Temps Présent – Comment l’Amérique nous espionne

Grâce à un dispositif secret logé dans leurs ordinateurs par un équipementier de l’informatique, banques, universités, administrations, multinationales et PME suisses ont été systématiquement espionnées entre 1982 et 2010. Derrière cette opération, révélée par des sources anonymes et des documents, les services de renseignement américains.

Source : RTS

Informationssicherheitsgesetz: Ständerat hält an AHV-Nummer fest

Die AHV-Nummer biete die beste Möglichkeit zur fehlerfreien Personenidentifikation. Abgesehen davon sei deren systematische Verwendung durch die Behörden auch im Entwurf zur Änderung des AHV-Gesetzes vorgesehen, so der Tenor der Mehrheit im Ständerat. Aus denselben Gründen unterstütze mittlerweile auch der Bundesrat diese Haltung des Ständerates, wie Verteidigungsministerin Viola Amherd im Rat darlegte. Mit 31 gegen 10 Stimmen bei 1 Enthaltung hält der Ständerat an der systematischen Verwendung der AHV-Nummer zur Personenidentifikation fest. Die Minderheit wollte wie der Nationalrat beim Entwurf des Bundesrates bleiben, da die Verwendung der AHV-Nummer ein grosses Missbrauchspotential biete und die ursprünglich vorgesehene Verwendung einer nicht zurückrechenbaren Personennummer ebenso gut funktioniere.

Quelle : Bund – Admin.ch

Contact Tracing: An Overview of Technologies and Cyber Risks

The 2020 COVID-19 pandemic has led to a global lockdown with severe health and economical consequences. As a result, authorities around the globe have expressed their needs for better tools to monitor the spread of the virus and to support human labor. Researchers and technology companies such as Google and Apple have offered to develop such tools in the form of contact tracing applications. The goal of these applications is to continuously track people’s proximity and to make the smartphone users aware if they have ever been in contact with positively diagnosed people, so that they could self-quarantine and possibly have an infection test.

A fundamental challenge with these smartphone-based contact tracing technologies is to ensure the security and privacy of their users. Moving from manual to smartphone-based contact tracing creates new cyber risks that could suddenly affect the entire population. Major risks include for example the abuse of the people’s private data by companies and/or authorities, or the spreading of wrong alerts by malicious users in order to force individuals to go into quarantine. In April 2020, the Pan-European Privacy-Preserving Proximity Tracing (PEPP-PT) was announced with the goal to develop and evaluate secure solutions for European countries. However, after a while, several team members left this consortium and created DP-3T which has led to an international debate among the experts.

At this time, it is confusing for the non-expert to follow this debate; this report aims to shed light on the various proposed technologies by providing an objective assessment of the cybersecurity and privacy risks. We first review the state-of-the-art in digital contact tracing technologies and then explore the risk-utility trade-offs of the techniques proposed for COVID-19. We focus specifically on the technologies that are already adopted by certain countries.

Source : ArXiv