"Majority of COVID-19 Contact Tracing Apps Lack Adequate Security"

A recent report by Gaurdsqaure reveals that most government COVID-19 contact tracing apps from the U.S. and other countries around the world lack adequate security, leaving the apps vulnerable to hacking. This discovery comes from the assessment of 17 government entity-built Android mobile contact tracing apps launched in 17 different countries. The American Civil Liberties Union, Congress, and the Electronic Frontier Foundation have all highlighted the potential threats such apps pose to privacy and security. According to Gaurdsqaure's report, most of the apps analyzed by researchers, do not include string encryption, emulator detection, resource encryption, class encryption, some level of name obfuscation, or other security hardening technique. This article continues to discuss key findings regarding the security of COVID-19 contact tracing apps, the potential impact of security flaws in these apps, and the importance of using a layered security approach in the development of mobile apps. 

HealthITSecurity reports "Majority of COVID-19 Contact Tracing Apps Lack Adequate Security"

Submitted by Anonymous on