Hacker News Reader

I'm delighted to see that they have a vulnerability disclosure program for the app too [1].

That's fairly rare for the public sector - the UK Gov and NCSC are really leading on this sort of stuff.

[1] https://github.com/nhsx/COVID-19-app-iOS-BETA/blob/master/SE...

Agreed. I think the decision to go it on their own and not use Google/Apple's API is completely bone-headed and won't work at all. But given that they made that decision, everything else they've done seems pretty good.

Reply on news.ycombinator.com