Wherein some furry casually saves a University tens of thousands of dollars on a NIST SP 800-171 audit they were doomed to fail anyway.
TL;DR: Don’t stop using the app. It’s not unsafe enough to warrant jettisoning entirely, and the pandemic is a much, much higher concern.
Safer Illinois is, according to their website, the official COVID-19 app for the University of Illinois in Champaign County. Safer Illinois was developed by a platform called Rokwire, which is made by a company called Rokmetro, which also publishes a Safer Community app.
Unlike the apps I discussed last year, Safer Illinois and Safer Community aren’t fake contact tracing apps. They’re the real deal.
To make life simpler, I’m going to focus my investigation on Safer Illinois, since that project is open source on Github. I suspect the same findings will affect Rokmetro’s Safer Community app too.
The Safer Illinois App has been built from the first day with privacy as a foundation. We take three specific actions that promote privacy in the Safer Illinois App: