French researcher flags Aarogya flaws, govt denies
Hindustan TimesThe Union government’s Aarogya Setu application has vulnerabilities that could compromise the identity and movement of the millions of Indians who use it, according to a French computer researcher who posted a technical analysis of the flaws on Wednesday, and ostensibly illustrated how he could determine whether someone reported being infected at sensitive locations such as Parliament. On April 30, security agencies warned army paramilitary troops against an Aarogya Setu imitation that was being spread to steal sensitive data, news agency PTI reported quoting officials. A second issue is that the Aarogya Setu uses “static ID” to store contact history. The problems, Surjewala added, were spread over three areas: that the Aarogya Setu’s data collection violated the right to privacy, that it was not developed by the government’s engineers and data was stored on foreign servers and that human control in the backend could manipulate the health status of an individual