World news and discussion on TalkFuse.
Apps targeted at US troops contain Chinese and Russian code
A study by researchers at Purdue University, the US Military Academy at West Point, and Florida International University has found that more than one in eight mobile apps marketed to US military personnel contain software built by companies in China, Russia or other nations, fuelling concerns that adversary governments could use the code to track where troops live, work and deploy. This follows an April admission from US Central Command that adversaries have exploited commercial location data to target American personnel in the Middle East, marking the first official confirmation that troops in an active conflict zone have been surveilled through the data-broker industry.
The researchers examined more than 220 military-focused apps, from uniform guides to banking and dating apps, sourced from Google Play and military subreddits. They found that 64% contained third-party tracking code (SDKs), 40% collected or shared more data than disclosed in app store listings, and about 7% carried code from nations deemed adversarial by the Pentagon, including Huawei's HMS Core, found in twelve apps, and Russian firms using the Yandex ad service. Google and Facebook remained the most common SDK sources overall, though 76 distinct third-party providers were identified in total, spanning China, Russia, Israel, India, Germany and elsewhere.
In short
- One in eight military-targeted apps contain Chinese or Russian code
- 64% of 220+ apps studied carried third-party tracking software
- Adversaries have already used such data to target US troops abroad
Steelman: both sides, in good faith
The strongest fair case each way — we don't pick a winner.
The case for
The Pentagon itself has confirmed that US troops in active combat zones have been targeted through commercial location data, establishing a concrete security threat that adversary nations are actively exploiting. The presence of code from countries officially designated as adversarial in apps specifically designed for military users represents an unacceptable risk, especially when that code could facilitate tracking of personnel in conflict zones. Precautionary restrictions on foreign-origin code in military-targeted applications represent a reasonable security measure proportionate to the established threat and consistent with how other government agencies protect sensitive users.
The case against
The nationality of code is not the fundamental security vulnerability; the actual problem is commercial data brokers selling location information and poor app store vetting practices, neither of which is solved by restricting code from particular countries. International collaboration in software development is standard, with developers from Israel, Germany, and India also present in the study, yet imposing nationality-based restrictions would be both impractical to enforce and harmful to app functionality that troops depend on. Instead, the focus should be on mandatory transparency about data practices, stricter permission models, and addressing the commercial surveillance ecosystem that enabled the CENTCOM-confirmed targeting in the first place.
Explained simply
Military personnel regularly use standard mobile applications for everyday activities such as banking and dating. These apps typically include code written by third-party companies that track user behaviour and collect personal information, a common industry practice. Some of this third-party code comes from companies based in countries deemed adversarial by the United States, including China and Russia.
Location data is particularly sensitive because apps can collect and share where users are located. If foreign adversaries could access the location data of American military personnel, they could track where troops are stationed, where they train, and where they deploy. Such information could pose serious security risks to individual service members and military operations, particularly for personnel in combat zones.
The US military officially confirmed in April this year that foreign adversaries have already exploited commercial location data to monitor American troops in the Middle East. This revealed that the threat to military personnel is not merely theoretical but has actually occurred in real conflicts.