An app called Covid19 Alert, that was proposed to the Netherlands government as a means of tracking the spread of Coronavirus was quickly turned down after it leaked user data. The source code for the app was put online for analysis, and soon after it was noticed that the source files had user data in them that originated from another app. The code was removed when it was noticed, but that wasn’t good enough. Information that was leaked included nearly 200 full names, email addresses, and hashed user passwords stored in a database from another project linked to the app’s developer. Improvements are apparently being made to the app, but it is unlikely it will be chosen by the government of the Netherlands.
By Akshay Rohatgi and Randy Pargman About this Student Research Project Binary Defense’s mission is