nic-delhi / AarogyaSetu_Android

Aarogya Setu Android app native code
https://www.aarogyasetu.gov.in/
Other
2.88k stars 1.85k forks source link

App allows multi-device login #514

Open ritwikbadola opened 3 years ago

ritwikbadola commented 3 years ago

A user can login into multiple devices with a single mobile number, allowing them to maintain the same profile on multiple devices with their individual covid exposure details rendering the aim of the app useless.

Multiple apps running with the same account can promote malicious behavior, where User:X can have N different covid exposure readings, hence making the argument of "compulsory installation Aarogya Setu to access public amenities " debatable.

Proposed solution: The app should only allow one login per number, to keep user profiles unique.

divu050704 commented 3 years ago

do you tried this out??

ritwikbadola commented 3 years ago

do you tried this out??

yes, you can try it out yourself.