> I feel this is a very very sad thing happening. Sometime back I read > the only proprietary component used was for interfacing the devices > since biometric devices come only with Windows drivers. Now it > appears the entire stack is Windows-based. > > I found the database used by Aadhar was most probably SQL 2005; > which is absurd. > > The lifetime of Aadhar project is very very large compared to the > lifetime of Microsoft products. Every 3 years versions of the OS, > database, .Net Runtime etc. keep changing. It is a continuous upgrade > treadmill into which the Govt of India project will be sucked into. >
I feel the same way. It is worrying to see our biometric data stored in such an insecure/unreliable system. While trying to gather more information on this, I came across a draft on NPCI (National Payment Corporation of India) integration with AADHAAR dated Oct 2010. http://www.npci.org.in/documents/AADHAAR.pdf http://www.google.com/search?q=npci+aadhaar (This is a technical document so people who know about the working of credit/debit card retail payment system might be able to understand it better) I find the mere idea of bringing in fingerprint check with every transaction very revolting. The added security/availability concerns in a windows based solution, makes the whole thing just scary. > I request all members to suggest concrete methods by which this > project can be rescued and made into Open Source stack, instead of > merely complaining on a mailing list. > IMO, If we can get some details on the architecture from UIDAI, we might be able to justify our concerns. So, I guess, the first step is to establish contact with the UIDAI technical group (atleast, one among the various departments/modules) -- 0 _______________________________________________ ILUGC Mailing List: http://www.ae.iitm.ac.in/mailman/listinfo/ilugc
