<story><title>Virtual passport app presents real data risk, experts warn</title><url>https://www.cbc.ca/news/canada/ottawa/passport-application-online-program-1.5920625</url></story><parent_chain></parent_chain><comment><author>danpalmer</author><text>&amp;gt; IBM Canada has won $1.5M contract to develop new platform for IRCC&lt;p&gt;This will buy what? A team of 4 interns and new grads for 6 months. At the end they&amp;#x27;ll have a slide deck with too much wordart in ith containing some half-baked ideas, and a few lines of code that don&amp;#x27;t do anything useful at all and are further from production readiness than starting from scratch.</text></comment>
<story><title>Virtual passport app presents real data risk, experts warn</title><url>https://www.cbc.ca/news/canada/ottawa/passport-application-online-program-1.5920625</url></story><parent_chain></parent_chain><comment><author>nuccy</author><text>In Ukraine, there is a DIYA (Дія) app developed by the government, which holds electronic national passport, passport for traveling abroad, driving license, car registration documents (including car insurance information), child birth certificate (in parents app) and tax payer information. The app generates temporarily barcodes which can be scanned by another DIYA app to verify somebody&amp;#x27;s identity or presented documents. The national electronic passport can already be used in some companies, like post offices (state and private), banks, etc. Driving license and car registration can be presented to patrol police when requested. Very handy in general, especially if one forgets his wallet. I have a general concerns about privacy and security of this service, but I can also imagine that all the individual databases, which are accessed by this service, may have their own security issues, so having a single entry point is somewhat reducing the attack surface, which may actually be an advantage.</text></comment>