:Already an option for 'advanced users' (Score 2) 33

The problem is that alternate app stores would have had to verify all their apps with Google which defeats the purpose of being alternate.

How so? The developer verification does not require compliance with any of the Play store policies or anything at all other than the rule "don't distribute malware", since distributing malware would result in the developer account (and signing certificate) being revoked, which is the point of the whole thing, to enable Google to shut down malware authors. Or at least to slow them down, since they'd have to register for a new account, with a different government ID.

This does leave determination of "what is malware" up to Google, but they've been doing that for a long time and I've yet to see any case where people disagreed with their assessment. Note that I'm talking about designation of malware, not about removal from the Play store. Identified malware is removed from the Play store, but there are lots of other policy violations that can trigger Play store removal.

Comment Re:Already an option for 'advanced users' (Score 2) 33

It's called ADB.

The point was that that was going to go away as a route for unsigned apps to be replaced with a requirement for signatures even when using ADB or other alternative installation methods

This is not correct. Per the information on Google's developer console sideloading of unverified apps via ADB was not going to be disallowed:

Q: If I want to modify an app and install it on my own device, or if I'm a power user, is there a way to turn this verification requirement off?

A: We understand that's an important use case for many developers and power users. While the verification requirement itself is a core OS feature to help protect the broader ecosystem from malware and can't be turned off, developers and power users can still use Android Debug Bridge (ADB) to continue to build, test, and install modified or unverified apps on their own devices.

(Emphasis mine)

This information has been up since shortly after the announcement.

Slashdot Top Deals

"If anything can go wrong, it will." -- Edsel Murphy

Working...