The Beginning of the End of UID / "Aadhaar"

​There has been a debit card security breach in a large number of banks.

It was kept under wraps until it could no longer be hidden from public glare. Why?

One can run, but not hide for ever. The truth will out, and it has.

There is only one thing that could be responsible for this – it goes by a popular delusional brand name, "Aadhaar".

It does not work, because biometric recognition is inherently fallible.

They know it, yet the “scratch-back” club said it was good for KYC (Know Your Customer) norms for banks.

I had written to the former governor of RBI. He did not so much even acknowledge it.

Now the chickens have come home to roost.

The cover up plan (disaster management) will get on over drive.

Are we an IT Super Power or an IT Super Fool?

Any fool would know that if one uses a number, 12 digit or even more, unique, random or otherwise, as the index and access password (and if the number is available to all and sundry) for any database, then anyone would be able to breach its security.

In fact, there is no need to breach, access is always available.

The loss of a few million debit cards and cash withdrawals through them is but a minor hiccup, the proverbial iceberg tip.

Damage the UID / "Aadhaar" scheme could do is unimaginable, expect to its fundamentalist faithful.

One report said that the debit cards were used from China.

Why did the banks remain silent for 6 weeks?

The malware is reportedly through a vendor of National Payment Corporation of India, a private body (and according to the present dispensation – private is better than public) which, uses and swears by "Aadhaar" for financial transaction.

When will they ever learn, if ever?

​There has been a debit card security breach in a large number of banks.

It was kept under wraps until it could no longer be hidden from public glare. Why?

One can run, but not hide for ever. The truth will out, and it has.

There is only one thing that could be responsible for this – it goes by a popular delusional brand name, "Aadhaar".

It does not work, because biometric recognition is inherently fallible.

They know it, yet the “scratch-back” club said it was good for KYC (Know Your Customer) norms for banks.

I had written to the former governor of RBI. He did not so much even acknowledge it.

Now the chickens have come home to roost.

The cover up plan (disaster management) will get on over drive.

Are we an IT Super Power or an IT Super Fool?

Any fool would know that if one uses a number, 12 digit or even more, unique, random or otherwise, as the index and access password (and if the number is available to all and sundry) for any database, then anyone would be able to breach its security.

In fact, there is no need to breach, access is always available.

The loss of a few million debit cards and cash withdrawals through them is but a minor hiccup, the proverbial iceberg tip.

Damage the UID / "Aadhaar" scheme could do is unimaginable, expect to its fundamentalist faithful.

One report said that the debit cards were used from China.

Why did the banks remain silent for 6 weeks?

The malware is reportedly through a vendor of National Payment Corporation of India, a private body (and according to the present dispensation – private is better than public) which, uses and swears by "Aadhaar" for financial transaction.

When will they ever learn, if ever?

Please follow the link below for the story in 'Economic Times'.