[Linux-aus] ART FOI review - myGov Code Generator app source code

[Fraser Tweedale]

Good morning freedom lovers.

The EasyCount FOI saga was 10 years ago.  Isn't about time someone
tried to pry secret source code out of the government again?

It is time, that someone is me, and the *myGov Code Generator* app
is the target.  I requested the code in 2021 (!).  Services
Australia refused access, as is customary, and affirmed that
decision upon internal review, as is customary.  I took it to the
OAIC.  Four years (!) later it finally bubbled up to the top of the
pile, only for the OAIC to decide it was beyond their ken to decide
the matter and I should take it up at the Administrative Review
Tribunal.

So here we are.  It's on.  It's gonna be expensive.  There's a
crowdfunding campaign if you would like to contribute to this cause,
and are able:

https://www.pozible.com/project/mygov-app-source-code-foi-review-1/

A lot more detail about the matter is on the campaign page, so
please go have a read even if you don't intend to pledge.  But I
will mention here a few important things:

- This is a very different case from EasyCount (Cordover and AEC).
  Different exemptions claimed, different arguments, different
  context.  Cordover turned on trade secrets and commercial value.
  My case is primarily about cybersecurity and "security by
  obscurity".

- I have retained the services of Wise Law, a boutique cyber law
  firm with administrative law expertise too.

- Dr Vanessa Teague, cryptography expert and a name many of you will
  know, has agreed to assist the Tribunal as an expert witness.

- I am also seeking expert testimony on Android application
  security, particularly w.r.t. reverse engineering web APIs, and
  security controls in the Google Play Store distribution model.  If
  you are someone or know someone who may be able to assist, please
  get in touch!

Thank you for reading, and please spread it far and wide!

Cheers,
Fraser