Skip to main content

Indian Government now offering Rs 4 lakh to users who can find flaws and vulnerabilities in Aarogya Setu app

If you’re a hacker or someone who knows coding in regards to apps can now help find bugs in India’s own contact-tracing app Aarogya Setu. In a tweet that was published bu the government, researchers and experts who have the technical knowledge regarding apps are being offered Rs 4 lakhs to help find bugs and issues with Arryoga Setu. This bug bounty is open to all comers including people on Aarogya Setu. The government says, “Everyone, including researchers and users of Aarogya Setu, are encouraged to report any vulnerability impacting the privacy and information security posture of Aarogya Setu application.”

Here's an opportunity for all to join #TeamSetu! Find a bug in the app or suggest improvements and win exclusive cash prizes. #IndiaFightsCorona pic.twitter.com/hTRFCbXjNJ

— MyGovIndia (@mygovindia) May 28, 2020

A few weeks ago, French security researcher Robert Baptiste who goes by the pseudonym Elliot Alderson (a character from the TV show Mr Robot) posted a tweet saying that Aarogya Setu has a few flaws that may lead to a leak in the information collected. After that kerfluffle, the government has now decided to make Aarogya Setu open source. This essentially means that anyone can now inspect and check the source code for the app and make necessary changes where they see fit. This was a necessary move for the government as the public backlash getting worse. 

Researchers who do find bugs in the app will be asked to responsibly disclose those vulnerabilities and even get paid for it. The government has also laid down a few guidelines for people to follow. Basically, the reported vulnerability should only be present in the Aarogya Setu app or its source code or back-end server. They further added that the bug or vulnerability should be able to be exploited by “an unrooted phone running a version of Android supported by Aarogya Setu, with ADB Disabled and with all default Android security features in place.”

In other Aaryoga Setu news, the app is now mandatory for people who are flying. You can read more about that here. There has been a new contact-tracing app called SwissCovid which is based on Google and Apple’s UPI as well, you can check out how it compares to our own Aarogya Setu app here. 



from Latest Technology News https://ift.tt/2ZQRbze
Labels:

Comments

Post a Comment

Popular posts from this blog

Nothing just 5 Nothing Phone 2 details officially confirmed so far

Nothing Phone 2 could be semi-transparent or at least have a translucent charging cable. It won’t be a small phone either. Here’s everything we have learned about the phone from Carl Pei as well as leaks and rumours. Starting with what Carl Pei has hinted at in bits and pieces so far. Official Nothing Phone 2 hints and teasers 1. Semi-transparent USB-C cable pic.twitter.com/LOYjBLa5UZ — Carl Pei (@getpeid) June 19, 2023 So, the top portion of USB-C connector of Nothing Phone 2 sports the signature "transparent design language" of the brand. You can see the Nothing brandng through the transparent part. Carl calls it "nice" and we agree. It does look nice but we are concerned whether it will be discoloured in time.  2. Not a small phone Contrary to what we may believe living in the echo chamber, very few people buy small phones https://t.co/aVolitAzN3 — Carl Pei (@getpeid) June 18, 2023 Carl says not many people buy small phones. Generally, people prefer big di...
Post a Comment
Read more