[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"public-config":3,"i-flag:ph-4x3":14,"i-flag:us-4x3":19,"i-flag:de-4x3":21,"i-flag:hk-4x3":23,"i-tabler:lifebuoy":25,"i-tabler:timeline":28,"i-tabler:apps":30,"i-tabler:package":32,"i-tabler:circle-half-2":34,"i-tabler:sun":36,"i-tabler:moon":38,"i-tabler:menu-2":40,"i-tabler:user":42,"i-tabler:notebook":44,"i-simple-icons:forgejo":46,"i-tabler:shield-lock":48,"i-tabler:tools":50,"i-tabler:calendar":52,"i-tabler:x":54,"$f20ef13lpb8ej2":56,"i-tabler:arrow-left":124,"i-tabler:tag":126},{"matomo":4,"booking":7,"site":9,"blog":11,"newsletter":12},{"enabled":5,"siteId":6},true,"7",{"enabled":5,"url":8},"https:\u002F\u002Fcal.com\u002Fjdbungart",{"url":10},"https:\u002F\u002Fjdneer.com",{"enabled":5},{"enabled":13},false,{"left":15,"top":15,"width":16,"height":17,"rotate":15,"vFlip":13,"hFlip":13,"body":18},0,640,480,"\u003Cpath fill=\"#0038a8\" d=\"M0 0h640v240H0z\"\u002F>\u003Cpath fill=\"#ce1126\" d=\"M0 240h640v240H0z\"\u002F>\u003Cpath fill=\"#fff\" d=\"M415.7 240L0 480V0\"\u002F>\u003Cpath fill=\"#fcd116\" d=\"M26.7 42.4L41 55l16.6-9.2l-7.4 17.5l14 13l-19-1.6l-8.1 17.2l-4.3-18.5L14 71l16.3-10zm323.8 172.3l.4 19l18 6.3l-18 6.2l-.4 19l-11.5-15.1l-18.2 5.5l10.8-15.6l-10.8-15.6l18.2 5.5zM37.2 388.1l8 17.2l19-1.6l-13.9 13l7.4 17.5l-16.6-9.1l-14.4 12.4l3.6-18.7L14 409l18.9-2.4zm114.2-249l-6.2 6.2l3.1 47l-3 .3l-5.7-42.9l-5.1 5l7.6 38.4a48 48 0 0 0-17.2 7.1l-21.7-32.4H96l26.4 34.3l-2.4 2l-31.1-35.5h-8.8v8.8l35.4 31l-2 2.5l-34.3-26.3v7.1l32.5 21.7q-5.2 7.8-7.1 17.2L66.3 223l-5.1 5l42.9 5.7q-.3 1.6-.3 3.1l-47-3l-6.2 6.2l6.2 6.2l47-3.1l.3 3.1l-42.9 5.7l5 5l38.4-7.6a48 48 0 0 0 7.1 17.2l-32.5 21.7v7.2l34.3-26.3l2 2.4l-35.4 31v8.8H89l31-35.4l2.5 2L96 312.2h7.2l21.7-32.5q7.8 5.2 17.2 7.1l-7.6 38.4l5 5l5.7-42.9q1.5.3 3.1.3l-3 47l6.1 6.2l6.3-6.2l-3.1-47l3-.3l5.7 43l5.1-5.1l-7.6-38.4a48 48 0 0 0 17.2-7.1l21.7 32.5h7.2l-26.4-34.3l2.4-2l31.1 35.4h8.8v-8.8l-35.4-31l2-2.4l34.3 26.3v-7.2l-32.5-21.7q5.2-7.8 7.1-17.2l38.3 7.6l5.1-5l-42.9-5.7q.3-1.5.3-3.1l47 3l6.2-6.1l-6.2-6.2l-47 3l-.3-3l42.9-5.7l-5-5l-38.4 7.5a48 48 0 0 0-7.1-17.2l32.5-21.7v-7.1l-34.3 26.3l-2-2.4l35.4-31v-8.9H214l-31 35.5l-2.5-2l26.4-34.3h-7.2L178 200.2q-7.8-5.2-17.2-7.1l7.6-38.3l-5-5l-5.7 42.8l-3.1-.3l3-47z\"\u002F>",{"left":15,"top":15,"width":16,"height":17,"rotate":15,"vFlip":13,"hFlip":13,"body":20},"\u003Cpath fill=\"#bd3d44\" d=\"M0 0h640v480H0\"\u002F>\u003Cpath stroke=\"#fff\" stroke-width=\"37\" d=\"M0 55.3h640M0 129h640M0 203h640M0 277h640M0 351h640M0 425h640\"\u002F>\u003Cpath fill=\"#192f5d\" d=\"M0 0h364.8v258.5H0\"\u002F>\u003Cmarker id=\"SVGEq3dreKJ\" markerHeight=\"30\" markerWidth=\"30\">\u003Cpath fill=\"#fff\" d=\"m14 0l9 27L0 10h28L5 27z\"\u002F>\u003C\u002Fmarker>\u003Cpath fill=\"none\" marker-mid=\"url(#SVGEq3dreKJ)\" d=\"m0 0l16 11h61h61h61h61h60L47 37h61h61h60h61L16 63h61h61h61h61h60L47 89h61h61h60h61L16 115h61h61h61h61h60L47 141h61h61h60h61L16 166h61h61h61h61h60L47 192h61h61h60h61L16 218h61h61h61h61h60z\"\u002F>",{"left":15,"top":15,"width":16,"height":17,"rotate":15,"vFlip":13,"hFlip":13,"body":22},"\u003Cpath fill=\"#fc0\" d=\"M0 320h640v160H0z\"\u002F>\u003Cpath fill=\"#000001\" d=\"M0 0h640v160H0z\"\u002F>\u003Cpath fill=\"red\" d=\"M0 160h640v160H0z\"\u002F>",{"left":15,"top":15,"width":16,"height":17,"rotate":15,"vFlip":13,"hFlip":13,"body":24},"\u003Cpath fill=\"#ec1b2e\" d=\"M0 0h640v480H0\"\u002F>\u003Cpath id=\"SVG5tfvBPpj\" fill=\"#fff\" d=\"M346.3 103.1C267 98 230.6 201.9 305.6 240.3c-26-22.4-20.6-55.3-10.1-72.4l1.9 1.1c-13.8 23.5-11.2 52.7 11.1 71c-12.7-12.3-9.5-39 12.1-48.9s23.6-39.3 16.4-49.1q-14.7-25.6 9.3-38.9M307.9 164l-4.7 7.4l-1.8-8.6l-8.6-2.3l7.8-4.3l-.6-8.9l6.5 6.1l8.3-3.3l-3.7 8.1l5.6 6.8z\"\u002F>\u003Cuse href=\"#SVG5tfvBPpj\" transform=\"rotate(72 312.5 243.5)\"\u002F>\u003Cuse href=\"#SVG5tfvBPpj\" transform=\"rotate(144 312.5 243.5)\"\u002F>\u003Cuse href=\"#SVG5tfvBPpj\" transform=\"rotate(216 312.5 243.5)\"\u002F>\u003Cuse href=\"#SVG5tfvBPpj\" transform=\"rotate(288 312.5 243.5)\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":27},24,"\u003Cg fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\">\u003Cpath d=\"M8 12a4 4 0 1 0 8 0a4 4 0 1 0-8 0\"\u002F>\u003Cpath d=\"M3 12a9 9 0 1 0 18 0a9 9 0 1 0-18 0m12 3l3.35 3.35M9 15l-3.35 3.35m0-12.7L9 9m9.35-3.35L15 9\"\u002F>\u003C\u002Fg>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":29},"\u003Cg fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\">\u003Cpath d=\"m4 16l6-7l5 5l5-6\"\u002F>\u003Cpath d=\"M14 14a1 1 0 1 0 2 0a1 1 0 1 0-2 0M9 9a1 1 0 1 0 2 0a1 1 0 1 0-2 0m-6 7a1 1 0 1 0 2 0a1 1 0 1 0-2 0m16-8a1 1 0 1 0 2 0a1 1 0 1 0-2 0\"\u002F>\u003C\u002Fg>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":31},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M4 5a1 1 0 0 1 1-1h4a1 1 0 0 1 1 1v4a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1zm0 10a1 1 0 0 1 1-1h4a1 1 0 0 1 1 1v4a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1zm10 0a1 1 0 0 1 1-1h4a1 1 0 0 1 1 1v4a1 1 0 0 1-1 1h-4a1 1 0 0 1-1-1zm0-8h6m-3-3v6\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":33},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"m12 3l8 4.5v9L12 21l-8-4.5v-9zm0 9l8-4.5M12 12v9m0-9L4 7.5m12-2.25l-8 4.5\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":35},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M3 12a9 9 0 1 0 18 0a9 9 0 1 0-18 0m9-9v18m0-7l7-7m-7 12l8.5-8.5M12 9l4.5-4.5\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":37},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M8 12a4 4 0 1 0 8 0a4 4 0 1 0-8 0m-5 0h1m8-9v1m8 8h1m-9 8v1M5.6 5.6l.7.7m12.1-.7l-.7.7m0 11.4l.7.7m-12.1-.7l-.7.7\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":39},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M12 3h.393a7.5 7.5 0 0 0 7.92 12.446A9 9 0 1 1 12 2.992z\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":41},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M4 6h16M4 12h16M4 18h16\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":43},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M8 7a4 4 0 1 0 8 0a4 4 0 0 0-8 0M6 21v-2a4 4 0 0 1 4-4h4a4 4 0 0 1 4 4v2\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":45},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M6 4h11a2 2 0 0 1 2 2v12a2 2 0 0 1-2 2H6a1 1 0 0 1-1-1V5a1 1 0 0 1 1-1m3 0v18m4-14h2m-2 4h2\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":47},"\u003Cpath fill=\"currentColor\" d=\"M16.777 0a2.9 2.9 0 1 1-2.529 4.322H12.91a4.266 4.266 0 0 0-4.265 4.195v2.118a7.08 7.08 0 0 1 4.147-1.42l.118-.002h1.338a2.9 2.9 0 0 1 5.43 1.422a2.9 2.9 0 0 1-5.43 1.422H12.91a4.266 4.266 0 0 0-4.265 4.195v2.319A2.9 2.9 0 0 1 7.222 24A2.9 2.9 0 0 1 5.8 18.57V8.589a7.11 7.11 0 0 1 6.991-7.108l.118-.001h1.338A2.9 2.9 0 0 1 16.778 0M7.223 19.905a1.194 1.194 0 1 0 0 2.389a1.194 1.194 0 0 0 0-2.389m9.554-10.464a1.194 1.194 0 1 0 0 2.389a1.194 1.194 0 0 0 0-2.39m0-7.735a1.194 1.194 0 1 0 0 2.389a1.194 1.194 0 0 0 0-2.389\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":49},"\u003Cg fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\">\u003Cpath d=\"M12 3a12 12 0 0 0 8.5 3A12 12 0 0 1 12 21A12 12 0 0 1 3.5 6A12 12 0 0 0 12 3\"\u002F>\u003Cpath d=\"M11 11a1 1 0 1 0 2 0a1 1 0 1 0-2 0m1 1v2.5\"\u002F>\u003C\u002Fg>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":51},"\u003Cg fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\">\u003Cpath d=\"M3 21h4L20 8a1.5 1.5 0 0 0-4-4L3 17zM14.5 5.5l4 4\"\u002F>\u003Cpath d=\"M12 8L7 3L3 7l5 5M7 8L5.5 9.5M16 12l5 5l-4 4l-5-5m4 1l-1.5 1.5\"\u002F>\u003C\u002Fg>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":53},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M4 7a2 2 0 0 1 2-2h12a2 2 0 0 1 2 2v12a2 2 0 0 1-2 2H6a2 2 0 0 1-2-2zm12-4v4M8 3v4m-4 4h16m-9 4h1m0 0v3\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":55},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M18 6L6 18M6 6l12 12\"\u002F>",{"slug":57,"title":58,"excerpt":59,"image":60,"publishedAt":61,"topics":62,"readMinutes":72,"html":73,"metaTitle":58,"metaDescription":74,"shareImage":75,"updatedAt":79,"author":80,"related":82},"androids-developer-verification-is-here-but-the-real-change-for-philippine-users-comes-in-2027","Android Was Built on Freedom. Google's Developer Verification Takes It Away","Google's Android developer verification turns an open platform into a gated one, and the Philippines gets it in 2027. I oppose it heavily. Making developers register with Google and making users wait 24 hours to install apps goes against everything Android stood for.","\u002Fcontent\u002Fimages\u002F2026\u002F10\u002Fandroid-robot-grass.jpg","2026-10-17T12:00:00.000+08:00",[63,66,69],{"key":64,"label":65},"opinion","Opinion",{"key":67,"label":68},"security","Security",{"key":70,"label":71},"philippines","Philippines",6,"\u003Cp>What I have always loved about Android comes down to one simple idea: the phone was yours. If I wanted an app, I could install it. It didn't matter whether it came from the Play Store, a developer's website, a friend's build, or F-Droid. That freedom was never a loophole. It was the whole point, and it is what set Android apart from the walled garden on the other side.\u003C\u002Fp>\u003Cp>So let me be plain about where I stand on Google's new Android developer verification requirement. We oppose this heavily, because it goes against everything Android used to stand for.\u003C\u002Fp>\u003Cblockquote>\"Android is for everyone. It’s built on a commitment to an open and safe platform. Users should feel confident installing apps, no matter where they get them from.\"\u003Cbr \u002F>\u003Cbr \u002F>\u003Ca href=\"https:\u002F\u002Fandroid-developers.googleblog.com\u002F2026\u002F03\u002Fandroid-developer-verification-rolling-out-to-all-developers.html?ref=ghost.jdneer.com\">Google, Android Developers Blog\u003C\u002Fa>\u003C\u002Fblockquote>\u003Cp>Here is what Google is doing. Starting September 30, apps installed through seven participating app stores in Brazil, Indonesia, Singapore, and Thailand have to be registered to a developer whose identity Google has verified, or they won't install on certified Android devices (\u003Ca href=\"https:\u002F\u002Fdeveloper.android.com\u002Fdeveloper-verification\u002Fguides?ref=ghost.jdneer.com\">Google\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwww.androidauthority.com\u002Fandroid-sideloading-developer-verification-first-wave-rollout-3717921\u002F?ref=ghost.jdneer.com\">Android Authority\u003C\u002Fa>). Direct APK installs and stores like F-Droid aren't blocked yet, even there (\u003Ca href=\"https:\u002F\u002Fkeepandroidopen.org\u002Ffaq\u002F?ref=ghost.jdneer.com\">Keep Android Open\u003C\u002Fa>). But Google has been clear about where this is going. Its own guide says it \"will expand these protections globally for all apps on certified Android devices in 2027.\" The Philippines isn't in the first wave, so for us here, 2027 is the year this lands.\u003C\u002Fp>\u003Cp>When it does, every developer who wants their app to install normally on a certified phone will need to hand Google their identity, along with their app's package name and proof of their signing key (\u003Ca href=\"https:\u002F\u002Fdeveloper.android.com\u002Fdeveloper-verification\u002Fguides?ref=ghost.jdneer.com\">Google\u003C\u002Fa>). Think about what that means. An app that has never touched the Play Store, distributed by an independent developer to people who chose to install it, will still need Google's blessing. That is not a security feature bolted onto an open platform. That is a gatekeeper sitting in the middle of every install.\u003C\u002Fp>\u003Cblockquote>\"Android, currently an open platform where anyone can develop and distribute applications freely, is to become a locked-down platform, requiring that developers everywhere register centrally with Google in order to be able to distribute their software.\"\u003Cbr \u002F>\u003Cbr \u002F>\u003Ca href=\"https:\u002F\u002Ff-droid.org\u002F2026\u002F02\u002F24\u002Fopen-letter-opposing-developer-verification.html?ref=ghost.jdneer.com\">F-Droid\u003C\u002Fa>\u003C\u002Fblockquote>\u003Cp>And I keep coming back to the data. Google is building a central registry of who made every app on Android, tied to real names and government documents. Plenty of the developers I respect most build privacy tools, activist tools, and small community apps precisely because they don't want to live inside one company's systems. The \u003Ca href=\"https:\u002F\u002Fkeepandroidopen.org\u002Fopen-letter\u002F?ref=ghost.jdneer.com\">Keep Android Open letter\u003C\u002Fa> names exactly these people: privacy-focused developers, humanitarian groups, and activists in countries that criminalize their work. Asking all of them to register with Google first is not a small ask. For some of them it is a dealbreaker.\u003C\u002Fp>\u003Cblockquote>\"This extends Google’s gatekeeping authority beyond its own marketplace into distribution channels where it has no legitimate operational role. Developers who choose not to use Google’s services should not be forced to register with, and submit to the judgement of, Google.\"\u003Cbr \u002F>\u003Cbr \u002F>\u003Ca href=\"https:\u002F\u002Fkeepandroidopen.org\u002Fopen-letter\u002F?ref=ghost.jdneer.com\">Keep Android Open open letter\u003C\u002Fa>\u003C\u002Fblockquote>\u003Cp>Google says this is about safety. In its \u003Ca href=\"https:\u002F\u002Fandroid-developers.googleblog.com\u002F2026\u002F03\u002Fandroid-developer-verification-rolling-out-to-all-developers.html?ref=ghost.jdneer.com\">March announcement\u003C\u002Fa>, it said its analysis \"found over 90 times more malware from sideloaded sources than on Google Play,\" and it has built its case around scammers who stay on the phone and coach victims into installing a malicious app (\u003Ca href=\"https:\u002F\u002Fdeveloper.android.com\u002Fblog\u002Fposts\u002Fandroid-developer-verification-balancing-openness-and-choice-with-safety?ref=ghost.jdneer.com\">Google\u003C\u002Fa>). I take scams seriously. But that justification is weak, and it gets weaker the closer you look.\u003C\u002Fp>\u003Cp>Start with the scam caller. Google's own answer to the coached victim is a 24-hour wait. A scammer who has spent days or weeks grooming someone can simply call back tomorrow. The waiting period inconveniences everyone, and the patient criminal least of all.\u003C\u002Fp>\u003Cp>Then look at how people here actually get robbed. The scams I hear about in the Philippines are texts and calls that trick people into handing over bank or e-wallet logins and one-time PINs, or into sending money themselves. The Bangko Sentral ng Pilipinas has warned about exactly this, with fake texts carrying links \"designed to steal access to victims' financial accounts\" (\u003Ca href=\"https:\u002F\u002Fwww.pna.gov.ph\u002Findex.php\u002Farticles\u002F1263312?ref=ghost.jdneer.com\">Philippine News Agency\u003C\u002Fa>). None of that needs an app install. A new note from the ASEAN+3 Macroeconomic Research Office found that 74 percent of Filipino scam victims who lost money said it went out through a digital or e-wallet transfer (\u003Ca href=\"https:\u002F\u002Fwww.amro-asia.org\u002Fwp-content\u002Fuploads\u002F2026\u002F10\u002FAN_Managing-Digital-Scam-Risks-in-ASEAN3-Regulatory-Frameworks-and-Policy-Responses.pdf?ref=ghost.jdneer.com\">AMRO\u003C\u002Fa>). Google already knows this kind of fraud is the problem. That's why it built on-device \u003Ca href=\"https:\u002F\u002Fblog.google\u002Fsecurity\u002Fnew-ai-powered-scam-detection-features\u002F?ref=ghost.jdneer.com\">Scam Detection\u003C\u002Fa> for suspicious texts in Google Messages and for calls. Those are the right tools for that fight. Locking down app installs is not.\u003C\u002Fp>\u003Cp>Verification also doesn't do what the word suggests. It ties an app to an identity. It does not make the app safe. Google Play has required developer verification for years, with \u003Ca href=\"https:\u002F\u002Fandroid-developers.googleblog.com\u002F2023\u002F07\u002Fboosting-trust-and-transparency-in-google-play.html?ref=ghost.jdneer.com\">expanded identity requirements announced in 2023\u003C\u002Fa>, and malware still gets in: Zscaler's ThreatLabz found 239 malicious apps on Google Play that were downloaded 42 million times between June 2024 and May 2025 (\u003Ca href=\"https:\u002F\u002Fwww.zscaler.com\u002Fblogs\u002Fsecurity-research\u002Findustry-attacks-surge-mobile-malware-spreads-threatlabz-2025-mobile-iot-ot?ref=ghost.jdneer.com\">Zscaler\u003C\u002Fa>). Anyone determined to do harm can register with a stolen identity or a shell company. Honest developers are the ones who will dutifully hand over their IDs.\u003C\u002Fp>\u003Cp>And Android already has defenses aimed squarely at sideloaded malware. Google Play Protect scans apps on the device, and Google added live threat detection to it in 2024 (\u003Ca href=\"https:\u002F\u002Fsecurity.googleblog.com\u002F2024\u002F11\u002Fnew-real-time-protections-on-Android.html?ref=ghost.jdneer.com\">Google\u003C\u002Fa>). Since Android 13, restricted settings keep apps installed outside an app store from easily getting powerful permissions like accessibility access, and Android 15 extended that to more permissions, including the default SMS and dialer roles (\u003Ca href=\"https:\u002F\u002Fsupport.google.com\u002Fandroid\u002Fanswer\u002F12623953?hl=en&ref=ghost.jdneer.com\">Google\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwww.androidauthority.com\u002Fandroid-15-restricted-settings-sideloading-3481098\u002F?ref=ghost.jdneer.com\">Android Authority\u003C\u002Fa>). Those are exactly the permissions banking malware abuses. With all that already in place, this extra layer mostly lands on honest developers and on the people who choose F-Droid and other open sources.\u003C\u002Fp>\u003Cblockquote>\"While we do recognize the importance of platform security and user safety, the Android platform already includes multiple security mechanisms that do not require central registration.\"\u003Cbr \u002F>\u003Cbr \u002F>\u003Ca href=\"https:\u002F\u002Fkeepandroidopen.org\u002Fopen-letter\u002F?ref=ghost.jdneer.com\">Keep Android Open open letter\u003C\u002Fa>\u003C\u002Fblockquote>\u003Cp>Google will point to its concessions, so let's look at them honestly. Hobbyists and students get a free \"limited distribution\" account that skips the ID check but only reaches up to 20 devices (\u003Ca href=\"https:\u002F\u002Fdeveloper.android.com\u002Fdeveloper-verification\u002Fguides?ref=ghost.jdneer.com\">Google\u003C\u002Fa>). Twenty devices. That's a class project, not a community. ADB still works, which is great if you own a computer, know what ADB is, and enjoy plugging your phone into it. And then there is the \"advanced flow\" for installing apps from unverified developers. To turn it on, you open developer options, confirm you aren't being pressured, unlock with your screen lock, restart your phone, and then wait 24 hours before you can finish (\u003Ca href=\"https:\u002F\u002Fdeveloper.android.com\u002Fblog\u002Fposts\u002Fandroid-developer-verification-balancing-openness-and-choice-with-safety?ref=ghost.jdneer.com\">Google\u003C\u002Fa>). Even after that, every unverified install comes with a warning.\u003C\u002Fp>\u003Cp>I understand the logic of the waiting period. It is meant to break a scammer's spell. But look at what it says about how Google now sees us. Installing software on a device you paid for has become something you need a cooling-off period for, like a big purchase or a legal contract. A choice that used to take one tap now takes a day, and it is hidden in a menu most people will never find. That isn't preserving freedom. That is making freedom inconvenient enough that most people give up on it.\u003C\u002Fp>\u003Cp>I'm far from alone in this. In an \u003Ca href=\"https:\u002F\u002Fwww.androidauthority.com\u002Fandroid-sideloading-developer-verification-first-wave-rollout-3717921\u002F?ref=ghost.jdneer.com\">Android Authority\u003C\u002Fa> reader poll earlier this year, 82 percent of respondents called the approach overkill or said it makes Android less open. F-Droid, which has quietly served free and open source apps for years, called the program \"a grievous breach of trust with the free and open-source community\" in a \u003Ca href=\"https:\u002F\u002Ff-droid.org\u002F2026\u002F02\u002F24\u002Fopen-letter-opposing-developer-verification.html?ref=ghost.jdneer.com\">February statement\u003C\u002Fa> and urged Google to \"change course.\" It signed the \u003Ca href=\"https:\u002F\u002Fkeepandroidopen.org\u002Fopen-letter\u002F?ref=ghost.jdneer.com\">Keep Android Open open letter\u003C\u002Fa> alongside the Electronic Frontier Foundation, the Free Software Foundation Europe, the Software Freedom Conservancy, and others. The letter now lists 71 organizations from 23 countries. These are not fringe voices. They are a big part of the community that made Android what it is.\u003C\u002Fp>\u003Cp>That is what stings the most. Android grew on the promise that it was open. Developers built for it because they didn't need anyone's permission. Users chose it because they could do what they wanted with their own phones. Taking that away one region at a time, with a few escape hatches that get harder to use, doesn't make it any less of a reversal.\u003C\u002Fp>\u003Cp>We still have until 2027 before this reaches the Philippines. If you build Android apps, read \u003Ca href=\"https:\u002F\u002Ff-droid.org\u002F2026\u002F02\u002F24\u002Fopen-letter-opposing-developer-verification.html?ref=ghost.jdneer.com\">F-Droid's statement\u003C\u002Fa> and the \u003Ca href=\"https:\u002F\u002Fkeepandroidopen.org\u002Fopen-letter\u002F?ref=ghost.jdneer.com\">open letter\u003C\u002Fa>, and make your voice heard. If you're a user, tell the developers you rely on that you support their right to ship without asking Google first. And if you care about owning the device in your pocket, don't wait until the gate is already closed.\u003C\u002Fp>\u003Cp>My phone should be mine. That's the Android I fell for, and it's the one worth fighting for.\u003C\u002Fp>","Google's Android developer verification turns an open platform into a gated one, and the Philippines gets it in 2027. I oppose it heavily. Making...",{"src":60,"height":76,"width":77,"type":78},1250,2000,"image\u002Fjpeg","2026-10-24T16:09:34.000+08:00",{"name":81,"url":10,"owner":5},"JD Bungart",[83,95,106,115],{"slug":84,"title":85,"excerpt":86,"image":87,"publishedAt":88,"topics":89,"readMinutes":94},"http2shell-cve-2026-111497-brotli-decoder","HTTP2Shell (CVE-2026-111497): What the Brotli Decoder Bug Really Hits, and How to Patch","CVE-2026-111497 is an out-of-bounds write in Google's Brotli decoder, 1.0.3 through 1.2.0. Fixed in 1.0.10, 1.1.1 and 1.2.1, plus Node.js, Bun, Python, Envoy and .NET updates. You are exposed if you decode untrusted Brotli data. Not in CISA KEV.","\u002Fcontent\u002Fimages\u002F2026\u002F10\u002Fhttp2shell_cve_2026_111497_v2.png","2026-10-26T20:51:27.000+08:00",[90,93],{"key":91,"label":92},"advisories","Advisories",{"key":67,"label":68},1,{"slug":96,"title":97,"excerpt":98,"image":99,"publishedAt":100,"topics":101,"readMinutes":94},"package-cooldowns-github-package-firewall-npm-pnpm-bun-pip-uv-poetry","Package Cooldowns Compared: GitHub Package Firewall vs. What npm, pnpm, Yarn, Bun, pip, uv and Poetry Already Do","GitHub now offers an install-time firewall for npm, free in preview and metered later. Most package managers already ship a free cooldown. Here is what each tool does, the copy-paste config, and where cooldowns stop helping.","\u002Fcontent\u002Fimages\u002F2026\u002F10\u002Fpkg-cooldowns-conveyor-alberto-rodriguez-unsplash.jpg","2026-10-26T14:00:00.000+08:00",[102,105],{"key":103,"label":104},"guides","Guides",{"key":67,"label":68},{"slug":107,"title":108,"excerpt":109,"image":110,"publishedAt":111,"topics":112,"readMinutes":94},"tailscale-ssh-tailworm-mesh-vpn-agent-risk","Your Mesh VPN Agent Is Root on Every Box. Tailworm Is the Reminder.","A researcher showed one hacked Tailscale node reaching root on other servers through Tailscale SSH forwarding. No patch yet. Here is why mesh VPN agents deserve the same suspicion as any privileged daemon.","\u002Fcontent\u002Fimages\u002F2026\u002F10\u002Ftailworm-padlock-light-trails-flyd-unsplash.jpg","2026-10-26T12:00:00.000+08:00",[113,114],{"key":64,"label":65},{"key":67,"label":68},{"slug":116,"title":117,"excerpt":118,"image":119,"publishedAt":120,"topics":121,"readMinutes":94},"emudhra-ca-weak-keys-chain-of-trust","eMudhra Broke Almost Nothing, and Still Dented the Chain of Trust","Eight eMudhra intermediate CA keys turned out to be numbers under 256. Browsers blocked them within hours, almost no site broke, and eMudhra is leaving the TLS business. The service impact was tiny. The lesson for the chain of trust is not.","\u002Fcontent\u002Fimages\u002F2026\u002F10\u002Femudhra-keys-iolandino-baiano-unsplash.jpg","2026-10-25T16:00:00.000+08:00",[122,123],{"key":64,"label":65},{"key":67,"label":68},{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":125},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M5 12h14M5 12l6 6m-6-6l6-6\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":127},"\u003Cg fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\">\u003Cpath d=\"M6.5 7.5a1 1 0 1 0 2 0a1 1 0 1 0-2 0\"\u002F>\u003Cpath d=\"M3 6v5.172a2 2 0 0 0 .586 1.414l7.71 7.71a2.41 2.41 0 0 0 3.408 0l5.592-5.592a2.41 2.41 0 0 0 0-3.408l-7.71-7.71A2 2 0 0 0 11.172 3H6a3 3 0 0 0-3 3\"\u002F>\u003C\u002Fg>"]