Obama accepts PM Modi's Republic Day invitation

New Delhi, May 6: The government on Wednesday said no data or security breach has been identified in Aarogya Setu after an ethical hacker raised concerns about a potential security issue in the app.

The app is the government's mobile application for contact tracing and disseminating medical advisories to users in order to contain the spread of coronavirus.

On Tuesday, a French hacker and cyber security expert Elliot Alderson had claimed that "a security issue has been found" in the app and that "privacy of 90 million Indians is at stake".

Dismissing the claims, the government said "no personal information of any user has been proven to be at risk by this ethical hacker".

"We are continuously testing and upgrading our systems. Team Aarogya Setu assures everyone that no data or security breach has been identified," the government said through the app’s Twitter handle.

The tweet gave point-by-point clarification on the red flags raised by the hacker.

"We discussed with the hacker and were made aware of the following... the app fetches user location on a few occasions," it said, but added that this was by design and is clearly detailed in the privacy policy.

The app fetches users’ location and stores on the server in a secure, encrypted, anonymised manner - at the time of registration, at the time of self assessment, when users submit their contact tracing data voluntary through the app or when it fetches the contact tracing data of users after they have turned COVID-19 positive, it said.

On another issue that users can get COVID-19 stats displayed on the home screen by changing the radius and latitude-longitude using a script, Aarogya Setu said that all this information is already public for all locations and hence does not compromise on any personal or sensitive data.

"We thank the ethical hacker on engaging with us. We encourage any users who identify a vulnerability to inform us immediately...," it said.

Responding to Aarogya Setu's clarification, Alderson tweeted, "I will come back to you tomorrow".

Noida, May 6: Not having Aarogya Setu app on smartphone while out in public in Noida or Greater Noida will be considered a violaton of lockdown rules and the person will be punished.

Action will also be taken against people going outdoors without a face mask or spitting in public places, Gautam Buddh Nagar police said, news agency reported.

Aarogya Setu is a mobile application developed by the central government to connect essential health services with the people to fight Covid-19.

The app is aimed at augmenting the initiatives of the Centre, particularly the Department of Health, in proactively reaching out to and informing the users of the app regarding risks, best practices and relevant advisories pertaining to the containment of Covid-19.

"If smartphone users do not have the 'Aarogya Setu' app installed on their mobile phones, then that will be punishable and considered a violation of the lockdown directions," Additional Deputy Commissioner of Police, Law and Order, Ashutosh Dwivedi said.

The district police had on Sunday announced extending the Criminal Procedure Code section 144, which bars assembly of four or more people, till May 17, as the central government extended the nationwide lockdown by another two weeks in a bid to check the spread of the virus.

"Spitting in public places will attract punishment along with a fine. Not wearing a face mask in public places or offices will also be a punishable offence.

During the lockdown period, political, social, religious, sports gatherings as well as protest marches and rallies will remain banned across Noida and Greater Noida, the official said in the order.

"The central government has extended the lockdown till May 17 in view of the coronavirus pandemic. Gautam Buddh Nagar has been identified as 'red zone' and hotspots have been identified here. During this duration, all guidelines of the lockdown are to be followed," he said.

Gautam Buddh Nagar, which falls in the 'Red Zone', has 34 containment zones and has recorded 179 positive cases of coronavirus so far, with 102 of these patients being cured and discharged from hospitals, according to official figures.