11417 - [Aadhaar debate] 5 more questions for critics Ritesh Dwivedy

[Aadhaar debate] 5 more questions for critics

• RITESH DWIVEDY 16 MAY 2017

Aadhaar is a transformational Indian innovation that will help make India a developed nation. The benefits are enormous, and the whole world is amazed by the potential of Aadhaar.

I support all efforts and encourage all constructive arguments to improve the Aadhaar system. However, there is an ‘anti-Aadhaar’ brigade that is not interested in improvements, and they use half-truths and spread confusion to advance their own interests.

A few days ago, I asked five questions to this anti-Aadhaar brigade. Their responses have left me disappointed. Allow me to ask a few more questions, and provide some clarification to my previous questions and to the points raised by them:

Why speak half-truths and ignore the lakhs of people who are getting benefits for the first time because of Aadhaar?

You claim Aadhaar is excluding the needy.

For example, Andhra Pradesh went through a public distribution system (PDS) clean-up exercise. While doing so, nine lakh families were found who were excluded by the earlier system. Thanks to Aadhaar, they are now receiving the benefits they deserve and need. In this process, there are 100-200 families who are left out. (They are still getting benefits, but not via Aadhaar). The government is working on making it 100 percent effective.

So, you tell me, which is a better system? One that excludes nine lakh families, or the one that is missing 200?

It would have taken years to include those nine lakh families via the older system. Now, the system is fast, accurate, and inclusive. Even if we have an issue with one in a million, we end up with 1,200 issues (with a population of 1.2 billion). While we should work towards resolving any issues, should we judge the system for its one percent failure or for its 99 percent successes?

So, the anti-Aadhaar brigade should answer this: How many people were excluded from getting any benefits earlier? How many people used to get only a small percentage of the ration or subsidy?

Will you judge a programme only from its worst implementation?

You highlighted implementation in a few places where the PDS implementation is not smooth. Hence, Aadhaar has failed.

Here is an example: Zimbabwe and Pakistan have failed in implementing democracy. There have been critics of democracy. Do we then scrap democracy from every place, saying democracy is bad and has to be stopped?

While you are mentioning about few instances where Aadhaar implementation needs improvement, you do not mention those places where Aadhaar has excelled and in some cases excelled beyond the best expectations.

Why are you equating Aadhaar with unrelated events, and defaming the programme?

You wish for a utopian world. You also think there would be a magic wand, which will solve all problems by a mere swish and flick. If you were to believe me, everyone has a similar dream and if that were true we wouldn’t need military, government, currency, and even Aadhaar.

You claim Aadhaar does not solve problems that it was anyways not meant to solve. Timeliness, or quality of rice, or quantity or absence of bribery. Why stop here? You are looking at one solution that solves all issues.

While the government and agencies claimed that it will remove duplication, and hence reduce corruption, you start questioning its impact on other forms of corruption, and since Aadhaar does not solve various forms of corruption it was not meant to solve, you say, ‘well let’s not implement it!’ It is unrealistic to expect one idea to serve as an elixir for all the curse this society endures.

In the earlier Mahatma Gandhi National Rural Employment Guarantee Act (MNREGA) system, middlemen would take a standard 30-percent cut to disburse salary amounts – this is actual ground data from villages in north Bihar. There were innumerable reports of people not getting MNREGA work and the prescribed remunerations (an actual trip to the villages might not be required, a simple Google search will help corroborate).

Moreover, with the Aadhaar-enabled PDS (AePDS), an eligible beneficiary can collect ration from any ration shop in the state, instead of only one specific shop. By creating competition, Aadhaar empowers the poorest Indians who were helpless earlier; if a ration shop owner was a thief or a crook, or was cheating in any way, they can now go to any other ration shop.

My claim is that things are getting better, faster than they have in any old system. It is the power of exponential systems versus the linear ones. This is why we must back Aadhaar.

Why are you creating deliberate confusion again between data disclosures and so-called ‘data hacks’? If this is not fear mongering, then what is?

The Aadhaar data disclosures were data voluntarily published by government agencies for transparency and RTI purposes. Here is a good article on it. Whereas the cases like Ashley Madison or other data leaks are actual cases of hacking, where the data was stolen from their database.

The second example on how Aadhaar is increasing the risk for data being stolen is equally misleading. Let’s assume the Aadhaar database is hacked. The hacker would get Aadhaar ID, your KYC (which is anyways public), and your encoded biometrics (not of much use). For example, using this information, they cannot get your bank details, because Aadhaar does not store any information about which bank it is linked to and the account number. This data is saved with the banks’ databases.

In my opinion, the anti-Aadhaar brigade is fairly aware of the nuances and the differences between hacking and data disclosures, yet they are spreading half-truths and creating confusion. The facts remain that there has been no hacking of the UIDAI database, no leak of biometric information, and the systems will only get stronger going forward. Yes, there have been instances of agencies or individuals disclosing some data. A strong data protection and privacy law will address such problems.

In fact, Aadhaar-based biometric authentication is much safer than the existing systems we use.

Do you know the various ways in which your PAN card can be used for fraud? For example, there are jewellers who used to steal PAN card copies from travel agents and SIM card sellers, so that they could buy and sell jewellery in your name worth crores of rupees. You must also know that identity theft is rampant in the US, because their system does not have a strong authentication process for financial transactions.

This is where Aadhaar authentication could keep us safe. For example, for high-value transactions, banks and service providers could be required to confirm presence either with password/PIN-based authentication or with biometric authentication. That way, you have multiple layers of security, which is the best defense to the risk of identity theft.

If this is not fear mongering, then what is?

The CIS report published is illegal. In the case of finding a vulnerability of any system, like a bank, the entity is required to inform the right authorities, and only after the issue is fixed, they would be able to write about it. If not, the person could be arrested and put in jail on illegal hacking charges. (What the CIS did was irresponsible, and proves malicious intent written all over.)

Will you support a strong data protection and privacy law for India, instead of just being negative, and in your bid to destroy Aadhaar?

India does not have any data protection and privacy law. This is a big risk in this digital age. Our smartphones and Internet usage generate huge amounts of personal data. Private companies like Google, Facebook, Amazon, Apple, Microsoft, and telecom companies and phone manufacturers store this data with little or no regulation.

Data protection and privacy laws are needed, irrespective of Aadhaar. I call on all my technologically-aware and vigilant compatriots to join the movement to create a strong data protection and privacy law for India.

The law should be designed for the modern technology age, and it should protect the rights of every Indian citizen as well as our national security.

No good can be achieved with a negative attitude and attacking the government on flimsy grounds. Even if you talk about data protection or privacy, why will anyone in the government listen to you?

For those who are genuinely interested in bringing a strong data protection and privacy law or those who want to polish the rough edges around Aadhaar, let’s work together. I have become a part of #SupportAadhaar campaign, which aims to do this. Bring positive changes and improvements in the system, while supporting the goodness of Aadhaar.

Once again, I reiterate that we should not oppose the use of technology, especially when it benefits one-billion-plus people of the nation. This may sound clichéd and to some folks canned but I truly believe that this is an important step for India as a nation to develop and raise its masses out of poverty.

(Disclaimer: The views and opinions expressed in this article are those of the author and do not necessarily reflect the views of YourStory.)

11288 - 5 questions for the anti-Aadhaar brigade - Your Story

5 questions for the anti-Aadhaar brigade

Ritesh Dwivedy

8 MAY 2017

Aadhaar is a unique indigenous innovation that empowers every Indian by providing them with a secure and verifiable identity. Aadhaar is going to be the backbone of India becoming a developed country, and is receiving global acclaim from entities like Bill Gates, The Economist, the World Bank, Raoul Pal, and others.

And yet, we hear so much anti-Aadhaar news. So why would anyone oppose Aadhaar? There are people with vested interests or extreme ideology – they do not want corruption to go away, they are middlemen who have been making crores through corrupt practices, or they believe in extreme anti-state ideologies.

A long road to development and progress. (Image: ShutterStock)

Given all the benefits of Aadhaar, it’s difficult to understand their thinking! Here are 5 questions for the anti-Aadhaar brigade:

How many more years do you want India to remain a ‘developing’ nation?

India has the tag of developing nation for decades now. Everyone acknowledges that India has potential. For one reason or another, we have not reached that potential. Even Sri Lanka is all set to become a developed country very soon. This should be a wake-up call for us.

India cannot become developed without taking along the lowest strata of its citizens. Only 20 percent of government aid actually reaches them. Aadhaar helps 100 percent of the aid reach the right person through Direct Benefit Transfer, removing any scope for corruption at various levels. And this is just one aspect of the benefits of Aadhaar.

Hence the question to the anti-Aadhaar brigade, how many more years do you want India to remain a ‘developing’ nation?

Why are you silent on all the benefits we are seeing as a result of Aadhaar?

The rural women in Rajasthan are asking for Aadhaar. Aadhaar is saving the taxpayers crores of rupees. Aadhar is helping lost children get reunited with their kin. Banking facilities are reaching remote villages. Loans can be offered to people in minutes, saving them from the exorbitant rates of the local money lender. Opening bank accounts and getting SIM cards has become instantaneous and cheap. Why are you silent on all these benefits?

Why are you misleading the Indian public about Aadhaar through fear-mongering and sensationalism?

All sorts of extreme arguments around security are being made to oppose Aadhaar. However, the fact remains that Aadhaar, due to its biometric authentication, is more secure than other forms of identity, including the Social Security Number used in the United States.

People may have been alarmed by the fear-mongering and sensational reporting around some Aadhaar ‘data leaks’ or more accurately, ‘data disclosures’. In fact, people’s digital identity remains secure!

The data disclosures reveal Aadhaar numbers and demographic information. This alone cannot be used to steal your digital identity. Just as someone knowing your bank account number or debit card number, does not mean they can steal your money. And the fact remains, not a single leak of Aadhaar biometric information has been reported till date!

Why are you willing to give biometrics to foreign govts and corporations, but not to your own govt?

In today’s age, giving biometrics is a standard part of visa applications and unlocking modern smartphones! This data resides with foreign governments and corporations, Indian citizens have no control over its usage.

On the other hand, biometric information in India is only stored with UIDAI with strict protection of the law. So why is it that the anti-Aadhaar brigade is ready to give biometrics to foreign governments and corporations without any control on their use, while opposed to providing the same to the Indian government for development of the nation?

Why are you opposed to using technology to benefit the nation?

Any technology has its set of benefits and risks. For India to progress, we must embrace technology and use it in the right way. This requires a sensible discussion by all.

Bank account data, PAN data, credit card information, and user information from online accounts, etc. have all been leaked in the past or have seen frauds, yet we have not stopped using online banking, abolished the PAN system, dismantled credit cards, or disconnected from the internet.

So let us stop opposing the use of technology when it benefits the nation. Instead, let us make constructive arguments and support all efforts to improve the Aadhaar system.

(Disclaimer: The views and opinions expressed in this article are those of the author and do not necessarily reflect the views of YourStory.)

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

https://yourstory.com/2017/05/response-to-questions-by-pro-aadhaar-brigade/

[Aadhaar debate] Response to the questions raised by supporters

• THEJESH GN 10 MAY 2017

This is a response to the questions raised by Ritesh Dwivedy published here called 5 questions for the anti-Aadhaar brigade. It’s also available on UIDAI website.

Same or similar questions have been asked and answered before at many venues. You probably didn’t get a chance to read them. Hence I am answering them here. I will try to keep it short and to the point.

First off, I believe the title of the article is misleading. The article is not like a question paper as the title suggests. It’s more like a ‘Guidebook to cracking IIT/JEE’. It has frequently asked questions and canned answers by the author. Maybe it’s time for the guidebook authors to look for the not-so-frequently asked questions. That would make everyone think.

Let’s start with the introduction. The author writes: “And yet, we hear so much anti-Aadhaar news. So why would anyone oppose Aadhaar? There are people with vested interests or extreme ideology – they do not want corruption to go away, they are middlemen who have been making crores through corrupt practices, or they believe in extreme anti-state ideologies.”

I started reading the article thinking it will lead to a good discussion about tech, policy, privacy, and social impact etc. But if someone starts an introduction with blaming the opposition and calling them supporters of corruption, it doesn’t instill confidence about the quality of questions. I was kind of disappointed with the questions. But then I choose to answer because it can help. Here are my responses to the questions.

“Q1: How many more years do you want India to remain a ‘developing’ nation?”

ANS: I want India to be developed country from tomorrow. There you have my answer.

Now in your canned answer, you say we can’t become a developed country without taking everyone along with us. I agree. You also suggest DBT makes 100 percent “aid” reach the right person. But you conveniently forget not every “aid” can be delivered to a bank account.

Let’s take one simple example of PDS. How will Aadhaar make sure the person who is under PDS+Aadhaar gets 100 percent of the rice he is promised and the quality he is promised. At most, Aadhaar can make sure the right person signed up or was present at the delivery spot. It can’t guarantee anything else. It can’t guarantee timeliness, quantity, quality, or absence of bribery. Sorry, the reason you gave is not completely applicable. To burst your bubble, just a unique identity is not going to make India developed.

“Q2: Why are you silent on all the benefits we are seeing as a result of Aadhaar?”

ANS: We do recognise the benefits but with an eye for detail.

In the canned answer, you give examples how the Aadhaar is beneficial. You didn’t link them to the sources. Here are a few links with a counter view.

• How private companies are using Aadhaar to try to deliver better services (but there’s a catch)
• By making Aadhaar mandatory, Delhi’s government schools are shutting their doors to migrant children
• Aadhaar trouble: How a woman’s wages under MGNREGA were transferred to someone else’s account
• Dissent and Aadhaar

There are literally hundreds. Just Google. Not sure how you came to this conclusion.

We agree there are benefits from a unique identity and hence from Aadhaar too. We also know benefits always come with the cost. I would like to see both and then make an informed decision.

“Q3: Why are you misleading the Indian public about Aadhaar through fear-mongering and sensationalism?”

ANS: No we aren’t.

In your canned answer, you call “dataleaks” as data disclosures and also make a claim that “In fact, people’s digital identity remains secure.”

Since you have not gone into details, I will do that. Let’s take an example from the report Information Security Practices of Aadhaar (or lack thereof): A documentation of public availability of Aadhaar Numbers with sensitive personal financial information. The website of Chandranna Bima Scheme by Govt. of Andhra Pradesh publishes partial Aadhaar numbers, name, father’s/husband’s name, age, caste, mobile number, gender, partially masked bank account number, IFSC code, bank name, and details of the nominee etc.

I was especially disappointed with this question because you also head an online startup. Talk to your security team and see how much information they think is enough to conduct an effective social engineering attack.

Many transactions can be done with just Aadhaar number and OTP. Makes social engineering easier. In the meantime ask your startup’s security team how happy they or your customers will be if their data (of similar type) leaks. Security is not just about keeping password or biometrics safe.

You probably know the after effects of Ashley Madison data breach. Now imagine the kind of effect if the HIV/AIDS patient’s profile data along with Aadhaar number leaks. With Aadhaar, they can be uniquely identified. So again it’s not always about safe biometrics.

There is much more to the security and privacy argument. I would suggest you read this post on Reddit which explains other aspects which I have not gone in detail here.

“Q4: Why are you willing to give biometrics to foreign govts and corporations, but not to your own govt?”

ANS: We have, for example, for the passport. Important terms to know are purpose, choice, and consent.

A very popular question on social media is – ‘How can you give biometrics for the US visa but not to your own government.’ But it’s important to remind everyone that one needs to have a passport before getting a visa.

Everyone who has a passport has given their biometrics to the government. Again, the purpose of the collection is clear and is by choice.

You also talked about the biometrics on phone. Now to assume everyone has a phone or has a phone with biometrics capability is a little too much to assume. Many of us don’t have a phone with biometrics. Happy to announce I don’t need a phone with biometrics to pay taxes.

You also talk about, and I quote, ”control over its usage” and “strict protection of the law”. Here you talk about the control over data and usage. Under Aadhaar Act citizen, citizens don’t have any legal rights to the data. If it is leaked or misused I am not considered an aggrieved party. I cannot sue UIDAI or others involved. That is the kind of protection I get. Of course, there is also the “National Security” clause under which all the data, including authentication records (which they save), can be shared. We need a complete and separate article on that. So I am going to leave it at that.

“Q5: Why are you opposed to using technology to benefit the nation?”

ANS: No we aren’t. You say, and I quote, “Bank account data, PAN data, credit card information, and user information from online accounts, etc. have all been leaked in the past or have seen frauds, yet we have not stopped using online banking, abolished the PAN system, dismantled credit cards, or disconnected from the internet.”

Everything mentioned here can be replaced or I can get rid of the account (except PAN). I can also sue people responsible for it for damages. But in the case of Aadhaar, I can do neither.

It’s also an interesting question. Because as part of this question you expect “a sensible discussion by all” and “constructive arguments”. Now go back to your introduction paragraph see if it’s sensible or constructive to call the critics as corrupt, middlemen or extreme.

To answer your question.

There are many technologies that are built with the aim of building the nation. But not everything with good intention can benefit the people of this nation.

We think the way Aadhaar and its ecosystem is today is not beneficial to Indians given the risks. It is also important to know technology can’t solve all problems.

Hope my answers helped you. Ask more questions.

(Disclaimer: The views and opinions expressed in this article are those of the author and do not necessarily reflect the views of YourStory.)