Two new species of large predatory dinosaur discovered on Isle of Wight

Peer-Reviewed Publication

UNIVERSITY OF SOUTHAMPTON

 

IMAGE: ARTISTS IMPRESSIONS OF THE SPINOSAURIDS. CERATOSUCHOPS INFERODIOS IN THE FOREGROUND, RIPAROVENATOR MILNERAE IN THE BACKGROUND. view more 

CREDIT: ANTHONY HUTCHINGS

A new study led by palaeontologists at the University of Southampton suggests that bones found on the Isle of Wight belong to two new species of spinosaurid, a group of predatory theropod dinosaurs closely related to the giant Spinosaurus. Their unusual, crocodile-like skulls helped the group expand their diets, allowing them hunt prey on both land and in the water.

The haul of bones was discovered on the beach near Brighstone over a period of several years. Keen-eyed fossil collectors initially found parts of two skulls, and a crew from Dinosaur Isle Museum recovered a large portion of a tail. In all, over 50 bones from the site have been uncovered from rocks that form part of the Wessex Formation, laid down over 125 million years ago during the Early Cretaceous.

The only spinosaurid skeleton previously unearthed in the UK belonged to Baryonyx, which was initially discovered in 1983 in a quarry in Surrey. Most other finds since have been restricted to isolated teeth and single bones.

Analysis of the bones carried out at the University of Southampton and published in Scientific Reports suggested they belonged to species of dinosaurs previously unknown to science.

Chris Barker, a PhD student at the University of Southampton and lead author of the study, said: “We found the skulls to differ not only from Baryonyx, but also one another, suggesting the UK housed a greater diversity of spinosaurids than previously thought.”

The discovery of spinosaurid dinosaurs on the Isle of Wight was a long time coming. “We've known for a couple of decades now that Baryonyx-like dinosaurs awaited discovered on the Isle of Wight, but finding the remains of two such animals in close succession was a huge surprise” remarked co-author Darren Naish, expert in British theropod dinosaurs.

The first specimen has been named Ceratosuchops inferodios, which translates as the “horned crocodile-faced hell heron”. With a series of low horns and bumps ornamenting the brow region the name also refers to the predator’s likely hunting style, which would be similar to that of a (terrifying) heron. Herons famously catch aquatic prey around the margins of waterways but their diet is far more flexible than is generally appreciated, and can include terrestrial prey too.

The second was named Riparovenator milnerae. This translates as “Milner’s riverbank hunter”, in honour of esteemed British palaeontologist Angela Milner, who recently passed away. Dr Milner had previously studied and named Baryonyx – a major palaeontological event whose discovery substantially improved our understanding of these distinctive predators.

Dr David Hone, co-author from Queen Mary University of London: “It might sound odd to have two similar and closely related carnivores in an ecosystem, but this is actually very common for both dinosaurs and numerous living ecosystems.”

CAPTION

Snout from Ceratosuchops inferodios

CREDIT

Chris Barker

Although the skeletons are incomplete, the researchers estimate that both Ceratosuchops and Riparovenator measured around nine metres in length, snapping up prey with their metre-long skulls. The study also suggested how spinosaurids might have first evolved in Europe, before dispersing into Asia, Africa and South America.

Dr Neil J. Gostling of the University of Southampton, who supervised the project, said: “This work has brought together universities, Dinosaur Isle museum and the public to reveal these amazing dinosaurs and the incredibly diverse ecology of the south coast of England 125 million years ago.”

The Early Cretaceous rocks on the Isle of Wight describe an ancient floodplain environment bathed in a Mediterranean-like climate. Whilst generally balmy, forest fires occasionally ravaged the landscape, and the remains of burnt wood can be seen throughout the cliffs today. With a large river and other bodies of water attracting dinosaurs and housing various fish, sharks and crocodiles, the habitat provided the newly discovered spinosaurids with plenty of hunting opportunities.

Fossil collector Brian Foster from Yorkshire, who made an important contribution to the finds and publication, said: “This is the rarest and most exciting find I’ve made in over 30 years of fossil collecting”. Fellow collector Jeremy Lockwood, who lives on the Isle of Wight and discovered several bones added, “we realised after the two snouts were found that this would be something rare and unusual. Then it just got more and more amazing as several collectors found and donated other parts of this enormous jigsaw to the museum.”

CAPTION

Braincase from Riparovenator milnerae.

CREDIT

Chris Barker

 

CAPTION

Silhouettes showing the bones discovered. Ceratosuchops inferodios in the foreground, Riparovenator milnerae in the background

CREDIT

Barker et al 2021 and Dan Folkes

3D IMAGE VIDEO 3D Scan [VIDEO] | EurekAlert! Science News Releases

Dr Martin Munt, Curator of Dinosaur Isle Museum, noted how these new finds cement the Isle of Wight’s status as one of the top locations for dinosaur remains in Europe. The project also solidified how collectors, museums and universities can work together to bring fossil specimens to light.

Dr Munt added: “On behalf of the museum I wish to express our gratitude to the collectors, including colleagues at the museum, who have made these amazing finds, and made them available for scientific research. We also congratulate the team who have worked on these exciting finds and brought them to publication.”

The new fossils will go on display at Dinosaur Isle Museum at Sandown. 

---

JOURNAL

Scientific Reports

DOI

10.1038/s41598-021-97870-87e0f25c8-6f71-4fde-b0a3-51ae780d063e 

METHOD OF RESEARCH

Case study

SUBJECT OF RESEARCH

Animal tissue samples

ARTICLE TITLE

New spinosaurids from the Wessex Formation (Early Cretaceous, UK) and the European origins of Spinosauridae

ARTICLE PUBLICATION DATE

29-Sep-2021

Regulatory approval for new isotope production at Bruce

28 September 2021

Canada's Bruce Power has received approval from the Canadian Nuclear Safety Commission for the commercial production of the medical radioisotope lutetium-177 (Lu-177) in its nuclear power plants. The project to produce the innovative therapeutic isotope, which is used in the treatment of prostate cancer and neuroendocrine tumours, is a partnership between Bruce Power, IsoGen, Saugeen Ojibway Nation (SON) and ITM.

The Bruce nuclear power plant (Image: @Bruce_Power)

IsoGen, a joint venture of Framatome and Kinectrics, designed and manufactured the Isotope Production System (IPS) that will be used to produce Lu-177 by irradiating ytterbium targets inside Candu reactors at Bruce. The IPS is being installed as part of the ongoing Life-Extension Program, which began in 2016 and aims to add about 30 to 35 years of operational life to each reactor at the Bruce site in Ontario.

As the commissioning process continues there will be additional regulatory hold points to allow CNSC staff to confirm operational readiness of the IPS prior to the start of Lu-177 production, Bruce Power said. The company will finalise documentation and CNSC staff will review commissioning test results to verify the IPS meets its design and safety analyses requirements.

Irradiated targets will then be processed by Germany-based ITM to produce pharmaceutical quality no-carrier-added Lu-177, which will be marketed under the name Endolucin Beta.

Bruce Power is one of the world's largest producers of cobalt-60 - used for the sterilisation of single-use medical equipment as well as in cancer treatments - through its partnership with Nordion. The company said the approved Lu-177 project will expand its established isotope production and "solidify" it as an integral producer of critical medical isotopes. Chief Development Officer James Scongack said the Lu-177 project is a "game-changer" for the supply of medical isotopes and the global medical community.

SON has been working with Bruce Power to create economic benefits within SON territory - which encompasses the Saugeen (Bruce) Peninsula - by establishing new isotope infrastructure connected with lutetium-177 production, and last year became the first indigenous community to join the Canadian Nuclear Isotopes Council.

Chief Lester Anoquot, Chippewas of Saugeen First Nation, said: "It's very exciting times for SON as we move forward to the next phase of the Isotope project with Bruce Power … We are proud to play a leadership role in the global fight against cancer, while building economic opportunities in our community."

The partnership, which includes an equity stake and revenue-sharing model for SON, is named Gamzook'aamin aakoziwin, which means 'We are Teaming up on the Sickness' in the traditional Anishinaabe language.

Researched and written by World Nuclear News

GAO calls on Congress to break used fuel disposal impasse

27 September 2021

Congress needs to take action to break the impasse over a permanent solution for commercial used nuclear fuel, according to a report from the US Government Accountability Office (GAO). The report identifies four matters for congressional consideration - including amending legislation to authorise a new consent-based siting process and restructuring the Nuclear Waste Fund - and recommends that the Department of Energy (DOE) finalise its consent-based siting process.

An on-site dry storage facility for used fuel at the Vermont Yankee site (Image: Holtec)

US nuclear waste management policy is enshrined in the 1982 Nuclear Waste Policy Act (NWPA), which established federal responsibility for all civil used fuel and obliged the government - through the DOE - to begin removing used fuel from nuclear facilities by 1998 for disposal in a federal facility. The act was amended in 1987 to designate Yucca Mountain in Nevada as the sole site for the repository for 70,000 tonnes of high-level waste.

"However, in 2010, DOE terminated its efforts to license a repository at Yucca Mountain, and Congress stopped funding activities related to the site," GAO notes. "Since then, policymakers have been at an impasse on how to meet the federal disposal obligation, with significant financial consequences for taxpayers."

As of September 2020, the federal government had paid nuclear power plant owners almost USD9 billion in damages for the costs they incurred to store used fuel on-site, according to DOE's Fiscal Year 2020 Agency Financial Report. The GAO said about 86,000 tonnes of used fuel is stored on-site at 75 operating or shutdown nuclear power plants in 33 states, an amount that grows by about 2000 tonnes each year.

"These costs will continue to grow until the federal government develops and approves a consolidated interim storage facility or permanent disposal repository and takes custody of the fuel," GAO said. "Specifically, in its Fiscal Year 2020 Agency Financial Report, DOE estimated the remaining federal liability for interim storage costs would be about USD30.6 billion."

GAO has now released a report - titled Commercial Spent Nuclear Fuel: Congressional Action Needed to Break Impasse and Develop a Permanent Disposal Solution - which examines actions that experts identified as necessary to develop a solution for used nuclear fuel disposal. GAO reviewed DOE and other agency documents and interviewed 20 experts and 25 stakeholders from industry, non-governmental organisations, and tribal and state groups.

The USA currently has "an ad hoc system" for managing commercial used nuclear fuel which, GAO said, can affect future disposal decisions and costs. "Nearly all of the experts we interviewed said an integrated strategy is essential to developing a solution for commercial spent nuclear fuel and potentially reducing programmatic costs. However, DOE cannot fully develop and implement such a strategy without congressional action."

Recommendations

GAO identifies four matters for congressional consideration. Firstly, Congress should consider amending the NWPA to authorise a new consent-based process for siting, developing and constructing consolidated interim storage and permanent repository facilities for commercial used nuclear fuel. Secondly, Congress should consider creating a mechanism, such as an independent board, to provide political insulation and continuity of leadership for managing the used nuclear fuel disposal programme. Congress should also consider restructuring the Nuclear Waste Fund so funds used to develop, construct and operate a permanent repository are based on the commercial used nuclear fuel programme's life cycle costs. Lastly, Congress should consider directing DOE to develop and implement an integrated waste management strategy, consistent with any amendments to the NWPA, that includes plans for the transportation, interim storage and permanent disposal of used nuclear fuel.

In 2015, DOE began efforts to engage the public and develop a draft consent-based siting process, but it has not finalised this process. The draft includes elements that nearly all experts agreed are critical for an effective siting process. "Finalising the draft could help position DOE to implement a consent-based process for consolidated interim storage facilities and/or permanent geologic repositories if Congress amends the NWPA to allow for storage and disposal options other than, or in addition to, the Yucca Mountain repository," GAO said.

Accordingly, the report recommends the Secretary of Energy direct the DOE's Office of Nuclear Energy to continue its efforts to engage the public and finalise its draft consent-based siting process.

GAO said it provided a draft of its report for review and comment to DOE, the Department of Justice and the Nuclear Regulatory Commission (NRC). In its comments, DOE stated that it concurred with its recommendation. NRC stated it was in general agreement with the report. DOE and NRC also provided technical comments, which GAO incorporated throughout the report. The Department of Justice, it said, did not have any comments on the report. It is now sending copies of the finalised report to the appropriate congressional committees and the Secretary of Energy, the Attorney General and the Chairman of the NRC.

"Ultimately, finding a solution for managing and disposing of commercial spent nuclear fuel is a challenge that will require thoughtful and intentional decision-making and planning," GAO said. "Even then, there is no guarantee of success. However, several other countries - including Canada, Finland and Sweden - have made progress toward developing solutions after facing a similar impasse. These countries' experiences, along with the recommendations from experts, provide useful lessons for a path forward, in particular concerning engaging stakeholders and cultivating public trust."

Researched and written by World Nuclear News

 GREENWASHING NUKES

Nuclear needed for hydrogen production, study says

27 September 2021

To facilitate rapid decarbonisation and cut dependency on fossil fuels, both nuclear energy and renewables are needed for power and hydrogen production, a new independent study has concluded. The study, by Aurora Energy Research, investigates the benefits of deploying both nuclear and renewables for hydrogen production, to support the energy transition and meet UK climate targets.

The report - titled Decarbonising Hydrogen in a Net Zero Economy - was commissioned by Urenco and has been supported by the International Atomic Energy Agency, EDF and Lucid Catalyst.

It follows the UK government's Hydrogen Strategy, published last month. The Hydrogen Strategy stated that nuclear provides a number of options for producing clean hydrogen, but did not model the costs and competitiveness of nuclear's contribution.

"The majority of studies on the future of the hydrogen sector in Great Britain focus on electrolytic hydrogen from renewable energy sources (RES) and fossil-based hydrogen with carbon capture and storage (CCS)," the report says. "The potential for nuclear to participate in the hydrogen economy is often not considered due to high costs of recent assets and lack of clear policy direction leading to planned projects being put on hold.

"This study investigates how policy support for new nuclear technologies and business models to provide low-carbon electrolytic hydrogen could reduce nuclear and system costs whilst reducing reliance on fossil fuels when deployed alongside RES on the path to net-zero."

Aurora's report utilises the company's integrated modelling suite to capture market interactions and impacts of deploying RES and nuclear to achieve net-zero. Aurora's in-house Net-Zero scenario reflects all recent UK government targets, including the Energy White Paper's 40 GW of offshore wind and capture of 10 million tonnes of carbon dioxide via CCS by 2030. Installed power capacity is seen increasing from 107 GW in 2021 to 257 GWe in 2050, driven by rapid growth of renewables and peaking capacity. Nuclear generating capacity increases from 9 GW to 21 GW over this period. Power generation grows from 312 TWh in 2021 to 643 TWh in 2050, with nuclear generation increasing from 59 TWh to 159 TWh. Meanwhile, hydrogen production capacity increases from 5 GW to 69 GW over the same period.

Aurora's decarbonisation model differs from traditional approaches in that it assumes: all emissions-free generating technologies are treated equally and compete on cost; after 2030, capacity auctions are only available for zero-carbon generators; and nuclear costs and market applications are fully represented in the model.

The study found that to facilitate rapid decarbonisation and cut dependency on fossil fuels, both nuclear and renewables are needed for power and hydrogen production. Together, nuclear and renewables can provide the hydrogen volumes needed for net-zero in 2050. Deploying large volumes of nuclear alongside renewables is economically efficient, reducing the net present value of the UK's total system spend by 6-9% (GBP40-60 billion) to 2050. It also found combining hydrogen and nuclear leads to competitive costs. Using heat and electricity together from a nuclear power plant for hydrogen production provides a strong cost advantage. Cumulative greenhouse gas emissions to 2050 can be reduced by 80 million tonnes CO2e and gas usage in power and hydrogen by 8000 TWh thermal.

The latest report is a follow-on to Aurora's 2020 study Hydrogen for a Net Zero GB: An Integrated Energy Market Perspective. It notes that while the new study is focused on the UK, the results are applicable to other countries, including developing nations.

"There is an exciting potential for combining nuclear, renewables and hydrogen to deliver a net-zero economy," said Felix Chow-Kambitsch of Aurora Energy Research. "Aurora's new report is the first study of its kind to demonstrate how nuclear can complement renewables and hydrogen. Achieving hydrogen volumes required for net-zero without fossil fuels will be challenging without electrolytic hydrogen from nuclear and renewables. An energy system with high ambition in nuclear power can reduce its reliance on fossil fuels, reduce carbon emissions, and reduce system costs."

"Nuclear power clearly has an important role alongside renewables in the clean energy transition through supporting reliable, low-carbon electricity generation and the future production of hydrogen," said Urenco Group CEO Boris Schucht. "To realise this, we need to unlock investment, by creating a new financing model for nuclear and a market environment for hydrogen. The development of high-temperature reactors would be one way that nuclear can support hydrogen, given these designs are very efficient for the production of hydrogen.

"This latest research is an important step in enabling policy makers to pave the way for the delivery of net-zero by 2050. We look forward to constructive conversations in the coming months and strong collaboration across industry and government on this critical work."

Researched and written by World Nuclear News

Concrete needs to lose its colossal carbon footprint

Concrete will be crucial for much-needed climate-resilient construction. But the cement industry must set out its plan for decarbonization.

Cement manufacturing (such as that at this plant in Russia) accounts for 8% of the world’s carbon dioxide emissions.

Credit: Getty

Wet concrete has been poured into buildings, roads, bridges and more for centuries. Structures using concrete have survived wars and natural disasters, outlasting many of the civilizations that built them1. Alongside its strength and resilience, concrete is also a staple of building because it is relatively cheap and simple to make. Worldwide, 30 billion tonnes of concrete is used each year. On a per capita basis, that is 3 times as much as 40 years ago — and the demand for concrete is growing more steeply than that for steel or wood2.

Versatile and long-lasting, concrete buildings and structures are in many ways ideal for climate-resilient construction. But concrete has a colossal carbon footprint — at least 8% of global emissions caused by humans come from the cement industry alone3. We must decarbonize its production.

Concrete is made by adding sand and gravel to cement, whisking the mixture with water and pouring it into moulds before it dries. Making the cement is the most carbon-intensive part: it involves using fossil fuels to heat a mixture of limestone and clay to more than 1,400  °C in a kiln. Also, when limestone (calcium carbonate) is heated with clays, roughly 600 kilograms of carbon dioxide is released for every tonne of cement produced (see go.nature.com/3exhg82).



Lithium-ion batteries need to be greener and more ethical

There are alternatives to cement, but they’re in the early stages of development, and cement itself remains highly profitable — two disincentives for companies to change.

Alternatives include the leftover compounds from iron and steel production, known as slag, and heaps of unused fly ash, a residual material from coal plants. Researchers are also experimenting with reducing the temperatures needed in the cement-making process — thereby decreasing the energy used.

In carbon-accounting terms, such replacements and procedural changes will reduce cement’s environmental impact, and that of concrete, too. But they still involve carbon emissions. Coal is being phased out, so fly ash isn’t a long-term solution. And alternatives have yet to be certified for use in building; for this to happen, long-term studies on their performance are needed.

Cement will be around for the foreseeable future, so cement production itself needs to be decarbonized, which could happen in a number of ways. For example, low-carbon fuels — such as hydrogen or biomass — could be substituted for fossil fuels in heating the limestone and clay. And scientists are examining whether electricity — instead of combustion — could be used for the heating.

Carbon capture could be part of the cement industry’s transition process4. In Sweden, for example, a company announced in July that it wants to capture 1.8 million tonnes of CO2 from a cement plant and bury it in the North Sea. Another possibility is to pump the captured CO2 into concrete itself, locking it up forever — which might also improve the properties of the resulting material. The injected CO2 reacts with calcium ions in the cement, producing more calcium carbonate, and potentially making the concrete able to withstand larger loads.

Concrete options

Technological changes can be accelerated through regulation and legislation. A huge proportion of concrete is used in public building projects. In North America alone, public agencies buy as much as one-third of concrete manufactured annually. That means they have leverage in the low-carbon transition: they could work with researchers and manufacturers to reshape the concrete industry.

In New York and New Jersey, a bill is making its way through state legislatures that, if passed, will mandate that state agencies and departments prioritize cement that has a lower carbon footprint.




An ancient battle between environment and concrete

Other states are introducing legislation that requires construction proposals to declare the environmental impact of cement mixes. Some regions, such as Honolulu, Hawaii, have added a requirement that city construction projects must consider using concrete that stores CO2.

In Europe, the European Union’s Waste Framework Directive requires 70% of construction waste to be reused. Another idea, known as materials passports, could also help. When buildings are demolished, the waste concrete is smashed up and discarded, or sold for low-grade use such as backfilling in road construction. But a passport would ensure that concrete is recorded ‘at birth’ and then tracked throughout its life cycle — making it accessible for more kinds of reuse.

Finally, the cement industry needs to publish better emissions data so that progress can be tracked. In a study published last month, researchers from Columbia University in New York City report that some of China’s cement-making companies have an ambition for emissions to peak in 2023 (see go.nature.com/39z1sdd). But only one of the ten companies surveyed is reporting emissions data. China is the world’s largest cement producer (55% of global capacity), and cement accounts for 15% of the country’s carbon emissions. Without data, it will be impossible to know whether national targets are being met.

Next month, a cement-industry campaign called Concrete Action for Climate will announce its road map for carbon neutrality by 2050. This is overdue, but the road map must also explain interim steps, how companies intend to achieve neutrality and how progress will be measured.

Parts of the ancient world were made with concrete, and the material was used to build much of the modern world, too. Researchers and governments must work with the cement industry to slash its carbon footprint, driving the climate-resilient construction the world now sorely needs.

Nature 597, 593-594 (2021)

doi: https://doi.org/10.1038/d41586-021-02612-5


References

1.

Jackson, M. D. et al. Proc. Natl Acad. Sci. USA 111, 18484–18489 (2014).

PubMed Article Google Scholar
2.

Monteiro, P., Miller, S. & Horvath, A. Nature Mater. 16, 698–699 (2017).

PubMed Article Google Scholar
3.

Ellis, L. D., Badel, A. F., Chiang, M. L., Park, R. J.-Y. & Chiang, Y.-M. Proc. Natl Acad. Sci. USA 117, 12584–12591 (2020).

PubMed Article Google Scholar
4.

Fennell, P. S., Davis, S. J. & Mohammed, A. Joule 5, 1305–1311 (2021).

Article Google Scholar

Download references

Controversial preacher arrested on Calgary tarmac for warrants after U.S. anti-vaxx speaking tour

Social Sharing

• Facebook

• Twitter

• Email

• Reddit

• LinkedIn

Artur Pawlowski now faces charges of failing to wear a mask and disobeying a court order

Meghan Grant · CBC News · Posted: Sep 28, 2021

 

Artur Pawlowski was arrested by Canada Border Services Agency on Monday following a month-long anti-vaccine speaking tour in the U.S. The video of the arrest was widely circulated on Twitter and other social media platforms. 0:33

Controversial preacher Artur Pawlowski was arrested on outstanding warrants as he arrived back in Calgary on a private charter flight following a month-long anti-vaccine speaking tour in the U.S. where he met with extreme right wing online social media activists and Donald Trump's son.

On Monday afternoon, Canada Border Services Agency (CBSA) officers made the arrest. 

He is now charged with disobeying a court order and failing to wear a mask, which is a $50 bylaw ticket. The offences date back to March and June of this year, according to Calgary police.

Pawlowski's lawyer, Sarah Miller, called the timing "illogical" given the dates of the alleged breach and bylaw ticket were before her client left for the U.S.

Video circulating on Twitter shows Pawlowski being arrested on the tarmac of the Calgary airport Monday afternoon.

About seven hours later, lawyer Miller secured her client's release on the condition that he keep the peace and be of good behaviour.

• Health agency wants jail time for Calgary pastor and brother for breaking COVID rules

Pawlowski and his brother, Dawid Pawlowski — who is running for a city council seat in Ward 11, are already facing potential jail sentences after being convicted of contempt for repeatedly flouting COVID-19 public health measures and encouraging others to do the same.

They will be sentenced on Oct. 13, which is the same date the new charges are before the courts.

AHS seeks jail time

Lawyers for Alberta Health Services (AHS) have asked Court of Queen's Bench Justice Adam Germain to sentence Artur Pawlowski to three weeks in jail and that he be fined $2,000 plus pay $15,000 in legal costs. They also want to see 10 days for Dawid Pawlowski.

Miller, who represents both brothers, asked that her clients spend no time in jail. 

Throughout the pandemic, the Pawlowskis repeatedly hosted and promoted large maskless gatherings for church services in Calgary and also denied health officials entry to the church, located in the southeast neighbourhood of Dover.

AHS inspectors who attempted to enter the church were met with abusive language.

The arrests took place in May after court orders were granted allowing AHS and police to charge anyone who advertised gatherings that would breach health restrictions.

In 2020, Artur Pawlowski was also fined for failing to adhere to COVID-19 restrictions.

ALBERTA

Portpass app may have exposed hundreds of thousands of users' personal data

Social Sharing

• Facebook

• Twitter

• Email

• Reddit

• LinkedIn

Vaccine passport app has more than 650,000 registered users, according to its CEO

Sarah Rieger · CBC News · Posted: Sep 28, 2021

Vaccine passport app Portpass may have exposed users' personal data like drivers' licences and photos. CBC was able to access the photos on the right that belong to users on the app. The IDs have been blurred to protect those users' identities and information. (Portpass/CBC)

Private proof-of-vaccination app Portpass exposed personal information, including the driver's licences, of what could be as many as hundreds of thousands of users by leaving its website unsecured. 

On Monday evening, CBC News received a tip that the user profiles on the app's website could be accessed by members of the public.

CBC is not sharing how to access those profiles, in order to protect users' personal information, but has verified that email addresses, names, blood types, phone numbers, birthdays, as well as photos of identification like driver's licences and passports can easily be viewed by reviewing dozens of users' profiles.

The information was not encrypted and could be viewed in plain text.

Earlier in the day, the Calgary-based company's CEO Zakir Hussein had denied the app had verification or security issues and accused those who raised concerns about it of breaking the law.

CBC called Hussein late Monday, and agreed to hold off on publishing an article on the lapse until late Tuesday morning in order to give his team time to lock down the site and protect user information.

The portpassportal.com web app was pulled offline that evening and users of the mobile app were met with "Network error" pop-up messages if they attempted to upload or modify any information.

Hussein said Tuesday morning that the breach only lasted for minutes, and repeated that claim when CBC pointed out it had reviewed the personal information for more than an hour — and it's unknown how long the information was exposed before that tip was received.

"Someone that's out there is trying to destroy us here, and we're trying to build something good for people," he said. 

"There's holes, and what I'm realizing is I think there are some things that we need to fix here. And you know, we're trying to play catch-up, I guess, and trying to figure out where these holes are."

The CEO said data has been pulled from the server and his developers are investigating. He said he believes only those who were awaiting verification were affected, a claim CBC was unable to verify. 

Hussein has said Portpass has more than 650,000 registered users across Canada. 

Security, privacy concerns

Cybersecurity analyst Ritesh Kotak said he was shocked but not surprised to hear users' information was exposed.

"These were exactly the privacy and security concerns I've previously raised when it comes to using third-party apps," Kotak said. "You've gotta ask yourself, 'Where's the data housed? Who has access to it? Is it encrypted?'… If this gets out to the wrong individuals it opens them up to fraud, identity theft and a whole other world of potential issues."

Earlier on Tuesday morning, Hussein spoke with 630 CHED Radio and said the servers were turned off to perform a security audit. He did not mention during that interview that users' personal information had been exposed. 

• Private vaccine verification app Portpass sparks privacy, security concerns

The Calgary Sports and Entertainment Corporation (CSEC), which owns the NHL's Calgary Flames, had recommended the Calgary-based app as a way for ticket holders to prove their COVID-19 vaccination status to enter the Scotiabank Saddledome arena.

CSEC said Monday in an emailed statement, before the security lapse was discovered, that it's aware of concerns raised about the app and is working with the app's developer. CBC has reached out to CSEC for further comment. On Tuesday, after this article was published, CSEC pulled the recommendation for the app from the Flames' website.

"It seems like these were some really basic things that were missed. I question why the Calgary Flames in the first place said go ahead and use this app … you gotta do your homework," Kotak said. 

Sharon Polsky, president of the Privacy and Access Council of Canada, said those who fear their information may have been compromised can notify the Office of the Privacy Commissioner. She said the company should have to answer some hard questions about how long the information was accessible and how many users' saw their data exposed.

"Will they conduct a forensic audit? Will they bring in a third-party independent auditor, not just somebody from within their company, to look it over and say, 'Yeah, we had a problem?'" Polsky said.

Hussein said his company will notify the offices of the federal and Alberta privacy commissioners.

The Alberta privacy commissioner's office said in an emailed statement that it has not yet received a report, and said it is contacting Portpass to remind it that if "there is a real risk of significant harm to affected individuals" an incident must be reported to the commissioner and individuals must be notified.

The federal privacy commissioner also said it has not yet received a report, and said it has contacted Portpass to seek further information in order to determine next steps, and that it is in communication with its provincial counterpart. 

Alberta does not have an official app

On Sunday, Conrad Yeung, a local web developer, had questioned on social media whether the app was accurately verifying vaccination information and CBC News had contacted the company to ask for a response. 

Shortly after CBC contacted the company on Sunday, the app began to experience technical difficulties, but Hussein said the crash was due to an influx of users headed to that night's hockey game, overloading the server.

Alberta currently does not have an official proof-of-vaccination app, and the province's PDF vaccine record has been criticized for being easy to edit.

Kristi, one Portpass user, said she was scared to learn her personal information may be compromised. CBC News agreed not to use her last name in case her information was among those exposed.

She said she only downloaded a private app because the government hasn't yet made one available — a delay that frustrates her.

"It was like a kick in the gut when I got the CBC News alert … I don't know if my information is out there," she said.

Yeung had tested the Portpass app by uploading a photo of an actor as an ID photo, and editing a fake vaccination record to display the actor's name that the app verified as legitimate.

• QR codes can be safe for vaccine certificates, if done correctly: expert

However, earlier on Monday, Hussein had denied that the app validated Yeung's false information, despite it appearing to do so, because he said the fake picture would be a giveaway.

"That's not true. We saw it on the back end and we were watching it.… So even if that user showed up, he wouldn't be able to utilize that picture because that's not him. So you wouldn't be able to get in. Secondly, that QR code, if someone scanned it, it would show that picture again," he said at the time. 

Hussein had also said security concerns Yeung had raised about the app were false, and suggested he may contact authorities over his social media posts. He said he wished Yeung and others publicly posting concerns instead had privately reached out to the company.

"Instead he did that maliced behaviour. That, you know, that's not nice," he said.

Yeung said earlier on Monday he had no ill-will toward the company but simply wanted to raise the issues he spotted.

"I was trying to warn, I guess, the general public based on the vulnerabilities that I saw. Because at the end of the day, it's personal information people are submitting," he said.