Hacker News Reader

Comment by hyperpallium | Hacker News Reader

They said they would release source, but they've distributed the app first, so are in breach.

They also said location would not be used, but

  android.permission.ACCESS_FINE_LOCATION

Can't trust them on things that can be checked; therefore can't trust them on the things that that can't be checked.

View on HN

If you want to use Bluetooth on Android, you must ask for this permission. Bluetooth can be used to get high quality locations, also indoor.

https://developer.android.com/guide/topics/connectivity/blue...

Yes, I thought they said a few days ago that the source code will be made available for scrutiny but this now how its being reported:

"Some, if not all, of the app’s source code will be made public."

Will Australians be able to build from source, install and connect to the central server (if any)? Or at least build and verify that what comes from the stores is what they built? If not, having the source code doesn't really matter much.

I think it would go a long way in establishing trust if they release the source code, even if you can't perfectly prove that the binaries are built from it. They would have to be outright lying if that wasn't the case.

On iOS it does not request location services.

In fact it doesn’t even appear on the list of apps when you go to Privacy -> Location services.

So appears to be an Android thing.

I don’t know if it’s true or not, but in the app it states it needs location access for Bluetooth.

Yeah it's true https://developer.android.com/guide/topics/connectivity/blue...

Reply on news.ycombinator.com