by rishabhaiover
30 subcomments
- I'm shocked by people and state using the crutch of cyber crime or scams to push a totalitarian solution to a problem that is better solved by improved education and targeted campaigns against common security pitfalls.
I abhor any decision that robs even a grain of my individual freedom.
- Sounds so authoritarian. Luckily, in the UK you only have to scan your face and ID to access cat photos.
- > With more than 5 million downloads since its launch, the app has helped block more than 3.7 million stolen or lost mobile phones, while more than 30 million fraudulent connections have also been terminated.
I might be reading this wrong but these numbers seem very weird. Did more than half the people who downloaded the app block a stolen phone? And did each person who downloaded the app terminate 6 fraudulent connections?
- Indian government is big on pronouncements.
It will be a garbage app that most likely will not work, considering the historical incompetence of the Indian government's expertise in all things tech.
I am pretty certain Apple and Samsung will pay off someone in the government.
- I wouldn’t venture in the direction that many here will take.
I will point out that India have the highest number of victims of cyber-fraud. I personally know many people who have lost significant sums through social engineering attacks. The money is transferred to multiple mule accounts and physical cash is siphoned off to the fraudsters by the owners of those account. They choose helpless, illiterate, village dwelling account holders for this.
Another huge issue is unregulated loan apps. There are horror stories of people installing apps in order to take high-interest loans and then those apps stealing their private photos and contacts or accessing camera to take photos in private moments, and then sending those photos to contacts via WhatsApp when interest payment is overdue.
Then there are obvious security issues with terrorism and organized crime.
The government wants data. It's clear why. There is huge potential for misuse.
by petterroea
1 subcomments
- I wish the article talked more about this app India wanted to pre-install. Forcing the pre-install of apps is worrisome in general, but there's some nuance that is missed by not explaining what is being forced on the citizens. "Cybersecurity app" can mean a lot. From the looks it's a government-sponsored "brick my phone"-kind of app for disabling stolen phones?
by SamuelAdams
2 subcomments
- I wonder if this will cause a reduction in remote jobs for citizens. Compliance with US laws like HIPAA and FERPA have strict requirements regarding access. Many employees use 2FA on their personal devices, which if passed this law would interfere with.
- The more I see stuff like this, the more I think "you know, I don't think the world is collapsing, I think the old world is collapsing." Governments in their current form are increasingly becoming irrelevant (h/t to "The Fourth Turning") and actions like this prove it.
- What does this app actually do, in detail? Anyone know?
by shevy-java
2 subcomments
- It's always the same - governments suddenly wanting to spy on people.
We need a world where this can be guaranteed to not happen. We need
3D printing everywhere, without restrictions or payload attached.
- It's a dangerous trend that is happening. From EU chat control to this, is like everybody is so interested to know what the hell I'm doing with my life. The problem is with my kids, they likely will not enjoy freedom as we did it.
by JumpCrisscross
2 subcomments
- Do we have a breakdown of what this app actually does?
by reactivematter
4 subcomments
- How is it different from preloading apps like Netflix, GMail and other shady apps for profits that collects a lot of data.
Considering India's low literacy, having a state owned cyber safety app shouldn't be much of an issue. It's not like a backdoor, but safety of citizens, which is the prime mandate of a sovereign state.
- Very concerning. I will be suprised if companies like apple comply though.
- The year of the Linux phone in India is coming.
by stickfigure
5 subcomments
- What stops someone from loading GrapheneOS on their (Indian) Android phone?
- Government of India issued a follow up gazette notification withdrawing mandatory pre-installation of Sanchar Saathi app on smartphones: https://news.ycombinator.com/item?id=46132822
- If it can be abused, it will be abused. Corruption exists anywhere humans exist. Convenience and security are the bait. Why do people want to be caged?
- > Apple's iOS powered an estimated 4.5% of 735 million smartphones in India by mid-2025, with the rest using Android, Counterpoint Research says.
Sounds like Google should be the one leading the charge against this. Will be interesting to see what they do.
> The app is mainly designed to help users block and track lost or stolen smartphones across all telecom networks, using a central registry.
It's an app. That's all it does now (presumably). Once installed, it can be changed in the future to do all kinds of terrible things. This is big brother.
by quantum_state
3 subcomments
- Horrible for a so-called democratic country …
by thisislife2
1 subcomments
- A government minister has clarified that the app is not mandatory but "optional" and can be deleted by the user is they don't want to use it - Sanchar Saathi app optional, can be deleted, says Telecom Minister Scindia - https://www.thehindu.com/sci-tech/technology/sanchar-saathi-... .
by risfriend
2 subcomments
- This is just bad PR from Indian government.
Communication minister clarifies the app is optional
https://timesofindia.indiatimes.com/technology/tech-news/tel...
Reuters/BBC have been famous to pounce and sensationalizing.
by marginalx
1 subcomments
- "With 5 million total downloads - the app has saved 3.7 million lost phones", this somehow doesn't add up for me, as this implies more than 74% of phones are stolen?
Or this this govt lying to pad the numbers to make the app look like a sheep in wolves clothing.
- The developers of this app have a @ gmail.com mailbox listed as the support contact.
And they claim to protect people from fraud / phishing / scams.
> https://x.com/shantanugoel/status/1995874411543671208
>> sanchaarsaathi.dot AT gmail dot com
>> broadbandmission AT gmail dot com
- The article mentions blocking phones with stolen IMEI's, but iirc that's mostly up to telecom network providers to block rather than some "app". Also doesn't Apple have their own locking technology?
In short, the arguments for this seems to stink?
by SilverElfin
1 subcomments
- I assume that in the US, the major manufacturers of phones and their operating systems already have backdoors for national security reasons. I think back to the past leaks from Snowden regarding the PRISM program. That program specifically included Google and Apple cooperating with the government under the FISA Amendments Act of 2008.
So while this state-owned cyber safety app is authoritarian, I wonder if it reflects just the most practical way India’s government can achieve the same things that the US has.
by bossyTeacher
0 subcomment
- And this is why we need unlockable bootloaders and stuff like Graphene and LineageOs. Having only two mobile Os is very convenient until stuff like this happens.
- It is happening, in spite many won't really deeply believe.
Every day 33 brits are arrested for what they say online.
It's happening, and it's time we say no.
It's uncomfortable, but we need to do it en masse, right now.
Do not buy backdoored hardware, help others get rid of the backdoors, use anonymous technology to organize protests.
There has to be a line.
by catlikesshrimp
1 subcomments
- Google, the phone manufacturer and now the state running bloatware on my phone. I will have three dialers, calendars, etc. All of them uninstallable
- Just another round in the decades-long battle of who owns your device: Industry or state. It's never you, mind you, who owns your device.
The perversion is that you are legally responsible for what happens with your device, but you are unable to prevent others from using it as they wish. An app like this is automation for putting people into jail. Just upload some illegal content and then "detect it". There's literally nothing you can do to defend against this attack, and it will work until it's overused.
- I have to say I'm really surprised that I didn't find "fighting CP & terrorism" as the main push for this.
- Why would you give the government such power? Don't think about the current government that you may be happy about - think about the next one.
by alwinaugustin
0 subcomment
- Want to check number of SIMs in your name? Download Sanchar Saathi to check:Links to Play store and App Store. Department of Telecom
I was getting these messages for sometime and installed it finally. It is the same app that is mentioned in the article. My phone is already in the system then.
by HardwareLust
1 subcomments
- Apple said this morning they will not comply.
- If the app requires an on device backdoor, Apple won’t likely cave to it. If it’s sandboxed, the amount of things it can do is limited to tracking user location, given Apple also disabled turning off location sharing
- Such a stupid move, I’d bet that it’ll be withdrawn quietly.
by spoaceman7777
0 subcomment
- So, basically, this is just SIM card functionality for the age of eSIMs?
A lot of people in this thread seem unaware of what SIM cards actually are and do.
- I don't get it. Don't many if not most of these scams originate from India? Wouldn't it be better to stop the scammers directly?
- The government is afraid of its people.
- Does this mean visitors to India would also get this app installed on their phone as soon as they land in India?
- This is going to tie in with digital ID. Obviously the Indian government has never been corrupt or abusive.
by hereme888
1 subcomments
- As "totalitarian" as it sounds, it actually makes sense that India's govt had to take such drastic steps. Telecom providers and smartphone manufacturers have criminally refused for decades to protect end-users, because it makes them money.
Govt can't have their population at large being scammed by criminals and do relatively nothing about it. It's a huge economic and productivity drain people seem to have "accepted as normal".
So how do you not shut down and arrest these greedy international corporations, which would disrupt a country's infrastructure, despite ongoing warnings? Force them.
To me it's akin to the US govt mandating software that allows users to report any and all spam, fully traceable to criminals and providers, whom the govt could prosecute/heavily fine 100% of the time. Dangerous 2-edged sword, but if takes down that despicable scam industry, later it can transition to a law mandating the same protection but in a privacy a preserving manner.
- Does it apply to iPhones manufactured to India, which are meant for export to other countries?
- Too bad, 90% traffic they will monitor would be porn.
- Is this going to be a requirement for BRICS member countries?
- Totalitarianism is a form of class warfare. Make class warfare M.A.D.
by elia_is_me
0 subcomment
- i thought 'india' here indicate china before i clicked in.
by SuperSandro2000
0 subcomment
- When do we find the first Critical CVE in it?
- Meanwhile the US has more than 4 different state owned cyber crime apps named after random things such as Google, Apple, Microsoft and Facebook, and many more. The kicker is they run all over the world.
Anyway, that doesn't in any way negate that this is shit for the people of India.
by melvinodsa
0 subcomment
- In wrong hands, this is a very dangerous tool.
by profsummergig
8 subcomments
- ref: "the new tobacco"
this last year i'm seeing very concerning behavior in students in the 14-20 range. complete addiction to their phones. very deep interests in things i was completely unaware that they existed. similar to how when i started noticing anime girlfriends/waifus in 2016.
about 40% are deep in discord communities where i literally cannot figure out a single sentence of what they're talking about.
if society doesn't do something, and soon, say goodbye to the cognitive ability of a large chunk of future generations.
by HackerThemAll
0 subcomment
- Soon in U.S.
For the safety and security of children, of course.
- DO NOT PRELOAD! DO NOT PRELOAD!!!
- OK: added to debloat list.
- >With more than 5 million downloads since its launch, the app has helped block more than 3.7 million stolen or lost mobile phones
Ah yes, so because someone has stolen MY phone, I should give up all my right to privacy and allow the government to have their claws in my phone.
Logic. What a silly point to make when 'findmyphone' services, which are OPT-IN litterally do the same thing.
by oldjim798
1 subcomments
- Honestly shocked it took this long for governments to start doing this; it seemed inevitable that governments would want all the data private entities have been enjoying.
More and more it seems like the benefits of being connected are not worth the cost of being so visible to so many hostile (state and non-state) actors
- What should have happened is that they should have forced mobile vendors to allow users to uninstall all apps. What actually happened is that they are asking for their app to be installed as well, sigh.
by user3939382
0 subcomment
- I can actually not have a phone like I don’t need one that bad if they want to make it a nightmare. I can go back to a dial tone.
by renewiltord
1 subcomments
- These things are more a factor of aggregate risk handling. As an example, if you have tuberculosis it is possible even in the US for the country to mandate that a doctor watch you take the treatment. Totalitarian? Authoritarian? A tool that could be used to force someone to have to show up to where a state-controlled authority could confirm that they are? Yes, all of these things could be words you could assign to that.
But societal combined risk is commonly handled in this way. In the US, if you employ someone you have to report that you paid them to a central federal government. Way to track someone? Surveillance state? All words you could use.
And the government previously restricted gambling and so on. The question isn't "why would a bad government do these things?". The question is "would a benevolent government do these things?" and "if so, why?". And the answer is quite straightforward, I think:
Someone in the government has observed that there is a great deal of cyber crime in India. A fairly uneducated population, with very high smart-phone penetration (85%+ apparently), and a large number of fraudulent actors that their federal government is unable to enforce against. So they're attempting to attack the problem where they can.
This is ultimately India. They don't need insidious "app on your phone" / stingray / any other sophisticated solution. The local politicians can manipulate local authorities to get your cell tower association data and SMS. And if they want your comms devices they will rubber-hose the secrets out of you.
Someone I know worked at a big FAANG. He's Indian so went back to Bangalore to see his ailing mother. One day he took an auto-rickshaw while wearing his FAANG sweatshirt. The driver took him to a makeshift jail where he, police officers, and a magistrate conspired to threaten the guy with prison unless he paid $10k. $10k is nothing to a FAANG engineer, so he paid up, was brought in front of court on some lesser charges and then had to pay a small fine (much less than $10k). And then he flew back to the West Coast and never returned to India. Trying to reason about this kind of place using the perspective of the West is meaningless.
I think it unlikely they're trying to use this as cyber-surveillance. India simply does not have the infrastructure necessary to do that at scale. And they have the infrastructure for the rubber-hose, and Indians wear their identification on their sleeve, so to speak. Names point to ethnic groups and castes. Primarily endogamous marriage means if you want to perform violence against groups you can simply spread out from one member of the family unit being visibly of that group.
Using an app to get access to someone's data there is sort of like using Heartbleed to get root on a machine on which you are in /etc/sudoers with NOPASSWD.
by spaceman_2020
0 subcomment
- the good news is that I'm personally on my last few years online. I don't think there's anything really worthwhile in this space to do as a contributor or even as a consumer
- When the hell do we start to build these products here again like it was just 20 years ago? And let's stop with "it's too expensive here...". For God's sake, these are products we use every minute of our lives.
Enough is enough...
- “The welfare of the people has always been the alibi of tyrants.”
- reminder - there's tech out there that enables reading your mind
by chloeburbank
0 subcomment
- "cyber safety"
by banjwoorri
0 subcomment
- [dead]
by rationalfaith
0 subcomment
- [dead]
- [dead]
- [dead]
- [dead]
- [dead]
- [dead]
by earlyreturns
0 subcomment
- [flagged]
- [flagged]
by Kanishk_Kumar
2 subcomments
- When Deep State is doing this through Google and Apple's backdoor, its okay. But when a democratically elected entity does this in its own region, they start getting lectures on freedom.
by WhereIsTheTruth
0 subcomment
- Sovereign tech stacks matter
Without domestic silicon or OS, you're forced to mandate bloatware that users can see
Real power operates at the silicon/firmware level, invisible, unremovable, and uncompromisable
This is a cringe move from India
https://www.centerforcybersecuritypolicy.org/insights-and-re...