It’s a good thing then about GOS partnering with an OEM to make it happen on their own. At worst, they’ll block sale of this device but of course, the black market will always exist and privacy ally’s should help others bring in a few devices into India if anyone asks.
We’re talking about 1.4 billion people. Good luck enforcing this to any capacity that would make a meaningful difference.
The problem is a major part of population is not tech literate. Even for people who work in IT, they still do not know and/or care much about digital privacy and for those who care do not actively educate themselves for a multitude of reasons. This leaves very few people that know and care about privacy and even fewer people who will or can take meaningful action for such a large population thus making it quite an easy job for the government.
But that’s why awareness is key. But any effort will surely fail because the country’s culture is such that it doesn’t necessarily promote or value quality education of all things from all aspects. It’s a different world. People just don’t or can’t care.
But let’s not debate India and turn this into an off topic discussion. Let’s still keep spreading awareness and do what we can.
I see no way Apple complying to this. It will open open “backdoor” like option on iOS but will also negatively affect iOS’s perception among everyone round the world that it’s no longer safe and secure if one version of iOS in one country has such requirement of an app being preinstalled.
Also, I see no way this can be enforced for all people in India. Presumably, this can only work on iPhone’s logged in the Indian App Store. So, if you can get one that’s not, that’s best.
All of this is brand new info. This can go away or be postponed anytime during or even after 90 days. This is developing news and we have to keep track of it.
They will comply the same way they did in Russia — during the initial setup process you will get a screen asking if you want to install certain apps (with a little “Not Now” somewhere at the bottom to effectively opt out). It’s (kind of) similar to that default browser selection screen iOS users get in the EU. Didn’t have to end up backdooring their product, although I’m not sure what good it did the average Russian considering Apple were also made to store iCloud data locally (they have been fined for not complying so I’m uncertain here), although Russians still get the Advanced Data Protection toggle (afaik), unlike the unfortunate Brits (such irony).
As for the Android side, we need to wait for someone from India to buy a locally sold device in the coming months and run ADB or similar debloating tools on it. I can’t imagine this government app having more invasive hooks than Google’s own grand poobah Play Services, but we won’t know until someone tries it.
I wish someone did that and sends that device to The Citizen Lab to check for spyware. Hell, I might do it as I know people who travel to India often enough. Will have to see.
Although it is true that we cannot know for sure until someone tries it but it definitely can be extremely invasive with its permissions such as unrestricted access to content on screen and implementing local blocking of domains and IP addresses. This is pure speculation but not far fetched and it’s already being used in certain “free" devices that a certain state government distributes to students in India.
I just wish Graphene supported more than just Pixels. But I guess in the devs’ POV, focusing on just one line of devices allow them to focus on making the most secure OS rather than making the most compatible OS.
Good news: Graphene will probably partner with a new OEM so expect to have something else besides Pixels soon.
Even tho, I wonder if another company could achieve such a great product in the same budget. Pixels are after all quite some decently priced good devices.
App is removable? Status is ambiguous. Minister said its removable and optional.
Concerns:
Telecom minister said its optional at the same time defending the app. No news about amending original order after their statement.
If it is removable after pre-load/OTA update, its not an issue right?
No, the damage is already done. If it already comes with additional privileges after booting phone (ie not prompting for permissions) the registration may be done OOTB without user intervention.
We already know how difficult it is to set up new phone without SIM and internet connectivity which applies everywhere.