Reuters: India orders smartphone makers to preload state-owned cyber safety app

It’s a good thing then about GOS partnering with an OEM to make it happen on their own. At worst, they’ll block sale of this device but of course, the black market will always exist and privacy ally’s should help others bring in a few devices into India if anyone asks.

We’re talking about 1.4 billion people. Good luck enforcing this to any capacity that would make a meaningful difference.

The problem is a major part of population is not tech literate. Even for people who work in IT, they still do not know and/or care much about digital privacy and for those who care do not actively educate themselves for a multitude of reasons. This leaves very few people that know and care about privacy and even fewer people who will or can take meaningful action for such a large population thus making it quite an easy job for the government.

1 Like

I know. I’ve seen that first hand too.

But that’s why awareness is key. But any effort will surely fail because the country’s culture is such that it doesn’t necessarily promote or value quality education of all things from all aspects. It’s a different world. People just don’t or can’t care.

But let’s not debate India and turn this into an off topic discussion. Let’s still keep spreading awareness and do what we can.

2 Likes

I just sent another message saying not to send it yet. :sweat_smile:

I see no way Apple complying to this. It will open open “backdoor” like option on iOS but will also negatively affect iOS’s perception among everyone round the world that it’s no longer safe and secure if one version of iOS in one country has such requirement of an app being preinstalled.

Also, I see no way this can be enforced for all people in India. Presumably, this can only work on iPhone’s logged in the Indian App Store. So, if you can get one that’s not, that’s best.

I understand that, but in my opinion, there is nothing to lose by waiting those 90 days.

All of this is brand new info. This can go away or be postponed anytime during or even after 90 days. This is developing news and we have to keep track of it.

1 Like

They will comply the same way they did in Russia — during the initial setup process you will get a screen asking if you want to install certain apps (with a little “Not Now” somewhere at the bottom to effectively opt out). It’s (kind of) similar to that default browser selection screen iOS users get in the EU. Didn’t have to end up backdooring their product, although I’m not sure what good it did the average Russian considering Apple were also made to store iCloud data locally (they have been fined for not complying so I’m uncertain here), although Russians still get the Advanced Data Protection toggle (afaik), unlike the unfortunate Brits (such irony).

As for the Android side, we need to wait for someone from India to buy a locally sold device in the coming months and run ADB or similar debloating tools on it. I can’t imagine this government app having more invasive hooks than Google’s own grand poobah Play Services, but we won’t know until someone tries it.

I wish someone did that and sends that device to The Citizen Lab to check for spyware. Hell, I might do it as I know people who travel to India often enough. Will have to see.

Although it is true that we cannot know for sure until someone tries it but it definitely can be extremely invasive with its permissions such as unrestricted access to content on screen and implementing local blocking of domains and IP addresses. This is pure speculation but not far fetched and it’s already being used in certain “free" devices that a certain state government distributes to students in India.

1 Like

Yeah I already shared a link saying the same. Thanks for sharing another one.

I just wish Graphene supported more than just Pixels. But I guess in the devs’ POV, focusing on just one line of devices allow them to focus on making the most secure OS rather than making the most compatible OS.

Good news: Graphene will probably partner with a new OEM so expect to have something else besides Pixels soon. :tada:
Even tho, I wonder if another company could achieve such a great product in the same budget. Pixels are after all quite some decently priced good devices. :hugs:

1 Like

Screenshot from a Reddit user

3 Likes

I forgot where I saw it, but IIRC GOS team said it was around 1 year away from the launch date of that device, so prob. Q3 / Q4 26, I’d say.

Edit: According to this post, likely to be 2027.

Spyware confirmed. Though I still want Citizen Lab to check it out. Hope they can get it somehow and release the damning report.

I’m calling it. 2027 Black Friday time is my prediction if not 4th of July holiday release - what’s a more appropriate time than that.

Some short interpretations:

  1. Order issued to smartphone makers? Yes
  2. OEM notified their compliance? No
  3. App is removable? Status is ambiguous. Minister said its removable and optional.

Concerns:

Telecom minister said its optional at the same time defending the app. No news about amending original order after their statement.

If it is removable after pre-load/OTA update, its not an issue right?

No, the damage is already done. If it already comes with additional privileges after booting phone (ie not prompting for permissions) the registration may be done OOTB without user intervention.

We already know how difficult it is to set up new phone without SIM and internet connectivity which applies everywhere.

Source: The Hindu (news 1, news 2), Reuters, Indian Express and Internet Freedom Foundation.

Apple remains silent till now maybe due to its ongoing antitrust penalty filing.

1 Like

That is a conflicting statement from the minister since the report mentions “The government also wants manufacturers to ensure that the app is not disabled.

Developing news folks. But let’s keep track of what’s what and not think anything is set in stone.

(general comment, not necessarily directed at you)

1 Like