Profile picture
, 9 tweets, 3 min read
My Authors
Read all threads
⚠️ Aarogya Setu is not open source. We got a press release and some random code to keep the public distracted. The released code is not for the app that everyone is using. ⚠️
While the released code may indeed be for *some* version of Aarogya Setu:
1. It is not the version you're using. We have no idea what is different.
2. Developers are ignoring reports of serious vulnerabilities.
3. Actual development is elsewhere in a closed source repo.
Where is the actual source code? Notice the URL here.
This situation fits well with popular perception that the source was released under duress. The developers went through the motions for show and went back to doing it the old way.

This is unfortunate. India deserves a true open source app with open *participation*.
I'm sensing some confusion in what the released code is. For my lawyer friends, this is a bit like the difference between a draft bill and a final bill. Eg: Your understanding of J. Srikrishna's draft PDP bill is not necessarily valid for the version that's in Parliament.
The lineage is the same, and that's being used to claim it's the same thing. However, this is not a safe assumption unless it's the exact same content word for word, as the difference can have serious consequences.
For Android apps, evidence of sameness can be provided using a method called a "verifiable build". (A ticket has been filed in the GitHub repository asking the team to use it.)
Play Store release and open source repo have been synced as of 15 minutes ago. github.com/nic-delhi/Aaro…
⚠️ With today's development, the original issue at the head of this thread has been resolved. Here is analysis by @asdofindia showing the released code and and the app in the Play Store to be the same. However, the other discussed concerns remain. ⚠️
Missing some Tweet in this thread? You can try to force a refresh.

Enjoying this thread?

Keep Current with Kiran Jonnalagadda

Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

Twitter may remove this content at anytime, convert it as a PDF, save and print for later use!

Try unrolling a thread yourself!

how to unroll video

1) Follow Thread Reader App on Twitter so you can easily mention us!

2) Go to a Twitter thread (series of Tweets by the same owner) and mention us with a keyword "unroll" @threadreaderapp unroll

You can practice here first or read more on our help page!

More from @jackerhack see all

Profile picture
Kiran Jonnalagadda
@jackerhack
I went to the Bangalore General Post Office today to enquire about a parcel that's been stuck in transit since July. It's somewhere in there. One customs official was valiantly opening everything to determine the tax on all the $1 and $2 trinkets people order from AliExpress.
Each of those bags contains parcels from the landing ports of Kolkata, Chennai and Mumbai. Anything that arrived in the past few weeks hasn't even been recorded as having arrived. They're months behind on the backlog. Here's a sample. Chennai to Bangalore took June to September.
Why is this happening? Back in 2015, a customs official showed me a memo. All personal imports above ₹2000 (i.e., you're not a registered importer) we're to be taxed at a flat rate of 40 something percent. The official explained that this was to encourage #MakeInIndia.
Read 8 tweets
Profile picture
Kiran Jonnalagadda
@jackerhack
Out of an abundance of caution, I have changed my phone number at three banks where I have accounts. This has utterly broken UPI for me. The UPI ecosystem treats phone number as primary identity. A new number means you're a new person. The situation is tragi-comic.
SBI let me change phone number online. It sent OTPs to both old and new numbers, and once I keyed them in, I was done. This is shockingly efficient given what follows.
ICICI required me to enter the new phone number at an ATM. They sent confirmation by SMS to both numbers. However, the update has not actually happened. UPI is still active on the old number after two weeks, despite two attempts to change it.
Read 20 tweets
Profile picture
Kiran Jonnalagadda
@jackerhack
Want the government's ear? Add Aadhaar to your suggestion. Relevance doesn't matter. the-ken.com/elevator-pitch…
Aadhaar is not a communications channel. The device you're using to read this already has the ability to specify your preferred language.
This one is far more sensible: individuals should be allowed to use Aadhaar if they prefer to use it. the-ken.com/elevator-pitch…
Read 3 tweets

Embed code for your website

×
Follow Us on Twitter!

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3.00/month or $30.00/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!