Profile picture
Elliot Alderson @fs0c131y
, 7 tweets, 6 min read Read on Twitter
When you create a profile in the official @narendramodi #Android app, all your device info (OS, network type, Carrier …) and personal data (email, photo, gender, name, …) are send without your consent to a third-party domain called in.wzrkt.com.
This domain is classified as a phishing link by the company G-Data. This website is hosted by @GoDaddy and the whois info are hidden.
After a quick search, this domain belongs to an American company called @CleverTap. According to their description, “#CleverTap is the next generation app engagement platform. It enables marketers to identify, engage and retain users and provides developers"
The @CleverTap #Android SDK is available on @Github github.com/CleverTap/clev…
Of course, I reversed their SDK, the JAR file provided on #Github.
First observation, nothing is obfuscated.
Secondly, this SDK is very light…
Finally, we can confirm that the domain wzrkt.com is the property of @CleverTap.
.@Clevertap why did you mask the whois info of wzrkt.com?
.@narendramodi, I know privacy is not your thing but any thoughts about sharing the personal data of your users without their consent to a third-party company?
Missing some Tweet in this thread?
You can try to force a refresh.

Like this thread? Get email updates or save it to PDF!

Subscribe to Elliot Alderson
Profile picture

Get real-time email alerts when new unrolls are available from this author!

This content may be removed anytime!

Twitter may remove this content at anytime, convert it as a PDF, save and print for later use!

Try unrolling a thread yourself!

how to unroll video

1) Follow Thread Reader App on Twitter so you can easily mention us!

2) Go to a Twitter thread (series of Tweets by the same owner) and mention us with a keyword "unroll" @threadreaderapp unroll

You can practice here first or read more on our help page!

Related hashtags

#Android #CleverTap #Github

More from @fs0c131y see all

Profile picture
In 1981, the Primrose fails on a beach of the North Sentinel Island, pushed by a typhoon. You can still see the wreckage on Google Map, in a creek, in the northwest. The crew was saved only by a helicopter operated by the Indian Navy.
Exact coordinates on Google Maps. Open the link, this Island is wonderful! google.com/maps/place/Nor…
Awesome article in French about the North Sentinel Island from @lemondefr lemonde.fr/international/…
Read 3 tweets
Profile picture
I have a @Frida question: How to deal with a HashMap? I'm intercepting a Java method, "this" has a Hashmap in his attributes. I want to print the content of this HashMap cc @oleavr @enovella_
cc @NowSecureMobile 👋
cc @fridadotre
Read 3 tweets
Profile picture
.@Paytm, the most used banking app in #India, just sent a dummy notification to his users in the middle of the night. Imagine the reaction of the guy (hacker?) when he realised that he just sent a notification to millions of people
Paytm published a tweet regarding this notification
Read 3 tweets

Related threads

Profile picture
1/16 On February 23, 1974, President Nixon delivered a live radio address to the nation title “About the American Right of Privacy”. It is full of concerns about the growing use of computers. Six months later Nixon was out of the White House and his...
2/16 ...warnings were lost in the whirlwind of Watergate. To revisit them now is a reminder of how slow man is to learn from his mistakes. What follows are some key points from that 1974 speech. I am not a fan on Nixon, but these were prescient words.
3/16 Many things are necessary to lead a full, free life--good health, economic and educational opportunity, and a fair break in the marketplace, to name a few.
Read 16 tweets
Profile picture
UCC had opportunity to comment on the #Data.Protection & Privacy Bill. The enactment of this law is long overdue. A comprehensive law on the collection & processing personal information gives effect to the right to Privacy envisaged under Article 27(2) of the Constitution
UCC welcome the protections offered by the Bill in terms of export of data, breach notification requirements, data subjects access rights, automated decision making, compensation and the right to be forgotten and provision for financial and penal sanctions for breach of the law.
Distinction between Data collectors & data controllers.
The Bill should however clarify & distinguish Data Collectors, from Data Processors & Data Controllers. Clause 2 is inconsistent with international good practice which provides for two broad categories of Data Controllers
Read 17 tweets
Profile picture
Press Statement: UIDAI strongly dismissed the claims made by certain elements on Twitter and a section of Media that they have fetched personal details of Shri Ram Sewak Sharma who is a public servant using his Aadhaar number. 1/n
UIDAI condemns such malicious attempts by few individuals to malign the world’s largest unique identity project - Aadhaar.
UIDAI said that Aadhaar has built the digital trust among people at large and these devious elements are trying to spread misinformation. 2/n
Aadhaar database is totally safe and has proven its security robustness over last eight years.
UIDAI emphatically stated that any information published on Twitter about the said individual Shri RS Sharma was not fetched from Aadhaar database or UIDAI’s servers. 3/n
Read 19 tweets
Profile picture
Today, @NITIAayog released a Discussion Paper titled ‘National Strategy for Artificial Intelligence”. #AIforAll
niti.gov.in/writereaddata/…
We provide our initial thoughts on the paper here. 1/n
We welcome this initiative by @NITIAayog, but a call for comments would have been a welcome addition. The paper takes important steps forward from the #AI Task Force report released earlier this year by the DIPP, Ministry of Commerce and Industry (dipp.nic.in/sites/default/…). 2/n
This paper attempts a more holistic look at a broader range of issues concerning AI including #regulation, #ethics, #fairness, #transparency and #accountability. However, a number of issues still remain with this paper. 3/n
Read 41 tweets
Profile picture
So you might have heard that Facebook has suspended #CambridgeAnalytica and Strategic Communication Laboratories (SCL) for fraudulent use of #data extending back to 2015. newsroom.fb.com/news/2018/03/s… Here's how to check your privacy and ad settings on @facebook. A thread.
Anyone that uses Facebook has probably given permission to an app at some stage. Maybe you use FB to sign into other sites, or you wanted to see some future predictions for fun. That's grand, but they retain access to your data even after you stop using them. Here's how to review
First go to your drop down menu & click Settings. Then click Apps. Review these carefully. For e.g. I use Kickstarter and 9gag frequently so those are grand, but see the ones like Klout and Giveaway widget? I'll want to remove permissions for those, even if only I can see posts.
Read 19 tweets
Profile picture
Tweetstorm coming up on the 9 distinguishing points of our thinking on #DataProtection ☔️ @dvararesearch @benichugh @julupani @binduananth 1/n
1. Scope —the law should apply to protect the personal data of all people in India, foreign entities conducting business in India + those outside India processing personal data from india. 2/n
2. Protect all personally identifiable data—do away with the distinction b/w “sensitive personal data” and “personal data”. Protect all personally identifiable data.This means the law will not apply to de-identified data; incentivising de-identification (as techniques evolve) 3/n
Read 13 tweets

Trending hashtags

#teaching #British #domesticviolence #TeamLegal #Gothenburg #accountability #dontwanttoforgetaboutthemuffins #MeraPMmeraAbhimaan #Sweden #PAMFAM #BAGIS #GDPRcompliance #AIforAll #WhyIDidntReport #CongressBookOfLies #CongressIsCancer #hormones #SystemicFailure #privacy #Survivor #Identity #Research #FundamentalRights #blackbox #LGBT

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just three indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member and get exclusive features!

Premium member ($3.00/month or $30.00/year)

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!