Post #2802739

>India proposes requiring smartphone makers to share source code **with the government** and **make several software changes** as part of a raft of **security measures**. How does that sound promising at all? Especially when initiated by a government, previously having attempted to enforce government spyware, to be installed on all consumer smartphones. The following excerpts are from [India's proposed phone security rules that are worrying tech firms](https://www.reuters.com/world/china/indias-proposed-phone-security-rules-that-are-worrying-tech-firms-2026-01-11/) >Devices must store security audit logs, including **app installations and login attempts, for 12 months**. >Phones must periodically scan for malware and identify **potentially harmful applications**. Defined to be **potentially** harmful by who? Right. >Phone makers must notify a government organisation before releasing any major updates or **security patches**. We cannot approve of the security patch just yet, as we must first extensively exploit the vulnerability... >Devices must detect if phones have been **rooted or "jailbroken"**, where users **bypass built-in** security **restrictions**, and display continuous warning banners to recommend corrective measures. >Phones must permanently **block installation of older software versions**, even if officially signed by the manufacturer, to prevent security downgrades.