[Linux-aus] ART FOI review - myGov Code Generator app source code

[Neil du Preez]

On Fri, 5 Dec 2025, at 00:48, Fraser Tweedale via linux-aus wrote:
> Good morning freedom lovers.
>
> The EasyCount FOI saga was 10 years ago.  Isn't about time someone
> tried to pry secret source code out of the government again?
>
> It is time, that someone is me, and the *myGov Code Generator* app
> is the target.  I requested the code in 2021 (!).  Services
> Australia refused access, as is customary, and affirmed that
> decision upon internal review, as is customary.  I took it to the
> OAIC.  Four years (!) later it finally bubbled up to the top of the
> pile, only for the OAIC to decide it was beyond their ken to decide
> the matter and I should take it up at the Administrative Review
> Tribunal.
>
> So here we are.  It's on.  It's gonna be expensive.  There's a
> crowdfunding campaign if you would like to contribute to this cause,
> and are able:
>
> https://www.pozible.com/project/mygov-app-source-code-foi-review-1/
>
> A lot more detail about the matter is on the campaign page, so
> please go have a read even if you don't intend to pledge.  But I
> will mention here a few important things:
>
> - This is a very different case from EasyCount (Cordover and AEC).
>   Different exemptions claimed, different arguments, different
>   context.  Cordover turned on trade secrets and commercial value.
>   My case is primarily about cybersecurity and "security by
>   obscurity".
>
> - I have retained the services of Wise Law, a boutique cyber law
>   firm with administrative law expertise too.
>
> - Dr Vanessa Teague, cryptography expert and a name many of you will
>   know, has agreed to assist the Tribunal as an expert witness.
>
> - I am also seeking expert testimony on Android application
>   security, particularly w.r.t. reverse engineering web APIs, and
>   security controls in the Google Play Store distribution model.  If
>   you are someone or know someone who may be able to assist, please
>   get in touch!
>
> Thank you for reading, and please spread it far and wide!
>
> Cheers,
> Fraser
> _______________________________________________
> linux-aus mailing list
> linux-aus at lists.linux.org.au
> https://lists.linux.org.au/mailman/listinfo/linux-aus
>
> To unsubscribe from this list, send a blank email to
> linux-aus-unsubscribe at lists.linux.org.au

Not sure if you're aware, but my.gov.au supports passkeys now, including on devices like yubikey. I haven't seen a need to use their app anymore, since passkeys are more secure as I understand it.