c/technology · by slavistapl@szmer.info · 260d

The mObywatel's user interface source code has been published

https://kontrabanda.net/r/the-mobywatels-user-interface-source-code-has-been-published/

Context: mObywatel is a Polish app comprising most of critical governmental services.

104 points · 6 comments · view on lemmy.world

6 Comments

grue@lemmy.world · 28 pts · 259d (2 replies)

However, browsing it requires an active ”Profil Zaufany” (exactly translated to English as Trusted Profile) account, which is not available for registration for people outside of Poland.

According to the ministry’s statement issued in their own Public Information Bulletin, this requirement has been enforced as a part of ”recommendations issued by the Ministry of National Defence’s CSIRT team, which include the possibility of user accountability”.

Moreover, the published code cannot be easily copied over while browsing via the official website.

🙄 fucking user-hostile "security by obscurity" wankers

axh@lemmy.world · 11 pts · 259d

It's the dumbest "security" rule I ever heard of. It's a "limited access" shared by almost 30 million people.

slavistapl@szmer.info · 2 pts · 259d

Even if you manage to log in here, there's nothing much to browse here. It's just the mObywatel's UI components' code.

Which by itself is useless.

handsoffmydata@lemmy.zip · 18 pts · 259d

I wanted to award it worst app name but translated from Polish it’s mCitizen which is a pretty dope name.

bobslaede@feddit.dk · 13 pts · 259d (1 reply)

In Denmark, the state is worried that releasing especially the ui code, will leed to more phishing. Thats their excuse for not releasing government projects source code.

ExcessShiv@lemmy.dbzer0.com · 19 pts · 259d

Because replicating UI design is of course the hardest thing about phishing attacks, making them virtually impossible without the source code...god damn that is such a bullshit reason.

charles@social.charles.wiki · 3 pts · 259d (1 reply)

[ removed ]

slavistapl@szmer.info · 2 pts · 259d

[ removed ]