What you are proposing won't solve anything, the #1 source of malware on Android is Play Store ads, here I said it.

And Google benefits financially from the problem.

Financial incentives aside, a higher assurance tier on the app store would enable me to tell my relatives "all apps that handle money or government details will always have this mark next to them" among other things. Whereas the current situation has me actively investigating moving them over to graphene.

You "refusing to believe it" doesn't make it go away.

Meanwhile, on the Play Store... https://ibb.co/DJKGM8d

I call it "direct install" personally, implying the play store is the indirect install.

> no data shared with the public on what percent of scams were caused by sideloaded apps and how the scams actually operate for us to be able to accept the solution.

They will not share the data because the data goes against their public stance.

Apks are already very annoying to install for your average user. The scams will target the web, the playstore and then as a very last resort, direct installs

What public stance do you mean? Did they say somewhere that sharing statistics about Android is against their morals or what do you mean?

Their stance is that they want to lock up Android, if they start sharing the truth, it just doesn't support their goals

Google's perspective is that they want full control on Android.

If they really care about scams, the first result when I search for chatgpt is a fake app with a fake logo. Maybe they should start by tackling the scams on the play store as the play store is the far west.

Fastmail is australian

But their servers are in the US.

The bar to create the new X framework has just been lowered so I expect the opposite, even more churn.

All frameworks make some assumptions and therefore have some constraints. There was always a well-understood trade-off when using frameworks of speeding up early development but slowing down later development as the system encountered the constraints.

LLMs remove the time problem (to an extent) and have more problems around understanding the constraints imposed by the framework. The trade-off is less worth it now.

I have stopped using frameworks completely when writing systems with an LLM. I always tell it to use the base language with as few dependencies as possible.

If you are doing js, that makes sense since all the frameworks are a mess anyway.

Yes but no AI will know how to use your new framework so it will not get adopted

It's not hard to bypass attestation, it's actually very easy and done right now at scale, there's giant click farms with phones on racks.

They don't modify any device and will pass whatever attestation you try to make.

Of course nobody is doing that, because Google and Apple made it too hard already.

Even Fortnite gave up on direct installs. If one of most popular game in the world can't make it, who can?

Still not great, I'm using it on my S23 and I would compare it to a 2010-era Linux WM.

It's good enough to use on the go I'd say but not beyond that.

Is it still shipping with that ancient bash, the awful Iterm and without a package manager? I haven't used OSX for a while.

No. Zsh is now standard, though it still included an old optional version of bash. Apple hates GPLv3 that's why they moved away from bash.

The terminal app is not iterm. But Apple's own Terminal.app

And no there's no package manager but there's brew and macports.

I didn't know it was an homemade terminal, it's just that it looked old and abandoned compared to your average Linux distribution.

It is made by Apple yes. It's not very bad, it even has big font support from the VT100 series. And a lot of style settings in the menu bar. It's not iterm2 but it's way better than what windows offers (not just the console but the newer windows terminal isn't as good either IMO)