Aadhaar software hacked; UIDAI needs to work with hackers, says French security expert

According to the report, any unauthorized person from anywhere in the world can generate Aadhaar ID using the patch which is freely available for Rs 2,500.

Published: 11th September 2018 03:29 PM  |   Last Updated: 11th September 2018 07:26 PM   |  A+A-

Aadhaar. (Photo | PTI)

By IANS

NEW DELHI:  HuffPost India has revealed that the Aadhaar database, which contains the biometrics and personal information of over one billion Indians, "had been compromised by a software patch which disables critical security features of the software used to enrol new Aadhaar users."

According to the report, any unauthorized person from anywhere in the world can generate Aadhaar ID using the patch which is freely available for Rs 2,500.

French security expert Elliot Alderson -- who had last month sparked a controversy by asking the Unique Identification Authority of India (UIDAI) to explain why its helpline number was stored on many people's phone without their knowledge -- also joined in the conversation asking the UIDAI to work with the hackers to plug the breach.

"I repeat it: NOTHING IS UNHACKABLE. It does apply for Aadhaar. UIDAI, it's never too late. Listen and work with hackers instead of threatening them. History is looking to you," he said.

According to the HuffPost report, "the patch lets a user bypass critical security features such as biometric authentication of enrolment operators to generate unauthorised Aadhaar numbers".

It also disables the GPS security feature of the software allowing anyone from any location to enrol users.

"The patch reduces the sensitivity of the enrolment software's iris-recognition system, making it easier to spoof the software with a photograph of a registered operator, rather than requiring the operator to be present in person," the report said.

It claimed to have the patch analysed by three internationally reputed experts and two Indian analysts, all of whom confirmed it could be used to breach the Aadhaar software.

Hailing the investigation opposition slammed the government for the security breach. The Congress on Tuesday said the sanctity of the unique identification system was jeopardized.

Stay up to date on all the latest Nation news with The New Indian Express App. Download now
(Get the news that matters from New Indian Express on WhatsApp. Click this link and hit 'Click to Subscribe'. Follow the instructions after that.)

Comments

Disclaimer : We respect your thoughts and views! But we need to be judicious while moderating your comments. All the comments will be moderated by the newindianexpress.com editorial. Abstain from posting comments that are obscene, defamatory or inflammatory, and do not indulge in personal attacks. Try to avoid outside hyperlinks inside the comment. Help us delete comments that do not follow these guidelines.

The views expressed in comments published on newindianexpress.com are those of the comment writers alone. They do not represent the views or opinions of newindianexpress.com or its staff, nor do they represent the views or opinions of The New Indian Express Group, or any entity of, or affiliated with, The New Indian Express Group. newindianexpress.com reserves the right to take any or all comments down at any time.

flipboard facebook twitter whatsapp