Wednesday, March 28, 2018

Can a 5 foot wall stop a cyber attack?

Prime Minister Narendra Modi's app sends user information, including email address, photos, gender and name, to a US company called Clever Tap, without consent of the user, tweeted a French cyber security expert, Elliot Alderson. Clever Tap is classified as a phishing site by G-data, a software firm specialising in cyber security, based in Germany. Clever Tap, set up by three Indians, said that the data was used for analysis only and never shared with anyone else. The BJP, Modi's party, denied that the website was hosted in the US. After it had been exposed the app quietly changed its privacy policy. Elliot Alderson is a pseudonym for this expert who also claims to have hacked into Aadhaar, an identity number, based on photograph, prints of all 10 fingers and iris scans, which has been forced on all Indians by the government. UIDAI, which stands for Unique Identification Authority of India, called his claims "irresponsible". US internet companies were demanding Aadhaar information before providing services. "...American biometric technology provider L-1 Identity Solutions, open-source document database MongodB, and consulting firms Accenture and Ernst and Young - are holding all our data," said independent legal researcher U Ramanathan. The Attorney General, the top government lawyer, assured the Supreme Court that Aadhaar data is safe behind walls that are 13 feet high and 5 feet thick. It would be comical if it wasn't so dangerous for the nation. A Right to Information activist has shown that foreign firms already have access to full Aadhaar data and are allowed to maintain it for 7 years. "....an administrator login ID and password to gain access to the UID portal can be acquired for as little a Rs 500," revealed an article in the Tribune. Edward Snowden, a US whistleblower, warned against misuse of Aadhaar information. A study by a think tank affiliated to the Reserve Bank of India suggested that Aadhaar is open to abuse. "A primary challenge is to protect the data from prying and excessive profit seeking excess of the business world. It is well known that businesses are increasingly operating in a highly competitive world in which ethical boundaries are rapidly being pulled down," it said. "Thanks to Aadhaar, for the first time in history of India, there is now a readily available single target for cyber criminals as well as India's external enemies." While compromising security and privacy of the whole nation the government has demanded details of breach of data from Facebook to Cambridge Analytica. People can supply false information to Facebook, and many do to protect their privacy, but you cannot fake your fingerprints and iris scans. Sneaked in through the Money Bill without any debate Aadhaar is the means to a most perfect police state. Facebook and Donald Trump can do nothing to us but our government can. That is the fear. 

No comments: