Google has announced a new mechanism in Android called Advanced Flow, which will allow sideloading APKs from unverified developers for power users in a more secure manner.
The new system, scheduled to roll out this August, aims to allow installing Android apps from unverified developers while minimizing the risk of malware infections and scams, which caused an estimated $442 billion in losses last year, according to the Global Anti-Scam Alliance (GASA).
Distinct APK sideloading pathways
Source: Google
Power users who want to install APKs on their devices will have to go through a one-time process involving the following steps:
Turn on Developer Mode from system settings Confirm they are not being coached by threat actors Restart the phone and reauthenticate Wait one day and then confirm that the modifications are legitimate
Then users can install apps from unverified developers and enable them for a week or indefinitely. Android will display a warning that the app is from an unverified developer.
Overview of the Advanced Flow procedure
Source: Google
The process is designed to add friction and disrupt typical scamming tactics that trick people into installing unsafe apps on their devices by playing on the urgency of the operation.
... continue reading