'Immediate action needed': Naqvi on UP cop's 'Go to Pak' comment

New Delhi, May 6: The government on Wednesday said no data or security breach has been identified in Aarogya Setu after an ethical hacker raised concerns about a potential security issue in the app.

The app is the government's mobile application for contact tracing and disseminating medical advisories to users in order to contain the spread of coronavirus.

On Tuesday, a French hacker and cyber security expert Elliot Alderson had claimed that "a security issue has been found" in the app and that "privacy of 90 million Indians is at stake".

Dismissing the claims, the government said "no personal information of any user has been proven to be at risk by this ethical hacker".

"We are continuously testing and upgrading our systems. Team Aarogya Setu assures everyone that no data or security breach has been identified," the government said through the app’s Twitter handle.

The tweet gave point-by-point clarification on the red flags raised by the hacker.

"We discussed with the hacker and were made aware of the following... the app fetches user location on a few occasions," it said, but added that this was by design and is clearly detailed in the privacy policy.

The app fetches users’ location and stores on the server in a secure, encrypted, anonymised manner - at the time of registration, at the time of self assessment, when users submit their contact tracing data voluntary through the app or when it fetches the contact tracing data of users after they have turned COVID-19 positive, it said.

On another issue that users can get COVID-19 stats displayed on the home screen by changing the radius and latitude-longitude using a script, Aarogya Setu said that all this information is already public for all locations and hence does not compromise on any personal or sensitive data.

"We thank the ethical hacker on engaging with us. We encourage any users who identify a vulnerability to inform us immediately...," it said.

Responding to Aarogya Setu's clarification, Alderson tweeted, "I will come back to you tomorrow".

Srinagar, Jan 9: Envoys from 15 countries including the United States were shown around Srinagar on Thursday, the first visit by New Delhi-based diplomats since the government stripped Kashmir of its semi-autonomous status and began a harsh crackdown five months ago.

The diplomats were driven by Indian authorities in a motorcade amid tight security from the airport to the military headquarters in Srinagar, where they were briefed on the security situation, an army officer said. He spoke on condition of anonymity as he was not authorized to speak to reporters.

They also held discussions with civil society members and some Kashmiri politicians, said Raveesh Kumar, spokesman for the Ministry of External Affairs (MEA).

The objective of the visit, organized by the Union government, was for the envoys to see first-hand “how things have progressed and how normalcy has been restored to a large extent'' in Kashmir since August, Kumar told reporters in New Delhi.

In October, a group of European Parliament members had visited the region, which is claimed by both India and Pakistan.

The delegation that visited Kashmir on Thursday included US ambassador to India Kenneth Juster and diplomats from Bangladesh, Vietnam, Norway, the Maldives, South Korea, Morocco, Niger, Nigeria, Argentina, the Philippines, Fiji, Uzbekistan, Peru and Togo.

Offices, shops and businesses were open in Srinagar on the cold winter day, but the diplomats did not stop to talk to people as they moved to different venues of their meetings.

They were to fly to Jammu, the winter capital of Kashmir, later Thursday and return to New Delhi on Friday.

Congress leader Jairam Ramesh pointed out the oddity of taking foreign diplomats to the troubled state but not allowing allowing Indian political leaders to freely visit it.

The National Conference said it was "disappointed" with the way the government brought envoys from various countries to "endorse" its "claims of normalcy" in the union territory. The party alleged that it was no more than a "guided tour" with access limited to "handpicked individuals who toe the government line".

“The NC wishes to ask these envoys that if the situation in Jammu & Kashmir is "normal", then why are scores of people, including three former chief ministers, under detention for almost 160 days and why have the people been denied access to the internet for over 5 months?" a statement issued by the party said.

Kumar dismissed as unfounded criticism of the visit, and said more such visits to Kashmir by New Delhi-based diplomats are likely in the near future.