I wrote an article to describe the issues I reported to the @SetuAarogya. I hope it will allow people to understand the situation and why it's an important issue. I hope you like it, all feedbacks are welcome!
And don't forget: Hack the planet! 🤘
medium.com/@fs0c131y/aaro…
And don't forget: Hack the planet! 🤘
medium.com/@fs0c131y/aaro…
I took the time to write this article for two reasons:
- I want to be transparent. You have all the info, even the technical info
- Sharing is caring. Maybe it will give ideas to other bug bounty hunters and security lovers in general
- I want to be transparent. You have all the info, even the technical info
- Sharing is caring. Maybe it will give ideas to other bug bounty hunters and security lovers in general
The extraordinary @a_greenberg wrote a very good article for @WIRED to explain why this is an issue wired.com/story/india-co…
I almost forget: #OpenSourceAarogyaSetu
For the "you are not a hacker, you just spoofed your location" crowd:
- This is not my first dance with the Indian gov and probably not the last one. I'm doing this sh*t for a long time
- F*ck you
- This is not my first dance with the Indian gov and probably not the last one. I'm doing this sh*t for a long time
- F*ck you
More clarifications:
- No the purpose of the app is not to know the location of ill patients
- The 1st issue I found is a security issue, the 2nd issue a privacy issue.
- If you don't care about privacy, fine for you but it's still a privacy issue.
- No the purpose of the app is not to know the location of ill patients
- The 1st issue I found is a security issue, the 2nd issue a privacy issue.
- If you don't care about privacy, fine for you but it's still a privacy issue.
