@PensionOffice was leaking y'all's data and threatened my friends jobs if I spoke up @STELCOMALDIVES had it's entire server src leaked with private keys @CustomsMv is leaking everyones private info on their job portal
Steal from the common man and you will just be a number on a unsolved crime stat Expose gov failure and you lose your job and you're a criminal
I had a middle man meet up with the CTO of @PensionOffice to disclose the bug properly but bros ego got hurt that some random kid was able to crack their system They demanded I give up the leak right away and accused the middle man of hacking into their database
This is the level of tech literacy they have at CTO positions at the fuckin pension office which is responsible for everyones retirement money We extended them an Olive Branch and they picked it up and tried to beat us up with it
After giving up the leak under threats I decided to publish a video as usual I made a tweet announcing that videos release and someone from pension contacted me saying if I released it the middle man would catch heat (basically an implied threat)
saying that the CTO won't see it as a bug disclosure and they didn't want public to question the security of the systems WHICH THEY SHOULD THE PUBLIC SHOULD ALWAYS QUESTION THE SECURITY OF THE PENSION OFFICE Fuck that nepo hire CTO who doesn't understand security
Then he offered that I return with a registered company to do a paid audit on their system So we did and then we got ghosted by them I have sat on this shit for a long time not knowing the proper way to address it because other peoples jobs are involved.
They were leaking where you worked Salary Dob NID Name When you started working Basically your full work history and your financial data If I had any malicious intend I could have sold this data at a premium on the black market to scammers and political parties but I didn't
I tried to do things the ethical way and they tried to fuck us at every turn Lies on top of lies This is not just an issue with one party it's an issue at the government level. They saw the people being made aware as a threat. Transparency is not a priority
How can we trust an institution that lies and blackmail to cover up their mistakes After this I stopped disclosing bugs Imagine how many more are there unpatched because devs are treated like criminals when they disclose
It's a net negative to the people of the Maldives These leaks are literally what fuels the scammer economy of Maldives and the gov will do everything in their power to hide it and wash their hands clean off it
How many people have lost their life savings to scams because of this? How many more people will suffer due to shitty data leaks in this nation. All those forged election forms with peoples identities stolen to register them to parties without their consent
The Maldives government is a joke. Data leaks is a feature for Maldivian politics not a bug. For them transparency is a bug maldives 2.0 is a joke your personal data will never be safe. It will be used and abused like a cheap flashlight by the scammers and the parties
@MDPSecretariat had a party sign up website(fiquruge dhirun) that leaked everyone's data Jumhooree party stole my fuckin identity and had me registered to their shitty party without my consent
Gasims greed is at a level where 4 wives and multiple businesses isn't enough he needs to forge fake sign up sheets to get people to join his pathetic excuse of a party. What's the point of fingerprint on those forms if it's never verified
Avas food to this day is leaking customer location and order details and phone numbers They refuse to patch that bug This is the level of tech failure in this nation
And tech jobs still want you with fucking 5-10 year experience. I have seen and experienced the shit experienced devs write. It's pathetic.
Also @igmhmv has broken cctv cams Staff says theft is frequent at the wards What's the gov doing with the gst money? Patients are given a cocktail of meds and expected to be responsible for the safety of their devices???
@igmhmv has to answer How many of their cctv is in working order Why are they left broken If theft is so common how can they explain why the one cctv that shows people entering the wards is broken?? This government is full of broken CCTV
Also eefas auth is built on outdated and deprecated tech. That whole system is a ticking time bomb to explode everyone data
If any of you think these data leaks is a nothing burger I have a story for you I sat with a girl who had her accounts hacked with a social engineering attack and her bank accounts drained They didn't stop there they went after all her accounts
I was able to secure all her stuff just in time right before they hit her Snapchat. I was on call with the @bankofmaldives in her behalf trying to secure her account You think those telegram channels selling nudes are getting them just from people submitting nudes?
That entire industry is a part of the scam and data collection network that hacks into women's Snapchat and Icloud accounts to extract their personal images Even one leak can be used to social engineer people to get access to their accounts
Not enough is done to educate the youth on cyber security. We can't enter a Maldives 2.0 without proper OPSEC education and shutting down the scam Networks
How many more people had their money and their dignity stolen from them. She was saved because she contacted me in time. How many more are exposed because they didn't have the connections she did. This was just one persons story.
For fuck sake last election @MDPSecretariat literally got caught with their pants down with that vote viuga shit. They can't claim it's fake I personally verified it to be real and it was also leaking people's NID pictures. The whole thing got pushed under the rug
