Re:Massachusetts health notifications app installed without ...
by IncRnd on Saturday June 19, 2021 @01:10PM
(#27562262)
That's not the behaviour of what happened here, where an app was downloaded without user initiation or intervention. There was no authorization from the user of the actions that were taken by Google or the app's vendor.
[ Parent
| on HN ]
Re:Massachusetts health notifications app installed without ...
by dTal on Saturday June 19, 2021 @03:03PM
(#27563365)
From a technical standpoint, it is the same. The phone maintains a connection to a Google server and listens for "authorized" installation requests - where "authorized" means "authorized by Google". When you click "install" on the Play Store on your laptop, you're not talking directly to your phone (how would that even work?) - you're talking to Google, who then speaks to your phone on your behalf.
Re:Massachusetts health notifications app installed without ...
by IncRnd on Saturday June 19, 2021 @03:18PM
(#27563526)
> From a technical standpoint, it is the same.
Yes, of course, but this isn't a technical issue. Look at the webpage that this hn page references. When people say, "an app was installed on my device without my consent or knowledge," the exact method the device used to listen isn't important.
The first issue is that Google software allows non-authorized software installations. The second issue is that a government forced the installation of the app. The technical specifics are just implementation details.
Re:Massachusetts health notifications app installed without ...
by dTal on Saturday June 19, 2021 @03:26PM
(#27563602)
This subthread is about the technical issue. The root comment asks "the real question is what mechanism allows them to push a random app to some phones?".
Re:Massachusetts health notifications app installed without ...
by IncRnd on Saturday June 19, 2021 @05:30PM
(#27564633)
From what you've written, it appears that you are guessing as to the implementation details that correspond to the mechanism for pushing random apps to phone, which is in this case means un-authenticated apps. There may be an entirely different method used than the standard push method from selecting an app on the website.