Javed Khatri, a 22-year-old engineering student, and app developer has reportedly hacked into PM Narendra Modi’s App, exposing the security flaws, and the personal data vulnerability it poses.
The personal app, which was launched in June 2015, records over 1 million downloads on Google Play Store, and stores users’ phone number, date of birth, email address, among other personal details.
Khatri says he had no malicious intent behind breaking into the app, and only wanted to expose the security loopholes in the app to the team that manages it. He says he tried to contact the people responsible for the app, but has not received any reply so far. He even tweeted out the flaws to the Prime Minister himself.
@narendramodi_in I have found a security issue in Narendra Modi's app. Would like to report the issue.
— Javed Khatri (@IamJavedKhatri) December 1, 2016
According to media reports, which has since been surprisingly taken down, Khatri was able to extract personal details of users without their permission, in around 15-20 minutes.
Since his last tweet, there has been no update on Khatri’s Twitter account, and interestingly his personal website, javedkhatri.com is also down.