Re: Grant Application from Fraser Tweedale for Support the myGov Code Generator source code FOI review
Jonathan Oxer via linux-aus <[email protected]> Thu, 16 Jul 2026 22:23:13 +1000
| Newsgroups | gmane.linux.australia |
|---|---|
| Message-ID | <CADBU0ecxo8FxfZhPe0kFsaHXGn-L4sV-KRP7f_-GxWCgCBCkOg@mail.gmail.com> |
--===============7512829147213361681== Content-Type: multipart/alternative; boundary="000000000000bc15a90656b98104" --000000000000bc15a90656b98104 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable I fully support this initiative by Fraser and would like to see the grant approved for the full amount. Linux Australia is generally seen as having a primary role within the Open Source community as a facilitator of conferences and events. However, it has also undertaken other roles in the past including lobbying, such as during the period of the introduction of the Australia-United States Free Trade Agreement (AUSFTA) way back in 2004/5. I believe that supporting initiatives such as Fraser's are directly in line with the values and mission of the organisation: https://linux.org.au/about-us/values/ It's easy to let issues like this slide. When someone is willing to step up and take a stand, we as a community should support them. Regards, Jonathan Oxer On Thu, 16 Jul 2026 at 21:08, Linux Australia Website via linux-aus < [email protected]> wrote: > Your Email Address: frase-LQH3g+Q4lh66c6uEtOJ/[email protected] > Project name: Support the myGov Code Generator source code FOI review > Grant Type: Project Grant > Aim of the project: I am applying for a grant of $5,000 to help cover > litigation costs in a Freedom of Information review at the Administrative > Review Tribunal. The matter is *Tweedale and CEO, Services Australia*, fi= le > 2025/4916. I applied for review of Services Australia=E2=80=99s access re= fusal > decision in relation to my request for access to the source code of the > myGov Code Generator app, a (now retired) mobile app published by Service= s > Australia for myGov login MFA (TOTP). The case involves critical question= s > about government transparency and software security, the validity of > =E2=80=9Csecurity by obscurity=E2=80=9D arguments in this context, and th= e benefits and > consequences of governments granting access to the source code of > applications they develop and expect citizens to run on their devices. > Much more detail about this matter, and regular updates, are available at > https://openmygov.au. > The outcomes of this legal proceeding and my associated efforts will > include: > * Precedent: A binding or persuasive administrative law decision regardin= g > the accessibility of government-developed source code under Australian la= w, > and the validity of =E2=80=9Csecurity by obscurity=E2=80=9D arguments for= refusing access. > * openmygov.au: continued free, unhindered public access to all > disclosable submissions, evidence, expert witness reports, decisions and > other documents, and a chronicle of the conduct of this case=E2=80=94in o= ther > words, a legal toolkit for future open-source FOI litigation in Australia > (and possibly useful elsewhere) > I am happy to answer any questions or provide further information to > Council and/or the Linux Australia membership in support of this > application. > ## Risks and disclosures > ### Impact on LA funding and government relations > Impact: Actively financing public-interest litigation against a major > Federal Government agency may have a chilling effect on future sponsorshi= p > opportunities for LA-auspiced events, or otherwise introduce friction in > LA=E2=80=99s interactions with Government. > Mitigation: Contributing to the costs of this litigation does not enjoin > LA as a party or subject LA to any risks of further direct costs. Also, t= he > matter and the purpose of the review is aligned with Linux Australia=E2= =80=99s > values and purpose and is being pursued in the public interest; it is > unlikely to be perceived as frivilous or vexatious. > ### The Tribunal decides against transparency > Impact: Should the Tribunal agree with the Respondent=E2=80=99s =E2=80=9C= security by > obscurity=E2=80=9D arguments and refuses access, it sets an unfortunate p= recedent. > Mitigation: This is barely worse than the status quo, where agencies > refuse access for these reasons anyway, but those decisions are not > challenged. Grounds for appeal (judicial review) in Federal Court will be > considered, although costs would be in another order of magnitude and may > be prohibitive. Win or lose, the community will have an extensive and > durable record of and playbook for FOI litigation involving open source a= nd > cybersecurity matters. > ### Disclosure of EO2027 treasurer role > I am a core organising team member and the appointed Treasurer for the > Everything Open 2027 conference, which is an official subcommittee of Lin= ux > Australia. I have no influence over grant funding decisions, and conferen= ce > money is managed in complete separate accounts. > Estimated cost breakdown of the project: Through a successful Pozible > crowdfunding campaign early in 2026, and an ongoing Chuffed campaign, I > raised approximately $20,000 to help with the costs of this litigation. > Though I always expected costs to exceed this amount, procedural battles > over Services Australia=E2=80=99s national security claims and applicatio= ns for > confidentiality orders over critical evidence have depleted these funds > sooner than expected. We are now in an intense phase, finalising the > evidence and submissions. The substantive hearing is listed for 3 days fr= om > 2=E2=80=934 September in Melbourne. > Cumulative costs by the end of this proceeding will certainly exceed > $30,000, and could end up in the range of $40,000=E2=80=93$50,000. The sh= ortfall > between funds raised (so far) through crowdfunding campaigns and the > eventual costs is therefore at least $10,000 and possibly much more. In > addition to Wise Law=E2=80=99s fees (the biggest expense by far), my cost= s include > travel to and accommodation in Melbourne for the hearing, and for a one-d= ay > strategy meeting back in February. (Wise Law and both expert witnesses a= re > based in Melbourne.) > I am applying for a **$5,000** grant to help close this gap. I would > gratefully accept any lesser amount the Linux Australia Council deems > appropriate, as I recognise that the requested amount is a significant > proportion of the 2026 grants program budget, and I do not want to > disadvantage or preclude other worthwhile grant opportunities. > Project team details: I (Fraser) am a free software developer and active > member of the Australian open source community. Most of my work over the > last decade has been on open source PKI, authentication and identity > management solutions, and supply chain security. I will give evidence in > this proceeding on open source public policy and law in Australia and > around the world, and on cybersecurity matters. > I have engaged two expert witnesses to assist the Tribunal, both known to > the LA membership and Australian open source community: cryptographer and > electoral security researcher Dr Vanessa Teague; and Dr Peter Serwylo for > his Android expertise and involvement in the F-Droid project. Vanessa and > Peter are providing their services free of charge. > My legal representative in this proceeding is Jason Bosland of Wise Law, = a > boutique cyber law firm based in Melbourne. Jason is an expert in > administrative law, and he has a good grasp on the technical aspects of t= he > case. Wise Law are generously providing their services at a 50% discount, > in recognition of the public interest nature of this case. Jason has also > employed a paralegal to help with preparation of my case; this will reduc= e > costs because the volume of evidence and submissions is significant. > First Name: Fraser > Last Name: Tweedale > Email Address: frase-LQH3g+Q4lh66c6uEtOJ/[email protected] > A statement including a willingness to provide regular project updates on > the project: I publish detailed information and updates about this case a= t > https://openmygov.au/. All information I can publish, I do, including > submissions, evidence, and Tribunal decisions and orders. It will form a > significant and valuable artifact for Freedom of Information applicants o= r > litigants, and people interested in the intersection of free/open source > software, public policy, and administrative law. > I am committed to absolute transparency with respect to all funds receive= d > (from all sources) and all expenditure, including publication of invoices > and bank statements (I have a dedicated bank account for this purpose). > _______________________________________________ > linux-aus mailing list > [email protected] > https://lists.linux.org.au/mailman/listinfo/linux-aus > > To unsubscribe from this list, send a blank email to > linux-aus-unsubscribe-cunTk1MwBs8iFSDQTTA3OBCuuivNXqWP@public.gmane.org > --000000000000bc15a90656b98104 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr">I fully support this initiative by Fraser and would like t= o see the grant approved for the full amount.<div><br></div><div>Linux Aust= ralia is generally seen as having a primary role within the Open Source com= munity as a facilitator of conferences and events. However, it has also und= ertaken other roles in the past including lobbying, such as during the peri= od of the introduction of the Australia-United States Free Trade Agreement = (AUSFTA) way back in 2004/5. I believe that supporting initiatives such as = Fraser's are directly in line with the values and mission of the organi= sation:</div><div><br></div><div><a href=3D"https://linux.org.au/about-us/v= alues/">https://linux.org.au/about-us/values/</a></div><div><br></div><div>= It's easy to let issues like this slide. When someone is willing to ste= p up and take a stand, we as a community should support them.</div><div><br= ></div><div>Regards,</div><div><br></div><div>Jonathan Oxer</div></div><br>= <div class=3D"gmail_quote gmail_quote_container"><div dir=3D"ltr" class=3D"= gmail_attr">On Thu, 16 Jul 2026 at 21:08, Linux Australia Website via linux= -aus <<a href=3D"mailto:[email protected]">[email protected]= nux.org.au</a>> wrote:<br></div><blockquote class=3D"gmail_quote" style= =3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding= -left:1ex">Your Email Address: <a href=3D"mailto:frase-LQH3g+Q4lh66c6uEtOJ/[email protected]" target= =3D"_blank">frase-LQH3g+Q4lh66c6uEtOJ/[email protected]</a><br> Project name: Support the myGov Code Generator source code FOI review<br> Grant Type: Project Grant<br> Aim of the project: I am applying for a grant of $5,000 to help cover litig= ation costs in a Freedom of Information review at the Administrative Review= Tribunal. The matter is *Tweedale and CEO, Services Australia*, file 2025/= 4916. I applied for review of Services Australia=E2=80=99s access refusal d= ecision in relation to my request for access to the source code of the myGo= v Code Generator app, a (now retired) mobile app published by Services Aust= ralia for myGov login MFA (TOTP). The case involves critical questions abou= t government transparency and software security, the validity of =E2=80=9Cs= ecurity by obscurity=E2=80=9D arguments in this context, and the benefits a= nd consequences of governments granting access to the source code of applic= ations they develop and expect citizens to run on their devices.<br> Much more detail about this matter, and regular updates, are available at <= a href=3D"https://openmygov.au" rel=3D"noreferrer" target=3D"_blank">https:= //openmygov.au</a>.<br> The outcomes of this legal proceeding and my associated efforts will includ= e:<br> * Precedent: A binding or persuasive administrative law decision regarding = the accessibility of government-developed source code under Australian law,= and the validity of =E2=80=9Csecurity by obscurity=E2=80=9D arguments for = refusing access.<br> * openmygov.au: continued free, unhindered public access to all disclosable= submissions, evidence, expert witness reports, decisions and other documen= ts, and a chronicle of the conduct of this case=E2=80=94in other words, a l= egal toolkit for future open-source FOI litigation in Australia (and possib= ly useful elsewhere)<br> I am happy to answer any questions or provide further information to Counci= l and/or the Linux Australia membership in support of this application.<br> ## Risks and disclosures<br> ### Impact on LA funding and government relations<br> Impact: Actively financing public-interest litigation against a major Feder= al Government agency may have a chilling effect on future sponsorship oppor= tunities for LA-auspiced events, or otherwise introduce friction in LA=E2= =80=99s interactions with Government.<br> Mitigation: Contributing to the costs of this litigation does not enjoin LA= as a party or subject LA to any risks of further direct costs. Also, the m= atter and the purpose of the review is aligned with Linux Australia=E2=80= =99s values and purpose and is being pursued in the public interest; it is = unlikely to be perceived as frivilous or vexatious.<br> ### The Tribunal decides against transparency<br> Impact: Should the Tribunal agree with the Respondent=E2=80=99s =E2=80=9Cse= curity by obscurity=E2=80=9D arguments and refuses access, it sets an unfor= tunate precedent.<br> Mitigation: This is barely worse than the status quo, where agencies refuse= access for these reasons anyway, but those decisions are not challenged. G= rounds for appeal (judicial review) in Federal Court will be considered, al= though costs would be in another order of magnitude and may be prohibitive.= Win or lose, the community will have an extensive and durable record of an= d playbook for FOI litigation involving open source and cybersecurity matte= rs.<br> ### Disclosure of EO2027 treasurer role<br> I am a core organising team member and the appointed Treasurer for the Ever= ything Open 2027 conference, which is an official subcommittee of Linux Aus= tralia. I have no influence over grant funding decisions, and conference mo= ney is managed in complete separate accounts.<br> Estimated cost breakdown of the project: Through a successful Pozible crowd= funding campaign early in 2026, and an ongoing Chuffed campaign, I raised a= pproximately $20,000 to help with the costs of this litigation. Though I al= ways expected costs to exceed this amount, procedural battles over Services= Australia=E2=80=99s national security claims and applications for confiden= tiality orders over critical evidence have depleted these funds sooner than= expected. We are now in an intense phase, finalising the evidence and subm= issions. The substantive hearing is listed for 3 days from 2=E2=80=934 Sept= ember in Melbourne.<br> Cumulative costs by the end of this proceeding will certainly exceed $30,00= 0, and could end up in the range of $40,000=E2=80=93$50,000. The shortfall = between funds raised (so far) through crowdfunding campaigns and the eventu= al costs is therefore at least $10,000 and possibly much more.=C2=A0 In add= ition to Wise Law=E2=80=99s fees (the biggest expense by far), my costs inc= lude travel to and accommodation in Melbourne for the hearing, and for a on= e-day strategy meeting back in February.=C2=A0 (Wise Law and both expert wi= tnesses are based in Melbourne.)<br> I am applying for a **$5,000** grant to help close this gap. I would gratef= ully accept any lesser amount the Linux Australia Council deems appropriate= , as I recognise that the requested amount is a significant proportion of t= he 2026 grants program budget, and I do not want to disadvantage or preclud= e other worthwhile grant opportunities.<br> Project team details: I (Fraser) am a free software developer and active me= mber of the Australian open source community. Most of my work over the last= decade has been on open source PKI, authentication and identity management= solutions, and supply chain security. I will give evidence in this proceed= ing on open source public policy and law in Australia and around the world,= and on cybersecurity matters.<br> I have engaged two expert witnesses to assist the Tribunal, both known to t= he LA membership and Australian open source community: cryptographer and el= ectoral security researcher Dr Vanessa Teague; and Dr Peter Serwylo for his= Android expertise and involvement in the F-Droid project. Vanessa and Pete= r are providing their services free of charge.<br> My legal representative in this proceeding is Jason Bosland of Wise Law, a = boutique cyber law firm based in Melbourne. Jason is an expert in administr= ative law, and he has a good grasp on the technical aspects of the case. Wi= se Law are generously providing their services at a 50% discount, in recogn= ition of the public interest nature of this case. Jason has also employed a= paralegal to help with preparation of my case; this will reduce costs beca= use the volume of evidence and submissions is significant.<br> First Name: Fraser<br> Last Name: Tweedale<br> Email Address: <a href=3D"mailto:frase-LQH3g+Q4lh66c6uEtOJ/[email protected]" target=3D"_blank">frase= @frase.id.au</a><br> A statement including a willingness to provide regular project updates on t= he project: I publish detailed information and updates about this case at <= a href=3D"https://openmygov.au/" rel=3D"noreferrer" target=3D"_blank">https= ://openmygov.au/</a>. All information I can publish, I do, including submis= sions, evidence, and Tribunal decisions and orders. It will form a signific= ant and valuable artifact for Freedom of Information applicants or litigant= s, and people interested in the intersection of free/open source software, = public policy, and administrative law.<br> I am committed to absolute transparency with respect to all funds received = (from all sources) and all expenditure, including publication of invoices a= nd bank statements (I have a dedicated bank account for this purpose).<br> _______________________________________________<br> linux-aus mailing list<br> <a href=3D"mailto:[email protected]" target=3D"_blank">linux-aus= @lists.linux.org.au</a><br> <a href=3D"https://lists.linux.org.au/mailman/listinfo/linux-aus" rel=3D"no= referrer" target=3D"_blank">https://lists.linux.org.au/mailman/listinfo/lin= ux-aus</a><br> <br> To unsubscribe from this list, send a blank email to<br> <a href=3D"mailto:linux-aus-unsubscribe-cunTk1MwBs8iFSDQTTA3OBCuuivNXqWP@public.gmane.org" target=3D"_blan= k">linux-aus-unsubscribe-cunTk1MwBs8iFSDQTTA3OBCuuivNXqWP@public.gmane.org</a><br> </blockquote></div> --000000000000bc15a90656b98104-- --===============7512829147213361681== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ linux-aus mailing list [email protected] https://lists.linux.org.au/mailman/listinfo/linux-aus To unsubscribe from this list, send a blank email to linux-aus-unsubscribe-cunTk1MwBs8iFSDQTTA3OBCuuivNXqWP@public.gmane.org --===============7512829147213361681==--