[clug] 'Tracetogether' App - First Dog suggests 'publishing' source might not be enough

Thu Apr 23 23:38:44 UTC 2020

I have a Xiaomi Pocophone F1. Since the day I turned it on I felt that the distribution, MIUI based on Android 9, was asking too much. It wanted me to agree to allowing Xiaomi access to my data. I refused. (My privacy is very important to me - I don't have a Google account, I use F-Droid and Aurora Store to download apps.) That's the main reason why I refuse to use Micro$oft and use Ubuntu instead  (I was a Sun system administrator back in the early 90s so have no idea how to administrate Micro$oft). 

When I upgraded to MIUI, Android 10, nothing would work without my granting permission for Xiaomi to access my data. I'd had enough. I switched to LineageOS 16.x (Android 9) without any Google services and recently to LineageOS 17.x (Android 10). That made me so happy that no one had access to my data. I will however, sell my data for $13 million, slightly negotiable, otherwise, hands off. I don't have to switch on location for Bluetooth. Some apps won't work but I just  find substitute apps or don't use them. I thoroughly recommend LineageOS for privacy reasons and it seems faster than MIUI. 

Anyway, to get back to the topic, no government is going to get my location, or any other, data via the Tractetogether app. If it becomes legislation and it's enforced then I'll switch off my mobile phone until the covid-19 pandemic is over. Too many people give up their privacy just for the convenience of accessing social media and other stupid apps. They say that they have nothing to hide, but it's the principle that matters and that attitude makes it even more difficult for we who are concerned about privacy. 

My two cents worth.

John. 

On 23 April 2020 6:02:05 pm AEST, Andrew Steele via linux <linux at lists.samba.org> wrote:
>Steve,
>
>Thanks for collating this list together.  I was wondering how long
>until
>this discussion would appear here.
>
>The question around location services is one that's bothered me long
>before
>COVID-19.  I feel it's almost a case of Google being too clever. 
>Possibly
>related to the trouble they got into a few years back for recording
>location data.
>
>As the FAQ states, they treat bluetooth and wifi as it can be used to
>track
>location if the location of the source of the wifi/bluetooth is known.
>They are doing the right thing treating it as a location service.
>
>I likewise get frustrated that I need to turn on location services
>every
>time I want to pair something via bluetooth.
>
>It would be good if location services were split with greater
>granularity
>like say: "wireless scanning" and "(GPS) location services".
>
>Andrew
>
>On Thu, Apr 23, 2020 at 5:10 PM steve jenkin via linux <
>linux at lists.samba.org> wrote:
>
>> Any comments on First Dog’s observations?
>>
>> What's the deal with the coronavirus tracing app? Cassandra the
>> Information Technology Wobbegong explains
>> <
>>
>https://www.theguardian.com/commentisfree/2020/apr/22/whats-the-deal-with-the-coronavirus-tracing-app-cassandra-the-information-technology-wobbegong-explains
>> >
>>
>>
>> For those playing along at home, some links below about
>’Tracetogether’
>> App & it’s “Blue Trace” protocol (and why on Android you need to
>allow
>> ‘location services’ for it).
>>
>> Software developers warns Australia against releasing coronavirus
>tracking
>> app
>> [suggest waiting till Google & Apple finish their version]
>> <
>>
>https://www.sbs.com.au/news/software-developers-warns-australia-against-releasing-coronavirus-tracking-app
>> >
>>
>> Anyone want to suggest ways the App & Protocol can be subverted by
>> malicious actors or “rogue” agents of Govt?
>>
>>
>> ==============
>>
>> On the privacy of TraceTogether, the Singaporean COVID-19 contact
>tracing
>> mobile app, and recommendations for Australia
>> <
>>
>https://eng.unimelb.edu.au/ingenium/research-stories/world-class-research/real-world-impact/on-the-privacy-of-tracetogether,-the-singaporean-covid-19-contact-tracing-mobile-app,-and-recommendations-for-australia
>> >
>>
>> 9 geeky myth-busting facts you need to know about TraceTogether
>> <
>>
>https://www.tech.gov.sg/media/technews/geeky-myth-busting-facts-you-need-to-know-about-tracetogether
>> >
>>
>> 6 things about OpenTrace, the open-source code published by the
>> TraceTogether team
>> <https://www.tech.gov.sg/media/technews/six-things-about-opentrace>
>>
>> FAQ’s - includes Q on ‘Location services’ needed on Android - fixed
>beacons
>> <https://tracetogether.zendesk.com/hc/en-sg>
>>
>> BlueTraceProtocol
>> Privacy-Preserving      Cross-Border Contact Tracing
>> <https://bluetrace.io>
>>
>> --
>> Steve Jenkin, IT Systems and Design
>> 0412 786 915 (+61 412 786 915)
>> PO Box 38, Kippax ACT 2615, AUSTRALIA
>>
>> mailto:sjenkin at canb.auug.org.au http://members.tip.net.au/~sjenkin
>>
>>
>> --
>> linux mailing list
>> linux at lists.samba.org
>> https://lists.samba.org/mailman/listinfo/linux
>>