Comment Re:F-Droid's claim isn't quite accurate (Score 1) 18
Stop spreading FUD. This verification requirement affects ADB installs too
From Google's FAQ
Will Android Debug Bridge (ADB) install work without registration? As a developer, you are free to install apps without verification with ADB. This is designed to support developers' need to develop, test apps that are not intended or not yet ready to distribute to the wider consumer population.
Obviously, ADB can't distinguish the cases of (a) an app developer who just wrote an app using ADB to install an APK on their device for testing and (b) any random person using ADB to install an APK on their device for whatever reason they like. This means that random people can use ADB to install APKs from unverified developers.
FYI: This system would be worthless if it didn't scan ADB installed apps, because the whole point is to mandate Google's approval for app installs.
Well, if that were the point of the system, you'd be right, but it's not. The point of the system is to make it hard for malware authors to distribute malware to large numbers of users without getting quickly shut down. This system doesn't "scan apps" at all... Android just won't install downloaded APKs that don't have a Google-provided signature on them, but it will install ADB-installed APKs without a Google-provided signature because app developers need to be able to build and test apps without having to send every version off to a Google server for signing.