23 Mar 2020
The Rio de Janeiro City Hall has signed an agreement with telecomunications company TIM to use geolocation data to develop "heat maps" by cross-referencing epidemological hubs with high population density locations. Under the agreement, TIM will pinpoint the movement of its users across Rio de
23 Jul 2018
Bluetooth firmware or operating system software drivers may not sufficiently validate elliptic curve parameters used to generate public keys during a Diffie-Hellman key exchange, which may allow a remote attacker to obtain the encryption key used by the device.
Bluetooth utilizes a device pairing mechanism based on elliptic-curve Diffie-Hellman (ECDH) key exchange to allow encrypted communication between devices. The ECDH key pair consists of a private and a public key, and the public keys are exchanged to produce a shared pairing key. The devices must
13 Sep 2017
Questions are being raised again about the security of Bluetooth after researchers uncovered another flaw that could potentially compromise billions of devices.
Armis published details of the Bluetooth vulnerability it is calling ‘Blueborne’. The attack disguises itself as a Bluetooth device and exploits a weaknesses in the protocol to deploy malicious code.
“The BlueBorne attack vector requires no user interaction, is compatible to all software versions, and does not require any preconditions or configurations aside of the Bluetooth being active,” warned the researchers. “Unlike the common misconception, Bluetooth enabled devices are constantly
18 Nov 2019
An engineering and computer science professor and his team from The Ohio State University discovered a design flaw in low-powered Bluetooth devices that leaves them susceptible to hacking.
An engineering and computer science professor and his team from The Ohio State University discovered a design flaw in low-powered Bluetooth devices that leaves them susceptible to hacking. Zhiqiang Lin, associate professor of computer science and engineering at the university, found the commonly
06 Feb 2020
On November 3rd, 2019, [...] a critical vulnerability affecting the Android Bluetooth subsystem [was reported]. This vulnerability has been assigned CVE-2020-0022 and was now patched in the latest security patch from February 2020 .
On November 3rd, 2019, [...] a critical vulnerability affecting the Android Bluetooth subsystem [was reported]. This vulnerability has been assigned CVE-2020-0022 and was now patched in the latest security patch from February 2020. The security impact is as follows: On Android 8.0 to 9.0, a remote
Researchers at the Center for IT-Security, Privacy and Accountability (CISPA) have identified a security vulnerability related to encryption on Bluetooth BR/EDR connections. The researchers identified that it is possible for an attacking device to interfere with the procedure used to set up encryption on a BR/EDR connection between two devices in such a way as to reduce the length of the encryption key used.
Researchers at the Center for IT-Security, Privacy and Accountability (CISPA) have identified a security vulnerability related to encryption on Bluetooth BR/EDR connections. The researchers identified that it is possible for an attacking device to interfere with the procedure used to set up
27 Mar 2020
Together with Norwegian company Simula the Norwegian Institute of Public Health is developping a voluntary app to track users geolocation and slow the spread of Covid-19. Running in the background, the app will collect GPS and Bluetooth location data and store them on a server for 30 days. If a user
19 Mar 2020
In response to a case brought by the Legal Center for Arab Minority Rights in Israel (Adalah), the Arab Joint List, and the Association for Civil Rights in Israel, the Israeli Supreme Court issued a temporary injunction on March 19 limiting the the state's and the Shin Bet security service's use of
20 Mar 2020
On March 20, the Peruvian government introduced a website where citizens can retrieve the results of tests for COVID-19. The site asks only for the patient to fill in their National ID number and a simple captcha, making it easy for unauthorised parties to access others' results and put people at
18 Mar 2020
The Romanian government has formally notified the Council of Europe under Article 15, paragraph 3 of the ECHR of the country's state of emergency decree, noting that some of the measures being taken involve derogations from the obligations under the Convention. Source: https://rm.coe.int
23 Mar 2020
The Local Government Association has argued that councils should not have to comply with freedom of information requests during the coronavirus crisis. Greater Manchester police followed suit, saying that police in non-critical roles were being reallocated to operational policing and would not
18 Mar 2020
On March 19, the Peruvian government instituted a daily curfew from 8pm to 5am, which applies to all but those working to provide essential services. Members of the print and broadcast press must carry their special permits, badges, and ID cards, and those requiring urgent medical care are allowed
14 Mar 2020
On March 14, Romanian president Klaus Iohannis announced a state of emergency to make it possible to allocate new resources for crisis management, and urged the public to follow isolation guidelines and hygiene rules. The Parliament must approve within five days, and the state of emergency lasts 30
17 Mar 2020
Aided by its small size, Singapore's contact tracing efforts were a key element of controlling the virus's spread; detectives used CCTV footage to locate the contacts of more than 6,000 people. Singapore also contacts individuals required to self-isolate several times a day and requires them to send
14 Mar 2020
On March 14 a group of immigrant advocacy groups wrote to the government asking for the Home Office to release all 1,500 to 2,000 detainees in order to protect them from a coronavirus outbreak in the UK's seven removal centres and two short-term holding centres.. On March 21, the Home Office said it
