Hacker News Reader

Comment by vijaybritto | Hacker News Reader

How would it put to rest when multiple govt agencies continuously leak private information? The data is still stored in the app. Only the source has been published now. It can be vetted for security but not the server code

View on HN

I have only heard rumors, is there a good source that summarizes what these concerns are?

Server side code will be released as well.

> The data is still stored in the app.

What's the issue with the data being stored in the app?

sorry I meant a centralized server. Storing it in device is not a problem. But when they have already published private details (Aadhar) of millions of people without any sort of care, its really worrying

Published as in? Is the data available on some site?

apparently on the darkweb, etc [1], among other leaks [2,3]. To be fair, the issue doesn't appear to be with the aadhaar database itself but the many agencies that use / store the data but do not protect it properly. Poor to non-existent data handling practices, limited understanding of privacy risks at the end user level..

Aadhaar has been transformational; but I hope we don't go down the path of the US SSN: one of the simplest vectors for massive identity theft in the US. I don't think we will, but it does appear that there are significant teething issues that could be better addressed if the powers that be were more willing to acknowledge shortcomings instead of saying the data is protected by 13 feet walls. [4]

[1] https://www.moneylife.in/article/aadhaar-data-breach-largest...

[2] https://www.thehindu.com/sci-tech/technology/major-aadhaar-d...

[3] https://techcrunch.com/2019/01/31/aadhaar-data-leak/

[4] https://www.news18.com/news/india/aadhaar-data-protected-by-...

Thanks for the links. I am aware about the leaks and understand that the loophole isn't exactly fixed. I was concerned that it's actually published on some site and can be readily accessed by anyone.

Thanks for this. I was tired to do a 20 second google search

Reply on news.ycombinator.com