stc group is the third-strongest telecom brand worldwide    Saudi Foreign Ministry hosts Iftar reception for diplomatic missions and international organizations    Saudi authorities seize three foreign trucks for unauthorized cargo transport    Taiwan revokes visa of pro-Beijing Chinese influencer    King Salman Royal Reserve records birth of Nubian ibex    British tourist missing after Thailand boat fire    AFC Champions League Elite Finals draw sets stage for Jeddah showdown    Cannes award-winning actress Dequenne dies at 43    Crown Prince launches Saudi Architecture Characters Map to celebrate Kingdom's architectural heritage Saudi architecture set to generate over 34,000 jobs and SR8 billion to GDP by 2030    Saudi Arabia's inflation rate keeps steady at 2% in February    Peace deal must bar Ukraine from Nato, Russian official says    Saudi Arabia grants Tier 1 cybersecurity licenses to six MSOC providers    Newcastle United ends 70-year wait for domestic glory with Carabao Cup triumph    IsDB approves reactivation of Syria's membership    Saudi Arabia launches loan guarantees for SMEs to stimulate investment in environmental projects    Antenna: Saudi artist Ahmed Mater opens first solo exhibition in China    Al Nassr climbs to third with dominant win over Al Khaleej, Al Qadsiah slips after loss to Damac    Saleh Al-Shehri's late penalty rescues Al Ittihad against Al Riyadh    Grand Mufti rules against posting prayers and preaching in mosques on social media    Man lives for 100 days with titanium heart in successful new trial    Singer Wheesung who wooed Korea with his ballads, found dead at 43    King Salman prays for peace and stability for Palestinians in Ramadan message King reaffirms Saudi Arabia's commitment to serving the Two Holy Mosques and pilgrims    Bollywood star Saif Ali Khan 'out of danger' after attack at home in Mumbai    Order vs. Morality: Lessons from New York's 1977 Blackout    Exotic Taif Roses Simulation Performed at Taif Rose Festival    Asian shares mixed Tuesday    Weather Forecast for Tuesday    Saudi Tourism Authority Participates in Arabian Travel Market Exhibition in Dubai    Minister of Industry Announces 50 Investment Opportunities Worth over SAR 96 Billion in Machinery, Equipment Sector    HRH Crown Prince Offers Condolences to Crown Prince of Kuwait on Death of Sheikh Fawaz Salman Abdullah Al-Ali Al-Malek Al-Sabah    HRH Crown Prince Congratulates Santiago Peña on Winning Presidential Election in Paraguay    SDAIA Launches 1st Phase of 'Elevate Program' to Train 1,000 Women on Data, AI    41 Saudi Citizens and 171 Others from Brotherly and Friendly Countries Arrive in Saudi Arabia from Sudan    Saudi Arabia Hosts 1st Meeting of Arab Authorities Controlling Medicines    General Directorate of Narcotics Control Foils Attempt to Smuggle over 5 Million Amphetamine Pills    NAVI Javelins Crowned as Champions of Women's Counter-Strike: Global Offensive (CS:GO) Competitions    Saudi Karate Team Wins Four Medals in World Youth League Championship    Third Edition of FIFA Forward Program Kicks off in Riyadh    Evacuated from Sudan, 187 Nationals from Several Countries Arrive in Jeddah    SPA Documents Thajjud Prayer at Prophet's Mosque in Madinah    SFDA Recommends to Test Blood Sugar at Home Two or Three Hours after Meals    SFDA Offers Various Recommendations for Safe Food Frying    SFDA Provides Five Tips for Using Home Blood Pressure Monitor    SFDA: Instant Soup Contains Large Amounts of Salt    Mawani: New shipping service to connect Jubail Commercial Port to 11 global ports    Custodian of the Two Holy Mosques Delivers Speech to Pilgrims, Citizens, Residents and Muslims around the World    Sheikh Al-Issa in Arafah's Sermon: Allaah Blessed You by Making It Easy for You to Carry out This Obligation. Thus, Ensure Following the Guidance of Your Prophet    Custodian of the Two Holy Mosques addresses citizens and all Muslims on the occasion of the Holy month of Ramadan    







Thank you for reporting!
This image will be automatically disabled when it gets reported by several people.



Qatar's coronavirus app prompts questions of privacy breach
Published in The Saudi Gazette on 27 - 05 - 2020

DUBAI — Qatar's new coronavirus contact tracing app was unveiled with a security risk that allowed for the data of more than 1 million users to be potentially harvested and requests a slew of odd and seemingly unnecessary app permissions.
Following rare backlash, officials were forced to offer reassurance and concessions, revising the app.
The app permissions listed include "access precise location only in foreground," "directly call phone numbers," "read phone status and identity," modify or delete the contents of your shared storage," and "read the contents of your shared storage."
Contact tracing apps, including Qatar's, use Bluetooth radio signals to "ping" nearby devices, which can be contacted subsequently if a user they have been near develops symptoms or tests positive, but the resultant unprecedented access to users' location data has prompted fears about state surveillance.
Now updated, the app is mandatory for Qatari citizens and residents as the government tries to suppress the spread of coronavirus in the country. The country today reported 1,740 new coronavirus cases, and cases are still on the rise in the country. Almost 44,000 of Qatar's 2.75 million people have tested positive for the respiratory disease — 1.6 percent of the population — and 23 people have died.
A new version of the software was released for Apple and Android on Sunday, promising "minor bug fixes," but without indicating that the invasive aspects had been removed.
"The vulnerability (in the app) would have allowed cyber attackers to access highly sensitive personal information, including the name, national ID, health status and location data of more than one million users," an Amnesty International report on the app read.
"There are two key concerns... with the app," said Human Rights Watch researcher Hiba Zayadin.
It "is highly invasive, with a range of permissions allowing the government access to things that are not needed for the purpose of contact tracing, permissions that are unnecessary and present a concerning invasion of privacy."
But also "many migrant workers in the country don't have compatible phones that would allow them to download the app and comply."
The app has so far been downloaded more than 1 million times, and those who do not use the app can face up to three years in prison.
The app relies on a color-coded QR system to alert Qataris of their health, but Amnesty reported that before authorities addressed the security issue, the QR code included personal information.
"Amnesty was able to access sensitive personal information — including names, health status and GPS coordinates of a user's designated confinement location — as the app's central server did not have security measures to protect such data," the report read.
The government fixed the security flaw and added an extra layer of protection, but the watchdog group said it still had concerns about the app and its lack of privacy safeguards.
"Even now, Qatar's app, like many being introduced, remains highly problematic due to its lack of privacy safeguards. Sensitive personal information continues to be uploaded to a central database and the authorities can enable real-time location tracking of users at any time," the organization said.
Qatar is one of 45 countries currently using or planning to introduce contact tracing apps that are designed to help identify how coronavirus spreads, according to Amnesty.
"Contact tracing is an important component of effective pandemic response, and contact-tracing apps have the potential to support this objective. However, in order to be consistent with human rights obligations, these apps must incorporate privacy and data protection by design, meaning any data collected must be the minimum amount necessary and securely stored," Amnesty said. — Al Arabiya English


Clic here to read the story from its source.