Hyderabad: After the French security researcher exposed the data breach by the Narendra Modi app, the ethical hacker exposed personal data misuse by the Congress party. He alleged that the WithINC app was sending user details to Singapore.
After 11 hours of digging into the INC app, he revealed, ‘When you apply for membership in the official@INCIndia#android# app, your personal data are sent encoded through an HTTP request to membership.inc.in.’
And the news on deletion of the app broke when he again tweeted, ‘Did @INCIndia remove their #android#app from the play store just before my tweet.’ The Congress party denied the charges, but said “it has been decided to remove the application from the Play Store since people were being misled” by a French vigilante alleging that the app insecurely transmitted user data.
A tweet from its official Congress handle said, ‘The WithINC app is a membership app & has not been in use for over 5 months since we moved membership to inc.in from 16th Nov 2017. The URL (membership.inc.in) quoted by the media is the defunct URL from the app. The actual membership URL can be seen below’. The handle attached the official INC page.
