search

corona-warn-app / cwa-wishlist

Central repository to collect community feature requests and improvements. The CWA development ends on May 31, 2023. You still can warn other users until April 30, 2023. More information:
https://coronawarn.app/en/faq/#ramp_down
Apache License 2.0
105 stars 14 forks source link

Corona Warn App not available in the Singapore Play store #612

Open radursar opened 3 years ago

radursar commented 3 years ago

Hey, it's not possible to get the Corona Warn App via the Singaporean Google Play store. I'm a German citizen working/living in Singapore and will be going to Germany every now and then to visit family. It would be great if it'd be possible to get the app in Singapore as well. I can't change the county of my Google account as this is only possible once a year.

Although Singapore is a rather small country, there's a big expat community here so I'd guess this issue doesn't just apply to me. Would be great if Singapore could be added to the list of counties where the app is available as I'm gonna fly to Germany tomorrow and would want to have the app. Also, the data protection laws in Singapore are much less restrictive compared to the EU so that should probably not be a problem. Thanks!

Internal Tracking-ID: EXPOSUREAPP-2041

mohe2015 commented 3 years ago

Depending on your urgency you could probably try to use the Google-free variant https://f-droid.org/en/packages/de.corona.tracing/. Or somehow get the APK otherwise but this is probably dangerous and I don't know if it even works.

radursar commented 3 years ago

Thanks for the idea. But installing an app not from the play store is not an option for me. As you said, too dangerous. I hope the geo-blocking for Singapore will be lifted.

Depending on your urgency you could probably try to use the Google-free variant https://f-droid.org/en/packages/de.corona.tracing/. Or somehow get the APK otherwise but this is probably dangerous and I don't know if it even works.

mohe2015 commented 3 years ago

That's not exactly what I meant but I understand that. f-droid.org is a comparably trusted third party app store (and especially the de.corona.tracing app there).

vaubaehn commented 3 years ago

@radursar For Android phones, the Corona Contact Tracing Germany (CCTG) app is actually a fork of Corona-Warn-App, providing same/similar functionality with a different visual design. The main difference is the engine of the bluetooth tracing that is taking advantage of the microG project and offers similar functionality. There are even some advantages that are not able for Corona-Warn-App due to Google's policies. The maintainers are highly trustful and they are also helping out here for Corona-Warn-App, e.g., by providing bug fixes. The CCTG app has the same level of data privacy like Corona-Warn-App - so it's safe to use from this aspect. I highly recommend to give it a try!

Ein-Tim commented 3 years ago

The maintainers of CCTG are @fynngodau & @bubu.

vaubaehn commented 3 years ago

Maybe @fynngodau / @Bubu can add some information about the security of installing apps from the f-droid store?

fynngodau commented 3 years ago

I feel this is might be a bit off-topic, and I'm trying not to advertise our project in this issue tracker more than is appropriate, but since there's not much to discuss on-topic and since I was asked about this above, I'll outline an argument for the statement that installing CCTG from f-droid.org is at least as trustworthy as installing the CWA app from the Google Play store.

The reason is reproducible builds. Our application can be built reproducibly (though 2.6 not quite yet), meaning that everyone can independently verify that the application package (APK) on f-droid.org matches the source code in our repository.

In turn, if one were concerned about this specifically, it would be possible to inspect the difference between the CWA codebase and the CCTG codebase using standard git tooling to ensure that we have not introduced any malicious changes.

For CWA, there is no automatic or documented process to verify that the APK file distributed through Google Play was indeed generated from the source code that is made available in the Android repository (though manual inspections may make this plausible). See #275.

heinezen commented 3 years ago

@radursar @fynngodau @mohe2015

Installing CCTG is a viable alternative to get the CWA installed if you have no other option. CCTG is a direct fork of the CWA and should work exactly the same way. However, since development is not controlled by the RKI, we (the CWA Open Source Team) do not oofficially support CCTG.

Corona-Warn-App Open Source Team