Skip to main content

Indian Government now offering Rs 4 lakh to users who can find flaws and vulnerabilities in Aarogya Setu app

If you’re a hacker or someone who knows coding in regards to apps can now help find bugs in India’s own contact-tracing app Aarogya Setu. In a tweet that was published bu the government, researchers and experts who have the technical knowledge regarding apps are being offered Rs 4 lakhs to help find bugs and issues with Arryoga Setu. This bug bounty is open to all comers including people on Aarogya Setu. The government says, “Everyone, including researchers and users of Aarogya Setu, are encouraged to report any vulnerability impacting the privacy and information security posture of Aarogya Setu application.”

Here's an opportunity for all to join #TeamSetu! Find a bug in the app or suggest improvements and win exclusive cash prizes. #IndiaFightsCorona pic.twitter.com/hTRFCbXjNJ

— MyGovIndia (@mygovindia) May 28, 2020

A few weeks ago, French security researcher Robert Baptiste who goes by the pseudonym Elliot Alderson (a character from the TV show Mr Robot) posted a tweet saying that Aarogya Setu has a few flaws that may lead to a leak in the information collected. After that kerfluffle, the government has now decided to make Aarogya Setu open source. This essentially means that anyone can now inspect and check the source code for the app and make necessary changes where they see fit. This was a necessary move for the government as the public backlash getting worse. 

Researchers who do find bugs in the app will be asked to responsibly disclose those vulnerabilities and even get paid for it. The government has also laid down a few guidelines for people to follow. Basically, the reported vulnerability should only be present in the Aarogya Setu app or its source code or back-end server. They further added that the bug or vulnerability should be able to be exploited by “an unrooted phone running a version of Android supported by Aarogya Setu, with ADB Disabled and with all default Android security features in place.”

In other Aaryoga Setu news, the app is now mandatory for people who are flying. You can read more about that here. There has been a new contact-tracing app called SwissCovid which is based on Google and Apple’s UPI as well, you can check out how it compares to our own Aarogya Setu app here. 



from Latest Technology News https://ift.tt/2ZQRbze
Labels:

Comments

Post a Comment

Popular posts from this blog

PS5 unboxing videos show how huge the console is

To say that Sony has been a bit coy when it comes to the PlayStation 5 would be a bit of an understatement. The company only recently announced the India pricing of the console and now finally we have unboxings of the console going live and one thing is pretty clear - The console is HUGE!  So what do you get in the box? Well… besides the console itself (and the manuals), you get: DualSense controller USB Type-C charging cable for the controller HDMI 2.1 cable Power cable for the console (no bulky adapter/box) Plastic stand Now the plastic stand is used if you place the console on its side. As there is no flat surface on either side of the console, the stand will ensure that it remains still. But you can also place it when propping up the console vertically. However, it does seem like the PS5 can stand on its own vertically if need be. IGN’s unboxing video gives you a good idea of how to place the stand. All of the unboxing videos mention the size of the console because it is pr...
Post a Comment
Read more

Pixel 4a (5G) Model Tipped in Google Camera v7.5 App Code, Pixel 5 XL May Not Launch This Year: Report

Google Camera app version 7.5 teardown, rolled out for Android 11 beta users, shows mentions of three upcoming Pixel devices - Pixel 4a, Pixel 4a (5G), and Pixel 5, with no reference to the Pixel 5 XL. This hints that Google may be ditching the Pixel 5 XL this year. The codenames of the three upcoming Pixel devices are listed to be sunfish, bramble... from Gadgets 360 https://ift.tt/3gd9bJp
Post a Comment
Read more