Live data from Hacker News

India’s Aadhaar Software Hacked, ID Database Compromised, Experts Confirm

huffingtonpost.in

131–140 of 163 posts

Re: India’s Aadhaar Software Hacked, ID Database Compromised, Experts Confirm

#131
post #111
post #84

Earlier quoted context omitted.

This is one of the main reasons that this report doesn’t touch upon read access of the database. Rachna Khaira, one of the reporters already has a police case against her for her previois reporting on Aadhar database compromise. Getting even one user record would have landed all three journalists behind bars. It is left for the reader to conclude, and validated by various experts, that whole database is hacked. If a…

I mean, you need a client to access it, and presumably having a patch for such means you have the client too...

aadhar card operators get paid 30ruppees an hour. i'm sure you can get access to a client pretty easily

Re: India’s Aadhaar Software Hacked, ID Database Compromised, Experts Confirm

#132
post #86

Earlier quoted context omitted.

Yeah, that means a lot of false data has been added into the system given how widely this patched client has been circulated. I don't know what about this tells you that the database hasn't been compromised?

The first thing that came to my mind when I read the title was that all the biometrics and all were out. Which would have been much worse and which is not the case.

This is equally bad, maybe even more so given there is a good chance that a substantial number of aadhaar accounts are fake. There is, quite simply, no reasonable defense for this state of affairs.

Re: India’s Aadhaar Software Hacked, ID Database Compromised, Experts Confirm

#133
post #129

Earlier quoted context omitted.

>Can the said journalist just release the application in public domain? If not, why not? Pretty simple. Do you want everyone in the world to have access to the database? Now at least it is hidden through obscurity. This is exactly why in this report the said journalist got it verified by three external experts, one of them a professor. >If authority has no way to audit them then how did the whistleblower arrive at th…

> Pretty simple. Do you want everyone in the world to have access to the database? Now at least it is hidden through obscurity. This is exactly why in this report the said journalist got it verified by three external experts, one of them a professor. Don't you think this is pretty convenient an excuse? The report is also not in public domain nor is the exploit. We have to just rely on a journalist, a CTO, a professor…

>I am rational in my thinking and approach.

Your post on this topic, two notches down questioning a Rice University professor: "I know a lot of professors who have plagiarised to obtain PhDs. So I would never accept a professor's word to technical details."

I will safely ignore your frivolous replies. You are anything but rational.

Re: India’s Aadhaar Software Hacked, ID Database Compromised, Experts Confirm

#134
post #133

Earlier quoted context omitted.

> Pretty simple. Do you want everyone in the world to have access to the database? Now at least it is hidden through obscurity. This is exactly why in this report the said journalist got it verified by three external experts, one of them a professor. Don't you think this is pretty convenient an excuse? The report is also not in public domain nor is the exploit. We have to just rely on a journalist, a CTO, a professor…

>I am rational in my thinking and approach. Your post on this topic, two notches down questioning a Rice University professor: "I know a lot of professors who have plagiarised to obtain PhDs. So I would never accept a professor's word to technical details." I will safely ignore your frivolous replies. You are anything but rational.

I'm not talking specifically about this professor. I'm stating that in my experience of seeing various professors plagiarizing their qualifications I inherently don't trust their word. I instead trust technical details. That is rational.

Irrational is when you trust someone's word as the holy grail.

By the way, just so you know why I have this notion. The college I graduated from the Director was exposed for plagiarizing his PhD thesis which resulted in his transfer: http://nanopolitan.blogspot.com/2009/09/plagiarism-charges-a...

I have seen my fair share of such instances that warrants my apprehensions. Any rational person would ask for technical details not just me.

> I will safely ignore your frivolous replies

You can "safely" ignore my "frivolous" replies considering that you rely on conspiracy theories rather than actual facts. Like I said in the post below, I do not claim the system to be perfect but I would rather see someone come out with a technical rebuttal than sensationalise. If that part of what I said is lost on you then I can do nothing about it. There is no stronger an attack on the government than going technical which is what is lacking in all these articles. By sensationalising and spreading fake letters all you are doing is strengthen the government's position.

Re: India’s Aadhaar Software Hacked, ID Database Compromised, Experts Confirm

#135
post #76

One of the reasons why India needs some kind of people authentication is rampant corruption! Corruption at a scale that most of people in Europe or US cant even imagine. Add to it the culture which celebrates corruption and eulogizes people who find loopholes in system. As soon as a policy or rule is implement, someone gets to work to find a loophole and profit. Schemes and subsidies for poor get siphoned by rich and…

May I know why this comment is flagged?

Re: India’s Aadhaar Software Hacked, ID Database Compromised, Experts Confirm

#136
post #133

Earlier quoted context omitted.

>I am rational in my thinking and approach. Your post on this topic, two notches down questioning a Rice University professor: "I know a lot of professors who have plagiarised to obtain PhDs. So I would never accept a professor's word to technical details." I will safely ignore your frivolous replies. You are anything but rational.

I'm not talking specifically about this professor. I'm stating that in my experience of seeing various professors plagiarizing their qualifications I inherently don't trust their word. I instead trust technical details. That is rational. Irrational is when you trust someone's word as the holy grail. By the way, just so you know why I have this notion. The college I graduated from the Director was exposed for plagiari…

Has there been any allegation against Rice University professor? So you are willing to undermine every professor out there due to one encounter of yours, but you are willing to trust the government all too quickly. On top, you dole out 'fake news' moniker generously too. Pretty rational.

Also, the plagiarism example: Guy had already obtained his Ph.D from a UK university, and the said Ph.D. was not obtained on basis of that plagiarised paper. Pretty big allegations you have been levelling on basis of something that you are not even comprehending correctly.

Re: India’s Aadhaar Software Hacked, ID Database Compromised, Experts Confirm

#137
post #136

Earlier quoted context omitted.

I'm not talking specifically about this professor. I'm stating that in my experience of seeing various professors plagiarizing their qualifications I inherently don't trust their word. I instead trust technical details. That is rational. Irrational is when you trust someone's word as the holy grail. By the way, just so you know why I have this notion. The college I graduated from the Director was exposed for plagiari…

Has there been any allegation against Rice University professor? So you are willing to undermine every professor out there due to one encounter of yours, but you are willing to trust the government all too quickly. On top, you dole out 'fake news' moniker generously too. Pretty rational. Also, the plagiarism example: Guy had already obtained his Ph.D from a UK university, and the said Ph.D. was not obtained on basis…

> Has there been any allegation against Rice University professor? So you are willing to undermine every professor out there due to one encounter of yours, but you are willing to trust the government all too quickly

All I am stating is that I trust technical details not the person. It can be the CTO, CEO, Professor or any Tom, Dick or Harry including the Government of India. I don't care about anyone's "words" but the fine print. As far as Professors are concerned, it is my experience and hence also adds to my reasoning. You can't stop me from deducing based on my reasoning can you?

As far as Government goes, I don't say I "trust" the Government. I support the policy decisions of the Government because it aligns with my wishes too. If it wavers or does something contrary to my wishes I'll stop supporting it. It's as simple as that. There is no need to conflate this any further than what it actually is. If tomorrow, the Government is indeed found to be complicit in handling of Aadhaar biometrics you can safely assume that i'll actively stop supporting it.

> On top, you dole out 'fake news' moniker generously too

Okay let's forget the contents of the letter. Can you at least show me one piece of article or something that confirms that the Supreme Court judges are in receipt of this letter? It's not just written to the CJI but also to 10 other Judges of the Supreme Court including one who recently came out stating he is not in favour of the Government: Justice J Chelameswar. At least one of them can confirm receipt of this letter. Right?

As far as official documents are concerned, they always have a seal accompanying them with an official signature. Which document in that letter has this basic requirement? The only document that looks official is a screenshot of email communication between the UIDAI team. That email communication also has nothing incriminating.

> Also, the plagiarism example: Guy had already obtained his Ph.D from a UK university, and the said Ph.D. was not obtained on basis of that plagiarised paper. Pretty big allegations you have been levelling on basis of something that you are not even comprehending correctly.

No his Ph.D thesis was also found to be plagiarised. In fact, that was what resulted in his transfer (and I came to know just now that he was also removed from holding any Governmental positions. That is why he is now appointed as a Vice Chancellor of a private university). I just took a look at the article again and the links that lead to the newspaper article which mentioned that are unfortunately dead. If I find a copy of that i'll surely put up the link to it. It still doesn't take away from my fact that a professor, a Director of a premier institute no less, plagiarised papers. This coupled with many other instances I have experienced force me to not trust their words. A lot of prominent professors in Academia always publish their papers. No one says "take me for my word". If the "words" of professors were all that was necessary you wouldn't need publishing and peer reviews.

Re: India’s Aadhaar Software Hacked, ID Database Compromised, Experts Confirm

#138
post #87
post #76

One of the reasons why India needs some kind of people authentication is rampant corruption! Corruption at a scale that most of people in Europe or US cant even imagine. Add to it the culture which celebrates corruption and eulogizes people who find loopholes in system. As soon as a policy or rule is implement, someone gets to work to find a loophole and profit. Schemes and subsidies for poor get siphoned by rich and…

someone gets to work to find a loophole and profit Please - this is pretty much how it works everywhere, nothing unique to India. Why do you think lawyers, accountants etc in the corporate world get paid so much? Do you remember the U.S president saying avoiding federal taxes makes him smart? the culture which celebrates corruption What are you basing this on? There is no question there is rampant corruption, but say…

> avoiding federal taxes makes him smart?

I avoid taxes. I contribute to my IRA, donate to charities and deduct my home office space. What I don’t do is evade taxes by not declaring income.

Re: India’s Aadhaar Software Hacked, ID Database Compromised, Experts Confirm

#139
post #23
post #20

Earlier quoted context omitted.

Maybe I'm in the wrong here, but I imagine most civilised countries have a database with biometrics of all of its citizens, at least fingerprints.

Biometric collection is always for specific purpose. General purpose, compulsory biometric ids exist only in Malaysia IIRC.

> Biometric collection is always for specific purpose.

But if you add up all the specific purposes, most/all people are included.

Re: India’s Aadhaar Software Hacked, ID Database Compromised, Experts Confirm

#140

I have to admire the courage of the people who have investigated and reported this, given that the entire leadership of UIDAI and its backers in the central government are intolerant of any criticism and have been known to file police complaints[1] against journalists, critics and whistleblowers. Even its visionary and leading cheerleader from the private sector preferred to imagine conspiracies rather than acknowled…

you link anything to `thewire.in`, I would call it propaganda. The other commenter on the thread asked a question about why can't the said journalist back up the claims about a $10 app.

Hate the govt all you want, but the Aadhar as you know is started by previous govt. It is if designed properly a good way to eradicate corruption for welfare schemes, so any ideas on how to do that are more appreciated than playing blame game on HN.

Post reply on HN