Profile picture
Elliot Alderson @fs0c131y
, 4 tweets, 3 min read Read on Twitter
When you apply for membership in the official @INCIndia #android #app, your personal data are send encoded through a HTTP request to membership.inc.in.
Come on! HTTP?! I'm sure you are able to rectify this and use HTTPS instead.
Moreover, the personal data are encoding with base 64. This is not encryption! Decode this data is very easy as shown in the example.
The IP address of membership.inc.in is 52.77.237.47. This server is located in Singapore. As you are an #Indian political party, having your server in #India is probably a good idea.
Missing some Tweet in this thread?
You can try to force a refresh.

Like this thread? Get email updates or save it to PDF!

Subscribe to Elliot Alderson
Profile picture

Get real-time email alerts when new unrolls are available from this author!

This content may be removed anytime!

Twitter may remove this content at anytime, convert it as a PDF, save and print for later use!

Try unrolling a thread yourself!

how to unroll video

1) Follow Thread Reader App on Twitter so you can easily mention us!

2) Go to a Twitter thread (series of Tweets by the same owner) and mention us with a keyword "unroll" @threadreaderapp unroll

You can practice here first or read more on our help page!

Related hashtags

#android #app #Indian #India

More from @fs0c131y see all

Profile picture
In 1981, the Primrose fails on a beach of the North Sentinel Island, pushed by a typhoon. You can still see the wreckage on Google Map, in a creek, in the northwest. The crew was saved only by a helicopter operated by the Indian Navy.
Exact coordinates on Google Maps. Open the link, this Island is wonderful! google.com/maps/place/Nor…
Awesome article in French about the North Sentinel Island from @lemondefr lemonde.fr/international/…
Read 3 tweets
Profile picture
I have a @Frida question: How to deal with a HashMap? I'm intercepting a Java method, "this" has a Hashmap in his attributes. I want to print the content of this HashMap cc @oleavr @enovella_
cc @NowSecureMobile 👋
cc @fridadotre
Read 3 tweets
Profile picture
.@Paytm, the most used banking app in #India, just sent a dummy notification to his users in the middle of the night. Imagine the reaction of the guy (hacker?) when he realised that he just sent a notification to millions of people
Paytm published a tweet regarding this notification
Read 3 tweets

Related threads

Profile picture
The financial industry knows who its customers are. It does the due diligence. Facebook is only pretending to practice Know Your Customer and it probably creates a false sense of transparency and trust. propublica.org/article/how-bi…
Ultimately this is the problem with corporate secrecy in America…looking at you Delaware. It’s also the problem of not having data protection laws and regulators that would require official registration to use protected personal data.
If FB could trace a registered entity to its data protection registration it could automate advertiser verification at scale. Supply your company number and registered data controller number and you’re good to go. FB should be lobbying for data controller/processor registration.
Read 7 tweets
Profile picture
Hello, everyone!

We're going to kickstart our weekly #GlobalEChats discussion thread. This week, we'll talk about #fitness #personal #trainer as #entrepreneurs and how #tech can change everything!

Ready? Let's go!
Let's first start with two possibilities in the future.

1. We no longer need humans as #PT personal trainers at the #gym or #field. All will be replaced by #tech and smart applications! 😲

2. Human PTs will still be demanded but will utilise #tech to improve their coaching!
Do you think #1 is truly possible? It seems a bit far-fetched, no?

Meet @ollinfit! Ollinfit is a set of three wearable sensors and smartphone app that work together as your personal trainer. Say what???

Using Ollinfit, you'll be able to workout without needing human coaching!
Read 15 tweets
Profile picture
Currently the Bureau of Cannabis Control is in the final days of the public comment period on their proposed commercial regulations for legal cannabis in California. These proposed regulations have some nasty privacy problems that everyone should know about.
Bcc.ca.gov/law_regs/canna…
“Section 5425. Record of Sales”
In your personal file at the marijuana retail store, they will have the date and time of the transaction, the list of all the cannabis goods including the quantity and the total amount paid.

Does anyone fail to see the problem here?
Read 32 tweets
Profile picture
UCC had opportunity to comment on the #Data.Protection & Privacy Bill. The enactment of this law is long overdue. A comprehensive law on the collection & processing personal information gives effect to the right to Privacy envisaged under Article 27(2) of the Constitution
UCC welcome the protections offered by the Bill in terms of export of data, breach notification requirements, data subjects access rights, automated decision making, compensation and the right to be forgotten and provision for financial and penal sanctions for breach of the law.
Distinction between Data collectors & data controllers.
The Bill should however clarify & distinguish Data Collectors, from Data Processors & Data Controllers. Clause 2 is inconsistent with international good practice which provides for two broad categories of Data Controllers
Read 17 tweets
Profile picture
Today, @NITIAayog released a Discussion Paper titled ‘National Strategy for Artificial Intelligence”. #AIforAll
niti.gov.in/writereaddata/…
We provide our initial thoughts on the paper here. 1/n
We welcome this initiative by @NITIAayog, but a call for comments would have been a welcome addition. The paper takes important steps forward from the #AI Task Force report released earlier this year by the DIPP, Ministry of Commerce and Industry (dipp.nic.in/sites/default/…). 2/n
This paper attempts a more holistic look at a broader range of issues concerning AI including #regulation, #ethics, #fairness, #transparency and #accountability. However, a number of issues still remain with this paper. 3/n
Read 41 tweets
Profile picture
So you might have heard that Facebook has suspended #CambridgeAnalytica and Strategic Communication Laboratories (SCL) for fraudulent use of #data extending back to 2015. newsroom.fb.com/news/2018/03/s… Here's how to check your privacy and ad settings on @facebook. A thread.
Anyone that uses Facebook has probably given permission to an app at some stage. Maybe you use FB to sign into other sites, or you wanted to see some future predictions for fun. That's grand, but they retain access to your data even after you stop using them. Here's how to review
First go to your drop down menu & click Settings. Then click Apps. Review these carefully. For e.g. I use Kickstarter and 9gag frequently so those are grand, but see the ones like Klout and Giveaway widget? I'll want to remove permissions for those, even if only I can see posts.
Read 19 tweets

Trending hashtags

#DisclosuresTirbunal #DalitVidrohiINC #multicity #takenotes #SaveTheMap #DiscosuresTribunal #personaltrainer #DisclosruesTribunal #government #manufacturing #Zuckerberg #ReformTheAadhaar #AI #SaveTheInternet #ExplainableAI #political #gym #startup #hoekz #maklumsajah #training #FundamentalRights #blackbox #amsyong #accountability

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just three indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member and get exclusive features!

Premium member ($3.00/month or $30.00/year)

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!