Live data from Hacker News

Dissection of COVIDSafe (Android): Australian government's contact tracing app

docs.google.com

131–140 of 271 posts

Re: Dissection of COVIDSafe (Android): Australian government's contact tracing app

#131
post #91

Earlier quoted context omitted.

> In Germany it quite literally took dozens of public interest groups, two weeks of media attention, EU guidance and an open letter by hundreds of scientists to make the government switch from central data collection to an acceptable decentralised approach. Interesting. Do you have any pointer on the current German approach? I've been looking at the Robert protocol from Inria+Fraunhofer, and I'm not sure I like the c…

I guess they meant the DP-3T. See https://github.com/DP-3T/documents

I think so, and it seems this is very recent; I found that: https://www.reuters.com/article/us-health-coronavirus-europe... I hope France will follow.

Re: Dissection of COVIDSafe (Android): Australian government's contact tracing app

#132
Does this randomize the Bluetooth address too? I saw the README (from the dissection) mention a function that hides the name "so the other side only gets the address", which would defeat the entire purpose of rotating identifiers.

If it does randomize the Bluetooth address, does it use a separate identifier, and if so, does it rotate both at the same time? Otherwise, you can use an identifier that changes at time 1 to link the other identifier with its new version when it changes at a different time.

Re: Dissection of COVIDSafe (Android): Australian government's contact tracing app

#133

It's interesting to see these tracing app discussions crop up all over the world at the moment. In Germany it quite literally took dozens of public interest groups, two weeks of media attention, EU guidance and an open letter by hundreds of scientists to make the government switch from central data collection to an acceptable decentralised approach. The amount of misinformation put out by lobby groups in the process…

Do you have a source for the change of course? The CCC published an open letter[0] 2 days ago and I doubt anything changed over the weekend.

[0] https://www.ccc.de/en/updates/2020/corona-tracing-app-offene...

Re: Dissection of COVIDSafe (Android): Australian government's contact tracing app

#134
post #84

Earlier quoted context omitted.

For this specific case, it would be a grave mistake to license under anything, which does not contain a copyleft to make sure they release the source code as well and grant the 4 freedoms.

If I'm understanding this right, this app was written by the Australian government. Does the license for any libraries or other outside code they have included even matter? Generally, governments have what is called "sovereign immunity" when it comes to civil lawsuits. They can only be sued if they decide to allow it. Some countries waive their sovereign immunity for specific laws. For example US copyright law waives…

In this case, a country that isn't the US trying to push a "pirated" version of an app against the will of the country that originally developed it would likely be hindered by DMCA takedowns directed at the app store operators.

Re: Dissection of COVIDSafe (Android): Australian government's contact tracing app

#135

Earlier quoted context omitted.

> You can choose to get the virus - but that’s a pretty silly choice IMHO. And if you do, please stay home and don’t give it to anyone else. I don't think this is unreasonable. Most people on HN are under 65 and thus will only get mild symptoms and likely just be out for a few days. Considering we're all probably working remotely, it is also easy to not infect others. Alternatively, a government overreach can last de…

> Most people on HN are under 65 and thus will only get mild symptoms and likely just be out for a few days. This is the most likely case for people how are not vulnerable, but by no means a sure thing. Plenty of people without preexisting conditions have died or had to be hospitalized for days or weeks. Data is a bit difficult to filter, but as an example 4.5% of deaths in NY are from the 18-44 age group[1]. Presuma…

We have quite a lot of mortality data from different countries around the world at this point so I am a bit disappointed that people are still spreading these unsubstantiated claims. I seem to be posting this link a lot lately, but here are the latest Italian stats on their deceased:

https://www.epicentro.iss.it/en/coronavirus/bollettino/Repor...

Over 23,000 deaths and deaths under 30 have not even passed double digits yet. Only 1.1% of all deaths were people under 50; and that's deaths, not infected.

Re: Dissection of COVIDSafe (Android): Australian government's contact tracing app

#136
post #42

Earlier quoted context omitted.

Did you know that on iOS it doesn’t even ask for location, and on Android that’s required for Bluetooth? The source code will show you what is done with that (as others who have decompiled it already have shown it doesn’t use the location anywhere). You can choose to get the virus - but that’s a pretty silly choice IMHO. And if you do, please stay home and don’t give it to anyone else.

> You can choose to get the virus - but that’s a pretty silly choice IMHO. And if you do, please stay home and don’t give it to anyone else. I don't think this is unreasonable. Most people on HN are under 65 and thus will only get mild symptoms and likely just be out for a few days. Considering we're all probably working remotely, it is also easy to not infect others. Alternatively, a government overreach can last de…

This is nuts. A 30yo gets sick, infects a 60yo who goes to hospital and lands in ICU.

30yo then gets unrelated disease (chain saw accident. Burst appendix. Slipped in the shower.) Goes to hospital.

Repeat this often enough and suddenly you have a crisis in which there are not enough health care workers and beds, and now all ages are dying equally.

The idea that young people are not affected by this is just braindead stupid. Older people like me are directly affected; younger people indirectly. But we are all in this together.

Re: Dissection of COVIDSafe (Android): Australian government's contact tracing app

#137
post #35

I believe the government, PM and various ministers have said the code will be released. My sources also say exactly the same. They’re obviously operating with extreme urgency to get the app out. For you. Give them a few weeks to clean up code and release it (which is very normal) - but in the meantime, here are some tips: - Turn the HN angry mob mode off - it’s not helpful. We’re all in this together. - Commend the g…

Mike my concern as a scientist about this app is it may not help much at this point. If it is only picking up people you spent more than 15 minutes talking to it is going to miss a lot transmission events.

Do we have the contact tracing people to actually make use of this data? Even if we did I can’t see how we are going to avoid the need to interview each positive case to find all the people they came into contact with for less than 15 minutes. How much value is being added?

I am not installing it purely because I am social distancing and won’t be spending 15 minutes talking to anyone face to face outside of my immediate family.

Re: Dissection of COVIDSafe (Android): Australian government's contact tracing app

#138
post #35

I believe the government, PM and various ministers have said the code will be released. My sources also say exactly the same. They’re obviously operating with extreme urgency to get the app out. For you. Give them a few weeks to clean up code and release it (which is very normal) - but in the meantime, here are some tips: - Turn the HN angry mob mode off - it’s not helpful. We’re all in this together. - Commend the g…

> - Turn the HN angry mob mode off - it’s not helpful. We’re all in this together. I actually believe this is helpful. Just in any democratic setting you want different types of players. You want the "burn the system down" people, because they provide harsh critiques and don't hold back. You want the "okay, but I have reservations" people, because they will push forward but also consider what they are doing (and will…

[deleted]

Re: Dissection of COVIDSafe (Android): Australian government's contact tracing app

#139
post #42

Earlier quoted context omitted.

You can easily deny location data to games and people that are concerned about these apps will not share their location lightly. I have no app on my iPhone with the ability to use my location in the background, not even Waze or Google Maps. Also I don't care about deletion policies. That data should not be collected in the first place. I don't know about any specifics, but if the data isn't anonymized somehow, on the…

Did you know that on iOS it doesn’t even ask for location, and on Android that’s required for Bluetooth? The source code will show you what is done with that (as others who have decompiled it already have shown it doesn’t use the location anywhere). You can choose to get the virus - but that’s a pretty silly choice IMHO. And if you do, please stay home and don’t give it to anyone else.

You've really lost me with

> You can chose to get the virus

That wasn't your original argument and this does nothing to stop individual people getting the virus.

And the source code is worth nothing. The legal structure is already there to have the app changed without anyone being notified.

If they released an entire buildable set of source that I could use to build and install the app myself, maybe.

But that's about the only time I'd use this.

Re: Dissection of COVIDSafe (Android): Australian government's contact tracing app

#140
post #26

They said they would release source, but they've distributed the app first, so are in breach. They also said location would not be used, but android.permission.ACCESS_FINE_LOCATION Can't trust them on things that can be checked; therefore can't trust them on the things that that can't be checked.

I don’t know if it’s true or not, but in the app it states it needs location access for Bluetooth.

Yeah it's true https://developer.android.com/guide/topics/connectivity/blue...
Post reply on HN