search

cowinapi / developer.cowin

This group is created to facilitate technical and integration discussions related to cowin platform. API related contents can be obtained at API setu portal https://apisetu.gov.in/public/marketplace/api/cowin
115 stars 30 forks source link

What is the whitehat process that folks should follow? #368

Open testaccountcowin opened 3 years ago

testaccountcowin commented 3 years ago

What is the whitehat process that folks should follow in order to submit code/working prototype that automates OTP and bypasses captcha?

karsumit94 commented 3 years ago

This is a good question. I am also looking for that. Created an issue: https://github.com/cowinapi/developer.cowin/issues/355

theGeekyLad commented 3 years ago

Isn't it illicit to run a booking system that bridges OTPs and automates captchas? The past has it indeed and makes me wonder if developers should, anymore, open such systems (even if they build, that is) to the general public.

testaccountcowin commented 3 years ago

That's not how software solutions should work. Let;'s take the software industry for example - 1) They run bug bounty programs to understand what are the loopholes within their systems. 2) Whitehat hackers provide a 30 or 60 day window to companies in order to patch their vulnerability before they make such vulnerability public.

Without such mechanisms, there will always be illegal operations taking advantage of such loopholes for money. I for one believes that as long as people who have used such scripts for themselves and their loved ones are not guilty. While people who charge others to book a slot using such mechanisms are.

testaccountcowin commented 3 years ago

The key difference here being - making money using such means is illegal, doing it for free to save someone's life is not.

theGeekyLad commented 3 years ago

Very edifying! Though philanthropic, is it mandatory to open source such software? To rephrase it, does making it available as a freeware (and not open source) hurt the legality aspect?