Re: Legal and technical reasons for biometric breech

Suresh Ramasubramanian <[email protected]> Tue, 09 Jan 2018 17:58:33 +0530
Newsgroups gmane.org.telecom.india-gii
Message-ID <[email protected]>
> This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

--===============5737102407511787219==
Content-type: multipart/alternative;
	boundary="B_3598365519_2109626684"

> This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

--B_3598365519_2109626684
Content-type: text/plain;
	charset="UTF-8"
Content-transfer-encoding: quoted-printable

Very well written.=C2=A0 The issue is also that there=E2=80=99s very little access co=
ntrol to backdoors providing bulk admin access to the Aadhaar db, everything=
 short of the core biometrics thank God for small mercies

=20

It isn=E2=80=99t just misuse by the custodians.=C2=A0 It is the issue of various cust=
odians getting unfettered access and then having that access compromised by =
external third parties who then have that same unfettered access to Aadhaar =
data.

=20

=20

From: India-gii <india-gii-bounces+suresh=3Dhserus.net-IAPFreCvJWP2/[email protected]> o=
n behalf of Andy Oram <[email protected]>
Date: Tuesday, 9 January 2018 at 5:24 PM
To: <[email protected]>
Subject: [india-gii] Legal and technical reasons for biometric breech

=20

I haven't seen discussion of that scandal on this list--maybe I missed some=
 email. Anyway, I thought this article a useful, concise description of the =
various facets of the problem:

=20

https://scroll.in/article/833230/explainer-aadhaar-is-vulnerable-to-identit=
y-theft-because-of-its-design-and-the-way-it-is-used


Andy Oram  |  Editor
O'Reilly Media, Inc.  |  617-499-7479 |  oreilly.com

=20

_______________________________________________ India-gii mailing list Indi=
a-gii-IAPFreCvJWP2/[email protected] https://lists.india-gii.org/mailman/listinfo/india=
-gii=20


--B_3598365519_2109626684
Content-type: text/html;
	charset="UTF-8"
Content-transfer-encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsof=
t-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" xmlns:m=
=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http://www.w3.org=
/TR/REC-html40"><head><meta http-equiv=3DContent-Type content=3D"text/html; char=
set=3Dutf-8"><meta name=3DGenerator content=3D"Microsoft Word 15 (filtered medium)=
"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0cm;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
	{mso-style-name:msonormal;
	mso-margin-top-alt:auto;
	margin-right:0cm;
	mso-margin-bottom-alt:auto;
	margin-left:0cm;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
span.EmailStyle19
	{mso-style-type:personal-reply;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:612.0pt 792.0pt;
	margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]--></head><body lang=3DEN-IN link=3Dblue vlink=3Dp=
urple><div class=3DWordSection1><p class=3DMsoNormal><span lang=3DEN-GB style=3D'mso=
-fareast-language:EN-US'>Very well written.=C2=A0 The issue is also that there=E2=80=
=99s very little access control to backdoors providing bulk admin access to th=
e Aadhaar db, everything short of the core biometrics thank God for small me=
rcies<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN-GB style=3D'mso-fa=
reast-language:EN-US'><o:p>&nbsp;</o:p></span></p><p class=3DMsoNormal><span l=
ang=3DEN-GB style=3D'mso-fareast-language:EN-US'>It isn=E2=80=99t just misuse by the c=
ustodians.=C2=A0 It is the issue of various custodians getting unfettered access=
 and then having that access compromised by external third parties who then =
have that same unfettered access to Aadhaar data.<o:p></o:p></span></p><p cl=
ass=3DMsoNormal><span lang=3DEN-GB style=3D'mso-fareast-language:EN-US'><o:p>&nbsp=
;</o:p></span></p><p class=3DMsoNormal><span lang=3DEN-GB style=3D'mso-fareast-lan=
guage:EN-US'><o:p>&nbsp;</o:p></span></p><div style=3D'border:none;border-top:=
solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=3DMsoNormal><b><span s=
tyle=3D'font-size:12.0pt;color:black'>From: </span></b><span style=3D'font-size:=
12.0pt;color:black'>India-gii &lt;india-gii-bounces+suresh=3Dhserus.net@lists.=
india-gii.org&gt; on behalf of Andy Oram &lt;[email protected]&gt;<br><b>Dat=
e: </b>Tuesday, 9 January 2018 at 5:24 PM<br><b>To: </b>&lt;india-gii@india-=
gii.org&gt;<br><b>Subject: </b>[india-gii] Legal and technical reasons for b=
iometric breech<o:p></o:p></span></p></div><div><p class=3DMsoNormal><o:p>&nbs=
p;</o:p></p></div><div><div><p class=3DMsoNormal><a name=3D"_MailOriginalBody">I=
 haven't seen discussion of that scandal on this list--maybe I missed some e=
mail. Anyway, I thought this article a useful, concise description of the va=
rious facets of the problem:<o:p></o:p></a></p></div><div><p class=3DMsoNormal=
><span style=3D'mso-bookmark:_MailOriginalBody'><o:p>&nbsp;</o:p></span></p></=
div><p class=3DMsoNormal><span style=3D'mso-bookmark:_MailOriginalBody'></span><=
a href=3D"https://scroll.in/article/833230/explainer-aadhaar-is-vulnerable-to-=
identity-theft-because-of-its-design-and-the-way-it-is-used"><span style=3D'ms=
o-bookmark:_MailOriginalBody'>https://scroll.in/article/833230/explainer-aad=
haar-is-vulnerable-to-identity-theft-because-of-its-design-and-the-way-it-is=
-used</span><span style=3D'mso-bookmark:_MailOriginalBody'></span></a><span st=
yle=3D'mso-bookmark:_MailOriginalBody'><o:p></o:p></span></p><div><p class=3DMso=
Normal><span style=3D'mso-bookmark:_MailOriginalBody'><br clear=3Dall><o:p></o:p=
></span></p><div><div><div><div><div><div><div><div><p class=3DMsoNormal><span=
 style=3D'mso-bookmark:_MailOriginalBody'><span style=3D'font-size:9.5pt;color:#=
666666'>Andy Oram &nbsp;| &nbsp;Editor<br>O'Reilly Media, Inc. &nbsp;| &nbsp=
;</span></span><span style=3D'mso-bookmark:_MailOriginalBody'></span><a href=3D"=
tel:617-499-7479" target=3D"_blank"><span style=3D'mso-bookmark:_MailOriginalBod=
y'><span style=3D'font-size:9.5pt;color:#1155CC'>617-499-7479</span></span><sp=
an style=3D'mso-bookmark:_MailOriginalBody'></span></a><span style=3D'mso-bookma=
rk:_MailOriginalBody'><span style=3D'font-size:9.5pt;color:#666666'>&nbsp;| &n=
bsp;</span></span><span style=3D'mso-bookmark:_MailOriginalBody'></span><a hre=
f=3D"http://oreilly.com/" target=3D"_blank"><span style=3D'mso-bookmark:_MailOrigi=
nalBody'><span style=3D'font-size:9.5pt;color:#1155CC'>oreilly.com</span></spa=
n><span style=3D'mso-bookmark:_MailOriginalBody'></span></a><span style=3D'mso-b=
ookmark:_MailOriginalBody'><o:p></o:p></span></p></div><div><p style=3D'margin=
:0cm;margin-bottom:.0001pt'><span style=3D'mso-bookmark:_MailOriginalBody'><sp=
an style=3D'color:blue'><img border=3D0 width=3D90 height=3D40 style=3D'width:.9375in;=
height:.4166in' id=3D"_x0000_i1025" src=3D"cid:~WRD000.jpg" alt=3D"Image removed b=
y sender. oreilly_email_logo.png"></span><o:p></o:p></span></p><div><p class=
=3DMsoNormal style=3D'margin-bottom:12.0pt'><span style=3D'mso-bookmark:_MailOrigi=
nalBody'><o:p>&nbsp;</o:p></span></p></div></div></div></div></div></div></d=
iv></div></div></div></div><p class=3DMsoNormal><span style=3D'mso-bookmark:_Mai=
lOriginalBody'>_______________________________________________ India-gii mai=
ling list India-gii-IAPFreCvJWP2/[email protected] https://lists.india-gii.org/mailman/=
listinfo/india-gii </span><o:p></o:p></p></div></body></html>

--B_3598365519_2109626684--




--===============5737102407511787219==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KSW5kaWEtZ2lp
IG1haWxpbmcgbGlzdApJbmRpYS1naWlAbGlzdHMuaW5kaWEtZ2lpLm9yZwpodHRwczovL2xpc3Rz
LmluZGlhLWdpaS5vcmcvbWFpbG1hbi9saXN0aW5mby9pbmRpYS1naWkK

--===============5737102407511787219==--