Symantec: Cruz and Kasich Campaign Apps May Expose Sensitive Data (go.com) 32
An anonymous reader writes: Apps released by the campaigns of Republican presidential contenders Ted Cruz and John Kasich have the potential for hackers to access users' personal information. According to an independent analysis by Symantec, the "Cruz Crew" app could allow third parties to capture a phone's unique identifying number and other personal information while the Kasich 2016 app could expose users' location data and information about other apps installed on the phones. First it was Veracode that reported potential vulnerabilities with the apps, now it's Symantec. Apparently the Cruz campaign updated its app to resolve the issues after the Veracode report was released. Kasich spokesman Rob Nichols said the security experts didn't know what they were talking about. Both campaigns have yet to respond to the latest Symantec analysis. Neither security firm found any issues in the app released by the campaign of Democrat Bernie Sanders. Republican Donald Trump and Democrat Hillary Clinton do not have campaign apps.
Campaign app? (Score:4, Interesting)
Re:Campaign app? (Score:4, Informative)
If you are a campaign volunteer they are very useful. I have seen apps used to coordinate events, telephone trees and canvasing.
Re: (Score:3)
whatsamatter? email, all of a sudden, stopped working?
sheesh!
every app is a security question: and since you almost never get source and even when you do, it may not be the actual source. why install apps that are not truly necessary?
I never understood the urge to install everything in sight. I guess I'm just old, I guess. that, or I have a reasonable understanding of security. ("why not both?")
Re:Campaign app? (Score:4, Insightful)
whatsamatter? email, all of a sudden, stopped working?
sheesh!
Email is not a good tool for event management. Messages are not synchronized, and people read and reply out of order. The process starts to fall apart when you go beyond about six people.
Re: (Score:2)
That's why each campaign hires software consultants to write them a custom app that they can "trust."
Re: (Score:3)
Depending on you are in the late 1990 early 2000 old school you believe in the idea of using generic tools to do your work. Which trades off effency of the task on hand with the ability to work with a well maintained system.
Late 2000s to today we are likening the idea of more custom solutions to our tasks so we can do what we need more effectively and easier. At the expense of having less maintained system.
Today's app and cloud consept is more akin to the old PC program and mainframe of the mid 1980's. Ho
Regression (Score:1)
And in a similar way, it takes power away from the individuals and transfers it to those who own the mainframes, er... "cloud servers." Wonder if it's a response to Open Source?
Re: (Score:2)
Most cloud systems have an Open Source back end. I don't think it is a response to it. It is more due to the fact that it is cheaper to get faster network connections than cheaper hardware.
back in the 1980s a million dollar mainframe could handle about a thousand users, and dumb terminals with 9600bps serial connections to dumb terminal costing about a grand were cheaper than giving thousand people PC's for $5,000 (that price allowed them to be powerful enough to handle the work).
In the 1990's PC prices fo
Re:Campaign app? (Score:4, Insightful)
I wonder if there's a company making a basic, non-partisan, campaign volunteer app that can be used (and branded) for any campaign that signs up. Instead of each campaign writing it's own, write one great one and sell it to everyone. Charge the campaign a per-user fee, so it's affordable for any size campaign, and an extra fee for branding because big campaigns will want it and be able to pay extra.
Is that how it works now, or has the market not recognized the opportunity?
Is this newsworthy? (Score:2)
An app could leak your private information.
Is this newsworthy? Are these apps somehow more interesting or important than all the other apps that leak info?
This doesn't tell us *anything* about Cruz or Kasich. Even the Kasich spokesman saying that experts "don't know what they're talking about" isn't particularly interesting, it tells us nothing about Cruz or Kasich, and shouldn't be paraded around as yet another reason that this-or-that campaign is defective.
I don't know why these specific apps are called o
superdoof K (Score:2)
Re: (Score:1)
I don't know why these specific apps are called out...
Um, I think the story is about Symantec
Re: (Score:2)
This doesn't tell us *anything* about Cruz or Kasich. Even the Kasich spokesman saying that experts "don't know what they're talking about" isn't particularly interesting, it tells us nothing about Cruz or Kasich
Yes, it tells us a lot. A president's most important task is to surround himself with competent people. Cruz and Kasich have both failed that test.
Re: (Score:2)
Neither security firm found any issues in the app released by the campaign of Democrat Bernie Sanders. Republican Donald Trump and Democrat Hillary Clinton do not have campaign apps.
By this measure alone, the Clinton candidate is your equal, and the Sanders candidate is your superior.
Re: (Score:1)
I see your sig is taken from the official Bernie Sanders campaign manifesto. Too bad he doesn't understand the meaning of the word irony.
If symantec had any cred at all (Score:2)
They don't though. People buy their product and when they have trouble they call in and get transferred to some non English speaking country, where the scammers they employ get remote access to computer and create the sense the machine needs more work. Crappy tactics like filtering the event viewer to only show critical errors. When they get done nine times out to ten the customer has spent an extra 300 bucks and their machine is usually more hosed than it was. So what symantec thinks about security, is
How brands decay (Score:1)
Well, the news did say they were teaming up (Score:1)
I guess this is just part of the deal. All the other campaigns might not be spilling data, but you can be sure they are collecting, so be sure to vote "correctly"...
Zodiac (Score:2, Flamebait)
How could you not trust an app from this man?
https://media.salon.com/2013/1... [salon.com]
Re: (Score:2, Offtopic)
Re: (Score:2)
That is absolutely everyone's reaction to Ted Cruz. It's really uncanny.
All kidding aside, I'm not completely comfortable with having as a president who will have to deal with foreign leaders someone who everyone just wants to punch in the face on sight.
well that's what they get (Score:3, Insightful)
Kasich's Team Response? (Score:3)
Kasich spokesman Rob Nichols said the campaign's staff reviewed Veracode's analysis and did not find it credible.
"Your firm doesn't understand our product," Nichols said. "They don't know what they don't know."
Asked for details of what the campaign felt was in error, Nichols replied: "I'm not a tech person."
Seriously? Anyone who has Kasich's app installed should uninstall it immediately.
You can't call that campaign (Score:1)
You can't call Kasich performance a campaign.
It is a deli tour. I sincerely think that governor Kasich is in a race because of the free food that they can get.
Re: (Score:2)
Realistically though, I think he's hoping that at a brokered convention he'll be the one to end up with the nomination because he's the only one not hated by large chunks of the party.
Your idea is funnier though.
Maybe I'm "jaded".... (Score:4, Informative)
According to a corrupt and dieing so-called "anti-virus" company that sells a piece of malware to unsuspecting luddites, there COULD be a problem with some political app...
I would probably agree that such apps are poorly written and may very well be suspect. But Symantec doesn't rate high in my books as a "reliable source".
My guess is that they have a product that will take care of this issue.
Re: (Score:2)