Live data from Hacker News

Virtual passport app presents real data risk, experts warn

cbc.ca

11–20 of 100 posts

Re: Virtual passport app presents real data risk, experts warn

#11
In Ukraine, there is a DIYA (Дія) app developed by the government, which holds electronic national passport, passport for traveling abroad, driving license, car registration documents (including car insurance information), child birth certificate (in parents app) and tax payer information. The app generates temporarily barcodes which can be scanned by another DIYA app to verify somebody's identity or presented documents. The national electronic passport can already be used in some companies, like post offices (state and private), banks, etc. Driving license and car registration can be presented to patrol police when requested. Very handy in general, especially if one forgets his wallet. I have a general concerns about privacy and security of this service, but I can also imagine that all the individual databases, which are accessed by this service, may have their own security issues, so having a single entry point is somewhat reducing the attack surface, which may actually be an advantage.

Re: Virtual passport app presents real data risk, experts warn

#12

> IBM Canada has won $1.5M contract to develop new platform for IRCC This will buy what? A team of 4 interns and new grads for 6 months. At the end they'll have a slide deck with too much wordart in ith containing some half-baked ideas, and a few lines of code that don't do anything useful at all and are further from production readiness than starting from scratch.

I wish I was being facetious, but I really don't think I am. IBM hired extensively from my university, I know people who worked there or adjacent to IBM in industry.

They hired the bottom of the cohort (computer science/software engineering) at university and didn't hire anyone who could code. They emphasised communication over technical ability (fine, ok), but their style of communication is business buzzwords in slide decks, not substance. They are keen on business understanding, but that's not product thinking, understanding systems, or the limitations of solutions or anything like that, it's marketing, it's how can we look good.

A friend of mine worked for a company who regularly tidied up IBM messes. He was brought on to a project that had been run by a 5 person IBM team for a year. After a year they had detailed requirements for a system that no one wanted. His team of 3 spent 2-3 weeks building a boring CMS on top of Postgres and S3 and the client were ecstatic because it solved the problem they'd had for years.

The tech talent at IBM still exists, but it's doing the quantum computing research, or developing their mainframe or server business. The rest is a below average consultancy company.

Re: Virtual passport app presents real data risk, experts warn

#13

IBM? Well, I'll never be using that app. To my knowledge, Phoenix Pay System is still in the shambles...

Don't worry, you probably won't have to worry about the choice if they will make it mandatory to confirm your "vaccination status".

Re: Virtual passport app presents real data risk, experts warn

#14

> IBM Canada has won $1.5M contract to develop new platform for IRCC This will buy what? A team of 4 interns and new grads for 6 months. At the end they'll have a slide deck with too much wordart in ith containing some half-baked ideas, and a few lines of code that don't do anything useful at all and are further from production readiness than starting from scratch.

$1.5M goes a long way if the work is outsourced. Generally bigger orgs will have internal contracts. For instance IBM Canada outsources to IBM India at internal discounted rates. When I used to work for TCS, a budget of $80k was good enough for team of 4 for 6 months. I can only imagine that at $1.5M, it is definitely going to get them a few teams.

Re: Virtual passport app presents real data risk, experts warn

#15

> IBM Canada has won $1.5M contract to develop new platform for IRCC This will buy what? A team of 4 interns and new grads for 6 months. At the end they'll have a slide deck with too much wordart in ith containing some half-baked ideas, and a few lines of code that don't do anything useful at all and are further from production readiness than starting from scratch.

Like all IBM projects, it'll go from a small amount to hundreds of millions, and result in still a fancy powerpoint and broken system.

Re: Virtual passport app presents real data risk, experts warn

#16
post #11

In Ukraine, there is a DIYA (Дія) app developed by the government, which holds electronic national passport, passport for traveling abroad, driving license, car registration documents (including car insurance information), child birth certificate (in parents app) and tax payer information. The app generates temporarily barcodes which can be scanned by another DIYA app to verify somebody's identity or presented docume…

That sounds super convenient. Wish we would have something similar in the EU.

Edi: yes, I know Ukraine is in Europe, I meant EU

Re: Virtual passport app presents real data risk, experts warn

#17

> IBM Canada has won $1.5M contract to develop new platform for IRCC This will buy what? A team of 4 interns and new grads for 6 months. At the end they'll have a slide deck with too much wordart in ith containing some half-baked ideas, and a few lines of code that don't do anything useful at all and are further from production readiness than starting from scratch.

$1.5M goes a long way if the work is outsourced. Generally bigger orgs will have internal contracts. For instance IBM Canada outsources to IBM India at internal discounted rates. When I used to work for TCS, a budget of $80k was good enough for team of 4 for 6 months. I can only imagine that at $1.5M, it is definitely going to get them a few teams.

This only works if the internal client doesn't take the savings as margin, _and_ the communication and project management is good enough to overcome the issues that come with outsourcing.

In this case you've now got 3 levels of project management (Canadian govt, IBM CA, IBM India), 2 countries, 2+ languages, and 2 layers of a company who are banned from government contracts in parts of the world for over spending and under delivering.

Re: Virtual passport app presents real data risk, experts warn

#18
post #11

In Ukraine, there is a DIYA (Дія) app developed by the government, which holds electronic national passport, passport for traveling abroad, driving license, car registration documents (including car insurance information), child birth certificate (in parents app) and tax payer information. The app generates temporarily barcodes which can be scanned by another DIYA app to verify somebody's identity or presented docume…

That sounds super convenient. Wish we would have something similar in the EU. Edi: yes, I know Ukraine is in Europe, I meant EU

Convenient ok, but is it secure? https://globalvoices.org/2021/02/11/security-concerns-and-le...

Re: Virtual passport app presents real data risk, experts warn

#19

> IBM Canada has won $1.5M contract to develop new platform for IRCC This will buy what? A team of 4 interns and new grads for 6 months. At the end they'll have a slide deck with too much wordart in ith containing some half-baked ideas, and a few lines of code that don't do anything useful at all and are further from production readiness than starting from scratch.

$1.5M goes a long way if the work is outsourced. Generally bigger orgs will have internal contracts. For instance IBM Canada outsources to IBM India at internal discounted rates. When I used to work for TCS, a budget of $80k was good enough for team of 4 for 6 months. I can only imagine that at $1.5M, it is definitely going to get them a few teams.

What’s the quality of that Indian team like, though? You’re adding multiple layers of overhead before anything gets to the actual workers and in my experience once you got under, say, 70% of U.S. rates the quality plummeted because people capable of doing solid technical work are also capable of researching rates and jumping to a better job.

Re: Virtual passport app presents real data risk, experts warn

#20
post #11

In Ukraine, there is a DIYA (Дія) app developed by the government, which holds electronic national passport, passport for traveling abroad, driving license, car registration documents (including car insurance information), child birth certificate (in parents app) and tax payer information. The app generates temporarily barcodes which can be scanned by another DIYA app to verify somebody's identity or presented docume…

That sounds super convenient. Wish we would have something similar in the EU. Edi: yes, I know Ukraine is in Europe, I meant EU

Ukraine is in Europe.
Post reply on HN