Saturday, May 30, 2020
Home Opinions Aadhar and the security concerns

Aadhar and the security concerns

Also Read

Technology Guy With A penchant for the Esoteric

There has been a lot of chatter around Aadhar. The voices have been disparate and haphazard. The most amusing part of all these discussions is that I am yet to see a post that uniquely tries to identify where the loopholes might be. Most of the anti-Aadhar and security concerns look like scaremongering or at best conspiracy theories. But the question still stands, is Aadhar susceptible to misuse?

As any self-respecting hacker would say, everything is insecure. The question is how difficult have you made it to exploit the vulnerability. How accessible are these flaws for exploitation? What is the cost of breaking the law and what is the benefit of going to that quanta of trouble. Lets us try and analyze the conundrum on these principles.

What is the penalty of impersonation and how well does the state look at identity fraud?


Identity fraud in India is still nascent. In a low per capita income country, the benefits of identity fraud are not very high. Hence identity fraud has not become a major headache. But as India’s per capita grows, this will become incentive enough. There is a penalty by law, but in a country this populous one does tend to think, what is the value that law enforcement will give to identity fraud? As the SSN impersonation is taken seriously in the USA. Will India be able to do the same? Is the cyber wings of our law enforcement capable enough? When the NIC does not care enough to enable HTTPS on sites and services accessing Aadhar data, how much can we trust these agencies?

What is the current infrastructure and environment on the data security architecture?

For a country that boasts of significant IT presence, the competence of our government in these areas is still under question. Have a look at all the PDFs and Excels galore on government websites that have not had the decency to depersonalize data like date of birth etc. Incidents like Zomato hack do raise a lot of eyebrows but do not trigger a governmental action against the lackadaisical approach towards data security. Companies are allowed to data mine without repercussions. In an environment where the government is as clueless as ours, what is the confidence that one can have that the policies and safeguards are serious enough.


What are the ways one can exploit the data?

As per security, a system is as strong as its weakest link. UIDAI might have an impressive array of security measures against a hack (Let’s accept that as a supposition, though the hacker in me demurs!). How secure are the places that access this database.

The hack on the NIC showed how secure the governmental infrastructure is that accesses this data. I would also be interested to know other than the HTTP hack, how good the architecture of NIC is vis-a-vis de-personalization, masking and encryption. Jargons do not create security. Its their implementation and constant upkeep against newer hacks is what makes them secure.


Take for example the KYC’s for obtaining a sim card. People have commented that these are secure areas as a standard hardware connects to the UIDAI database through all the correct jargony layers. That is where the problem arises. Every tiny shop that uses a device to access this data is suspect. What we forget is there is something called a ‘Man in The Middle attack’! To explain the jargon, what prevents these SIM distributors to put an adapter (IT jargon) in between the fingerprint recognition device and the app that connects to the UIDAI database. What prevents them from storing the data packets being sent to the UIDAI database? The only thing deterring them now is the low availability of such programmers and the relative use of such data after acquisition. Will that always be the case? Is it the same case if the data being gathered is for people related to sensitive installations of our country?

I am not scaremongering but trying to understand myself too.

Should we go back?

Now that is the million dollar question. In my humble opinion, NO. Every system can be hacked. Every system can be bought down to its knees. The only question is how big a price we put to the person who is ready to do that? How easy its is to game the system?

In my humble view, Aadhar system was a much needed administrative reform for this country. Outside my scope to talk about that. However, irrespective of its flaws, we need to talk about how we need to make it securer. How we can put a premium of data privacy. The current discourse has been on partisan lines. I hate Aadhar. I like Aadhar. We need to understand that it is a necessity. And it has security flaws and serious ones at that. The need of the hour is to accept that and work on mechanisms to ensure that India is not breached.

The borders are not only geographical now. They have reached our computers. It is a need of the hour that our data is given the same sanctity that we give to our borders.

- advertisement -

  Support Us  

OpIndia is not rich like the mainstream media. Even a small contribution by you will help us keep running. Consider making a voluntary payment.

Trending now

Technology Guy With A penchant for the Esoteric

Latest News

भगवान श्रीराम का वनवास जो 500 वर्षों के बाद समाप्त हुआ: श्रीराम मंदिर निर्माण की अनंत कथा

अंततः श्रीराम विजयी हुए, भारतवर्ष विजयी हुआ, हिन्दू विजयी हुए और इस संघर्ष में दिए गए सहस्त्रों बलिदान सार्थक हुए।

Hindu Mahasabha and the partition of West Bengal

Without Hindu Mahasabha and their fight for a Hindu Rashtra, West Bengal would have been a part of East Pakistan after the partition. The Bengali Hindu Homeland Movement and the resistance by Mookherjee and company is the reason why Kolkata and West Bengal became a part of the Indian Union.

नेपाल के रक्षा मंत्री का खेदजनक बयान

पिछले कुछ सालो में नेपाल में ये बात उठनी शुरू हुई है की ये जो पूरा समझौता है इसकी समीक्षा की जा रही है। कुछ महीने पहले २०२० में नेपाल की सरकार ने ब्रिटेन सरकार को एक खत लिखा, उस खत में उन्होंने यह कहा के हम १९४७ की संधि को रिव्यु करना चाहते है जिसमें गोरखा सोल्जर्स के बारे में फैसले लिए गए थे।

Do judgements contribute to pendency pandemic?

Just as the Covid-19 virus is not going anywhere until a Vaccine is discovered, this pendency Pandemic too is not going anywhere until a vaccine is found by superior Judiciary, to administer to itself, quite heavy doses of the same.

राम मंदिर बनाएंगे और डेट भी बताएंगे

जो कल तक कहा करते थे,राम मंदिर बनाएंगे लेकिन डेट नहीं बताएंगे उनके लिए आज काफी बुरी खबर है क्योंकि राम भक्तों के द्वारा भव्य राम मंदिर का निर्माण शुरू कर दिया गया है।

क्या मजदूरों के दयनीय स्थिति के लिए सरकारें जिम्मेवार हैं?

अब मजदूरों के लिए हर सांसदों, विधायकों और जनप्रतिनिधियों से आशा की जानी चाहिए कि वे अपने विधान सभा क्षेत्र के लिए गाड़ियों का बंदोबस्त कर दे।

Recently Popular

In conversation with Nehru: On Savarkar’s mercy petitions

This conversation is only an attempt to present the comparative study of jail terms served by both Savarkar and Jawaharlal Nehru.

Chandrababu Naidu at year 1 of Modi 2.0

The TDP leader who was discussing post poll strategies with the high command of INC few days before the 2019 results, was missing from a conference organized by Sonia Gandhi, recently.

Contrasts between Savarkar and Nehru, how merciful the British were to Nehru & harsh to Savarkar

Congress should be pin-pointedly asked if it considers Shivaji a ‘traitor’ for writing such a letter to Aurangzeb in 1666.

Open Letter to Indian parents from a veteran soldier – your children are being brainwashed

Islamisation of our kids, Lessons in History, Mahmud Ghazni Vs Prithviraj Chauhan. Stop it.

तीन ऐसे लोग जिन्होंने बताया कि पराजय अंत नहीं अपितु आरम्भ है: पढ़िए इन तीन राजनैतिक योद्धाओं की कहानी

ये तीन लोग हैं केंद्रीय मंत्री श्रीमती स्मृति ईरानी, दिल्ली भाजपा के युवा एवं ऊर्जावान नेता एवं समाजसेवी कपिल मिश्रा एवं तजिंदर पाल सिंह बग्गा। इन तीनों की कहानी बड़ी ही रोचक एवं प्रेरणादायी है।