Summary: The goal was the create a unique identification number for every citizen. This was largely done, but no effective access controls were installed, such that basically anyone on the system could look up any data and even print fake IDs.
This now makes all the numbers useless, since all the data stored may have been duplicated and the means to produce fakes is already out of the box. Somehow, the world's greatest bastion of humility will not submit to omnipresent technical surveillance - should we be at all surprised? India is famously corrupt. Even with rate limiting, search scope limitation, and other techniques it would appear that such data can never be truly secured.
Things will start moving if stolen Aaadhaar details are used to 'inconvenience' members of the parliament of the party in power. As long as that does not happen you might see some grandstanding at best, nothing concrete will happen.
Comments
Summary: The goal was the create a unique identification number for every citizen. This was largely done, but no effective access controls were installed, such that basically anyone on the system could look up any data and even print fake IDs.
This now makes all the numbers useless, since all the data stored may have been duplicated and the means to produce fakes is already out of the box. Somehow, the world's greatest bastion of humility will not submit to omnipresent technical surveillance - should we be at all surprised? India is famously corrupt. Even with rate limiting, search scope limitation, and other techniques it would appear that such data can never be truly secured.
Things will start moving if stolen Aaadhaar details are used to 'inconvenience' members of the parliament of the party in power. As long as that does not happen you might see some grandstanding at best, nothing concrete will happen.