40 years are enough: US tells Pak to support PM Modi's peace efforts

New Delhi, May 6: The government on Wednesday said no data or security breach has been identified in Aarogya Setu after an ethical hacker raised concerns about a potential security issue in the app.

The app is the government's mobile application for contact tracing and disseminating medical advisories to users in order to contain the spread of coronavirus.

On Tuesday, a French hacker and cyber security expert Elliot Alderson had claimed that "a security issue has been found" in the app and that "privacy of 90 million Indians is at stake".

Dismissing the claims, the government said "no personal information of any user has been proven to be at risk by this ethical hacker".

"We are continuously testing and upgrading our systems. Team Aarogya Setu assures everyone that no data or security breach has been identified," the government said through the app’s Twitter handle.

The tweet gave point-by-point clarification on the red flags raised by the hacker.

"We discussed with the hacker and were made aware of the following... the app fetches user location on a few occasions," it said, but added that this was by design and is clearly detailed in the privacy policy.

The app fetches users’ location and stores on the server in a secure, encrypted, anonymised manner - at the time of registration, at the time of self assessment, when users submit their contact tracing data voluntary through the app or when it fetches the contact tracing data of users after they have turned COVID-19 positive, it said.

On another issue that users can get COVID-19 stats displayed on the home screen by changing the radius and latitude-longitude using a script, Aarogya Setu said that all this information is already public for all locations and hence does not compromise on any personal or sensitive data.

"We thank the ethical hacker on engaging with us. We encourage any users who identify a vulnerability to inform us immediately...," it said.

Responding to Aarogya Setu's clarification, Alderson tweeted, "I will come back to you tomorrow".

Tezpur (Assam), Mar 2: Seven boys, who had appeared for their class 10 board examinations, were apprehended on Sunday for allegedly raping and killing a 12-year-old girl in Assam's Biswanath district, police said.

The girl was hanged from a tree after the crime.

The incident happened on Friday in Chakla village under the jurisdiction of Gohpur police station, they said.

A senior police officer told PTI that the culprits, all of them High School Leaving Certificate (HSLC) examinees, were on the run, but were nabbed by a police team.

The accused after the examination had called the victim to a house on the pretext of organising a party and raped her, the officer said.

It is suspected that the girl was raped on Friday night and then hanged from a tree in a forest near the house, the senior police officer said.

The body was found on Saturday.

New Delhi, Apr 19: The government on Sunday prohibited the sale of non-essential items through e-commerce platforms during the ongoing lockdown, four days after allowing such companies to sale mobile phones, refrigerators and ready-made garments.

Union Home Secretary Ajay Bhalla issued an order excluding the non-essential items from sale by the e-commerce companies from the consolidated revised guidelines, which listed the exemption given to the services and people from the purview of the lockdown.

The order said the following clause "E-commerce companies. Vehicles used by e-commerce operators will be allowed to ply with necessary permissions" is excluded from the guidelines.

The previous order had said such items were allowed for sale through e-commerce platforms from April 20.

However, the reason for reversing the order is not known immediately.