Excess baggage fee in domestic flights may see 300% hike

New Delhi, May 6: The government on Wednesday said no data or security breach has been identified in Aarogya Setu after an ethical hacker raised concerns about a potential security issue in the app.

The app is the government's mobile application for contact tracing and disseminating medical advisories to users in order to contain the spread of coronavirus.

On Tuesday, a French hacker and cyber security expert Elliot Alderson had claimed that "a security issue has been found" in the app and that "privacy of 90 million Indians is at stake".

Dismissing the claims, the government said "no personal information of any user has been proven to be at risk by this ethical hacker".

"We are continuously testing and upgrading our systems. Team Aarogya Setu assures everyone that no data or security breach has been identified," the government said through the app’s Twitter handle.

The tweet gave point-by-point clarification on the red flags raised by the hacker.

"We discussed with the hacker and were made aware of the following... the app fetches user location on a few occasions," it said, but added that this was by design and is clearly detailed in the privacy policy.

The app fetches users’ location and stores on the server in a secure, encrypted, anonymised manner - at the time of registration, at the time of self assessment, when users submit their contact tracing data voluntary through the app or when it fetches the contact tracing data of users after they have turned COVID-19 positive, it said.

On another issue that users can get COVID-19 stats displayed on the home screen by changing the radius and latitude-longitude using a script, Aarogya Setu said that all this information is already public for all locations and hence does not compromise on any personal or sensitive data.

"We thank the ethical hacker on engaging with us. We encourage any users who identify a vulnerability to inform us immediately...," it said.

Responding to Aarogya Setu's clarification, Alderson tweeted, "I will come back to you tomorrow".

Kashmir, Jan 9: US Ambassador to India Kenneth I Juster along with envoys from 15 other countries arrived in Srinagar on a two-day visit to Jammu and Kashmir on Thursday, the first visit by diplomats since the abrogation of the erstwhile state's special status in August last year.

The Delhi-based envoys arrived in Srinagar by a special chartered flight at Srinagar's technical airport where top officials from the newly carved out union territory received them, officials said.

Later in the day, they would be going to Jammu, the winter capital of the newly created Union Territory, for an overnight stay. They will meet Lt Governor G C Murmu as well as civil society members, they said.

Besides the US, the delegation will include diplomats from Bangladesh, Vietnam, Norway, Maldives, South Korea, Morocco, and Nigeria, among others.

Brazil's envoy Andre Aranha Correa do Lago was also scheduled to visit Jammu and Kashmir. However, he backed out because of his preoccupation here, the officials said on Wednesday.

Envoys from the European Union (EU) countries are understood to have conveyed that they will visit the union territory on a different date and are also believed to have stressed on meeting the three former chief ministers -- Farooq Abdullah, Omar Abdullah and Mehbooba Mufti -- who are under detention.

Officials said envoys of several countries had requested the government for a visit to Kashmir to get a first-hand account of the situation in the Valley following the August 5 decision to abrogate provisions of Article 370 and bifurcate it into two union territories, Jammu and Kashmir, and Ladakh.

This is the second visit of a foreign delegation to Jammu and Kashmir since August 5. Earlier, Delhi-based think tank International Institute for Non-Aligned Studies, a Delhi-based think tank took 23 EU MPs on a two-day visit to assess the situation in the union territory.

The government had distanced itself from the visit with Minister of State for Home G Kishan Reddy informing Parliament that the European parliamentarians were on a "private visit".