I haven’t been able to update my cellphone anonymously with Aurora since January. Every time I try, Aurora errors out with “Oops, you are rate limited”.

This isn’t the first time Google plays at making non-normies’ lives difficult. So I tried the usual tricks, updated Aurora, tried the nightly build, waited, tried again… for months - to no avail: Google just won’t play ball this time.

Last week, Signal stopped working and demanded to be updated. Fortunately, Signal offers the APK as a normal download without having to get it from the hateful Google Play store.

Today, my home banking identificator app did the same thing and stopped working. I needed to make a payment right now, and I had no way to update the app: “Oops, you are rate limited”. And my bank sure doesn’t offer the APK outside of anything but the goddamn Google Play store.

So I relented and created a Google account. Which of course entailed giving Google a phone number. I sure didn’t give them mine, so I phoned a friend abroad who doesn’t care to ask him to receive the verification SMS on his phone and read out the code to me. Which worked long enough to set up 2FA and do away with phone numbers altogether. And finally, after an hour of fucking around, annoying other people and compromising their phone number, I could update my banking app and make my payment at last.

All that because Google has decided they want to control my phone.

Fuck Google.

Seriously, how they are allowed to hold the Android world hostage like this without getting their monopolistic ass Sherman’ed AT&T-style, I’ll never know. It’s long overdue.

  • gigachad@feddit.de
    link
    fedilink
    arrow-up
    46
    ·
    edit-2
    2 months ago

    I haven’t seen the rate limitation issue for a couple of months now. The issue is not new, IIRC the Aurora team needs to provide more and more anonymous accounts as the user base is growing. Some months ago we had this problem for more than two weeks. I just checked and Aurora finds no connection, but until today everything worked flawlessly. And I expect it to work again soon.

    I feel your pain though. I am degoogled for more than 5 years now and what I learned is that Google will always look for ways to make our life harder. More and more basic functions such as network location were seperated from the AOSP into proprietary google services. I am pretty sure this will get even worse in the future.

    We must not forget that we rely on open source software and a hand full if developers, everything can break tomorrow and we are fucked.

    • ExtremeDullard@lemmy.sdf.orgOP
      link
      fedilink
      arrow-up
      22
      ·
      2 months ago

      We must not forget that we rely on open source software and a hand full if developers, everything can break tomorrow and we are fucked.

      In no way am I blaming the kind souls who create the open source software I love, and make life livable despite Google. I am squarely blaming Google who, like you say, has everybody’s balls in their hand and can squeeze at will - somehow lawfully.

    • i_failed_turing_test@lemmy.world
      link
      fedilink
      arrow-up
      2
      ·
      2 months ago

      Try deleting app data in Settings > Apps > Aurora Store, some data remains persistent even with reinstall, I had a similar problem showed that Aurora is down for maintenance, were reinstall didn’t work but removing data did, go figure.

  • umbrella@lemmy.ml
    link
    fedilink
    arrow-up
    39
    ·
    2 months ago

    you guys are aware the new play integrity API will demand us to have both the official play store AND a locked bootloader to use any app that wants to enforce it right?

    they are definetly coming for us.

        • ExtremeDullard@lemmy.sdf.orgOP
          link
          fedilink
          arrow-up
          18
          ·
          2 months ago

          I live in a country where the government provides a lot of services online, and have delegated the task of identifying people to the banks. You literally can’t live without a cellphone and without the secure ID app of your bank here. Well, you can I guess, but then your life become extremely difficult to do anything at all, however trivial.

          • BearOfaTime@lemm.ee
            link
            fedilink
            arrow-up
            9
            ·
            edit-2
            2 months ago

            Oh, ffs. What a phenomenally fucked up idea (and we all know it was done intentionally by both people in banking and government, to glean yet more info and gain more control).

            Sorry you have to deal with this BS.

            DivestOS (and Lineage I’m pretty sure) enables you to run MicroG under a specific user account only. Wonder if that would help for you?

            Or, if an Android VM hosted on a VPS would work.

  • kixik@lemmy.ml
    link
    fedilink
    arrow-up
    21
    ·
    2 months ago

    I would recommend using apkupdater for closed source apks, in particular enabling apkpure repo, rather than insisting on using google repo with aurora store or any other mechanism.

    Also looking for FLOSS alternatives if possile (granted things like whatsapp and waze won’t have alternatives for example).

    Some metioned apkmirror as the more trusted repo for closed source apps, however it’s currently formatting apks on multiple apks, and supposedly requesting for the apkmirror own instaler, so I recommend apkpure instead, which is also pretty well regarded, and they also in theory offer the same packages as the ones on google play…

    For FLOSS apps, the different f-droid repos (official ones and non official ones such as izzy-on-droid) offer a good amount of them.

  • deweydecibel@lemmy.world
    link
    fedilink
    English
    arrow-up
    20
    ·
    2 months ago

    This isn’t the first time Google plays at making non-normies’ lives difficult.

    I agree with the tone of this, but are you seriously using “normies” unironically?

    • ExtremeDullard@lemmy.sdf.orgOP
      link
      fedilink
      arrow-up
      12
      ·
      2 months ago

      Don’t read condescension into it. I said non-normie as a convenient shortcut for “not in the statistical norm” - which is what we who reject Google’s vampirizing influence are. Hopefully we’ll be the normies one day. But for now we definitely are not.

      • myxi@feddit.nl
        link
        fedilink
        English
        arrow-up
        1
        ·
        edit-2
        2 months ago

        These corporations would never let that be the norm. They are presently moderate about it because we are an extreme minority, but if this population starts growing at rapid rates, these leeches will go crazy. Just like how Google behaved a few months ago to prevent ad-block usage on YouTube. The unfortunate news is that we can’t even do much about it; they already have a scary market share and the money to do whatever they want. Worse thing is that these corporations will unite together in such scenario.

    • bl4kers@lemmy.ml
      link
      fedilink
      English
      arrow-up
      2
      ·
      2 months ago

      I can’t say I’ve heard the word “normies” used ironically before

  • MachineFab812@discuss.tchncs.de
    link
    fedilink
    arrow-up
    18
    ·
    2 months ago

    Really seems to me that the only way to manage this consistently will be with a non-de-googled phone as back-up for downloading and exporting apks. Doesn’t need a phone number, and wouldn’t have to have a google account with any real information.

    • deweydecibel@lemmy.world
      link
      fedilink
      English
      arrow-up
      12
      ·
      edit-2
      2 months ago

      As Android becomes increasingly hostile to users who want to control their own device, and without Google bullshit, I’ve grown to accept that I’m basically just going to have to carry two phones.

      Rooted/Lineage phone is main, if something refuses to work (which is rare for me), I kick on the hotspot and pull out the “clean” one.

      Been doing it for a year or so now. It’s annoying but not that big a deal, honestly. I’ve gotten used to it.

      I’d probably end up having two anyway for work stuff. This way Verkada and Microsoft’s garbage can stay on the “clean” phone too. I’m not about to tolerate Outlook wanting device admin privileges on my personal phone, but if it wants it on the “clean” one, go for it.

      • toastal@lemmy.ml
        link
        fedilink
        arrow-up
        8
        ·
        2 months ago

        Maybe this will spark the next Linux phone wave as there’s not much reason for to run Android if you are already forced into a second smart phone.

      • umbrella@lemmy.ml
        link
        fedilink
        arrow-up
        1
        ·
        edit-2
        2 months ago

        i hate this because it defeats the whole purpose of degoogling

        whats with this fetish on depending so heavily on a single US corporation for what is now critical infrastructure anyway.

      • MachineFab812@discuss.tchncs.de
        link
        fedilink
        arrow-up
        1
        ·
        2 months ago

        Oh no, I was talking about keeping the stock android phone at home. I’ll use outlook on a phone again when that employer buys me a phone, period.

  • eco_game@discuss.tchncs.de
    link
    fedilink
    arrow-up
    18
    ·
    2 months ago

    Another solution would be downloading the APK from APKMirror. I believe all their APKs signatures are checked against the proper Play Store releases or something like that (don’t quote me on that), but the baseline is that all their APKs should be pretty safe.

    • ExtremeDullard@lemmy.sdf.orgOP
      link
      fedilink
      arrow-up
      19
      ·
      2 months ago

      As much as I hate Google and the Play Store, I trust it more than third party app stores. APKPure, Aptoide, APKMirror… They all sound a bit sketchy to me. Because if you think about it, there’s absolutely no way to verify that the APK files they serve haven’t been diddled with, since the Google Play store doesn’t give a file hash that would enable me to verify the file’s signature independently. Not to mention, their apps have a knack for displaying obnoxious advertisement at full screen and full volume.

      And even if I did trust them, do you find this normal? Why is Google allowed to make me jump through hoops and compromise my security with impunity?

      • eco_game@discuss.tchncs.de
        link
        fedilink
        arrow-up
        23
        ·
        2 months ago

        This comment about the app signature should apply to your situation too, you can’t mess with an APK and then sign it with the Google Play keys.

        APKMirror is the most trustworthy website there is for APKs out there, if you do some research you will see that the community consensus is it being pretty safe.

        I do however understand your concern, especially when talking about banking apps. Honestly now that I think about it, for a banking app I’d rather make a burner Google Account as well. For less sensitive apps however, APKMirror is the best non Google way to get their APKs.

        About the app, I have no idea, I only ever used the website (with uBlock).

        Obviously it sucks that you need a Google account to access all these apps “properly” through the Play Store, for free apps they should really just let you download them without an account.

      • Xirup@lemmy.dbzer0.com
        link
        fedilink
        arrow-up
        2
        ·
        2 months ago

        Without mentioning that most of the time (and probably depending where you live) you won’t find your banking app in there, nor in the Aurora Store usually.

          • Xirup@lemmy.dbzer0.com
            link
            fedilink
            arrow-up
            4
            ·
            2 months ago

            I live in a Central American country where I simply can’t find my banking app in Aurora Store or in APKMirror (or any of those sites), and when I search the app name in Google Play it’s there, so I guess it has some kind of logic since the app uses anonymous Google accounts that are probably located in a country where it makes no sense that my banking app is there, I mean, why should my Central American banking app be shown in US for example?

            • ExtremeDullard@lemmy.sdf.orgOP
              link
              fedilink
              arrow-up
              2
              ·
              2 months ago

              Interesting… I sort of assumed everybody in the world had the same view of the Google Play store. Like for instance, my bank has subsidiaries in many countries, and I can see all the national versions of their apps in the Play Store as well as in Aurora. But now that you mention it, it’s possible that not everybody can download everything everywhere.

              Although that seems quite wrong: what if you travel to, say, France or Italy, you need to update your banking app while you reside there and you can’t see the app? That sounds like a recipe for disaster.

              Then again, it’s Google. They are kind of a giant disaster for millions of people who don’t need their aggravation…

              • Xirup@lemmy.dbzer0.com
                link
                fedilink
                arrow-up
                2
                ·
                2 months ago

                I suppose in the case where I’m using Google Play with a Google account, the most likely thing is that I’ll be able to update without a problem because my account is in the country where the app is located, just that it’s using the servers in the country where I live.

                In the case of the Aurora store of APKMirror, well, I’m fucked, I guess the only think that I can do is use the website of my bank, that I suppose this will be the case in many banks, the interface and the overall experience is worse than that of the app.

                To be honest, is just a shit that many, not to say all banking apps depend specifically on Google to work, it would not be a surprise to me that if I try to install my banking app extracting the APK for myself and then installing it on a deGoogled phone, the app will tell me that it requires Google to work or something like that.

                • ExtremeDullard@lemmy.sdf.orgOP
                  link
                  fedilink
                  arrow-up
                  2
                  ·
                  2 months ago

                  Not necessarily. My bank’s app for instance works perfectly well without Google Play Services. Quite surprising actually, and a relief that I don’t need a separate non-deGoogled cellphone just to do my banking. You might be surprised that yours does too.

                • shortwavesurfer@monero.town
                  link
                  fedilink
                  English
                  arrow-up
                  2
                  ·
                  2 months ago

                  Try getting the app URL and opening that on your device because I found a lot of times that even apps that are not shown will show up if you use the direct link instead.

            • Tazerface@lemmings.world
              link
              fedilink
              arrow-up
              2
              ·
              2 months ago

              If you log out of Aurora and use the “insecure” option you may have better luck. By default, Aurora’s location is in France but the insecure log-in is where you or your vpn location is.

        • eco_game@discuss.tchncs.de
          link
          fedilink
          arrow-up
          1
          ·
          2 months ago

          That’s an interesting point I hadn’t considered, some quick searching however shows that (at least some) German banking apps are on APKMirror. I can’t speak for other countries though.

  • forgotmylastusername@lemmy.ml
    link
    fedilink
    arrow-up
    15
    ·
    2 months ago

    Yeah everything is broken with anti-patterns meant to kill competition.

    I keep a separate Google Chrome install with no addons for government and banking. Websites break things so badly unless you’re leaving yourself wide open to all their privacy snooping and what not.

    For random web browsing the annoyances don’t matter as much. It’s unacceptable when it comes to important things. It’s all by (anti-)design.

  • ben_dover@lemmy.ml
    link
    fedilink
    arrow-up
    12
    ·
    edit-2
    2 months ago

    I just switched to a degoogled phone and Aurora recently, and it worked fine installing 30+ apps. When you get an error, try logging out of Aurora and start a new session, maybe the current Aurora proxy your phone is using is down

    • anarchrist@lemmy.dbzer0.com
      link
      fedilink
      arrow-up
      4
      ·
      2 months ago

      Yep this is it. Same thing happened to me randomly for a week before i said “maybe it’s not the servers” and did the whole turn it off and on again thing.

  • Nate@programming.dev
    link
    fedilink
    English
    arrow-up
    10
    ·
    2 months ago

    RCS just got cut for me again today because I’m rooted. At this point I’m spiteful enough that anybody who wants to reach me is going to have to do it through signal.

    • TechNom (nobody)@programming.dev
      link
      fedilink
      English
      arrow-up
      8
      ·
      2 months ago

      The egregious part in this is that Google presents RCS as an open standard to get carriers to adopt it. But then they retain enough control to exert their power over users like this. The same happened with Android. I don’t know how long such exploitation is tolerated before such aggressors are split up into a thousand competing businesses.

      • toastal@lemmy.ml
        link
        fedilink
        arrow-up
        6
        ·
        2 months ago

        RCS is XMPP if it were invented by corporations for corporations with the goal of minimal EU data compliance of messaging interoperability & maximal loopholes. The irony is these big corpos used XMPP a decade ago until they realized they have nothing to gain from interop or contributing to the working groups, but everything to gain from walling off the gardens & making users create accounts.

      • rikonium@discuss.tchncs.de
        link
        fedilink
        arrow-up
        3
        ·
        2 months ago

        There is RCS the standard, which isn’t really used - maybe Apple’s support will give it a boost. Then there is RCS + proprietary addons that is used, Google iMessage.

      • jacksilver@lemmy.world
        link
        fedilink
        arrow-up
        1
        ·
        2 months ago

        Sorta, it’s supposed to replace sms to an extent, but does require an internet connection. However, it is an open standard to my understanding meaning that any platform could implement it, not just android/ios.

  • Stowaway@midwest.social
    link
    fedilink
    arrow-up
    8
    ·
    2 months ago

    I banged my head against this for a while, turned out switching VPN servers did the trick for me. Might help for you? Could also try installing an update for aurora. Or you could try deleting all aurora data. Those have helped in the past as well.

  • selokichtli@lemmy.ml
    link
    fedilink
    arrow-up
    7
    ·
    2 months ago

    For banking exclusively, I use an insecure old phone with all the Google stuff updated through the Play Store. This phone is only on, without a SIM, behind a VPN, when I make a transaction. Battery lasts forever.

    And yeah, Google don’t like people who won’t allow them to fuck around with Android phones.

  • gregordinary@lemmy.ml
    link
    fedilink
    arrow-up
    5
    ·
    2 months ago

    I noticed I only got the rate limiting error when searching for an app on Aurora, but not to download and install. But how to get to the install page if you can’t search?

    I opened Firefox/Fennec on mobile, searched for an app, clicked the result for the Google Play store. Once on the play store page for the app was open, I would choose the “Open in App” option from the Firefox menu and select Aurora.

    That would launch Aurora and bring me directly to the App Install page. From there I could complete the installation.

    This was sometime in 2023, but hopefully it will still be helpful today.