!nostupidquestions is a community dedicated to being helpful and answering each others' questions on various topics.
The rules for posting and commenting, besides the rules defined here for lemmy.world, are as follows:
Rule 1- All posts must be legitimate questions. All post titles must include a question.
All posts must be legitimate questions, and all post titles must include a question. Questions that are joke or trolling questions, memes, song lyrics as title, etc. are not allowed here. See Rule 6 for all exceptions.
Rule 2- Your question subject cannot be illegal or NSFW material.
Your question subject cannot be illegal or NSFW material. You will be warned first, banned second.
Rule 3- Do not seek mental, medical and professional help here.
Do not seek mental, medical and professional help here. Breaking this rule will not get you or your post removed, but it will put you at risk, and possibly in danger.
Rule 4- No self promotion or upvote-farming of any kind.
That's it.
Rule 5- No baiting or sealioning or promoting an agenda.
Questions which, instead of being of an innocuous nature, are specifically intended (based on reports and in the opinion of our crack moderation team) to bait users into ideological wars on charged political topics will be removed and the authors warned - or banned - depending on severity.
Rule 6- Regarding META posts and joke questions.
Provided it is about the community itself, you may post non-question posts using the [META] tag on your post title.
On fridays, you are allowed to post meme and troll questions, on the condition that it's in text format only, and conforms with our other rules. These posts MUST include the [NSQ Friday] tag in their title.
If you post a serious question on friday and are looking only for legitimate answers, then please include the [Serious] tag on your post. Irrelevant replies will then be removed by moderators.
Rule 7- You can't intentionally annoy, mock, or harass other members.
If you intentionally annoy, mock, harass, or discriminate against any individual member, you will be removed.
Likewise, if you are a member, sympathiser or a resemblant of a movement that is known to largely hate, mock, discriminate against, and/or want to take lives of a group of people, and you were provably vocal about your hate, then you will be banned on sight.
Rule 8- All comments should try to stay relevant to their parent content.
Rule 9- Reposts from other platforms are not allowed.
Let everyone have their own content.
Rule 10- Majority of bots aren't allowed to participate here.
Our breathtaking icon was bestowed upon us by @Cevilia!
The greatest banner of all time: by @TheOneWithTheHair!
I would bet that some devs could be persuaded by some governments, but I don't suspect that any major company would do that without MAJOR benefits to themselves.
Which means, yes, it's probably happened, and will again, and they were probably Chinese or Russian apps.
They could probably go directly to the app platform like Apple Apple Store or Google Play Store, I think Apple and Google has the signing keys to forcibly push an update (correct me if I'm wrong, but I'm pretty sure that's the case).
google does for sure. a few years ago they demanded all developers to hand in their keys in the pretense of efficiency
Probably. Though they would probably rather go through Apple or Google to do it.
Probably, but they don’t really have to. Exploiting the OS itself is way better.
Depending on the country Yes.
Australia for example has the Technical Access and Assistance laws for this specific purpose.
Now, consider Australia is part of Five Eyes that means US, NZ, UK, and Canada has this capability via proxy.
Android app dev here, i cant tell you what governments are capable of, but i can describe for you some of the complicating factors preventing them from doing this.
For one, to prevent impersonation, apps are cryptographically signed by the developer using a private key they never share with anyone (like a password), and the public key is sent to Google Play and the App Store so that they can verify the identity of the uploader. This prevents app store listings from being hijacked by rivals, competetors, hackers, pirates, foreign governments, and yes, their own government. So, any goverment cant just walk up and push a rogue update to the store.
For two, deploying app updates isn't my job, it's Google's and Apple's. In my opinion if the government wanted to hijack the supply chain, going directly to Apple or Google would be the way to do it. The narrowest group of people I can push updates to are the people who opted into alpha or beta versions. To target an individual, youd have to do it through Google or Apple.
For three,, my boss barely gives me enough time and resources to meet the company's own goals, let alone letting me clean up tech debt. The idea of a government that twists my boss's arm to force me to work for the government instead of the shareholders is kinda funny and nonsensical. I live in the USA, where shareholders are king. I bet that even if we went full toltalitarian this would never happen because of rich people backlash. So i dont think the hacking coming from inside a company would happen. Then again, i perhaps dont work for a juicy enough place to see how a government could solve this problem, *or maybe they would be stupid enough to incur the political expense anyway.
And last, money money money. Programmers are not cheap. Designing and dedicating and selecting targets for an attack isnt cheap. Hacking into a company to steal their private key isnt cheap, and could also be expensive in a political sense if the wrong people get pissed off aboit it.. If paranoia is what drives your question, then ask yourself, are you a high profile politician? A billionaire? A high profile leader of a movement like Martin Luther King Jr? Someone actually worth spending several millions of dollars on to spy on? If you're a simple petty theif or protestor than i wouldn't bother worrying about this.
*If you're worred about your personal data getting taken and spied on., your bigger worry is the browser you use and what data gets stored on servers for services you use. Those are waaaaaaaay less expensive to get into.
Tl;dr
So basically, id only worry about relying on apps owned by the government. Or the services you use that take your data to sell it to advertisers, because theyll give it to the government directly as well.
Could someone with a knife to your throat force you to sign and release software?
Yes, of course. The rest is just legal gymnastics