News for hackers. Stuff that matters.
Re:NHS Covid-19 app update blocked for breaking Apple and Go... by cameronh90 on Monday April 12, 2021 @06:21AM (#26777818)
Irrespective of ones own feelings about this particular app: isn't it interesting that Google and Apple have the power to collect all our location data, but can refuse our democratic governments access to that data even on a voluntary basis?
Re:NHS Covid-19 app update blocked for breaking Apple and Go... by tgsovlerkhgsel on Monday April 12, 2021 @06:44AM (#26777950)
In this specific case, I'm really glad they're exercising their power, because they seem to be doing it in the best possible way, and have forced governments to do the right, privacy-preserving thing.

And I think having this power is OK - nobody should be forced to help the government implement something unethical. There may be scenarios where this goes horribly wrong, but the contact tracing framework is a case where it went perfectly right.

Yes, the QR-checkin feature is something where an exception could make sense, but given what it would pave the way for, I'm glad they keep the rules strict.

Re:NHS Covid-19 app update blocked for breaking Apple and Go... by llimos on Monday April 12, 2021 @07:12AM (#26778087)
> nobody should be forced to help the government implement something unethical

Nobody is forced to install the app at all (at least in the UK's case).

And if they do, they're not forced to share their location anyway.

On the other hand, anyone who has an Android phone is forced to share tons of data with Google. And the cost of not having one is much higher than the cost of not having the government's app.

Re:NHS Covid-19 app update blocked for breaking Apple and Go... by RossM on Monday April 12, 2021 @08:11AM (#26778482)
> Nobody is forced to install the app at all (at least in the UK's case).

Unfortunately, that's not quite right. Citing the latest rules:

> The rules on what you need to do when a group enters your venue have changed. You must ask every customer or visitor to scan the NHS QR code using their NHS COVID-19 app, or provide their name and contact details, not just a lead member of the group. [0]

[0] https://www.gov.uk/guidance/maintaining-records-of-staff-cus...

Delving into the rules, it appears this applies to all sit-in venues, while takeaway customers are exempt. A paper-based system should be available, if you trust the business to handle your data responsibly (or forge fake data if not).

This morning at a cafe I was asked to scan the QR code "or we can't serve you" for a takeaway order. Clearly some misunderstanding, and I didn't press about a paper-based list as I hadn't read the details myself. Hopefully it's an isolated incident, but it wouldn't surprise me if there was some simplified comms (/FUD) about "just get customers to scan the code".

Re:NHS Covid-19 app update blocked for breaking Apple and Go... by cassianoleal on Monday April 12, 2021 @08:29AM (#26778622)
> or provide their name and contact details

There are 2 alternatives to installing the app:

- providing your details; or - not entering the venue.

Seems correct that nobody is forced to install the app.

Re:NHS Covid-19 app update blocked for breaking Apple and Go... by makomk on Monday April 12, 2021 @09:30AM (#26779175)
Unfortunately, Google and Apple have effectively made it impossible to use the paper-based details in order to contact people and tell them to self-isolate if someone who used the app to check in tests positive by blocking this.
Re:NHS Covid-19 app update blocked for breaking Apple and Go... by tgsovlerkhgsel on Tuesday April 13, 2021 @12:27PM (#26794822)
I'm talking about tech companies being forced to help governments distribute large scale mass surveillance tools.
Re:NHS Covid-19 app update blocked for breaking Apple and Go... by ircshotty on Monday April 12, 2021 @06:30AM (#26777862)
Can't speak for Google's case - but Apple certainly goes to great pains to make it clear they don't collect location data on users - it's left on the user's device.

Isn't it interesting that it takes an international mega-corporation to take a more realistic and principled approach to user privacy than a democratic government.

Re:NHS Covid-19 app update blocked for breaking Apple and Go... by izacus on Monday April 12, 2021 @07:09AM (#26778072)
> Can't speak for Google's case - but Apple certainly goes to great pains to make it clear they don't collect location data on users - it's left on the user's device.

This is not true at all - as the researcher from Trinity College found out a bit of time ago, Apple collects people location data even if they're not logged into the Apple account: https://arstechnica.com/gadgets/2021/03/android-sends-20x-mo...

It's very clearly marked as being collected, so I'm not sure why this myth of Apple not collecting data is being perpetuated. It's seriously misleading actual iOS users about their privacy.

Re:NHS Covid-19 app update blocked for breaking Apple and Go... by spacemanmatt on Monday April 12, 2021 @06:46AM (#26777953)
If you're trying to make a case that Apple is my ally against government, I understand but disagree that Apple's privacy policy makes them my ally.
Re:NHS Covid-19 app update blocked for breaking Apple and Go... by dustinmoris on Monday April 12, 2021 @06:44AM (#26777947)
Well put! These are the moments which everyone remembers and refers back to when the next troll comes along and claims that Apple must allow third party app stores.
Re:NHS Covid-19 app update blocked for breaking Apple and Go... by simion314 on Monday April 12, 2021 @07:11AM (#26778081)
People are not trolls to demand the freedom to do whatever they want with their property and the freedom to pass laws to force Apple to permit that. The argument that if you do not like Apple or Goole use Linux can be reverse and if Apple or Google does not like EU or other market with anti-competitive laws they are very,very free not to do business there.

Should I remind the fanboys again that Apple gives China direct access to users data? Apple does not have principles but PR people with spreadsheets, you as an user could use your brain and not install a government app or don't give it permissions but if you want the freedom to delegate your thinking to a for profit company you don't have to demand the others give up their freedom too (I don't need X so you should not have it either )

Re:NHS Covid-19 app update blocked for breaking Apple and Go... by dustinmoris on Monday April 12, 2021 @07:16AM (#26778108)
> People are not trolls to demand the freedom to do whatever they want with their property

But you can do whatever you want as far as it’s possible by the product that you purchased. If you buy a Gameboy you wouldn’t sue Nintendo for not supporting you to play Playstation games on it, unless you’re a troll. Same thing for Apple products. Do with your iPhone what you want, but if you don’t like the Apple software on it then return your device or try to hack it or just buy another product which better meets your needs.

Re:NHS Covid-19 app update blocked for breaking Apple and Go... by simion314 on Monday April 12, 2021 @07:32AM (#26778211)
Sure, but I have the right to ask my government to pass new laws, so I don't beg Apple,Google, Facebook,Steam to be moral I ask my government to act for our common good and the giants are free to pack their bags and leave.

So when someone in EU asks for Apple to open up the US people should not trigger as much since they can keep their locked versions of the phones, nobody would force them to buy the unlocked EU version. Similar when banks were forced to reduce commissions on stuff, or mobile networks were forced to reduce big charges in EU the companies could ahve left, but the banks and companies are still here and not US citizen was directly harmed (maybe some will still cry that there are places where big money is not enough )

Re:NHS Covid-19 app update blocked for breaking Apple and Go... by dustinmoris on Monday April 12, 2021 @07:39AM (#26778248)
> Sure, but I have the right to ask my government to pass new laws, so I don't beg Apple,Google, Facebook,Steam to be moral I ask my government to act for our common good

But the electorate didn’t ask the government to collect location data on them, quite the opposite, so everything that you just said is literally fantasy cuckoo land argumentation. The reality is that people don’t want to be spied in by the government and people don’t want Apple to give the government that access and Apple is acting in the interest of everyone except a few people in parliament.

Re:NHS Covid-19 app update blocked for breaking Apple and Go... by jmkerr on Monday April 12, 2021 @08:08AM (#26778450)
The UK government has a democratic mandate to track infections, including by tracking visitors to areas of risk. The correct way to do this, and how most other governments do it is to provide two Apps. One for trivial QR/location based tracking, one for contact based tracking using the government-exclusive APIs.

The point is, the UK government made a technical error, we cannot extrapolate a democratic deficit or malice or anything like that from the information we have from this event.

Re:NHS Covid-19 app update blocked for breaking Apple and Go... by simion314 on Monday April 12, 2021 @07:45AM (#26778285)
I am arguing about the freedom to install what application you want, I don't demand you to install UK or other government app, if you would think for a moment this would mean that if your repressive government would force Apple to pre-install an app you would have the freedom to remove it(wow, to remove or change the defaults , such a revolution, think about it, and nobody forces you to do anything, you can keep all the Apple locks in place).
Re:NHS Covid-19 app update blocked for breaking Apple and Go... by cameronh90 on Monday April 12, 2021 @06:35AM (#26777896)
Apple definitely have a stronger case here, because as you say, they do more generally go to lengths to protect user privacy. That being said, they do use location-based advertising themselves.
Re:NHS Covid-19 app update blocked for breaking Apple and Go... by simion314 on Monday April 12, 2021 @07:13AM (#26778095)
Apple sent users data about what app their run and when they to their servers, and if I remember right the protocol was not secure enough. So either Apple does not care about privacy or they are incompetent not to implement that feature respecting the users privacy.
Re:NHS Covid-19 app update blocked for breaking Apple and Go... by mbalyuzi on Monday April 12, 2021 @06:29AM (#26777856)
I find it interesting that there seems to be a (wilful?) ignorance on the part of our government as to quite how big and powerful those corporations are.

There seems to be a bit of a "We're the government, so they'll have to do what we ask/tell" going on here I suspect. Probably coupled with incompetent IT project management that didn't bother to worry about the terms and conditions they signed up to, because that was too hard.

Re:NHS Covid-19 app update blocked for breaking Apple and Go... by spacemanmatt on Monday April 12, 2021 @06:47AM (#26777963)
After seeing what Facebook would let the Russian government do, who in the U.S. government would cross them unless they had momentum for an antitrust suit and that includes a Supreme Court ready to enforce a pro-citizen regime.
Re:NHS Covid-19 app update blocked for breaking Apple and Go... by spzb on Monday April 12, 2021 @07:02AM (#26778034)
> coupled with incompetent IT project management

The UK Government have made a pig's ear of pretty much the whole of their Covid response precisely because they refuse to engage with anyone who might actually know what they're doing. Everything's been outsourced at great expense to private companies operating on a wing and a prayer basis. Millions of pounds and many weeks' of time early on in the pandemic was wasted building a bespoke app that anyone with any experience told them wouldn't work. They finally were forced into an embarrassing climbdown where they had to accept the Google/Apple solution that they'd previously dismissed as not good enough.

The only thing they've done well is the vaccine programme because they actually let the National Health Service get on with it instead of letting some big outsourcing company flounder about expensively.

Re:NHS Covid-19 app update blocked for breaking Apple and Go... by makomk on Monday April 12, 2021 @07:16AM (#26778113)
Funny you should mention that. Literally the day that the UK rolled out the new app using the Google/Apple solution, the BBC suddenly forgot about the downsides of the old app and decided that its advantages over the new one were real after all. Even found a few experts to back them up, whereas before you'd think only the government considered it to have any advantage.
Re:NHS Covid-19 app update blocked for breaking Apple and Go... by mytailorisrich on Monday April 12, 2021 @06:37AM (#26777912)
> There seems to be a bit of a "We're the government, so they'll have to do what we ask/tell" going on here I suspect

That's the case (they are the government, they are in control, not Apple or Google), and certainly it should have been the case considering the situation. But that would have required the government to show some backbone and to use the power at its disposal. Instead it seems that the issue has been politically controversial so that the government decided not to act decisively on track and trace apps overall.

This is continuing with the controversy over "vaccine passports".

Re:NHS Covid-19 app update blocked for breaking Apple and Go... by Kim_Bruning on Monday April 12, 2021 @06:51AM (#26777981)
Just so long as we're clear that the final conclusion ought to be that no-one should have that data; rather than "ok, let's give it to the government, my next door neighbour, and the nearest cat as well then"
Re:NHS Covid-19 app update blocked for breaking Apple and Go... by WinstonSmith84 on Monday April 12, 2021 @07:20AM (#26778141)
Better the devil you know? The worse that Google may do with your data is targeting you with some personalised ads. As for Apple, they have probably even less interests with those... But your government is a different matter. Speeding, financial "crimes", ... evading Covid-19 restrictions :-)

Actually the scariest about Google / Apple collecting your data is ironically when a government entity may investigate you and request data from these companies

Re:NHS Covid-19 app update blocked for breaking Apple and Go... by nojito on Monday April 12, 2021 @06:47AM (#26777964)
The contract they initially signed said they won’t collect location data and now they want to collect data without signing a new contract.

They even acknowledge they made a mistake in the initial contract.

What’s the issue here?

Re:NHS Covid-19 app update blocked for breaking Apple and Go... by Hamuko on Monday April 12, 2021 @06:22AM (#26777824)
Apple and Google are just upholding their part of the agreement.
Re:NHS Covid-19 app update blocked for breaking Apple and Go... by cameronh90 on Monday April 12, 2021 @06:31AM (#26777868)
I'm not sure you can call it an agreement in any true sense. Apple and Google dictated the terms for accessing the Bluetooth hardware in the particular way required. Many governments around the world wanted more direct access to the hardware than Apple/Google have permitted, or (voluntary or otherwise) access to location data. Google and Apple said if you don't agree to these terms, you don't get to access anything.

I'm not necessarily saying that's wrong or right. You could argue they're defending the user's rights against the tyranny of the British government. Or you could say they're constraining the user's and their democratically elected government's rights to voluntarily use data to help end a pandemic, while at the same time profiting off it themselves.

Re:NHS Covid-19 app update blocked for breaking Apple and Go... by jjgreen on Monday April 12, 2021 @07:05AM (#26778049)
Governments do not have rights, they have power.
Re:NHS Covid-19 app update blocked for breaking Apple and Go... by Angostura on Monday April 12, 2021 @08:40AM (#26778698)
With Apple, at least you can opt out of all location info going to Apple