Slashdot Mirror


Story Of a Country Which Has Built a Centralized Biometrics Database Of 1.1B People But Appears To Be Mishandling It Now (mashable.com)

In a bid to get more Indians to have a birth certificate or any sort of ID card, India announced Aadhaar project in 2009. At the time, there were more Indians without these ID cards than those with. As a result of this, much of the government funding for the citizens were disappearing before they could see them. But according to several security experts, lawyers, politicians and journalists, the government is using poor security practices, and this is exposing the biometrics data -- photo, name, address, fingerprint, iris info -- of people at risk. More than 1.1 billion people -- and 99 percent of all adults -- in India have enrolled themselves to the system. From a report: "There are two fundamental flaws in Aadhaar: it is poorly designed, and it is being poorly verified," Member of Parliament and privacy advocate, Rajeev Chandrasekhar told Mashable India. Another issue with Aadhaar is, Chandrasekhar explains, there is no firm legislation to safeguard the privacy and rights of the billion people who have enrolled into the system. There's little a person whose Aadhaar data has been compromised could do. [...] "Aadhaar is remote, covert, and non-consensual," he told Mashable India, adding the existence of a central database of any kind, but especially in the context of the Aadhaar, and at the scale it is working is appalling. Abraham said fingerprint and iris data of a person can be stolen with little effort -- a "gummy bear" which sells for a few cents, can store one's fingerprint, while a high-resolution camera can capture one's iris data. The report goes on to say that the Indian government is also not telling how the data is being shared with private companies. Experts cited in the story have expressed concerns that those companies (some of which are run by people who were previously members of the team which designed the framework of Aadhaar) can store and create a parallel database of their own. On top of that, the government is making Aadhaar mandatory for availing several things including registration for nation-wide examinations, but in the beginning it promised Aadhaar will be used only to help poor get grocery at subsidized prices.

6 of 60 comments (clear)

  1. Did they consider ... by quenda · · Score: 5, Funny

    Offshore outsourcing the project?

  2. Re:They fucked up their own shit? by alvinrod · · Score: 4, Interesting

    The bureaucracy in India is so incompetent that it's borderline malicious. I had a colleague that had been in the U.S. for a long time but was going to move back to India to help with the care of his aging parents who were having some medical problems, but was delayed and prevented from returning for an extended periods because his own government didn't believe he was who he claimed to be because apparently someone had stolen his identity and had been voting in years worth of elections while he was in the U.S.

    Beautiful country and nice people, but I think they spend so much of their time being conquered and ruled by other groups that the local populace never developed an ability for efficient governing.

  3. Re:Oh noez! by LordWabbit2 · · Score: 4, Interesting

    I worked alongside one of the biggest consulting firms in the world, they might not be great programmers, but when you throw 300 of them at a project the project gets completed. Buggy as shit, convoluted (so you HAVE to go back to them) but it gets the job done. THAT is all management give a shit about, because it's their bonus on the line. Once they have their bonus they wander off and leave us to maintain the stinking pile of poo.

    --
    There are three kinds of falsehood: the first is a 'fib,' the second is a downright lie, and the third is statistics.
  4. Re:They fucked up their own shit? by Richard_at_work · · Score: 4, Insightful

    You can say that again - in 2013, roughly a third of all Indian MPs (158 of 543) were under investigation for serious criminal charges, a third of all lawmakers (1,448 of 4,835) were also under investigation on serious criminal charges. Nearly half of those MPs were under investigation were being investigated for crimes such as murder and abduction.

    Its one of the most corrupt governmental systems that also calls itself a democracy...

    Lets not forget that a caste system is still extremely prevalent in India, so some people have utterly no hope of being elected or being represented in government.

  5. Identity verification is a mess in India by 140Mandak262Jamuna · · Score: 5, Informative
    In India verification of identity has been a mess for a long time. Much of this complaint is true, and the Indian government can mess things up royally or vice-royally. But you can compare the new system with perfect system and carp about it. Perfection is the goal, but doing better than current version is the shipping criterion, as any coder knows.

    Before aadhaar (meaning proof in Hindi, cognates with similar word in most of indian languages) it was an incredible mess. For most people "the ration card" issued to families to avail services of subsidized food served as a form of identity. Originally it had no photos, and it was one per family, not individual. But the state governments made some basic efforts to curtail fraudulent cards, so it served as an identity card. Voter registration lists were inflated. Migrant people did not have one. Credit worthiness could not be verified. So unsecured loans are never available from organized sector. All unsecured loans were made by local loan sharks who knew people personally. Almost all the commerce was done by cash. Allowed untaxed black money to mix freely with white money. So much so that the government had demonetized 500 Rs, and 1000 rs currency notes. Unless you can prove you had that note legally, you can't exchange it for the new legal tender. It did it back in 1976 too. The country was formed only in 1947.

    The mess is far larger than any one can imagine or fix in short term. Finding fault with any new system is easy. Unless you offer viable solutions and work to address your concerns, one would think, it is just a troll or astro turf or feigned outrage.

    Funny story: I was a lucky person with a propane gas cylinder account with a government owned gas supplier when I graduated from college. Propane gas stoves are the way most cooking is done in India for about half the population. It was a hot thing to have a gas cylinder account! All due to the foresight of my mom who "registered" my name using the ration card when I was in sixth or seventh grade. When I left for America, that account became very valuable. I gave the cylinder I had to my friend. So every time the cylinder would run out, he would use my name and get a replacement. Not sure if I gave my ration card to him too. When I ran into him some 15 years later he said, "I never forgot you. How could I ? Every 20 days, I had to call the Indane Gas company, and identify myself as 140mandak262jamuna!"

    --
    sed -e 's/Chuck Norris/Rajnikant/g' joke > fact
  6. Make SS cards real ID cards by unixisc · · Score: 4, Interesting

    This!!! In the US, one needs a Social Security number to do anything - open accounts to do any tracking, but it's a stupid piece of paper that legally is not supposed to be laminated. In the meantime, you have controversies over cities issuing driving licenses to illegals, and thereby making the appearance of legalizing them. As well as the proposal by the TSA to require everybody to carry their passports w/ them in some jurisdictions.

    Better idea: why not make SS cards like DL cards, which would include photos, personal details (eye color, hair color, et al, like in DLs, but not addresses), and then a chip that includes details like a person's legal status (citizen/GC/visa type, state in which one can vote, et al) and make that the ID that they are required to show anywhere? That way, DL would no longer be proof of anything aside from the authorization to drive, and the SS card can be used for things like Voter ID, travelling on planes, e-Verify, et al. Then cities that issue DLs to illegals would no longer be changing anything about their legal status to be here, only whether they can legally drive or not. Which shouldn't be an issue - one could legally go from Juarez to El Paso, get a TX DL and then drive anywhere in TX on a tourist visa, but not be mistaken for a legal resident of the US.