I would think that a CA certificate may be hardcoded? Only way it to block it. Faking it maybe with rooting. And then you can gut it also

There are blocklists for that also. https://github.com/hagezi/dns-blocklists#bypass

I don’t think so. But this one should help: https://github.com/hagezi/dns-blocklists#native

If the Smart TV uses and hardcoded http DNS server, that must be blocked directly, sure. But that scenario is very unlikely.

I can only recommend everybody that has the option for it to run adguard home as a DNS server.

It if you already have a PiHole that can do the same trick. Adguard has support for all DNS protocols and forces itself into windows and android via DoH and DoQuick.

A friend of mine maintains a list of blocklist here: https://github.com/ppfeufer/adguard-filter-list

That also is illegal in Europe. They must answer those questions. That is Our right ad a European citizen. They can not sanction you for this.

Every European which user should now use its GDPR rights and ask them what data they have of us and what they do with it.

“Person of interest” and 1984 should be works if fiction and not tutorials

100% Agreement

I use the German digital id since years. Without enforced Google.

Because the German (older) app does not depend on it.

So no, that’s not true. It is an assumption and pessimism

You have to enable it. And I would love a dedicated switch.

Currently, you need to enable third party install sources.

And one could argue that the fact that most people will not enable developer mode is a clear sign that this is a protection.

In my very very personal opinion: people that do not want to enable developer mode should maybe not install apps from third parties. Developer mode itself unlocks a few switches, and none of them is enabled per default. This is a pretty safe action IMHO.

There is a way to avoid this, but this is the device owner mode. You need an app that takes full control over device ownership, and those apps are allowed to do anything including installing any app.

One example is OwnDroid.

An opensource app that is signed by a dev and allows to manage install sources would be a working solution with better security.

If someone builds it

Proven right with what? To be clear; I can not see in the future and if member states copy the EU implementation 1:1, then at least we can fight against it in that level. Because, an implementation relying ok US Google would violate multiple European regulations.

But as it seems, misinformation and propaganda won, facts are now subjective and we just give up and bow to big corpo, because those shit hats profit from exactly this kind of bullshit.

I had a good look at the process. And yes it is not very convenient and or course it is not just to protect users, that is a secondary marketing effect.

I completely lost this view after all those heated debates, thanks.

As long as people claim that F-Droid will stop working and other stuff, based on the initial plans, I classify most of the debate as fear mongering .

And good luck and fun with your new setup. I still have an original OpenMoko, to bad GSM is dead here.

And, thanks for the debate.

Final try, this is the official new workflow from Google.

Did you know this existed? Are you aware while not very convenient or restores the full sideloading functionality once you went through this process?

What the fuck are we even debating about if facts, provable fucking facts, are ignored

How do you now that?

Again, the ability to install a completely unverified APK is used in real, successful, attacks.

The user DOES NOT KNOW WHAT HE IS DOING! That is the entire point!

If users would know what this is and understand, maybe it would be less if a risk.

Maybe look at other threads here where I debate the actual issue. An actual debate.

I’m leaving Android over this. I doubt I’ll be the only one.

Good! I hope alternative mobile operating systems get traction out of this!

And again, there is no verification need anymore! That is exactly why I am so pissed about this debate in general.

Is the workflow simple? No. Is the 24hour period comfortable? No. Do I understand why? Yes, but one or two hours would be enough

Ah another myth “the EU App”, I will not go I to detail, but each member state must implement its own app. Yes, the reference implementation uses Google services currently, but there is not a single , working , published app! Not one.

Then we agree to disagree.

I think we are manly on the same page, but different opinions on priority and that’s fine.

I declare both as a risk.

From my perspective, with this change, we could make Google directly reliable for malware in the appstore.

While this started as a very anti consumer change, as long as sideloading stays possible, this is a good measure.

That assumes that Google does not do anything about the appstore and that is objectively not true.

Is it enough? No ideas, but still, it does not change the need for better endpoint security.