COVIDSafe explained
COVIDSafe[4] [5] was a digital contact tracing app released by the Australian Government on 26 April 2020[6] [7] to help combat the ongoing COVID-19 pandemic.[8] The app was intended to augment traditional contact tracing by automatically tracking encounters between users and later allowing a state or territory health authority to warn a user they have come within with an infected person for 15 minutes or more.[9] To achieve this, it used the BlueTrace and Herald protocol, originally developed by the Singaporean Government and VMWare respectively,[10] [11] to passively collect an anonymised registry of near contacts.[12] The efficacy of the app was questioned over its lifetime, ultimately identifying just 2 confirmed cases by the time it was decommissioned on 16 August 2022.[13]
History
COVIDSafe first began development in late March, shortly after the Morrison government showed interest in Singapore's TraceTogether app.[14] Development of the app was publicly announced on 14 April 2020, with plans to release it for Android and iOS within a fortnight.[15] The app had a budget of over, of which went to Amazon Web Services (AWS) for hosting, development, and support.[16] The announcement was immediately met with concerns over the privacy implications of the app and confusion over its distribution. For many, it was unclear if the app would be a feature of the existing Coronavirus Australia app or completely separate.[17] [18] Adding to the confusion, many news reports used images of Coronavirus Australia in their articles,[19] [20] and the COVIDSafe website linked to the Coronavirus Australia apps for a short time after release.[21]
The app launched on 26 April 2020. However, there were early reports that some users had problems with the sign-up. For example, those who entered their phone number during sign-up received the following message: "Error verifying phone number. Please check your details and try again."[22]
Within 24 hours of COVIDSafe's release it had been downloaded by over a million people,[23] and within 48 hours more than two million.[24] By the second week more than four million users had registered.[25] Despite this, state and territory health authorities were not able to access data collected through the app as the health authority portal had not yet been completed.[26]
Accompanying the release, Peter Dutton, then Minister for Home Affairs, announced new legislation that would make it illegal to coerce one into submitting a contact report, even if a person had already registered with the app and tested positive for COVID-19.[27] [28] A determination, titled Biosecurity Determination 2020,[29] was put in place, with the Privacy Amendment (Public Health Contact Information) Bill 2020 being later introduced on 6 May 2020 to codify it.[30] [31] [32] The legislation further governs how data collected by the app will be stored, submitted and processed.
In early May 2020, the Senate Select Committee on COVID-19 held a public hearing on the app, focusing particularly on its effectiveness and privacy implications[33] [34] [35] and the source code for the app was released publicly.[36]
In mid May 2020, the Australian Chief Medical Officer announced that the app was fully functional.[37] The next day it was reported that the app had reached 5.7 million downloads, approximately 23% of Australia's total population.[38] [39] On 20 May 2020, data was accessed for the first time[40] following an outbreak at Kyabram Health in Victoria.
By mid June, over a month since the launch of the app, the app had yet to identify any contacts not already discovered through traditional contact tracing techniques,[41] [42] [43] strengthening growing concerns over the efficacy of the app.[44] [45] Adding to this, some estimates put the likelihood of the app registering a random encounter at just ~4%.[46] [47] [48] Concurrently, the Google/Apple exposure notification framework began rolling out to users,[49] with the Italian Immuni being the first app to make use of it.[50] [51]
In late June, following a "second wave" in Victoria sparked by family gatherings,[52] [53] [54] COVIDSafe data was accessed by contact tracers over 90 times.[55] [56] The app, again, was unable to identify undetected transmission.[57] At the same time, a COVID-19 positive protester who attended the Melbourne Black Lives Matter rally on 6 June 2020 was criticised in the media for having not downloaded the app.[58] [59] [60] Despite the identification of at least two further cases in attendance,[61] to date no transmission has been found to originate from the protests.[62] [63] [64]
On 20 July 2020, the government was criticised for contracting out part of the app's development and support to a company with ties to the Liberal Party.[65] Mina Zaki, the wife of the CEO of Delv Pty Ltd, was a Liberal Party candidate for the federal seat of Canberra in the 2019 election.[66] Delv was engaged after the initial release of the app to assist with development, and was also the primary developer of the Coronavirus Australia app.[67]
In a 22 July 2020 Sky News interview, Minister for Government Services Stewart Robert blamed the failure of COVIDSafe on the unwillingness of Apple and Google to modify their existing, globally deployed, Exposure Notification framework (ENF) to work with the app.[68] [69] ENF is an alternative, entirely incompatible, digital contact tracing protocol considered to be more reliable[70] [71] [72] at detecting contact traces than competing protocols. For the app to take advantage of the framework, either the framework or app would need to be almost completely rewritten.
On 1 August 2020, NSW Health announced the app had helped them trace new contacts. They accessed the app data on a coronavirus case and identified 544 additional people, two of whom tested positive to COVID-19.[73] By late October, the app had identified a total of 17 new cases.[74]
By 29 November 2020, the Digital Transformation Agency was reportedly considering incorporating VMWare's Herald protocol to improve performance and detection success rate.
On 19 December 2020, the Digital Transformation Agency announced the app had been updated to incorporate VMWare's Herald protocol, to improve app performance. The update reportedly helps address situations where communication between devices might fail, such as when the device is locked or the app is running in the background.
On 2 February 2021, the Digital Transformation Agency announced a new update enabling the app to display state and territory COVID-19 case statistics. The update reportedly allowed users to change their registration postcode from within the app, which previously required reinstallation.[75]
It was announced on 26 February 2021 that the app had been updated to feature state and territory restrictions, as well as improving battery consumption on Android devices.[76]
Because of the ongoing technical problems surrounding the COVIDSafe app, the Victorian government developed the Service Victoria QR Code app to augment tracing efforts within the state. Use of the app is mandatory for all Victorian businesses, organisations, clubs and events.[77]
Similarly, every other state and territory in Australia has their own QR-code based solution:On 2 December 2021, NSW and Victorian health officials admitted to The Guardian that the data collected by the app had not been used a single time in 2021,[78] despite the extensive outbreaks and lockdowns that year.[79] In response to the poor performance of the app, Federal Labor Party politicians called for the app to be discontinued,[80] while the Morrison government began engaging with states to find a future use of the app.
On 16 August 2022, the incumbent Albanese Government decommissioned the app, shutting down remaining infrastructure and removing it from Google Play and the Apple App Store. The total cost of the app over its lifetime rounded out to $21 million, with $10 million going to development costs alone.
Contact tracing
See main article: BlueTrace.
The app is built on the BlueTrace protocol originally developed by the Singaporean Government.[81] A stated priority of the protocol was the preservation of privacy.[82] [83] In accordance with this, personal information is only collected once at the point of registration and subsequently used purely to contact potentially infected patients.[84] Additionally, users are able to opt out at any time, clearing all personal information. The contact tracing mechanism is executed locally on an individual's device using Bluetooth, storing all encounters in a contact history log chronicling contact for the past 21 days.[85] Users in contact logs are identified using anonymous time-shifting "temporary IDs" issued by a central Department of Health (DoH) server. Consequently, a user's identity and contact patterns cannot be determined by anyone not authorised by the DoH. Furthermore, since temporary IDs change on a regular basis, malicious third parties cannot track users by observing log entries over time.[35]
Once a user tests positive for infection, the DoH requests their contact log. If consent is given, the logs are transmitted to a central server where temporary IDs are matched with contact information. Health authorities are not able to access log entries about foreign users, so those entries are sent to the appropriate health authority to be processed domestically. Once a contact has been identified, the DoH contacts the individual.[86]
Although the app is commonly described as only logging encounters longer than 15 minutes and closer than,[87] [88] the app actually indiscriminately logs most encounters. It is only once the health authority receives a contact log that it is filtered to encounters within those parameters.[35] [89]
Reporting centralisation
BlueTrace's employment of a centralised reporting architecture has created concerns over its privacy implications.[90] [91] [92] [93] [94] [95] Under a centralised report processing protocol, a user must upload their entire contact log to a health authority administered server, where the health authority is then responsible for matching the log entries to contact details, ascertaining potential contact, and ultimately warning users of potential contact. In contrast, the Exposure Notification framework and other decentralised reporting protocols, while still having a central reporting server, delegate the responsibility of processing logs to clients on the network. Instead of a client uploading their contact history, it uploads a number from which encounter tokens can be derived by individually.[96] Clients then check these tokens against their local contact logs to determine if they have come in contact with an infected patient.[97] Inherent in the fact the protocol never allows the government access to contact logs, this approach has major privacy benefits. However, this method also presents some issues, primarily the lack of human in the loop reporting, leading to a higher occurrence of false positives.[98] Decentralised reporting protocols are also less mature than their centralised counterparts.[99] [97]
Protocol change to Exposure Notification
During the 6 May 2020 Senate Select Committee public hearing on COVID-19 and the COVIDSafe app, the Digital Transformation Agency (DTA) announced they were looking into transitioning the protocol from BlueTrace to the Google and Apple developed Exposure Notification framework (ENF).[100] The change was proposed to resolve the outstanding issues related to performance of third-party protocols on iOS devices.[101] [102] Unlike BlueTrace, the Exposure Notification frameworks runs at the operating system level with special privileges not available to any third-party frameworks.[103] [104] The adoption of the framework is endorsed by multiple technology experts.[105] [106] [107]
Transitioning from BlueTrace to ENF presented several issues, most notably that, as the app cannot run both protocols simultaneously,[108] any protocol change would be a hard cut between versions. This would result in the app no longer functioning for any users who had not yet updated to the ENF version of the app. Additionally, the two protocols are almost completely incompatible,[109] [110] meaning the vast majority - all but the UI - of the COVIDSafe app would have to be redeveloped. Similarly, because of the change from a centralised reporting mechanism to a decentralised one, very little of the existing server software would be usable. The role of state and territory health authorities in the process would also change significantly, as they would no longer be responsible for determining and contacting encounters.[111] This change would involve retraining health officials and penning new agreements with states and territories.
Up until at least 18 June 2020, the DTA was experimenting with ENF,[112] however in an interview with The Project held on 28 June 2020, Deputy Chief Medical Officer Dr Nick Coatsworth stated COVIDSafe would "absolutely not" transition to ENF.[113] He reasoned the government would never transition to any contact tracing solution without human-in-the-loop reporting,[114] [115] something that no decentralised protocol can support.
Issues
Issues on iOS
Versions 1.0 and 1.1 of COVIDSafe for iOS did not scan for other devices when the application was placed in the background, resulting in far fewer recorded contacts than was possible. This was later corrected in version 1.2.[116] Additionally, until the 18 June 2020 update, a bug existed where locked iOS devices were unable to fetch new temporary IDs.[117] Devices collected 24–48 hour pools of temporary IDs in advance, meaning a device could easily exhaust it's pool unless the phone was unlocked specifically when the app was scheduled to replenish the pool.
Additionally, all third-party digital contact tracing protocols experience degraded performance on iOS devices,[118] particularly when the device is locked or the app is not in the foreground.[119] [120] This is a characteristic of the operating system, stemming from how iOS manages its battery life and resource priority. The Android app does not experience these issues because Android is more permissive with background services and the app can request the operating system to disable battery optimisation.
Country calling code restrictions
COVIDSafe requires an Australia mobile number to register, meaning foreigners in Australia need a local SIM card.[121] Initially, residents of Norfolk Island, an external territory of Australia, were unable to register with the app as they used a different country code to mainland Australia, +672 instead of +61.[122] [123] [124] The Australian government released an update resolving the issue on 18 June 2020.[125]
Privacy concerns
Upon announcement, the app was immediately met with widespread criticism over the potential privacy implications of tracking users.[126] [127] While some criticism was attributed to poor communication,[128] [129] fears were further stoked when Prime Minister Scott Morrison and Deputy Chief Medical Officer Paul Kelly refused to rule out the possibility of making the app compulsory, with Morrison stating the next day it would not be mandatory to download the app.[130] [131] [132] Additionally, several privacy watchdogs raised concerns over the data collected by the app, and the potential for the centralised reporting server to become a target for hackers.[133] [134] [135] To address concerns, the Attorney General launched an investigation into the app to ensure it had proper privacy controls and was sufficiently secure.[136] The Minister for Home Affairs, Peter Dutton, also announced special legislation to protect data collected through the app. The app was supposed to be source available to allow it to be audited and analysed by the public,[137] however, this was delayed[138] until a review by the Australian Signals Directorate had been completed.[139] On 8 May 2020, the source code was released.
Issue was also taken with the fact the backend of the app runs on the Amazon Web Services (AWS) platform,[140] meaning the US Government could potentially seize the data of Australian citizens. Data is currently stored within Australia[141] in the AWS Sydney region data centres.[142] In a public hearing on COVIDSafe, Randall Brugeaud, CEO of the Digital Transformation Agency, explained that the decision to use AWS over purely Australian owned cloud providers was done on the basis of familiarity, scalability, and resource availability within AWS. The AWS contract was also drawn from a whole of government arrangement.
Following the global rollout of the Google and Apple developed Exposure Notification Framework (ENF) in late June 2020,[143] public concerns were raised that the government or the companies were tracking users without their knowledge or consent.[144] [145] [146] [147] These claims are false, as COVIDSafe and ENF are completely incompatible, and ENF is disabled until a compatible app is installed and explicit user consent is given.[148] Even if a third party were to obtain the encounter log of a user, no persons could be identified without also holding the logs of other users the client has encountered.[149]
Australia's Inspector-General of Intelligence and Security reported that several of Australia's intelligence and security agencies collected data from COVIDSafe in its first months of operation. The report does not state which specific agencies collected the data and whether or not it was decrypted.[150]
In June 2021 the state government of Western Australia "was forced to introduce legislation" when Western Australian police used data collected by the COVID SafeWA app for purposes other than contact tracing.[151] [152] [153] Police stated that their use of this data was lawful, and that they could not stop using this data in criminal investigations while lawful to do so. Police Commissioner Chris Dawson defended this by pointing out that the "terms and conditions stated data could be accessed for a lawful reason" and while he accepts "people don't always read fine print on insurance policies or whatever," their use of the data in these circumstances was lawful.
Attorney General privacy impact assessment
On 25 May 2020, the Attorney General report and subsequent response by the Department of Health was released, the following recommendations were made:
- Release the Privacy Impact Assessment and the app source code
- Major changes should be reviewed for privacy impact
- A legislative framework put in place to protect the user
- Certain screens be rearranged to better communicate information
- Make clear what a user should do if they are pressured to reveal their contact logs, or are pressured into installing the app
- Generalised collection of age
- Gather consent from users both at registration, and at submission of contact logs
- Create a specific privacy policy for the app
- Make it easier to rectify personal information
- Raise public awareness about the app and how it works
- Development of training and scripts for health officials
- Put in place contracts with state and territory health authorities
- Allow users to register under a pseudonym
- Seek independent review over security of the app
- Review the contract with AWS
- Ensure ICT contracts are properly documented
- Investigate ways to reduce the number of digital handshakes
- A special consent process for underage users
In the Department of Health's response, they agreed to all suggestions with exception to "rectification of personal information". Rather than building a process to do so, a user could uninstall and reinstall the app to change their personal information. A process to formally correct information was to be introduced later.
Independent analysis
On 29 May 2020, a group of independent security researchers including Troy Hunt, Kate Carruthers, Matthew Robbins, and Geoffrey Huntley released an informal report raising a number of issues discovered in the decompiled app.[154] Their primary concerns were two flaws in the implementation of the protocol that could potentially allow malicious third parties to ascertain static identifiers for individual clients.[155] Importantly, all issues raised in the report were related to incidental leaking of static identifiers during the encounter handshake. To date, no code has been found that intentionally tracks the user beyond the scope of contact tracing, nor code that transmits a user's encounter history to third parties without the explicit consent of the user.[156] [157] Additionally, despite the flaws discovered through their analysis, many prominent security researchers publicly endorse the app.[158] [159] [160] [161]
The first issue was located in, the class responsible for advertising to other BlueTrace clients. The bug occurred with a supposedly random, regularly changing three-byte string included in that was, in fact, static for the entire lifetime of an app instance.[162] [163] [164] This string was included with all handshakes performed by the client. In OpenTrace this issue did not occur, as value changes every 180 seconds.[165] While likely not enough entropy to identify individual clients, especially in a densely populated area, when used in combination with other static identifiers (such as the phone's model) it could have been used by malicious actors to determine the identity of users. This issue was addressed in the 13 May 2020 update.[166]
The second issue was located in, the class responsible for managing BLE peripheral mode, where the cached read payload is incorrectly cleared. Although it functioned normally when a handshake succeeded, a remote client who broke the handshake would have received the same TempID for all future handshakes until one succeeded, regardless of time. This meant a malicious actor could always intentionally break the handshake and, for the lifetime of the app instance, the same TempID would always be returned to them. This issue was resolved in OpenTrace,[167] yet was unfixed in COVIDSafe[168] until the 2020-05-13 update.
Other issues more inherent to the protocol include the transmission of device model as part of the encounter payload, and issues where static device identifiers could be returned when running in GATT mode. Many of these are unfixable without redesigning the protocol, however they, like the other issues, pose no major privacy or security concerns to users.
Legislation
The Biosecurity Determination 2020, made with the authority of the Biosecurity Act 2015,[169] [170] governs how data collected by the COVIDSafe app is stored, submitted, and processed. Later a separate bill was introduced to codify this determination, the Privacy Amendment (Public Health Contact Information) Bill 2020. The determination and bill makes it illegal for anyone to access COVIDSafe app data without both the consent of the device owner and being an employee or contractor of a state or territory health authority. Collected data may be used only for the purpose of contact tracing or anonymous statistical analysis,[171] and data also cannot be stored on servers residing outside Australia, nor can it be disclosed to persons outside Australia.[172] Additionally, all data must be destroyed once the pandemic has concluded, overriding any other legislation requiring data to be retained for a certain period of time. The bill also ensures no entity may compel someone to install the app.[173] Despite this there have been reports of multiple businesses attempting to require employees to use the app.[174] [175]
See also
External links
Notes and References
- Web site: Australians' data from COVID-19 tracing app to be held by US cloud giant Amazon. Besser. Linton. Welch. Dylan. 24 April 2020. ABC News. en-AU. 2020-04-24.
- News: Taylor. Josh. 29 April 2020. Covidsafe app: how to download Australia's coronavirus contact tracing app and how it works. en-GB. The Guardian. 2020-05-04. 0261-3077.
- Web site: Terms and Conditions. 2021-04-01. covidsafe.gov.au. en-AU.
- Web site: The Government's COVID-19 tracking app is called CovidSafe and is launching today!. jasoncartwright. 26 April 2020. techAU. en-AU. 2020-04-26.
- Web site: COVIDSafe - Apps on Google Play. play.google.com. en. 2020-04-26.
- Web site: Privacy concerns as Australia's controversial coronavirus tracing app nears launch . 2020-04-26 . SBS News . en.
- Web site: 26 April 2020 . The coronavirus tracing app has been released. Here's what it looks like and what it wants to do . 2020-04-26 . ABC News . en-AU.
- Web site: Probyn . Andrew . 14 April 2020 . The Government wants to track us via our phones. And if enough of us agree, coronavirus restrictions could ease . 17 April 2020 . ABC News . en-AU.
- Web site: COVIDSafe: New app to slow the spread of coronavirus Prime Minister of Australia . www.pm.gov.au . 2020-05-06 . 3 May 2020 . https://web.archive.org/web/20200503234645/https://www.pm.gov.au/media/covidsafe-new-app-slow-spread-coronavirus . dead .
- Web site: Bogle . Ariel . 17 April 2020 . Five questions we need answered about the government's coronavirus contact tracing app . 17 April 2020 . ABC News . en-AU.
- Web site: 2020-11-30 . COVIDSafe captures close contacts with the new Herald Protocol . 2022-08-24 . Digital Transformation Agency.
- News: Farr . Malcolm . Hurst . Daniel . 14 April 2020 . Australian government plans to bring in mobile phone app to track people with coronavirus . en-GB . The Guardian . 17 April 2020 . 0261-3077.
- News: In its lifetime, $21 million COVIDSafe app detected just two confirmed cases . 10 August 2022 . ABC News . 10 August 2022 . en-AU.
- Web site: Govt eyes Singapore COVID-19 tracking app. 27 March 2020. InnovationAus. en-US. 2020-04-26.
- Web site: Government to release new contact tracing app within the next fortnight.. www.msn.com. 2020-04-26.
- Web site: Big bucks on open source COVIDsafe app. 6 May 2020. InnovationAus. en-US. 2020-05-06.
- Web site: Contact Tracing: Australia's incoming technology solution for tracking COVID-19. Brookes. Joseph. 15 April 2020. Which-50. en-AU. 2020-04-26.
- Web site: Coronavirus Australia - Apps on Google Play. play.google.com. en. live. https://web.archive.org/web/20200426054134/https://play.google.com/store/apps/details?id=au.gov.health.covid19&showAllReviews=true. 2020-04-26. 2020-04-26.
- Web site: Government's COVID-19 tracing app to be launched today. 25 April 2020. 7NEWS.com.au. en. 2020-04-26.
- News: Remeikis. Amy. Australia's coronavirus tracing app set to launch today despite lingering privacy concerns. 26 April 2020. The Guardian. 2020-04-26. en-GB. 0261-3077.
- Web site: COVIDSafe. https://web.archive.org/web/20200426032953/https://www.covidsafe.gov.au/. dead. 2020-04-26. 26 April 2020. 2020-04-26.
- Web site: Barbaschow. Asha. COVIDSafe: Australia's new trace tracking app is now live, but registration isn't. 2021-11-17. ZDNet. en.
- Web site: COVIDSafe app reaches five-day download goal within five hours. 27 April 2020. ABC News. en-AU. 2020-04-27.
- Web site: More than two million Australians download COVIDSafe contact tracing app. SBS News. en. 2020-04-27.
- Web site: Bourke . Latika . Keoghan . Sarah . Ward . Mary . 4 May 2020 . Coronavirus updates LIVE: Australians download COVIDSafe app more than 4.5 million times, global COVID-19 cases climb past 3.5 million as nation's death toll stands at 96 . 2020-05-04 . The Sydney Morning Herald . en.
- Web site: Coronavirus app tracing capability not yet operational, despite 4 million downloads - ABC News. 2 May 2020. www.abc.net.au. en-AU. 2020-05-04.
- Web site: Coronavirus app comes with privacy guarantee: Dutton. www.theaustralian.com.au. 2020-04-26.
- Web site: Coronavirus Australia live updates. 25 April 2020. news.com.au — Australia's #1 news site. en. 2020-04-26.
- Determination. 25 April 2020. Parliament of Australia. Biosecurity (Human Biosecurity Emergency) (Human Coronavirus with Pandemic Potential) (Emergency Requirements—Public Health Contact Information) Determination 2020.
- Web site: Govt unveils COVIDSafe contact tracing app bill. iTnews. 2020-05-06.
- Web site: COVIDSafe draft legislation. Department. Attorney-General's. www.ag.gov.au. en-au. 2020-05-06.
- Bill. 2020. Parliament of Australia. Privacy Amendment (Public Health Contact Information) Bill 2020. en. 6 May 2020. https://web.archive.org/web/20200506194729/https://www.ag.gov.au/RightsAndProtections/Privacy/Documents/exposure-draft-privacy-amendment-public-health-contact-information.pdf. 6 May 2020. dead.
- Web site: Public Hearings. corporateName=Commonwealth Parliament; address=Parliament House. Canberra. www.aph.gov.au. en-AU. 2020-05-06.
- Web site: THE SENATE SELECT COMMITTEE ON COVID-19 PUBLIC HEARING Committee Room 2S1 Parliament House, Canberra. 6 May 2020. Parliament of Australia. 2020-05-06.
- Web site: COVID-19 - 06/05/2020 12:50:00 – Parliament of Australia. parlview.aph.gov.au. 2020-05-06.
- Web site: DTA publicly releases COVIDSafe application source code . Agency. Digital Transformation. 8 May 2020 . www.dta.gov.au . en. 2020-05-08.
- Web site: Coronavirus Australia live news: Paul Kelly says COVID Safe app 'fully functional' with all states, territories signed up - ABC News. 12 May 2020. www.abc.net.au. en-AU. 2020-05-13.
- Web site: Australian government justifies decision to go with AWS for COVIDSafe . Barbaschow. Asha. ZDNet . en. 2020-05-19.
- News: Taylor. Josh. 19 May 2020 . NSW is unable to use Covidsafe app's data for contact tracing. en-GB. The Guardian. 2020-05-19. 0261-3077.
- Web site: 'One close contact' traced in first app test. 20 May 2020 . www.weeklytimesnow.com.au . en. 2020-05-21.
- Web site: 11 June 2020. COVIDSafe has not been much help at all, and authorities say that's a good thing. 2020-06-13. www.abc.net.au. en-AU.
- Web site: 10 June 2020. No contacts through COVIDSafe app yet. 2020-06-13. InnovationAus. en-US.
- Web site: Long. Trevor. 25 June 2020. CovidSafe app: 9News reports Not a single contact obtained via the app - is it working?. 2020-06-25. EFTM. en-US.
- Web site: 11 June 2020. Even 100% COVIDSafe Uptake Won't Make it Effective, Researcher Says. 2020-06-13. Gizmodo Australia. en-US.
- Web site: 8 June 2020. COVIDSafe 'extremely limited': New research. 2020-06-13. InnovationAus. en-US.
- Web site: Knox. James. 29 May 2020. COVIDSafe and safety first. 2020-06-25. Medical Forum. en-US.
- Web site: 2 May 2020. Why should you install the COVIDSafe App? Part 2.. 2020-06-25. Crush The Curve Today. en.
- Web site: MP. Tim Watts. 13 May 2020. SPEECH: COVIDSafe Contact Tracing App. 2020-06-25. Medium. en.
- Web site: What it really means when "COVID-19 exposure notifications" is in your phone settings – Australian Associated Press. 2020-06-13. AustralianAssociatedPress. en.
- Web site: Italy launches Immuni contact-tracing app: Here's what you need to know. 2020-06-13. www.thelocal.it.
- Web site: Potuck. Michael. 1 June 2020. Italy launches one of the first Apple Exposure Notification API-based apps with 'Immuni'. 2020-06-13. 9to5Mac. en-US.
- Web site: 20 June 2020. Family gatherings blamed for 19 new virus cases in Vic. 2020-07-06. Australian Financial Review. en.
- Web site: Dow. Melissa Cunningham, Aisha. 6 July 2020. Hospital admissions for COVID-19 triple as three healthcare workers test positive. 2020-07-06. The Sydney Morning Herald. en.
- Web site: Two Victorians dead in 24 hours from coronavirus. 2020-07-06. www.9news.com.au.
- News: Taylor. Josh. 4 July 2020. Victoria contact tracers access Covidsafe data 99 times but no identified close contacts reported. en-GB. The Guardian. 2020-07-06. 0261-3077.
- Web site: 1 July 2020. Victoria's No Longer Releasing Updates on Its COVIDSafe Access. 2020-07-06. Gizmodo Australia. en-AU.
- Web site: 7 July 2020. COVIDfail: Australia's tracing app that can't find anyone. 2020-07-08. The New Daily. en-US.
- Web site: 11 June 2020. Protester and toddler at childcare centre among eight new coronavirus infections in Victoria. 2020-07-06. www.abc.net.au. en-AU.
- Web site: Protester at Australian Black Lives Matter rally tests positive to virus. 2020-07-06. au.news.yahoo.com. 11 June 2020 . en-AU.
- Web site: 11 June 2020. 'Impossible' task after BLM protester tests positive. 2020-07-06. PerthNow. en.
- Web site: 17 June 2020. Jump in Victorian coronavirus cases reminder pandemic 'is far from over', Premier says . 2020-07-06 . www.abc.net.au . en-AU.
- Web site: 1 July 2020. Figures that show Australians wrong about protest link . 2020-07-06. NewsComAu. en.
- News: Davey. Melissa. 29 June 2020. Victoria's coronavirus spike: what's causing it, and is anyone to blame?. en-GB. The Guardian. 2020-07-06. 0261-3077.
- Web site: Did Australia's Black Lives Matter protests cause a spike in COVID-19 cases?. 2020-07-06. SBS News. en.
- Web site: Stilgherrian. COVIDSafe's problems aren't Google or Apple's fault despite government claims . 2020-07-22. ZDNet. en.
- Web site: COVIDSafe app could have cost 'tens of millions' for zero tracing results. 2020-07-22. www.9news.com.au. 20 July 2020 .
- Web site: Canberra's Delv awarded $1.85 million for developing COVID-19 app. 2020-07-22. CRN Australia.
- Web site: COVIDSafe application working 'just as intended'. 2020-07-22 . Sky News Australia. 22 July 2020. en.
- Web site: Barbaschow. Asha. Minister still blaming COVIDSafe flaws on Apple and Google . 2020-07-22. ZDNet. en.
- Leith. Douglas J.. Farrell. Stephen. 30 September 2020. Measurement-based evaluation of Google/Apple Exposure Notification API for proximity detection in a light-rail tram. PLOS ONE. en. 15. 9. e0239943. 10.1371/journal.pone.0239943. 1932-6203. 7526892. 32997724. 2006.08543. 2020PLoSO..1539943L. free.
- Web site: 26 July 2020. Three months on, does Australia need a new coronavirus contact tracing app?. 2021-01-11. www.abc.net.au. en-AU.
- Web site: 24 June 2020. Should Australia ditch the COVIDSafe app for the Apple and Google alternative?. 2021-01-11. SmartCompany. en-US.
- Web site: 2 August 2020 . COVIDsafe app found new NSW coronavirus cases . 2020-08-12. 7NEWS.com.au. en.
- Web site: Clun. Rachel. 26 October 2020. COVIDSafe app identifies just 17 contacts not found by contact tracers. 2020-10-30. The Sydney Morning Herald. en.
- Web site: Agency. Digital Transformation. 2021-01-02. New COVIDSafe features improve user experience. 2021-04-24 . www.dta.gov.au . en.
- Web site: Agency . Digital Transformation. 2021-02-26. COVIDSafe includes COVID-19 restrictions & improved battery usage. 2021-04-24. www.dta.gov.au. en.
- Web site: Protect yourself and others | Coronavirus Victoria. www.coronavirus.vic.gov.au.
- Web site: 2021-12-02. 'A lemon': Coalition fights to keep Covidsafe app data under wraps. 2021-12-23. The Guardian. en.
- News: 2021-10-26. As lockdowns lift and a sense of hope returns, these Australians are sticking with their pandemic hobbies. en-AU. ABC News. 2021-12-23.
- News: 2021-12-15. Federal Labor calls for 'failed app' to be ditched after finding just two close contacts in six months. en-AU. ABC News. 2021-12-23.
- Web site: TraceTogether - behind the scenes look at its development process. www.tech.gov.sg. 25 March 2020 . en. 2020-04-12.
- News: COVID-19 contact tracing: Getting it done — and making it work - Loki Foundation. 23 April 2020. Loki Foundation. 2020-04-25. en-US.
- Web site: BlueTrace Manifesto. Team TraceTogether. en-SG. 2020-04-25.
- Web site: PM: Change for schools, new app, exercise rules coming. 24 April 2020. www.dailytelegraph.com.au. en. 2020-04-25.
- Web site: Australia looks to 'go harder' with use of COVID-19 contact tracing app. Barbaschow. Asha. ZDNet. en. 2020-04-25.
- Web site: BlueTrace: A privacy-preserving protocol for community-driven contact tracing across borders. Jason Bay, Joel Kek, Alvin Tan, Chai Sheng Hau, Lai Yongquan, Janice Tan, Tang Anh Quy. Government Technology Agency. 12 April 2020.
- Web site: How COVIDsafe app tracks people 1.5m from you. Chronicle. en. 2020-04-26.
- Web site: COVIDSafe Explained: Everything You Need To Know About the Australian Government's Coronavirus App. PC World. en-AU. 2020-05-06. 5 May 2020. https://web.archive.org/web/20200505141742/https://www.pcworld.idg.com.au/article/678801/covidsafe-explained-everything-need-know-about-australian-government-coronavirus-app/. dead.
- Web site: Bitbucket. bitbucket.org. 2020-05-06.
- Web site: Surman. Mark. Privacy Norms and the Pandemic. 2020-04-27. The Mozilla Blog. en-US.
- News: Das gefährliche Chaos um die Corona-App. 2020-04-20. Der Tagesspiegel Online. de.
- Web site: ZEIT ONLINE Lesen Sie zeit.de mit Werbung oder imPUR-Abo. Sie haben die Wahl.. 2020-04-20. www.zeit.de.
- News: Projekt Pepp-PT: Den Tracing-App-Entwicklern laufen die Partner weg - DER SPIEGEL - Netzwelt. 2020-04-20. Der Spiegel. 20 April 2020 . de.
- Web site: Zeitung. Süddeutsche. Corona-App: Streit um Pepp-PT entbrannt. 2020-04-20. Süddeutsche.de. 20 April 2020 . de.
- News: Hern . Alex . 20 April 2020 . Digital contact tracing will fail unless privacy is respected, experts warn . 2020-04-20 . The Guardian . en-GB . 0261-3077.
- Web site: 20 April 2020. PEPP-PT vs DP-3T: The coronavirus contact tracing privacy debate kicks up another gear. 2020-05-08. NS Tech. en-GB. 9 May 2020. https://web.archive.org/web/20200509024958/https://tech.newstatesman.com/security/pepp-pt-vs-dp-3t-the-coronavirus-contact-tracing-privacy-debate-kicks-up-another-gear. dead.
- Web site: DP-3T whitepaper. 2020-04-22. GitHub.
- Web site: hermesauto. 15 June 2020. Apple-Google contact tracing system not effective for Singapore: Vivian Balakrishnan. 2020-06-18. The Straits Times. en.
- Web site: Initial commit · TCNCoalition/TCN@1b68b92. 2020-04-18. GitHub. en.
- News: Taylor. Josh. 6 May 2020. Covidsafe app is not working properly on iPhones, authorities admit. en-GB. The Guardian. 2020-05-07. 0261-3077.
- Web site: Australian government admits its COVIDSafe app doesn't work on iOS. 6 May 2020. iMore. 2020-05-07.
- Web site: Department for Health and Wellbeing (South Australia). COVIDSafe app. 2020-05-07. www.sahealth.sa.gov.au.
- Web site: Apple and Google update joint coronavirus tracing tech to improve user privacy and developer flexibility. 2020-04-26. TechCrunch. 24 April 2020. en-US. 4 June 2021. https://web.archive.org/web/20210604040434/https://techcrunch.com/2020/04/24/apple-and-google-update-joint-coronavirus-tracing-tech-to-improve-user-privacy-and-developer-flexibility/. live.
- Web site: Farr. Christina. 28 April 2020. How a handful of Apple and Google employees came together to help health officials trace coronavirus. 2020-04-29. CNBC. en.
- Web site: 22 June 2020. Govt urged to ditch COVIDSafe for GApple. 2020-06-24. InnovationAus. en-US.
- Web site: 24 June 2020. Should Australia ditch the COVIDSafe app for the Apple and Google alternative?. 2020-06-24. SmartCompany. en-US.
- Web site: 28 June 2020. Should Australia ditch the COVIDSafe app for the Apple and Google alternative?. 2020-06-29. The Mandarin. en-US.
- Web site: Exposure Notifications API Google APIs for Exposure Notification. 2020-06-18. Google Developers. en.
- Web site: Sheel. Meru. Lazar. Seth. Contact tracing apps are vital tools in the fight against coronavirus. But who decides how they work?. 2020-06-13. The Conversation. 12 May 2020 . en.
- Web site: Jim Mussared, Eleanor McMurtry. 24 May 2020. The COVIDSafe App - 4 week update. 2020-06-13. Melbourne School of Engineering - University of Melbourne. 13 June 2020. https://web.archive.org/web/20200613080024/https://people.eng.unimelb.edu.au/mcmurtrye/static/covidsafe-4-weeks.pdf. dead.
- Web site: Exposure Notifications: Helping fight COVID-19 - Google. 2020-06-25. Exposure Notifications: Helping fight COVID-19 - Google. en.
- Web site: 17 June 2020. Australia's Covidsafe coronavirus tracing app works as few as one in four times for some devices. 2020-06-18. The Guardian. en.
- Web site: 29 June 2020. 'No way' govt will switch to GApple app. 2020-06-29. InnovationAus. en-US.
- Web site: The Project interview . 2020-06-29. Twitter. en.
- Web site: Grubb. Ben. 28 June 2020. 'There's no way we're shifting': Australia rules out Apple-Google coronavirus tracing method. 2020-06-29. The Sydney Morning Herald. en.
- Web site: Nelson . Richard . The Unbroken iOS COVIDSafe application . 15 May 2020 .
- Web site: Government releases sixth update for COVIDSafe app . 2020-06-24 . www.technologydecisions.com.au. en.
- Web site: DTA admits COVIDSafe performance "highly variable" on iOS. iTnews. 2020-05-07.
- News: Jones. Tegan. Why COVIDSafe Has Issues On iOS, As Explained By Devs. 1 May 2020. Gizmodo Australia. en. 2020-05-07.
- Web site: Half-baked: The COVIDSafe app is not fit for purpose on iPhones. Grubb. Ben. 7 May 2020. The Sydney Morning Herald. en. 2020-05-08.
- Web site: Elder. Glenn. EMNI - MEDIA RELEASE . 8 May 2020. Norfolk Island Regional Council.
- News: Crellin. Zac. 7 May 2020. We Asked Every MP And Senator Whether They Downloaded COVIDSafe And Here's What They Said . en. Pedestrian.TV. 2020-05-08.
- Web site: Dialing Code From Australia to Norfolk Island. 2020-06-25. www.dialingcode.com.
- Web site: Agency. Digital Transformation. Telephone country and area codes. 2020-06-25. telephone-country-and-area-codes. en. 18 March 2022. https://web.archive.org/web/20220318070241/https://info.australia.gov.au/about-australia/facts-and-figures/telephone-country-and-area-codes. dead.
- Web site: Agency. Digital Transformation. 19 June 2020. More people in Australia can now download and use COVIDSafe. 2020-06-24. www.dta.gov.au. en.
- Web site: Privacy recommendations for Australia's use of contact tracing mobile apps like TraceTogether. australiancybersecuritymagazine.com.au. 6 April 2020. 17 April 2020.
- Web site: COVID-19 contact tracing app: 'I get it, but I don't like it'. 17 April 2020. Australian Financial Review. en. 17 April 2020.
- Web site: What price privacy? Contact tracing apps to combat Covid. www.lowyinstitute.org. en. 17 April 2020. 19 April 2020. https://web.archive.org/web/20200419115615/https://www.lowyinstitute.org/the-interpreter/what-price-privacy-contact-tracing-apps-combating-covid. dead.
- Web site: The GPS tracking app the government wants YOU to download so COVID lockdown can be lifted. 15 April 2020. 7NEWS.com.au. en. 17 April 2020.
- Web site: Deputy CMO doesn't rule out forcing Australians to download contact tracing app. 17 April 2020. ABC News. en-AU. 17 April 2020.
- Web site: Morrison refuses to 'be drawn' on making contact tracing app compulsory. iTnews. 17 April 2020.
- Web site: Scott Morrison says COVID-19 tracker app not mandatory. 18 April 2020. The New Daily. en-US. 18 April 2020.
- News: Meade. Amanda. Australian coronavirus contact tracing app voluntary and with 'no hidden agenda', minister says. 18 April 2020. The Guardian. 18 April 2020. en-GB. 0261-3077.
- Web site: TraceTogether, Singaporean COVID-19 contact tracing and Australian recommendations. Jackson. Carl. 6 April 2020. Melbourne School of Engineering. en. 18 April 2020.
- Web site: Greater transparency needed around Federal Government's new COVID 19 phone app. Human Rights Law Centre. en-AU. 18 April 2020.
- News: Taylor. Josh. Australia's coronavirus contact tracing app: what we know so far. 18 April 2020. The Guardian. 18 April 2020. en-GB. 0261-3077.
- Web site: Scott Morrison Is Now Saying Australia's Coronvirus Tracing App Won't Be Mandatory. 18 April 2020. Gizmodo Australia. en. 18 April 2020.
- Web site: Health minister now unsure if source code for COVID contact tracing app is safe to release. iTnews. 2020-04-26.
- Web site: COVIDSafe Privacy Impact Assessment – Agency Response. Department of Health. 25 April 2020. Department of Health. 2020-04-26.
- Web site: Government services minister insists COVID tracing app data safe on AWS. iTnews. 2020-04-26.
- Web site: COVIDSafe Privacy Policy. health.gov.au. 2020-04-26.
- News: Taylor. Josh. Covidsafe app: how to download Australia's coronavirus contact tracing app and how it works. 27 April 2020. The Guardian. 2020-04-27. en-GB. 0261-3077.
- Web site: Apple and Google's Exposure Notification API has launched. 2020-06-24. clicklancashire.com.
- Web site: Huynh. Terence. 21 June 2020. No, Apple and Google didn't secretly install a COVID-19 tracker on your phone. 2020-06-24. TechGeek.
- Web site: Imgur. COVIDSafe misinformation. 2020-06-24. Imgur. en.
- Web site: Adjoa. Andoh. 19 June 2020. Viral twitter post about ENF update. live. https://web.archive.org/web/20200619130354/https://twitter.com/andoh_adjoa/status/1273962252517998592. 2020-06-19. 2020-06-24. Twitter. en.
- Web site: Common ENF misinformation copypasta. live. https://web.archive.org/web/20200621031940/https://twitter.com/BongoBunki/status/1274539896787464192. 2020-06-21. 2020-06-25. Twitter. en.
- Web site: 22 June 2020. Google's Coronavirus Contact Tracing Setting Isn't Tracking You. 2020-06-24. Gizmodo Australia. en-US.
- Web site: Apple, Inc. April 2020. Exposure Notification - Cryptography Specification. 2020-05-22. Apple.
- Web site: Hendry. Justin. 23 November 2020. COVIDSafe data 'incidentally' collected by intelligence agencies in first six months. 23 November 2020. iTNews.
- News: Police would not agree to stop accessing COVID SafeWA app data, Premier Mark McGowan says . Kenith . Png . 2021-06-16 . ABC News . Australian Broadcasting Corporation . 2021-07-11 .
- News: Police used information from SafeWA app in Rebels bikie boss murder investigation . Pip . Christmass . 2021-06-16 . 7News . 2021-07-11 .
- Media statement . New Bill to further protect information obtained for COVID-19 contact tracing . Mark . McGowan . Mark McGowan . John . Quigley . John Quigley (politician) . Roger . Cook . Roger Cook (politician) . 2021-06-15 . Western Australia . Media Statements of the Government of Western Australia . Government of Western Australia . 2021-07-11 . 11 July 2021 . https://web.archive.org/web/20210711073917/https://www.mediastatements.wa.gov.au/Pages/McGowan/2021/06/New-Bill-to-further-protect-information-obtained-for-COVID-19-contact-tracing.aspx . dead .
- Web site: Dissection of COVIDSafe (Android). Google Docs. en. 2020-05-07.
- Web site: Issue 1 (which is a privacy breach) in @jim_mussared's research was confirmed by the Singapore team. It was fixed same day. It has not been fixed in the Australian app. Nb. I also disclosed see above tweets about being ignored.pic.twitter.com/wtGsy8Ki5R. huntley. geoffrey. 6 May 2020. @GeoffreyHuntley. en. 2020-05-07.
- Web site: The #covidsafe app is now available in Australia. However, it's a shame that they have decided not to release the source code for full transparency. Luckily, I'm a curious chap and also a professional mobile developer.. Robbins. Matthew. 26 April 2020. @matthewrdev. en. 2020-05-07.
- Web site: Not sure whether to install the government's COVIDSafe app? Here's everything we know.. The Feed. en. 2020-05-07.
- Web site: Endorsing individuals. 1 May 2020. Endorse COVIDSafe. en. 2020-05-07. 5 May 2020. https://web.archive.org/web/20200505230406/https://endorsecovidsafe.com/individuals/. dead.
- Web site: Experts Explain Why They're Not Worried About COVIDSafe. 30 April 2020. Gizmodo Australia. en. 2020-05-08.
- Web site: I'm a privacy expert - and I've downloaded COVIDSafe. Wilson. Stephen. 3 May 2020. The Sydney Morning Herald. en. 2020-05-24.
- Web site: Privacy expert backs government's 'good job' on COVIDSafe app. Stone. Gavin. 15 May 2020. The Canberra Times. en. 2020-05-24.
- Web site: AU generation algorithm is really subtlely different ... . micolous. Discord. 2020-05-07.
- Web site: COVIDSafe Android App - BLE Privacy Issues . Google Docs. en. 2020-05-07.
- Web site: Bitbucket au/gov/health/covidsafe/bluetooth/BLEAdvertiser.java. bitbucket.org. 2020-05-07.
- Web site: opentrace-community/opentrace-android/blob/master/app/src/main/java/io/bluetrace/opentrace/bluetooth/BLEAdvertiser.kt. GitHub. en. 2020-05-07.
- Web site: COVIDSafe code from version 1.0.17 (#1) · AU-COVIDSafe/mobile-android@696e4ed. GitHub. en. 2020-05-15.
- Web site: fixed a bug where the cached read payload was not cleared properly · opentrace-community/opentrace-android@0c7f7f6. GitHub. en. 2020-05-07.
- Web site: Bitbucket au/gov/health/covidsafe/bluetooth/gatt/GattServer.java. bitbucket.org. 2020-05-07.
- Web site: 4 May 2020. COVIDSafe legislation. live. https://web.archive.org/web/20200527211029/https://www.ag.gov.au/RightsAndProtections/Privacy/Pages/COVIDSafelegislation.aspx. 2020-05-27. 2020-06-25. Attorney General's Department.
- Web site: Biosecurity (Human Biosecurity Emergency) (Human Coronavirus with Pandemic Potential) (Emergency Requirements—Public Health Contact Information) Determination 2020: Enabled by. Health. www.legislation.gov.au. en. 2020-04-26.
- Web site: COVIDSafe App – Part Two: Legislation passed to address privacy concerns - What it means for you - Coronavirus (COVID-19) - Australia. 2020-06-25. www.mondaq.com.
- Web site: COVIDSafe privacy protections now locked in law. 2020-06-25. iTnews.
- Web site: Barbaschow. Asha. COVIDSafe legislation enters Parliament with a few added privacy safeguards. 2020-06-25. ZDNet. en.
- Web site: Coronavirus: Employers want power over COVIDSafe app. www.theaustralian.com.au. 2020-05-06.
- Web site: Health Department investigating Strathfield Council for unlawfully forcing employees to download COVIDSafe. www.dailytelegraph.com.au. 2020-05-06.