Fishie

@PensionOffice was leaking y'all's data and threatened my friends jobs if I spoke up 

@STELCOMALDIVES had it's entire server src leaked with private keys 

@CustomsMv is leaking everyones private info on their job portal

Steal from the common man and you will just be a number on a unsolved crime stat

Expose gov failure and you lose your job and you're a criminal

I had a middle man meet up with the CTO of @PensionOffice to disclose the bug properly but bros ego got hurt that some random kid was able to crack their system

They demanded I give up the leak right away and accused the middle man of hacking into their database

This is the level of tech literacy they have at CTO positions at the fuckin pension office which is responsible for everyones retirement money 

We extended them an Olive Branch and they picked it up and tried to beat us up with it

After giving up the leak under threats I decided to publish a video as usual 
I made a tweet announcing that videos release and someone from pension contacted me saying if I released it the middle man would catch heat (basically an implied threat)

saying that the CTO won't see it as a bug disclosure and they didn't want public to question the security of the systems 
WHICH THEY SHOULD 
THE PUBLIC SHOULD ALWAYS QUESTION THE SECURITY OF THE PENSION OFFICE 

Fuck that nepo hire CTO who doesn't understand security

Then he offered that I return with a registered company to do a paid audit on their system 

So we did and then we got ghosted by them

I have sat on this shit for a long time not knowing the proper way to address it because other peoples jobs are involved.

They were leaking 
where you worked
Salary 
Dob
NID
Name
When you started working 
Basically your full work history and your financial data 

If I had any malicious intend I could have sold this data at a premium on the black market to scammers and political parties but I didn't

I tried to do things the ethical way and they tried to fuck us at every turn

Lies on top of lies 

This is not just an issue with one party it's an issue at the government level. They saw the people being made aware as a threat. Transparency is not a priority

How can we trust an institution that lies and blackmail to cover up their mistakes 

After this I stopped disclosing bugs 
Imagine how many more are there unpatched because devs are treated like criminals when they disclose

It's a net negative to the people of the Maldives 

These leaks are literally what fuels the scammer economy of Maldives and the gov will do everything in their power to hide it and wash their hands clean off it

How many people have lost their life savings to scams because of this? How many more people will suffer due to shitty data leaks in this nation. 

All those forged election forms with peoples identities stolen to register them to parties without their consent

The Maldives government is a joke. Data leaks is a feature for Maldivian politics not a bug. 
For them transparency is a bug 

maldives 2.0 is a joke your personal data will never be safe. It will be used and abused like a cheap flashlight by the scammers and the parties

@MDPSecretariat had a party sign up website(fiquruge dhirun) that leaked everyone's data

Jumhooree party stole my fuckin identity and had me registered to their shitty party without my consent

Gasims greed is at a level where 4 wives and multiple businesses isn't enough he needs to forge fake sign up sheets to get people to join his pathetic excuse of a party. What's the point of fingerprint on those forms if it's never verified

Avas food to this day is leaking customer location and order details and phone numbers
They refuse to patch that bug 

This is the level of tech failure in this nation

And tech jobs still want you with fucking 5-10 year experience. I have seen and experienced the shit experienced devs write. 

It's pathetic.

Also @igmhmv has broken cctv cams
Staff says theft is frequent at the wards

What's the gov doing with the gst money? 

Patients are given a cocktail of meds and expected to be responsible for the safety of their devices???

@igmhmv has to answer 
How many of their cctv is in working order 
Why are they left broken
If theft is so common how can they explain why the one cctv that shows people entering the wards is broken??

This government is full of broken CCTV

Also eefas auth is built on outdated and deprecated tech. That whole system is a ticking time bomb to explode everyone data

If any of you think these data leaks is a nothing burger I have a story for you
I sat with a girl who had her accounts hacked with a social engineering attack and her bank accounts drained
They didn't stop there they went after all her accounts

I was able to secure all her stuff just in time right before they hit her Snapchat. I was on call with the @bankofmaldives in her behalf trying to secure her account 

You think those telegram channels selling nudes are getting them just from people submitting nudes?

That entire industry is a part of the scam and data collection network that hacks into women's Snapchat and Icloud accounts to extract their personal images 

Even one leak can be used to social engineer people to get access to their accounts

Not enough is done to educate the youth on cyber security. We can't enter a Maldives 2.0 without proper OPSEC education and shutting down the scam Networks

How many more people had their money and their dignity stolen from them. She was saved because she contacted me in time. How many more are exposed because they didn't have the connections she did. This was just one persons story.

For fuck sake last election @MDPSecretariat literally got caught with their pants down with that vote viuga shit. They can't claim it's fake I personally verified it to be real and it was also leaking people's NID pictures. The whole thing got pushed under the rug