How I hacked the StaySafe program, the government Covid-19 tracker of Sri Lanka

Re:How I hacked the StaySafe program, the government Covid-1... by Closi on Monday November 16, 2020 @07:55AM (#25111029)

> Mr. Hiranya Samarasekera said that the project was developed by a group of volunteers and offered to ICTA for free.

Storing the location of all of your citizens in a system that was developed by volunteers for free with little evidence of code review...

And they thought that this was a good defence?! I wouldn’t be totally surprised if the volunteers were another nation state.

[ Parent | on HN ]

Re:How I hacked the StaySafe program, the government Covid-1... by _vghb on Monday November 16, 2020 @09:25AM (#25111958)

Yes, there should have been more pen testing and reviews before such an important service was released storing lot of personal information.

I'm happy I was able to find the vulnerability within 4 days of it's public release

[ Parent | on HN ]