Kannan Gopinathan
@naukarshah • 209,351 subscribers
Congressi | Do your part, and part.
Videos
Dear Election Commission of India, after the Aland mass-deletion attempt came up, I ran a security review of your VHA app and voters portal at voters eci gov in. The Mozilla Observatory score was 15/100 (F). A big whooping F The Content-Security-Policy header is invalid. CSP is effectively disabled. There is no HSTS. Session cookies lack SameSite. Your apps render the portal inside WebViews. That amplifies every server-side flaw and makes attacks practical. As sensitive as a service like voter enrolment and deletion, and this is how you guys half-ass it? Using public money to make a mockery of voter services and not even doing a basic security review before going live? Fix accountability. If it is negligence or incompetence, fire whoever is responsible immediately. They are not competent to run this. If it is deliberate, pursue criminal investigation to the fullest extent. Take the enrolment and deletion services offline until a full independent security audit and remediation are complete. Preserve and export all forensic artifacts now: CDN, load-balancer, DB audit and SMS gateway logs. Compute and publish SHA-256 hashes and issue a 65B certificate for the exports so CID can forensically examine them. Commission an independent penetration test and publish the full report and remediation plan.
Kannan Gopinathan426,786 Aufrufe • vor 10 Monaten
After rejecting most of congress candidate nominations for Silvassa municipality election, news coming in that the Pradesh Congress President has been detained by the police. Is this how elections are going to be conducted now in the UTs? Shame on you Amit Shah Narendra Modi Silvassa Municipal Council DNH Police PRI-RD Dept. UT of DNH & DD (HQ) Pawan Khera 🇮🇳
Kannan Gopinathan16,529 Aufrufe • vor 9 Monaten
Keine weiteren Inhalte verfügbar