专栏首页佳爷的后花媛Virtual passport app presents real data risk, experts warn

Virtual passport app presents real data risk, experts warn

为什么会有这种 纯英文格式的文章呢?

平时有很多碎片化时间,比如下班的地铁上,或者等待的时间,我们总喜欢拿出手机玩,这个时间也可以用来学习呢,当然佳爷自己也想学习英语,所以上下班的时间看看。

Canadian privacy experts are concerned the federal government's plan to develop an online passport application process could put personal information at risk and open a new angle of attack for fraudsters.

IBM Canada has been awarded the $1.5-million contract to create software that would allow Canadians to apply for a passport using their smartphones, tablets or computers.

The new platform would also allow applicants to pay fees and upload their passport photos securely, according to a statement from Immigration, Refugees and Citizenship Canada (IRCC).

They will attempt to exploit the program very quickly, very intensely to obtain the most fraudulent passports they can in the least amount of time.

- Benoît Dupont, l'Université de Montréal

But privacy and data protection experts worry that personal information may be stored on foreign servers, providing an appealing target to criminals.

Sébastien Gambs, a professor in the information technology department of l'Université de Québec à Montréal and Canada Research Chair on privacy and data protection, said there are real concerns about where the data will be stored, a detail neither the government nor IBM Canada has divulged, though the tender identifies Amazon Web Services (AWS), the cloud computing branch of the American online retail giant.

"Even when we do business with an American company that agrees to store data within Canada, under the [U.S.] CLOUD Act, data could eventually be transferred out of the country," Gambs said in French.

In a statement, AWS said its clients retain full ownership and control of their data, including who may access that information.

In a separate statement, IRCC said "the privacy of Canadians and the safety of their personal information will be an absolute priority."

Canadian passports highly valued

Benoît Dupont, a criminology professor at l'Université de Montréal and Canada Research Chair in cybersecurity, said the passport app will likely be a major target for fraudsters eager to get their hands on Canadian passports and the mobility that comes with them.

"That's very attractive for organized crime groups who specialize in human trafficking," Dupont said in French. "They will attempt to exploit the program very quickly, very intensely to obtain the most fraudulent passports they can in the least amount of time."

But Gambs said any virtual application will likely have extra steps built in to protect against hackers.

"As soon as we're doing things remotely, verifying somebody's identity becomes much more difficult," he said. "The government will definitely need to collect more personal information in order to verify an applicant's identity."

'Vicious cycle': PIPSC

The Professional Institute of the Public Services (PIPSC) said this tender should never have gone out to the private sector when it could have been developed in-house by public servants, as was done with the online tax portal.

"It's a vicious cycle. Instead of developing resources internally, we go externally," said Stéphane Aubry, vice-president of PIPSC. "Then we don't have the needed expertise internally, which unfortunately, over the years, fades and makes it so we need to contract out."

PIPSC said the project raises the spectre of the Phoenix pay system fiasco, which also involved IBM. IBM Canada will be required to train and support IRCC employees in running the new passport system, according to the tender documents.

In 2020, the government issued just 897,401 passports, compared to 2.6 million the year before. For the first four months of the pandemic, Service Canada was only providing critical passport services for urgent travel.

Nevertheless, the Canadian Anti-Fraud Centre received 1,806 reports of passport-related fraud last year.

本文分享自微信公众号 - 佳爷的后花媛(zoe1368329355),作者:Cbc News

原文出处及转载信息见文内详细说明,如有侵权,请联系 yunjia_community@tencent.com 删除。

原始发表时间:2021-02-22

本文参与腾讯云自媒体分享计划,欢迎正在阅读的你也加入,一起分享。

我来说两句

0 条评论
登录 后参与评论

相关文章

  • Vue源码学习和分析笔记

    compiler 目录包含 Vue.js 所有编译相关的代码。它包括把模板解析成 AST 语法树,AST语法树优化,代码生成等功能。

    Tiffany_c4df
  • CVPR2020医学影像相关论文(摘要+代码+链接)

    本文是在上面文章的基础上,整理了CVPR2020医学影像相关的论文摘要、代码及文章下载地址。根据上面文章,CVPR2020医学影像处理相关论文可以分为如下几类:

    Minerva
  • 机器人相关学术速递[7.29]

    【1】 ReLMM: Practical RL for Learning Mobile Manipulation Skills Using Only Onbo...

    公众号-arXiv每日学术速递
  • 问问Siri你是否感染了新冠病毒

    公司于周天推出了自我筛选功能——允许用户询问,“Siri,我是否患有新冠肺炎?”如果用户有一些症状,例如发烧,干咳,气短等,或者说如果他们接触过新冠病人,sir...

    zstt8054929
  • 机器人相关学术速递[7.6]

    【1】 Biomimetic Tactile Receptors for 3d-printed Skin 标题:3D打印皮肤的仿生触觉感受器

    公众号-arXiv每日学术速递
  • 2020测试工具索引

    在整理过程中,我会尽量去官网找到官方对该工具的描述,包括中文和英文,保证原汁原味。

    dongfanger
  • 机器人相关学术速递[6.21]

    【1】 Semantic navigation with domain knowledge 标题:基于领域知识的语义导航

    公众号-arXiv每日学术速递
  • 人工智能学术速递[8.19]

    【1】 Fake News and Phishing Detection Using a Machine Learning Trained Expert Sy...

    公众号-arXiv每日学术速递
  • Why is Flutter a Good Choice for App Development?

    Recently, Flutter app development has become a new easy, and productive way to c...

    用户8617680
  • 金融/语音/音频处理学术速递[9.13]

    【1】 An Alternative Approach to Evaluate American Options Price Using HJM Approa...

    公众号-arXiv每日学术速递
  • 机器人相关学术速递[9.6]

    【1】 Continuous-Time Behavior Trees as Discontinuous Dynamical Systems 标题:作为不连续动力...

    公众号-arXiv每日学术速递
  • CMake脚本中如何修改XCode工程属性?

    以下的所有属性列表(https://help.apple.com/xcode/mac/current/#/itcaec37c2a6): Active Build...

    24K纯开源
  • Python Web学习笔记之Cookie,Session,Token区别

    Jetpropelledsnake21
  • Release It! 第2版目录(中英文对照)

    注:其中,最后17个小节标题尚未译完,其余译完的标题尚未定稿,会与正式版有出入。仅供参考。

    吾真本
  • 机器人相关学术速递[8.31]

    【1】 RoboRun: A Robot Runtime to Exploit Spatial Heterogeneity 标题:RoboRun:一种利用空间异...

    公众号-arXiv每日学术速递
  • 「源码级回答」大厂高频Vue面试题(中)

    本篇是「源码级回答」大厂高频Vue面试题系列的第二篇,本篇也是选择了面试中经常会问到的一些经典面试题,从源码角度去分析。

    前端森林
  • 银行业的大数据:银行如何从客户数据中获得更大的价值?

    36大数据专稿,原文作者:Vaishnavi Agrawal 本文由36大数据翻译组-欧显东翻译。

    华章科技
  • 机器人相关学术速递[6.17]

    【1】 Amortized Synthesis of Constrained Configurations Using a Differentiable Su...

    公众号-arXiv每日学术速递
  • 【重磅】深度学习顶会 ICLR 2018 匿名提交论文列表(附pdf下载链接)

    【导读】ICLR,全称为「International Conference on Learning Representations」(国际学习表征会议),201...

    WZEARW

扫码关注云+社区

领取腾讯云代金券