Bengaluru: 31-yr-old techie arrested for accessing Aadhaar data

coastaldigest.com news network
August 4, 2017

Bengaluru, Aug 4: Bengaluru city police has arrested a young techie on the charge of accessing Aadhaar data following a complaint filed by the Unique Identification Authority of India (UIDAI) last week.

The arrested is Abhinav Srivastav, 31, an IIT-Kharagpur graduate, who is currently employed by ANI Technologies, which owns the Ola brand, as a software development engineer. He has been accused of accessing Aadhaar information in January 2017 through an app named ‘Aadhaar e-KYC’, which was available on the Google Play store till recently.

Police said Srivastav had developed five apps and made ₹40,000 from advertisements displayed on them. Police are now scanning all his apps to see whether more violations were committed. The Aadhaar e-KYC app was downloaded over 50,000 times from the Google Play store since its launch in January, the police said.

City Police Commissioner T. Suneel Kumar said that based on the complaint, six teams of police comprising 26 personnel were formed to nab Srivastav and they tracked him down to Koramangala after a week. He has been accused of using the services of another app, ‘e-hospital’, which is listed as an authenticated user agency (AUA) authorised to access UIDAI data.

A senior police officer said there were around 400 entities that have been authorised to access the data for authentication. Srivastav’s company was not among those authorised.

A native of Kanpur, Srivastav completed his M.Sc. in Industrial Chemistry from IIT-Kharagpur and joined a private firm in 2010 as a security researcher. He launched Qarth technologies in 2012 and shut it down in 2016 owing to financial reasons. In March 2016, Ola announced that it had acquired Qarth and its mobile payments product, X-Pay. Srivastav then joined another private firm before joining ANI Technologies last year.

Investigation revealed that the e-hospital company is not aware of his activities. However, further probe is on to ascertain the facts.

The ability of a software engineer to bypass strict protocols set in place by the UIDAI to access critical data puts the spotlight firmly on the security measures employed to protect Aadhaar data.

Police investigation have revealed that Srivastav had piggy-backed on the infrastructure of another app for hacking the data base.

“Aadhaar related information, legally housed by the National Informatics Centre server, was illegally and without authorisation accessed and used to support this mobile application,” said the police statement.

Srivastav, in order to give his ‘Aadhaar e-KYC’ app an air of authenticity, hacked into the server of the NIC, which houses the e-hospital system, which is a solution for government hospitals to handle patient care and other services, including medical records management.

As part of its regulations, the UIDAI accords certain agencies the title of an AUA, which can then provide Aadhaar-enabled services to the cardholder. For authentication, these agencies have to connect to the Central Identities Data Repository (CIDR) through the services of a Authentication Service Agency (ASA). ASAs are bound by regulations that stipulate encryption of data and logging of access.

The 'e-hospital’ platform had access as a registered AUA. Srivastav used this server to route his app requests for data access and managed to steal the data, the police said.

Question raised

In 2016, a paper titled ‘Privacy and Security of Aadhaar: A Computer Science Perspective’ by the Computer Science and Engineering Department of IIT-Delhi raised the question of leakage of Aadhaar number from an AUA.

The paper, which also discusses several other possible threat scenarios, said, “This, however, does not fully mitigate the risks and the possibility of leakage of the Aadhaar number from an AUA, either from the database, or during “Know Your Customer” (KYC) processes, or even during availing services, cannot be ruled out. In particular, there appear to be no safeguards or even guidelines, either technical or legal, on how the Aadhaar number should be maintained and used by various AUAs in a cryptographically secure way, and how to prevent the Aadhaar number of an individual from becoming public.”

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
February 26,2020

Mysuru, Feb 26: The Pre-University Education Department was taking several measures to prevent paper leaks during the II PU examinations, scheduled to commence from March 4, a statement said on Tuesday.

Among the few measures that the board has chalked out, students would not be allowed to leave the examination hall till the last bell. In case of any emergency, the student could leave the exam hall but s/he would be required to surrender the question paper to authorities in the hall.

This is being done to ensure question papers aren’t circulated during exam hours by those who exit the hall before the last bell.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
Agencies
February 16,2020

New Delhi, Feb 16: Aam Aadmi Party (AAP) national convener Arvind Kejriwal was on Sunday sworn-in as the Chief Minister of Delhi for the third time in a row at Ramlila Maidan here, after his party registered a massive victory in the recently concluded Delhi Assembly polls.

Kejriwal was administered the oath of office and secrecy by Delhi Lieutenant Governor Anil Baijal.

The sprawling Ramlila Maidan reverberated with sounds of thousands of people cheering for the AAP leader.

Kejriwal who received a hero's welcome here had extended an invitation to the people of Delhi urging them to attend the swearing-in ceremony to witness "the son of Delhi" taking oath today.

The AAP nearly repeated its 2015 performance in the elections, sweeping the Assembly polls winning 62 seats in the 70-member Assembly, in the face of a high-voltage campaign by the BJP, which fielded a battery of Union Ministers and Chief Ministers in its electioneering spearheaded by Home Minister Amit Shah. 

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
Agencies
July 1,2020

The ILO has warned that if another Covid-19 wave hits in the second half of 2020, there would be global working-hour loss of 11.9 percent - equivalent to the loss of 340 million full-time jobs.

According to the 5th edition of International Labour Organisation (ILO) Monitor: Covid-19 and the world of work, the recovery in the global labour market for the rest of the year will be uncertain and incomplete.

The report said that there was a 14 percent drop in global working hours during the second quarter of 2020, equivalent to the loss of 400 million full-time jobs.

The number of working hours lost across the world in the first half of 2020 was significantly worse than previously estimated. The highly uncertain recovery in the second half of the year will not be enough to go back to pre-pandemic levels even in the best scenario, the agency warned.

The baseline model – which assumes a rebound in economic activity in line with existing forecasts, the lifting of workplace restrictions and a recovery in consumption and investment – projects a decrease in working hours of 4.9 percent (equivalent to 140 million full-time jobs) compared to last quarter of 2019.

It says that in the pessimistic scenario, the situation in the second half of 2020 would remain almost as challenging as in the second quarter.

“Even if one assumes better-tailored policy responses – thanks to the lessons learned throughout the first half of the year – there would still be a global working-hour loss of 11.9 per cent at the end of 2020, or 340 million full-time jobs, relative to the fourth quarter of 2019,” it said.

The pessimistic scenario assumes a second pandemic wave and the return of restrictions that would significantly slow recovery. The optimistic scenario assumes that workers’ activities resume quickly, significantly boosting aggregate demand and job creation. With this exceptionally fast recovery, the global loss of working hours would fall to 1.2 per cent (34 million full-time jobs).

The agency said that under the three possible scenarios for recovery in the next six months, “none” sees the global job situation in better shape than it was before lockdown measures began.

“This is why we talk of an uncertain but incomplete recovery even in the best of scenarios for the second half of this year. So there is not going to be a simple or quick recovery,” ILO Director-General Guy Ryder said.

The new figures reflect the worsening situation in many regions over the past weeks, especially in developing economies. Regionally, working time losses for the second quarter were: Americas (18.3 percent), Europe and Central Asia (13.9 percent), Asia and the Pacific (13.5 percent), Arab States (13.2 percent), and Africa (12.1 percent).

The vast majority of the world’s workers (93 per cent) continue to live in countries with some sort of workplace closures, with the Americas experiencing the greatest restrictions.

During the first quarter of the year, an estimated 5.4 percent of global working hours (equivalent to 155 million full-time jobs) were lost relative to the fourth quarter of 2019. Working- hour losses for the second quarter of 2020 relative to the last quarter of 2019 are estimated to reach 14 per cent worldwide (equivalent to 400 million full-time jobs), with the largest reduction (18.3 per cent) occurring in the Americas.

The ILO Monitor also found that women workers have been disproportionately affected by the pandemic, creating a risk that some of the modest progress on gender equality made in recent decades will be lost, and that work-related gender inequality will be exacerbated.

The severe impact of Covid-19 on women workers relates to their over-representation in some of the economic sectors worst affected by the crisis, such as accommodation, food, sales and manufacturing.

Globally, almost 510 million or 40 percent of all employed women work in the four most affected sectors, compared to 36.6 percent of men, it said.

The report said that women also dominate in the domestic work and health and social care work sectors, where they are at greater risk of losing their income and of infection and transmission and are also less likely to have social protection.

The pre-pandemic unequal distribution of unpaid care work has also worsened during the crisis, exacerbated by the closure of schools and care services.

Even as countries have adopted policy measures with unprecedented speed and scope, the ILO Monitor highlights some key challenges ahead, including finding the right balance and sequencing of health, economic and social and policy interventions to produce optimal sustainable labour market outcomes; implementing and sustaining policy interventions at the necessary scale when resources are likely to be increasingly constrained and protecting and promoting the conditions of vulnerable, disadvantaged and hard-hit groups to make labour markets fairer and more equitable.

“The decisions we adopt now will echo in the years to come and beyond 2030. Although countries are at different stages of the pandemic and a lot has been done, we need to redouble our efforts if we want to come out of this crisis in a better shape than when it started,” Ryder said. 

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.