40 years are enough: US tells Pak to support PM Modi's peace efforts

New Delhi, May 6: The government on Wednesday said no data or security breach has been identified in Aarogya Setu after an ethical hacker raised concerns about a potential security issue in the app.

The app is the government's mobile application for contact tracing and disseminating medical advisories to users in order to contain the spread of coronavirus.

On Tuesday, a French hacker and cyber security expert Elliot Alderson had claimed that "a security issue has been found" in the app and that "privacy of 90 million Indians is at stake".

Dismissing the claims, the government said "no personal information of any user has been proven to be at risk by this ethical hacker".

"We are continuously testing and upgrading our systems. Team Aarogya Setu assures everyone that no data or security breach has been identified," the government said through the app’s Twitter handle.

The tweet gave point-by-point clarification on the red flags raised by the hacker.

"We discussed with the hacker and were made aware of the following... the app fetches user location on a few occasions," it said, but added that this was by design and is clearly detailed in the privacy policy.

The app fetches users’ location and stores on the server in a secure, encrypted, anonymised manner - at the time of registration, at the time of self assessment, when users submit their contact tracing data voluntary through the app or when it fetches the contact tracing data of users after they have turned COVID-19 positive, it said.

On another issue that users can get COVID-19 stats displayed on the home screen by changing the radius and latitude-longitude using a script, Aarogya Setu said that all this information is already public for all locations and hence does not compromise on any personal or sensitive data.

"We thank the ethical hacker on engaging with us. We encourage any users who identify a vulnerability to inform us immediately...," it said.

Responding to Aarogya Setu's clarification, Alderson tweeted, "I will come back to you tomorrow".

Thiruvananthapuram, Mar 31: Kerala Chief

Minister Pinarayi Vijayan on Tuesday said the government has collected the details of those who took part from the state in recent religious congregations in Nizamuddin and Malaysia and it needs to be examined if they have any health issues.

"Police have already made detailed examination in this regard. Thelist of participants have been given through respectivedistrictcollectors. Necessary precautions will be made in the concerned districts in this regard," Vijayan told reporters here.

The government has the exact number of participants and thedetails of the districts they are hailing from, he said.

Meanwhile, Pathananthitta police said they have identified 6 persons in the district in connection with the Nizamuddin congregation.

"Three persons had taken part in the congregation, of them one hadalready died. One person is in quarantine in the district while theother is located now in Thiruvananrhapuram," a senior police officialtold PTI.

The others are not participants but had travelled to Delhi along with them, he said.

In the nearby Alappuzha district, three persons have been identified in connection with the congregation, police said.

"They have been in quarantine and under the surveillance of thehealth department since they have reached back the state from Delhi," another official said.

Several people, who had attended the religious congregation at Nizamuddin in the national capital are suspected to be having symptoms of Covid19, even as at least 24 have tested positive.