Comment on Google's shocking developer decree struggles to justify the urgent threat to F-Droid

<- View Parent
TeddE@lemmy.world ⁨6⁩ ⁨days⁩ ago

It’s pretty much indisputably better for security.

I dispute this. While adding extra layers of security looks good on paper, flawed security can be worse than no security at all.

Android packages already have to be signed to be valid and those keys already are very effective in practice. In effect these new measures are reinventing the wheel as to what a layperson would think this new system does.

Adding this extra layer in fact has no actual security benefit beyond posturing/“deterrence”. Catching a perpetrator is not the same thing as preventing a crime. Worse - catching a thief in meatspace has the potential to recover stolen goods, but not so in digital spaces - either the crime is damage or destruction of data for which no punishment undoes the damage or the crime is sharing private data which in practice would almost certainly have been immediately fenced to multiple data brokers.

And were only getting started with this security theater:

But you know what would be even better for security?

While we’re at it we could add the tropes of removing network connectivity, or switch to using clay tablets kept in a wooden box guarded by a vengeful god. Both of those would be more secure, too.

Users should be allowed to do insecure things with their devices

100% agree with you here - it’s fundamentally the principle of “Your liberty to swing your fist ends just where my nose begins”. Users should be given the tools and freedom to do as they want with their property - up until it affects another person or their property in an unwanted way.

source
Sort:hotnewtop