No security breach in Aarogya Setu app, claims govt

coastaldigest.com news network
May 6, 2020

New Delhi, May 6: The government on Wednesday said no data or security breach has been identified in Aarogya Setu after an ethical hacker raised concerns about a potential security issue in the app.

The app is the government's mobile application for contact tracing and disseminating medical advisories to users in order to contain the spread of coronavirus.

On Tuesday, a French hacker and cyber security expert Elliot Alderson had claimed that "a security issue has been found" in the app and that "privacy of 90 million Indians is at stake".

Dismissing the claims, the government said "no personal information of any user has been proven to be at risk by this ethical hacker".

"We are continuously testing and upgrading our systems. Team Aarogya Setu assures everyone that no data or security breach has been identified," the government said through the app’s Twitter handle.

The tweet gave point-by-point clarification on the red flags raised by the hacker.

"We discussed with the hacker and were made aware of the following... the app fetches user location on a few occasions," it said, but added that this was by design and is clearly detailed in the privacy policy.

The app fetches users’ location and stores on the server in a secure, encrypted, anonymised manner - at the time of registration, at the time of self assessment, when users submit their contact tracing data voluntary through the app or when it fetches the contact tracing data of users after they have turned COVID-19 positive, it said.

On another issue that users can get COVID-19 stats displayed on the home screen by changing the radius and latitude-longitude using a script, Aarogya Setu said that all this information is already public for all locations and hence does not compromise on any personal or sensitive data.

"We thank the ethical hacker on engaging with us. We encourage any users who identify a vulnerability to inform us immediately...," it said.

Responding to Aarogya Setu's clarification, Alderson tweeted, "I will come back to you tomorrow".

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
February 13,2020

Guwahati, Feb 13: Hours after Assam's updated citizenship data disappeared from the website 'nrcassam.nic.in', an FIR was filed against a former NRC official for allegedly failing to submit the password to the sensitive document before quitting her job.

Talking to news agency on Thursday, NRC state coordinator Hitesh Dev Sarma said the complaint against former NRC project officer was filed under Official Secrets Act in Paltan Bazar police station here, as she "did not provide the password to the document, despite written reminders".

"She failed to surrender the password even after tendering her resignation on November 11 last year. She was a contractual employee and no longer authorised to hold the password, after quitting her job. An FIR has been filed against the former NRC project officer on Wednesday for violating the Official Secrets Act," he said.

Sarma also stated that the NRC office had written to her on several occasions for submitting the password, but did not get any response.

"We knew (she had resigned) and, therefore, sent several letters to her for handing over the password. But as she did not respond all these months, we filed a complaint against her yesterday for violating the Official Secrets Act.

"We must know if she has tampered with the sensitive information, after resigning," he added. The NRC state coordinator, however, refuted allegations of "malafide intent" involved in the matter.

"...this (cloud service provided by IT major Wipro) was not renewed by the earlier coordinator. So, the data went offline from December 15 last year. I assumed charge only on December 24," Sarma, who had gone on leave for a weeks after being appointed as the NRC state coordinator, clarified.

He also said that the state coordination committee had discussed the issue in its meeting on January 30 and wrote to Wipro during the first week of February.

"Once Wipro makes the data live, it will be available to the public. We hope that people will be able to access it in the next 2-3 days," Sarma claimed.

Reacting to the development, Wipro had said: "The IT Services Contract was not renewed by the authorities upon its expiry in October, 2019. However, as a gesture of goodwill, the company continued to pay the hosting service fee until January-end, 2020."

In another FIR filed with state criminal investigation department on Wednesday, NGO Assam Public Works (APW) alleged that former NRC Assam coordinator Prateek Hajela tampered with the final NRC list - published on August 31, 2019.

APW member Rajib Deka, in his complaint, accused Hajela of disobeying orders and directions of the Supreme Court, forgery of public register and committed offences under cyber laws for altering or changing public records by misusing his powers and position.

The NGO also said that after publication of the final list, several social networks and sections of the media had reported anomalies, insisting that many 'doubtful' persons were able to insert their names in the final list.

The Centre on Wednesday asserted that NRC data in Assam was safe even though some technical issues have been detected, which would be resolved soon.

Senior journalist-cum-RTI activist Saket Gokhale had sent an application to the NIC, the IT wing of the government, seeking a copy of the contract with Wipro.

"The Assam NRC data suddenly vanishing from the website (& the lack of data security) is incredibly shady. I've filed an RTI with the NIC specifically asking about details of the contract with Wipro, name of the cloud service provider, & all contracts signed for hosting this," he tweeted, while attaching a copy of the RTI application.

Leader of the Opposition in Assam Assembly and Congress leader Debabrata Saikia has also written to the Registrar General of India, requesting him to look into the fiasco urgently.

"It is a mystery as to why the online data should vanish all of a sudden, especially as the process to file appeals was yet to begin, all because of the go-slow attitude adopted by the NRC Authority. There is, therefore, ample scope to suspect that disappearance of online data is a malafide act," he had insisted.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
Agencies
August 8,2020

New Delhi, Aug 7: With the highest single-day spike of 62,538 cases, India's COVID-19 count rose to 20,27,075 on Friday, said Union Ministry of Health and Family Welfare.

The total cases include 6,07,384 active cases, 13,78,106 cured/discharged/migrated, and 41,585 deaths, according to the Ministry of Health.

The country's COVID-19 positive cases crossed the 10 lakh mark on July 17 when the total positive cases stood at 10,03,832 in India.

Maharashtra with 1,46,268 active cases and 3,05,521 cured and discharged patients continues to be the worst affected. The state has also reported 16,476 deaths due to the infection.

Tamil Nadu has 54,184 active cases while 2,14,815 patients have been discharged after treatment in the state. 4,461 deaths have been reported due to COVID-19 in the state.

Total COVID-19 cases in Andhra Pradesh are 1,96,789 including 1,12,870 recoveries, 82,166 active cases, and 1,753 deaths, as per the last health bulletin.

Delhi reported 1,192 new COVID-19 cases and 23 deaths on Friday. The total count of cases in the national capital has risen to 1,42,723. 

According to the Health Department, a total of 1,108 recoveries have been reported in Delhi in the last 24 hours.

The total number of cases includes 1,28,232 recoveries, 10,409 active cases, and 4,082 deaths.

According to the official data, 5,612 RT-PCR/CBNAAT/TrueNat tests and 17,773 rapid antigen tests were conducted today.

A total of 11,43,703 test has been conducted so far. The Union Health Ministry said that India continues its track record of testing more than 6 lakh COVID-19 samples each day for the fourth successive day.

"Expanded diagnostic lab network and facilitation for easy testing across the country have given a boost, and with 6,39,042 tests conducted in the last 24 hours, India has done 2,27,88,393 tests presently. The Tests Per Million (TPM) has seen a sharp increase to 16,513," the ministry said.

As many as 473 new COVID-19 cases were reported in Jammu and Kashmir today; 128 from Jammu division and 345 from Kashmir division.

The total number of cases stood at 23,927 including 7,260 actives cases, 16,218 recoveries, and 449 deaths.

The government of Mizoram informed that 19 new COVID-19 cases were reported in the state, taking the total number of cases to 558.
The number of active cases is 270 while 288 people have been discharged. No death reported in the state to date.

Bihar Health Department said, 3646 new cases reported in the state on August 6. Total tally reaches 71,794.

Similarly, 244 new COVID-19 cases, 77 recoveries, and five deaths were reported in Puducherry on Friday, taking the total number of cases to 4,862, including 1,873 active cases, 2,914 recoveries, and 75 deaths.

1,063 new cases of COVID-19 cases, 381 recovered and 23 deaths reported in Punjab in the last 24 hours. State tally rises to 21,930 including 7,351 active cases, 14,040 cured/discharged and 539 deaths.

Meanwhile, 1,074 new cases of COVID-19 and 22 deaths reported in Gujarat in last the 24 hours. State tally rises to 68,885 including 14,587 active cases, 51,692 cured/discharged and 2,606 deaths, the State Health Department said.

According to the Union Health Ministry, West Bengal has 23,829 active cases with 1,902 deaths so far while, Karnataka has 75,076 active cases of the virus with 80,281 recovered and 2,897 deaths so far.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
March 27,2020

New Delhi, Mar 27: The death toll due to COVID-19 rose to 17 in the country on Friday and the number of coronavirus cases climbed to 724, according to the Health Ministry. In its updated figures at 9.15 am, the ministry stated that four deaths were reported from Maharashtra while Gujarat had registered three deaths.

Karnataka has reported two deaths so far, while Madhya Pradesh, Tamil Nadu, Bihar, Punjab, Delhi, West Bengal, Jammu and Kashmir and Himachal Pradesh have reported one death each.

According to the data, the number of active COVID-19 cases in the country stood at 640, while 66 people were either cured or discharged and one had migrated. The total number of 724 cases included 47 foreign nationals, the ministry said.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.