NEW DELHI—On 10 September, HuffPost India revealed that an inexpensive, freely available, software patch had critically undermined the integrity of India's controversial Aadhaar identity database by letting unauthorised persons, based anywhere in the world, alter information stored in the database and enrol new users at will.

The Unique Identification Authority of India (UIDAI), the agency responsible for Aadhaar, dismissed the story in a series of tweets. HuffPost Indianoted that the authority had not responded to the key points raised by our article.

Now, analysis by Orlando Padilla, founder of NoMotion Software LLC, a specialised cybersecurity firm that has worked on network security for the Olympics, the Israeli police, aerospace and defence companies like Northrop Grumman, and the US Department of Homeland Security, reveals the hackers made 26 separate code-level changes to the enrolment software—reiterating concerns that the hack is the work of skilled and sophisticated adversaries working to a clear plan.

Credit by - Huffpost

Read More