How do you now that?

Again, the ability to install a completely unverified APK is used in real, successful, attacks.

The user DOES NOT KNOW WHAT HE IS DOING! That is the entire point!

If users would know what this is and understand, maybe it would be less if a risk.

That is a general issue of online debates.

I can not squash 20 years of daily learning into a comment.

I can point you to sources where you can verify it our self. Social engineering studies, blog post about campaigns from other researchers.

Placing m credentials there is my kind of saying “I have insight, ask”, but how do you think should something like this communicated.

We have a highly sensitive topic, with a lot of obsolete or just misinformation.

It is a highly complex topic that can not be simply understood by most persons, but social media opens a place for debate anyways.

There are many other examples for this happening and it is bad. Very bad.

Another example Google wants to get rid of third party cookies. Instead they want to to adspace action on your local system. In our browser, protected. But bad, because Google. Firefox could implement the same API on better, but no, bad because Google.

Google is not the good guy. But just throwing out every fucking Idea because Google Had it (or was forced into it, allowing sideloading again was because of pressure) is just not what we need

That is why I linked sources. I don’t say trust me bro.

I am lying? OK, so is:

• Kaspersky lying?
• Or F-Secure
• Maybe DARK?

I have over 2 decades of background in hardcore IT-Sec, i know my stuff. And you? What is your qualification, where are your sources?

Because I think we should protect people that are not tech savvy. I am open for a debate

Yes I am.

I spend a long time of my career in IT Sec.

80% of android users will freely install whatever APK from wherever.

Info stealer infected fake apps are a massive risk to a huge part of the user base.

Yes, it will get a little bit more complicated to sideload. But nobody is prevented from it.

And everybody that is against user protection (and yes, this is fucking user protection, just not for you) is invited next Christmas to de-worm the android devices of my family without wiping them.

EDIT for all those that only read the memes. Sideloading will NOT be disabled. You have to jump though extra hoops.

Yes, the way they do this is not even testable yet and we can argue over details.

I support the principal idea, as someone who had to live with the fallout of people who installed “it support apps” because someone told them to