News for hackers. Stuff that matters.
Re:India’s largest bank SBI leaked account data on millions ... by _mdlf on Wednesday January 30, 2019 @12:43PM (#19037297)
Not just SBI,I bet every nationalized bank in India has pathetic security. I've worked with some of them & I will say that if you want to sleep peacefully don't keep your money in a nationalised Indian bank; unfortunately private banks are out of reach for majority of the population.

Anyway, it's not that a criminal needs to target the banks for sensitive data when the govt has made it easy by giving a central depository of citizen data in the name of Aadhaar; for the ease of use -it is linked with bank accounts & mobile numbers as well!

Re:India’s largest bank SBI leaked account data on millions ... by mhb on Wednesday January 30, 2019 @01:10PM (#19037584)
Re:India’s largest bank SBI leaked account data on millions ... by Dravidian on Wednesday January 30, 2019 @09:13PM (#19041683)
That's because Skype is soon becoming the defacto VoIP for Indian govt communication & guess what's the authentication? Yup Aadhaar!

More over Azure is the cloud storage provider for all govt data moving forward.

So not only Billgates would support Aadhaar, NSA & every party benefiting out of privacy abuse would.

Re:India’s largest bank SBI leaked account data on millions ... by KorematsuFred on Wednesday January 30, 2019 @09:05PM (#19041637)
Bill Gates in past has supported horrible centralized mechanisms like Common Core. People like Bill Gates do not fully understand countries like India and their knowledge solely comes from "Intellectual Yet Idiots"[1].

[1] https://medium.com/incerto/the-intellectual-yet-idiot-13211e...

Re:India’s largest bank SBI leaked account data on millions ... by plinkplonk on Wednesday January 30, 2019 @01:27PM (#19037732)
Easy to be a fan when all the harm falls on other people on the other side of the world.
Re:India’s largest bank SBI leaked account data on millions ... by edge17 on Wednesday January 30, 2019 @01:52PM (#19038004)
Also easy to be a critic when the harm falls on other people on the other side of the world. There is a cost to inaction as well.
Re:India’s largest bank SBI leaked account data on millions ... by _jgdh on Wednesday January 30, 2019 @02:33PM (#19038463)
Hi. I'm an Indian saddled with an Aadhaar account. Am I allowed to be a critic?
Re:India’s largest bank SBI leaked account data on millions ... by sbmthakur on Wednesday January 30, 2019 @02:44PM (#19038592)
Certainly. It's a free country after all. There's already an army of "critics" in Indian Supreme Court who want Aadhar to be thrown into the bin under Article 21.
Re:India’s largest bank SBI leaked account data on millions ... by kamaal on Thursday January 31, 2019 @02:04AM (#19043017)
It won't happen any time soon or even ever. There are already talks of a Universal Basic Income by two major parties. They need this kind of infrastructure to roll out their scheme soon.

In short it will be mostly activist rage on Twitter, and beyond that nothing much actually.

Re:India’s largest bank SBI leaked account data on millions ... by intended on Wednesday January 30, 2019 @06:01PM (#19040539)
Remember: privacy invasion is always ok when no ones dying. When it gets that far, then anonymous comments online disappear.
Re:India’s largest bank SBI leaked account data on millions ... by sbmthakur on Wednesday January 30, 2019 @02:21PM (#19038304)
It solved some problems. I had a lot of trouble opening my NPS account without Aadhar.
Re:India’s largest bank SBI leaked account data on millions ... by godelmachine on Wednesday January 30, 2019 @07:26PM (#19041120)
He's a friend of Nandan Nilekani, that's why
Re:India’s largest bank SBI leaked account data on millions ... by shard972 on Wednesday January 30, 2019 @05:04PM (#19040087)
> Thanks to the work Nandan is doing the world is moving closer to the day when everyone will have access to an official ID

So II guess this is mission accomplished? /s

Re:India’s largest bank SBI leaked account data on millions ... by distant_hat on Wednesday January 30, 2019 @02:49PM (#19038660)
Realistically there is no concept of security and much less privacy in India. you could do a filetype:xlsx PAN aadhaar on Google and tons of files with phone numbers, addresses etc will show up. The central voting list of all voting eligible indians with age, address, gender etc is publicly available to anyone who wants at https://electoralsearch.in/ You just have to give the starting initial like A and leave everything else blank.
Re:India’s largest bank SBI leaked account data on millions ... by truncate on Wednesday January 30, 2019 @01:26PM (#19037722)
Despite terrible service and security, I still opened an account few years ago. Why? Because statements from private banks are not a valid address for various purposes. I was hit hard because I needed a new passport, and they changed the rule last minute (barely any notice) that only nationalized banks are acceptable, and even if I made a new account I still needed multiple months of statements.[1]

So despite the fact I would rather not have a nationalized bank account at all, I'm forced to keep one just in cases something else changed in future without any notice. And that's one reason why many other people prefer to open at-least one (first) account there.

[1] https://timesofindia.indiatimes.com/city/bengaluru/Private-b... [apologies for this terrible website]

Re:India’s largest bank SBI leaked account data on millions ... by _jgdh on Wednesday January 30, 2019 @02:46PM (#19038621)
This is untrue. The list of documents that are valid as proof-of-address when applying for a passport [1] include electricity bill, water bill, telephone bill, gas connection, election ID, rent agreement among many others. If you're really keen on using your bank passbook for some reason, you'll be happy to know that ICICI and HDFC (the largest private banks) are also accepted [2].

I have an SBI bank account but I've never had to use it for anything in the past half a decade. So I would dispute your claim that it's indispensable.

[1] - https://portal2.passportindia.gov.in/AppOnlineProject/popupo...

[2] - https://portal2.passportindia.gov.in/AppOnlineProject/pdf/Ci...

Re:India’s largest bank SBI leaked account data on millions ... by truncate on Wednesday January 30, 2019 @04:23PM (#19039657)
I was like 20/21 then, without any kind of bills as they were all under parents name. I missed on elections, so didn't have election ID. I had an ICICI account though for years, and it was for a fact rejected back in 2014, and that is exactly why I opened SBI. Maybe they changed the rule now. And that is exactly the reason why I or some of my friends had an nationalized bank account back then. My complain here is that govt keeps changing rules, and SBI is kind of safe choice even though I don't use it for anything.
Re:India’s largest bank SBI leaked account data on millions ... by balladeer on Wednesday January 30, 2019 @04:59PM (#19040015)
You could get address proof from local municipality or BDO (if rural area).

And you could get India Post's address proof. Very little known feature but excellent. I have used it once in a city where I was there just for 5 months.

Re:India’s largest bank SBI leaked account data on millions ... by sbmthakur on Wednesday January 30, 2019 @02:32PM (#19038451)
I work with US FIs and security isn't great there either(some don't even have a legit HTTPS cert). Even private Indian banks don't have secured sites, you could still get your details leaked there as well. As for Aadhar, it's no longer necessary for opening an account.
Re:India’s largest bank SBI leaked account data on millions ... by KorematsuFred on Wednesday January 30, 2019 @09:06PM (#19041644)
Citibank sends me Credit Card fraud alerts and when I click on those links I end up on links that are not from citibank domain but some third party service. I am then expected to enter my bank login on that site. I always thought this was fishing until the bank support confirmed to me that it is legit.
Re:India’s largest bank SBI leaked account data on millions ... by sbmthakur on Thursday January 31, 2019 @01:23AM (#19042837)
Many private banks have strange ways of conducting business. I've been receiving calls from ICICI Bank (through private numbers) to verify my Credit Card. The procedure eventually ends with the operator asking me to enter my CVV through IVRS. Now how am I supposed to know if the IVRS(or even the operator) is legit? On one hand we are not supposed to share our details with anyone and the on the other hand the bank itself asks for these details through shady numbers. It's sad that banks don't do anything properly without RBI guidelines.
Re:India’s largest bank SBI leaked account data on millions ... by duxup on Wednesday January 30, 2019 @01:29PM (#19037763)
>unfortunately private banks are out of reach for majority of the population.

Do they have pretty restrictive minimum deposit amounts or something?

Re:India’s largest bank SBI leaked account data on millions ... by inapis on Wednesday January 30, 2019 @02:03PM (#19038141)
Lot of private banks require a monthly minimum balance of INR 10k.

Nationalised banks have zero minimum balance accounts.

Re:India’s largest bank SBI leaked account data on millions ... by distant_hat on Wednesday January 30, 2019 @02:38PM (#19038527)
SBI has a 5K minimum for most accounts.
Re:India’s largest bank SBI leaked account data on millions ... by snambi on Wednesday January 30, 2019 @01:01PM (#19037492)
banks use PAN number. They didn't ask for aadhaar number.

Btw, I got my PAN number in late 1999, I think.

Re:India’s largest bank SBI leaked account data on millions ... by webmobdev on Wednesday January 30, 2019 @01:27PM (#19037736)
> They didn't ask for aadhaar number.

???

The Indian banks, especially public banks, have been hounding everyone with an account for their Aadhaar number for the past 3+ years. It only stopped when the 5 judge bench of the SC ruled last year that Indians have a Right to Privacy and Aadhaar cannot be demanded for everything.