Android Changing Rules About Apps

[High_Order1]

here is the non-paywalled version of the article:

https://archive.is/3dEXx

After verifying their identities, developers will have to register the package name and signing keys of their apps. Google won't check the content or functionality of the apps, though.


Google says that only apps with verified identities will be installable on certified Android devices, which is virtually every Android-based device—if it has Google services on it, it's a certified device. If you have a non-Google build of Android on your phone, none of this applies. However, that's a vanishingly small fraction of the Android ecosystem outside of China.

If DJI refuses to play ball with them, and the things will update and not allow non-verified apps...

But, perhaps I am missing something or reading it wrong.

 

[msinger]

But, perhaps I am missing something or reading it wrong.

No, you're not missing anything. Google is now going to tell you what you're allowed to install on your devices.

 

[High_Order1]

That's how I was reading it. Eagerly awaiting the weaponized autists to find a workaround.

So tired of companies increasingly telling me what I can do with a thing I gave them money for. That's the end of our relationship, far as I am concerned unless I reach out.

 

[DoomMeister]

That's how I was reading it. Eagerly awaiting the weaponized autists to find a workaround.

So tired of companies increasingly telling me what I can do with a thing I gave them money for. That's the end of our relationship, far as I am concerned unless I reach out.

Now you will see what iOS users have endured since the inception of iPhone.

 

[anotherlab]

Google didn't block DJI from playing their apps in the Google Play app store, DJI pulled them.

Registered Android developers will still be able to sideload Android apps. Unregistered developers will not. This helps block malware from being installed. DJI will still be able to provide the APKs directly to the users.

 

[High_Order1]

Do you know for a fact DJI left, and wasn't forced?

I wasn't around when they left the market space. And, I haven't seen anything that says they have an interest in bending the knee to google on this topic. Be really easy to drop a quick message from DJI High Command saying for android users not to sweat this...

 

[anotherlab]

Do you know for a fact DJI left, and wasn't forced?

No. Google has been silent, and DJI has made imprecise statements ("The update channels for DJI apps have been adjusted due to Google Play technical adjustments") about why most of their apps are no longer in the app store.

They still have a Mimo app in the Google Play store, published under the account for SZ DJI Osmo Technology Co., Ltd. So if they want to be a verified developer, it's not a difficult task. They probably already are compliant. It's a requirement to meet EU app store requirements.

This is not a new process; two years ago, Google made it a requirement for new developers to be able to submit apps to Google Play.

 

[anotherlab]

One more data point. Google will still let you sideload unverified apps through the ADB utility. This is documented by Google here: Frequently asked questions | Android developer verification | Android Developers

ADB is the Android Desktop Bridge utility, a tool that allows developers to access Android devices over wired or wireless connections. Among its many uses, you can install or remove apps.

It's not difficult to install, but I don't think you'll need it.

 

[High_Order1]

I asked on the official forum. not even the bot mods cared to respond. (Shrugs)

 

[Kilrah]

The 2 are not related. DJI removed/had to remove their apps from the Play Store because they do things that are not allowed on the Play Store, but as it says the developer cert thing doesn't relate to the apps' content. DJI will just have to register for the cert and sign their apps with it.
They'll certainly do it for the current apps, only way I could see a potential problem is if they don't publish updated signed apps for the long discontinued models pre-DJI Fly.

 

[High_Order1]

DJI will just have to register for the cert and sign their apps with it.

Will they have to though?

Pretty volatile time for DJI, betting they have considered divesting the drone vertical from their portfolio.
What kind of leverage does not complying buy them?

Seems like a pretty simple task, they have a ton of staff, so... what's the holdup?

Didn't consider them screwing the older models though. Wonder what a developer certificate costs them?

 

[Kilrah]

What kind of leverage does not complying buy them?

Nothing?
All their products would become unusable on new android phones worldwide. If it was US-only then yeah they could not care given the situation right now but I assume they're not looking to shut down globally...

Wonder what a developer certificate costs them?

$25

Frequently asked questions | Android developer verification | Android Developers

developer.android.com

Not to mention they likely have been registered for more than a decade already.

 

[anotherlab]

Will they have to though?

What would be the rationale for DJI to walk away from the Android market?

Pretty volatile time for DJI, betting they have considered divesting the drone vertical from their portfolio.

I'll take that bet. While the US is a significant part of their market, they have the rest of the world. When the US banned Huawei, that company took a hit, but they are still around.

What kind of leverage does not complying buy them?

DJI doesn't need to buy anything; they have what they need now.

 

[High_Order1]

Nothing?
All their products would become unusable on new android phones worldwide. If it was US-only then yeah they could not care given the situation right now but I assume they're not looking to shut down globally...


$25

Frequently asked questions | Android developer verification | Android Developers

developer.android.com

Not to mention they likely have been registered for more than a decade already.

Thanks!

The issue is that there was an updated thing all devs needed to do, and they didn't do that, if I understand correctly. So while they may have been at one time registered, it places them in a gray area.

And I can't think of a single reason for them dragging their feet.

 

[High_Order1]

When the US banned Huawei, that company took a hit, but they are still around.

That's not really a fair comparison. Are you familiar with that story? Huawei was deeply entrenched in the communications backbone of the country.
They couldn't just be ripped out/turned off easily, and there are places that just do what little they can to mitigate their risks.

Not like the drone market. Why is DJI so dang good at building sensors, like tiny handheld cameras and remote microphones that just... work?

Also, for the cheap seats, I am neither for nor against DJI, but I lean towards them. Amazing tech. I just see the tip of an iceberg when they don't do something as simple as re-register or whatever with google. Or, issue a current statement.

I feel like they are playing chicken with US legislators and the people who invested heavily into their ecostructure, and it makes me uncomfortable.

 

[anotherlab]

So while they may have been at one time registered, it places them in a gray area.

Android developer registrations for Google Play do not expire. They can be closed for a lack of activity, but that is not the case with DJI. DJI currently has at least one app available in Google Play.

 

[High_Order1]

Perhaps they don't want a redo of the things they found in go:
DJI Android GO 4 application security analysis

 

[anotherlab]

Perhaps they don't want a redo of the things they found in go:
DJI Android GO 4 application security analysis

That's a really good breakdown of DJI's app.

There is a decent amount of encryption and obfuscation being used. But since the app can download updates, you would want that locked down to prevent someone else from trying to inject code.

They are collecting way too much information for what they are trying to do. If they would just play by the rules, they would be able to use Google Play's update mechanism and not have to go through all this.

Unless Google revokes DJI's developer account, none of this would impact sideloading. When you sideload an app, you are accepting the risks involved.

 

[BossBob]

That's a really good breakdown of DJI's app.

There is a decent amount of encryption and obfuscation being used. But since the app can download updates, you would want that locked down to prevent someone else from trying to inject code.

They are collecting way too much information for what they are trying to do. If they would just play by the rules, they would be able to use Google Play's update mechanism and not have to go through all this.

Unless Google revokes DJI's developer account, none of this would impact sideloading. When you sideload an app, you are accepting the risks involved.

Simples. Put your mobile phone in aircraft mode so the linked remote can’t access the web while flying. Add the unwanted web addresses to your home network adblocker or Pi-Hole so that you control access.

 

[anotherlab]

Simples. Put your mobile phone in aircraft mode so the linked remote can’t access the web while flying. Add the unwanted web addresses to your home network adblocker or Pi-Hole so that you control access.

Most people are not going to do that. Nor should they have to in the first place.