Get the latest tech news
India’s Election Commission fixes privacy flaws that exposed citizens’ information-seeking data
India's federal election commission has fixed flaws on its Right to Information portal that exposed data related to citizens' requests.
The bugs allowed access to the RTI requests, download transaction receipts, and responses shared by the officials without properly authenticating user logins. Security researcher Karan Saini found the bugs in February and asked TechCrunch to help disclose them to the authorities after the Election Commission, the Indian Computer Emergency Response Team (CERT-In), and the National Critical Information Infrastructure Protection Center did not initially respond to his requests to fix them. Recently, CERT-In has been informed by the concerned authority that the reported vulnerability has been fixed,” the Indian cybersecurity agency said in an email to TechCrunch on Tuesday.
Or read this on TechCrunch
