The dashboard spy: inside Malaysia’s Waze ban

On April 21, 2018, Palestinian lecturer Fadi Mohammad al-Batsh was assassinated in Malaysia, suggesting Israeli intelligence agency, Mossad, involvement. National Cyber Security Agency (Nacsa) emphasizes the need for vigilance against foreign intelligence operations. The government's ban on civil servants using Waze is a significant step towards digital sovereignty.

Waze, originally developed by Israeli company Waze Mobile Ltd, poses a security risk as it is governed by Israeli laws and collects extensive telemetry data. Google acquired Waze in 2013, but Israeli laws allow authorities to compel data sharing for state security. Waze continuously logs real-time GPS locations, travel history, and location data even when the app is closed, creating a profile of an individual's routine.

The ClearPhish leak exposed over 7.6 million Waze user records on a dark web marketplace, highlighting the vulnerability of user data. Malaysia has developed TuJu, a locally developed navigation app to address these concerns. While TuJu faces technical challenges, it avoids foreign legal intervention and data collection. Open-source alternatives like Organic Maps and OsmAnd provide additional secure options.

Strict enforcement through mobile device management (MDM), DNS filtering, and firewall blocks is essential to protect national sovereignty from foreign surveillance and data breaches.