NewApp Digest
search bot

verification process

Google ‘gradually’ rolling out Android’s ‘advanced’ sideloading ahead of developer verification
AppWizard
August 20, 2026

Google ‘gradually’ rolling out Android’s ‘advanced’ sideloading ahead of developer verification

Google is rolling out an “advanced” sideloading flow for Android next month, introducing a one-time, 24-hour waiting period between activating app installations from unverified developers and the actual installation. Users must enable the “Allow apps from unverified developers” setting in Developer options to engage with this feature, which includes warnings during the waiting period. Installations via ADB remain unaffected, and users can disable developer options after enabling the new feature. The rollout is supported by the “Android Developer Verifier” app and will initially launch in Brazil, Indonesia, Singapore, and Thailand, with a global rollout expected next year.
Google begins rolling out Android’s controversial new sideloading flow
AppWizard
August 19, 2026

Google begins rolling out Android’s controversial new sideloading flow

Google has begun rolling out a new advanced flow for installing applications from unverified developers on Android, which includes a mandatory 24-hour waiting period. This process requires users to access Developer Options, enable the option for unverified apps, authenticate their screen lock, confirm they are not being pressured, restart their device, and then choose to allow unverified apps for seven days or indefinitely. Users will receive a warning when attempting to install unverified apps but can proceed if they choose. The new flow also applies to updates for unverified apps, and disabling it will prevent users from receiving updates until re-enabled. The Android Debug Bridge (ADB) remains exempt from these requirements. The rollout includes a new Android Developer Verifier service that users can install to expedite the appearance of the advanced flow. Developer verification enforcement will start on September 30 in select countries and will expand to all regions and app installations by 2027. Reactions to these changes have been mixed, with many users expressing concerns about the additional barriers to accessing apps.
Google is introducing mandatory identity verification for Android app developers
AppWizard
August 4, 2026

Google is introducing mandatory identity verification for Android app developers

Google will require mandatory identity verification for all developers creating applications for the Android platform, affecting those from countries under U.S. sanctions, such as Russia, Iran, Cuba, and North Korea, who will be excluded from the verification system and may not distribute their apps internationally. The new regulations apply to developers of apps for Android 7 and later versions.
Samsung follows LG in killing Smart TV apps that rent out your internet
AppWizard
August 4, 2026

Samsung follows LG in killing Smart TV apps that rent out your internet

Security researchers found that several Samsung Smart TV applications, including Pac-Man, were embedding residential proxy SDKs from data brokers like Bright Data. In response, Samsung has banned the inclusion of residential proxy functionality in new app submissions and is working to remove existing apps with such software. The investigation by Norwegian cybersecurity firm Mnemonic revealed that the Bright Data SDK was integrated into various gaming applications, some promoted by Samsung. While Samsung TVs were not automatically sharing internet connections, the SDK could be activated remotely by developers, requiring user consent. Once consent was granted, the proxy service could operate in the background. Many Samsung TV applications were found to download most of their code from remote servers, complicating verification processes. The issue of residential proxy software is not limited to Samsung, as it has also been identified in various Android apps and devices. Following these findings, LG and Google have also taken measures to address the risks associated with residential proxy networks.
How to sideload Android APKs on your Chromebook
AppWizard
August 2, 2026

How to sideload Android APKs on your Chromebook

A Chromebook can be used for productivity, gaming, and entertainment, and users can sideload Android apps when they are not available on the Google Play Store. Sideloading involves installing Android Package Kits (APKs) directly onto the device, but caution is advised as these apps have not been verified by Google. Users should research APKs to ensure they are legitimate and free from malware. To sideload an app, users can enable Linux on their Chromebook and use Android Debug Bridge (ADB). This requires enabling ADB debugging in the Linux development environment and using the Terminal to install the APK. Alternatively, users can run APKs using an emulator in Android Studio, which involves setting up Android Studio and creating an Android Virtual Device to install the APK.
Cheap Android TV Boxes Pose as Phones and Turn Owners’ Broadband Into Proxies
AppWizard
July 31, 2026

Cheap Android TV Boxes Pose as Phones and Turn Owners’ Broadband Into Proxies

Bitsight's investigation revealed that inexpensive Android TV boxes are being shipped with applications that can change their hardware identity, allowing them to impersonate popular smartphone brands like Samsung and Huawei. This operation, named Fuyao, is linked to Zhejiang Fengwo IoT Technology Co., Ltd., a Chinese company established in 2019. The H96MAXV11 model was frequently reported among the affected devices. In one day, the operation received 65,957 reports from about 38,000 unique MAC addresses, with many devices misidentified as phones due to spoofed identifiers. Fengwo has also promoted over 120,000 "AI digital humans," though details on this marketing term are vague. The command-and-control server for Fuyao sends phone profiles to devices, masking their actual hardware specifications. The operation uses machine vision technology and a YOLOv8s object-detection model to identify advertisements. Bitsight documented 40 fraud tasks, 21 unique campaigns, and 166 modules across four devices. The operation's payout structure involves 144 operator-owned domains, with an estimated gross return of .25 per device daily, potentially leading to annual revenues in the millions. Attribution to Fengwo is supported by shared TLS certificate data and public patent records, although the patents do not directly address advertising. There is uncertainty about how the fraudulent apps were installed and at what point in the supply chain they were introduced. Device owners are advised to verify Play Protect certification and disconnect suspicious devices.
Google Play Rolls Out Age Signals Worldwide: Get Tailored Per-App Safety Shields
AppWizard
July 30, 2026

Google Play Rolls Out Age Signals Worldwide: Get Tailored Per-App Safety Shields

Google has announced the global rollout of its Age Signals API for the Google Play platform, aimed at helping parents manage age-appropriate content for their children across Android applications from a single interface. Initially launched in Brazil, the tool will be extended to users in Australia and Canada by mid-August, with a full worldwide release expected later this year. The Age Signals API allows developers to customize in-app experiences based on the user's actual age, moving away from generic safety measures. Developers receive age range signals to adjust content and features accordingly, while adult users can voluntarily share their age range. Parents can centralize control through the Google Family Link app, sharing their child's age range once for automatic communication to participating apps. Age data is not shared by default, and parents can modify permissions at any time. The API enhances existing safety tools on Google Play, including mandatory standards for family-friendly apps and features in Google Family Link.
Microsoft will make it harder to illegally activate Windows and close a popular piracy loophole
Winsage
July 29, 2026

Microsoft will make it harder to illegally activate Windows and close a popular piracy loophole

Microsoft is requiring the use of TPM 2.0 security modules for Key Management Service (KMS) activation servers to combat unlicensed software and corporate piracy. KMS, used by organizations for mass activation of devices, has been targeted by hackers who create counterfeit servers. The new protocol mandates that KMS hosts validate their hardware credentials through the TPM 2.0 chip before activating client devices. This initiative will mainly affect illegal infrastructures in the corporate sector, while legitimate PC users will not be impacted. Starting in August 2026, Windows Server 2025 will introduce hardware readiness alerts to help system administrators prepare for these changes. TPM 2.0 has been required for Windows 11 since 2021, and its application is being expanded to address vulnerabilities in volume licensing.
Windows 95 didn’t detect installers, it ‘guessed’ based on the file name, says veteran dev — it simply checked for words like setup, install, inst, or localized equivalents
Winsage
July 12, 2026

Windows 95 didn’t detect installers, it ‘guessed’ based on the file name, says veteran dev — it simply checked for words like setup, install, inst, or localized equivalents

Raymond Chen, a Microsoft engineer, revealed that Windows 95 identified installation programs by analyzing executable filenames against a list of keywords, including "setup," "install," and "inst." The system would then initiate a routine to repair any compromised system files. The list included six terms: setup, install, inst, imposta, ayarla, and felrak. Chen noted redundancy in the list, suggesting "install" was unnecessary since it included "inst." For executables not matching the terms, Windows 95 scanned the executable's path for "Setup." The system maintained backup copies of frequently overwritten files in a hidden directory at C:WindowsSYSBCKUP and would restore correct versions after installers completed. File verification was often postponed until the next system boot, especially for installers that reverted to MS-DOS for file replacements. This file repair mechanism continues to influence modern operating systems, including Windows 11.
Search