NITI Aayog has opened the code of the Aarogya Setu app week after privacy concerns by various experts. The new move comes 41 days after its launch in April after the contact tracing app crossed the mark of 10 crore registered users. NITI Aayog has released the source code of the Android version of Aarogya Setu, which is said to be used by 98 percent of its total users. However, the state-owned policy think tank also has plans to open the code for its iOS and KaiOS versions at a later stage.
The source code of the Android version of Aitgya Setu has been made live on GitHub. The National Informatics Center (NIC) announced a bug bounty program to encourage researchers looking for flaws in the app. In addition, the NITI Aayog team specified that the source code of the iOS version of the Arogya Setu app will be released within the next two weeks.
— Aarogya Setu (@SetuAarogya) May 26, 2020
NITI CEO Amitabh Kant, while addressing a press conference related to the opening of the Arogya Setu app’s sourcing on Tuesday, said, “I just want to mention that this is a very unique thing.” “No other government product anywhere in the world has been exposed to this scale anywhere in the world.”
“The reforms that have taken place today are a welcome development,” said Mishi Chaudhary of the legal services organization SFLC.in. Arogya Setu should always be open source, right from Get Go and everything developed by the Government of India should always be open source. As are tax payers’ money. We will confirm that all code is open source and global best practices are followed. ”
Reward for finding bugs and weaknesses
In addition to open source code, the government has launched a bug bounty program, which will be hosted by the MyGov team. The program will enable security researchers to avail 1 lakh reward for finding security vulnerabilities within the app. In addition, there will be an additional code correction reward of Rs. 1 Lac.