【Actress Giving Permission to Director During Audition】

Meant to keep the residents of Qatar coronavirus free,Actress Giving Permission to Director During Audition a new mandatory contact-tracing app instead put their privacy at risk.

The government of Qatar, like many around the world and in the U.S., is pushing contact-tracing apps as a tool in the battle against the spread of the coronavirus. Unfortunately, the Qatar Ministry Of Interior's mandatory EHTERAZ app exposed users to a wide range of potential violations.

So found Amnesty International, which on Tuesday reported that a vulnerability in the app "would have allowed cyber attackers to access highly sensitive personal information, including the name, national ID, health status and location data of more than one million users."

---

You May Also Like

---

---

At the heart of the matter was a QR code associated with the app. Each app user received a unique QR code that contained info like whether or not they had the coronavirus, where they were being quarantined, and their name. All anyone needed to access the QR code was a national ID number, which, you guessed it, Amnesty International notes "follow a consistent format" and are easily guessed.

Thankfully, Amnesty International writes the app was patched after the organization alerted authorities, but the mandatory nature of the app along with its excessive permissions created the opportunity for a perfect privacy-crushing storm.

Mashable Light Speed Want more out-of-this world tech, space and science stories? Sign up for Mashable's weekly Light Speed newsletter. By clicking Sign Me Up, you confirm you are 16+ and agree to our Terms of Use and Privacy Policy. Thanks for signing up!

The EHTERAZ app. Credit: screenshot / google play

"This incident should act as a warning to governments around the world rushing out contact tracing apps that are too often poorly designed and lack privacy safeguards," Claudio Guarnieri, the head of Amnesty International's Security lab, explained in a statement. "If technology is to play an effective role in tackling the virus, people need to have confidence that contact tracing apps will protect their privacy and other human rights."

Indeed, even putting aside the security vulnerability, EHTERAZ demands a shocking amount of access to function. According to the Google Play store's permission page for the app, EHTERAZ not only tracks users' locations, but can "modify or delete the contents of your USB storage" and "disable your screen lock" (among other things).

Well, that's quite a lot. Credit: screenshot / google play

An app with this much access, which potentially leaks users data, is a hacker's dream target — and potentially a tool for oppressive regimes.

As officials around the world continue to push for contact-tracing apps, it's worth remembering that the limited examples we have seen in the real world have been anything but inspiring. Essentially, many contact-tracing apps don't work and violate users' privacy at the same time.

SEE ALSO: Contact-tracing app caught sharing location data with Foursquare

That the people of Qatar were instructed to download an app riddled with security vulnerabilities doesn't exactly suggest the situation is about to change.

Topics Cybersecurity Privacy COVID-19

• Tech
• Deals
• Science
• Social Good
• Shopping
• Life
• Digital Culture
• Entertainment

• Dyson V8 Plus cordless vacuum: $120 off at Amazon
• How to watch Florida vs. Georgia football without cable: kickoff time, streaming deals, and more
• Are Tumblr's 'Community Labels' its first step towards bringing back porn?
• Why do some people cry after sex?
• Operation Mensch
• Twitter/X posts with misinformation are no longer eligible for ad revenue sharing
• Something in the Blood, Part 2
• How to watch the MLB World Series: 2023 postseason schedule
• Contingent No More
• The Beatles' AI song 'Now and Then' gets a release date

• Audi concept car is an autonomous escape complete with VR headsets
• Big Bird flies into your stories with Sesame Street's first Snapchat filter
• Parents everywhere are freaking out about the electronics ban on flights
• Lenovo's ThinkBook Plus has an E Ink display that might make you rethink pen and paper
• Amazon Fire TV will be in new BMWs, so you can stream just like in a Tesla
• Samsung's new 8K TV is all screen and no bezel
• Women's mansplaining experiences will make you want to throw things
• Former president of Mexico slams Donald Trump's (SAD!) approval ratings
• Intel has a huge tablet that folds into an all
• Pray for the Cadbury social media manager who's frantically fending off trolls

• The Anatomy of Liberal Melancholy
• Apple Pencil USB
• Amazon Echo Studio deal: Save $81.99 on an Amazon Echo Studio with Echo Sub bundle
• Best Samsung Watch deal: Get the Galaxy Watch 6 for $234.99
• U.N. confirms the ocean is screwed
• Why do some people cry after sex?
• Where to get free coffee on National Coffee Day
• Super Mario Maker 2 on sale: Lowest price ever
• SpaceX's Starlink satellite launch in pictures
• Save $100 on Apple AirPods Max at Best Buy with your My Best Buy membership.

• Stablecoin bill advances in U.S. Senate as Trump critics call to end his crypto dealings
• NYT's The Mini crossword answers for October 30
• Air fryer chicken things are the perfect, easy weeknight meal
• Letters Between Bram Stoker and Walt Whitman
• A worthless juicer and a Gipper-branded server
• Are Tumblr's 'Community Labels' its first step towards bringing back porn?
• West Ridge: Five Paintings by Claire Sherman
• NYT's The Mini crossword answers for October 28
• One of Android's Easter Eggs is a Flappy Bird
• Samsung early Black Friday deals have already started on its 2023 Neo QLED TVs