Comment on Google will block sideloading of unverified Android apps starting next year

• cabbage@piefed.social ⁨4⁩ ⁨months⁩ ago

  Does the law demand unsigned software?

  The answer is no. It's not phrased like that. But it's all about ensuring free competition in digital markets. The sole purpose of Google's move here is to hinder competition in their own digital market, and to keep control over it.

  So the law does not have a paragraph stating that "unsigned software must be allowed", but it has a bunch of other paragraphs that can be used to strike down on monopolistic behaviour.

  Google are aware of the law, and will try to find a loophole by designing a system that they believe technically complies with it. Then someone will sue them, it will end up in the European court, and the European court will in all likelyhood tell Google to get fucked.

  It seems american tech companies think they can get away with anything because that's how it works in the US. We are repeatedly seeing that this is not how it works in Europe: the Court of Justice tends to care deeply about the intention of the law, as well as the perceived consequences of their rulings. And they don't seem to care all that much about American capitalists.

  But to answer your question very simply: No, it doesn't. Thankfully that doesn't matter at all.

  source

  • paraphrand@lemmy.world ⁨4⁩ ⁨months⁩ ago

    I feel like there should independent signing authorities that the major platforms honor. But that’s its own can of worms. Who runs them, is it the government? A non-profit? How do we prevent corruption of that entity, etc.

    source

    • cabbage@piefed.social ⁨4⁩ ⁨months⁩ ago

      You can't make laws for every single possible future reality. We need courts that uphold laws even when billionaires try to dodge them using shady techniques. The problem is that big tech often gets away with murder because they can afford expensive lawyers. Especially in the US laws are essentially meaningless for the rich. This is not so much the case in Europe.

      I have heard some positive signals from the European Court of Justice that they are taking the challenge from big tech seriously and that they are going the extra miles to understand these issues. If you're particularly interested, many judges talk about this in the Borderlines podcast series by Berkley law. But it gets really dry really fast haha.

      I don't believe in signing authorities. It's not effective - Google can't even keep malware off the play store - and it's an authoritarian move. Hell, most apps in the play store spy on their users, profiling usage to sell to advertisers along with ID codes that makes it possible to combine data between apps and build detailed profiles of individuals. The problem is not apps that are not signed - the problem is the whole economy of apps that work as Google intend them to.

      Also, it's a basic question of rights. It's my phone, I bought the hardware, I own it, I install whatever the fuck I want on it.

      source
    • amju_wolf@pawb.social ⁨4⁩ ⁨months⁩ ago

      Why exactly do we need signing authorities? Software isn’t zero trust like websites. You do need to trust the developer - even a legitimate one. Signing apps with verified developer keys will only hurt small independent developers, open source projects and freedom enabling stuff like user patching.

      It only works to solidify monopolies and doesn’t protect you against shit.

      source