CyberSIXT Search
Original
Image: SecurityOnline

SecurityOnlineDdos

Android Sideloading Crackdown: Google to Verify All Apps, But Promises Power-User Bypass

Android sideloading will be tightened with a verification regime that requires apps to undergo identity authentication and code signing before installation outside the Google Play Store, a change Google announced in August and slated to begin next year in select regions. The policy aims to combat fraud, but critics argue it restricts the openness of Android by preventing users from freely installing from any source.

Responding to criticism, Google has revealed an “advanced process” to accommodate experienced users who wish to install unverified applications, promising a dedicated mechanism and more details in the coming months. In the meantime, the plan also includes special account types for students and hobbyists to allow limited distribution of apps to a restricted number of devices.

According to Google, the new verification requirements will force fraudsters to use verifiable identities when distributing malware, raising the difficulty and cost of attacks at scale, though critics note that scammers may still adapt by using stolen credentials and fake accounts.

Sources

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device