Bengaluru: 31-yr-old techie arrested for accessing Aadhaar data

coastaldigest.com news network
August 4, 2017

Bengaluru, Aug 4: Bengaluru city police has arrested a young techie on the charge of accessing Aadhaar data following a complaint filed by the Unique Identification Authority of India (UIDAI) last week.

The arrested is Abhinav Srivastav, 31, an IIT-Kharagpur graduate, who is currently employed by ANI Technologies, which owns the Ola brand, as a software development engineer. He has been accused of accessing Aadhaar information in January 2017 through an app named ‘Aadhaar e-KYC’, which was available on the Google Play store till recently.

Police said Srivastav had developed five apps and made ₹40,000 from advertisements displayed on them. Police are now scanning all his apps to see whether more violations were committed. The Aadhaar e-KYC app was downloaded over 50,000 times from the Google Play store since its launch in January, the police said.

City Police Commissioner T. Suneel Kumar said that based on the complaint, six teams of police comprising 26 personnel were formed to nab Srivastav and they tracked him down to Koramangala after a week. He has been accused of using the services of another app, ‘e-hospital’, which is listed as an authenticated user agency (AUA) authorised to access UIDAI data.

A senior police officer said there were around 400 entities that have been authorised to access the data for authentication. Srivastav’s company was not among those authorised.

A native of Kanpur, Srivastav completed his M.Sc. in Industrial Chemistry from IIT-Kharagpur and joined a private firm in 2010 as a security researcher. He launched Qarth technologies in 2012 and shut it down in 2016 owing to financial reasons. In March 2016, Ola announced that it had acquired Qarth and its mobile payments product, X-Pay. Srivastav then joined another private firm before joining ANI Technologies last year.

Investigation revealed that the e-hospital company is not aware of his activities. However, further probe is on to ascertain the facts.

The ability of a software engineer to bypass strict protocols set in place by the UIDAI to access critical data puts the spotlight firmly on the security measures employed to protect Aadhaar data.

Police investigation have revealed that Srivastav had piggy-backed on the infrastructure of another app for hacking the data base.

“Aadhaar related information, legally housed by the National Informatics Centre server, was illegally and without authorisation accessed and used to support this mobile application,” said the police statement.

Srivastav, in order to give his ‘Aadhaar e-KYC’ app an air of authenticity, hacked into the server of the NIC, which houses the e-hospital system, which is a solution for government hospitals to handle patient care and other services, including medical records management.

As part of its regulations, the UIDAI accords certain agencies the title of an AUA, which can then provide Aadhaar-enabled services to the cardholder. For authentication, these agencies have to connect to the Central Identities Data Repository (CIDR) through the services of a Authentication Service Agency (ASA). ASAs are bound by regulations that stipulate encryption of data and logging of access.

The 'e-hospital’ platform had access as a registered AUA. Srivastav used this server to route his app requests for data access and managed to steal the data, the police said.

Question raised

In 2016, a paper titled ‘Privacy and Security of Aadhaar: A Computer Science Perspective’ by the Computer Science and Engineering Department of IIT-Delhi raised the question of leakage of Aadhaar number from an AUA.

The paper, which also discusses several other possible threat scenarios, said, “This, however, does not fully mitigate the risks and the possibility of leakage of the Aadhaar number from an AUA, either from the database, or during “Know Your Customer” (KYC) processes, or even during availing services, cannot be ruled out. In particular, there appear to be no safeguards or even guidelines, either technical or legal, on how the Aadhaar number should be maintained and used by various AUAs in a cryptographically secure way, and how to prevent the Aadhaar number of an individual from becoming public.”

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
November 21,2024

modiadani.jpg

After the US prosecutors charged Gautam Adani with bribery and fraud, Congress reiterated its call for a Joint Parliamentary Committee (JPC) probe into the transactions of the Adani group, and hit out at Prime Minister Narendra Modi, alleging an "internal nexus" between him and "his favourite businessman."

Senior Congress leader Jairam Ramesh said the indictment of Gautam Adani and others by the US Securities and Exchange Commission validates his party’s call for a Joint Parliamentary Committee investigation.

The Congress has been pushing for the probe since January 2023, raising concerns over alleged irregularities involving Adani and his business dealings, said Ramesh.

Ramesh referred to the party’s “Hum Adani ke Hain” series, where 100 questions were raised about the alleged scams and the links between Prime Minister Narendra Modi and Gautam Adani.
He noted that the questions remain unanswered, reiterating the need for accountability in the matter.

The US prosecutors have charged Adani with deceiving investors by concealing information about his firm's solar energy project in India, which allegedly involved bribery.

Adani has been charged with securities fraud and conspiracy, according to an indictment unsealed on Wednesday. The case focusses on an agreement between Adani Green Energy Ltd. and another organisation to supply 12 gigawatts of solar power to the Indian government.

'BETRAYAL OF INDIAN INVESTORS'

Congress leader Pawan Khera described the allegations against Gautam Adani and his conglomerate as a “betrayal of Indian investors.”

Taking to X, Khera outlined the US charges, including claims that Adani’s group bribed Indian government officials between 2020 and 2024 to secure contracts. Citing media reports, he also pointed out that Gautam Adani personally met a government official to advance the scheme.

Khera referred to a March 2024 incident where the Adani Group allegedly misled the Bombay Stock Exchange and the National Stock Exchange, calling it a “grave violation of investor trust.”

He further highlighted a March 2023 FBI raid on the premises of Sagar Adani, Gautam Adani’s nephew, where electronic devices were seized as part of the investigation.

'SEBI NOT ABLE TO PROVE ANY CHARGES AGAINST ADANI'

Shiv Sena (UBT) leader Priyanka Chaturvedi criticised central probe agencies following US charges against Gautam Adani and others in an alleged bribery case linked to solar energy contracts.

Chaturvedi raised concerns about corporate governance and regulatory oversight in the country. “They talk about corporate governance, responsibility, and accountability. The industrialists should be asked to follow the rules and regulations, but even the agencies were defending him. The SEBI has not yet been able to prove charges against him,” she said, pointing to what she viewed as failures in ensuring accountability.

'BROUGHT DISREPUTE TO INDIA'

On US charges against Gautam Adani, AAP leader Sanjay Singh called for a probe against the industrialist. He said that the probe should be conducted by an investigation agency under the Supreme Court.

"Adani Group has brought disrepute to India. This is a very serious matter. The PM of India should come forward and answer this. All the pending matters against Adani should be probed by an investigation agency under Supreme Court monitoring, and all the corruption done by him, within and outside the country, should come out before the country and action should be taken against him," he said.

BJP DFENDS

BJP IT cell chief Amit Malviya responded sharply to the Opposition’s criticism regarding allegations involving Adani Green Energy and US-based Azure Power. He pointed out that the charges in the indictment are only allegations and emphasised, “The defendants are presumed innocent unless and until proven guilty.”

Malviya argued that the crux of the case concerns agreements to supply 12 GW of power to the Solar Energy Corporation of India (SECI), contingent on SECI securing power purchase agreements with state electricity distribution companies (SDCs).

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
November 17,2024

hizbullah.jpg

An Israeli airstrike on the office of Syria’s Baath party in Lebanon’s capital Beirut has killed the Lebanese resistance movement Hezbollah's Media Relations Officer, Mohammad Afif, reports say.

Lebanon's National News Agency (NNA) reported that the Israeli raid struck the Ba'ath party’s building in central Beirut district of Ras Al-Naba'a on Sunday, adding that the strike was an attempt to assassinate the leader of the resistance media front.

According to Baath Secretary-General Ali Hijazi, Afif was having a meeting in the Baath Party headquarters when Israel carried out the attack.

"Afif did not fight with weapons and did not lead a military unit in Hezbollah. Rather, he led a media unit," he said.

Reuters, Sky News, Al Jazeera and a number of Henrew-language media reported that Afif was killed in the Israeli strike.

However, Hezbollah has not yet confirmed Afif’s death or whether he was present at the site or not.

Earlier, the Lebanese Health Ministry said at least one person was killed and three others injured after an Israeli strike targeted a central district in Beirut.

Lebanon's al-Mayadeen television network reported that five people were killed in the attack.

The latest development came after Afif said Hezbollah was behind the Caesarea operation and targeting Netanyahu’s home during a speech at the Ghobeiry area in the southern suburbs of Beirut on October 22.

This was the second assassination attempt on Afif in the last two months, after he survived an attack on the Hezbollah media relations office several weeks ago.

Israel launched a ground assault and massive air campaign against Lebanon in late September after a year of exchanging fire across the Lebanese border in parallel with the Gaza war.

At least 3,287 people have been killed in Israeli strikes in Lebanon over the past year, with the vast majority in the past seven weeks. Another 14,222 have been wounded, mostly women and children.

In response to the ongoing aggression, the Lebanese resistance movement Hezbollah has been staging hundreds of retaliatory strikes against the occupied Palestinian territories and the Israeli forces trying to advance on southern Lebanese areas.

The movement has vowed to sustain its strikes until the regime ends the escalation.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
November 21,2024

netanyahu.jpg

The International Criminal Court (ICC) has issued arrest warrants for Israeli prime minister Benjamin Netanyahu and his former minister of military affairs Yoav Gallant over war crimes against Palestinians in the Gaza Strip.

The court’s Pre-Trial Chamber I issued warrants of arrest for Netanyahu and Gallant "for crimes against humanity and war crimes committed from at least 8 October 2023 until at least 20 May 2024, the day the Prosecution filed the applications for warrants of arrest”, it confirmed in a statement Thursday.

It is the first instance in the court's 22-year history it has issued arrest warrants for Western-allied senior officials.

In its statement, the ICC's Pre-Trial Chamber I, a panel of three judges, said it has rejected appeals by Israel challenging its jurisdiction. 

The chamber said it has decided to release the arrest warrants because "conduct similar to that addressed in the warrant of arrest appears to be ongoing", referring to Israel's ongoing onslaught on Gaza.

Netanyahu and Gallant, it said, “each bear criminal responsibility” for “the war crime of starvation as a method of warfare; and the crimes against humanity of murder, persecution, and other inhumane acts,” as well as “intentionally directing an attack against the civilian population.”

All 124 states that signed the Rome Statute, the treaty that established the court, are now under an obligation to arrest the wanted individuals and hand them over to the ICC in the Hague. 

The court relies on the cooperation of member states to arrest and surrender suspects. The Netherlands' foreign minister quickly said his country was prepared to enforce the warrants while 93 nations earlier reiterated their support for the ICC.

Triestino Mariniello, a lawyer representing Palestinian victims at the ICC, called the warrants "a historic decision".

He noted that the court had endured "pressure and threats of sanctions" from the US government, but acted nonetheless.

As expected, the Tel Aviv regime rejected the rulings, with its security minister Itamar Ben Gvir calling the warrants “anti-Semitic through and through.”

The ICC said Israel’s acceptance of the court’s jurisdiction was not required.

Israel and its major ally, the United States, are not members of the court. 

Israel unleashed its bloody Gaza onslaught on October 7, 2023. So far, it has killed at least 43,985 Palestinians, mostly women and children, and injured 104,092 others, according to the Gaza Health Ministry.

Israel faces an ongoing South Africa-led genocide case at the International Court of Justice (ICJ).

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.