Privacy Bug Found in Apple, Google COVID-Tracing Framework

[MRM]

European apps using the code can be attacked to “continuously trace” users, which probably isn’t what people wanted to opt into.
In April, tech giants Apple and Google teamed up to put their considerable combined resources toward developing a COVID-19 tracing solution. For those who opt in, the solution automatically uses people’s own smartphones to keep tabs on their proximity to other phones and alerts users if someone they were near has a confirmed diagnosis.

However, an exploit has been discovered in the closed-source project that might stoke fears about Apple and Google phones automatically tracking a person’s proximity to others on a constant basis.
Source : https://decrypt.co/40765/privacy-bug-found-apple-google-covid-tracing-framework

[highnayem34]

Serge Vaudenay (EPFL) and Martin Vuagnoux (base23) posted a video to Vimeo this week (via Hackaday) that demonstrates the exploit, which they discovered in Switzerland’s SwissCovid tracing app, which is based on the code provided by the Apple/Google framework.