Australian contact-tracing app leaks telling info and increases chances of third-party tracking, say security folks

Australian contact-tracing app leaks telling info and increases chances of third-party tracking, say security folks

Phone model recorded, unique ID infrequently refreshed – but Atlassian's Mike Cannnon-Brookes says use it and two million peeps agree


The design of Australia’s COVIDSafe contact-tracing app creates some unintended surveillance opportunities, according to a group of four security pros who unpacked its .APK file.


Penned by independent security researcher Chris Culnane, University of Melbourne tutor, cryptography researcher and masters student Eleanor McMurtry, developer Robert Merkel and Australian National University associate professor and Thinking Security CEO Vanessa Teague and posted to GitHub, the analysis notes three concerning design choices.


The first-addressed is the decision to change UniqueIDs – the identifier the app shares ..

Support the originator by clicking the read the rest link below.