Analyzing Sanchar Saathi: India's New App for Device Verification | AI News Digest
Analysts are raising alarms over the Sanchar Saathi app, created by the Centre for Development of Telematics under India's Department of Telecommunications, which has been designated for device verification and fraud reporting. A recent examination of the app's decompiled source code has uncovered extensive data collection practices, including access to SMS messages and call logs, prompting serious privacy concerns. Although the app utilizes AES-256 encryption for local data storage and conducts checks for rooted devices, it remains susceptible to man-in-the-middle attacks due to the lack of certificate pinning. The mandatory use of this app by companies has ignited discussions about potential surveillance and the ramifications of its data gathering capabilities. Users are advised to remain vigilant regarding the permissions they grant and the breadth of data that could be accessed.
Read more...
