RT @NakulShenoy: @malviyamit -> Something that needs your team’s attention. A security flaw with the NaMo app that requires urgent plugging… Posted on December 2, 2016 by @thej
RT @pranesh: I hope someone files a complaint against @NamoApp under s.43A of the IT Act. They released shoddy app + still haven’t stopped… Posted on December 2, 2016 by @thej
RT @pranesh: Two thoughts on 43A: while 43A doesn’t apply to govt, it applies to pol parties; (2) suit will hv to be filed by someone who u… Posted on December 2, 2016 by @thej
RT @pranesh: 1/ SMSes aren’t reqd to be encrypted, they don’t have integrity protection & they are recorded by your mobile provider, not ju… Posted on December 2, 2016 by @thej
@pranesh Got it. They were in a hurry to publish first. Now they have removed it without giving reason. Both! @anivar @YourStoryCo Posted on December 2, 2016 by @thej
@nileshtrivedi True. But anyone with a little bit of knowledge can replicate it. @pranesh @r0h1n Posted on December 2, 2016 by @thej
RT @pranesh: Journalists covering open security vulnerabilities should look up “responsible disclosure”: en.m.wikipedia.org/wiki/Responsib… cc: @YourS… Posted on December 2, 2016 by @thej
RT @pranesh: Given the seriousness of the bug, the @NamoApp should immediately be withdrawn and all API queries rejected till vulnerability… Posted on December 2, 2016 by @thej
