And I guess privacy and freedom activists especially in the field of mobilephones, might have interest in being proactive and proposing solutions at the edge of privacy protection, rather than letting others propose solutions that are not so good for privacy.
If others want to do it, I'm willing to participate in developing such an app.
Hi,
I'm wondering how much of non-free software is there in UBports?
I guess that there must be at least non-free firmware blob in the kernel, as only few distributions remove them ( e.g Debian, Trisquel, Pureos ). Are there also non-free drivers in the kernel for some devices? Are there other non-free software unrelated to the kernel installed by default?
I think it would be most interesting to have a most precise view on this question, since the free and open-source software argument is the main advantage of UBports against Android.
Also note that Replicant maintans a list of "Freedom and privacy/security issues" for each of its targeted devices. None of them is completly free of issues.
Thank's in advance for your reply!
PIerre.
@pparent This is not a good idea to do.
No disrespect, but I think this is why I will choose pureOS in the long run, whenever I receive the phone and it is usable.
As users I want to be able to do the same things we can do on our computer, and be in control of our device, without being artificially limited, and not being sandboxed into a container. Otherwise I would use Android!
Thank's a lot for the answer and for your work!
Just to let you know that I changed my mind about this kind of app after reading this document (in french), showing many security problems inherent to any app like this:
Just to let you know that I changed my mind about this kind of app after reading this document (in french), showing many security problems inherent to any app like this:
@magdesign
Yes yes I tend to agree that the we should not exaggerate gravity of covid-19. But this question of app is not only covid-19 but also any possible future epidemic. Imagine tomorrow we face a similar virus but it kills 50% of people infected, or worse 90%, would you really say we should not use such an app, even though it is harmless for privacy?
Also it is always quite easy to say this kind of things about natural selection, when ourselves face a low probability of death (because we're young, that's my case, I guess it's yours), and others face a way higher probability. We might not say the same thing if we were facing death directly. And also it's not only a question of dying, but also dying in terrible conditions, if heath systems are overwhelmed. We have been habited not to face this anymore, these last decades.
And also do not forget that this app would not only save lives or give us security, but help us get back our freedoms, freedom to go out, and to meet people, while we are already confined.
@magdesign I've actually switched to ubports from flip phones, I never used Android for privacy and freedom reasons. And I'm looking forward to getting rid of Android blobs, with pinephone and/or librem5.
But think of one thing: If you had a notebook in paper and every-time you approach someone you note his name in it, in case you have to warn people you where in contact with, in case you are sick. But none else than you have access to that notebook. Would you find this problematic?
The app I described, is basically that except that it is automatic, and more privacy-friendly, because I don't actually note the name of the person, but a random string that only the associated person knows it is associated to him.
And I guess privacy and freedom activists especially in the field of mobile phones, might have interest in being proactive and proposing solutions at the edge of privacy protection, rather than letting others propose solutions that are not so good for privacy.
And I guess privacy and freedom activists especially in the field of mobilephones, might have interest in being proactive and proposing solutions at the edge of privacy protection, rather than letting others propose solutions that are not so good for privacy.
If others want to do it, I'm willing to participate in developing such an app.
Just to make things clear it seems possible to build an app that would be usefull for contact tracing concerning covid-19 (or any other future epidemic), without being at all a threat for privacy. And it is quite simple, and we can imagine many methods. Here is a simple example of a method that I think would work:
Suppose that 2 nearby device can exchange messages wireless probably with bluetooth, but we could also imagine wifi in theory. They should only exchange this message not any other info (We should check that mac addresse are not a privacy problem, they should be regularly changed randomly.)
Whenever a nearby contact is made, between 2 devices, both devices generate a random string (RS) and exchange it with the neighboor. Both record in their local memory the locally-generated RS, and the remote received RS, and the corresponding date (not the time), and nothing else. It's kept only locally not sent to anybody else.
RS that are too old (>14 or 21 days) are automatically erased.
If someone is detected positive, with his approval, all RS remotely received are published anonymously in a central server, to alert people.
Now the person who generated a RS corresponding to a contact with an infected person can know he was in contact with an infected person (simply by consulting the public server and checking if one of its own RS is there or not). But only him can know, nobody else. And no private data is disclosed!
I really do hope things are going to go towards something like this, and if so that we could have a compatible app for Ubports.
I really hope that what will be massively used will be FOSS, and veritably harmless to our privacy. In that case to me this is an issue that we cannot use it, if it is privacy protecting.
Just to make things clear it seems possible to build an app that would be usefull for contact tracing concerning covid-19 (or any other future epidemic), without being at all a threat for privacy. And it is quite simple, and we can imagine many methods. Here is a simple example of a method:
Suppose that 2 nearby device can exchange messages wireless probably with bluetooth, but we could also imagine wifi in theory. (We should check that mac addresse are not a privacy problem, they should be regularly changed randomly.)
Whenever a nearby contact is made, between 2 devices, both devices generate a random string (RS) and exchange it with the neighboor. Both record in their local memory the locally-generated RS, and the remote received RS, and the corresponding date (not the time), and nothing else. It's kept only locally not sent to anybody else.
RS that are too old (>14 or 21 days) are automatically erased.
If someone is detected positive, with his approval, all RS remotely received are published anonymously in a central server, to alert people.
Now the person who generated a RS corresponding to a contact with an infected person can know he was in contact with an infected person (simply by consulting the public server and checking if one of its own RS is there or not). But only him can know, nobody else. And no private data is disclosed!
I really do hope things are going to go towards something like this, and if so that we could have a compatible app for Ubports.
Hi,
As you know one option studied to fight covid-19 is contact tracing. It may at first appear as a privacy-violating measure. However I've hear that some people have worked on a design that is privacy-protecting, with all the data kept locally only and use of encryption to make sure that no private data is leaked at no stage of the process. It seemed quite convincing to me.
However one thing I'm afraid is that if such an app is developed, and is fully privacy-protecting, it may not be available for ubports.
Any thought on that?
Thank's a lot for the answer and for your work!