Ashara Attendance Tracking
http://bohrileaks.is/
One of the more personal types of data stored in the ITS database is the attendance data for religious events, how "religiously pure" is that Bohra, in a manner of speaking. Last year during the Ashara sermons, great efforts were made to fully document who attended, and more importantly who did not attend, so that remedial actions could be taken against such individuals.
This year is no different. Edicts have been sent to all Bohra centres worldwide taking this attendance categorisation one step further, exhorting that Bohras must be categorised daily into three groups
those who attended sermons "before time"
those who attended sermons "late"
those who did not attend at all
and that these lists must be submitted by every Bohra centre worldwide into the ITS system immediately after the sermons are completed so that follow up action can be taken and reports can be made.
A new feature has been introduced into the ITS App for smartphones, so that users can "self scan" themselves in, provided that they are near the correct location. Clearly, the ITS App is aware of the user location is reporting each user's location data to the ITS system.
But, how safe is this private data? After our last data release the Dawat administration brushed us off saying that our data was years old and that the database was now secured to high standards. They said they take data security seriously. But is that actually true?
Unfortunately, it is not. To demonstrate this, BohriLeaks hereby presents a sample of last year's Ashara attendance data. To show that the insecurity is not just on a local level, the data is taken from the central database and covers multiple cities throughout the globe.
2nd Moharram 1437 - Leicester, UK
3rd Moharram 1437 - Ezzi Mohalla, Surat, India
4th Moharram 1437 - Bhiwandi, India
5th Moharram 1437 - Saifee Mohalla, Karachi, Pakistan
6th Moharram 1437 - Khar, India
7th Moharram 1437 - Taiyebi Mohalla, Mumbai, India
8th Moharram 1437 - Dubai, UAE
9th Moharram 1437 - Dar es Salaam, Tanzania
10th Moharram 1437 - Kalyan, India
Each file contains the ITS number and name of the person who did not attend, as well as shows the name of the persons (Musaid/Masool) who are responsible for taking remedial action to ensure that the person attends in the future.
One therefore has to ask themselves, is the Kothar Mubarak serious about keeping the personal data of Bohras private? And should Bohras continue to enter their most personal data into this system when their attendance records and other data are liable to become public due to complete neglect on data security? Should Bohras be willing to allow the ITS App on their phones to track their location using GPS and report their whereabouts to the Kothar Mubarak? Can the Kothar be relied upon to keep anything private?
http://bohrileaks.is/
for malicious purpose.