India’s Aadhaar Software Hacked, ID Database Compromised, Experts Confirm
I am the guy (Regunath) quoted in this article. I had already vented out at how one of the journalists approached me with an intent to get a "balanced" view of the system and ended up writing what he wanted from a pre-determined agenda. See this : https://twitter.com/RegunathB/status/1039411036497956864What is not covered in this article is that all data from client (even if compromised) is validated by a completely different system on the server-side (any decent system does this and so does Aadhaar) and the client too has undergone maybe 20 revisions to add features/fix issues - again typical of any software. The latest version of the client software, I am told, entirely boots off a secure external storage. Now, older versions might still be i use on the field. The Enrolment client software has provision to force upgrade the software and go to the extent of locking up and not allow any new enrolments. The server counterpart can also check and reject enrolments from previous versions of client software. All of this was shared to the same reporter and you can see how much (or how less) of it was actually covered in this fact finding exercise. Press has the ability to tell the truth or sensationalize, these guys chose the latter.