- cross-posted to:
- android@lemmy.world
- cross-posted to:
- android@lemmy.world
cross-posted from: https://lemmy.world/post/14967490
Starting today, apps made by state and federal governments are getting a new government badge to help users better identify official apps.
The badge will first appear on over 3,000 apps for 12 different countries.
Oh good, now there’s a good list of what to avoid.
Depends, some of the government apps are actually pretty well done and you don’t want to end up with an unofficial ID card app that steals your identity. The German Ausweis App is a good example of a well done gov app.
btw, Ukraine’s Diia (дія) app is pretty good too and mostly open source (both backend and frontend components are fully open source, but document microservices which directly contact govt registeies in order to fetch the data are kept proprietary; they would be useless without proper authorization anyway though)
it also provides seamless authorization using managed keypairs (i.e. instead of using your own hardware keys to sign electronic documents, you can just use the app, which also provides a convinient oauth-like flow. Signing up for a bank account literally turns into a single tap, a face scan, and providing e.g. salary info etc)
I’ll take my ID in my physical wallet. Thanks very much. LOL. I get what you mean, though.
It provides the capability to authenticate yourself online, e.g. for banking services. It would also be able to prove to a website that you are over 18, without telling the website your birthday. I have yet to use it, but from a technical standpoint it’s pretty awesome.
Edit: to clear up some confusion that may exist: as far as I know the app provides the bridge between the chip in the ID card and the application that needs the authentication. No data needs to be stored in the app.
There’s an IRS app that will help you to know when you’ll receive a tax return if you live in the US. That’s useful.
Not to be a dick, but how/why is that useful? It’s not a package I need to physically go get or something. It’s deposited into an account (super fast if you do your taxes early). This also assumes I’m getting a refund.
Depends on who you are probably. But a poor person who’s only access to the Internet is via smart phone might beg to differ. This also might matter if you do taxes on paper rather than using an online service (paid or free). When you file digitally and supply a bank account you absolutely will receive a tax return pretty expediently unless you get audited. But if you file a paper tax return by snail mail and are expecting a check? Different story. What if they never received your return? What if it was lost in the mail? What if the check gets lost in the mail?
I will receive my tax return when I receive my tax return. If it was a website, I might consider using it. But an app? No, thank you. I’m good. A web browser is more sandboxed and has less permission than any app does.
You should sandbox your phone and assume the government may know everything that goes in it.
Pegasus and the like already shown it can be entered with no click zero days.
GrapheneOS May solve some of these since it is a hardened android and does not activate the USB until its unlocked with the PIN.
It is being done remotely, no need for USB.
I also have an app for tolls in my state, and the VA. I’m just pointing out that not all government apps are terrible and I can certainly understand why some people would want or need to use them.
no no everything the government does is bad and malware and spyware and not foss and you should install graphene