Centre for Internet and Society

Response to the Consultation Note on Model for Nation-wide Interoperable and Scalable Public Wi-Fi Networks

praskrishna — 2016-12-11T03:17:38Z

For more details visit http://editors.cis-india.org/telecom/files/response-to-the-consultation-note-on-model-for-nation-wide-interoperable-and-scalable-public-wi-fi-networks

Consultation Note on Model for Nation-wide Interoperable and Scalable Publi Wi-Fi

praskrishna — 2016-12-11T03:02:18Z

For more details visit http://editors.cis-india.org/telecom/files/consultation-note-on-model-for-publi-wifi.pdf

Vijay Mallya cries foul after his Twitter and email accounts are hacked

praskrishna — 2016-12-10T13:50:25Z

The attackers said they were able to access over a gigabyte of data from Mallya's email.

The article by Alnoor Peermohamed was published in Business Standard on December 10, 2016. Sunil Abraham was quoted.

Liquor baron Vijay Mallya on Friday cried foul over his Twitter account being hacked by a group calling itself ‘Legion’. The group is believed to be the same as the one behind the hack of Congress vice-president Rahul Gandhi’s Twitter and e-mail servers last week.

Several tweets alleging that Mallya’s e-mail had been compromised and documents related to his offshore investments and bank accounts had been stolen were made from his official Twitter account in early on Friday.

“Outfit called Legion has hacked my e-mail accounts and are blackmailing me!! What a joke,” Mallya tweeted after seemingly taking back control of his account.

The attackers said they were able to access over a gigabyte of data from Mallya’s e-mail and shared a link for the public to gain access to it. They also tweeted the rest of the information on Mallya would be made public in the coming weeks, targeted at bringing him to justice for committing fraud.

The Twitteratti (the general public on the social networking platform), including several of Mallya’s 5.51 million followers, emerged in support of the hackers, who they proclaimed were working in the interest of the Indian people. Mallya has defaulted Rs 7,200 crores in loans and is being investigated for it.

“The e-mail hack is interesting because it’s the same global pattern. People are following Julian Assange’s advice — transparency should be directly proportional to power. What one really means is, public interest should be preserved,” says Sunil Abraham, executive director at Bengaluru-based Centre for Internet and Society.

While a lot of hacks continue to be carried out for monetary gain through extortion, several Internet vigilante groups have cropped up over the past decade, the most famous being WikiLeaks and more recently Anonymous. As India’s politicians, businessmen and the general public increasingly use technology and the Internet, they too are becoming targets for such hackers.

“If Mallya’s email account is hacked and all we get out of it is gossip, then it’s of no use. But if we as a nation ensure that the law is followed, or laws are improved, or corporate governance is evolved, all of that is positive impact of such an event. So hacktivists have to be very responsible when they do this, otherwise they spoil the name of whistleblowers and so on,” added Abraham.

Mallya is currently wanted by Indian law enforcement agencies and has a non-bailable warrant issued against his name by the court. He has currently exiled himself in the UK and refuses to travel to the country unless offered amnesty. While often denying any wrongdoing, the general public perception among Indians is that the billionaire playboy Mallya portrayed himself to be is guilty.

For more details visit http://editors.cis-india.org/internet-governance/business-standard-alnoor-peermohamed-december-10-2016-vijay-mallya-cries-foul-after-his-twitter-and-email-accounts-are-hacked

Most popular smartphone apps inaccessible to disabled: Study

praskrishna — 2016-12-10T05:12:25Z

Booking cabs, buying food and making payments online seem like they're just a swipe and a tap away, but for millions of disabled Indians, these apps are not designed for them to use.

The article was published by ET Telecom on December 7, 2016. Nirmita Narasimhan was quoted.

Booking cabs, buying food and making payments online seem like they're just a swipe and a tap away, but for millions of disabled Indians, these apps are not designed for them to use.

According to a study conducted by Centre for Internet and Society last month, many of the most-commonly used mobile apps for food delivery, online payments, grocery shopping and transportation were not accessible to the visually challenged. The study covered 22 popular apps. The 2011 census puts the number of disabled in the country at 26 million, while advocacy groups say the real figure is closer to 150 million. Last year, India recorded nearly nine billion downloads of mobile-based applications last year.

"The national policy for universal electronic accessibility says that all IT products and services should be accessible. However, the government is still unable to implement it. Several government apps are inaccessible," said Nirmita Narasimhan, policy director at CIS. CIS's survey of some key government mobile-based applications like MyGov, EPathshala and Prime Minister Narendra Modi's official app found them to be severely lacking. The illiterate, aged and those not proficient in English would also struggle with the apps, the study found. The guidelines for government websites laid out accessibility standards in 2009. The 2013 national policy on universal electronic accessibility clearly upholds equal rights "ensuring that accessibility standards and guidelines and universal design concepts are adopted and adhered to."

However, most commonly-used app fail to follow this. All 22 of the apps studied were privately-owned but not all were fully compliant with universal standards. Of taxi-hailing apps Meru, Ola and Uber, only Uber was completely accessible to the disabled. The others had mis-labelled or unlabeled buttons and graphics.

When it came to food delivery, Zomato was the best at replicating the user experience for disabled people. Swiggy and Foodpanda were difficult for new users, and Freshmenu was completely inaccessible.

Of the marketplace apps, Amazon and Snapdeal were the only accessible ones. Myntra and Flipkart had incorrectly labelled buttons and misleading graphic tags, which made them impossible for the disabled to use. For instance, customers would be able to select the product they wanted to buy but had no way of choosing the quantity, the study said.

Online grocery delivery apps Grofers and Zop Now were hard for the disabled to use, while Big Basket was relatively better though pages change during orders. Online payment portals Paytm, Oxigen and FreeCharge were relatively accessible, the study found.

"Designers, developers and industries need to realize that there are more people out there who use this technology. The market is much bigger and they should work towards being inclusive," said Narasimhan of CIS.

Albinder Dhinda, co-founder of grocery delivery service Grofers, said their app meets all accessibility requirements. "However, the disability tools provided by Google Play Store or the App Store often don't benefit the user and are hard for them to use. We are trying to make it better. Things like online payments won't be accessible to the disabled as those apps are supported by third-party sites, and don't fall within our settings. We're trying to make it better. We're three years behind the US, in the playground they made. It'll be a while before we reach their level," he said.

The national policy for universal electronic accessibility says that all IT products and services should be accessible. However, the government is still unable to implement it. Several government apps are inaccessible

For more details visit http://editors.cis-india.org/accessibility/news/et-telecom-december-7-2016-most-popular-smartphone-apps-inaccessible-to-disabled-study

English gottila,job illa

praskrishna — 2016-12-10T04:47:11Z

Quoted as the ‘golden boy of Karnataka’, after winning two gold medals for India in Special Olympics in 2003 in Dublin, once Aslam Pasha quit his last job as a night watchman a week back.

The article by Regina Gurung was published in the Indian Express on December 7, 2016. Nirmita Narasimhan was quoted.

Even as government services allow disability and sports quota, guess what is keeping this man from being employed? The Queen’s language.

Born and brought up in Bengaluru, Aslam was conceived at home to a home maker mother and a fish stall owner father. Hindi is the only language he can speak and read. Despite being born without functional legs, his love for sports was not hindered. He started participating in wheelchair racing competitions and became fond of shot put.

Tracing and reminiscing his past glories, he tells City Express the beginning and abrupt end of his golden career.

While in his teens, he says, he went to Hubli to participate in a wheelchair racing and shot put competition. After his win there, he was taken to Delhi and introduced to the Special Olympics Committee. He made it to the Special Olympics in Dublin in 2003 and secured two gold medals as a part of the eight-member team.

On his return to the country, he was welcomed with great warmth and was felicitated. He says he even met APJ Abdul Kalam, the then President of India, and received `2 lakh as a reward. He gave the entire sum to his parents. They live in a slum near Soda Factory. His popularity was short lived. Sooner than he realized, people forgot him. He wondered what more could he do with his life. The calls from the committee stopped, he was clueless on what to do next.

In his late 20s, he started applying for various jobs but was rejected for having ‘no communication skill’.“I have been looking for a job from over three years now. I even did a one-year course on data entry at Intel, but everything is useless as I don’t know English,” says Aslam.

‘’Do you mention that you are a gold medalist?” asked City Express.

“Yes I do but I always get the same reply… “You don’t know English, so what is the use?” Aslam replies.

Aslam did not complete his education since he was always keen on sports, says Neel Lama, Aslam’s school’s friend.

“Following Olympics training, most athletes drop out of educational institutions,” says Nirmita Narasimhan, Policy Director of Centre for Internet and Society, who heads the accessibilty and inclusion programme.

Aslam used to go for his night watchman duty in hiding, after his parents fell asleep.

“They tell me it is okay, but I know the difficulties they face,” says Aslam. G N Nagaraj, founder of Karnataka State Disabled and Care Giver’s Federation questions that when cricketers and other Olympians are showered with sponsors, why is the Paralympian who is “five times more deserving”, not offered a job?

On Saturday, Aslam Pasha, had gone to an institution to enroll himself in an English language speaking course.

He was told that he needs to pay `24,000 for the course that also includes the auto fare of the tutor. “How can I pay so much to learn English and then look for a job?” questions Aslam. “But still I desperately want to learn the language,” adds the 30 something Aslam.

“A wheel chair accessy (person who uses wheel chair) is considered 75 per cent disabled and those who are more than 75 per cent disabled can avail for a government pension of `1,200 per month,” says Nagaraj who is working towards the passage of the Rights of Persons with Disability bill.

“The procedure is tiring. A disabled person is expected to travel some 40-50 km and the office stays open from 10am to 12 noon only, so many don’t claim it,” Nirmita adds, who is also visually challenged herself.

“I had approached other institutions, but for reasons unknown they don’t approve of my enrollment, probably because of looks. I had to lie to the English instituition that I would be going to England, and only they they agreed,” Aslam says.

For more details visit http://editors.cis-india.org/accessibility/news/new-indian-express-december-7-2016-regina-gurung-english-gottila-job-illa

Bumpy road ahead for RFID Tags in vehicles

praskrishna — 2016-12-10T04:31:11Z

The government plans to make digital tags in vehicles mandatory to ensure seamless passage at the toll booths, but the implementation of the proposed move may not be so smooth.

The article by Smriti Sharma Vasudeva was published in the Statesman on December 7, 2016. Pranesh Prakash was quoted.

On one hand, the digital tags stand to compromise the safety of the vehicle and the owners, while on the other, majority of automobiles manufacturing companies claim that the vehicles are being equipped with the digital tags since 2013 and it is the implementation of the order that has been grossly ineffective.

Post the recent demonetisation, as a part of the government’s efforts towards a cashless society, Economic Affairs Secretary Shaktikanta Das stated that the union government has advised the automobile manufacturers to provide a digital identity tag in all new vehicles, including cars, to enable electronic payment at all toll plazas and ensure seamless movement at check posts.

He said the provision of Electronics Product Code Global Incorporated (EPCG)-compliant Radio Frequency Identification (RFID) facility in all new vehicles will ensure payment of toll digitally and also avoid the waiting time, and the vehicles will move seamlessly without having to wait at check posts. “This will improve the functioning of toll plaza, digital payments,” Das said.

In fact, the move to mandate all the vehicles with RFID tags was first made in 2013 when the then government made it compulsory to install Radio Frequency Identification (RFID) tags on the medium and heavy motor vehicles through the proposed rule 138A of the Central Motor Vehicle Rules, 1989. However, the same could not be fully implemented for several reasons and was also opposed by public and advocacy groups alike.

In 2013, the Centre for Internet and Society (CIS), a non-profit organisation sent an open letter to the Society of Indian Automobile Manufacturers (SIAM) to urge them not to install RFID tags in vehicles in India as the legality; necessity and utility of RFID tags had not been adequately proven.

The letter stated that such technologies raise major ethical concerns, since India lacks privacy legislation, which could safeguard individual’s data. The letter added that the proposed rule 138A of the Central Motor Vehicle Rules, 1989, mandates that RFID tags are installed in all light motor vehicles in India.

However, section 110 of the Motor Vehicles Act (MV Act), 1988, does not bestow on the Central Government a specific empowerment to create rules in respect to RFID tags. Thus, the legality of the proposed rule 138A is questioned, and we urge you to not proceed with an illegal installation of RFID tags in vehicles until the Supreme Court has clarified this issue.

Speaking to The Statesman, Pranesh Prakash, Policy Director, Centre for Internet and Society said, “Our stand remains the same as it was three years ago when we spoke out against this move: mandating RFID tags in all vehicles is a terrible idea, and a privacy and security nightmare. “It is important to ensure that RFID tagging (and other similar technologies, like automated licence plate readers) do not end up as a means of engaging in mass surveillance and tracking, which would be contrary to the judgments of the Supreme Court in cases like Kharak Singh vs the Union Government.

“The government has not provided any safeguards — such as mandating non-storage of any vehicle-identifying data. The government has asked manufacturers of all vehicles to include trackers, not just for goods vehicles or mass transport vehicles.

“Nor has the government come up with any standards to ensure security of the RFID tags — to prevent unauthorized third parties from tracking you or deducting money from your account. In short, the government should immediately retract its advice to vehicle manufacturers, and should work with experts to fix these problems,” Prakash said.

For more details visit http://editors.cis-india.org/internet-governance/news/statesman-december-7-2016-smriti-sharma-vasudeva-bumpy-road-ahead-for-rfid-tags-in-vehicles

Fake Narendra Modi apps aplenty, but it’s up to users to protect themselves

praskrishna — 2016-12-10T04:24:24Z

The app, hosted on Google Play store, automatically gets excessive permission including full network access and ability to take pictures and videos once downloaded.

The article was published by Indian Express on December 2, 2016. Pranesh Prakash was quoted. Also see Nandini Yadav's blog post in BGR on December 3, 2016.

The app, hosted on Google Play store, automatically gets excessive permission including full network access and ability to take pictures and videos once downloaded.

A “Narendra Modi” app, purportedly offered by the Government of India, caught the attention of Internet expert Pranesh Prakash on Thursday as the app developer was found to be using a Bangladesh-based web host and e-mail address. Suggesting that this could be the work of a con-artist, Prakash underlined that granting access to fake apps could lead to security breach. The app, hosted on Google Play store, automatically gets excessive permission including full network access and ability to take pictures and videos once downloaded. The original NaMo, however, only gets access to read, modify and delete the user’s media files. The “fake” app was downloaded more than 1 lakh times and has an average rating of 4.4 from over 2,000 reviews. A simple search on the play store throws up dozens of Narendra Modi apps, some even calling themselves fake apps. The original app was published by Narendramodi.in and Government Of India. But there are scores of other apps trying to imitate the original.

Pranesh, who is Policy Director at The Centre for Internet and Society, also questioned how users can differentiate between fake and genuine apps when even the official app was registered using a gmail address. While the Government of India Narendra Modi app has been published using info@narendramodi.press, the one by Narendramodi.in has been published using a simple Gmail app. He also highlighted how the play store was flooded with fake banking apps, with one such “SBI app” gaining full access to the user’s files. Incidentally, the fake Modi Ki Note app which has been in the limelight since the demonetisation on high value notes and issue of new ones itself has many duplicates.

In the last two days, the Congress and its vice-president Rahul Gandhi fell victim to hacking as their verified Twitter accounts were compromised. Profane content was shared from both accounts, targeting the Gandhi and his family. This lead to the Congress questioning Prime Minister Narendra Modi’s digital India push as security remains a huge concern.

For more details visit http://editors.cis-india.org/internet-governance/news/indian-express-december-2-2016-fake-narendra-modi-apps-aplenty-but-it-is-up-to-users-to-protect-themselves

Habeas Data in India

praskrishna — 2016-12-10T03:58:58Z

For more details visit http://editors.cis-india.org/internet-governance/files/habeas-data-india.pdf

Privacy and Security Implications of Public Wi-Fi - A Case Study

praskrishna — 2016-12-09T14:01:44Z

For more details visit http://editors.cis-india.org/internet-governance/files/privacy-and-security-implications-of-public-wi-fi-a-case-study

Information Technology (Reasonable security practices and procedures and sensitive personal data or information) Rules, 2011

praskrishna — 2016-12-09T02:42:50Z

For more details visit http://editors.cis-india.org/internet-governance/files/it-reasonable-security-practices-and-procedures-and-sensitive-personal-data-or-information-rules-2011.pdf

Ranking Digital Rights 2015 Annexure 2

praskrishna — 2016-12-09T02:39:13Z

For more details visit http://editors.cis-india.org/internet-governance/files/ranking-digital-rights-2015-annexure-2.pdf

Ranking Digital Rights 2015 Annexure 1

praskrishna — 2016-12-09T02:37:33Z

For more details visit http://editors.cis-india.org/internet-governance/files/ranking-digital-rights-2015-annexure-1.pdf

India's Tech Policy Entrepreneurs

praskrishna — 2016-12-08T16:52:23Z

The people who influence India's evolving technology policy.

The blog post by Rohin Dharmakumar was published by The KEN on December 8, 2016.

Though CIS has lost much of its cachet with the government for a while now (due to what sources term its “antagonistic” submissions to the government on various issues and because of it leaking CERT notifications around blocked websites), Abraham is still seen as a resourceful, agile and passionate leader of a civil society body that manages to track and keep on top of various tech policy moves.

For more details visit http://editors.cis-india.org/internet-governance/news/indias-tech-policy-entrepreneurs

Industry Consultation Panel on Data Retention - DSCI

praskrishna — 2016-12-06T15:55:14Z

Udbhav Tiwari was a panelist for an Industry Consultation Panel on Data Retention organised by the Data Security Council of India (DSCI) at the Le Meridian, New Delhi on 23 November 2016.

The agenda for the Panel was ‘Data Retention – Provisions under 67C’ and Udbhav's co-panellists were:

Gowree Gokhale, Nishith Desai and Associates
Srinivas Poosarla, Vice President and Head (Global), Privacy & Data Protection, Infosys
Chandra Ballabh, Security & Continuity Group, Bharti Airtel

The Panel was moderated by Bishakha Bhattacharya, Senior Director, NASSCOM.

The panel was fairly interesting and I largely espoused an outlook based on the principles of Transparency, Accountability, Proportionality and Due Process for any regulation that does come out in the near future regarding data retention, with a particular focus on balancing the interests of the key stakeholders. (Government, Industry & the Public)

The feedback to our position on the panel was decent to good, with Microsoft, Intel-McAfee, Samsung and SAP reaching out and agreeing to our broader stand and some of them looking forward to collaborating on us on future work on the topic as well.

For more details visit http://editors.cis-india.org/internet-governance/news/industry-consultation-panel-on-data-retention-dsci

10th NLSIR Symposium - Regulating E-Commerce in India

praskrishna — 2016-12-06T15:48:25Z

Vidushi Marda participated in a panel at the "10th NLSIR Symposium on Regulating E-Commerce in India" at NSLIU on November 27, 2016 in Bengaluru.

The topic for my session was "Liability Regimes - Ensuring Compliance". I spoke about the various kinds of E-Commerce businesses to consider (from aggregators to platforms to the sharing economy) and focussed on issues surrounding intermediary liability and data protection. The panelists were:

Pranav Mehra, Snapdeal
Vidushi Marda, Centre for Internet Society
Arun Prabhu, Partner, Cyril Amarchand Mangaldas
Arun Binoy Mattamana, Hewlett Packard Enterprise
Aditya Mudgal, Hindustan Unilever Ltd

Click to see more info

For more details visit http://editors.cis-india.org/internet-governance/news/10th-nlsir-symposium-regulating-e-commerce-in-india