Similar to UIDAI contact being added in India with consent
Massachusetts health notifications app installed without users’ knowledge
51–60 of 407 posts
Re: Massachusetts health notifications app installed without users’ knowledge
#52I think the real question is what mechanism allows them to push a random app to some phones? google play services is actively listening for remote installation requests? that's essentially a remote-code-execution backdoor to all android phones?
You can install apps from your browser on the PC since years. I think this also works on apple?
Not exactly. On the Android store you can choose exactly which device to install an application on.
For Apple as far as I know the most you can do is buy the app on desktop and, if the device is configured that way, it will receive the new app. This means it’s limited to new purchases and by the device’s settings.
Re: Massachusetts health notifications app installed without users’ knowledge
#53Earlier quoted context omitted.
That's some seriously flawed logic, and a much bigger issue, if you are correct. They should have tried an information campaign first. If that didn't work then clearly people voted against it, and they have no business going against that. If they think they know better than the people they undermine democracy.
Germany had a massive ad campaign for months without much success. The issue remains that people are lazy . That’s part of why microsoft bundling IE was banned, because 90%+ of users won’t go out of their way to install something.
I can't find those ads, but most likely the ads were uninformative so people did not find them to be instructive. Suggestion without reference to fact is the norm with those campaigns.
Re: Massachusetts health notifications app installed without users’ knowledge
#54How is this different from any update program, like windows update or Ubuntu update, installing software/upgrades whenever you get updates?
Re: Massachusetts health notifications app installed without users’ knowledge
#55I think the real question is what mechanism allows them to push a random app to some phones? google play services is actively listening for remote installation requests? that's essentially a remote-code-execution backdoor to all android phones?
There is a handy feature to do so https://android.gadgethacks.com/how-to/remotely-install-apps...
Thank you, I've even used this functionality some years ago but didn't remember it existed.
I've since de-googled my phone and sacrificed some apps that require google services, but this whole thing shows (to me) that it was the right decision.
Re: Massachusetts health notifications app installed without users’ knowledge
#56It is obvious that we need better legislation to deal with all the new possibilities that technologies have opened.
The installation of this app, even done with good intent, open a lot of questions on what should be possible or not to be done by government and corporations.
When you get a device with pre-installed, uninstallable, or auto-installed apps. What are the rules?
> "By enabling this service, you can be quickly notified if you’ve likely been exposed to the virus by another MassNotify user, allowing you to reduce risk to your loved ones, seek medical attention, and slow the spread in your community."
In this case it seems that the same goal could have been better achieved by SMS that do not depend on the brand of your phone. The dependency on proprietary app stores and OSs seems a risk for the continuation of a free and reliable communications.
The only thing that is impossible to achieve without an app is to allow the user to select contacts to whom send a notification. Corporations like Google, and Apple know the list of all your contacts. So, it seems that the intention of the app is to reduce friction and send notifications as easy and effortlessly as possible to avoid that procrastination causes people to delay the warning.
But, instead of the silent install the government could have spend money in advertisement campaigns to assure a correct amount of installations. It costs money, but, people pay taxes so the government can engage on this type of initiative at a scale. This could have been a very good alternative, even if it means increasing the budged. Medical emergencies are worth the investing.
Re: Massachusetts health notifications app installed without users’ knowledge
#57Earlier quoted context omitted.
... you trust Google ?
Everyone running android play services on their phone has to trust Google, right?
Many might not have a choice. If you need a SmartPhone and can’t afford an iPhone, you’re out of options. Most of the apps people actually need has to be installed via the Play Store.
You basically get a (more) privacy focus OS from a luxury brand or you get your OS from an advertising company.
Re: Massachusetts health notifications app installed without users’ knowledge
#58I think the real question is what mechanism allows them to push a random app to some phones? google play services is actively listening for remote installation requests? that's essentially a remote-code-execution backdoor to all android phones?
[deleted]
Re: Massachusetts health notifications app installed without users’ knowledge
#59Earlier quoted context omitted.
You can install apps from your browser on the PC since years. I think this also works on apple?
Not exactly. On the Android store you can choose exactly which device to install an application on. For Apple as far as I know the most you can do is buy the app on desktop and, if the device is configured that way, it will receive the new app. This means it’s limited to new purchases and by the device’s settings.
Ok, but my point was that on Android and iOS it is possible to install apps without touching your phone. This qualifies as remote code execution. You need your credentials for doing this, but google and Apple apparently don't need them.
Re: Massachusetts health notifications app installed without users’ knowledge
#60"...gives itself full permission to utilize all device functions" Is that right?
Where does it say that?
In one of the reviews[0]
The permission modal says this though:
- view network connections
- pair with Bluetooth devices
- full network access
- run at startup
- prevent device from sleeping
[0]https://play.google.com/store/apps/details?id=gov.ma.covid19...