Stories
Slash Boxes
Comments

SoylentNews is people

posted by martyb on Friday August 21 2020, @01:57PM   Printer-friendly
from the eye-see-you dept.

College contact-tracing app readily leaked personal data, report finds:

In an attempt to mitigate the potential spread of COVID-19, one Michigan college is requiring all students to install an app that will track their live locations at all times. Unfortunately, researchers have already found two major vulnerabilities in the app that can expose students' personal and health data.

Albion College informed students two weeks before the start of the fall term that they would be required to install and run the contact tracing app, called Aura.

[...] Aura, however, goes all in on real-time location-tracking instead, as TechCrunch reports. The app collects students' names, location, and COVID-19 status, then generates a QR code containing that information.

[...] TechCrunch used a network analysis tool to discover that the code was not generated on a device but rather on a hidden Aura website—and that TechCrunch could then easily change the account number in the URL to generate new QR codes for other accounts and receive access to other individuals' personal data.

A student at Albion, looking into the app's source code, also found hard-coded security keys for the app's backend servers. A researcher took a look and verified that those keys gave access to "patient data, including COVID-19 test results with names, addresses, and dates of birth," TechCrunch reports.


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 1, Informative) by Anonymous Coward on Saturday August 22 2020, @03:39PM (6 children)

    by Anonymous Coward on Saturday August 22 2020, @03:39PM (#1040423)

    It's already over in Sweden: herd immunity has pretty much been achieved now.

    Why are idiots like you too stupid to actually google things and find out?

    https://covid19-country-overviews.ecdc.europa.eu/#33_sweden [europa.eu]

    The 2 week covid rates are notching up again. They are already at up to 50/100,000 which is enough to trigger travel warnings from the sane countries. 50+ means "outbreak". And Sweden has had public gathering cancellations and remote working for MONTHS.

    https://www.reuters.com/article/us-health-coronavirus-sweden-toll/coronavirus-pushes-swedish-deaths-to-highest-since-1993-in-april-idUSKBN22U1S4 [reuters.com]

    next mark for Sweden is 1918 flu deaths. yay!!

    https://medicalxpress.com/news/2020-08-covid-herd-immunity-sweden-materialize.html [medicalxpress.com]

    The health authorities predicted that 40% of the Stockholm population would have had the disease and acquired antibodies by May 2020. However, the actual prevalence figure was around 15%. While clinical and research findings suggest that severely infected COVID-19 patients do acquire antibodies in the immediate and early recovery phase of their illness, antibodies are much less commonly found in only mildly ill or asymptomatic patients. This means they are very likely not to be immune, and so cannot act as a bulwark against further spread of infection amongst the community.

    Starting Score:    0  points
    Moderation   +1  
       Informative=1, Total=1
    Extra 'Informative' Modifier   0  

    Total Score:   1  
  • (Score: 0) by Anonymous Coward on Saturday August 22 2020, @04:05PM (5 children)

    by Anonymous Coward on Saturday August 22 2020, @04:05PM (#1040432)

    Yeah, I saw the Swedish public health agency announced 5 persons died last week. 20 the week before.

    If that isn't justification to keep us all locked down, what is?

    I understand that governments want to push the propaganda that their imprisoning the healthy population was somehow the right thing to do, even given Sweden's experience. I don't understand how some Joe sitting at home can cheerlead for that. Perhaps you are living well on your government check?

    • (Score: 1, Insightful) by Anonymous Coward on Saturday August 22 2020, @04:54PM (2 children)

      by Anonymous Coward on Saturday August 22 2020, @04:54PM (#1040449)

      "Better safe than sorry" is a philosophy that very many people espouse. Macho man "who gives a fuck about less than a percent mortality" only appeals to those without family or loved ones.

      • (Score: 0) by Anonymous Coward on Tuesday August 25 2020, @05:03PM (1 child)

        by Anonymous Coward on Tuesday August 25 2020, @05:03PM (#1041702)

        You can only live that philosophy if someone is paying you to live for free.

        • (Score: 2) by acid andy on Tuesday August 25 2020, @05:32PM

          by acid andy (1683) on Tuesday August 25 2020, @05:32PM (#1041713) Homepage Journal

          Not if you're living on money you earned. Some people are lucky enough to work from home.

          --
          If a cat has kittens, does a rat have rittens, a bat bittens and a mat mittens?
    • (Score: 2) by acid andy on Saturday August 22 2020, @10:58PM (1 child)

      by acid andy (1683) on Saturday August 22 2020, @10:58PM (#1040546) Homepage Journal

      You're assuming there are no serious longer term effects on the healthy population that are infected and recover, such as shortened life expectancy. No-one knows that yet.

      --
      If a cat has kittens, does a rat have rittens, a bat bittens and a mat mittens?
      • (Score: 0) by Anonymous Coward on Tuesday August 25 2020, @05:05PM

        by Anonymous Coward on Tuesday August 25 2020, @05:05PM (#1041703)

        We don't know yet if the sun is going to explode tomorrow.

        And Sweden has so far not yet called for attention to any supposed Covid cripples.