Live data from Hacker News

Dissection of COVIDSafe (Android): Australian government's contact tracing app

docs.google.com

21–30 of 271 posts

Re: Dissection of COVIDSafe (Android): Australian government's contact tracing app

#21
In my opinion, GPL is just another flavor of proprietary software and they should stop calling it free software or even opensource. Something like "Copyleft shared source" would make more sense to what it really is.

https://medium.com/@henvic/opensource-and-go-what-license-f6...

Re: Dissection of COVIDSafe (Android): Australian government's contact tracing app

#22

It's interesting to see these tracing app discussions crop up all over the world at the moment. In Germany it quite literally took dozens of public interest groups, two weeks of media attention, EU guidance and an open letter by hundreds of scientists to make the government switch from central data collection to an acceptable decentralised approach. The amount of misinformation put out by lobby groups in the process…

This app has been released by the government.

Re: Dissection of COVIDSafe (Android): Australian government's contact tracing app

#23
post #17

They said they would release source, but they've distributed the app first, so are in breach. They also said location would not be used, but android.permission.ACCESS_FINE_LOCATION Can't trust them on things that can be checked; therefore can't trust them on the things that that can't be checked.

Yes, I thought they said a few days ago that the source code will be made available for scrutiny but this now how its being reported: "Some, if not all, of the app’s source code will be made public."

Will Australians be able to build from source, install and connect to the central server (if any)? Or at least build and verify that what comes from the stores is what they built? If not, having the source code doesn't really matter much.

Re: Dissection of COVIDSafe (Android): Australian government's contact tracing app

#24
post #3

I would assume many GPL-licensed applications are GPL non-compliant. From a user's perspective, what are the most relevant problems when this is the case? (Excluding problems of philosophical nature that only free software geeks care about. No intention to be disrespectful; but the more practical the problems, the more likely it is that ordinary users can relate to them.)

These "problems of philosophical nature that only free software geeks care about" however, tend to quickly have very practical consequences, that many people care about, though. Only that many do not realize, that their problems would not have happened, if they had used free software. Most people are not even aware what free software means or that it exists.

So I would not mix the two issues of a problem being a real problem and people's lack of knowledge about the software licensing world or software in general. Just because people don't know what the actual root cause is, it does not mean, that the problem does not exist, or that the people will not care about consequences, that will affect them.

I will also say,that without idealism of many great people creating free software and little pockets of free society, we would not be, where we are today. A very general statement, I know, but I have no doubt in my mind, that the idea of making knowledge freely available and making sure it stays that way does help advance society in many areas.

Re: Dissection of COVIDSafe (Android): Australian government's contact tracing app

#25

They said they would release source, but they've distributed the app first, so are in breach. They also said location would not be used, but android.permission.ACCESS_FINE_LOCATION Can't trust them on things that can be checked; therefore can't trust them on the things that that can't be checked.

If you want to use Bluetooth on Android, you must ask for this permission. Bluetooth can be used to get high quality locations, also indoor.

https://developer.android.com/guide/topics/connectivity/blue...

Re: Dissection of COVIDSafe (Android): Australian government's contact tracing app

#26

They said they would release source, but they've distributed the app first, so are in breach. They also said location would not be used, but android.permission.ACCESS_FINE_LOCATION Can't trust them on things that can be checked; therefore can't trust them on the things that that can't be checked.

I don’t know if it’s true or not, but in the app it states it needs location access for Bluetooth.

Re: Dissection of COVIDSafe (Android): Australian government's contact tracing app

#27
post #6

It was interesting to hear a lead story on the nightly news talking about data privacy issues related to where the data was stored, saying that the data would be stored on “American company Amazon’s Servers”. No mention of Australian regions or GovCloud etc.

PM said it would be stored by Amazon in Australia.

Re: Dissection of COVIDSafe (Android): Australian government's contact tracing app

#28
post #14
post #9

Earlier quoted context omitted.

Uhm, no. Once your code contains GPL code that is not yours , it has to be GPL. Particularly in v3, where a number of loopholes were closed. You are free to attach further non-conflicting clauses to it, but the GPL of the original code must be respected. That’s the entire point of the GPL. Double-licensing requires you to have ownership of the entire codebase. At that point, you are licensing everything , so you’re f…

You're agreeing with the OP. The point they were making was that the Australian government could've gotten the source code under an alternative license by asking the sole copyright holder (which I believe is either the Singaporean government, or a contractor of the Singaporean government). But to be honest, as an Aussie I don't think our government is remotely competent enough to have considered the copyright license…

but these promises were quickly revoked

Were they? Where did you see that?

The Health Dept's response to the Privacy Impact Assessment's recommendation for release of the app's source code says as follows:

Agreed. The PIA and source code will be released subject to consultation with the Australian Signals Directorate’s Australian Cyber Security Centre

(https://www.health.gov.au/resources/publications/covidsafe-a...)

Now that 'consultation' might be a delaying tactic, but it's just as likely to be that the Dept. of Health has no idea of the implications of such release. It certainly doesn't suggest the revocation you claim.

Re: Dissection of COVIDSafe (Android): Australian government's contact tracing app

#29
post #16
post #6

It was interesting to hear a lead story on the nightly news talking about data privacy issues related to where the data was stored, saying that the data would be stored on “American company Amazon’s Servers”. No mention of Australian regions or GovCloud etc.

I was in a casual virtual meeting with a group of highly educated audience last week, and the question of whether or not we will install the app came up. As far as I know none of them has a background in computer science or anything related to software development. At least a third of the group immediately said that the won't install the app exactly for the “American company Amazon’s Servers” reason. I hadn't researc…

The concerns are still very much valid no matter region or GovCloud. What protects Australian citizens from powers granted to the US intelligence machine via the Patriot Act?

Re: Dissection of COVIDSafe (Android): Australian government's contact tracing app

#30

They said they would release source, but they've distributed the app first, so are in breach. They also said location would not be used, but android.permission.ACCESS_FINE_LOCATION Can't trust them on things that can be checked; therefore can't trust them on the things that that can't be checked.

On iOS it does not request location services.

In fact it doesn’t even appear on the list of apps when you go to Privacy -> Location services.

So appears to be an Android thing.

Post reply on HN