Profile picture
, 3 tweets, 2 min read
My Authors
Read all threads
In India, the state of Madhya Pradesh created a #Covid19 dashboard with:
- name of quarantined people
- their device id and name
- os version
- app version code
- the gps coordinates of their current location
- the gps coordinates of their office

geoportal.mp.gov.in/covid19_new/
This is what a surveillance system looks like.
Someone saw this tweet and took down the dashboard
Missing some Tweet in this thread? You can try to force a refresh.

Enjoying this thread?

Keep Current with Elliot Alderson

Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

Twitter may remove this content at anytime, convert it as a PDF, save and print for later use!

Try unrolling a thread yourself!

how to unroll video

1) Follow Thread Reader App on Twitter so you can easily mention us!

2) Go to a Twitter thread (series of Tweets by the same owner) and mention us with a keyword "unroll" @threadreaderapp unroll

You can practice here first or read more on our help page!

Related hashtags

#Covid19

More from @fs0c131y see all

Profile picture
Elliot Alderson
@fs0c131y
Hi @AmdavadAMC,

Do you think it's a good idea to pinpoint the houses of #Covid19 patients and deaths publicly on your website?

Even sick or dead, you deserve privacy.

Regards, Image
Is it down only for me or everyone? They already took it down?
Damn, it was fast.

I tweet, you fix
Read 4 tweets
Profile picture
Elliot Alderson
@fs0c131y
According to @medianama, the data of this dashboard came from Sarthak: "a mobile-based employee management solution for the government of Madhya Pradesh".

They customised an employee management system to track #Covid19 patients... *very slow clap*

play.google.com/store/apps/det…
If you login, Sarthak will start the LocationUpdatesService. This service send to the server the info we saw yesterday on the dashboard:
- latitude
- longitude
- accuracy
- device name
- ...
The developers created a dedicated package for the #Covid19 patients
Read 6 tweets
Profile picture
Elliot Alderson
@fs0c131y
1/ Today, the Indian “we are 20 years old but we are Infosec pros, you are a shame and we will explain you what security is" gang is accusing me of stealing bugs.

I guess it's time to explain again my process when it comes to vulnerability disclosure
2/ Sometimes, during my research I find security issues. Sometimes, people send me tips by DM.

In the 2 cases the process is the same.
3/ When people send me a tip, my questions are always:
1) Who is affected?
2) What is the issue?
3) Can you access sensitive data?
4) Can I reproduce the issue?
5) Did you try to contact them?
6) Do you want to stay anonymous?
Read 14 tweets

Embed code for your website

×
Follow Us on Twitter!

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3.00/month or $30.00/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!