CBP 的移民应用程序面临技术故障和安全缺陷:报告
CBP's Migrant App Faces Tech Glitches, Security Flaws: Report

原始链接: https://www.zerohedge.com/political/cbps-migrant-app-faces-tech-glitches-security-flaws-report

一份政府报告发现一款名为“CBPOne”的美国移民应用程序存在问题,该应用程序用于安排港口入境预约。 报告指出,该系统缺乏适当的启动规划,并存在一些缺陷,包括技术故障、语言翻译不佳、预约访问机会不平等以及潜在的黑客或滥用漏洞。 该应用程序于 2020 年推出,并于 2023 年初进行扩展,以促进合法移民流程。 目的是通过提供合法路线来减少非法越境。 据报道,自 2023 年 1 月以来,已有超过 76.5 万人进行了预约。然而,人们对使用申请人提供的信息来改进入境前筛查方法表示担忧。 此外,由于缺少更新和配置错误,该应用程序显示出可能存在安全漏洞的迹象。 为了解决这些问题,报告建议 CBPOne 在更改其应用程序之前应进行全面的风险评估,从应用程序数据中收集情报以更好地进行边境控制,并及时加强安全措施。 CBPOne 同意进行改进,但没有透露他们计划如何改进的具体细节。 CBPOne 发言人未能立即回应置评。

相关文章

原文

Authored by Katabella Roberts via The Epoch Times,

The official app which allows illegal immigrants to schedule appointments with the agency at U.S. ports of entry is plagued with technical issues and security vulnerabilities, according to a new report by the Homeland Security watchdog.

The report into the U.S. Customs and Border Protection’s (CBP) phone appointment app known as CBP One was published on Aug. 19 and sent to Congress.

The Department of Homeland Security’s Office of Inspector General (OIG) report examined whether or not CBP adequately planned and implemented the phone app to process migrants who arrive at the southwest border seeking entry into the United States.

The OIG found that while CBP initially addressed weaknesses in the app after its implementation, the agency failed to formally assess and mitigate the “technological risks involved with expanding the application” to allow immigrants to schedule appointments to present themselves for processing at the Southwest Border.”

“We found that CBP did not initially consider critical factors such as the design of the CBP One Genuine Presence functionality, adequacy of supporting application infrastructure, sufficiency of language translations, and equity of appointment distribution,” the report states.

“As a result, noncitizens initially using the new feature experienced application crashes, received frequent error messages, faced language barriers, and may not have always had an equal opportunity to secure an appointment,” it continues.

CBP’s One phone app was created in 2020 to serve as a single portal for various CBP services.

However, it was expanded in January 2023 under President Joe Biden’s administration to allow immigrants seeking to enter the United States to submit information and schedule appointments before arriving at one of eight points of entry along the southwest border.

The expansion was part of the administration’s efforts to discourage illegal border crossings by providing legal pathways.

According to a July press release from CBP, the app has “increased CBP’s capacity to process immigrants more efficiently and orderly while cutting out unscrupulous smugglers who endanger and profit from vulnerable migrants.”

In July alone, the federal agency processed over 38,000 individuals with appointments at ports of entry through the app.

Since the app’s appointment-scheduling function was introduced in January 2023 through the end of July 2024, more than 765,000 individuals have “successfully scheduled appointments to present at ports of entry instead of risking their lives in the hands of smugglers,” CBP said.

However, the OIG said it found CBP may also be failing to use information submitted to the app by immigrants before they arrive at the border to improve pre-arrival vetting procedures.

While the agency uses biographic and biometric information submitted into the app in advance to determine whether arriving migrants have “derogatory records,” it “does not leverage the information to identify suspicious trends as part of its pre-arrival vetting procedures,” according to the report.

Elsewhere, the OIG said it had identified potentially unrelated immigrants who repeatedly claimed identical intended U.S. residences.

“CBP currently does not have a mechanism to routinely analyze CBP One data submitted across the eligible POEs [points of entry] for trends, which may be useful intelligence to help guide front-line CBP officers when interviewing noncitizens during appointment processing,” the report said.

Meanwhile, the OIG report found security vulnerabilities within the application and its supporting infrastructure operating systems.

“Without a process to ensure all corrective security patches are timely implemented and assets are properly configured, data on the app may be susceptible to exploitation or cyber-attacks,” the report found.

“This process is especially important as CBP continues to update the application,” it added.

In concluding its report, the OIG recommended that CBP develop and implement a formalized risk assessment process when developing, expanding, or modifying mobile applications.

It also recommended that it introduce a mechanism to analyze the app’s advanced information for trends and patterns of fraudulent behaviors by users and communicate those results to the eight ports of entry that process appointments booked through the app.

The OIG further recommended that CBP introduce a mechanism to routinely assess CBP applications and supporting infrastructure operating systems for vulnerabilities and ensure corrective actions are undertaken in a timely manner.

CBP concurred with all three recommendations and promised to take corrective actions, according to the report.

The Epoch Times has contacted CBP for comment.

联系我们 contact @ memedata.com