Live data from Hacker News

Luca App: CCC calls for a moratorium

ccc.de

71–80 of 169 posts

Re: Luca App: CCC calls for a moratorium

#71
Wow this is bad, I'm sorry to hear it's already mandatory in one German state.

I'm really surprised Germany is playing so loose and fast with privacy as they're known to be one of the countries with the strictest privacy laws around.

By the way how does this work being mandatory with people that don't own a smartphone??

Re: Luca App: CCC calls for a moratorium

#72
post #57

What's the difference between this Luca app and the "official" German covid tracing app (Corona-Warn)? Or are they the same thing?

Luca app is made by a private company and stores personal data on a central server.

The official Corona Warn App uses the Exposure Notification Framework and does not share any personal data.

Re: Luca App: CCC calls for a moratorium

#73
post #9

Is there a U.S. based Chaos Computer Club (CCC) or CCC like group?

My understanding as an outsider who has never been to the US is that the US hacker scene is quite different. One notable difference is a much closer connection to e.g. intelligence services. On the other hand, the relationship to democratic processes, as well as the stance on state/federal involvement in IT problem spaces, seems to differ between Germany and the US. Again: I'm an outsider and would actually like to h…

> One notable difference is a much closer connection to e.g. intelligence services.

Some CCC hackers had a pretty good relationship with the Russian KGB. They got information about a wide range of US military secrets including details about the Space Defense Initiative (SDI). They were so successful that they wound up dead and a movie was made about them. Since then the CCC has to be heavily infiltrated by all kinds of Intelligence Services.

Re: Luca App: CCC calls for a moratorium

#74

Earlier quoted context omitted.

My understanding as an outsider who has never been to the US is that the US hacker scene is quite different. One notable difference is a much closer connection to e.g. intelligence services. On the other hand, the relationship to democratic processes, as well as the stance on state/federal involvement in IT problem spaces, seems to differ between Germany and the US. Again: I'm an outsider and would actually like to h…

> One notable difference is a much closer connection to e.g. intelligence services. Some CCC hackers had a pretty good relationship with the Russian KGB. They got information about a wide range of US military secrets including details about the Space Defense Initiative (SDI). They were so successful that they wound up dead and a movie was made about them. Since then the CCC has to be heavily infiltrated by all kinds…

> Since then the CCC has to be heavily infiltrated by all kinds of Intelligence Services.

I think this more served as a cautionary tale to not get involved with this kind of agencies at all.

Re: Luca App: CCC calls for a moratorium

#75

Earlier quoted context omitted.

> One notable difference is a much closer connection to e.g. intelligence services. Some CCC hackers had a pretty good relationship with the Russian KGB. They got information about a wide range of US military secrets including details about the Space Defense Initiative (SDI). They were so successful that they wound up dead and a movie was made about them. Since then the CCC has to be heavily infiltrated by all kinds…

> Since then the CCC has to be heavily infiltrated by all kinds of Intelligence Services. I think this more served as a cautionary tale to not get involved with this kind of agencies at all.

I think the CCC has a strong ethos to not work for such agencies but I'm sure many members do it, either because they are agents or because of other incentives.

Re: Luca App: CCC calls for a moratorium

#76
post #57

What's the difference between this Luca app and the "official" German covid tracing app (Corona-Warn)? Or are they the same thing?

The official app stores all its data decentralized, only cryptographic hashes are stored centrally that each device then can check locally for potential risks. In the Luca app, the user's location data is stored centrally, and the states can then purchase a license to access data of potentially risky contacts. (BTW the public health offices are notoriously overworked during the pandemic, so it's not clear to me if th…

> (BTW the public health offices are notoriously overworked during the pandemic, so it's not clear to me if they'd even manage to do anything with this data).

Anecdotally most of them are completely overwhelmed because of the currently fairly high case numbers and effective contact tracing does not really happen anymore. Also they mostly live in the technological stone age so they have a hard time scaling it up [1].

[1] https://www.dw.com/en/german-health-care-tackling-covid-with...

Re: Luca App: CCC calls for a moratorium

#77

Wow this is bad, I'm sorry to hear it's already mandatory in one German state. I'm really surprised Germany is playing so loose and fast with privacy as they're known to be one of the countries with the strictest privacy laws around. By the way how does this work being mandatory with people that don't own a smartphone??

It stated in the article that you can purchase a fob which can be used in place of the smartphone app.

Re: Luca App: CCC calls for a moratorium

#78

Wow this is bad, I'm sorry to hear it's already mandatory in one German state. I'm really surprised Germany is playing so loose and fast with privacy as they're known to be one of the countries with the strictest privacy laws around. By the way how does this work being mandatory with people that don't own a smartphone??

> I'm really surprised Germany is playing so loose and fast with privacy

You're surprised because you're expecting politicians to have consistent principles, but it's just about what's convenient right now. This is an inherent issue with having elections every couple of years.

Re: Luca App: CCC calls for a moratorium

#79
post #29

There is so much incompetency in governmental IT/software decisions and software it's actually sad. Is it a product of smart people simply not working in this sector or corruption?. It seems from the outside to be filled with imbeciles masquerading as administrators. We need to somehow make the government way more accountable, if only there was an organization that could do that, we could call it the media.

Weirdly enough, the Bundesamt für Sicherheit in der Informationstechnik (BSI), Germany's cyber security authority, is actually very good and has very competent security experts. I bet the officials never consulted them about Luca.

Re: Luca App: CCC calls for a moratorium

#80
post #6

Is this one of the many examples of German government wasting taxpayer's money?

yes and its super easy to just create random valid qr codes: https://wolf128058.gitlab.io/schmudo2go/ also they don't have any rate limit on the sms service... so anybody can build a loop and call the sms endpoint... More fails: - https://github.com/mame82/misc/blob/master/luca_traceIds.md - https://lucatrack.de/ - development private and public key in the repo ( not harmful but a bad sign) - more that i forgot

What do these QR codes do?
Post reply on HN