Hacker Newsnew | past | comments | ask | show | jobs | submit | TGower's commentslogin

This is a wild misrepresentation of the situation. Saying there is no opt-out is just false, they even provide the information on how users can opt-out. The "mandatory 24 hour cooling-off period" is also misleading, it's easy to bypass the cooling-off period with ADB.

> Saying there is no opt-out is just false

I can't see where one can opt-out of this new behavior and into the existing behavior, only a description of the new behavior's bypass (which is not the same thing at all)

> easy to bypass the cooling-off period with ADB

I don't think this is a reasonable use of the term "easy". I should be able to give my non-technical friend an apk and they can use it right then, with the one "are you very sure" screen.


> . I should be able to give my non-technical friend an apk and they can use it right then

Unfortunately that is the same vector that scammers use to drain people's bank accounts


Such is the cost of computing freedom. This line of thinking is analogous to surveillance justifications in meatspace.

The concepts don't need to be at odds with each other.

But also, I don't think that "computing freedom" means you get to use other people's computers without consent. Let's be clear here: Google's requirement for ID only applies to apps distributed from their computer. Presuming that you do actually respect computing freedom, I'd guess you'd support them in this.

I think a good compromise is that they could permit you to sideload. Which they are doing.

But also, if you are very concerned about computing freedom you can also vote with your wallet when you purchase a device.


> But also, I don't think that "computing freedom" means you get to use other people's computers without consent.

Who said anything like that? This is about being able to install software on your own device.


> I don't think that "computing freedom" means you get to use other people's computers without consent

Consent from whom? Consent is already required, why are you discussing this as though consent is not required? Why are you stating it as if people are using other's computers without consent? Right now when I sideload an APK on _my device_, I have to explicitly consent to allowing it to install. And I do not require the author of that APK to have made any deals/interactions with Google. What you mean is Google's consent or a debugger's consent or my consent tomorrow.

So I, as the user, will no longer be able to provide consent alone. I wish that you were right and it was just "no running without consent", but that is today's behavior, and that is being altered.

> I think a good compromise is that they could permit you to sideload. Which they are doing.

They always have, and that was a good compromise. They've now decided you can't sideload until tomorrow unless you break out debugging tools or require the author make special deals with a specific vendor. What exists today is a good compromise, the change is not.

I expect the same from my desktop and mobile devices here.


You mentioned surveillance -- I presumed you were talking about the ID requirement. This only applies if you're using Google's computers to push out your app.

If you sideload... what "surveillance" are you talking about?

> They've now decided you can't sideload until tomorrow

A single 24 hour waiting period, only the first time. Or just use ADB. The point is to prevent false-urgency scams. Honestly even this seems to me to be pretty weak.

Can you think of a single better option that has any efficacy at all?


If they're not surveilling what apps are being sideloaded, why is the bypass managed by google play services? There are at least 2 better options: - An option to not install the update which would fuck with my device - An option to use the OS layer instead of google play services for this fuckery. i disable gplay services the moment I get my hands on a new phone.

Because they're syncing the override flag to your next device so you don't have to do the waiting window ever again after the first time

>Unfortunately that is the same vector that scammers use to drain people's bank accounts

Is the solution really that no one can use a computer without special permission and inspection of government issued identification? If we wouldn't tolerate this with our desktop/laptop OS, why is it suddenly okay for our mobile computing platforms?

If Microsoft required this to run software in Windows, there would be riots.


> Is the solution really that no one can use a computer without special permission and inspection of government issued identification?

No, that is neither the only solution nor is it the one proposed here by Google.


Only physical practicalities will prevent this thinking be applied throughoutly: we can't have guardians preventing people from being scammed face to face. But having to identify yourself on a desktop computer and only be allowed to install software vetted by Microsoft and bunch of governments is readily on the books for the kind of thinking that makes these suggestions.

That's where it inevitably leads to. If people can't be allowed to be responsible for X, next they can't be allowed to be responsible for Y, then Z -- all for their own sake. Google taking some mythical "responsibility" on behalf of their users means the users are left powerless and that is that something Google wants more than just being a "good guy" who protects people from conmen.

It's not like people simply couldn't just limit themselves to installing apps from Google Play already, without these "guardrails". Android currently does make it clear that installing unknown apks from an external source is risky and shouldn't be done unless you really, really know what you're doing. No further technical solutions are required for the problem. You can't fix stupidity with technical means.


If someone is dumb enough to ignore a very explicit warning message, that's their problem. We also don't restrict the sales of kitchen knives just because some people inevitably are going to be dumb enough to hurt themselves with a knife. If they hurt themselves that's their problem, not the problem of more intelligent people.

I will say, an underrated use case for even small, local LLMs is making command line tools drastically more accessible to laypeople

I now know zero people I don't think should use linux, and people I know seems to run quite a gamut of technical know-how compared to most other technical folks I know


Having an LLM directly and autonomously drive command line tools outside of a strict sandbox sounds like a ticking time bomb.

Thinking tokens: "The files I'm trying to read are missing, I need to figure out why. I see the problem, I accidentally ran rm -rf /home/user. Let me run git restore. No that didn't work. Let me try git reset --hard origin/HEAD. That still didn't work. I should inform the user."

Output: "I was unable to complete the task you requested. Restore /home/user and I will try again"


I tend to set people up with a chat interface, which is pretty good for asking for commands or scripts that the user will then copy into their terminal. Most people I've gotten to try linux do pretty well with just a wiki, but once they run into something they want to do that's kind of idiosyncratic they tend to ask me for help. While I think running models that have access to a shell is dangerous and should be handled carefully, the fact that they've been trained for this use case generally means they're pretty good at shell commands and can give you one a decent chunk of the time. I'm never willing to inject an external dependency controlled by a company into people's computing needs unless they specifically ask for it, so this is usually a lightweight local model specialized in tool use, but not given shell access. This isn't much different from how they'd use search engine for this purpose these days, but if running locally, it can be more fault-tolerant to issues that affect their internet access as well as offering better privacy guarantees, albeit obviously a little less capable

ADB is not the only option. Do the 24hs wait then the experience will not be much different than what already happens today: https://imgur.com/a/Z9hoYIh

Doing a 24h wait _is_ much different from what happens today. That's the whole point. If my two options to run an application of my choosing are to use ADB to flip a switch or to wait a day, that is ridiculous.

I am only slightly comforted by the fact that desktop computing had set (some) self-ownership precedence before the current restrictive computing hegemony took control, though even that is eroding.


Wait until you find out about games consoles

The way you give your non-technical friends an APK and they just install it is by you signing it.

I should not have to enter into a business relationship with google just to hand my non-technical friend an APK any more than I have to enter into a business relationship with the Linux Foundation to hand my friend an AppImage.

But I want to let someone MITM my non-technical friend and repalce my APK with malware.

And then having Google approve it, so hopefully your app does not do anything that Google does not like, such as block ads.

> I can't see where one can opt-out of this new behavior and into the existing behavior, only a description of the new behavior's bypass (which is not the same thing at all)

I don't understand this, the ability to bypass new behavior in settings menus is basically the defenition of a new feature having an opt-out. Can you elaborate?


And I kind of buy the intent behind the cooling-off period anyway. IIRC it's to prevent people from being pressured into installing apps by scammers that could then take their phones hostage

Yes. That attack is a very real attack. The attacker gets access to the victim's phone and sideloads additional apps that appear to be the victim's legitimate banking application. The victim logs into it and sees a fake balance (as the app is fake). Pressure and other social engineering tactics are invoked and the scammer walks away with all of the victim's money.

As if there are no scam apps on Google Play.

> Saying there is no opt-out is just false, they even provide the information on how users can opt-out.

The article states that you can't opt-out of the update, which AFAIK is correct.


You still need Developer's Options enabled and plenty of banking and other apps complain if you do that. Why do I need the Developer's option enabled to run an app I developed myself, to be used by myself? It's clear they're heading to a walled garden and this is just a step towards that.

They mentioned that people like you would show up. "Push back on astroturfers. The "well, actually..." crowd is out in force. Don't let them set the narrative."

"Please don't post insinuations about astroturfing, shilling, bots, brigading, foreign agents and the like. It degrades discussion and is usually mistaken. If you're worried about abuse, email hn@ycombinator.com and we'll look at the data."

https://news.ycombinator.com/newsguidelines.html


Yeah, saw that; rubbed me wrong. "If you disagree you are manufactured, a shill." This kind of condescension has never been very convincing. And I mostly agree with the petition.

These new models are very impressive. There should be a massive speedup coming as well, AI Edge Gallery is running on GPU, but NPUs in recent high end processors should be much faster. A16 chip for example (Macbook Neo and iphone 16 series) has 35 TOPS of Neural Engine vs 7 TFLOPS gpu. Similar story for Qualcomm.


That’s nuts actually for such a low power chip. Can’t wait to see the M series version of that.

I’m sure very fast TPUs in desktops and phones are coming.


The Apple Silicon in the MacBook Neo is effectively a slimmed down version of M4, which is already out and has a very similar NPU (similar TFLOPS rating). It's worth noting however that the TFLOPS rating for Apple Neural Engine is somewhat artificial, since e.g. the "38 TFLOPS" in the M4 ANE are really 19 TFLOPS for FP16-only operation.


Prepaid mobile carriers offer "free" phones with one month of service. $25 a piece for Samsung a16 4-pack from Metro, if you only want 1 you can do $45 for a moto g power (8gb RAM) from Straight Talk. I've been using these as alternatives for SBC projects, cheap, battery and screen can be nice, most GPIO needs can be achieved by slapping on a $2 ESP32 clone over usb-serial. The supply will probably dry up soon, I think they might be eating a loss on just the RAM BOM.


Won’t you have tons of driver problems though vs an RPi? It would be super convenient packaging as an SBC though !


45 is still not 20 bucks.


Check your local pawn shops/thrift stores/antique stores/craigslist/kajiji/ebay.

There's a good chance you will find an old android for about $20 that still works.

For instance: https://www.ebay.com/itm/336183863624

Took me less than 1 minute to find.


All of them, you can still sideload after the changes.


You might have to wait a day :(


Any chance of Qualcomm NPU compatible .litertlm files getting released?


The easiest way would be to setup some cameras and start recording everything. Gemini could already sort that into events you could query. If you have privacy concerns, at the current pace of progress, local LLMs should be up to the task soon if they aren't already.


Another nice benefit of this would be location tracking. Once you had established the database of tools and the CV setup to recognize them, you could ask the LLM, “where did I last place my Stanley knife”?


It really seems like they are doing a lot to appease the tiny minority of us power users, adb load unaffected, one time toggle in settings to opt out, no change to alternative app stores as long as the apk was built by a verified developer. Crazy how harsh the sentiment is here, there are real people being harmed by scam apps intercepting sms one time codes and this will reduce the rate of that happening. It's not like we can't sideload anymore, though a lot of comments here seem to be implying otherwise.


Because this is a glide path to what they really want, look at Apple and running unsigned apps on your Mac, how it started, simple right click, how is it going, near impossible.


How it started: almost everything is signed, even pirated apps

How it's going: almost everything is signed, even pirated apps.

????


Because the initial announcement included none of that... it wasn't addressed at all until the harsh sentiment.


It still hasn't been addressed. They walked back half of their wholly unreasonable position in an attempt to legitimize the other half.


Then shouldn't we celebrate the victory, drop it, and move on?


Victory is my device and its OS working the same way it always worked and the way it worked when I bought it.


Just don't install the OS updates then.


> intercepting sms one time codes

Crazy idea, maybe they shouldn't be using those then. Maybe they should use email? Or god forbid a TOTP app. Or perhaps webauthn via the platform provided authenticator.

They very clearly aren't behaving in good faith. That's why the harsh sentiment.


Those scam apps largely are installed from the Play store. Let them fix that first.


Really, there are apps that will intercept and exfiltrate your bank one time code sms that are just sitting on the play store? First I'm hearing of this, what's the name of one?


Many of the most popular apps on the Play Store will monitor all activity on your device and send it to a for-profit company.


The pre-installed privileged services will monitory all activity on your device and send it to a for-profit company.


Your post is an outright lie.


But that "tiny minority" are the people developing apps, which all their other users use... if you drive away devs from wanting to develop on your platform that's not going to go well for you (of course, they may still be forced to develop for Android if they want a wide audience, but you're driving away hobbyists with new ideas)


I still don't get how they are driving away devs. It's super easy for us to click the setting. If I urgently need to test my app during the 24 hour waiting period, I can just adb it on my device.

Based on the reaction here, it's obvious I'm missing something here, but I just don't see any real reason devs are feeling like they are being driven away. It's hardly more of an inconvenience than enabling developer mode, and I feel like we all get why they hide the developer settings menu behind that.


The other factor would be driving away potential users – even when giving away an app for free, some people might derive satisfaction from knowing that other people find it useful and are actually using it, too.


Even the noise turns into heat


Absolutely, just annoys the neighbors along the way.


Nanite is a good counterexample, very impressive and innovative technology. Even more impressive that they released the technical details instead of going the software patent route. I think trying to leverage the war chest to go after Steam's monopoly was exactly the type of adventurous plan you are talking about, the safe play would have been to make minimal investments and continue churning out games hoping for another big hit.


You can't go the software patent route without releasing technical details.


> How does AI truly benefit the average joe?

Automated production of goods and services means more goods and services to go around. From cheaper prices on all of the things people already buy to unlocking new classes of products like actually useful robotic helpers. Increased pace of development and reduced cost will make many niche products economically viable, essentially the maker movement on steroids.


I genuinely don't want to be snarky but does the average joe needs a planet that is breathable and isn't burning or does he need even "more goods and services to go around".

Robotic helpers to do what ? More free time ?

We, as a society, can already have more free time, we just have to choose to work less. We already have it all : enough food and housing for everybody, 80+ years of life expectancy ... What will we achieve with robotic helpers or whatever new goods and services ?


> a planet that is breathable and isn't burning

This is a perfect example of something that can benefit greatly from abundant goods and services. Driving the cost of solar panel manufacturing, supply chain included, and deployment. Enabling continuous monitoring and fast response to GHG leaks or forest fire starting. Reforesting efforts. There are so many ways in which the application of intelligence and labor can help us here, and AI can vastly grow the supply of intelligence and labor.

> More free time?

Yes! Time we can reclaim from the mundane chores of life to do with as we choose! How could you not want that?


>> More free time?

> Yes! Time we can reclaim from the mundane chores of life to do with as we choose! How could you not want that?

We already had a huge productivity boom these past decades, but wages flat-lined and the vast majority of the profits and surplus went to the top. Housing, education, and healthcare became less affordable, not more. History points against your simple view.

I'm not convinced that AI breaks that pattern. If anything, the concentration is worse this time. The capital required is huge, the technology is controlled by a handful of companies, and the most applications are about replacing labor. That last part further erodes the already meager worker bargaining power.

We do need a serious systemic change to get to the world you're envisioning. One where that congealed wealth needs to start flowing again.


Cheaper prices don't matter at all when no one has any income due to all of the jobs being automated


This is true. It's by no means garunteed that we will get to a point where effectively all the jobs are being automated. If we eventually get there, it seems likely the path will be gradual and prosperous enough that we can handle the transition in a way that provides for everyone. The dangers of the alternative route are real, but hopefully obvious enough that we can collectively avoid them.


You think the leaders of our planet would just wake up one day and walk back all the crap they’ve said for decades about dismantling the welfare state? And for what because we won’t be working? The whitehouse just added work requirements to medicare. That is the opposite of abundance providing for all.


> it seems likely the path will be gradual and prosperous enough that we can handle the transition in a way that provides for everyone

What are you talking about man, we don't even provide for everyone right now even though we actually could


Right now it is difficult for the average person to put themselves in the shoes of a homeless person. There are a litany of ready made excuses not to do so: "Oh it's the drugs", "They aren't even going to the shelter", "They must have mental illness", a variety of ways to say "I could never end up like that, if it was me I'd do better and pull myself out". These excuses evaporate in the face of a real automation wave where a large portion of friends and family you know to be hard working and intelligent are finding it impossible to find a job.


This already happened. When deindustrialization first hit in the US it devastated the black community. The result? A litany of pundits decrying Black criminality, bad family structures, cultural pathologies. It's no coincidence that The Bell Curve came out around then.

A decade or two later, all of sudden the same phenomena are happening in working class white communities. Drug addiction, family dissolution, abject poverty. So clearly the people of the US finally realized that what was happening was due primarily to material concerns, and that people need to be able to earn a living in order to live. Right?

No. Instead we got right wing populism, scapegoating of immigrants, further concentration of wealth, and no end in sight.


With those past examples the majority of people thought "It's not my problem, I won't be affected", and they were mostly right. With an automation wave of the scale needed to get to effectively no jobs, that's just not the case. They will see that it is indeed coming for them, their friends, and family. They will act accordingly. Altruism not required, just self interest.


One scary thought however is: once automation has progressed this far and there are enough mostly autonomous humanoid and/or military robots, what power does the suddenly jobless general population have against those who own and operate them, which will mostly be rich people - and the government, which is in many places made up of other rich people?

I'm not saying this is a likely scenario. But as far as I can tell, we will objectively be mostly at their mercy. And how merciful have they been over the last few decades?


You really think altruism is what pops out the other end of "nobody has a fucking job" state of affairs?

Alrighty.


The average person is pretty empathetic. The oligarchs of the current Epstein-regime that start wars and fund genocide, not so much. They are trained to dehumanize people.

Without radical change of the current system any technological advancement will only make the rich richer.


If 'no one has any income', then prices become 0.


There will always be a relative few people with income. The business owners, property owners, asset holders, landlords, and so on. Those are the people who prices are set for, and who will participate in the economy. The rest of us? A lot of us are already essentially economically irrelevant in the grand scheme of things, and more and more are becoming so every day, even as they nominally get richer.


but elon said he would share the excesses with us!


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: