
Orbán Cabinet Nods to Russian Code Generator for Hungarian Data Protection

Recently, the Hungarian government announced the introduction of the Client Gate+ (Ügyfélkapu+) system and the Digital Citizenship Programme (DCP) mobile app in an effort to enhance digital identification security. These new updates replace the older and less secure Client Gate (Ügyfélkapu) system that was previously in place.
The Client Gate+ system now includes dual-factor authentication, incorporating one-time codes generated through apps or desktop programs alongside traditional login methods. This upgrade aims to strengthen data security for users, especially those without access to smartphones or tablets.
While the Hungarian government recommends several authenticator apps for Android and iOS users, a particular desktop solution, TOTP.APP, has come under scrutiny. This app includes a Russian-developed code in its operations, leading to concerns regarding data security in light of ongoing geopolitical tensions.
Cybersecurity experts have emphasized the need for a thorough investigation into the potential risks posed by the use of a Russian-developed code generator. The lack of data protection notices on the website raises additional concerns about how user information is collected and safeguarded.
In a response to these concerns, the Special Service for National Security confirmed that TOTP.APP has been recommended by the government since the launch of the Client Gate+ system in 2022. However, they did not provide details on whether the app has undergone a comprehensive examination or address potential security risks.
This is not the first instance of controversy surrounding Russian-developed software in Hungary. In the past, the national consultation website was found to use code from a Russian technology company known for sharing data with the Russian secret service. Measures were taken to address these concerns, but the incident highlights the ongoing challenges associated with foreign-developed software.
As users navigate the new Client Gate+ system and DCP mobile app, it is essential to remain vigilant about data security and to consider the potential risks associated with the use of certain software solutions. A comprehensive understanding of the technology and its implications is crucial in maintaining the security and privacy of user information.