Live data from Hacker News

Everyone going to World Cup must have this app, experts are sounding the alarm

nrk.no

241–250 of 354 posts

Re: Everyone going to World Cup must have this app, experts are sounding the alarm

#241

Earlier quoted context omitted.

Quoted post unavailable.

My point was that in countries that make private, consensual activities against the law there are much more severe consequences possible for events that compromise your privacy.

No post body was provided.

Re: Everyone going to World Cup must have this app, experts are sounding the alarm

#243
post #31

Earlier quoted context omitted.

> what is with you people thinking like nothing else other than Apple products exist? I was addressing the specific claim that “everyone” had to give these permissions.

Can they ask for read/write permissions on dozens of folders? I have no idea I never got interested in iphones.

They can ask for access to their own directory on iCloud, or arbitrary files on the iCloud Drive. They cannot ask for access to other directories than their own on the device, sandboxing is rather strict.

It’s still not ideal; mobile platforms are not designed to protect you from state actors.

Re: Everyone going to World Cup must have this app, experts are sounding the alarm

#244
post #105

Earlier quoted context omitted.

A more likely scenario which mirrors how discriminatory laws work elsewhere: 1. Get arrested for a minor offence like speeding. 2. Law enforcement checks your app and infers you are gay (maybe wedding photos of you and your spouse?) 3. It was going to be just a fine, but now you are facing prosecution for the much more serious offence of being gay. 4. Law enforcement officer can make the charges disappear for the rig…

No, it’s worse. All of these steps are asynchronous besides #1, which they don’t need to do upfront… We are apparently in the age of “I can draw a square on google maps, so that makes me privy to [chunk of mass privacy information]”. Worse is they don’t even need the mapping platform to cooperate. Most of this information probably still flows through second-party data brokers or else we would have heard whispers that…

Yup, women in the US need to be extremely careful about the apps they install. In Texas, app devs can get massive bounties for reporting if a woman has a medical procedure.

Re: Everyone going to World Cup must have this app, experts are sounding the alarm

#245
post #10

Earlier quoted context omitted.

You can’t grant access on iOS “to view / edit / delete all/any data”, that’s physically not possible, even with the hidden SDKs that only select parties have access to.

Doesn't Apple's MDM allow that?

Something close to that, AFAIK. But then, it’s not “go download this app from the store”. More like “we steal your phone, jailbreak it, and now we can see everything”. Not sustainable at scale.

Re: Everyone going to World Cup must have this app, experts are sounding the alarm

#246
post #84

Every country should have rights to control what enters their borders. Be it phones or people. Nothing unreasonable here considering the existing standards of border control around the world. Just next logical step to prevent terrorism and undesirable activities. Don't like it, don't go.

> Don't like it, don't go. I am not going, but I guess players do not have this choice?

It can have some repercussions. Few decisions in life are really easy…

Re: Everyone going to World Cup must have this app, experts are sounding the alarm

#247
Luckily my country is already so creepy this qatar thing is a fully non-issue for me. In fact, i wouldn't even have to know about the app before travelling to deal with this.

ANY time I go through US airport security, I don't take my phone. I take a burner phone that doesn't have any of my accounts logged in or personal data on it.

From my understanding, they can and will dd your whole phone image to some national security database while holding you for 'enhanced screening.'

Re: Everyone going to World Cup must have this app, experts are sounding the alarm

#248

Permissions from Aurora Store (3rd party to Play Store): Hayya: - control vibration - have full network access - prevent phone from sleeping - run at startup - run foreground service - view Wi-Fi connections - view network connections - access sensor data at a high sampling rate - access approximate location only in the foreground - access precise location only the foreground - listen to C2DM messages Etheraz: - acce…

I'm guessing they used some framework and the libraries they used ask for a broad set of permissions because they offer access to their functions. But they're not necessarily used. Also considering they're asking for a permission for a protocol that was shut down 7 years ago, the framework must be quite old. Android permissions were less granular back then. I know someone in Germany and their covid tracking app tells…

Giving the benefit of the doubt to naivety is reckless in a security context.

Re: Everyone going to World Cup must have this app, experts are sounding the alarm

#249
post #76
post #22

What if you don’t have a smart phone? Or hell, what about one that’s 5+ years old? Are they just SoL?

Most likely you are SoL. By the sounds of it they simply won't let you into the country unless you can show that you've installed their covid tracking app

No post body was provided.

Re: Everyone going to World Cup must have this app, experts are sounding the alarm

#250

Earlier quoted context omitted.

> there was nothing specific that the mobile app could do that a simple website couldn’t … I’m sure even a printed QR code would of sufficed. I don’t know about that app specifically, but most of the major ticketing providers are doing dynamic barcodes[1] now that are effectively TOTPs for entry. You can’t do this reliably on the web for a major event because you can’t assume network connectivity, and obviously a pri…

> You can’t do this reliably on the web for a major event because you can’t assume network connectivity I can't believe I'm saying this, but you could've use PWA instead (except for brightness).

You're not wrong, but the pushback for doing an app like this as a PWA will always be discoverability - it's a lot easier to just say "search UEFA 22 in the App Store" than it is to point people to a URL and teach them how to use the add to Home Screen functionality.
Post reply on HN