Google Tests Third-Party App Store Support in Play Store Following Epic Games Antitrust Ruling
Google is currently testing several new features in the Play Store, including an experimental section called Play Labs, support for third-party app stores, and an expanded search bar. These changes have been identified in a recent version of the service, although most of the new capabilities remain inaccessible to regular users at this time.
The most significant development is the planned ability to install alternative app marketplaces directly from Google Play. The company had previously confirmed work on this functionality, which stems from the ongoing antitrust proceedings involving Google and Epic Games. After the settlement between the two companies was withdrawn, the 2024 court ruling once again became active, requiring greater openness to competing stores.
The new menu option for third-party stores was discovered only after direct intervention in the application code. It appears in an additional menu but currently returns an error when users attempt to open an alternative marketplace. In the same area, researchers also found Play Labs, an experimental section where users will likely be able to test upcoming store features before they reach general availability. Google already uses similar experimental sections in other products, including its main search engine.
While Play Labs and the third-party store option are not yet functional, the updated search interface is already working. Google is preparing a two-line search panel designed to accommodate longer natural-language queries, accompanied by an Ask Store prompt. Instead of entering a short app name, users will be encouraged to describe their needs in detail, after which the store will attempt to suggest suitable applications.
These experiments follow recent Play Store improvements such as enhanced search capabilities and the option to test widgets during app installation. Broader rollout of the new search panel is expected in the coming weeks. However, APK analysis only reveals features currently under development, and Google retains the option to modify, postpone, or abandon any of them before release.
The direction of these changes is notable: the main Android app store is preparing to distribute competing marketplaces to users, effectively turning competition itself into a feature that can be installed through Google Play.
Related articles
Spring Security Tutorial Details Refresh Token Implementation to Complement JWT Authentication
A detailed technical guide explains how to enhance JWT-based authentication in Spring Security by introducing refresh tokens for improved security and user experience. The article covers the creation of a RefreshToken entity stored in the database, along with repository and service layers that handle token generation, verification, revocation, and rotation using UUID and expiration timestamps. It discusses security advantages such as short-lived access tokens combined with long-lived refresh tokens hashed via SHA-256 or HMAC-SHA256, while also addressing risks including database theft and XSS attacks mitigated by HttpOnly cookies. Code examples demonstrate updates to AuthService, AuthController, and SecurityConfig to support registration, login, token refresh via cookies, and logout functionality. Additional best practices include automatic token rotation on refresh and session management across multiple devices. The tutorial emphasizes minimizing credential transmission over networks while maintaining stateful token validation.
OTUS Publishes Extensive Digest Covering Kubernetes, GitLab CI, DevSecOps and Infrastructure Reliability
OTUS has released a large-scale digest that compiles free lessons, practical articles and advanced courses focused on real-world infrastructure challenges. The collection addresses interconnected topics including Kubernetes container orchestration, GitLab CI pipeline automation, observability with OpenTelemetry, network troubleshooting, and DevSecOps practices. Readers can explore specific lessons on secrets management with Vault, load testing, RAID recovery, and kernel-level protections in Linux. The digest also features in-depth articles on Docker Compose configuration, CrowdSec migration, L2 network loops, and self-service deployment models. For experienced professionals, OTUS offers specialized courses on high-load systems, PostgreSQL administration, Linux kernel development, and advanced networking with BGP and OSPF.
Xello and Kode Bezopasnosti Sign Technological Partnership to Integrate Equipment Emulation into Xello Deception Platform
Xello, a Russian developer of data and infrastructure protection platforms, and Kode Bezopasnosti, a Russian developer of software and hardware information security tools, have signed a technological partnership agreement. The collaboration will enable emulation of Kode Bezopasnosti equipment within Xello Deception, the first domestic Distributed Deception Platform designed to protect against targeted attacks. This integration will enhance the creation of a realistic false layer of IT assets and expand use cases for early threat detection in customer environments. Xello product head Rustam Zakirov emphasized that the partnership addresses customer needs by making the deception layer more authentic for organizations using Kode Bezopasnosti solutions while fostering expertise exchange. Kode Bezopasnosti strategic marketing head Pavel Korostelev highlighted the growing demand for deception technologies amid rising targeted attacks and the value of supporting proactive detection capabilities on the Russian market. The agreement combines both companies' strengths to improve practical scenarios for cyber deception deployment.
How Ideco Measures NGFW Performance Using TRex ASTF and RFC 9411 Methodology
Ideco engineers have published a detailed methodology for benchmarking the performance of their Ideco NGFW Novum product on the Ideco EX hardware platform. The team uses TRex in Advanced Stateful mode to generate realistic L4-L7 traffic and follows RFC 9411 guidelines to ensure reproducible results across different test environments. Key metrics include throughput on UDP 1518-byte frames reaching 200 Gbit/s, TCP/HTTP performance varying from 100 Gbit/s down to 62 Gbit/s depending on object size, and EMIX mixed traffic dropping from 92 Gbit/s with firewall only to 15.5 Gbit/s when all inspection engines are enabled. The methodology incorporates binary search for maximum load, a 1% session drop threshold, and 300-second hold times per test point to capture real-world behavior rather than short-term peaks. All tests were performed without TLS decryption, with separate plans for hardware-based Keysight BreakingPoint testing when decryption is required. The full article includes hardware specifications, traffic profiles, loss calculation formulas, and configuration details to allow anyone to reproduce the measurements.