Congress Raises Concerns Over Election Commission’s Voter Portal Amid Security Vulnerabilities

The Indian National Congress has raised serious concerns regarding the Election Commission’s (EC) newly launched online portal designed for voter registration and associated services. According to party officials, the platform appears to be tailored to centralize voter deletions and additions directly from the Bharatiya Janata Party (BJP) headquarters. This allegation highlights the ongoing tensions between the two major political parties as the country gears up for upcoming elections.

The controversy intensified following a report by Hindustan Times, which revealed that a security researcher, Nisarga Adhikary, had alerted both the Election Commission and the Indian cyber-security agency, CERT-In, about potential vulnerabilities in the voter-services website and the ECINET application back in July. In his communication, Adhikary warned that these security flaws could expose sensitive information, including the contact details of election officials, and allow unauthorized access to or manipulation of application data.

On July 8, Adhikary sent an email to CERT-In, also including the EC’s complaints address. Nearly three months later, when Hindustan Times inquired about the matter, both agencies failed to provide immediate responses. However, CERT-In eventually contacted Adhikary the following day, acknowledging that one of the vulnerabilities had been addressed, while work on resolving the remaining issues was still ongoing. The timeline of when these fixes were actually implemented remains uncertain.

Among the critical vulnerabilities identified was a server defect that could potentially disclose the names and mobile numbers of election officials without necessitating a login or CAPTCHA verification. This data could be harvested across various administrative levels, including states, districts, and constituencies, raising alarms about the integrity and security of the election process.

These latest allegations come at a time when the Election Commission is facing scrutiny over its management of voter registration and the special intensive revision of rolls. The Congress party’s claims add fuel to the fire, prompting calls for a thorough investigation into the functionalities and security measures of the EC’s digital platforms. As the political landscape rapidly evolves in India, the implications of such vulnerabilities could have far-reaching consequences for electoral integrity and public trust in democratic institutions.

Source: scroll.in