Share this page!

Enter URL or ID to Unroll

You can paste full URL like: https://x.com/threadreaderapp/status/1644127596119195649
or just the ID like: 1644127596119195649

How to get URL link on X (Twitter) App

  1. On the Twitter thread, click on or icon on the bottom
  2. Click again on or Share Via icon
  3. Click on Copy Link to Tweet
  4. Paste it above and click "Unroll Thread"!
  5. More info at Twitter Help
Internet Freedom Foundation (IFF) Profile picture
@internetfreedom
Jun 3, 2020 • 5 tweets • 2 min read • Read on X
Two days back there was an alarming report that millions of sensitive personal records were exposed due to a security vulnerability by @CSCegov_. We sprung into action and wrote to the IT Ministry. 1/5

internetfreedom.in/its-time-to-st…
The report published by the website, “vpnMentor” a website that provided for on-boarding services for BHIM (a UPI payment app) contained a security vulnerability. Records made vulnerable included Aadhaar documents and caste certificates. 2/5

vpnmentor.com/blog/report-cs…
The vulnerability had impacted the data breach of more than 7 million records impacting those from semi-urban and rural backgrounds. Leaving them vulnerable to identity theft, fraud and viral attacks. Meanwhile digital frauds are on the rise. 3/5

thehindu.com/data/cyber-cri…
While there have been blanket denials by CSCegov_, we have recommended the following actions: 4/5
✅ Admission and remedy by CSC
✅ Better response times by CERT-In
✅ Breach notifications to affected persons
✅ Safeguarding and promoting security researchers
IFF works to not only protect your privacy but also cyber security. You can help our work by funding it. This month we are running a membership drive. Donate today! 5/5 #WeNeed50

internetfreedom.in/become-an-iff-…

• • •

Missing some Tweet in this thread? You can try to force a refresh
　

Keep Current with Internet Freedom Foundation (IFF)

Internet Freedom Foundation (IFF) Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @internetfreedom

Internet Freedom Foundation (IFF) Profile picture
Jun 7
BREAKING: DIGIYATRA EXPOSED❗🧵

Here’s how your beloved DigiYatra uses facial recognition technology (FRT) Content warning: ***DYSTOPIAN USES*** ⚠️⚠️ 1/10 Image
Now that we have your attention, here are the recent ways in which Indian public authorities and police forces used (and abused) facial recognition systems, jeorpardising the human rights and data privacy of millions of Indian citizens without much accountability. 2/10 🧵
1️⃣ @tnpoliceoffl suffered a massive data leak in its FRT portal, making 8,00,000 lines of data vulnerable. This incl. personal data of policemen & FRT reports on thousands of accused persons. IFF called for a total ban on use of FRT by police forces. 3/10

internetfreedom.in/leak-in-tamil-…
Read 10 tweets
Internet Freedom Foundation (IFF) Profile picture
May 7
🚨 On May 4, 2024, a massive breach in @tnpoliceoffl’s Facial Recognition (FRT) Portal exposed over 8,00,000 lines of data—which include 50,000 facial IDs, personal information of police officers, & details of crimes, police stations, & FIRs filed. 🚨🧵1/8
The FRT software, developed by CDAC-Kolkata and hosted on TNSDC, which was storing facial images alongside personal details of suspected, accused, & incarcerated persons, was compromised—and the list of data leaked from it is disturbingly long. ⬇️ 2/8
FRT is an extremely invasive & dangerous surveillance tool which poses direct threats to privacy, especially at the hands of law enforcement. Police forces are able to amass & process large volumes of sensitive facial data without any checks, consent, transparency, or procedural safeguards. 3/8
Read 8 tweets
Internet Freedom Foundation (IFF) Profile picture
Apr 4
Been hearing some chatter around #DigiYatra? As scary questions about ownership, transparency, and data flow emerge, here is a quick rundown of everything we know about the service, and more importantly, everything we don’t. 😶‍🌫️🧵1/7
1️⃣Who owns DigiYatra?
In 2019, @MoCA_GoI passed on DigiYatra's operations & data ecosystem to a *private company* created for this very purpose – DigiYatra Foundation. DYF is a joint venture between 5 Indian airports (public-private, 74% stake) & @AAI_Official (public, 26%). 2/7
2️⃣ Such a public-private venture must be answerable to citizens?
Not exactly. Neither DYF nor its security audit agency @IndianCERT fall under the RTI Act. It cannot, technically, be forced to disclose any information on its data practices & security. 3/7
medianama.com/2023/03/223-ci…
Read 8 tweets
Internet Freedom Foundation (IFF) Profile picture
Mar 22
Were you among the millions of @WhatsApp users who got a DM from ‘Viksit Bharat Sampark’? 🫠🫠

The account, seeking feedback on government initiatives, is now barred by the Election Commission from sending messages.
But several concerns persist… (1/10)
internetfreedom.in/whatsapp-messa…
The message, accompanied by a letter from the PM, listed the various schemes and initiatives introduced by the incumbent government and was, in many cases, sent after the ECI released its Model Code of Conduct for upcoming elections. (2/10)
It stirred a storm and how…
First, we wonder how exactly did MeitY secure the contact information of such a large number of people and when/how did it begin using this information for outreach purposes? (3/10)
Read 10 tweets
Internet Freedom Foundation (IFF) Profile picture
Mar 20
🚨🚨
Statement:

@GoI_MeitY has notified the @PIBFactCheck of the @MIB_India as the fact-checking unit (FCU) under the IT Amendment Rules, 2023.

The notified FCU will be empowered to flag online “false”, “fake”, or “misleading” information related to the Union govt. 1/9 🧵 Image
The establishment of the FCU less than a month before the country heads for the #GeneralElections2024 could vastly affect the nature of free speech on the internet as it holds the potential to be (mis)used for proactive censorship, most importantly in the context of dissent. 2/9

Link to the PDF:
.content.internetfreedom.in/api/files/divc…
This notification follows the March 13 decision of the Bombay HC, where the Bench refused to restrain the setting up of an FCU until the third Judge decides on the constitutionality of the 2023 Amendment.

This effectively allowed the Union govt to operationalise the FCU, despite its constitutionality being under deliberation before the High Court. 3/9

Read 9 tweets
Internet Freedom Foundation (IFF) Profile picture
Mar 12
‼️Indian Railways has floated a tender for the installation of 3.3L facial recognition-enabled CCTV cameras inside railway coaches with a central face-matching server to surveil & identify passengers (adults & children) to ‘curb crime’. (1/7)

internetfreedom.in/indian-railway…
@amofficialCRIS invited tech providers to install FRT-enabled tech with ‘video analytics’ to identify faces & send them to a ‘face matching server’. This lacks legal safeguards, creates a fertile land for misidentification & staff bias, & fails Puttaswamy criteria. (2/7)

CCTV systems enabled with FRT operate in regulatory limbo as there is no legislative basis to use it to combat crime. & there’s the currently inoperational DPDPA which may not adequately regulate CCTV and FRT, leaving individuals' sensitive facial data vulnerable to misuse. (3/7) Image
Read 8 tweets

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Don't want to be a Premium member but still want to support us?

Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal

Or Donate anonymously using crypto!

Ethereum

0xfe58350B80634f60Fa6Dc149a72b4DFbc17D341E copy

Bitcoin

3ATGMxNzCUFzxpMCHL5sWSt4DVtS8UqXpi copy

Thank you for your support!

Follow Us!

Send Email!

:(