HNHacker News
TopNewBestAskShowJobs

sfpibx

6 karma · joined April 27, 2020

submissionscomments
sfpibx··on Dissection of COVIDSafe (Android): Australian government's contact tracing app
“Give them a few weeks to clean up code and release it (which is very normal) ”

In the world of security critical systems, this is completely abnormal.

sfpibx··on Dissection of COVIDSafe (Android): Australian government's contact tracing app
The mobile app could be just the tip of a very big iceberg. We need the server side code.
sfpibx··on Dissection of COVIDSafe (Android): Australian government's contact tracing app
Non scientist here but I’ve been harping on about the same thing. Someone can cough this virus into my face in a matter of seconds. It would appear this 15 min contact duration minimum is perhaps based on outdated data and knowledge of transmissibility.
sfpibx··on Dissection of COVIDSafe (Android): Australian government's contact tracing app
Deletion is not enough. Destruction is instead required.

They need to release their server side code as the mobile app could be just the tip of a very big iceberg.

They should also provide details of the platform ecosystem and how it’s secured; trust boundaries, IAM, PAM, audit, etc.

Point being that Snowden is right when he warns that the architecture of oppression is being built in the name of COVID-19.

We need a tracing system that can only be used to serve the people, and not some wannabe tyrants.