ThreatWire 2020 04 14

Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:
____________________________________________
Apple and Google want to track the virus using Bluetooth low energy, what is the EARN IT Act?, and the dark nexus botnet continues to grow! All that coming up now on ThreatWire. #threatwire #hak5

Links:

Links:
Google / Apple tracking:

EARN IT:

Dark Nexus:

Photo credit:

-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
____________________________________________
Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.

[chalmersrussell]

I will only be on board if snowden is.

[rortiz]

I want no part of this tracking business.

[davidmoore]

I have a simple rule about bills involving technology in Congress. If Lindsey Graham supports it, I'm against it.

[paulmilliorn]

Sound like a testing trial for something bigger.

[jackwalsh]

You're being tracked regardless of permission status.
As a individual, I can query Google to provide me with.
My entire history of physical movement for the past
365 days and further. Even you Shannon, have mentioned
this in a few prior episodes. This joint venture for Apple/Google
is more in your face propaganda of existing tracking technologies.
Again, regardless of your consent or not.

[Gruggo]

The Australian government is releasing an app for this. I laughed when I heard the news say "it doesn't track you, it just digitises your location".

[WaschyNumber]

Give the Govermant more power, that's was fine in the past like with Hitler ect.

[Dtr]

all that Bluetooth contacts it doesn't help me and my state because our homeless numbers and drug addict numbers are way too high. I keep telling people once they start spreading, its over.

[noahluppe]

This tracing concept is already in development by German officials and tested by members of the Bundeswehr (German military).
The Servers would be in Germany, held by some official institution and has to be GDPR compliant.
I would strongly tend to this solution than to one by an American company like Google.

[MTS_IT]

LoL temporarily.... google.... ahahahaha will not be used for nothing else....

[rortiz]

This all just sounds like a proof of concept.

[gypsypath]

Add “for now” to every statement put out by Apple and Google.

[notapplicable]

Yes, I'm not using location services anytime soon, especially with BT in an "on" status...

Too much data being "shared" to be "annonimized" IRL, at least IMO...

[jasonpitts]

Opt in is a term they love to use. I think this will be on whether you opt in, download an app, or choose not to. Sort of like how your phone isn't supposed to send packets with your wifi turned off but it still does.

[joejamescat]

Thanks. Everything looked great. Back in the saddle again.

[tonyzone]

My concern is what kind of info would this provide for malicious intent.

[FornicateCircumEtReveles]

What’s the point if I don’t know who or when I came in contact with someone infected? Why not just have an social distancing app that vibrates if you get within 6 feet of another device? That way no tracking at all is used. It’d basically just be a Bluetooth scanner that alarms once you get close to another device..

[lohphat]

How is this tracking vs the existing tools shown in the media demonstrating the spring break kids going back home? It’s clear that’s not opt in.

[lillywho]

My concern would be that someone eventually couldn't keep their hands to themselves, secret backdoors (potentially even by governments) and all kinds of abuse leading up to a surveillance state in some shape or form.

[M.J.C.W.]

Does anyone remember the Mutant Registration Act (MRA) and how well that went?