India to grow 7.3% this fiscal, 7.6% in next: ADB

New Delhi, May 6: The government on Wednesday said no data or security breach has been identified in Aarogya Setu after an ethical hacker raised concerns about a potential security issue in the app.

The app is the government's mobile application for contact tracing and disseminating medical advisories to users in order to contain the spread of coronavirus.

On Tuesday, a French hacker and cyber security expert Elliot Alderson had claimed that "a security issue has been found" in the app and that "privacy of 90 million Indians is at stake".

Dismissing the claims, the government said "no personal information of any user has been proven to be at risk by this ethical hacker".

"We are continuously testing and upgrading our systems. Team Aarogya Setu assures everyone that no data or security breach has been identified," the government said through the app’s Twitter handle.

The tweet gave point-by-point clarification on the red flags raised by the hacker.

"We discussed with the hacker and were made aware of the following... the app fetches user location on a few occasions," it said, but added that this was by design and is clearly detailed in the privacy policy.

The app fetches users’ location and stores on the server in a secure, encrypted, anonymised manner - at the time of registration, at the time of self assessment, when users submit their contact tracing data voluntary through the app or when it fetches the contact tracing data of users after they have turned COVID-19 positive, it said.

On another issue that users can get COVID-19 stats displayed on the home screen by changing the radius and latitude-longitude using a script, Aarogya Setu said that all this information is already public for all locations and hence does not compromise on any personal or sensitive data.

"We thank the ethical hacker on engaging with us. We encourage any users who identify a vulnerability to inform us immediately...," it said.

Responding to Aarogya Setu's clarification, Alderson tweeted, "I will come back to you tomorrow".

Lucknow, Jan 16: The drive initiated by Uttar Pradesh's Yogi Adityanath government to identify non-Muslim immigrants in the state seems to have run into rough weather.

In Pilibhit, where the maximum number of about 35,000 illegal immigrants has been identified, it has now been found that information is being sought by the state government on an unverified document. A large number of families from Bangladesh settled here several decades ago.

The survey began last month even before the bill was notified. Moreover, the feedback email on the questionnaire is a Gmail ID -- [email protected] -- which is not a government server.

It is not known how the state government is drawing up the lists without having the verification criteria.

After the report was put up by a news website, Home Department officials feigned complete ignorance about the issue.

A spokesman said: "This was an unofficial and preliminary exercise to assess the number of illegal migrants in the state. The document is meant to collect basic beneficiary information. No list of potential beneficiaries has yet been sent to Delhi."

The document has eight columns asking for name, father's name, place of stay in India, and where did they come from and when. It does not mention any requirement of proof, or documents.

It also asks for a description of the kind of atrocities they faced, presumably in their home country.

The District Magistrate of Pilibhit claimed they are checking documents of the refugees, but denied any knowledge of the unsigned document.

The CAA is meant to benefit Hindus, Sikhs, Buddhists, Jains, Parsis and Christians from Pakistan, Bangladesh and Afghanistan who came to India before December 31, 2014. The statement of purposes of the Act adds that it is meant to benefit those fleeing religious persecution from the above countries.