It is not. I have some issues with my eyesight and dark mode makes it easier to use a computer in some lighting conditions. So for me dark mode is an accessibility feature. And yes you could use the ugly recolor feature windows has but dark mode does the same thing and looks better most of the time cause a UI designer actually looked at it.

It's Fedora 43 and I ran into the exact same issue. The other issue I have is that I don't have any display output as soon as I install my graphics card drivers. So using Linux on my desktop is put on hold for now.

There's no way this is really about scammers. I have never heard of scammers pushing sideloaded apps upon their victims in order to carry out their scams.

Would welcome evidence to the contrary. Is this truly a threat model that's seen in the wild?

My gut says no because social engineering is about hijacking legitimate, first-party processes. Scammers attack login credentials, MFA flows, and use first-party apps to maintain access (think remote control software like TeamViewer). These apps come from the Play Store, not from meticulously curated collections like F-Droid, and not from somebody pressuring you to sideload an APK.

And if scammers decide to use sideloading as an attack vector -- then like all the other security gates that can be defeated via social engineering, I expect they will find an end-run around this one as well. Either on a technical basis, or by social-engineering users into bumbling past it and on to the next stage of the scam.

Build an idiot-proof system and society will build a better idiot. And yeah, the rest of us only wind up slightly annoyed, _for now_, until Google tightens their grip further on some other flimsy pretext.

>There's no way this is really about scammers. I have never heard of scammers pushing sideloaded apps upon their victims in order to carry out their scams.

I also never got targeted by pig butchering scams[1], and neither did my immediate friends/family, so I guess those must not exist either?

[1] https://en.wikipedia.org/wiki/Pig_butchering_scam

You don’t need malicious apps for this, it’s common to use real crypto exchanges and get them to send you money. How does google’s approach solve that?

And here are apps straight from the App Store [0] that are outright scams. How dos this protect people from these?

[0]: https://arstechnica.com/information-technology/2023/02/pig-b...

I didn't say the scams don't exist. I am of course aware of these types of scams.

But again, I've never heard of sideloading being used as an attack vector here. Nor have I ever seen reporting on it.

I figure Krebs or somebody would have written about this if it was an issue.

> I have never heard of scammers pushing sideloaded apps upon their victims in order to carry out their scams.

Maybe not scammers, but an abusive partner could sideload an application on your phone to spy on you. I've seen that before within my relatives.

I doubt a one-day wait will solve this though. Abusers have persistent physical access to the device, often over a span of years :(

It won't make a dent in scammers' revenue.

No, it is not. This is moving the goalposts. The original issue is developer verification. No appreciable harm prevention can or will come from forcing devs to identify themselves.

That's because most fraud uses social tactics and LEGITIMATE tools/software.

Impinging on my property rights cannot and will not protect fraud victims.

oh to be young and naive...

> Try calling a cop a “pig” to their face.

At least where I live in Europe you aren't allowed to insult people and you can get fined for it. Be it a police officer or a any other person.

I cannot imagine living in a place where I can't tell someone what I think of them once in a while.

You can tell them they are doing a shameful job or that you disagree with their actions or whatever.

You just can't _insult_ them like a 6 year old on a playground. Why is the ability to do so valuable to you?

It is viscerally against my cultural upbringing for the government to make illegal a verbal insult, it seems like an incredible overreach. I'm genuinely culture shocked hearing this. I'd be no more shocked hearing that it's illegal to dye one's hair.

Fyi, insults are illegal in the US, under certain conditions, under the fighting words doctrine.

The first thing you described is an insult.

No, an insult implies insolence, rudeness, condescension, insensitivity. You can communicate a dim view of someone without being rude.

> You can communicate a dim view of someone without being rude.

I would agree in theory, but whom is the judge of whether communicating that dim view is an insult or not?

being fined != physical, possibly fatal violence with body-cam turned off and irrevocable immunity

In Switzerland a digital identity like this will launch this summer and the underlying infrastructure and app is open source. And the issuer of the ID and the registry that holds and verifies credentials are separated. The protocol also isn't novel and is already used in other countries (Germany(?)).

For more information check the out technology behind it: https://www.eid.admin.ch/en/technology

The work on Proton ends up in wine which is available for macOS and is part of Apples game porting toolkit. So part of the work Valve is doing to make games run on Linux helps games run better on macOS.

While Apple probably makes most of their gaming revenue from gacha they fund a surprising number of non gambling games for their Apple Arcade subscription.

The digital ID in Switzerland [1] is literally the best case scenario from a privacy standpoint. It is basically an ID that is stored on your phone that can send a signed copy of your data to someone verifying it. But instead of sharing all your data everytime it can also only share part of your data or only verify that you are above a certain age.

I personally prefer this to sending a copy of your ID and a video with my face to someone verifying service provider that verifies my identity for a bank or some website.

[1] https://www.eid.admin.ch/en/technology

At least you can use your ID. If you want to get a code signing certificate for Microsoft at least in Switzerland all the CAs I tried using required me to be incorporated. I'm not sure how it is now but at least a few years ago I couldn't get a code signing certificate as an individual.

That's not easier and cheaper than before. That's how it's always been only now you can buy the cert through Azure.

For an individual the Apple code signing process is a lot easier and more accessible since I couldn't buy a code signing certificate for Windows without being registered as a business.

> That's how it's always been only now you can buy the cert through Azure.

Where can you get an EV cert for $120/year? Last time I checked, all the places were more expensive and then you also had to deal with a hardware token.

Lest we talk past each other: it's true that it used to be sufficient to buy a non-EV cert for around the same money, where it didn't require a hardware token, and that was good enough... but they changed the rules in 2023.