Story Of a Country Which Has Built a Centralized Biometrics Database Of 1.1B People But Appears To Be Mishandling It Now (mashable.com) 60
In a bid to get more Indians to have a birth certificate or any sort of ID card, India announced Aadhaar project in 2009. At the time, there were more Indians without these ID cards than those with. As a result of this, much of the government funding for the citizens were disappearing before they could see them. But according to several security experts, lawyers, politicians and journalists, the government is using poor security practices, and this is exposing the biometrics data -- photo, name, address, fingerprint, iris info -- of people at risk. More than 1.1 billion people -- and 99 percent of all adults -- in India have enrolled themselves to the system. From a report: "There are two fundamental flaws in Aadhaar: it is poorly designed, and it is being poorly verified," Member of Parliament and privacy advocate, Rajeev Chandrasekhar told Mashable India. Another issue with Aadhaar is, Chandrasekhar explains, there is no firm legislation to safeguard the privacy and rights of the billion people who have enrolled into the system. There's little a person whose Aadhaar data has been compromised could do. [...] "Aadhaar is remote, covert, and non-consensual," he told Mashable India, adding the existence of a central database of any kind, but especially in the context of the Aadhaar, and at the scale it is working is appalling. Abraham said fingerprint and iris data of a person can be stolen with little effort -- a "gummy bear" which sells for a few cents, can store one's fingerprint, while a high-resolution camera can capture one's iris data. The report goes on to say that the Indian government is also not telling how the data is being shared with private companies. Experts cited in the story have expressed concerns that those companies (some of which are run by people who were previously members of the team which designed the framework of Aadhaar) can store and create a parallel database of their own. On top of that, the government is making Aadhaar mandatory for availing several things including registration for nation-wide examinations, but in the beginning it promised Aadhaar will be used only to help poor get grocery at subsidized prices.
Re: (Score:1, Offtopic)
Re:Oh noez! (Score:5, Interesting)
Re: (Score:2, Funny)
Re: (Score:2)
Could be worse they could be running a private Email Server
Or taking selfies with the football man.
Re: (Score:2)
and both are really quite bad, given the context. the latter though, wtf...!?
The later strongly suggest the whole "they are both equally bad" is nothing but a fallacy. They are both bad, but not equally (Trump is a complete fucking liability to our national security), no matter how people want to cut the mustard.
Did they consider ... (Score:5, Funny)
Offshore outsourcing the project?
Re: (Score:2, Offtopic)
They must have. The tons of genius, high-skilled computer programmers over there (that we desperately need over here via H1-B visas) would have never allowed this kind of security flaw to creep in.
Re: Appears to be (Score:1)
The whole purpose of tracking citizens is to make sure there's only one way to live in "the system". This is the wet dream of any dictatorship, to be able to revoke your life privilege by casting you into effective exile, making it impossible to have a phone, bank account, home. If you can make it impossible to buy bread then all the better.
It wouldn't be cruel or inhuman to do this because people would insist you could just find other ways to live. In reality there wouldn't be any such way and you're set u
They fucked up their own shit? (Score:1)
At least we know they're not malicious, just incompetent.
Re:They fucked up their own shit? (Score:5, Interesting)
Beautiful country and nice people, but I think they spend so much of their time being conquered and ruled by other groups that the local populace never developed an ability for efficient governing.
Re:They fucked up their own shit? (Score:5, Insightful)
You can say that again - in 2013, roughly a third of all Indian MPs (158 of 543) were under investigation for serious criminal charges, a third of all lawmakers (1,448 of 4,835) were also under investigation on serious criminal charges. Nearly half of those MPs were under investigation were being investigated for crimes such as murder and abduction.
Its one of the most corrupt governmental systems that also calls itself a democracy...
Lets not forget that a caste system is still extremely prevalent in India, so some people have utterly no hope of being elected or being represented in government.
Re: (Score:3, Informative)
Re: (Score:2)
Re: (Score:1)
It's malicious incompetence [cia.gov]. Everybody has the old meme backwards.
So wait... (Score:1)
Not a single incidence of data being stolen, just the FUD lawyers trying to make a buck off paranoia?!
Re: (Score:3, Insightful)
High-tech, Indian style (Score:2, Troll)
Identity verification is a mess in India (Score:5, Informative)
Before aadhaar (meaning proof in Hindi, cognates with similar word in most of indian languages) it was an incredible mess. For most people "the ration card" issued to families to avail services of subsidized food served as a form of identity. Originally it had no photos, and it was one per family, not individual. But the state governments made some basic efforts to curtail fraudulent cards, so it served as an identity card. Voter registration lists were inflated. Migrant people did not have one. Credit worthiness could not be verified. So unsecured loans are never available from organized sector. All unsecured loans were made by local loan sharks who knew people personally. Almost all the commerce was done by cash. Allowed untaxed black money to mix freely with white money. So much so that the government had demonetized 500 Rs, and 1000 rs currency notes. Unless you can prove you had that note legally, you can't exchange it for the new legal tender. It did it back in 1976 too. The country was formed only in 1947.
The mess is far larger than any one can imagine or fix in short term. Finding fault with any new system is easy. Unless you offer viable solutions and work to address your concerns, one would think, it is just a troll or astro turf or feigned outrage.
Funny story: I was a lucky person with a propane gas cylinder account with a government owned gas supplier when I graduated from college. Propane gas stoves are the way most cooking is done in India for about half the population. It was a hot thing to have a gas cylinder account! All due to the foresight of my mom who "registered" my name using the ration card when I was in sixth or seventh grade. When I left for America, that account became very valuable. I gave the cylinder I had to my friend. So every time the cylinder would run out, he would use my name and get a replacement. Not sure if I gave my ration card to him too. When I ran into him some 15 years later he said, "I never forgot you. How could I ? Every 20 days, I had to call the Indane Gas company, and identify myself as 140mandak262jamuna!"
Re: (Score:2, Interesting)
Problem is that India has multiple ID cards, and Adhaar card just adds to it. You forgot to mention the PAN card, which is a photo-ID card w/ a chip, and which could easily have co-opted everything the Adhaar card is supposed to do, and more. A PAN card ought to work as a voter ID card, but that's again different. Also, the first Adhaar 'card' was just a slip of paper with the person's name: nothing that couldn't be scrawled by anybody. That's what's made up this whole mess.
If the Indian government
Re: (Score:2)
If the thing is leaking biometric information and who knows what else all over the place you can't fix that in release 2. Once it's out, it's out.
Make SS cards real ID cards (Score:5, Interesting)
This!!! In the US, one needs a Social Security number to do anything - open accounts to do any tracking, but it's a stupid piece of paper that legally is not supposed to be laminated. In the meantime, you have controversies over cities issuing driving licenses to illegals, and thereby making the appearance of legalizing them. As well as the proposal by the TSA to require everybody to carry their passports w/ them in some jurisdictions.
Better idea: why not make SS cards like DL cards, which would include photos, personal details (eye color, hair color, et al, like in DLs, but not addresses), and then a chip that includes details like a person's legal status (citizen/GC/visa type, state in which one can vote, et al) and make that the ID that they are required to show anywhere? That way, DL would no longer be proof of anything aside from the authorization to drive, and the SS card can be used for things like Voter ID, travelling on planes, e-Verify, et al. Then cities that issue DLs to illegals would no longer be changing anything about their legal status to be here, only whether they can legally drive or not. Which shouldn't be an issue - one could legally go from Juarez to El Paso, get a TX DL and then drive anywhere in TX on a tourist visa, but not be mistaken for a legal resident of the US.
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
What exactly is your idea of a 'National ID card'? My idea 2 posts above was to make the SSN card more secure - include a chip w/ a smart card interface, and in it, embed all the information about you that's necessary for any background check. Name, photo, fingerprint/retina scan, legal status (citizen/GC/type of visa held), marital status, married name (if applicable), state in which you are registered to vote, just about everything. All that is embedded in the card chip. You're ever asked for ID, that
Re: (Score:2)
What does the Metric system have to do w/ this? In fact, I can make a good case for building a new system based on powers of 2, which would enable microprocessor based instrumentation w/ little software programming involved, since it would mainly involve registers, counters, muxes, et al rather than complete computer systems
Re: (Score:2)
For 3 years, the US government has been trying to make (state-issued) DL cards like passports; only a few states [dhs.gov] have complied.
Uh, that's what I was arguing against. Leave DL cards only for driving, rather than as a photo ID, so that DMVs in sanctuary states like CA are free to issue them to illegals, w/o making them recognized ID for anything else. Instead, overhaul what the SS card is and let that be the universal ID that people use whenever they are travelling within the borders.
Passports will be needed, since there are a lot of countries that are not geared to use something like this as a substitute.
According to whom? If a US DMV is issuing such identity to non-citizens, then it obviously isn't a representation of immigration status. To be fair, this is the government's fault. They should give people a kick up the arse for using a DL as a green card, or an SS card as an identity card.
The latter - SS numbe
Re: (Score:2)
One more cretin who can't tell the difference b/w race and nationality. Yeah, I only want citizens, regardless of their race, to vote. I do not want a citizen of UK, France, Saudi Arabia, Iran, China, Russia, India, Israel, Laos or Brunei voting in our elections
Re: (Score:2)