4 ms·
IMHO, the fact that they app is unobfuscated and can thus be easily decompiled is even better than released source code since one can't be sure that the release
by metta2uall 6y ago
IMHO, the fact that they app is unobfuscated and can thus be easily decompiled is even better than released source code since one can't be sure that the released source code truly matches the actual build in the app store (unless they also go to the effort of having 'reproducible builds' - which would be quite impressive).
Also it's good to keep in perspective that the 'government' can already track people to a great extent, e.g. via cell towers and face recognition.
- m4rtink 6y agoIIRC, Fdroid rebuilds all the Android apps they host from source so they can be sure their source really matches the app. Actually, this is also what all good Linux distros do with all their software.
- lern_too_spel 6y agoI'm not aware of any Linux distros with 100% reproducible builds, though Debian is actively working on it and getting closer.
- doubleunplussed 6y agoThe distros can be sure without full reproducibility, since they built it. The users are still required to trust the distros built what they said they would though.
- sjwright 6y agoThe end user isn't the distro though.
- justinclift 6y agoIf they're not producing reproducible builds, they're not really being serious are they?
- jfoster 6y agoYou're seeking completely perfect solutions in a time of crisis where a "good enough" solution might save a lot of lives. Cut them some slack for trying to stem the harm of the pandemic. This situation affects every human.
- rstuart4133 6y agoYou seem to be implying a reproducible build is difficult. It can be, if someone hasn't done it before. But in this case fdroid has done it before, and publishes how to do it.
- barbs 6y agoIs there a way to implement reproducible builds for apps released on Google Play? Because that's where the vast majority of people will be downloading the app from. Also, I don't think there's any such solution for iOS.
- justinclift 6y agoReproducible builds are not a "perfect" solution. They, and the source code to build them, is the baseline requirement for any trust in what is being provided to people. --- The Australian government has a history of extreme incompetence with IT projects, using PR to try and effect adoption, then bullshitting about their failures. If there's evidence this project is going to be any different, then great. :) In the meantime, I'm judging them based on their historical actions.
- sfpibx 6y agoThe mobile app could be just the tip of a very big iceberg. We need the server side code.
- ifthenorelse 6y agoYes, and presumably the scores of bureaucrats / administrators / call centre operators in all States and Territories accessing the database will read / write to the server via a separate application. So we need the code for those users.