3 ms·
Just making something public is not enough though. The UK made their app public https://github.com/nhsx/COVID-19-app-iOS-BETA https://github.com/nhsx/COVID-19-
by flurdy 6y ago
Just making something public is not enough though.
The UK made their app public https://github.com/nhsx/COVID-19-app-iOS-BETA https://github.com/nhsx/COVID-19-app-iOS-BETA But app only, none of the server-side projects. Germany and Italy https://github.com/immuni-app https://github.com/immuni-app also made public some of their server-side components.
So there is no chance I will install the UK app as I have no idea what they will do with the data.
Obviously we cannot be sure the open sourced code is what their servers (and even app) actually runs but it gives more confidence.
- FeepingCreature 6y agoIf the public app and API works as-designed, then there is simply no information made available to be uploaded that could be personally identifying. So what the server is doing, in a way, doesn't matter. edit: The risk would be breaking into the backend and spamming exposure notifications. In that case, just take down the server and restore from backup.
- JoeSmithson 6y agoIf you can see what data is leaving your phone, and you don't trust the author, then I don't see what difference the server side code being OS makes...? There's not really anything they can do to comprehensively prove what they do with the data after it has been received. What are your concerns with the data it sends?
- bjarneh 6y ago> Just making something public is not enough though. I agree, certainly the server-side part of the project must be open for this to make sense.