Month: April 2020

With billions locked down at home by COVID-19, the internet is a lifeline, allowing people to work, study and share ideas online.It also presents opportunities, say the organizers of the Global Hack, a virtual gathering of hundreds of thousands of people in 50 nations taking place Thursday through Saturday, April 9-11. Prizes for the best ideas for new platforms, applications and innovations will be awarded April 12.Hackathons are usually mass gatherings of software developers and graphic designers who tackle problems in a competitive setting. With the Global Hack now under way, creative teams are working remotely to come up with solutions to problems raised by the COVID-19 pandemic and future crises.“We gather people together, with very different skills, different competencies,” said Kai Isand, a leader of the technology collective Accelerate Estonia and head organizer for this weekend’s Global Hack.“We brainstorm ideas, and we actually build them into working prototypes,” she said. A hackathon March 13-15 created a map of COVID-19 cases in Estonia, the country in northern Europe where the online movement Hack the Crisis started. Other teams developed a health questionnaire and a site to link volunteers with medical backgrounds. FILE – An Estonian police officer checks documents at the border crossing point as Estonia reintroduces border control and a ban to enter Estonia for foreigners as a preventive measure against the coronavirus in Valga, Estonia, March 17, 2020.Dozens of nations are now involved.“People said we were in lockdown, and we knocked down the lockdown and we felt so connected with everyone,” said Payal Manan Rajpal, who heads Hack the Crisis, India. She said her country has a huge pool of technology talent, and among the innovations that emerged from a recent Indian hackathon was “an AI (artificial intelligence) enabled robot, which will be very helpful to disinfect via UV (ultraviolet) rays in quarantine wards.” The movement has drawn support from the business community and IT sector.Estonia, where the Hack the Crisis movement started, is a nation of 1.3 million people that embraced the digital revolution early, said Viljar Lubi, Estonian vice minister for economic development for the Ministry of Economic Affairs and Communications.“We thought we could use IT in order to make our government leaner and smoother and bring it closer to its citizens,” he said.Estonia has pursued the concept of digital government, and in last year’s parliamentary election, 44% of Estonian voters cast their votes online. The Hack the Crisis movement began with a call for creative ideas from an Estonian government official. In response, international startup consultant Calum Cameron made a few phone calls and the concept was hammered out, with organizers quickly securing government backing.Within days, the March 13 online hack was under way.The online movement quickly spread to Latvia, Germany, Belarus and dozens of other countries. “Everybody in the region was thinking about it. Everybody had the same idea, but Estonia was the only country that was ready to actually go,” Cameron said.The online hacks are not just for IT experts, said Isand, of the Global Hack, and they welcome educators, designers, marketers and anyone with ideas. Online mentors include Italian astronaut Samantha Cristoforetti, chess grandmaster Garry Kasparov and former Estonian President Toomas Hendrik Ilves. Cameron said that for the first time in history, humanity has been able to come together virtually to address a common problem, “and do something about it … using digital, using internet,” to mitigate this and future crises. 
…

The Department of Defense has issued new guidance on the use of the popular videoconferencing application Zoom following a week-old FBI warning about security issues and a FILE- A Zoom app logo is displayed on a smartphone in Arlington, Virginia, March 30, 2020.The federal government has been no different, despite an FBI announcement April 1 that hackers could exploit weaknesses in videoconferencing software systems like Zoom to “steal sensitive information, target individuals and businesses performing financial transactions, and engage in extortion.”The security concern is much greater than “Zoom bombing” attacks reported by users whose chats have been infiltrated by hackers shouting profanities or posting lewd images.Experts say the teleconferencing app may introduce security risks not only to government employees during Zoom sessions but also to data that reside on government computers.“If there are vulnerabilities, the app can jeopardize the security of data on the computer on which it is installed, or even potentially on other computers on the same network,” Joseph Steinberg, a leading cybersecurity expert and the author of Cybersecurity for Dummies, told VOA. “Such vulnerabilities have been discovered — and more may exist.”Some unaware of risksVOA reporting after the FBI warning on April 1 showed that Zoom remained a popular videoconferencing application for U.S. government employees from the Pentagon to Capitol Hill, not all of whom were aware of its potential risks.A Zoom spokeswoman said Thursday that Zoom takes user security “extremely seriously.”“A large number of global institutions ranging from the world’s largest financial services companies to leading telecommunications providers, government agencies, universities and others have done exhaustive security reviews of our user, network and datacenter layers and confidently selected Zoom for complete deployment,” the spokeswoman said.
…

Apple and Google on Friday launched a major joint effort to leverage smartphone technology to contain the COVID-19 pandemic.New software the companies plan to add to phones would make it easier to use Bluetooth wireless technology to track down people who may have been infected by coronavirus carriers. The idea is to help national governments roll out apps for so-called “contact tracing” that will run on iPhones and Android phones alike.The technology works by harnessing short-range Bluetooth signals. Using the Apple-Google technology, contact-tracing apps would gather a record of other phones with which they came into close proximity. Such data can be used to alert others who might have been infected by known carriers of the novel coronavirus, although only in cases where the phones’ owners have installed the apps and agreed to share data with public health authorities.Software developers have already created such apps in countries including Singapore and China to try to contain the pandemic. In Europe, the Czech Republic says it will release such an app after Easter. Britain, Germany and Italy are also developing their own tracing tools.Privacy and civil liberties activists have warned that such apps need to be designed so governments cannot abuse them to track their citizens. Apple and Google said in a joint announcement that user privacy and security were baked into the design of their plan.’Privacy consequences’ Pam Dixon, executive director of the World Privacy Forum, said she’d be looking closely at the companies’ privacy assurances and for evidence that any health data they collect would be deleted once the emergency was over.”People are dying. We have to save lives. Everyone understands that,” she said. “But at some point, we’re going to have to understand the privacy consequences of this.”Security experts also noted that technology alone cannot effectively track down and identify people who may have been infected by COVID-19 carriers. Such efforts will require other tools and teams of public health care workers to track people in the physical world, they said. In South Korea and China, such efforts have included the use of credit card and public transit records.Given the great need for effective contact tracing — a tool epidemiologists have long employed to contain infectious disease outbreaks — the companies will roll out their changes in two phases. In the first, they will release software in May that lets public health authorities release apps for both Android and iOS phones. In coming months, they will also build this functionality directly into the underlying operating systems.On Friday, the companies released preliminary technical specifications for the effort, which they called “Privacy-Preserving Contact Tracing.”
…

As countries scramble to control the coronavirus pandemic with stay-at-home orders, millions of people around the world have turned to the internet to work, study and stay informed. Monday, global internet volume was up more than 40% since the beginning of the year, according to FILE – Amazon CEO Jeff Bezos speaks during his news conference at the National Press Club in Washington, Sept. 19, 2019.In his role with the U.N., Kaye has been mandated to gather information related to alleged violations of freedom of expression.  Kaye investigated whether a video file allegedly sent to Amazon founder Jeff Bezos from a phone belonging to Saudi Crown Prince Mohammed bin Salman installed a program that was used to spy on the billionaire.  Bezos owns The Washington Post, and some experts have said they believe the hacking of his phone was an effort to influence the paper’s coverage of Saudi Arabia.  The surveillance played out over months and involved the surreptitious transfer of data from Bezos’s phone, the Associated Press reported.  Kaye called on the U.S. and other authorities to investigate allegations that the Crown Prince was involved, Reuters reported in January.  Saudi authorities have rejected the allegations. “Recent media reports that suggest the Kingdom is behind a hacking of Mr. Jeff Bezos’ phone are absurd. We call for an investigation on these claims so that we can have all the facts out,” the Saudi Embassy in Washington said in a January tweet. Recent media reports that suggest the Kingdom is behind a hacking of Mr. Jeff Bezos’ phone are absurd. We call for an investigation on these claims so that we can have all the facts out.— Saudi Embassy (@SaudiEmbassyUSA) January 22, 2020Karen Attiah, the global opinions editor at the Post, who recruited Jamal Khashoggi, the journalist murdered in the Saudi consulate in Istanbul, said she weighs the risks of messaging platforms when using them in her work.  “I don’t have sensitive conversations, work or otherwise, on WhatsApp,” she told VOA. Attiah said she is cautious when sharing “personal or political information with sources who are at risk from their governments.”  ‘Trusting somebody who you shouldn’t be trusting’  Ostrowski’s company works with organizations to alert them of potential loopholes in their software. Tools like WhatsApp, for example, can allow users to share video files. But files can include malignant code that secretly monitors and transmits data.  Most tools offer end-to-end encryption, a kind of technology that ensures communications remain private, making it difficult for third parties, including governments, to eavesdrop on conversations.  But many emerging security problems center around the application itself, not encryption, Ostrowski told VOA.  That means hackers don’t have to break encryption to launch an attack. They merely have to trick the person with whom they’re communicating.  “Because [hackers are] crafting it before it’s sent to the other side, the other side is merely responding to something that’s been crafted, after it’s gone through the encryption,” Ostrowski said.  “You may be trusting somebody who you shouldn’t be trusting,” he added.  Staying safe online takes vigilance, Ostrowski said, especially at moments like the current crisis, when even more aspects of our lives have moved online.  Fortunately, staying alert might go a long way toward keeping us safe.  “A lot of it is common sense,” Ostrowski said. “Who’s going to look after our privacy is you and I.”This story originated in the Africa Division with reporting contributions from VOA English-to-Africa’s Jackson Mvunganyi in Washington.  
…

U.S. military and government employees continue to use the popular videoconferencing application Zoom for official business, despite FBI warnings about privacy and security issues, an action experts fear is increasing the risk of government data breaches.  Zoom has seen a surge in activity during the coronavirus pandemic as office workers across the country have turned to the free app to quickly arrange video calls with dozens of participants. The federal government has been no different, despite an FBI announcement April 1 that hackers could exploit weaknesses in videoconferencing software systems like Zoom to “steal sensitive information, target individuals and businesses performing financial transactions, and engage in extortion.”  The security concern is much greater than “Zoom CEO Eric Yuan attends the opening bell at Nasdaq as his company holds its IPO, April 18, 2019, in New York.Zoom CEO Eric Yuan said in an April 1 blog post that the company was freezing work on new features to focus on fixing its privacy and security problems.   In the meantime, VOA reporting shows that Zoom remains one of the most popular videoconferencing applications for U.S. government employees from the Pentagon to Capitol Hill, not all of whom are aware of its potential risks.  “I’m not aware of any issues with Zoom,” a senior official in the Office of the Joint Chiefs of Staff told a small group of reporters a day after the FBI guidance was issued. The U.S. defense official said he was using Zoom to videoconference amid the need to social distance, but when pressed by VOA about the potential security risks, the official added that every discussion his team had while on Zoom was “at the unclassified level.” Government employees can use Zoom for Government, a paid tier service that is hosted in a separate cloud authorized by the Federal Risk and Authorization Management Program. It is unclear, however, how many government employees have differentiated between the two services thus far. To date, Zoom remains on the approved list of mobile phone applications for U.S. Department of Defense employees, according to multiple officials. However, one senior defense official said the Pentagon was currently looking into “guidance adjustments” for the application. Multiple employees at the State Department have also been using Zoom for official business. One staff member said he and his colleagues have daily Zoom meetings and have not received any guidance against using the app for internal and external communication. Assistant Secretary of State for Political-Military Affairs R. Clarke Cooper last week tweeted about his department’s use of a “Zoom Room.” Be it via “Zoom Room,” WebXing, or VTC, U.S. Defense Secretary Mark Esper gestures during a news conference at the Pentagon, March 5, 2020.Concerns of Chinese cybertheft  Scott Stewart, vice president of Stratfor’s Threat Lens and a former diplomatic security service special agent, told VOA a “good portion” of Zoom’s development team is in China, and the videoconferencing company’s failure to use end-to-end encryption could allow an employee under pressure by the Chinese government to access and share private conversations.  Defense Secretary Mark Esper has repeatedly said maintaining a military advantage over China is the Pentagon’s “highest priority,” and for years top military officers have warned of China’s use of forced technology transfer, intellectual property theft and cyber-espionage to expand their military capabilities. Steinberg told VOA he would not recommend Zoom use on military or government computers. “Other apps are more time tested,” he said. Nike Ching, Katherine Gypson, Michelle Quinn and Patsy Widakuswara contributed to this report.  
…