Author: Neuralnexus

Rajasthan Government’s Jan Aadhaar Portal Exposed Sensitive Documents and Personal Information

In a recent development, the Indian state government of Rajasthan has fixed security issues impacting its website related to the Jan Aadhaar program. This program aims to provide a single identifier to families and individuals in the state to access welfare schemes. However, the bugs exposed sensitive documents and personal information of millions of residents.

The Bugs: A Threat to Millions

The bugs existed on the Rajasthan government’s website related to Jan Aadhaar, which provides a single identifier to families and individuals in the state to access welfare schemes. The bugs exposed copies of Aadhaar cards, birth and marriage certificates, electricity bills, and income statements related to registrants, as well as personal information such as their date of birth, gender, and father’s name.

How the Bugs Were Found

Security researcher Viktor Markopoulos, working for cybersecurity company CloudDefense.ai, found the bugs in the Jan Aadhaar portal in December. He reached out to TechCrunch for help in disclosing the issue to the authorities. The bugs were fixed last week through an intervention by the Indian Computer Emergency Response Team (CERT-In).

The Two Critical Bugs

One of the bugs allowed anyone to access personal documents and information with knowledge of a registrant’s phone number. This was a significant security vulnerability, as it exposed sensitive information without any authentication or authorization process.

The other bug allowed the return of sensitive data because the server was not properly checking the validity of one-time passwords (OTPs). OTPs are a crucial security measure that helps protect user accounts from unauthorized access. The fact that this bug existed meant that even with OTPs, users’ sensitive information could be compromised.

The Impact: Millions Affected

The state’s Jan Aadhaar portal has more than 78 million individual registrants and 20 million families. This means that millions of residents were at risk due to the security vulnerabilities on the website.

Why It Matters: The Importance of Website Security

Website security is a critical aspect of any online platform, especially when it comes to sensitive information like Aadhaar numbers and fingerprints. The Rajasthan government’s failure to address these issues in a timely manner exposed millions of residents to potential identity theft and other malicious activities.

The Response: CERT-In Steps In

TechCrunch reached out to the Rajasthan government’s Jan Aadhaar Authority on December 22, but did not receive a response. Subsequently, TechCrunch shared the details of the bug with CERT-In, which confirmed that the bugs had been fixed.

CERT-In is the nodal agency responsible for coordinating and responding to computer security incidents in India. Their intervention ensured that the issue was addressed promptly and effectively.

The Fix: A Lesson Learned

While the fix has been implemented, this incident highlights the importance of regular security audits and updates on government websites. It also underscores the need for timely action when security vulnerabilities are identified.

In an era where online security is paramount, it is essential that governments prioritize website security to protect citizens’ sensitive information.

Related Developments

The Rajasthan government’s Jan Aadhaar portal was launched in 2019 with the aim of providing a single identifier to families and individuals in the state for accessing state government welfare schemes. This contrasts with the regular Aadhaar card, which is available for enrollment to eligible individuals across India and provided by the central government-backed Unique Identification Authority (UIDAI).

Conclusion

The recent fix on the Rajasthan government’s website related to Jan Aadhaar is a welcome development. However, this incident serves as a reminder of the importance of website security in protecting sensitive information.

In an era where online threats are increasingly prevalent, it is essential that governments prioritize website security and take timely action when vulnerabilities are identified.

References:

• CERT-In
• UIDAI
• CloudDefense.ai

About the Author:

Jagmeet Singh is a reporter at TechCrunch, covering startups, tech policy-related updates, and other major tech-centric developments from India.

Marketing Data Platform Aims to Help Enterprises Control Their Tech Stack and Manage Marketing Data Standards

Claravine, a self-described marketing data platform, today announced that it has raised $16 million in a Series B funding round led by Five Elms Capital, with participation from Grayhawk Capital, Next Frontier Capital, Peninsula Ventures, Kickstart Fund, and Silverton Partners. This latest investment brings the company’s total fundraising to $27.9 million.

CEO Verl Allen on the Company’s Growth Plans

According to Claravine CEO Verl Allen, the new funding will be used to double the company’s headcount to 88 employees by the end of the year and support product research and development (R&D). Allen emphasizes that the company is committed to helping enterprises control what flows through their tech stack, especially business intelligence and analytics software, and manage their marketing data standards.

Background on Claravine

Claravine was founded in 2012 as Tracking First, a company focused on streamlining the tracking code process for large organizations. However, Allen notes that the company’s founders had a narrow focus at the time and realized there was a bigger underlying problem in the market that their solution could address.

Claravine’s Product: A Dashboard for Building Taxonomies

Claravine’s product is designed to help enterprises manage their marketing data standards by providing a dashboard where companies can build taxonomies using descriptions, lists, values, and referenceable fields. The platform allows users to bring in tracking code datasets, standardize them, and automatically verify that no information is missing.

Key Features of Claravine’s Platform

• Data Standardization: Claravine’s platform enables data standardization by providing a centralized dashboard for building taxonomies.
• Data Governance: The company’s platform ensures data governance by allowing enterprises to manage their marketing data standards and ensure compliance with regulations.
• Data Analytics: Claravine’s platform provides data analytics capabilities, enabling enterprises to gain insights into their marketing performance.

Company Performance

According to Allen, Claravine saw over 40% annual recurring revenue (ARR) growth from 2021 to 2022. The company also achieved a gross revenue retention rate of 95%, indicating strong customer loyalty and satisfaction.

Investors’ Comments on the Investment

"We have been exceptionally impressed by Verl, his team, and their mission," said Stephanie Schneider, partner at Five Elms Capital, in an email statement. "Claravine is positioned to become a dominant player in the space as it continues to scale its platform and offerings."

This investment highlights the growing demand for marketing data platforms that can help enterprises manage their tech stack and marketing data standards.

Related News

• Apple Brings Store App to Indian Market: Apple has launched its online store in India, marking a significant expansion of the company’s presence in the country.
• FAA Had to Divert Flights Because of SpaceX Starship Explosion: The Federal Aviation Administration (FAA) was forced to divert flights due to an explosion during a SpaceX Starship test launch.
• SpaceX Catches Starship Booster a Second Time, Loses Ship to an ‘Anomaly’ in Space: SpaceX successfully caught its Starship booster for the second time but lost the ship due to an anomaly.

Stay up-to-date with the latest news and developments in the tech industry by subscribing to TechCrunch’s newsletters.

Enhancing the Listening Experience

In a move aimed at revolutionizing the way users consume audio content, Netflix has announced that it is bringing spatial audio to all devices. This rollout is expected to significantly enhance the listening experience for subscribers across its vast catalog of original titles.

What is Spatial Audio?

For those who may not be familiar with the concept, spatial audio is designed to provide a theater-like sound from movies and TV shows. It works by creating an immersive audio environment where sounds appear to come from all around you, making for a more engaging and realistic experience.

Current Compatibility

At present, several titles on Netflix’s platform support spatial audio, including:

• The fourth season of ‘Stranger Things’
• ‘The Adam Project’
• ‘Red Notice’
• ‘The Witcher’
• ‘Locke & Key’
• And many more

Finding Spatial Audio Content

To locate titles that are compatible with spatial audio, users can simply type "Spatial Audio" into Netflix’s search bar. The number of available titles will depend on the user’s streaming device.

Availability Across All Devices

The rollout of spatial audio means that users with devices that do not normally support this feature can now enjoy it. Moreover, all subscribers, regardless of their chosen Netflix subscription plan, will be able to use spatial audio without any additional costs or requirements.

How Spatial Audio Works

Netflix has licensed Sennheiser’s AMBEO technology for delivering spatial audio via any 2-channel stereo hardware. This innovative solution provides three-dimensional positional audio without the need for additional surround sound speakers or home theater equipment.

As stated by Sennheiser, "the purpose of AMBEO is to provide an ‘improved audio experience wherever stereo is delivered today, be it standard TV sets, stereo systems, headphones, tablets, or laptops.’"

Requirements for iPhone and iPad Users

For users watching on their iPhone, iPad, or Apple TV, Netflix recommends that streaming quality be set to "High" or "Auto" in order to watch spatial audio-compatible content. This ensures a smooth and seamless experience.

Important Note for Apple Device Owners

It’s worth noting that for those who already own spatial audio-compatible Apple devices, such as the third-generation AirPods, AirPods Pro, AirPods Max, and Beats Fit Pro, nothing will change, as spatial audio support has already been available on these devices.

The Future of Audio Experience

With Netflix’s rollout of spatial audio to all devices, users can expect a more immersive and engaging experience while watching their favorite shows. This development is a significant step forward in the evolution of audio technology and promises to revolutionize the way we consume media content.

Conclusion

In conclusion, Netflix’s decision to bring spatial audio to all devices marks an exciting milestone in the world of audio entertainment. With its vast library of original titles supporting this feature, users can now enjoy a more realistic and immersive experience that simulates the sound of a movie theater.

As technology continues to advance, it will be fascinating to see how spatial audio evolves and becomes an even more integral part of our viewing experiences.

Is X’s $19 Billion Valuation Justified? A Comparison with Snap

News that X (formerly Twitter) is now valued internally at $19 billion has sparked a wave of snickering from critics of Musk and his recently renamed social network. Instead of discussing why X may have shed so much value since it was purchased, including the caveat that it was not worth the $44 billion Musk paid when he bought it, let’s do a bit of comparison this morning.

The Exchange Explores Startups, Markets, and Money

Read The Exchange every morning on TechCrunch+ or get The Exchange newsletter every Saturday to stay up-to-date with the latest news and analysis on startups, markets, and money.

Snap: A Similar Social Network with a Different Story

As of this morning, Snap’s market value is approximately $16 billion, which puts it at a more modest valuation compared to X. But what’s behind these numbers? Let’s take a closer look at Snap’s performance and compare it with X’s.

Revenue and Growth

Snap has reported revenue of $3.24 billion through Q3 2023, which is on track to clock over $4.5 billion this year. In contrast, X expects revenue of around $4 billion for the same period. Moreover, Snap is growing its top line again and has been reporting better audience metrics.

User Base and Engagement

Snap’s user base may be similar to X’s in terms of numbers, but the engagement levels are different. Snapchat+ reached 5 million subscribers in the third quarter, up from more than 4 million reported in Q2 2023. X Premium (formerly known as Twitter Blue) subscribers, on the other hand, are estimated to be in the six figures.

Profitability and Debt

X’s massive debt load of $13 billion is a significant concern, making it cash-flow negative earlier this year. Snap, too, has lots of debt, but its senior convertible notes amount to $3.75 billion, which is lower than X’s total debt.

A Comparison of the Two Companies

From a revenue and growth perspective, Snap looks like the better company. Its user base may be similar in numbers, but the engagement levels are higher. Moreover, Snap has more paid subscribers and a lower debt-to-equity ratio.

Why Does X Think It’s Worth $19 Billion?

It’s hard to understand why X thinks it’s worth $19 billion while the market is valuing Snap at a more modest $16 billion. The answer may lie in X’s unique features, such as its massive user base and the potential for revenue growth through new products.

Conclusion

The comparison between X and Snap highlights the challenges that X faces in terms of revenue, profitability, and debt. While X has a large user base, Snap’s engagement levels are higher, and its revenue growth is more impressive. From this perspective, it’s difficult to justify X’s $19 billion valuation.

Related Topics

• EC Consumer Applications
• EC Market Analysis
• EC News Analysis
• Snap
• Snap Earnings
• Social
• The Exchange
• Twitter
• Twitter Value

Alex Wilhelm, Senior Reporter at TechCrunch

Alex Wilhelm was a senior reporter for TechCrunch covering the markets, venture capital, and startups. He was also the founding host of TechCrunch’s Webby Award-winning podcast Equity.

Most Popular Articles on TechCrunch

• Apple may add an iPhone Air to its lineup
• Researchers open source Sky-T1, a ‘reasoning’ AI model that can be trained for less than $450
• I got soaked driving the Arc Sport electric boat
• Matt Mullenweg deactivates WordPress contributor accounts over alleged fork plans
• Nvidia’s AI empire: A look at its top startup investments

Newsletters from TechCrunch

• TechCrunch Daily News: Get the best of TechCrunch’s coverage every weekday and Sunday.
• TechCrunch AI: Stay up-to-date with the latest news in artificial intelligence.
• TechCrunch Space: Get the latest advances in aerospace delivered to your inbox every Monday.

Subscribe to TechCrunch

Stay ahead of the curve with the latest news and analysis on startups, markets, and money. Subscribe to The Exchange newsletter or get TechCrunch Daily News delivered to your inbox every weekday and Sunday.