A passwordless server run by spyware maker NSO sparks contact-tracing privacy concerns | TechCrunch
▻https://techcrunch.com/2020/05/07/nso-group-fleming-contact-tracing
NSO began work on its contact-tracing system codenamed Fleming in March.
Fleming is designed to “pour” in confirmed coronavirus test data from the health authorities and phone location data from the cell networks to identify people who may have been exposed to a person with the virus. Anyone who came into close proximity to a person diagnosed with coronavirus would be notified.
The unprotected database was hosted on an Amazon Web Services server in Frankfurt, where the data protection regime is one of the strictest in the world.
It contained about six weeks of location data, spanning around March 10 to April 23. It also included specific dates, times and the location of a “target” — a term that NSO used in the database to describe people — that may have come into contact with a potentially infected person.
(signalé par @diala)