News for hackers. Stuff that matters.
Re:Google to require developer verification to install and s... by dhx on Monday August 25, 2025 @07:37PM (#45020524)
As an example of government regulation driving this change, see [1].

This regulation of NSW, Australia considers rooted devices with extra non-Google/non-Apple approved security features such as a duress/wipe PIN (a standard feature of GrapheneOS[2]) as a "dedicated encrypted criminal communication device". How the device is being used doesn't matter. It's how it _could_ be used.

[1] https://classic.austlii.edu.au/au/legis/nsw/consol_act/ca190...

[2] https://grapheneos.org/features#duress

Re:Google to require developer verification to install and s... by femto on Monday August 25, 2025 @07:46PM (#45020582)
I don't know that it's that simple. Further down that section (1920) in reference [1] reads

"(3) A dedicated encrypted criminal communication device does not include-- (a) a device if-- (i) the device has been designed, modified or equipped with software or security features, and (ii) a reasonable person would consider the software or security features have been applied for a primary purpose other than facilitating communication between persons involved in criminal activity to defeat law enforcement detection,"

It's not automatic: depending on what a reasonable person thinks and the definition of criminal activity.

Re:Google to require developer verification to install and s... by dkarl on Monday August 25, 2025 @07:59PM (#45020654)
> applied for a primary purpose other than facilitating communication between persons involved in criminal activity to defeat law enforcement detection

Does the jurisdiction matter? For example, if an activist was using a device to do things in another country that would be legal in Australia but were crimes in the other country.

Re:Google to require developer verification to install and s... by ViscountPenguin on Monday August 25, 2025 @08:46PM (#45020955)
I doubt a judge would interpret the law that way.
Re:Google to require developer verification to install and s... by ekidd on Monday August 25, 2025 @09:32PM (#45021259)
I mean, in my country, it's increasingly unclear to me whether things like "loudly criticizing the executive branch" are now considered criminal. Recent executive branch statements on this issue seem to indicate that they may consider some critics criminal just for being critics. But it's hard to be sure. And so far, every critic they've threatened to arrest has also been accused of committing other crimes.

So "the government only considers a duress PIN illegal if it is used to facilitate crime" seems like a potentially tricky standard to apply.

Re:Google to require developer verification to install and s... by wredcoll on Monday August 25, 2025 @09:42PM (#45021326)
I love how this statement could apply to so many different countries right now!
Re:Google to require developer verification to install and s... by eviks on Monday August 25, 2025 @10:54PM (#45021779)
> depending on what a reasonable person thinks

But this is just legal fiction, so not a barrier to "automatic"

Re:Google to require developer verification to install and s... by meltyness on Monday August 25, 2025 @08:47PM (#45020960)
This is uncanny and worryingly specific, and I'm not a lawyer, but if you're not already under suspicion of being a criminal, then installing graphene doesn't match this definition I think
Re:Google to require developer verification to install and s... by bandrami on Monday August 25, 2025 @09:10PM (#45021121)
"This regulation will only apply to people who are already criminals" is a line that has never held
Re:Google to require developer verification to install and s... by lucb1e on Monday August 25, 2025 @09:34PM (#45021269)
Suspect, they wrote, and that happens all the time. If you go into a store on the way home from work, and 99 days this works fine but the 100th day they want to look in your bag, but you can't show them confidential drawings of the Google Pixel 14 Max that you carry as part of your work, now they'll think you really did steal something and you went from no suspicion (spot check) to definitely a suspect and new things start to apply to you, e.g. if you leave without resolving the suspicion the police might have grounds to enter your house or search you when you walk out next time. The suspicion is based on being a suspect, not on any actual evidence (nobody saw you put anything in your bag)
Re:Google to require developer verification to install and s... by meltyness on Monday August 25, 2025 @10:05PM (#45021467)
I mean, you don't really have to speculate about what this is for, it's for an authority providing for lawful search, it seems pretty well-scoped, and similar to any old search warrant, which is not a new thing, really https://classic.austlii.edu.au/au/legis/nsw/consol_act/deccd...

Basically, they're not really setting up for a blanket ban on personal security features, that interpretation is obviously catastrophizing. Not that there aren't hamfisted laws somewhere like this, but NSWs implementation seems OK I guess

Re:Google to require developer verification to install and s... by ekianjo on Monday August 25, 2025 @10:11PM (#45021516)
We have mass surveillance already in all 5 eyes countries that assumes that anyone can be a criminal at all times.
Re:Google to require developer verification to install and s... by germandiago on Monday August 25, 2025 @08:59PM (#45021050)
At the pace of regulations we have, one day everything will be forbidden and we will all be criminals just for protecting our own wealth or security from these... yes, from these mafias.
Re:Google to require developer verification to install and s... by rixed on Monday August 25, 2025 @11:15PM (#45021891)
And we will all rationalise it and believe it's normal and has always been like that.
Re:Google to require developer verification to install and s... by germandiago on Monday August 25, 2025 @11:29PM (#45021959)
Sad but true for so many people.
Re:Google to require developer verification to install and s... by stevefan1999 on Monday August 25, 2025 @10:12PM (#45021523)
I could use a knife to chop meat, not people; I could use a car to commute, not as a high speed bullet; I could use a gun to eliminate pests, not to kill people. Just because I can use something to do something nefarious doesn't mean it should be banned, of we should not use Internet at all because it facilitates scammers.

It is always the human mind that dictates the action, not the tool. It is futile to try and ban the tool, and I bet 100% they knew that.

Re:Google to require developer verification to install and s... by positron26 on Tuesday August 26, 2025 @05:02AM (#45024085)
And the problems of government regulation are why we need empowerment through good open technology, not the protection of the other side of the over-concentrated power see-saw.