All articles tagged with #sideloading
Google has begun gradually implementing its advanced sideloading flow for apps from unverified developers, adding a restart and 24-hour wait before enabling sideloading (ADB remains exempt). Enforcement starts Sept 30 in Brazil, Indonesia, Singapore, and Thailand, initially covering apps from Google Play and select app stores, with updates also affected and a grace period to re-enable the flow.
The article explains how to sideload Android APKs onto a Chromebook using official ADB-based methods from the Linux development environment or Android Studio, detailing steps to enable Linux, enable ADB debugging, install adb, connect to the device, and install the APK (or run it in an Android emulator). It notes that this path works on Chromebooks released after 2020, emphasizes verifying APK safety since apps outside the Play Store aren’t Google-verified, and offers two install routes: direct adb install or using Android Studio with an emulator.
LineageOS says Google's upcoming developer verification system for sideloading won't affect its ROM since it doesn't ship with Google Mobile Services or go through Google's certification; however, stock Android devices will require apps to be registered to a verified developer and use Google's advanced sideloading flow (or ADB) starting September 30, 2026, with a global rollout in 2027. The project notes it would disable the feature if Google moves the verification into Play Services.
Android Auto officially limits compatible apps, but a guide shows you can sideload third‑party apps using AAAD by enabling Developer Mode, allowing unknown sources, and installing the AAAD APK from GitHub (Pro version unlocks unlimited downloads). This can bring apps like CarStream, AAMirror, and Fermata Auto to your car’s display, plus browser or screen mirroring capabilities, but Google frequently patches this workaround, device compatibility varies, and there are safety concerns and potential legal issues with video or browsing while driving.
Amazon blames malware-laden piracy apps for stopping new Vega OS–based Fire Sticks from supporting sideloading; Vega OS blocks sideloading and custom launchers to tighten security and ad control, though developers with registered devices can still sideload apps. The move reduces app availability and gives Amazon tighter device control, while Vega OS remains more limited than Fire OS.
Amazon is replacing the Fire TV OS with Vega on newer Fire TV Sticks, a move aimed at cost control and ecosystem focus but at the cost of app availability, features, and user freedom: Vega lacks many Android-era functions, blocks sideloading (limiting Kodi and other tools), relies on cloud-hosted apps, and leaves several popular apps and utilities missing or delayed; existing Android-based Fire TV devices will still receive updates for now, but Vega’s long-term goal is tighter control at the expense of user flexibility.
Amazon unveiled Vega-powered Fire TV Sticks, including the new Fire TV Stick HD, that block sideloading of apps from outside the Amazon Appstore for consumer devices. The Vega OS update indicates future sticks will run Vega, with sideloading only available to developers who register devices. Amazon notes enhanced security and tighter control over apps, potentially pushing users toward rival devices or workarounds.
AFTVnews reports that Amazon plans to stop releasing Android-based Fire TV Sticks and will ship all future sticks with its Vega OS, beginning with the new Fire TV Stick HD. The move, backed by multiple sources, suggests Vega-only Fire TV hardware ahead, while sideloading warnings and weaker app support hint at reduced openness. Amazon did not comment.
As Amazon plans to drop support for older Kindle models in 2026, Lifehacker explains how jailbreaking can remove Amazon’s control, enable KOReader and native EPUB support, and allow customization, while warning of risks like data loss, brick risks, and malware from unofficial sources.
Google is rolling out an 'advanced flow' for installing unsigned Android APKs that replaces the simple 'unknown sources' toggle with a multi-step process in Developer Options: users must enable 'Allow Unverified Packages' and endure a 24‑hour security delay after reboot before the setting can be activated (temporarily or permanently). A limited free developer account will permit up to 20 device installations; for more, developers must pay $25 and provide government ID. The changes also apply to third‑party app stores, with the same verification rules, and are set to roll out to more countries in coming months. Google frames this as improved security, but critics worry it will hinder sideloading and could be exploited by scammers who buy verified accounts.
Google says Android sideloading will be gated behind a one‑time, multi‑step verification process for most users (enable developer options, skip coercion prompts, restart device, wait a day, then authenticate with biometrics or PIN) with a seven‑day or indefinite window to install apps from unverified developers. A new limited‑distribution account will let hobbyists share apps with up to 20 devices without government ID or fees. The overhaul, intended to boost security while not completely closing sideloading, will go live in August, and Google notes the new procedure does not apply to all sideloading.
Google plans a phased Android app verification rollout, restricting sideloading to verified developers starting September 2026. An “advanced flow” buried in developer settings lets power users bypass verification after a 24-hour wait, while non‑Play Store apps must have identity verification, signing-key uploads, and a $25 fee. The approach aims to curb malware, with the initial rollout in Brazil, Singapore, Indonesia, and Thailand before expanding globally.
A new Android banking Trojan named Perseus disguises itself as IPTV apps to distribute via unofficial stores. It uses Android Accessibility Services to scan and extract sensitive data from note apps (Google Keep, Samsung Notes, Evernote, OneNote, etc.), including passwords and recovery phrases, enabling full remote control over infected devices (screenshots, overlay attacks, keylogging, app launches, and more). The malware evades analysis with anti‑analysis checks and a “suspicion score” to decide whether to proceed. It primarily targets Turkish and Italian financial institutions and crypto apps. Users are advised to avoid sideloading APKs, only use Google Play, and keep Play Protect enabled.
A Hacker News discussion centers on Google’s blog about new app-verification changes, including a dedicated student/hobbyist account to bypass full verification for limited devices and an advanced flow allowing unverified installs with warnings. Critics argue this token gesture doesn’t truly open Android, could undermine open ecosystems like F-Droid, and may entrench Google’s control over the platform. The thread contrasts these moves with regulatory pressure (EU DMA) and the fate of independent ROMs (e.g., GrapheneOS), while some see potential security benefits in clearer safeguards. Debates touch on how essential banking and other services move toward app-based ecosystems, the feasibility of truly open Android, and whether alternate OSes or web-based approaches are viable paths forward.
Google is relaxing some of its recent rules for Android app developers, allowing experienced users to sideload unverified apps with warnings, and is working on a simplified registration process for hobbyists and students, though full implementation is still pending.