Coronavirus: India temporarily suspends e-visa facility for people in China

New Delhi, May 6: The government on Wednesday said no data or security breach has been identified in Aarogya Setu after an ethical hacker raised concerns about a potential security issue in the app.

The app is the government's mobile application for contact tracing and disseminating medical advisories to users in order to contain the spread of coronavirus.

On Tuesday, a French hacker and cyber security expert Elliot Alderson had claimed that "a security issue has been found" in the app and that "privacy of 90 million Indians is at stake".

Dismissing the claims, the government said "no personal information of any user has been proven to be at risk by this ethical hacker".

"We are continuously testing and upgrading our systems. Team Aarogya Setu assures everyone that no data or security breach has been identified," the government said through the app’s Twitter handle.

The tweet gave point-by-point clarification on the red flags raised by the hacker.

"We discussed with the hacker and were made aware of the following... the app fetches user location on a few occasions," it said, but added that this was by design and is clearly detailed in the privacy policy.

The app fetches users’ location and stores on the server in a secure, encrypted, anonymised manner - at the time of registration, at the time of self assessment, when users submit their contact tracing data voluntary through the app or when it fetches the contact tracing data of users after they have turned COVID-19 positive, it said.

On another issue that users can get COVID-19 stats displayed on the home screen by changing the radius and latitude-longitude using a script, Aarogya Setu said that all this information is already public for all locations and hence does not compromise on any personal or sensitive data.

"We thank the ethical hacker on engaging with us. We encourage any users who identify a vulnerability to inform us immediately...," it said.

Responding to Aarogya Setu's clarification, Alderson tweeted, "I will come back to you tomorrow".

New Delhi, Apr 16: South Delhi District Magistrate Brij Mohan Mishra on Thursday said that the administration is investigating how the pizza delivery boy contracted the coronavirus.

"In the last 15 days, we discovered houses he had delivered food. We contacted people living in 72 houses and they have been asked to stay in-home quarantine. No symptoms have been seen in people related to him. 

Testing of his roommate has been done and his reports are awaited. The rest of the people don't have any symptoms, they have been placed under institutional quarantine. Those in-home quarantines are also asymptomatic," Mishra said.

"Unless a positive case comes, we feel that transmission has not taken place. The boy told us that he was continuously wearing a mask while delivering the food. We are also finding out how he got infected. We are getting the information about the places he visited for delivery. He was tested on the basis of the doctor's advice. Later, he tested positive," he said.

72 families have to stay in home quarantine in the Malviya Nagar area after the delivery boy tested positive for COVID-19 on Wednesday.
Delhi Health Minister Satyendra Jain said that 17 other delivery boys linked with the infected person have also been placed under institutional quarantine.

"A pizza delivery boy has been detected with COVID-19 here. 17 other delivery boys linked with him have been placed under institutional quarantine and 72 people have been placed under home quarantine," Jain said.

Food delivery app Zomato said that the staff of the infected person's restaurant has delivered some orders which were placed on its platform.

"We've been made aware today that a restaurant's employee, who has been recently tested positive for COVID-19, had delivered food in the past to a few customers in the Malviya Nagar area in Delhi. All these customers have already been contacted by the govt authorities... We are not sure whether the rider was infected at the time of delivery," the company said in a statement.

Zomato also claimed that colleagues of the delivery boy have tested negative for COVID-19.
"This restaurant had instructed their riders to wear masks and follow strict hygiene to keep customers safe from any unintended mishap.

All co-workers of the said rider have been tested negative. And as a precaution, the restaurant where this rider worked has suspended operations," read the statement.