NZ Herald
  • Home
  • Latest news
  • Video
  • New Zealand
  • Sport
  • World
  • Business
  • Entertainment
  • Podcasts
  • Quizzes
  • Opinion
  • Lifestyle
  • Travel
  • Viva
  • Weather forecasts

Subscriptions

  • Herald Premium
  • Viva Premium
  • The Listener
  • BusinessDesk

Sections

  • Latest news
  • New Zealand
    • All New Zealand
    • Crime
    • Politics
    • Education
    • Open Justice
    • Scam Update
    • The Great NZ Road Trip
  • On The Up
  • World
    • All World
    • Australia
    • Asia
    • UK
    • United States
    • Middle East
    • Europe
    • Pacific
  • Business
    • All Business
    • MarketsSharesCurrencyCommoditiesStock TakesCrypto
    • Markets with Madison
    • Media Insider
    • Business analysis
    • Personal financeKiwiSaverInterest ratesTaxInvestment
    • EconomyInflationGDPOfficial cash rateEmployment
    • Small business
    • Business reportsMood of the BoardroomProject AucklandSustainable business and financeCapital markets reportAgribusiness reportInfrastructure reportDynamic business
    • Deloitte Top 200 Awards
    • CompaniesAged CareAgribusinessAirlinesBanking and financeConstructionEnergyFreight and logisticsHealthcareManufacturingMedia and MarketingRetailTelecommunicationsTourism
  • Opinion
    • All Opinion
    • Analysis
    • Editorials
    • Business analysis
    • Premium opinion
    • Letters to the editor
  • Sport
    • All Sport
    • OlympicsParalympics
    • RugbySuper RugbyNPCAll BlacksBlack FernsRugby sevensSchool rugby
    • CricketBlack CapsWhite Ferns
    • Racing
    • NetballSilver Ferns
    • LeagueWarriorsNRL
    • FootballWellington PhoenixAuckland FCAll WhitesFootball FernsEnglish Premier League
    • GolfNZ Open
    • MotorsportFormula 1
    • Boxing
    • UFC
    • BasketballNBABreakersTall BlacksTall Ferns
    • Tennis
    • Cycling
    • Athletics
    • SailingAmerica's CupSailGP
    • Rowing
  • Lifestyle
    • All Lifestyle
    • Viva - Food, fashion & beauty
    • Society Insider
    • Royals
    • Sex & relationships
    • Food & drinkRecipesRecipe collectionsRestaurant reviewsRestaurant bookings
    • Health & wellbeing
    • Fashion & beauty
    • Pets & animals
    • The Selection - Shop the trendsShop fashionShop beautyShop entertainmentShop giftsShop home & living
    • Milford's Investing Place
  • Entertainment
    • All Entertainment
    • TV
    • MoviesMovie reviews
    • MusicMusic reviews
    • BooksBook reviews
    • Culture
    • ReviewsBook reviewsMovie reviewsMusic reviewsRestaurant reviews
  • Travel
    • All Travel
    • News
    • New ZealandNorthlandAucklandWellingtonCanterburyOtago / QueenstownNelson-TasmanBest NZ beaches
    • International travelAustraliaPacific IslandsEuropeUKUSAAfricaAsia
    • Rail holidays
    • Cruise holidays
    • Ski holidays
    • Luxury travel
    • Adventure travel
  • Kāhu Māori news
  • Environment
    • All Environment
    • Our Green Future
  • Talanoa Pacific news
  • Property
    • All Property
    • Property Insider
    • Interest rates tracker
    • Residential property listings
    • Commercial property listings
  • Health
  • Technology
    • All Technology
    • AI
    • Social media
  • Rural
    • All Rural
    • Dairy farming
    • Sheep & beef farming
    • Horticulture
    • Animal health
    • Rural business
    • Rural life
    • Rural technology
    • Opinion
    • Audio & podcasts
  • Weather forecasts
    • All Weather forecasts
    • Kaitaia
    • Whangārei
    • Dargaville
    • Auckland
    • Thames
    • Tauranga
    • Hamilton
    • Whakatāne
    • Rotorua
    • Tokoroa
    • Te Kuiti
    • Taumaranui
    • Taupō
    • Gisborne
    • New Plymouth
    • Napier
    • Hastings
    • Dannevirke
    • Whanganui
    • Palmerston North
    • Levin
    • Paraparaumu
    • Masterton
    • Wellington
    • Motueka
    • Nelson
    • Blenheim
    • Westport
    • Reefton
    • Kaikōura
    • Greymouth
    • Hokitika
    • Christchurch
    • Ashburton
    • Timaru
    • Wānaka
    • Oamaru
    • Queenstown
    • Dunedin
    • Gore
    • Invercargill
  • Meet the journalists
  • Promotions & competitions
  • OneRoof property listings
  • Driven car news

Puzzles & Quizzes

  • Puzzles
    • All Puzzles
    • Sudoku
    • Code Cracker
    • Crosswords
    • Cryptic crossword
    • Wordsearch
  • Quizzes
    • All Quizzes
    • Morning quiz
    • Afternoon quiz
    • Sports quiz

Regions

  • Northland
    • All Northland
    • Far North
    • Kaitaia
    • Kerikeri
    • Kaikohe
    • Bay of Islands
    • Whangarei
    • Dargaville
    • Kaipara
    • Mangawhai
  • Auckland
  • Waikato
    • All Waikato
    • Hamilton
    • Coromandel & Hauraki
    • Matamata & Piako
    • Cambridge
    • Te Awamutu
    • Tokoroa & South Waikato
    • Taupō & Tūrangi
  • Bay of Plenty
    • All Bay of Plenty
    • Katikati
    • Tauranga
    • Mount Maunganui
    • Pāpāmoa
    • Te Puke
    • Whakatāne
  • Rotorua
  • Hawke's Bay
    • All Hawke's Bay
    • Napier
    • Hastings
    • Havelock North
    • Central Hawke's Bay
    • Wairoa
  • Taranaki
    • All Taranaki
    • Stratford
    • New Plymouth
    • Hāwera
  • Manawatū - Whanganui
    • All Manawatū - Whanganui
    • Whanganui
    • Palmerston North
    • Manawatū
    • Tararua
    • Horowhenua
  • Wellington
    • All Wellington
    • Kapiti
    • Wairarapa
    • Upper Hutt
    • Lower Hutt
  • Nelson & Tasman
    • All Nelson & Tasman
    • Motueka
    • Nelson
    • Tasman
  • Marlborough
  • West Coast
  • Canterbury
    • All Canterbury
    • Kaikōura
    • Christchurch
    • Ashburton
    • Timaru
  • Otago
    • All Otago
    • Oamaru
    • Dunedin
    • Balclutha
    • Alexandra
    • Queenstown
    • Wanaka
  • Southland
    • All Southland
    • Invercargill
    • Gore
    • Stewart Island
  • Gisborne

Media

  • Video
    • All Video
    • NZ news video
    • Business news video
    • Politics news video
    • Sport video
    • World news video
    • Lifestyle video
    • Entertainment video
    • Travel video
    • Markets with Madison
    • Kea Kids news
  • Podcasts
    • All Podcasts
    • The Front Page
    • On the Tiles
    • Ask me Anything
    • The Little Things
    • Cooking the Books
  • Cartoons
  • Photo galleries
  • Today's Paper - E-editions
  • Photo sales
  • Classifieds

NZME Network

  • Advertise with NZME
  • OneRoof
  • Driven Car Guide
  • BusinessDesk
  • Newstalk ZB
  • What the Actual
  • Sunlive
  • ZM
  • The Hits
  • Coast
  • Radio Hauraki
  • The Alternative Commentary Collective
  • Gold
  • Flava
  • iHeart Radio
  • Hokonui
  • Radio Wanaka
  • iHeartCountry New Zealand
  • Restaurant Hub
  • NZME Events

SubscribeSign In
Advertisement
Advertise with NZME.
Home / Business

Covid 19 coronavirus: Researcher finds security problems with Police phone-tracing tool

Chris Keall
By Chris Keall
Technology Editor/Senior Business Writer·NZ Herald·
3 Apr, 2020 04:54 AM5 mins to read

Subscribe to listen

Access to Herald Premium articles require a Premium subscription. Subscribe now to listen.
Already a subscriber?  Sign in here

Listening to articles is free for open-access content—explore other articles or learn more about text-to-speech.
‌
Save

    Share this article

    Reminder, this is a Premium article and requires a subscription to read.

There are 71 new cases of Covid-19 in New Zealand. The 71 cases are made up of 49 new confirmed cases and 22 new probable cases. It brings the total to 868 cases in New Zealand since the pandemic began.

A researcher says he found "security problems" with the software being used to trace the location of travellers returning to New Zealand amid the Covid-19 scare.

Brad Cowie, who works for Waikato University's Computer Science Department, says some of the issues with the site were critical. He also had the overarching concern that it looked, in his opinion 'more like a scam than a legitimate service."

READ MORE:
• Coronavirus Covid-19: Can smartphones help NZ stop spread?
• Locate anyone, anytime: Privacy Commissioner warns new system open to abuse
• 2degrees pulls out of Stats NZ's people-tracking project, citing privacy concerns

His opinion when he first says it was that it needed to be "ditched or drastically improved" - but he's heartened that fixes are now underway.

The tracing system uses a combination of txt messages and website links.

Advertisement
Advertise with NZME.

Police Commissioner Mike Bush revealed yesterday that 6250 texts had been sent since Monday to Kiwis who had arrived back in the country and "over" 3000 people responded.

The text from 4511 reads: "NZPolice COVID19 self-isolation check under S.70(1)(f) Health Act 1956. Select the link to confirm location."

Cowie says he was first alerted to the tracing system on Wednesday night when a friend, who just returned to NZ, sent him a screen shot of the 4511 message and asked him if it was a scam.

Advertisement
Advertise with NZME.

"On Wednesday night, a friend sent through a screenshot of a txt message they received when re-entering the country, asking them to use covid19.loc.nz to submit their location data. They wanted to know if it was legitimate or not. My initial reaction was no.

"The website felt and looked similar to a scam and had a few security problems."

Discover more

Business

2degrees pulls out of Stats NZ people-tracking project, citing concerns

01 Oct 10:37 PM
Business

Privacy Commissioner's concern: Police can track you by your phone

01 Feb 09:29 PM
Business

Can virus NZ victims' movements be tracked via their phones? Privacy Commissioner's verdict

23 Mar 04:00 PM
New Zealand

Can smartphones help NZ stop Covid-19 spread?

01 Apr 05:30 AM

Cowie's reaction was a common one. Government agency Cert NZ (The Computer Emergency Response Team) told the Herald this afternoon it has received multiple queries about whether the 4511 message was a scam.

The researcher quickly established that the tracing system was kosher- but in doing so, he began to uncover other problems.

NeedToKnow3
NeedToKnow3

"On Thursday afternoon, I was put in touch with the Police and Cert NZ, who were very enthusiastic to get the problems sorted. I provided a list of problems I think should be addressed and the vendor has quickly fixed a number of the more critical ones. I am still working through with both of them on some issues - look notably the look and feel of the website and its messaging," Cowie said midday Friday.

Although he found various issues himself, Cowie said criticism from a Geekzone member that the covid19.loc.nz tracing site had no firewall and was exposing data in the public domain was not a fair comment. "The service runs on Azure which implicitly has a firewall layer always sitting there. That firewall as of last night has been reconfigured by the vendor to block more ports than it was before," he said.

The software developer did immediately return a request for comment.

A police spokeswoman disputed Cowie's characterisation of security problems since the Monday launch, offering the general comment that, "We have taken a range of actions to ensure the security of the platform, and provided confidence in the legitimacy of the text. We will continue to investigate further enhancements for the platform moving forward."

Advertisement
Advertise with NZME.

• Covid19.govt.nz: The Government's official Covid-19 advisory website

Meanwhile, Privacy Commissioner John Edwards has addressed questions about the new system.

Edwards said earlier today that, like his Cert NZ, his office had fielded queries from people wondering if the texts were a scam.

The Privacy Commissioner says Police have explained it was software previously used to a limited extent for search and rescue that has been repurposed and scaled up for the Covid-19 emergency.

The website is currently being redeveloped to make it clear it is an official New Zealand government website.

Edwards said he understood that Police are in the process of completing a privacy impact assessment and security review of the website.

He is reassured that the appropriate steps are being taken to ensure system is being used proportionately and is fit for purpose.

The tracing tool introduced by Police this week is voluntary.

But earlier, Edwards confirmed to the Herald that Police could use technology already in place for emergency tracking to trace the movements of those who could be infected with Covid-19.

"Under the Privacy Act and Telecommunications Information Privacy Code, telcos are able to disclose telecommunications information where they believe on reasonable grounds that it is necessary to prevent or lessen a serious threat to public health," Edwards said.

Tracing steps taken by authorities in New Zealand are so far light-handed next to those taken by the likes of China and Singapore, where smartphone apps are used to trace the movements of citizens en masse amid the coronavirus scare, and Hong Kong, where tracking bracelets are being used.

Save

    Share this article

    Reminder, this is a Premium article and requires a subscription to read.

Latest from Business

Lifestyle

Rice to the occasion: How a Queenstown brewery snagged gold at Tokyo Sake Challenge

09 May 04:15 AM
Business

Why Marlborough bach owners face soaring power charges

09 May 04:10 AM
New Zealand

'Prime focus': Avocado industry targets global markets

09 May 03:08 AM

“Not an invisible footprint”: Why technology supply chains need optimising

sponsored
Advertisement
Advertise with NZME.

Latest from Business

Rice to the occasion: How a Queenstown brewery snagged gold at Tokyo Sake Challenge

Rice to the occasion: How a Queenstown brewery snagged gold at Tokyo Sake Challenge

09 May 04:15 AM

Zenkuro was one of two non-Japanese breweries to be recognised at the challenge.

Why Marlborough bach owners face soaring power charges

Why Marlborough bach owners face soaring power charges

09 May 04:10 AM
'Prime focus': Avocado industry targets global markets

'Prime focus': Avocado industry targets global markets

09 May 03:08 AM
Premium
Nine fires in five years: Environment Court rules on scrap metal dealer

Nine fires in five years: Environment Court rules on scrap metal dealer

09 May 03:00 AM
Deposit scheme reduces risk, boosts trust – General Finance
sponsored

Deposit scheme reduces risk, boosts trust – General Finance

NZ Herald
  • About NZ Herald
  • Meet the journalists
  • Newsletters
  • Classifieds
  • Help & support
  • Contact us
  • House rules
  • Privacy Policy
  • Terms of use
  • Competition terms & conditions
  • Our use of AI
Subscriber Services
  • NZ Herald e-editions
  • Daily puzzles & quizzes
  • Manage your digital subscription
  • Manage your print subscription
  • Subscribe to the NZ Herald newspaper
  • Subscribe to Herald Premium
  • Gift a subscription
  • Subscriber FAQs
  • Subscription terms & conditions
  • Promotions and subscriber benefits
NZME Network
  • The New Zealand Herald
  • The Northland Age
  • The Northern Advocate
  • Waikato Herald
  • Bay of Plenty Times
  • Rotorua Daily Post
  • Hawke's Bay Today
  • Whanganui Chronicle
  • Viva
  • NZ Listener
  • What the Actual
  • Newstalk ZB
  • BusinessDesk
  • OneRoof
  • Driven CarGuide
  • iHeart Radio
  • Restaurant Hub
NZME
  • About NZME
  • NZME careers
  • Advertise with NZME
  • Digital self-service advertising
  • Book your classified ad
  • Photo sales
  • NZME Events
  • © Copyright 2025 NZME Publishing Limited
TOP