Live data from Hacker News

TracePrivately – open-source sample app using Apple's contact tracing framework

github.com

1–10 of 45 posts

Re: TracePrivately – open-source sample app using Apple's contact tracing framework

#2
This is great. My only worry is that people shouldn't be allowed to self diagnose Covid-19. It will lead to trolls and cause tons of people self isolating unnecessarily, then eventually not using it once they realize the abuse. Maybe have the sever validate the diagnosis or have the person required to enter a code signed by the server's private key.

Re: TracePrivately – open-source sample app using Apple's contact tracing framework

#3
post #2

This is great. My only worry is that people shouldn't be allowed to self diagnose Covid-19. It will lead to trolls and cause tons of people self isolating unnecessarily, then eventually not using it once they realize the abuse. Maybe have the sever validate the diagnosis or have the person required to enter a code signed by the server's private key.

My understanding is that to mark yourself as Covid+, you’ll need a code from a health care provider.

I agree that allowing self diagnosis would ruin the entire system.

Re: TracePrivately – open-source sample app using Apple's contact tracing framework

#4
One note: the README lists one of the objectives as to "Remain open source for independent verification", but the project is licensed under the MIT license. Since it's being designed to be a turn-key solution for governments to use, wouldn't this allow them to distribute closed-source and (potentially maliciously) modified versions?

Re: TracePrivately – open-source sample app using Apple's contact tracing framework

#5
post #2

This is great. My only worry is that people shouldn't be allowed to self diagnose Covid-19. It will lead to trolls and cause tons of people self isolating unnecessarily, then eventually not using it once they realize the abuse. Maybe have the sever validate the diagnosis or have the person required to enter a code signed by the server's private key.

Or possibly they could take a picture of their diagnosis sheet?

Re: TracePrivately – open-source sample app using Apple's contact tracing framework

#6

One note: the README lists one of the objectives as to "Remain open source for independent verification", but the project is licensed under the MIT license. Since it's being designed to be a turn-key solution for governments to use, wouldn't this allow them to distribute closed-source and (potentially maliciously) modified versions?

But license it GPL, and governments won't use it at all...

Re: TracePrivately – open-source sample app using Apple's contact tracing framework

#7

One note: the README lists one of the objectives as to "Remain open source for independent verification", but the project is licensed under the MIT license. Since it's being designed to be a turn-key solution for governments to use, wouldn't this allow them to distribute closed-source and (potentially maliciously) modified versions?

But license it GPL, and governments won't use it at all...

A few private companies are allergic to GPL; there's no particular reason governments would be.

Re: TracePrivately – open-source sample app using Apple's contact tracing framework

#8

One note: the README lists one of the objectives as to "Remain open source for independent verification", but the project is licensed under the MIT license. Since it's being designed to be a turn-key solution for governments to use, wouldn't this allow them to distribute closed-source and (potentially maliciously) modified versions?

But license it GPL, and governments won't use it at all...

Oh they'll use it, but also ignore the license.

For example: https://github.com/OpenSC/OpenSC/issues/1992

Re: TracePrivately – open-source sample app using Apple's contact tracing framework

#9

Earlier quoted context omitted.

But license it GPL, and governments won't use it at all...

A few private companies are allergic to GPL; there's no particular reason governments would be.

> A few private companies are allergic to GPL; there's no particular reason governments would be.

Many large, public (as in publicly-traded) companies also have an aversion to GPL. Most enterprises that have a technology review board or legal review of software dependencies (aka any regulated industry) have a dislike for GPL in customer-facing services.

Re: TracePrivately – open-source sample app using Apple's contact tracing framework

#10
post #3
post #2

This is great. My only worry is that people shouldn't be allowed to self diagnose Covid-19. It will lead to trolls and cause tons of people self isolating unnecessarily, then eventually not using it once they realize the abuse. Maybe have the sever validate the diagnosis or have the person required to enter a code signed by the server's private key.

My understanding is that to mark yourself as Covid+, you’ll need a code from a health care provider. I agree that allowing self diagnosis would ruin the entire system.

A quick scan of the linked project suggests no such healthcare provider code is required. The source[1] suggests the flow is literally: "I Have COVID-19" -> "Are You Sure?" -> "Click OK", and that's that.

Anyways, I take this project to be a proof of concept. One would hope that governments will have healthcare professionals replacing the self-diagnosis step. * hope *

[1] https://github.com/CrunchyBagel/TracePrivately/blob/master/T...

Post reply on HN