Lynching incidents shouldn't be politicised or given communal colour: Naqvi

New Delhi, May 6: The government on Wednesday said no data or security breach has been identified in Aarogya Setu after an ethical hacker raised concerns about a potential security issue in the app.

The app is the government's mobile application for contact tracing and disseminating medical advisories to users in order to contain the spread of coronavirus.

On Tuesday, a French hacker and cyber security expert Elliot Alderson had claimed that "a security issue has been found" in the app and that "privacy of 90 million Indians is at stake".

Dismissing the claims, the government said "no personal information of any user has been proven to be at risk by this ethical hacker".

"We are continuously testing and upgrading our systems. Team Aarogya Setu assures everyone that no data or security breach has been identified," the government said through the app’s Twitter handle.

The tweet gave point-by-point clarification on the red flags raised by the hacker.

"We discussed with the hacker and were made aware of the following... the app fetches user location on a few occasions," it said, but added that this was by design and is clearly detailed in the privacy policy.

The app fetches users’ location and stores on the server in a secure, encrypted, anonymised manner - at the time of registration, at the time of self assessment, when users submit their contact tracing data voluntary through the app or when it fetches the contact tracing data of users after they have turned COVID-19 positive, it said.

On another issue that users can get COVID-19 stats displayed on the home screen by changing the radius and latitude-longitude using a script, Aarogya Setu said that all this information is already public for all locations and hence does not compromise on any personal or sensitive data.

"We thank the ethical hacker on engaging with us. We encourage any users who identify a vulnerability to inform us immediately...," it said.

Responding to Aarogya Setu's clarification, Alderson tweeted, "I will come back to you tomorrow".

New Delhi, Jan 8: Jawaharlal Nehru University Students Union (JNUSU) President Aishe Ghosh has filed a complaint over the violence that took place at the varsity campus on Sunday.

"I am filing this complaint for the incident in which a mob conspired and acted with common intention to assault, intimidate and attempt to murder me, and request you to register an FIR and apprehend culprits at the earliest," the complaint read.

She said that on January 5, in the afternoon, she received information from students in the campus that some students affiliated to ABVP along with other unidentified men and women had gathered with weapons like rods, sledgehammers and lathis near Ganga Bus Stop.

"I along with Nikhil Mathew (MA Labour Studies) who was also present there, were surrounded by a group of persons of that mob most of whom were wearing masks. The mob of 20-30 persons dragged me behind a car standing near the 24*7 and surrounded me and despite my pleading did not let me go and attacked me with rods while I had fallen down. I remember that one of the people was of medium height wearing a brownish-red sweatshirt with UCLA written on it. I saw his face as he was facing me and did not have a mask on and can identify him if I see him," Ghosh wrote in her complaint.

"I was attacked by the above-mentioned persons collectively and was hit on the head multiple times with iron rods. I fell to the ground and my head started bleeding, and some of them kicked me and hit me with the rod on my hand and rest of the body including my head, chest and back."

"I am attaching with this complaint a copy of the MLC which details my injuries. Nikhil Mathew tried to save me but was also hit with an iron hammer and other weapons on his head and arms. The intention of the group of men and their acts was definitely to murder me and other persons associated with me," she said.

Thiruvananthapuram, Apr 23: Amid opposition charges, the Kerala government on Tuesday constituted a two-member committee to examine whether the privacy of personal and sensitive data of COVID-19 patients has been protected under the agreement entered by it with US-based IT firm Sprinklr.

The committee, headed by former Special IT Sscretary M Madhavan Nambiar and former health secretary Rajeev Sadanandan, will also ascertain whether adequate procedures were followed while finalising the arrangements with the private company.

The Opposition Congress has been levelling charges that the collection of data by the US firm violated the fundamental rights of the patients.

In its order, state government said it had initiated steps to set up a Data Analytics platform to integrate data from various sources available in the government to meet the "exigency of a massive and unprecedented surge of epidemic".

The committee will also examine whether deviations, if any, are fair, justified and reasonable considering the extraordinary and critical situation faced by the state, it said.

Meanwhile, the Kerala High Court on Tuesday asked the state government to file its reply by April 24 on a plea seeking to quash its contract with the US-based firm.

Expressing concern over the confidentiality of the citizen's data processed by a third party, the court sought to know why the sanction of the law department was not taken before finalising the agreement.

The court hailed the state government's fight against COVID-19, but said it is concerned about data confidentiality.

The government informed the court that the agreement with Sprinklr has safeguards for data protection "as per standard practices of software as a service model."

The ward-level committees, set up by the government for the anti-coronavirus fight, collect information of those under home isolation, the elderly and those at the risk of the disease, using a questionnaire and later uploads it on the server of the private agency.