Luca App: CCC calls for a moratorium

Especially since there is already a government funded app (whose developers also make a much more competent impression) which is scheduled to receive similar functionality as the Luca app with the next update.

Re: Luca App: CCC calls for a moratorium

#6

Post by lampe3 » Fri, Apr 16, 2021, 2:17 PM UTC

seesawtron wrote: post #3

Is this one of the many examples of German government wasting taxpayer's money?

yes and its super easy to just create random valid qr codes: https://wolf128058.gitlab.io/schmudo2go/

also they don't have any rate limit on the sms service...

so anybody can build a loop and call the sms endpoint...

More fails:

- https://github.com/mame82/misc/blob/master/luca_traceIds.md

- https://lucatrack.de/

- development private and public key in the repo ( not harmful but a bad sign)

- more that i forgot

Re: Luca App: CCC calls for a moratorium

#7

Post by black_puppydog » Fri, Apr 16, 2021, 2:18 PM UTC

pantalaimon wrote: post #5

seesawtron wrote: post #3

Is this one of the many examples of German government wasting taxpayer's money?

Yes. Especially since there is already a government funded app (whose developers also make a much more competent impression) which is scheduled to receive similar functionality as the Luca app with the next update.

And which doesn't have to plan for a business model post-pandemic.

Re: Luca App: CCC calls for a moratorium

#8

Post by majkinetor » Fri, Apr 16, 2021, 2:19 PM UTC

This is amazing.

There should be hacker clubs in each country double checking all suspicious public procurements.

Re: Luca App: CCC calls for a moratorium

#9

Post by jtdev » Fri, Apr 16, 2021, 2:19 PM UTC

Is there a U.S. based Chaos Computer Club (CCC) or CCC like group?

Re: Luca App: CCC calls for a moratorium

#10

Post by ThePhysicist » Fri, Apr 16, 2021, 2:19 PM UTC

The Luca app really is a complete train wreck. And what's worse is that the federal governments don't even have any direct control over the app itself, they just bought access to the contact tracing data for 12 months from the company operating the app. Meanwhile the company controls the app and all connected user accounts and can repurpose it in whichever way they see fit (and they already announced they have plans for the app beyond the pandemic).

It's absolutely mind-boggling to me how our government(s) can get the idea to "rent" contact tracing data from a private company like this, it just reeks of corruption. I wasn't a big fan of the Covid tracing app in the beginning, but in retrospect the concept of that app seems miles ahead of the current situation with the Luca app.