5 ms·

Is this one of the many examples of German government wasting taxpayer's money?

pantalaimon 6y ago
Yes. Especially since there is already a government funded app (whose developers also make a much more competent impression) which is scheduled to receive similar functionality as the Luca app with the next update.
- black_puppydog 6y ago
  And which doesn't have to plan for a business model post-pandemic.
  - lampe3 6y ago
    It does not need to. Its open source and funded by the government Its not run by a private company which only thinks about money.
    - weird-eye-issue 6y ago
      That was probably his point already
lampe3 6y ago
yes and its super easy to just create random valid qr codes: https://wolf128058.gitlab.io/schmudo2go/ https://wolf128058.gitlab.io/schmudo2go/ also they don't have any rate limit on the sms service... so anybody can build a loop and call the sms endpoint... More fails: - https://github.com/mame82/misc/blob/master/luca_traceIds.md https://github.com/mame82/misc/blob/master/luca_traceIds.md - https://lucatrack.de/ https://lucatrack.de/ - development private and public key in the repo ( not harmful but a bad sign) - more that i forgot
- read_if_gay_ 6y ago
  What do these QR codes do?
  - sReinwald 6y ago
    The QR codes let you "check in" at venues that use Luca to make contact tracing possible.
  - lampe3 6y ago
    These qr codes should only valid after you verified that you are an real person. So the health department could call you. This was done by SMS but the verification of an account does not check against that SMS verification but its just a simple else/if on the client.
simfoo 6y ago
Yes. This is what you get when incompetent officials jump on any offered solution that promises to make their awful track record of "digitalization" projects look better. Of course without listening to actual experts and instead looking for buzzwords.
- pantalaimon 6y ago
  Exhibit B: Ubirch and their 5 Blockchains https://www.heise.de/news/Digitaler-Corona-Impfpass-IBM-Ubirch-und-fuenf-Blockchains-5076161.html https://www.heise.de/news/Digitaler-Corona-Impfpass-IBM-Ubir...
  - thinkberg 6y ago
    An issue with the reporting is that the ubirch standard solution is confused all the time with the actual project. Especially since it is mostly guessing, not knowledge of the actual technology behind it.
    - tastroder 6y ago
      Can't really blame the reporting there imho. At the time that article was written they actively marketed towards the blockchain solution and the government side wasn't really forthcoming with public information. Luckily that changed a few days ago but this article in particular is from March 9th.
- dathinab 6y ago
  The absurd thing is like CCC mentioned the german covid app (state payed, kinda decentralized, very privacy respecting contact tracing app) does not only potentially cover some of the cases (if people are close to each other and the phone can detect it using Bluetooth tokens) but also seem to be getting a feature "to handle meetings" in a privacy friendly way.
martin_a 6y ago
May I present to you that the government spend over 430 million Euro for external consultants in the last year? That's just a raise of about 46% in comparison to 2019...

Yes. Especially since there is already a government funded app (whose developers also make a much more competent impression) which is scheduled to receive similar functionality as the Luca app with the next update.

black_puppydog 6y ago
And which doesn't have to plan for a business model post-pandemic.
- lampe3 6y ago
  It does not need to. Its open source and funded by the government Its not run by a private company which only thinks about money.
  - weird-eye-issue 6y ago
    That was probably his point already

lampe3 6y ago

yes and its super easy to just create random valid qr codes: https://wolf128058.gitlab.io/schmudo2go/ https://wolf128058.gitlab.io/schmudo2go/ also they don't have any rate limit on the sms service... so anybody can build a loop and call the sms endpoint... More fails: - https://github.com/mame82/misc/blob/master/luca_traceIds.md https://github.com/mame82/misc/blob/master/luca_traceIds.md - https://lucatrack.de/ https://lucatrack.de/ - development private and public key in the repo ( not harmful but a bad sign) - more that i forgot

read_if_gay_ 6y ago
What do these QR codes do?
- sReinwald 6y ago
  The QR codes let you "check in" at venues that use Luca to make contact tracing possible.
- lampe3 6y ago
  These qr codes should only valid after you verified that you are an real person. So the health department could call you. This was done by SMS but the verification of an account does not check against that SMS verification but its just a simple else/if on the client.

simfoo 6y ago

Yes. This is what you get when incompetent officials jump on any offered solution that promises to make their awful track record of "digitalization" projects look better. Of course without listening to actual experts and instead looking for buzzwords.

pantalaimon 6y ago
Exhibit B: Ubirch and their 5 Blockchains https://www.heise.de/news/Digitaler-Corona-Impfpass-IBM-Ubirch-und-fuenf-Blockchains-5076161.html https://www.heise.de/news/Digitaler-Corona-Impfpass-IBM-Ubir...
- thinkberg 6y ago
  An issue with the reporting is that the ubirch standard solution is confused all the time with the actual project. Especially since it is mostly guessing, not knowledge of the actual technology behind it.
  - tastroder 6y ago
    Can't really blame the reporting there imho. At the time that article was written they actively marketed towards the blockchain solution and the government side wasn't really forthcoming with public information. Luckily that changed a few days ago but this article in particular is from March 9th.
dathinab 6y ago
The absurd thing is like CCC mentioned the german covid app (state payed, kinda decentralized, very privacy respecting contact tracing app) does not only potentially cover some of the cases (if people are close to each other and the phone can detect it using Bluetooth tokens) but also seem to be getting a feature "to handle meetings" in a privacy friendly way.

martin_a 6y ago

May I present to you that the government spend over 430 million Euro for external consultants in the last year? That's just a raise of about 46% in comparison to 2019...