sfpibx
Re:Dissection of COVIDSafe (Android): Australian government's contact ...
on Monday April 27, 2020 @03:44PM (#22999224)
“Give them a few weeks to clean up code and release it (which is very normal) ”
In the world of security critical systems, this is completely abnormal.
Re:Dissection of COVIDSafe (Android): Australian government's contact ...
on Sunday April 26, 2020 @09:16PM (#22991982)
The mobile app could be just the tip of a very big iceberg. We need the server side code.
Re:Dissection of COVIDSafe (Android): Australian government's contact ...
on Sunday April 26, 2020 @09:14PM (#22991970)
Non scientist here but I’ve been harping on about the same thing. Someone can cough this virus into my face in a matter of seconds. It would appear this 15 min contact duration minimum is perhaps based on outdated data and knowledge of transmissibility.
Re:Dissection of COVIDSafe (Android): Australian government's contact ...
on Sunday April 26, 2020 @08:35PM (#22991737)
Deletion is not enough. Destruction is instead required.
They need to release their server side code as the mobile app could be just the tip of a very big iceberg.
They should also provide details of the platform ecosystem and how it’s secured; trust boundaries, IAM, PAM, audit, etc.
Point being that Snowden is right when he warns that the architecture of oppression is being built in the name of COVID-19.
We need a tracing system that can only be used to serve the people, and not some wannabe tyrants.