News: 1588577473

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

India makes contact-tracing app compulsory in viral hot zones despite most local phones not being smart

(2020/05/04)


India has made use of a COVID-19 contact-tracing app compulsory in some parts of the nation.

The country yesterday extended its national lockdown for two weeks from today. But the extension is not total: regions that have experienced no new cases at all or none in the last 21 days will be designated “green zones”. But locales with known cases or insufficient data will become “red” or “orange” zones subject to ongoing stay-at-home orders and extensive restrictions on business activity.

And in Red or Orange zones, according to the new [1]Order [PDF] from the Ministry of Home affairs, “The local authority shall ensure 100% coverage of the Aarogya Setyu App among residents of the containment zones.”

Aarogya Setyu is India’s national contact-tracing app and has been pushed by officials from the Prime Minister down as not just a handy tool but one it is just-about-unpatriotic to ignore. India’s IT minister has even labelled it “foolproof”, which sounds like a challenge to black hats!

[2]#QuotableQuotes | “ [3]@SetuAarogya App is foolproof and a secure app.” - [4]@rsprasad Hon'ble IT Minister [5]@GoI_Meity . Get your own personal bodyguard at your fingertips, download the app now -iOS: [6]https://t.co/eeWB6XDG54

Android: [7]https://t.co/X62xHj6EqJ [8]#DigitalIndia [9]#IndiaFightsCorona [10]pic.twitter.com/IAZge7C6Bm — Digital India (@_DigitalIndia) [11]May 1, 2020

This new order may well be impossible to enforce because the app doesn’t run on feature phones, which [12]comprise over half of India’s national phone fleet . However it’s not hard to see why India wants more installs: it’s had around 80 million to date, which is not just over six percent of the country’s population and not a particularly useful sample in a nation where mega-cities top the ten-million-resident mark.

Wanted: An exit strategy from the overt surveillance of smartphone contact tracing [13]READ MORE

Aarogya Setyu uses the now-familiar Bluetooth beacon method for logging users’ activities and its. [14]privacy policy promises data collected will only be used for anonymous heat maps and informing those who encounter COVID-19 sufferers. But the privacy policy also includes a clause saying “All personal information collected from you under Clause 1(a) at the time of registration will be retained for as long as your account remains in existence and for such period thereafter as required under any law for the time being in force.”

That’s not a clause The Register has found in our investigation of similar apps. And now it’s a clause that will bind unknown numbers of users who will be compelled to download the app. ®

Sponsored: [15]How To Accelerate Brilliant Digital Experiences With Low-Code



[1] https://www.mha.gov.in/sites/default/files/MHA%20Order%20Dt.%201.5.2020%20to%20extend%20Lockdown%20period%20for%202%20weeks%20w.e.f.%204.5.2020%20with%20new%20guidelines.pdf

[2] https://twitter.com/hashtag/QuotableQuotes?src=hash&ref_src=twsrc%5Etfw

[3] https://twitter.com/SetuAarogya?ref_src=twsrc%5Etfw

[4] https://twitter.com/rsprasad?ref_src=twsrc%5Etfw

[5] https://twitter.com/GoI_MeitY?ref_src=twsrc%5Etfw

[6] https://t.co/eeWB6XDG54

[7] https://t.co/X62xHj6EqJ

[8] https://twitter.com/hashtag/DigitalIndia?src=hash&ref_src=twsrc%5Etfw

[9] https://twitter.com/hashtag/IndiaFightsCorona?src=hash&ref_src=twsrc%5Etfw

[10] https://t.co/IAZge7C6Bm

[11] https://twitter.com/_DigitalIndia/status/1256226538757992448?ref_src=twsrc%5Etfw

[12] https://www.theregister.co.uk/2020/04/30/india_to_develop_contact_tracing_for_feature_phones/

[13] https://www.theregister.co.uk/2020/04/14/contact_tracing_exit_strategy/

[14] https://web.swaraksha.gov.in/ncv19/privacy/

[15] https://go.theregister.co.uk/tl/1936/-8552/how-to-accelerate-brilliant-digital-experiences-with-low-code?td=wptl1936

Fool proof!

Saruman the White

... India’s IT minister has even labelled it “foolproof” ...

Oh but there are so many very clever fools out there, Minister

Re: Fool proof!

Shadow Systems

And with the stay at home restrictions imposed, those same folks will have plenty of time on their hands to prove you very, very, very wrong.

"I'm sorry Mister Officer but I *can't* install the app. I don't own a SmartPhone. Will the government give me one for free so that I can, or shall I keep using the only device I can afford which is this simple phone too dumb to do anything but make & take calls?"

*ChortleCough*

Oliver Mayes

There's no chance I'm going to install any of these apps. Rushed through with no oversight, they'll just be a collection of security holes held together with snippets from stack overflow. I also don't put it past any of them to start harvesting and selling off my data the first chance they get.

Andy00ff00

I think you'll find that's true of most of the software on your phone now.

Smooth Newt

There's no chance I'm going to install any of these apps. Rushed through with no oversight, they'll just be a collection of security holes held together with snippets from stack overflow.

I'll certainly be installing the UK app, on the SIM'med up test phone I don't use.

How will Daily Express readers and the rest of the intellectually challenged view people refusing to install the app? How will the populists in the Cabinet get behind them? You'll be a Covidiot who is risking all our lives by your thoughtless, selfish behaviour!

So why risk joining the elderly in being bumped of the list of people who get tests and ventilators. Won't be official policy, of course, but then discrimination never is.

Afernie

Yeah, this is essentially my strategy too. I'll stick it on a cheapy Alcatel or similar. Might help pass the lockdown time to also use it to investigate what it actually does. Probably things that are embarrassing/criminal/incompetent/inexplicable.

so what *is* the solution?

Andy00ff00

It's very easy for us techy folks to point out the flaws in every approach, and take potshots at ministers - who are indeed clueless but hopefully to some extent follow the expert advice available to them.

But.... there IS NO perfect solution. We have to compromise somewhere between total economic lockdown for a year or so (expensive), lift all restrictions (a fair few people are going to die), or a range of imperfect mitigations to keep the infection rate down.

Obviously *I* could write a better app than $lowest_bidder, and probably you could too, and actually in this case I'd be tempted to go with Apple/Google's joint effort globally.

But if you're going to sneer about one aspect, be it security/privacy/whatever, I'd be genuinely interested to know realistically what your proposal is, and projected costs/death rate.

Re: so what *is* the solution?

Smooth Newt

It's very easy for us techy folks to point out the flaws in every approach, and take potshots at ministers - who are indeed clueless but hopefully to some extent follow the expert advice available to them.

It's people taking potshots, as you call it, that limits the Government's incompetence. How much more awful do you think their performance would have been if they had not been motivated by criticism of their performance on PPE procurement, testing, care homes etc.

But if you're going to sneer about one aspect, be it security/privacy/whatever, I'd be genuinely interested to know realistically what your proposal is, and projected costs/death rate.

No one is objecting to the principle, just the implementation. I simply don't trust my government - and with very good reason. They have nearly infinite resources for this, so there really is no excuse for a shit implementation. They could spend ten billion pounds writing the app if they needed to.

Whilst I doubt the app will work as well as many people believe - relating Bluetooth signal strength, irrespective of multipath fading and antenna polarization etc, to droplet inhalation, or whatever other transmission methods there are, seems a bit of a leap - but it may work brilliantly. No-one knows, but it's worth a shot.

On the other hand, it's probably best not to put all your eggs in this particular basket.

Re: so what *is* the solution?

Roland6

Well given the ease with which people will be able to "play around" with stuff on their phones, it does seem the solution is to rely mostly on network data and use the app to provide unreliable but more granular data.

Now try and sell that to the people; given peoples well-founded wariness of letting state agencies accumulate large amounts of data on them...

Re: so what *is* the solution?

Afernie

OK, so:

There already is an open API supported by the only two mobile OS developers with market penetration that emphasises decentralisation and privacy, and does the job.

It would be child's play to develop an app quickly and easily that uses it. End of proposal.

What the government has chosen to do is ignore the decentralisation and privacy offered, and develop a solution that centralises data.

* All previous evidence would indicate this data will rapidly be abused.

* All previous evidence would indicate this data will rapidly be compromised by other actors, because a government with a long record of dishonesty and an utter lack of transparency that does not care about your privacy certainly does not care about your security, at the backend or in the app.

* It should be noted that this is just the first step. Within a matter of months the tracing app will be supplemented by an immunity passport app that records facial biometrics. Access to public places and your workplace will likely depend on your co-operation in using this app. This despite warnings from the W.H.O that immunity passports will not work and provide a false sense of security.

* Once adoption is made either compulsory or refusal made socially unacceptable, the data gathered will soon be provided to:

1) Law Enforcement for fishing expeditions, fit-ups, persecution/marginalisation

2) Security forces for persecution of minorities, and "enemies of the state" (people who who disagree with the government).

3) Councils and Quangos for an endless bounty of automated and uncontestable fines for various claimed minor infractions

Of course, any attempt to contest the legalities of this will result in the application of the Civil Contingencies Act. This is an emergency after all.

So in summary:

Apple/Google way: decentralised, private contract tracing and warning

UKGov way: Police State in a box. Just add legislation.

Re: so what *is* the solution?

Anonymous Coward

"It's very easy for us techy folks to point out the flaws in every approach, and take potshots at ministers - who are indeed clueless but hopefully to some extent follow the expert advice available to them."

History would, for the most part, seem to indicate people in power take whatever "advice" leads to feathering their own nests and not for the advancement of a solution to the problem in hand.

As for 'pointing out flaws', I'd rather that than blindly taking the first 'solution' to hit the table. I'd say that is some form of quality control than simply pointing out flaws.

Re: so what *is* the solution?

CommanderGalaxian

"Those who would give up essential Liberty,

to purchase a little temporary Safety,

deserve neither Liberty nor Safety."

Anonymous Coward

Cumming to a Fascist Government very near you soon.

who will be compelled to download the app

Neil Barnes

Or lose the phone.

"India’s IT minister has even labelled it 'foolproof' "

Pascal Monett

India’s IT minister is going to learn the truth about fools. There's always a better one.

Microsoft Website Crashes, World Does Not Come To An End

REDMOND, WA -- In a crushing blow to Bill Gates' ego, world civilization
did not collapse when the Microsoft website was offline for an extended
period last week.

During the anti-trust trial, Microsoft's lawyers repeatedly warned that if
the company was broken up or dealt any other penalty (no matter how
trivial), it would not only cost the tech industry billions of dollars,
but it could decimate the entire world economy and even bring about the
start of World War III. At the risk of sounding like a biased, slanted,
overzealous journalist, let me just say: Yeah, right!

The stunning realization that the world does not revolve around Redmond
(yet) has plunged many Microsoft executives into shock. "But microsoft.com
is the single most important website in the world! And Microsoft is the
single most important company in the Universe! This can't be happening!
Why isn't civilization teetering on the edge right now?" said one
depressed President Of Executive Vice.