Indian state government fixes website bugs that exposed residents’ sensitive documents
Reading Time: < 1 minutesAn Indian state government has fixed security issues impacting its website that exposed the sensitive documents and personal information of millions of residents.
The bugs existed on the Rajasthan government website related to Jan Aadhaar, a state program to provide a single identifier to families and individuals in the state to access welfare schemes. The bugs exposed the copies of Aadhaar cards, birth and marriage certificates, electricity bills and income statements related to registrants, as well as personal information such as their date of birth, gender and father’s name.
The bugs were fixed last week through an intervention by the Indian Computer Emergency Response Team, or CERT-In.
One of the bugs allowed anyone to access personal documents and information with knowledge of a registrant’s phone number.
The other bug allowed the return of sensitive data because the server was not properly checking the validity of one-time passwords, the researcher explained.
The state’s Jan Aadhaar portal, which launched in 2019, says it has more than 78 million individual registrants and 20 million families. The portal aims to offer ‘One Number, One Card, One Identity’ to residents in the northern state of Rajasthan for accessing state government welfare schemes. This contrasts with the regular Aadhaar card, available for enrollment to eligible individuals across India and provided by the central government-backed Unique Identification Authority, or UIDAI.
Reference: https://techcrunch.com/2024/01/28/india-rajasthan-government-jan-aadhaar-bug-fix/
Ref: techcrunch
MediaDownloader.net -> Free Online Video Downloader, Download Any Video From YouTube, VK, Vimeo, Twitter, Twitch, Tumblr, Tiktok, Telegram, TED, Streamable, Soundcloud, Snapchat, Share, Rumble, Reddit, PuhuTV, Pinterest, Periscope, Ok.ru, MxTakatak, Mixcloud, Mashable, LinkedIn, Likee, Kwai, Izlesene, Instagram, Imgur, IMDB, Ifunny, Gaana, Flickr, Febspot, Facebook, ESPN, Douyin, Dailymotion, Buzzfeed, BluTV, Blogger, Bitchute, Bilibili, Bandcamp, Akıllı, 9GAG