Centre for Internet and Society

Demonetisation: Cost Vs Benefit

praskrishna — 2017-01-17T16:04:16Z

Sunil Abraham took part in a discussion on Demonetisation in NDTV's Big Fight programme aired on December 24, 2016.

Prime Minister's big post-demonetisation deadline of 50 days is coming to a close. Does this mean that people's ordeal with the currency ban will also come to an end? Will the government continue to have people's support and patience through its big bang reforms if they fail to achieve their original aim of retrieving black money? We ask, what lies ahead for India? How long will it take for India to become a cashless economy? What are the pitfalls? With a high bank dormancy rate of 43%, most Indians still prefer to make transactions through cash. Even if we are able to make that journey to becoming a cashless economy by 2020, does the government have the infrastructure to make online payments safe?

Sunil Abraham said that the trouble with the design of the Aadhaar project is that it makes citizens transparent to the state and does not make state transparent to the citizen. With every generation of corruption busting technology we see new ways of corruption being introduced into our society. For more watch the video

For more details visit http://editors.cis-india.org/internet-governance/news/ndtv-december-24-2016-demonetisation-cost-versus-benefit

India’s Digital ID Rollout Collides With Rickety Reality

praskrishna — 2017-01-17T15:35:04Z

India’s new digital identification system, years in the making and now being put into widespread use, has yet to deliver the new era of modern efficiency it promised for shop owner Om Prakash and customer Daya Chand.

The article by Gabriele Parussini was published in the Wall Street Journal on January 13, 2017. Hans Varghese Mathews was quoted.

At first, it drove both men up a tree.

The system, which relies on fingerprints and eye scans to eventually provide IDs to all 1.25 billion Indians, is also expected to improve the distribution of state food and fuel rations and eventually facilitate daily needs such as banking and buying train tickets.

But Mr. Prakash couldn’t confirm his customers’ identities until he dragged them to a Java plum tree in a corner of his village near New Delhi’s international airport. That was the only place to get the phone signal needed to tap into the government database.

“I hopped on a chair and put my finger in the machine,” said Mr. Chand, a 60-year-old taxi driver. Getting his state food ration “used to be much easier,” he said.

In a system so vast, even small glitches can leave millions of people empty-handed.

The government began building the system, called Aadhaar, or “foundation,” with great fanfare in 2009, led by a team of pioneering technology entrepreneurs. Since then, almost 90% of India’s population has been enrolled in what is now the world’s largest biometric data set.

Prime Minister Narendra Modi, who set aside early skepticism about the Aadhaar project after taking power in 2014, is betting that it can help India address critical problems such as poverty and corruption, while also saving money for the government.

But the technology is colliding with the rickety reality of India, where many people live off the grid or have fingerprints compromised by manual labor or age.

Panna Singh, a 55-year-old day laborer in the northwestern state of Rajasthan who breaks stones used to build walls, says the machine recognized his scuffed-up fingerprints only a couple of times.

“I’ve come twice today,” he said at a ration shop in the village of Devdungri. “That’s a full day of work, gone.”

Iris scans are meant to resolve situations where fingerprints don’t work, but shops don’t yet have iris scanners.

Ajay Bhushan Pandey, chief executive of the government agency that oversees Aadhaar, said kinks will be ironed out as the system is used, as is the case with software rollouts. It works 92% of the time, and that will rise to 95%, he said.

“On the scale of what [Aadhaar] has achieved, the rollout has been remarkably smooth,” said Nandan Nilekani, the Infosys co-founder who spearheaded the project. “I don’t see any issues that are disproportionate to the size of project.”

An Aadhaar ID is intended to be a great convenience, replacing the multitude of paperwork required by banks, merchants and government agencies. The benefits are only just beginning, backers say, as the biometric IDs are linked to programs and services.

But in rural areas, home to hundreds of millions of impoverished Indians dependent on subsidies, the impact of technical disruptions has already been evident.

After walking for two hours across rough underbrush in Rajasthan to get kerosene for the month, Hanja Devi left empty-handed because the machine couldn’t match her fingerprint with her Aadhaar number.

“It’s always so difficult” using the system, said Ms. Devi, who lives with her husband and a nephew on 1,500 rupees ($22) a month.

Ranjit Singh, who operates the shop, said five of the 37 customers before Ms. Devi also left the shop empty-handed, a failure rate of over 15%.

A shop manager in a neighboring village said identification had failed for a similar portion of his 500 customers.

Any biometric recognition system of Aadhaar’s size is bound to show duplicates, meaning some people’s biometric identifiers will match someone else’s when they try to enroll.The new system hasn’t eliminated attempts at fraud. In August, police in Rajasthan accused two shop managers of linking their fingerprints to a multitude of cards and stealing for months the rations of dozens of clients.

Hans Varghese Mathews, a mathematician at the Bangalore-based Center for Internet and Society, used the results of a test run by Aadhaar officials on a sample of 84 million people to extrapolate the figure for India’s total population. The error level is less than 1%, but in the world’s second-most populous country, the snag would still affect about 11 million people, he said.

Government officials disputed the calculation, saying the number of duplicates would be much smaller—and that it would take only seven analysts to manage the error caseload.

As for trouble connecting to the registry, better infrastructure, including steadier internet connections, will eventually also help, Mr. Pandey said.

For now, Mr. Prakash has found a way to cope without climbing trees. After scouring the village, he set up a shack in a spot with enough bandwidth for his fingerprint scanner to work. It is hardly efficient. He issues receipts in the morning at the shack, then goes back to his shop to hand out the grains. Customers have to line up twice, sometimes for hours.

Mr. Prakash has applied to the government to operate without biometric identification, but his request was turned down, he said. “They said: ‘You have to keep trying.’ ”

For more details visit http://editors.cis-india.org/internet-governance/news/wall-street-journal-gabriele-parussini-january-13-2017-indias-digital-id-rollout-collides-with-rickety-reality

Supreme Court issues notice to WhatsApp, Centre on data privacy

praskrishna — 2017-01-17T15:06:08Z

Analysts said India lacked data protection laws.

The article by MJ Antony, Ayan Pramanik and Apurva Venkat was published in the Business Standard on January 17, 2017. Sunil Abraham was quoted.

The Supreme Court on Monday issued notices to the Centre and WhatsApp over an appeal alleging the instant messaging service did not ensure the privacy of its users and seeking regulations to protect personal information.

Chief Justice J S Khehar granted urgent hearing when Harish Salve, counsel for the petitioner, submitted that the service provided free by the platform to 155 million subscribers violated constitutional provisions protecting privacy.

The government and WhatsApp would file their replies within two weeks, the court directed after Salve sought its intervention to protect consumer data till India enacted data protection laws.

The Supreme Court heard the petition after the Delhi High Court in September directed WhatsApp not to share its users’ data with its parent Facebook and asked it to provide users with the option to opt out. The court was hearing a public interest litigation over a change in WhatsApp’s user policies that explicitly allowed Facebook to access to WhatsApp users’ data.

A Facebook spokesperson said the company could not comment immediately.

Analysts said India lacked data protection laws that prohibit global Internet firms from harvesting user data for their business. “We used to think that we had some privacy jurisprudence in the country. If you asked a lawyer 1.5 years ago, he would say privacy in India was a constitutionally guaranteed right,” said Sunil Abraham, director of the Centre for Internet Society. “It is not explicitly referenced into the law.”

Saroj Kumar Jha, partner, SRGR Law Offices, said, “Along with the lack of policies and laws, there are very few judgments on privacy issues based on constitutional rights. Thus, it makes it very difficult to judge a case.”

Salve argued that till the government enacted legislation to protect user data, the court should provide protection. The Telecom Regulatory Authority of India should introduce a clause in telecom licences that if calls were intercepted the licence would be cancelled, he said.

The court sought the assistance of Attorney-General Mukul Rohatgi to sort out the issues.

Rohatgi, while arguing an earlier case related to alleged violation of privacy, had taken the stand that the Constitution did not protect the right to privacy. According to him, neither the fundamental rights nor Supreme Court judgments recognises a citizen’s right to privacy. The bench hearing that case referred the question to a constitution bench last year.

For more details visit http://editors.cis-india.org/internet-governance/news/business-standard-mj-antony-ayan-pramanik-apurva-venkat-supreme-court-issues-notice-to-whatsapp-centre-on-data-privacy

The Dangers Of Aadhaar-Based Payments That No One Is Talking About

praskrishna — 2017-01-17T14:39:53Z

Less than three months ago, India’s banking sector was hit by a data breach which compromised 32 lakh debit cards and led to fraudulent transactions worth Rs 1.3 crore.

The article by Mayank Jain was published by Bloomberg on January 17, 2017. Sunil Abraham was quoted.

The incident started a debate around security of payment systems. But the debate had just about begun when the government’s demonetisation decision dragged attention away from it. Now as the dust settles and as the government starts to push newer means of digital payments, the focus is back on the security of systems being seen as an alternative to cash.

One such system is Aadhaar-based payments which could potentially allow citizens to pay anytime anywhere with the tap of a finger.

In theory, it sounds simple.

The Aadhaar-based payment system runs on the existing Aadhaar infrastructure through which a person’s biometrics are used to authenticate the user. Once authenticated, the user can transfer funds directly from one bank account to another without going through a mobile wallet or a card.

The payment system requires a smartphone, a working internet connection and a biometric authentication device with the merchant. The customer needn’t have a card or a phone as long as he or she has an Aadhaar-seeded bank account.

National Payments Corporation of India has developed this payments infrastructure over the existing Aadhaar-Enabled Payments System, the railroad on which the public distribution system has been functioning for years now.

Amitabh Kant, chief executive officer of the government policy think tank NITI Aayog said, earlier this month, that all cards and point-of-sale machines will become redundant in the country in the next two-and-a-half years as Aadhaar-based payments become popular.

A Double-Edged Sword

While payments authenticated by biometrics sound like a good idea in a country where less than one in three people actually own a smartphone, there are fears that integrating biometrics with digital payments could prove to be a security headache.

The first part of the problem is that Aadhaar, while effective, is not a fool-proof method of authentication and identification failures are not uncommon. Building a payment system atop the Aadhaar system will simply transfer some of these vulnerabilities.

The possibility of transaction failures due to a biometric mismatch are real, admitted a former high-ranking official from the Unique Identification Authority of India (UIDAI) who spoke to BloombergQuint on the condition of anonymity.

Officially, the false reject rate – rejection of a biometric when it’s actually correct – is set at a maximum of 2 percent for devices that get certified from the UIDAI. On the ground, however, failure rates vary widely, said the official quoted above.

According to the official statistics on UIDAI, more than 16 lakh Aadhaar-authentication requests failed in the past week. The type of errors encountered ranged from the biometric data not matching the database to demographic details not checking out.

The failure rates on Aadhaar Enabled Payment System for interbank transactions (which is a part of all Aadhaar authentication requests) were found to be as high as 60 percent by the Watal Committee on digital payments which published its report in December.

Additionally, newer security threats may also emerge if the scope of Aadhaar is widened. These include identity theft if a person’s biometrics are compromised from the payment system, phishing attempts, and the difficulty in revoking access once biometric information is compromised.

Biometrics aren’t an exact science, the official quoted above said, while adding that possible glitches have to be weighed against the benefits of offering a widely accessible non-cash mode of payment to citizens.

How Easy Is It To Beat The System?

Sunil Abraham, executive director of Bangalore based research organisation Center for Internet and Society (CIS) said that one way to assess how secure a system is to understand the cost and effort that goes into breaching it.

In the case of Aadhaar-based payment systems, the costs may not be high.

“There’s the gummy finger method which essentially requires some Fevicol or gum to duplicate someone’s fingerprint which can be enough to transact on someone’s behalf without them being there,” said Abraham in a phone conversation with BloombergQuint. “An average person can’t clone a smart card. Just fevicol and glue can help you make a gummy finger. The biometric lobby will say that advanced scanners defeat the gummy finger attack but more advanced scanners are also more expensive.”

Also, using more sensitive devices could push up the instance of false rejection of transactions, said Abraham.

There are other concerns. Like the fact that devices used for Aadhaar identification could store personal information, which, in turn, could be susceptible to a breach.

There are five main components in an Aadhaar app transaction – the customer, the vendor, the app, the back-end validation software, and the Aadhaar system itself. There are also two main external concerns – the security of the data at rest on the phone and the security of the data in transit. At all seven points, the customer’s data is vulnerable to attack.
Bhairav Acharya, Program Fellow, New America

Acharya, who works at a U.S.-based think tank called New America and focuses on cyber-law, said the key concern is that Aadhaar data can be stolen and misused.

“The app and validation software are insecure, the Aadhaar system itself is insecure, the network infrastructure is insecure, and the laws are inadequate.”

The biometric data collected on the authentication device at a merchant location can potentially be stored on the device as well as the smartphone of a merchant for a long time. Abraham added that there is a possibility that non-certified devices will enter the market, which can store data and use it in the future to do fraudulent transactions.

The concerns over potential misuse of biometric data by private agencies has also been highlighted by the Supreme Court of India. Earlier this month, the apex court refused to expedite the hearing on a petition regarding Aadhaar being utilised for multiple use cases by private companies. It, however, observed that private agencies collecting biometric data “is not a great idea”.

Deficient Privacy Laws

Apar Gupta, a Delhi-based lawyer working on cyber security, says that the lack of strong privacy protecting provisions is another concern that should be kept in mind while moving towards an Aadhaar-based payment system.

“The data stays for a long time with the stakeholders in the system. The requesting agency can keep it for seven years and the UIDAI can store it for five years. There are insufficient safeguards and there’s an absence of privacy law and an independent privacy regulator,” he said.

Acharya agreed.

India does not have the necessary laws to deal with a decentralised, biometrically-authenticated, mobile payments system, according to Acharya.

“Moreover, current laws and policies regarding the Aadhaar project, particularly the centralised database, are inadequate from the point of view of data security and end-user privacy,” he said.

Abraham of CIS said the issue is wider than Aadhaar. The problem is the lack of a strong data security law.

We only have a minimal data security law under the Section 43A of the Information and Technology Act which only applies to the private sector. There’s no law that applies to the government. Even 43A has not been applied consistently. There’s no place for you to go and complain if your identity has been compromised.
Sunil Abraham, Executive Director, Centre for Internet & Society

Gupta noted that, in the event of an identity threat, avenues of recourse are also limited. He said the best option is an appeal in the civil court, which is a long drawn out process.

In final analysis, according to Abraham, credit and debit cards are easier to secure as access can be revoked quickly.

“The trouble with biometrics is that the chain of trust is harder to establish because too many people can get access to biometrics and then you need to devise these convoluted solutions like hardware secure zones,” Abraham said.

“So the advantage of going with a smart card is that it can be easily re-secured, but with biometrics, once I compromise it, it’s lifelong.”

For more details visit http://editors.cis-india.org/internet-governance/news/bloomberg-mayank-jain-january-17-2017-dangers-of-aadhaar-based-payments-that-no-one-is-talking-about

The soon-to-be launched Aadhaar Pay will let you make purchases using your fingerprint

praskrishna — 2017-01-16T03:14:22Z

Paying for your groceries and other goods by using your biometrics instead of an e-wallet, debit card or cash seems to be the next phase in the Centre’s ambitious push to shift the country to a “less cash” economy, as its mandarins term it.

The article by Indulekha Aravind was published in the Economic Times on 15 January 2017. Sunil Abraham was consulted for this.

Ajay Bhushan Pandey, CEO of the Unique Identification Authority of India (UIDAI), says it will be rolling out Aadhaar-enabled payment system, or Aadhaar Pay, for merchants in the next few weeks. This will be an app for merchants that enables them to receive payments through biometric authentication of the customer, provided their bank accounts are linked to their Aadhaar number. "A pilot is under way in fair price shops in Andhra Pradesh where shopkeepers are accepting payments from PDS beneficiaries. The results are very encouraging," says Pandey.

The idea takes off from the existing Aadhaar-enabled payment system (AEPS) used by bank business correspondents (BCs) in rural areas to disburse and accept cash, using micro ATMs. "We are trying to tweak this so that a similar device can be used by a local merchant," says Pandey. Adoption will depend on two factors: merchants’ acceptance of it and whether they can use an app rather than a micro ATM. The biggest advantage through this method of payment, says Pandey, is that the customer will not need a credit or debit card, or even a smartphone.

The limits for transactions using AEPS, such as the number of daily transactions, will be left to the discretion of the banks. In the long term, the AEPS will be migrated to the BHIM (Bharat Interface for Money) platform but the rollout of Aadhaar Pay will happen before that. Post demonetisation, banking BC’s number of transactions using AEPS has leapt from 4-5 lakh to 14-15 lakh, says Pandey. According to Reserve Bank of India data on electronic payment systems, the total volume of such transactions jumped from 671 million in November 2016 to 957 million in December. USSD-based payments, which can be done using a basic feature phone, are among the biggest beneficiaries: the volume rose from just 7,000 in November to 1,02,000 in December, and value of transactions from over Rs 7,000 to over Rs 1 lakh. Prepaid payment instruments — mainly mobile wallets — rose from 59 million to 88 million in the same period (and value from Rs 1,300 crore to Rs 2,100 crore).

While Aadhaar Pay is likely to ride the demonetisation wave if it is launched soon, certain concerns remain, as the list is how secure such a payment system will be. The UIDAI CEO says it is a paramount concern for the organisation, too. "We are using the latest technology to ensure the information stays encrypted end to-end, so that information is not leaked or misused. In the months to come, we will strengthen the security."

Wary About Security
Sunil Abraham, executive director of the Centre for Internet and Society, a think tank that has been analysing the Aadhaar project for six years, outlines several reasons why Aadhaar-based biometrics is inappropriate for authentication in payments, unlike card-based payments that use cryptography.

"With biometrics, there is always an error ratio. It is imprecise matching, whereas with cryptography (smart cards), there is no false positive or negative. You either have the key (PIN) or you don’t. It is also very cheap to defeat biometric authentication — even an unlettered person can do it," says Abraham. It would be easy enough, he says, to replicate someone else’s fingerprint by pressing it against lukewarm wax and filling the mould with glue to get a dummy finger. In contrast, compromising a smart card requires more cost and effort, from tech-savviness to machines such as a skimmer that will read the card. "And once you are compromised,you are compromised forever. You can’t change it, like a debit card PIN."

Using Aadhaar for authentication had proved to be a failure during the exchange of currency notes following demonetisation, he adds, pointing to how the poor and the middle class stood in queues for money while stacks of new currency were recovered from the homes of businessmen and bureaucrats. "When you have bank officials who are corrupt, giving them your biometrics is giving them more ammunition for corruption." To catch the criminals, law enforcement agencies had to resort to CCTV footage,a relatively older technology, he says. Others point out that while it may be secure, certain factors stand in the way of making biometrics-based payment authentication a large-scale success. Amrish Rau, CEO of PayU India, a payment gateway provider, cites a list of reasons why it would inevitably take off but only in 5-10 years.

"For one, the technology is not yet good enough. There are also bandwidth and data constraints in sending biometric data," says Rau. Even in more mature markets, it has yet to find widespread acceptance, he says, pointing to the slow adoption of Apple Pay and Samsung Pay in the US. "It’s not the answer today.” This is in contrast to NITI Aayog CEO Amitabh Kant’s recent remarks that cards and PoS machines would become redundant by 2020 because Indians would be making payments using their thumb (biometrics). "... my view is that in the next two and a half years, India will make all its debit cards, credit cards, all ATM machines, all PoS machines totally irrelevant,” Kant had said at a Pravasi Bharatiya Divas session in Bengaluru.

UIDAI’s Pandey is more circumspect. “I wouldn’t say who would replace what. But from the government’s side we are encouraging all modes of digital payment. India has a diverse population and some people might prefer using a card, others a wallet. Collectively, they will contribute to a less-cash society.”

For more details visit http://editors.cis-india.org/internet-governance/news/economic-times-indulekha-aravind-january-15-2017-the-soon-to-be-launched-aadhaar-pay-will-let-you-make-purchases-using-your-fingerprint

Millions of Indians move from cash to digital payments. But some ask whether it’s safe

praskrishna — 2017-01-16T02:52:33Z

Minutes after Indian Prime Minister Narendra Modi began an ambitious new mobile-phone-payment application in December, several clones of the app popped up at Android smartphone stores.

The article by Rama Lakshmi was published by Washington Post on 14 January 2017, Sunil Abraham was quoted. Annie Gowen contributed to this report.

In the first few days, users were flooded with spam requests for money.

The Bhim app sponsored by the government was rushed out after Modi’s abrupt withdrawal of large currency bills two months ago. More than 10 million people downloaded it in just 10 days, but in a country where awareness and regulation of privacy, data protection and digital security are low, the number of cyberattacks is rising.

“We are rushing toward launching and using these plethora of financial tech apps without the exhaustive security testing and education that is needed,” said Sunil Abraham, executive director of the Center for Internet and Society. “We are operating in a bit of a regulatory vacuum.”

Modi’s ambitious move to swap old bills for new was intended to fight the hoarding of illicit cash reserves. But it was derailed by shoddy implementation, left citizens in Asia’s third-largest economy without cash for weeks, slowed manufacturing and sent workers home, and is now likely to significantly affect the country’s economic growth this year, economists say. It was acutely painful for a country where 80 percent of transactions were conducted with cash.

Modi quickly responded by turning the adversity into a call for Indians to kick their overwhelming dependence on cash and opt for digital payments overnight. The Bhim app is just one of many available. But in this leap, experts say, security concerns are being overlooked.

The new payment apps and e-wallet companies are governed by India’s outdated information technology law of 2008 and central bank guidelines.

“India urgently needs a new digital payment law that regulates all these mobile payment apps that have sprung up overnight,” said Pavan Duggal, a cyber-law expert. “We are right now in a completely uncharted and unsupervised territory legally. The norms for wallet companies are undefined. If I lose my money due to a fraud, I can go round and round in circles with no remedy.”

The central bank recently issued guidelines asking payment banks to carry out security audits, but Duggal said “there is no penalty or punishment for noncompliance.”

The problem is compounded by the fact that education about security risks online is abysmally sparse, especially in India’s small towns and villages. Indians are complacent about cyber risks in their online behavior, according to the Norton Cyber Security Insights Report. India does not have a privacy law.

India reported more than 39,000 incidents of cyberattacks in the first nine months of 2016, according to the government, including phishing, scanning and probing, website intrusions, defacements, virus and malicious code, and denial-of-service attacks.

“The Pentagon got hacked, right? You haven’t closed down the Pentagon as yet,” said Piyush Goyal, a minister. “These things will happen, and we have to be one step ahead of the hackers and the so-called security breaches and continuously improving and improvising as they do in America or other developed economies.”

In October, top banks had to fix the security codes of about 3.2 million debit cards in one of the biggest data breaches in India. Some users complained that their cards had been used in China.

Last month, hackers attacked Twitter and email accounts of prominent politicians and journalists and defaced the website of the National Security Guard, an elite commando force.

“The focus of global hackers has shifted to India. The cyber risk is a direct fallout of the growth in the number of digital users,” said Saket Modi, the chief executive of Lucideus Tech, the firm that conducted the security audit of the government’s Bhim app.

Since the cash crunch began, the largest private e-wallet company, Paytm, has experienced a 400 percent jump in new downloads.

But only 342 million people access the Internet on their mobile phones. The government has introduced dial-in service for those who have basic cellphones to make digital payments.

The government is airing radio jingles telling citizens not to share their personal identification numbers and has a toll-free helpline to teach people how to make online payments.

“Officials understand how security worries can be a big dampener in their campaign to get people to go digital,” said Vinayak Godse, senior director at the Data Security Council of India, an industry body that advises the government.

But in a trade-off between convenience and security, the central bank recently waived the mandatory two-factor authentication for transactions less than $30 online.

Some cybersecurity experts say that Indians are not ready for this step.

The police recently arrested a gang in the eastern state of Jharkhand; operators were calling people posing as bank executives and tricking them into sharing their card details. They used the cards to do online shopping and transferred money into their e-wallet accounts.

“People are gullible and can be threatened or lured to part with their bank details easily. We need as many safeguards as we can have,” said Surendra Kumar, a senior police officer in New Delhi who busted the gang.

But the biggest problem people face is that police in one state get very little cooperation from those in another state in digital-crime complaints, said Rakshit Tandon, a cybersecurity expert who trains police, military members and school students.

“Only in big-ticket frauds will police departments from different states coordinate their investigations,” Tandon said. “If a person loses a relatively smaller amount digitally, the case won’t go far. Even though that amount may mean a lot in that person’s life.”

For more details visit http://editors.cis-india.org/internet-governance/news/washington-post-january-14-2017-rama-lakshmi-millions-of-indians-move-from-cash-to-digital-payments

Comments on the Proposed ICANN Community Anti-Harassment Policy

praskrishna — 2017-01-13T15:40:08Z

For more details visit http://editors.cis-india.org/internet-governance/files/comments-on-icann-anti-harassment-policy.pdf

Digital Disruption or Digital Black Money?

praskrishna — 2017-01-10T15:39:36Z

Dr. Anupam Saraph, Professor and Future Designer will give a talk on digital disruption and digital black money on January 30, 2017 at the Centre for Internet & Society (CIS) office in Bangalore.

The digital disruption of payments in the economy is regarded as a magic wand to cure financial exclusion, reduce costs of cash, and end money laundering and black money. At the centre of the digital revolution are new mechanisms to on-board customers, undertake money transfers, alteration of players in the payment ecosystem and a significant change in regulatory oversight. Does this alteration of the financial ecosystem result in serving the unserved and underserved? Does going cashless and holding digital cash end black money, money laundering, and financial exclusion? Or is this actually generating digital black money through digital money laundering and actually causing financial exclusion? Is digital black money even possible? Does the digital money have no colour?

Dr. Anupam Saraph

Anupam Saraph is a Professor of Systems, Governance and Decision Sciences, Environmental Systems and Business he mentors students and teaches systems, information systems, environmental systems and sustainable development at universities in Europe, Asia and the Americas. He has worked with the Rensselaer Polytechnic Institute, Rijksuniversitiet Groningen, RIVM, University of Edinburgh, Resource Use Institute, Systems Research Institute among others. He was also the Governance and IT Advisor to former Goa Chief Minister Manohar Parrikar. Dr. Saraph has also served as the Vice Chairman of the Infotech Corporation of Goa, held CxO level positions and serves as an independent director on the boards of Public and Private Sector companies and NGOs including the Moneylife Foundation.

Dr. Saraph is also actively engaged in civil society where he participates in several environmental, resource and nature conservation initiatives, has authored draft legislations for river and natural resource conservation, right to good governance and has contributed to governance, election and democratic reforms. Dr. Saraph is a regular columnist in newspapers and writes on issues of governance, future design, technology and education from a systems perspective.

As a future designer and recognized as a global expert on complex systems he helps individuals and organisations understand and design the future of their worlds. Together they address the toughest challenges, accomplish missions and achieve business goals. He also supports building capacity to address the challenges of today as well as to build future designs through teams and effective leadership. Since the eighties Dr. Saraph has modeled complex systems of cities, countries, regions and even the planet. His models have been awarded internationally and even placed in 10-year permanent exhibitions.

Dr Saraph works with business and government executives, civil society leaders, politicians, generals, civil servants, police, trade unionists, community activists, United Nations and ASEAN officials, judges, writers, media, architects, designers, technologists, scientists, entrepreneurs, board members and business leaders of small, mid and large single and trans-national companies, religious leaders and artists across a dozen countries and various industry sectors to help them and their organisations succeed in their missions. He advises the World Economic Forum through its Global Agenda Council for Complex Systems and the Club of Rome, Indian National Association as a founder life member.

Dr Saraph holds a PhD in designing sustainable systems from the faculty of Mathematics and Natural Sciences of the Rijksuniversiteit Groningen, the Netherlands.

For more details visit http://editors.cis-india.org/internet-governance/events/digital-disruption-or-digital-black-money

Myanmar Digital Rights Forum proposes a path away from 66(d)

praskrishna — 2017-01-10T15:09:21Z

More than 55 representatives from technology companies, government, media and civil society organizations gathered at the innovation lab Phandeeyar to participate in the Myanmar Digital Rights Forum this morning. The two-day event was organized to address critical digital rights challenges in Myanmar.

This was published by Coconuts Yangon on December 14, 2016. Sunil Abraham was quoted.

Nica Dumlao from the Philippine Internet Freedom Alliance speaks at the forum. Photo: Phandeeyar

Over the last two years, Myanmar has experienced a connectivity revolution; tens of millions of people have hopped onto the web all at once. However, recent events have highlighted how vulnerable people in Myanmar are when communicating and sharing information online.

Daw Ei Myat Noe Khin, a Phandeeyar associate and co-organizer of the event, explained: “Myanmar’s laws and regulations were changed to enable millions of people to get connected. However, not nearly enough has been done to protect the rights of these users. Urgent legislative action is needed to ensure that the rights and freedoms that the Myanmar people now enjoy offline are also protected when they are using the internet.”

Rights groups and media organizations have noted the threats to freedom of speech posed by the arrest under Article 66(d) of Myanmar’s Telecommunications Law of journalists and ordinary citizens for Facebook posts.

Nay Phone Latt, the former political prisoner and free speech activist who now serves in the Yangon Region parliament, called for changes to Myanmar’s laws, which are now being used to sue people for as actions as little as leaving a comment on social media.

“Even though I am now an MP, my opinion on free speech has not changed,” he said.

He also called on Union-level lawmakers to attend similar forums and ultimately improve the laws relating to digital rights.

However, Article 66(d) is only one of many issues that need to be addressed. According to speakers at the forum, other critical issues include information privacy, the right to information, online hate speech, cyberbullying, revenge porn and phishing scams.

Vicky Bowman, director of Myanmar Center for Responsible Business, recounted the story from a few years ago of an NGO leader who gave away $80,000 of his organization’s money when he was duped by a phishing scam online.

“Are Myanmar people aware of digital rights? I don’t think so. They’re excited about SIM cards and gadgets, but they’re probably not reading the terms and conditions.”

There is still a lot to worry about in the realm of digital rights in Myanmar, she said.

In this challenging environment, the forum’s attendees are working to develop specific policy recommendations, strategies and campaigns to ensure digital rights to the people of Myanmar.

“The benefits of connectivity won’t be realized if people are scared to use the internet. The objective of the Myanmar Digital Rights Forum is to raise awareness about the importance of these issues and to develop concrete plans to address them,” said Daw Htaike Htaike Aung, executive director of Myanmar ICT for Development Organization (MIDO).

Some speakers offered the experiences of other countries as models for what Myanmar might be able to do to protect internet users. Sunil Abraham, the executive director of the Bangalore-based Center for Internet and Society, urged against thinking of companies and governments as monoliths. There are people in government, he said, who do have the rights of citizens in mind. He also advised digital rights campaigners to pursue change on all sides of the political spectrum, just as free-software activists found support in India’s communist and nationalist parties.

Ms Cheekay Cinco, a program manager for Engage Media, said: “This is not a Myanmar problem. Hyper-connectivity in the region has led to greater criminalization of online activities. Over the years, spaces in Southeast Asia have been created to talk about these issues. We can only spark development and change when these spaces continue to flourish and have participation from different sectors.”

For more details visit http://editors.cis-india.org/internet-governance/news/coconuts-yangon-december-14-2016-myanmar-digital-rights-forum-proposes-a-path-away-from-66d

December 2016 Newsletter

praskrishna — 2017-01-28T12:02:23Z

Welcome to the December 2016 newsletter of the Centre for Internet and Society (CIS).

Dear readers,

Wishing you a happy and prosperous New Year. As the New Year unfolds we are glad to bring you developments from the last month of the year gone by for your reference. Thank you for reading the Centre for Internet and Society's (CIS) December 2016 newsletter.

Previous issues of the newsletters can be accessed here.

Highlights
Telugu Theatre scholar Pranay Raj Vangari created a record by completing a challenge that is famous worldwide in Wikimedia community - "100 Days-100 Articles". Rohini Lakshané attended the 25th session of the World Intellectual Property Organization Standing Committee on the Law of Patents held in Geneva from December 12 - 15, 2016 and made a statement on Future Work. She also submitted a statement on the Assessment of Inventive Step to Secretariat for the WIPO Standing Committee for the Law of Patents, Twenty Fifth Session. CIS submitted inputs to the Working Group on Enhanced Cooperation on Public Policy Issues Pertaining to the Internet (WGEC) on 15 December 2016. The WGEC sought inputs on two questions that will guide the next meeting of the Working Group which is scheduled to take place on the 26-27 January 2017. Udbhav Tiwari wrote an article on the technical, legal and jurisdictional issues around the recent Twitter and email hacks claimed by the ‘Legion Crew’, and what can targeted entities do to better protect themselves. Amber Sinha wrote a blog entry that focuses on network management, in general, and deep packet inspection, in particular and how it impacts the privacy of users. CIS is pleased to bring you the second title of the CIS Papers series. This report by P.P. Sneha comes out of an extended research project supported by the Kusuma Trust. The study undertook a detailed mapping of digital practices in arts and humanities scholarship, both emerging and established, in India. Zeenab Aneez wrote a report that examines the digital transition underway at three leading newspapers in India, the Dainik Jagran in Hindi, English-language Hindustan Times, and Malayala Manorama in Malayalam. Our focus is on how they are changing their newsroom organisation and journalistic work to expand their digital presence and adapt to a changing media environment. CIS made a submission on the Consultation Note on Model for Nation-wide Interoperable and Scalable Public Wi-Fi Networks published by the TRAI on November 15, 2016. Our analysis of the solution proposed in the Note, in brief, is that there is no need of a solution for non-existing interoperability problem for authentication and payment services for accessing public Wi-Fi networks.

CIS in the news:

Lack of clarity about cashless and online transactions makes digital payments more worrisome (Neha Alawadhi; Economic Times; December 1, 2016).
Changing the typographic landscape of a country: one letter at a time (Pooja Saxena; Storyweaver; December 1, 2016).
No laws in India to protect customers if they lose money during digital transactions (Alnoor Peermohamed; Business Standard; December 2, 2016).
Fake Narendra Modi apps aplenty, but it’s up to users to protect themselves (Indian Express; December 2, 2016). Also see Nandini Yadav's blog post in BGR on December 3, 2016.
Your digital wallet can be a ‘pickpocket’ (The Hindu; December 5, 2016).
Most popular smartphone apps inaccessible to disabled: Study (ET Telecom; December 7, 2016).
English gottila,job illa (Regina Gurung; Indian Express; December 7, 2016).
Bumpy road ahead for RFID Tags in vehicles (Smriti Sharma Vasudeva; Statesman; December 7, 2016).
India's Tech Policy Entrepreneurs (Rohin Dharmakumar; The Ken; December 8, 2016).
Vijay Mallya cries foul after his Twitter and email accounts are hacked (Alnoor Peermohamed; Business Standard; December 10, 2016).
విజ్ఞాన నిధి వికీపీడియా.. (Namaste Telangana; December 11, 2016).
వికీపీడియాతో విజ్ఞాన విప్లవం (Andhra Bhoomi; December 11, 2016).
Wikipedia is a Newspaper (Namaste Telangana; December 11, 2016).
Wikipedian Pavan Santhosh says Telugu Wikipedians are creating Knowledge revolution (in Telugu) (Andhra Jyoti; December 12, 2016).
Wikipedia Event in Mangalore (Vijaya Karnataka; December 18, 2016).
With power, phone and internet services affected, Chennai is still recovering from Cyclone Vardah (Vinita Govindarajan and Sruthisagar Yamunan; Scroll.in; December 20, 2016).

पीजी जूलॉजी विभाग में एक दिवसीय समागम का आयोजन (Hindustan, December 20, 2016).

How private companies are using Aadhaar to try to deliver better services (but there's a catch) (M. Rajshekhar; Scroll.in; December 22, 2016).
‘IT hub’ K’taka ranks No 12 in e-deals (Christin Philip Mathew; New Indian Express; December 27, 2016).
India’s ruling party takes online abuse to a professional level (Samanth Subramanian; December 31, 2016).

CIS members published the following articles:

Digital native: The View from My Bubble (Nishant Shah; Indian Express; December 4, 2016).
Indian Newspapers' Digital Transition (Zeenab Azeez; Reuters Institute for the Study of Journalism; December 9, 2016).
The Digital Protection of Traditional Knowledge: Questions Raised by the Traditional Knowledge Digital Library in India (Sunil Abraham and Vidushi Marda; GIS Watch; December 9, 2016)
The Curious Case of Poor Security in the Indian Twitterverse (Udbhav Tiwari; The Wire; December 17, 2016).
Pranay Raj record in 100 days-100 articles (Pavan Santhosh; Andhra Jyoti; December 17, 2016).
Digital Native: People Like Us (Nishant Shah; Indian Express; December 18, 2016).
వంద రోజులు.. వంద వ్యాసాలు - తెలుగు వికీపీడియాలో మోత్కూరు యువకుని రికార్డు (100 Days...100 Articles: Wikipedian from Motkur created record in Telugu Wikipedia) (Pavan Santhosh; Andhra Jyoti; December 18, 2016).

Jobs

CIS is seeking applications for:

-------------------------------------
Accessibility & Inclusion
-------------------------------------
India has an estimated 70 million persons with disabilities who don't have access to read printed materials due to some form of physical, sensory, cognitive or other disability. As part of our endeavour to make available accessible content for persons with disabilities, we are developing a text-to-speech software in 15 languages with support from the Hans Foundation. The progress made so far in the project can be accessed here.

Event Co-organized

International Accessibility Summit of Shaastra 2017 (Organized by CIS and IIT, Madaras; December 31 - January 3, 2017). Nirmita Narasimhan was a panel moderator.

Participation in Event

Best Practices in Digital Accessibility (Organized by IIM, Bangalore; December 19, 2016). Nirmita Narasimhan was a panelist.

-----------------------------------
Access to Knowledge
-----------------------------------
Our Access to Knowledge programme currently consists of two projects. The Pervasive Technologies project, conducted under a grant from the International Development Research Centre (IDRC), aims to conduct research on the complex interplay between low-cost pervasive technologies and intellectual property, in order to encourage the proliferation and development of such technologies as a social good. The Wikipedia project, which is under a grant from the Wikimedia Foundation, is for the growth of Indic language communities and projects by designing community collaborations and partnerships that recruit and cultivate new editors and explore innovative approaches to building projects.

►Copyright and Patent

Statements

25th Session of the WIPO SCP: Statement on Assessment of Inventive Step (Rohini Lakshané; December 15, 2016).
25th Session of the WIPO SCP: Statement on Future work (Rohini Lakshané; December 16, 2016).

Participation in Event

7th Emerging Markets Finance Conference (Organized by Finance Research Group in association with Vanderbilt Law School; Mumbai; December 15, 2016). Anubha Sinha was a panelist.

►Wikipedia

As part of the project grant from the Wikimedia Foundation we have reached out to more than 3500 people across India by organizing more than 100 outreach events and catalysed the release of encyclopaedic and other content under the Creative Commons (CC-BY-3.0) license in four Indian languages (21 books in Telugu, 13 in Odia, 4 volumes of encyclopaedia in Konkani and 6 volumes in Kannada, and 1 book on Odia language history in English).

Blog Entries

Freedom in Feb — an awareness increasing campaign (Tito Dutta; December 8, 2016).
A Shortcut to Freedom (Tito Dutta; December 14, 2016).
Marathi Wikipedia Edit-a-thon in Kolhapur (Subodh Kulkarni; December 16, 2016).
Ongoing Proof-reading Effort by ALC Student Wikimedians in Telugu Wikisource (Pavan Santosh and Ting-Yi Chang; December 30, 2016).

►Openness

Our work in the Openness programme focuses on open data, especially open government data, open access, open education resources, open knowledge in Indic languages, open media, and open technologies and standards - hardware and software. We approach openness as a cross-cutting principle for knowledge production and distribution, and not as a thing-in-itself.

Submission

Comments on the Draft National Policy on Software Products (Anubha Sinha, Rohini Lakshané, and Udbhav Tiwari; December 11, 2016).

-----------------------------------
Internet Governance
-----------------------------------

As part of its research on privacy and free speech, CIS is engaged with two different projects. The first one (under a grant from Privacy International and IDRC) is on surveillance and freedom of expression (SAFEGUARDS). The second one (under a grant from MacArthur Foundation) is on restrictions that the Indian government has placed on freedom of expression online.

►Privacy

Blog Entries

Privacy and Security Implications of Public Wi-Fi - A Case Study (Vanya Rakesh; December 9, 2016).
Habeas Data in India (Vipul Kharbanda and edited by Elonnai Hickok; December 10, 2016).
Workshop Report - UIDAI and Welfare Services: Exclusion and Countermeasures (Vanya Rakesh; December 14, 2016).
Enlarging the Small Print: A Study on Designing Effective Privacy Notices for Mobile Applications (Meera Manoj; December 14, 2016).
Protection of Privacy in Mobile Phone Apps (Hitabhilash Mohanty and Edited by Leilah Elmokadem; December 15, 2016).
ISO/IEC JTC 1 SC 27 Working Group Meetings - A Summary (Vanya Rakesh; December 16, 2016).
Deep Packet Inspection: How it Works and its Impact on Privacy (Amber Sinha; December 16, 2016).

Participation in Events

Industry Consultation Panel on Data Retention - DSCI (Organized by Data Security Council of India; New Delhi; November 23, 2016). This was mirrored on the website on December 6, 2016. Udbhav Tiwari was a panelist.
11th DSCI-NASSCOM Annual Information Security Summit 2016 (Organized by DSCI and NASSCOM; December 14, 2016). Udbhav Tiwari was a panelist.
Workshop on Center for IT and Society (Organized by IIT, Delhi; December 20, 2016). Amber Sinha attended the event.

►Free Speech & Expression

Blog Entries

ISIS and Recruitment using Social Media – Roundtable Report (Vidushi Marda, Aditya Tejus, Megha Nambiar and Japreet Grewal; December 15, 2016).
Inputs to the Working Group on Enhanced Cooperation on Public Policy Issues Pertaining to the Internet (WGEC) (Sunil Abraham and Vidushi Marda, with inputs from Pranesh Prakash; December 17, 2016).

Participation in Event

Myanmar Digital Rights Forum (Organized by Phandeeyar, You Can Do IT, Engage Media and Myanmar Centre for Responsible Business with support from the Embassy of Sweden; December 14 - 15, 2016). Sunil Abraham was a speaker.

►Big Data

Participation in Events

"Decoding the Digital" (Organized by Centre for IT and Public Policy at IIIT; Bangalore; December 12 - 14, 2016). Vanya Rakesh attended the event.
The EU and Free Flows of Data - Data Protection, Trade and Law Enforcement (Organized by the Department of European Studies; Bangalore; December 14, 2016). Ameila Andersdotter gave a talk.

Blog Entry

The Technology behind Big Data (Geethanjali Jujjavarapu and Udbhav Tiwari; December 1, 2016).

►Cyber Security

Blog Entries

Developer team fixed vulnerabilities in Honorable PM's app and API (Bhavyanshu Parasher; December 4, 2016).
Incident Response Requirements in Indian Law (Vipul Kharbanda; December 28, 2016).
Mapping of India’s Cyber Security-Related Bilateral Agreements (Leilah Elmokadem and Saumyaa Naidu; December 29, 2016).
Mapping of Sections in India’s MLAT Agreements (Leilah Elmokadem and Saumyaa Naidu; December 31, 2016).

Event Organized

Multistakeholder Consultation on Encryption (Organized by CIS with ORF and Takshashila Institution; TERI, Bangalore; December 17, 2016).

-----------------------------------
Telecom
-----------------------------------
CIS is involved in promoting access and accessibility to telecommunications services and resources, and has provided inputs to ongoing policy discussions and consultation papers published by TRAI. It has prepared reports on unlicensed spectrum and accessibility of mobile phones for persons with disabilities and also works with the USOF to include funding projects for persons with disabilities in its mandate:

Submission

CIS Submission to TRAI Consultation Note on Model for Nation-wide Interoperable and Scalable Public Wi-Fi Networks (Japreet Grewal, Pranesh Prakash, Sharath Chandra, Sumandro Chattapadhyay, Sunil Abraham, and Udbhav Tiwari, with expert comments from Amelia Andersdotter; December 12, 2016).

-----------------------------------
Researchers at Work
-----------------------------------
The Researchers at Work (RAW) programme is an interdisciplinary research initiative driven by an emerging need to understand the reconfigurations of social practices and structures through the Internet and digital media technologies, and vice versa. It aims to produce local and contextual accounts of interactions, negotiations, and resolutions between the Internet, and socio-material and geo-political processes:

Research Paper

Mapping Digital Humanities in India (P.P. Sneha; December 30, 2016).

-----------------------------------
About CIS
-----------------------------------
The Centre for Internet and Society (CIS) is a non-profit organisation that undertakes interdisciplinary research on internet and digital technologies from policy and academic perspectives. The areas of focus include digital accessibility for persons with disabilities, access to knowledge, intellectual property rights, openness (including open data, free and open source software, open standards, open access, open educational resources, and open video), internet governance, telecommunication reform, digital privacy, and cyber-security. The academic research at CIS seeks to understand the reconfigurations of social and cultural processes and structures as mediated through the internet and digital media technologies.

► Follow us elsewhere

Twitter: http://twitter.com/cis_india
Twitter - Access to Knowledge: https://twitter.com/CISA2K
Twitter - Information Policy: https://twitter.com/CIS_InfoPolicy
Facebook - Access to Knowledge: https://www.facebook.com/cisa2k
E-Mail - Access to Knowledge: a2k@cis-india.org
E-Mail - Researchers at Work: raw@cis-india.org
List - Researchers at Work: https://lists.ghserv.net/mailman/listinfo/researchers

► Support Us

Please help us defend consumer and citizen rights on the Internet! Write a cheque in favour of 'The Centre for Internet and Society' and mail it to us at No. 194, 2nd 'C' Cross, Domlur, 2nd Stage, Bengaluru - 5600 71.

► Request for Collaboration

We invite researchers, practitioners, artists, and theoreticians, both organisationally and as individuals, to engage with us on topics related internet and society, and improve our collective understanding of this field. To discuss such possibilities, please write to Sunil Abraham, Executive Director, at sunil@cis-india.org (for policy research), or Sumandro Chattapadhyay, Research Director, at sumandro@cis-india.org (for academic research), with an indication of the form and the content of the collaboration you might be interested in. To discuss collaborations on Indic language Wikipedia projects, write to Tanveer Hasan, Programme Officer, at tanveer@cis-india.org.

CIS is grateful to its primary donor the Kusuma Trust founded by Anurag Dikshit and Soma Pujari, philanthropists of Indian origin for its core funding and support for most of its projects. CIS is also grateful to its other donors, Wikimedia Foundation, Ford Foundation, Privacy International, UK, Hans Foundation, MacArthur Foundation, and IDRC for funding its various projects.

For more details visit http://editors.cis-india.org/about/newsletters/december-2016-newsletter

India’s ruling party takes online abuse to a professional level

praskrishna — 2016-12-31T02:19:14Z

Indian prime minister Narendra Modi’s Bharatiya Janata Party (BJP) employs an army of trolls to harass and intimidate critics through social media, a new book claims.

The article by Samanth Subramanian was published in the National on December 31, 2016. Pranesh Prakash was quoted.

I Am a Troll: Inside the Secret World of the BJP’s Digital Army, by the journalist Swati Chaturvedi, alleges that the party’s social media warriors carry out organised harassment, threatening critics of the BJP with assault, sexual violence and even murder.

Although other parties also have social media units, the BJP’s is particularly well organised and vociferous, Chaturvedi wrote.

The BJP social media cell is active on Twitter and Facebook, as well as in the comments sections of articles on news websites, Chaturvedi found. Some of the abusive PRO-BJP Twitter handles are still followed by Mr Modi’s official Twitter account.

I Am a Troll is based largely upon the account of Sadhavi Khosla, now an activist but formerly a volunteer for two years in the BJP’s social media cell, which went into top gear during the parliamentary elections in 2014 when Mr Modi beat the incumbent Congress party led by Sonia Gandhi and her son Rahul.

Mr Modi campaigned on a platform of fervent nationalism, drawing upon the BJP’s Hindu chauvinist credentials to attract votes. His party’s social media cell responded accordingly.

"It was a never-ending drip feed of hate and bigotry against the minorities, the Gandhi family, journalists on the hit list, liberals, anyone perceived as anti-Modi," Ms Khosla told Chaturvedi.

The BJP has responded to the claims made in the book by accusing Ms Khosla of political bias, saying she "supports the Congress [and] has all reasons to publish unsubstantiated claims". -In fact, she has never revealed her own political leanings, or even whether she has any.

Arvind Gupta, the head of the BJP’s information technology cell, denies the party encouraged trolling or that Ms Khosla had been a member of any BJP unit.

By way of evidence, Ms Khosla shared with Chaturvedi screenshots of instructions that were purportedly sent by Mr Gupta to the operators of the social media cell. "If there was even an unfavourable mention of [Modi] anywhere, Gupta’s digital tracking tools would pick it up and the pack of hyena-like trolls would descend," Ms Khosla said.

One specific campaign cited in I Am a Troll took place in November last year, after the actor Aamir Khan, speaking as the chief guest at a journalism awards ceremony, remarked upon the growing intolerance in India. "There is a growing sense of disquiet and despondency," he said.

Ms Khosla said the BJP’s social media cell was instructed to launch an all-out attack on Khan. She and her colleagues were also asked to spread a petition calling upon SnapDeal, a shopping website, to drop Khan as its brand ambassador.

"I realised that my hero had become a ‘Muslim’," Ms Khosla said in the book. "For me he had just been an Indian actor. I felt like my country was changing."

SnapDeal cut its ties with Khan in February. Ms Khosla, who said she had been growing increasingly uncomfortable with the social media cell’s tactics, quit not long after.

"I simply could not follow directions anymore when I saw rape threats made against female journalists," she said. "Every day some new person was a target and they would attack like a swarm of bees with vile sexual innuendoes, slander, rape and death threats."

Chaturvedi’s book calls for social media companies and police agencies to take such threats more seriously.

"In the United States, which is a beacon for free speech laws, thousands are arrested each year — and the courts uphold these allegations as ‘actionable’ — based on complaints from people who have received violent threats on social media," she wrote.

"Hate speech, targeted harassment, threats of rape with graphic details of assault, incitement to violence — all this is ‘actionable’ too but our police does not act."

Pranesh Prakash, the policy director at the Centre for internet and Society, a Bengaluru-based non-profit organisation, noted that although there are no Indian laws specifically against abusive online behaviour, the general laws that deal with verbal assault cover online cases as well.

"But I’m not sure how much these cases can be taken forward, given jurisdictional problems," Mr Prakash told The National.

When a person complains to police about online abuse, "the first step would be to establish against whom the case is being made, and doing that is difficult", he said.

Since most social media companies are based in the US, police agencies would have to approach India’s foreign ministry which could then invoke a bilateral treaty to gain this information.

"This can take several months if not longer," Mr Prakash said. "And most police stations are not equipped to handle such treaty-based cases."

"Even if the police takes such complaints seriously — and it’s not always clear that they do — there’s no easy way to proceed."

For more details visit http://editors.cis-india.org/internet-governance/news/the-national-december-31-2016-samanth-subramanian-indias-ruling-party-takes-online-abuse-to-a-professional-level

‘IT hub’ K’taka ranks No 12 in e-deals

praskrishna — 2016-12-28T01:54:33Z

Karnataka may be dubbed the ‘IT hub’ of the country but when it comes to e-governance transactions, the state clearly has a long way to go. Statistics from Union government web portal Electronic Transaction Aggregation and Analysis Layer (etaal), which manages e-transactions undertaken by e-governance projects, suggests that Karnataka ranks 12th in the country with just 5.66 crore e-transactions this year as of Monday.

The article by Christin Mathew Philip was published in the New Indian Express on December 27, 2016. Sunil Abraham was quoted.

Among the states with maximum number of e-transactions this year so far are Andhra Pradesh, topping the list with 101 crore e-transactions followed by Telangana (80.35 crore e- transactions) and Kerala (75.30 crore e-transactions).

Karnataka’s poor standing on the e-governance transactions front can largely be attributed to a low number of e-services - 86 - in sharp contrast to Andhra Pradesh’s 250. The e-services include registration of births and deaths, land record registration, utility, bill payments and other government related services.

This clearly underlines the fact that Karnataka needs to include more government services online and also create more awareness among the people about the existing e-governance projects to achieve ‘digital India’ and cashless payment system.

When contacted, Karnataka’s IT minister Priyank Kharge said: “Karnataka is a pioneer in e-governance projects, which includes Bhoomi, Khajane and Mobile-One. Mobile-One is offering nearly 4,500 services, both government and private services at the finger tip. All these initiatives have become the model for other states.”

Statistics from Union government web portal Electronic Transaction Aggregation and Analysis Layer (etaal), which manages e-transactions undertaken by e-governance projects, suggests that Karnataka ranks 12th in the country.

Commenting on this, IT Minister Priyank Kharge said, “The Centre has also recently ranked Karnataka at No.13 in ease of doing business in the country. I don’t know how they are coming up with such rankings without considering the merit.”

Sunil Abraham, executive director of the Centre for Internet Society, a Bengaluru based-research organisation, said: “The government should make e-services friendly to the citizens and also make it more transparent.” He said implementation of proposed Electronic Service Delivery Bill, which will make it mandatory for every government organisation to deliver public services online at a stipulated period, will bring more accountability and attract more people to use government e-services.

For more details visit http://editors.cis-india.org/internet-governance/news/new-indian-express-december-27-2016-christin-philip-mathew-it-hub-karnataka-ranks-12-in-e-deals

Nirmita Narasimhan appointed to the Communication Policy Research (CPRsouth) Board

praskrishna — 2016-12-26T00:27:47Z

Dr. Nirmita Narasimhan has been appointed to the CPR South Board for a term of 3 years.

New appointments to the CPRsouth board were ratified during the recent meeting at CPRsouth 2016 in Zanzibar, and a copy of these minutes will be circulated to new board members in the New Year. CPRsouth revealed regional and gender representation improved as a result of the selection of new board members, and the consideration given to the matter of representation by existing board members who cast their votes meant that there was no need for quotas. The CPRsouth board now comprises nine African members and 11 Asians, and 11 of its members are male and nine are female.

New board members’ terms run until September 2020 under its new Chairperson, Prof Rohan Samarajiva (Founding Chair, LIRNEasia), and outgoing Chairperson, Prof Alison Gillwald (Executive Director, Research ICT Africa), will remain on as Vice-Chairperson.

The secretariat will be in touch again in the New Year with details of the upcoming CPRsouth 2017.

For more details visit http://editors.cis-india.org/accessibility/news/nirmita-narasimhan-appointed-to-the-communication-policy-research-cprsouth-board

Workshop on Center for IT and Society

praskrishna — 2016-12-23T14:05:00Z

This workshop was held at IIT, Delhi on December 20, 2016. Amber Sinha attended the workshop. The meeting focused on the curriculum and the way forward, especially with respect to the industry requirements.

Session 1 (11:00 - 13:00*): Quick recap of the earlier workshop. Description and focus area of the center. Feedback about the interdisciplinary program in IT and Social Sciences.
Session 2 (14:00 - 16:00)*: Discussion on industry requirement and absorption criterion.

For more details visit http://editors.cis-india.org/internet-governance/news/workshop-on-center-for-it-and-society

How private companies are using Aadhaar to try to deliver better services (but there's a catch)

praskrishna — 2016-12-23T02:04:59Z

They are gathering more information on you.

The article by M. Rajshekhar was published in Scroll.in on December 22, 2016. Sunil Abraham was quoted.

In 2006, Ajay Trehan set up AuthBridge, a background verification company in Gurgaon. That was a time when business process outsourcing was booming. Global companies like Citibank were relocating back-office functions to India. Outfits like AuthBridge sprang up in response to help these companies find qualified staffers. They vetted applicants by running identity checks, verifying education and employment records, doing reference checks and more.

Ten years later, AuthBridge’s client profile has changed. With rising insecurity over crimes in India’s cities, like the December 2012 gangrape in Delhi, or the rape of a young woman in an Uber taxi in 2014, local companies – sizeably from e-commerce and businesses with delivery services – have also started vetting employees and partners to check if they have any criminal history. “Now, we have about 700-800 clients,” said Trehan. “Of them, just 20%-30% are foreign companies.”

AuthBridge’s verification process has changed too. Earlier, its employees used to physically verify the credentials of an applicant by travelling to her school or college, meeting her previous employer, vetting her identity papers with the government department that issued them, and so on.

Now they simply run a query on an electronic database.

Aadhaar enters the private sector

Aadhaar, as India’s Unique Identity Project is called, aims to give a 12-digit unique identity number to all residents by collecting their fingerprint and iris scans. As of September, its database, maintained by the Unique Identity Authority of India, held the names, addresses and biometric information of more than 105 crore people.

The project was created by the United Progressive Alliance government in 2009 to reduce leakages in the country’s welfare programmes.

But, quietly, a range of private sector companies have started using it. This includes verification firms like Authbridge, banks like HDFC, telecommunications companies like Reliance Jio, among others.

So far, most discussions on Aadhaar have focused on its utility for welfare delivery and the risk of government surveillance. But as private sector companies incorporate Aadhaar into their systems, fresh questions and concerns are emerging about what this means. A recent tweet by a journalist that went viral encapsulated these concerns.

To understand the rewards and risks of the use of Aadhaar by private companies, here is a detailed look at how they are using it.

Five ways of using Aadhaar

The first way in which companies are using Aadhaar is pure authentication. This is how Authbridge uses Aadhaar. It sends a name and Aadhaar number to the Unique Identity Authority’s server, which responds to say whether they have matched.

Apart from background verification companies, Aadhaar-based authentication can also be used by employers. “A factory hiring women or a security agency hiring guards and wanting to be sure these people are who they claim to be,” said Pramod Varma, the chief architect and technology advisor for the Aadhaar project.

It could also be used by regulated entities with strong Know Your Customer or KYC norms like banks or telecommunications companies. In the old days of branch-based banking, KYC was not a problem, said Varma, since “the bank manager knew all his customers”. But now, KYC is much harder since banks have moved to “core banking with millions of accounts in the server”. Instant Aadhaar-authentication, he said, is useful for verifying customers.

The second is authentication plus. Here, at the time of authentication, a company also downloads the customer’s data from the Aadhaar database. This is what companies like Reliance Jio are doing.

When a customer provides his Aadhaar number to the company, the company not only runs a query on the Aadhaar database to verify the name and number, it also downloads other information about the customer held on the server, like address, date of birth and gender.

This data can be used to electronically fill out the Know Your Customer forms, replacing what is right now a manual process, said Anupam Varghese, the head (products) of Eko India Financial Services, a financial services startup in the phone banking and remittances segment.

It is a disruptive proposition that companies find useful. In India, the cost of enrolling customers is so high, said Abhishek Sinha, the founder of Eko, that it prices a set of financial products beyond the reach of most Indians. “Authenticating a credit card customer and vetting her identity papers will cost anywhere between Rs 150-Rs 200,” he said. A company can recover that investment only if the customer racks up at least Rs 10,000 on the card, assuming a 2% margin on card transactions.

With its instant authentication and automatic form filling, Aadhaar-based electronic Know Your Customer, said Sinha, slashes those costs and makes it easier for companies to offer financial products which become viable even with a smaller volume of transactions. This allows the growth of financial products for less affluent customer segments.

Subsequently, these companies might pad up those databases by adding their own data. This is a third model of using Aadhaar: authentication plus private database.

For instance, TrustID, a mobile app which claims it can verify “your maid, driver, electrician, tutor, tenant and all service professionals” using Aadhaar, wants users to rate the services of the people they eventually employ. In effect, it is creating a private database.

Others, like Eko, are adding financial transaction histories to the Aadhaar data.

While these three uses are built around Aadhaar-based authentication, the remaining three uses – database sharing, data broking, deduplication – pivot around use of just the Aadhaar number. They are based on recent changes in how companies use customer data.

The customer data boom

Customer data has acquired centrality for several Indian companies, particularly startups in e-commerce and financial services.

In some sectors, Varma said, “the cost of switching [between rival companies] is very low,” which heightens the need for customisation. “The better you can serve, they more sticky you get for a customer.” In other sectors, said Varghese, competition chips away at margins. Which is another reason to try and come up with better services and products.

This is where data can help.

In a conversation in October, Nandan Nilekani, software entrepreneur and the first chairperson of the Unique Identity Authority of India, explained why. “Companies like Ola compete with global companies like Uber which have a tremendous advantage in that they have more data – more customers globally – and better algorithms,” he said. If Ola has 5 million customers, Uber has 100 million. Which means Uber’s algorithms – thanks to pattern recognition and machine learning – will be more accurate.

For all these reasons, said Varma, companies in a handful of business verticals are trying to create “a 360 degree view of their customer”.

What has enabled this is a couple of technological trends. The ability to store and process data, said Nilekani, has gone up enormously in the last 15 years. At the same time, data itself has proliferated as electronic devices like mobile phones create records of voice, photos, messages and the locations of customers.

“All this is realtime data. So, on scale, speed and frequency, we have seen a jump,” said Nilekani.

This rising appetite for data is resulting in a couple of novel outcomes.

Enter, the sharing of customer data

Indian companies have begun sharing databases.

A good example is an experimental partnership between Eko, the banking and remittances company, and Capital Float, a financial services startup which gives short term loans.

The two companies worked out an arrangement where Eko shared a part of its database about its distributors with Capital Float. This shared information contained aggregated and anonymised information on distributors and their working capital positions, said Varghese. Capital Float evaluated the database and came back with a list of distributors it could lend to. Eko, then, forwarded these offers to the distributors. After taking their consent, data about the distributors who were interested in the loans was shared with Capital Float.

On the surface, this is a counter-intuitive development: if customer data holds the key to competitive advantage, companies should closely safeguard their data.

But as it turns out, there are strong reasons to share data.

Both Eko and Capital Float, for instance, are small, specialised players in the financial services market which is dominated by banks. Data sharing is one way to compete with banks by offering complementary services to customers.

It is not clear how endemic data-sharing will get. According to Varma, it will be used selectively. “I cannot see organisations sharing databases at will,” he said. “They will be shared only if they can be used to offer an additional service to the client.”

But a programmer who works at iSpirt, a product software evangelising association based in Bangalore, and who did not want to be identified, said the trend will grow. In the financial sector, as new players like mobile wallet companies acquire more customers, banks that refuse to share data will miss out on emergent markets, he said. “Keeping everything behind closed doors – not participating in data exchanges – is now harmful,” he said.

Sunil Abraham, who heads the Centre For Internet and Society, foresees the rise of another kind of data-sharing – by companies that aggregate customer data from multiple sources and market that to clients. These could be data brokers like US-based Acziom, he said. These could also be more specialised firms like medical transcription companies, which simultaneously serve hospitals, insurance and pharmaceutical companies.

The question is: what does all this have to do with Aadhaar?

The utility of Aadhaar

Aadhaar makes it easier to compare and combine diverse databases.

This is what India’s microfinance companies are doing. As Scroll.in reported recently, Microfinance Institutions Network, an association of microlenders, has told its member companies to seed the Aadhaar numbers of their borrowers into their databases. By searching the databases for the Aadhaar number of a prospective borrower, it will be possible to identify if she has already taken too many loans.

This is a scenario Nilekani bristles at. “You do not need Aadhaar for that,” he said. “You can triangulate databases using email or phone number or name.”

But the iSpirt programmer said, “With Aadhaar, the level of certainty is higher than what you would get by using name, phone number or email.” Between databases, the spelling of names might vary. Phone numbers change, especially in a country like India where prepaid mobile connections outnumber postpaid connections. Only a small part of the country’s population uses email. With Aadhaar, said the programmer, it gets easier to correlate databases.

Aadhaar, added Varma, can also be used to clean up databases. Banks, he said, can use the Aadhaar number to create better customer profiles by identifying all accounts owned by a person. This is the fifth use – deduplication.

What it all means

The implications are obvious. A lot of companies already had databases about their customers. Now, as Nilekani said, technology is allowing the collection of ever greater amounts of information about us. The sharing of databases means companies will have ever more detailed customer profiles.

In a sense, we are entering a future where multiple databases – including several that we are not even aware of – will contain information about us. A hospital and an insurance company might share their records. Or intermediary companies, which service both of them, might create their own databases.

This information will materially affect our lives. As already happens online, companies will increasingly base their products on algorithms that parse data about our behaviour and then offer a customised price – which could be geared to serve or exploit us.

These algorithms, as Propublica reported, can be opaque.

In a sense, much of this is a familiar trajectory. The United States too, as the iSpirt programmer said, “saw a lot of irresponsible data sharing without enough control for civilians”.

That is where India is heading as well. As Scroll noted in its article about TrustID, when the company creates scores for the workers who use its app, they might not always be aware of that rating – or be in a position to challenge that rating.

There are large questions here. Who owns the data about you in a company’s database? Take your information in, say, Ola’s database – the address from where you get picked up or dropped, the phone number, the places you visit most often. Is the data owned by you, Ola or the driver? Should you have a say if a company wants to share this data? If you grant permission, how does one ensure it is used correctly?

Right now, as the next story in this series will show, this is a poorly regulated landscape.

This is the third part in a series on the expansion of Aadhaar and the concerns around it. The first two parts can be read here.

We welcome your comments at letters@scroll.in.

For more details visit http://editors.cis-india.org/internet-governance/news/scroll-m-rajshekhar-how-private-companies-are-using-aadhaar-to-deliver-better-services-but-theres-a-catch