Thread by @SFLCin

Our analysis reveals that the #SourceCode that has been released as the “backend code” is grossly incomplete. Though any effort at transparency needs to be lauded, much of how the @SetuAarogya operates is still opaque
privacy.sflc.in/aarogyasetubac…
@NICMeity @GoI_MeitY
#AarogyaSetu

The code released on 20th November does contain code that corresponds to the #frontend of the website web.swaraksha.gov.in/ncv19 and the code released also contains code that lets the website interact with the application through the #webview.
@SetuAarogya
#COVID19 #ContactTracing

However, some of the libraries/modules that the code depends on have not been released and very little of the released code is meant to run on the #backend.
#coders #aarogyasetu #COVID19 #FOSS

The code that is meant to run in the #Backend does very little of backend functionality. Although the name indicates that this is a “middleware server” for account deletion, the code does not implement such a functionality.
#CodersTeach #code

Among 509 files in the code base, only 5 files in the “api” folder are meant to run on the backend. This amounts to about 87 lines (~1%) of the 7425 lines of code in the released code snapshot. The rest of the code is “frontend” code.

The #Backend code has no scripts related to launching, running, or executing them. There is no accompanying documentation which describes how these files can be executed on a server. There is no architecture documentation either.
#FOSS #github #GitHubUniverse

We would like to thank @asdofindia and @anivar for assisting our team with the technical analysis.
#DigitalDefender #SFLCin

You can help us do more!
To support our work and help us in the empowerment of #Indiancitizens about their digital freedom and rights, #DonateNow.
Visit - sflc.in/donate
#LetTheNetWork
#FreeSpeechTracker #DigitalDefenders #freedom #donate