After a thorough investigation,we created a report to share with the government of India.
This process takes careful attention and time to ensure everybody who reads the report understands its seriousness.
So, we need to be thorough andmake sure everything we find is correct and accurate.
We then later got in touch with Prof. Triveni Sigh from the UP Cybercrime department.
It’s the most populous state in India, accounting for 14.8% of the nations total population.
India has struggled with responding to Coronavirus, and Uttar Pradesh is no exception.
- This made the platforms admin dashboard accessible to anyone with the passwords taken from the git repository.
They then left the git repository completely unsecured and accessible without any login credentials.
For example, entries with traditionally Vietnamese and Anglo-European names were listed.
These included the date of an individuals entry into the country and other sensitive information.
However, the ripples from this vulnerability could be felt far beyond the ministries combating COVID-19 in Uttar Pradesh.
News stories of a government surveillance program tracking its citizens could be considered suspicious enough.
Avoidable delays and loss of life would be real risks.
There could also be a real risk to their personal safety.
They could be particularly vulnerable to harassment or rejection from within their community.
They examine each weakness for any data being leaked.
However, sometimes it can be a government or state agency.
The purpose of this web mapping project is to helpmake the internet safer for all users.
Our ethical security research team has discovered and disclosed some of the most impactful data breaches in recent years.