Centre for Internet and Society

Indian net service providers too play censorship tricks

praskrishna — 2013-02-13T04:20:53Z

The study by a Canadian university has found that some major Indian ISPs have deployed web-censorship and filtering technology.

The article by T Ramachandran was published in the Hindu on February 9, 2013. Sunil Abraham is quoted.

Your internet service provider (ISP) could be blocking some content. A study conducted by a Canadian university has found that some major Indian ISPs have deployed web-censorship and filtering technology widely used in China and some West Asian countries.

The findings, published on January 15, were the result of a search for censorship software and hardware on public networks like those operated by ISPs.

A research team at Citizen Lab, an interdisciplinary laboratory based at the Munk School of Global Affairs, University of Toronto, found a software-hardware combo package called PacketShaper being used in many parts of the world, including India.

The study identified the presence of four PacketShaper installations on the networks of three major ISPs in India during the period of study in late 2012. These ISPs had been earlier “implicated in filtering to some degree,” the report said.

The deployment of such traffic management technologies by ISPs could threaten privacy, freedom of expression and competition, said Sunil Abraham, Executive Director of the Bangalore-based NGO, Centre for Internet and Society.

He said tools like PacketShaper could be used by ISPs for two types of censorship —“to block entire websites or choke traffic on certain services or destinations in a highly granular fashion.”

The U.S.-based producers of the technology, Blue Coat Systems, are quite open about the product features on the company’s website. They say it could be used to control and weed out undesirable content. It could also be used to slow down or speed up the operation of programmes and content flow to achieve the goals set by the operators of the networks.

Transparency is the key

Technology experts said such products could be used to exercise legitimate control over the internet traffic and prioritise the use of bandwidth and resources, if used ethically.

“If done in a transparent manner that does not discriminate against different actors within a class it does benefit the collective interest of the ISP’s clients. However, it could also be used to engage in hidden censorship against legitimate speech and also for anti-competitive behaviour,” said Mr. Abraham.

The study focussed on countries where concerns exist over “compliance with international human rights law, legal due process, freedom of speech, surveillance, and censorship.”

For more details visit https://cis-india.org/news/the-hindu-feb-9-2013-t-ramachandran-indian-net-service-providers-too-play-censorship-tricks

Indian music streaming service Gaana hacked, millions of users’ details exposed

praskrishna — 2015-08-22T16:44:25Z

Indian music streaming service Gaana, which has over 7.5 million monthly visitors, has been compromised by a hacker and its user information database is now exposed.

The hacker, who goes by the moniker Mak Man and appears to be based in Lahore, Pakistan, posted a link to a searchable database of Gaana user details on his Facebook page. Enter a user’s email address and it spits out their full name, email address, MD5-hashed password, date of birth Facebook and Twitter profiles and more.

The hack appears to be a SQL injection-based exploit of Gaana’s systems, but the intention behind it is unknown. The database shows more than 12.5 million users are currently registered on Gaana.

Mak Man also posted images of the service’s admin panel.

It’s worrying that an online service from one of India’s biggest internet companies (Times Internet) is vulnerable to attacks like this.

With user details exposed, it may not do much good to simply change your Gaana password, as it will reflect in the hacker’s database. You’re better off deactivating your account until the issue is resolved, and changing your email, Facebook and Twitter passwords if they’re the same as on Gaana right away.

Update: Since our story broke, Gaana has taken its site offline and the exposed database isn’t returning search results when we queried it with test data.

The hacker has updated his database page with the following message: “The vulnerable parameter I was using here, has been patched by the Admin
Now the question is, Was this the only vulnerable parameter I had .. ? ;)”

Update 2: Times Internet CEO Satyan Gajwani tweeted that only login credentials were accessed and no financial or sensitive personal data was leaked.

Gajwani attempted to contact the hacker on Facebook and acknowledged the issue. He added that the attack was the hacker’s way of highlighting Gaana’s vulnerability.

The exposed database has since been removed on Gajwani’s request. All Gaana users’ passwords have been reset.

Gajwani also sought to reassure his followers that no user data was stored and that the passwords were hashed. Hacker

Mak Man also confirmed this in a Facebook post. However, that can’t be confirmed and you’d best change your passwords for any social accounts and email addresses associated with your Gaana profile.

According to Pranesh Prakash, Policy Director at Center for Internet and Society in Bangalore, India, the MD5 hashing algorithm which appears to have been used for securing passwords isn’t very strong and could easily be unscrambled using a rainbow table to get the plain-text version of the data.

Prakash also says that for added security, Gaana should:

Stop using MD5 as its password hashing function and instead look at stronger password derivation functions like scrypt, bcrypt, or PBKDF2.
Sanitize its SQL inputs to prevent against malicious SQL injections.
Enable two-factor authentication for users to log in securely.
Urge its users to use long passphrases instead of short complicated passwords and to never to reuse a password.

➤ Gaana [via The Geek Byte]

For more details visit https://cis-india.org/internet-governance/news/tnwnews-may-28-2015-abhimanyu-ghoshal-indian-music-streaming-service-gaana-hacked-millions-of-users-details-exposed

Indian mobiles go quiet amid SMS curbs

praskrishna — 2012-08-27T07:15:01Z

India’s 900m-plus mobile telephones have fallen unusually quiet since Saturday, when the government curbed text and multimedia messages for 15 days in an attempt to dispel panic among north-easterners fearing attacks from angry Muslims.

This article written by Victor Mallet in New Delhi and James Crabtree in Mumbai was published in Financial Times on August 21, 2012. Additional reporting by Jyotsna Singh in New Delhi. Pranesh Prakash is quoted.

The order limiting the number of SMS and MMS messages to five a day from each pre-paid account – which comprise 97 per cent of the market – has disrupted personal communications and threatens to squeeze the revenues of the mobile operating companies.

The government has also urged social media websites including Facebook and Twitter to remove “inflammatory” content it said had helped spread rumours that caused an exodus of migrants from some cities last week. Access to 245 web pages containing doctored videos and images had been blocked, the government claimed, and the relevant sites told to take the pages down.

Indians send more than a billion text messages a day, although it is not clear how many people have been affected by the restrictions or how many of the messages are mass mailings.

Akshat Dwivedi, 20, an undergraduate student at Delhi University, said the restrictions were “a stupid idea”.

“How can the government take away something that has become a basic, fundamental need today?” he said. “The ban has affected mostly students who use pre-paid connections because pre-paid connections are cheaper and more affordable for students like us. The ban has hugely disrupted our life. There are many people who rely on text messages because you can’t always call everybody.”

Civil rights activists wary of censorship accept that the ban may have been necessary to ease ethnic and religious tensions.

“There is the fear that the state will exercise inordinate powers,” said Akila Shivdas, a civil and consumer rights activist. “But regulation and state control are two different things … This is an opportunity to look at regulation seriously.”

India’s mobile industry earned about $20bn in revenue last year, of which 15-18 per cent was from data services, according to the Cellular Operators Association of India, a trade body. This suggests operators are set to suffer a loss of about $133m for the 15-day period, according to COAI figures.

“When we are going through the trauma of increased costs, being challenged on revenues does not help,” said Rajan Matthew, COAI director-general. “The government’s heart is in the right place in trying to address this issue ... But when we are fighting for every nickel and dime, this loss is not a small amount.”

Other analysts cautioned that the likely revenue impact would be much smaller, noting that most customers bought pre-paid SMS packages. “I’m not saying there will be no loss, but it will not be dramatic”, said Rohit Chordia, a telecoms analyst at Kotak, a Mumbai-based brokerage.

Industry sources and analysts also questioned the government’s decision to impose an extended nationwide ban, rather than experimenting with more limited short-term restrictions targeted to particular trouble spots.

“Some kind of limitation on communication was a reasonable step, but restricting everyone to just five per day I don’t think is reasonable at all,” said Pranesh Prakash, programme manager at the Centre for Internet and Society, a Bangalore-based think tank.

Thousands of north-easterners – physically similar to the Bodo people who have been fighting Muslim migrants over land and political power in Assam – fled from cities such as Bangalore and Hyderabad last week after threats of violence sent by SMS.

Muslims in Mumbai had previously been inflamed by media messages purportedly showing brutality towards their fellow followers of Islam, though the Indian government said some pictures were doctored and had been uploaded from Pakistan.

Events in Bangalore, said Pavan Duggan, a lawyer specialising in IT issues, were “a classic case of mobile cyberterrorism”. He backed the government’s measures despite concerns about censorship. “Obviously there are some rumblings, but these are still small murmurs because everyone is very clear that the national interest will come over [mobile] revenues.”

For more details visit https://cis-india.org/news/www-ft-com-aug-21-2012-victor-mallet-james-crabtree-indian-mobiles-go-quiet-amid-sms-curb

Indian Laws

praskrishna — 2019-11-13T14:05:27Z

Indian Law

For more details visit https://cis-india.org/home-images/IndianLaws.jpg

Indian law caught in web

praskrishna — 2012-02-14T05:41:57Z

Can Information Technology Act deal with the dynamics of the Net? Lawrence Liang, Pranesh Prakash and Nishant Shah have been quoted in this article by Moyna which was published in Down to Earth magazine Issue: February 15, 2012.

THIS is one series of court cases the nation is following keenly. Within one week, in December last year, a criminal and a civil complaint were filed against 20-odd online giants like Google, Facebook, Microsoft and Yahoo for hosting anti-religious and anti-social content on their websites. While the judge hearing the civil case ordered immediate removal and blockade of all controversial content from the web forums named in the plaint, the trial court summoned their top executives for violating the Indian Penal Code (IPC). The companies then approached the Delhi High Court for relief, citing that the matter of hosting objectionable content has been oversimplified and does not address the nuances of the way the Internet works.

Real world v virtual world

December 16, 2011
A Delhi-based journalist Vinay Rai files a complaint in trial court against 21 web companies, accusing them of promoting enmity between classes and causing prejudice to national integration. Magistrate Sudesh Kumar calls for an inquiry.

December 17, 2011
Tilak Marg police station SHO conducts inquiry and submits report.

December 20, 2011
One Mufti Aijaz Arshad Qasmi moves court of additional sessions judge (civil) Mukesh Kumar. He demands that 22 web companies be asked to remove anti-religious and ant-social material from their sites. The court issues an ex parte order, asking the companies to remove the objectionable content by February 6.

December 23, 2011
Trial court summons executives of 21 companies to appear in person on January 13, 2012, and asks them to remove all objectionable content from their sites by March 13.

January 11, 2012
Google and Facebook appeal to the Delhi High Court against trial court proceedings saying they are regulated by the IT Act and not the IPC. Justice Suresh Kait adjourns the case till January 16, commenting websites have a responsibility to prevent the spread of disharmony.

January 13, 2012
IT ministry sanctions the trial court prosecution of the web companies. Trial court adjourns proceedings till March 13.

January 16, 2012
In high court, website counsels open arguments with the need to protect freedom of expression. They say police investigation report is incomplete and fails to understand the Internet; it does not even mention when, where and by whom the objectionable contents were posted.

The websites contest the complaint filed under Section 153-A (promoting enmity between classes), 153-B (assertion prejudicial to national integration) and 295-A (insulting religion or religious belief of any class) of IPC, saying being intermediaries they are immune to legal action under Section 79 of IT Act.

The case should have been registered through a process—someone needs to complain against the objectionable content to the web company, who should then be given a chance to do everything possible as listed under the provision of “due diligence” of the IT Rules to remove or explain the content.

If the matter is still not removed, the complainant can approach the court, which in turn, needs to go through the Computer Emergency Response Team and inform the web company of the objectionable material.

Following this, the company has 36 hours to remove the content. The case is adjourned till January 19.

January 18, 2012
An intervention petition is filed in the high court saying the case against Google and Facebook is an infringement on right to expr ession. On January 19 the case is adjourned till February 2-3, 2012.

January 20, 2012
Yahoo moves the high cou rt seeking exemption from the case as the objections are against social networking sites.

While the appeal has been adjourned till the first week of February, the cases (see ‘Real world v virtual world’ on p10) have once again stirred the debate on the freedom of expression and raised significant doubts over the legal understanding of the virtual world.

Laws of virtual world

Niraj Kishan Kaul, representing Google in the high court, argued that the trial court issued the summons under IPC when the companies are under the ambit of the Information Technology (IT) Act of 2000. He contended “the summons issued are casual in nature and infringe the Constitutional provisions of freedom of speech”. The IT Act has provisions to deal with objectionable content. Even a web browser can register complaints or take action against objectionable contents, he said.

The objectionable content that spurred the civil and criminal cases has, however, taken a backseat for the time being because the hearings were lost in translation of the technicalities of responsibility and liability of hosting objectionable content, laws under which cyber incidents are to be tried and issues of freedom of expression.

Legal experts and Internet activists are divided over the efficacy of Indian laws governing the online world. “Is it in tune with the ever-changing technologies of the virtual world?” asks Sidharth Luthra, counsel for Facebook in the high court. Given the limitations, the legal system needs to have an open mind while dealing with the Internet, he adds. Rajeev Dhavan, a senior advocate in the Supreme Court, elaborates: “In the present case, the courts are applying criminal and company laws to the Internet Service Providers (ISPs). Under company law, the director is held liable for the actions of the company. How can the same logic be used in a forum where the content is published without the knowledge of an ISP?” This, he says, is akin to blaming a phone manufacturer for the use of his phone by a criminal.

Lawrence Liang of Alternate Law Forum, in Bengaluru, says, “We are still applying the traditional understanding of media to the Internet. Search engines and social media do not recognise who publishes, where and how.”

Pranesh Prakash of the Centre for Internet and Society (CIS), a non-profit in Bengaluru, agrees. He says the Internet needs regulation but it cannot be treated as a gigantic newspaper or media channel. Besides, the IT Act provides for protection of intermediaries; web browsers, social networking sites and websites cannot be held responsible for material published on their forums by a third party. But the IT rules introduced in April 2011 severely watered down this protection, Prakash adds.

Internet activists and legal experts have been criticising the IT rules since their introduction, saying they are at cross purposes with the IT Act.

“The rules were meant to lay down the process through which complaints should be made and define certain terms used in the Act,” says Apar Gupta, an IT law expert and advocate at the high court. Instead, they only fleshed out the mechanism for censorship and contain vague words that do not have reference to any existing provisions of the law. For instance, the rules use terms like “blasphemous”, “grossly harmful material” and “any material harmful to minors” to define objectionable material. But India has no law on blasphemy, nor is there any Act that defines grossly harmful material or what ought to be the punishment for uploading or downloading such material, Gupta explains.

Pavan Duggal, cyber law expert and a Supreme Court advocate, says the IT laws lack parameters for effective implementation. Since 1995, when the Internet was officially introduced in the country, till date, there have been only three convictions under the laws dealing with cyber crime and the highest fine ever levied was Rs 12 lakh. People’s trust in the efficacy of legislation is eroding, he says, adding that there is need for a stronger law dealing with all the nuances of the virtual world.

Who’s afraid of free Internet

The cases underscore the global concern over attempts by governments to curb freedom of expression and control a decentralised mechanism of information dissemination—the latest being the proposed anti-piracy laws in the US— primarily for two reasons.

One, the complaints against the web companies came close on the heels of a public remark by Union Minister of Communications and IT Kapil Sibal on censorship and pre-screening of web content. Two, Judge Suresh Kait, after adjourning the Google and Facebook appeal hearing in the high court, had remarked that the ISPs need to find censoring mechanisms to avoid objectionable content. He said the companies could be blocked as has been done in China if they failed to comply with Indian laws. Though the comments were not made on record they caused uproar in the media and among supporters of Internet freedom.

“The case deals with technical aspects of our Internet laws but the judges’ remarks and observations, in both the trial court and the high court, raise concerns of censorship and freedom of expression,” says Parasanth Sugathan, lawyer with the Software Freedom Law Centre, international lawyers’ network.

Nishant Shah of non-profit CIS says, “So far, in liberal democracies like India and the US, information was taken for granted and not perceived as central to the understanding of society.” Today, governments are taking cognisance of living in an informed society, which is leading to legal battles between those giving information and those trying to regulate it, Shah adds.

The original article was published in Down to Earth

For more details visit https://cis-india.org/news/indian-law-caught-in-web

Indian Languages Mela 2013 in Mumbai

praskrishna — 2013-10-17T05:04:13Z

Centre for Indian Languages in Higher Education is organizing The Indian Languages Mela in Mumbai. Tejaswini Niranjana will participate in the event.

The Indian Languages Mela organized by the recently-established CILHE at TISS aims to celebrate the linguistic diversity of our daily experience and show how our cognitive capacities are tied to that diversity.

The CILHE is interested in strengthening Indian-language resources in higher education. It will do so by undertaking research training, incubating research projects, supporting the production of new curricular materials, and providing opportunities to make the teaching-learning experience more diverse.

The programme for the Mela includes a two-part seminar - Interrogating Pedagogic Practice, and Interrogating Translation Practice; an exhibition showcasing Indian-language scripts, visual and sound artefacts, and new digital interfaces; and cultural events involving theatre and music. The theme languages of this year will be Marathi, Gujarati and Hindi, although other languages will be brought in wherever relevant.

As part of the Mela, the CILHE is calling all TISS students (Guwahati, Hyderabad, Mumbai and Tuljapur campuses) to send in entries for two competitions:

A two- or three-minute audio recording made on any digital device of your choice – the recording could be in a railway station, a bazaar, a street corner, a cafeteria or any other everyday location. Capture an interaction between two or more persons speaking in different languages about any topic. Prepare a poster interpreting what happens in your audio recording. Do remember to add an English translation of the interaction in your recording. Students are encouraged to use free editing software available for both Windows and Linux platforms. Posters can be in English or in any of the three theme languages. Group submissions are encouraged. Submissions over email are accepted.

Creation of a new article on any Indian language Wikipedia (preference will be given this time to Marathi, Hindi and Gujarati entries, but other languages will also be considered). Training workshops on editing Wikipedia will be held at each TISS campus during August 2013. Send us details of your Wikipedia entries and mention your Wikipedia UserName in your email.

Tentative Schedule

September 20

11 am to 5 pm – Exhibition (4^th Floor, Library Building, new section, Main Campus)

2 pm - Inauguration of the Mela by Kiran Nagarkar, eminent Marathi/English author

2.30 to 6.00 pm – Seminar on Interrogating Pedagogic Practice

6.00 pm - Presentation of awards to winners of student competitions

6.45 pm – Introduction to the play

7 pm to 9 pm – Play directed by Sunil Shanbag: Stories in a Song

9 pm - Dinner for invited speakers, TISS faculty and members of the theatre troupe (TISS Guest House)

September 21

11 am to 5 pm – Exhibition (4^th Floor, Library Building, new section, Main Campus)

2 pm to 5.30 pm – Seminar on Interrogating Translation Practice

Also read the report published by IBN here

For more details visit https://cis-india.org/news/indian-languages-mela-2013-mumbai

Indian language localization community meets in New Delhi

praskrishna — 2016-10-03T13:26:31Z

Localization is one of the less glamorous aspects of computing. Despite the fact that less than 6% of the world speaks English, a majority of projects don't feel inclined to accommodate the rest of the population. One of the primary reasons for sticking to English is the steep learning curve and the lack of standardization in various aspects of the localization process.

The post by Mayank Sharma was published by Opensource.com on October 3, 2016. Dr. U.B. Pavanaja was quoted.

The FUEL Project organized the GILT conference in New Delhi, India September 24-25 to highlight and address these issues. The annual event showcases the efforts of language technology organizations and volunteer communities, but this year's also gave a platform for non-technical users to voice their concerns. The Indic computing developers were joined by academics, reporters, language researchers, publishers, and entrepreneurs who rely on localization tools to connect and interact with audiences in the various regional languages in India. The brainstorming between the two groups, both on and off the stage, was one of the highlights of the conference.

Focus on standardization

Another recurring theme discussed in detail at the conference was the need for standardization. The FUEL Project spearheads standardization efforts with its terminology management system to preserve consistency across translations. The project also created translation style guides for various languages, including Spanish, German, French, Scottish Gaelic, and several Indian languages. In addition to these guides, the project is also working on a couple of tools to help maintain the accuracy of the translations. One that caught the attention of the translators at the conference is the Unicode Text Rendering Reference System (UTRRS). It's a web app that lets you enter a character, word, or phrase and then compares it to a reference image generated by a text rendering engine.

The current state of localization

The conference began with an inaugural address by the keynote speakers. Rajesh Ranjan, who heads the FUEL Project and is currently the open source community manager at the Indian Government's National eGovernance Division (NeGD), kicked things off by talking about the evolution of the 8-year-old project. There was also an enlightening address by Jeff Beatty, who heads localization efforts at Mozilla. He talked about the role of his alma mater, the University of Limerick, in the initiation and growth of multilingual computing. Later, Vinay Thakur, director of project development at NeGD, discussed the Indian Government's increased interest in localization and listed the various initiatives currently underway.

This was also reiterated by Mahesh Kulkarni, assistant director at CDAC's GIST research labs. He talked about the scale of the government's plan for making all its official websites available in all the officially recognized 22 Indian languages.

Addressing problems

Kulkarni also chaired a panel discussion later in the day. The panel members talked about the issues plaguing the localization community and what it would take to solve them. Sudhanwa Jogalekar, a well-respected contributor to Indic computing, suggested that translators should get ISO certified as a first step toward standardization. Jogalekar pointed to the ISO 7001:2015 standard, which certifies conformity in translation services. Another panel member, Prabhat Ranjan, executive director of the technology think tank TIFAC, talked about the stress on translation in the Vision 2035 document recently released by the Indian Prime Minister Narendra Modi. Ranjan's team found English to Hindi translation easier when documents are first translated into another Indian language. Based on this experience, Ranjan bounced the idea of agreeing on a meta language to ease the translation process.

A chat with the Document Foundation

The conference also had a video conference session by the Document Foundation's Italo Vignoli about LibreOffice. While the talk was fairly overview-ish the Q&A generated some valuable suggestions that Vignoli promised to take up with the LibreOffice developers. One of the concerns raised by Pavanaja U.B. was that localizing the office suite was a cumbersome process, as it involved recompiling the entire application. Pavanaja, who is well-known in the localization community for creating the Kannada version of the Logo programming language, requested Vignoli ask LibreOffice developers to brainstorm a less tedious process for the localizers. Later in the day, Pavanaja also talked about his experience localizing Wikipedia in Kannada and Tulu languages.

Unicode

^{Karunakar G demos an in-development spell checker for the Hindi language. Photo by Mayank Sharma. CC-BY 3.0.}

The second day began with a session on the evolution and current status of the Unicode standard. It was delivered by Karunakar G, one of the stalwarts of the Indic localization community. A longtime localization developer, Karunakar also demoed the support for Indian languages in LibreOffice. He highlighted a few missing features, such as the lack of an Indic thesaurus and autocorrect functionality.

Sailfish OS

Karunakar was followed by Raju Vindane, who introduced the audience to the Sailfish OS. He also demoed the only Sailfish OS phone available in the Indian market, the Intex Aqua, which retails for about $90. Vindane mentioned that while the community is encouraged to contribute and improve the Indic translations to the Sailfish OS project, these wouldn't be included in the Indian phone, as Intex does its translations in-house.

Other highlights

^{Ryan Northey asks the community to explore the use of XLIFF (XML Localization Interchange File Format). Photo by Mayank Sharma. CC-BY 3.0.}

The day also had introductory presentations by Ryan Northey, lead developer at Translate House, and Satdeep Gill from the WikiTongues project. Northey mentioned that there's been a disconnect between software development and localization, and that going forward localization should become a part of the software development cycle.

In addition to the scheduled sessions, there were several fruitful discussions during lunch and tea breaks. The presentation-free exchange of gray matter between the stalwarts and the young padawans were a delight to witness. The 2016 edition of the GILT conference helped bring together longtime developers and experts from the government with niche communities and individuals working on different aspects of localization in various parts of the country. The conference ended with the participants hoping that the Government's increased focus on localization would translate into a considerable leap in the quality and quantity of localized content and localization tools.

For more details visit https://cis-india.org/openness/news/open-source-mayank-sharma-october-3-2016-indian-language-localization-community-meets-in-new-delhi

Indian Internet Lawsuit Puts Spotlight on Freedom of Expression

praskrishna — 2012-01-19T08:59:15Z

In India, Internet giants such as Google and Facebook are fighting a lawsuit after the government authorized their prosecution for online content on their sites deemed to be offensive. The case has put the spotlight on free speech in the world’s largest democracy.

The criminal lawsuit filed by the editor of New Delhi-based Urdu weekly Akbari accuses 21 Internet companies of violating Indian law. Vinay Rai alleged that online material on their websites has the potential to incite religious conflict.

Rai said his colleagues brought to his attention images of Prophet Muhammad which could offend Muslims. He cited other images and text which could hurt sentiments of Hindus and Christians. Rai wants Internet companies to screen content before it is posted.

Google and Facebook have asked the Delhi High Court to dismiss the case against them. In an appeal, they said it is impossible to filter all content or stop individuals from posting material online.

Editor Rai filed the case after the government indicated its approval for the prosecution. The official go-ahead came weeks after the government also raised a similar demand.

Voluntary framework

Telecommunications Minister Kapil Sibal told Internet company representatives to come up with a voluntary framework to keep offensive material off the net. After confronting them with photos and material derogatory of Indian Prime Minister Manmohan Singh and Congress Party leader Sonia Gandhi, he said the companies had not cooperated.

Both the court case and the government’s demands have stoked fears of net censorship in the world’s largest democracy.

Advocacy groups say the dispute between authorities and websites began simmering last year when India tightened laws to block content which could be deemed offensive. Citizens and officials can ask sites to block objectionable material and failure to comply within 36 hours can attract penalties or imprisonment of up to seven years.

Sunil Abraham, with the Center for Internet and Society in India, said these rules have the potential to curtail debate and discussion on the net.

“These limits are vague. They allow for all sorts of subjective tests by private parties and we predicted they would have a chilling effect on freedom of expression online," Abraham said. "Policy in India has been headed in a very worrisome direction."

Abraham pointed out that one of his organization’s recent studies indicates that, faced with the threat of stiff penalties, most service providers removed content when asked to do so, even when it was not offensive or controversial.

Free media?

The government insists its objective is not to encroach on the fundamental right of free speech guaranteed by India’s democratic constitution. The clarification came from Minister Kapil Sibal after his meetings with Internet companies last month.

"This government does not believe in censorship," noted Sibal. "This government does not believe in either directly or indirectly interfering in the freedom of the press, and we have demonstrated that time and again."

India does have a vibrant free media and Internet access is largely free, unlike in China. But in a country with a history of religious violence, authorities have long tussled with the dilemma of balancing free speech with the need to not inflame sentiments among religious groups. India was one of the first countries to ban Salman Rushdie’s “The Satanic Verses.”

Other books and articles have also faced bans. Many are challenged in courts and several have been overturned. Now the focus is on the Internet and questions are being raised about whether the web should or can be policed.

Online freedom

In a remark widely quoted in the domestic media, a judge hearing the case had warned websites that like China, India might be compelled to block some of them if they did not create means to curb material seen as offensive.

However, Abraham from the Center of Internet and Society hopes that, as the latest case navigates its way through Indian courts, online freedom will come up the winner.

"I think the executive in India has always been very conservative in freedom of expression. It is usually the courts in India that protect freedom of expression, the precedent," Abraham said. "So we are every hopeful that the current case is in the appropriate venue, and we are confident that, as in the past, the judiciary in India will stand on the side of freedom of expression."

With 100 million people surfing the web, India has the world’s third largest number of Internet users after China and the United States.

Published in the Voice of America on 19 January 2012. Sunil Abraham is quoted in this.

For more details visit https://cis-india.org/news/indian-internet-lawsuit-puts-spotlight-on-freedom-of-expression

Indian ID crisis unveils Aadhaar doubts

praskrishna — 2013-03-15T04:52:49Z

Two separate organizations are capturing biometric data of over 1 billion Indians, creating fresh doubts in the government's justification to catalogue citizens.

The blog post by Mahesh Sharma was published in ZD Net on March 14, 2013. Sunil Abraham is quoted.

A new US$1 billion national identity card project has undermined the Indian government's ambitious "Aadhaar" project to catalogue the biometric details of over 1 billion citizens.

Indians' biometric details are being captured by two separate organizations: the National Population Register, to develop the resident identity card (RIC); and the Unique Identification Authority of India (UIDAI), to create a unique identifier (UID), commonly referred to as "Aadhaar" number.

Both projects are designed to streamline the distribution of welfare and social services to citizens--a process that is currently mired in corruption.

In an interview with ZDNet, Centre for Internet and Society's India executive director, Sunil Abraham, said the ID smartcard and ID number are fundamentally different, not complementary, as the government has previously said.

"Those are two very separate visions. You cannot mix them up and make some kind of salad and have a little bit of this and a little bit of that. You have to go the whole hog in one direction," Abraham said.

He said it was easier for the government to proceed with both projects, rather than cancel Aadhaar, which has been criticized over reports there were duplicate biometric information and data abuse.

"The government is afraid it made a mistake," Abraham said. "It could just continue to create a hodgepodge of both ideas, both visions, and continue making big mistakes and have ghosts [in the UID system] and large scale corruption."

On March 12, India's house of representatives, the Lok Sabha, Member of Parliament, P. Karunakaran asked the Minister of State, R.P.N. Singh, to clarify the overlap between the proposed biometric identity card and UID. Singh confirmed the government would spend over US$1 billion (55.52 billion rupees) to issue a resident identity card (RIC) that featured the Aadhaar number.

"The RIC would enable both online and offline authentication of identity in a secure manner and will complement the efforts of Aadhaar," Singh said in a written response. To avoid duplication, he explained that if citizen biometric data was already captured by the UIDAI, then the Aadhaar number would be recorded on the RIC smart card.

Independent lawyer Usha Ramanathan told ZDNet the government had overstepped its legal bounds. She said the UIDAI has demonstrated biometrics are imperfect but the government has persisited with the project.

"The UID is lawless. Now we will have an RIC which will be lawless," Ramanathan said. "All we are offered is the UIDAI 'confidence' that the project will work."

"Privacy and personal security continue to be unprotected. And there seems to be an inexhaustible amount of money to experiment on the whole population," she noted.

For more details visit https://cis-india.org/news/zdnet-mahesh-sharma-march-14-2013-indian-id-crisis-unveils-aadhar-doubts

Indian Govt to Build Machine Translation System for 22 Indic Languages

praskrishna — 2013-12-11T07:14:35Z

National Translation Mission is preparing a Machine Translation System (MTS) to instantly translate texts from vernacular Indian languages to English, reports New Indian Express.

Brindaalakshmi's article was published by Medianaama on November 14, 2013. CIS memorandum of understanding with Goa University is mentioned.

The report states that scientific and technical terminologies are being developed in 69 disciplines of study in 22 languages as part of this project. Apparently, 25,000 to 30,000 lexicons have been identified in each subject to create the MTS.

Speaking at a media event, Prof V Saratchandran Nair, Director of National Translation Mission said that the project is being initiated to help students who have done their schooling in vernacular languages but have to study in English during college. He also added that only Tamil currently has translated materials in all 69 disciplines, while Oriya has it in 49 disciplines. In contrast, there is no science material available in Santhali, Manipuri and Konkani languages.

National Translation Mission is a Government of India initiative that intends to establish translation as an industry and facilitate higher education by making available translated study material for students. The program also trains translators in different languages. Interestingly, the website states that it will not replicate the efforts of other organisations like C-DAC, TDIL that are also involved in creating indic support for computers and services. However, it seeks to build technology to directly translate a sentence typed in English into an Indian language. When we checked, we noticed that the website also offers dictionaries and other resources for translators.

Other efforts to provide indic support: In September 2013, the Goa university had entered into a three year memorandum of understanding (MoU) with the Centre for Internet and Society (CIS) for building the Konkani Wikipedia. As part of this partnership, Goa University will be uploading the four volumes of Konkani encyclopedia. This could be a good start to building a repository of translated works for science in Konkani.

In July 2013, Technology Development for Indian Languages Programme (TDIL) of DeitY (Department of Electronics and IT) had developed Urdu language fonts and keyboard drivers for Windows and Android.

In June 2013, DeitY had also created a repository of fonts for all 22 constitutionally recognized languages through TDIL. These fonts are available as a CD that can be procured from TDIL or the entire suite can also be downloaded from the TDIL website.

For more details visit https://cis-india.org/news/medianama-november-14-2013-brindaalakshmi-indian-govt-to-build-machine-translation-system-for-22-indic-languages

Indian Govt looks to provide free access to publicly-funded research works

praskrishna — 2014-07-28T05:34:37Z

Sunil Abraham gave his inputs to the blog entry published in Medianama on July 23, 2014.

Department of Biotechnology (DBT) and Department of Science and Technology (DST), under the Ministry of Science and Technology recently released (pdf) the draft of what is termed as Open Access Policy and has invited comments from the public until July 25, reports The Times of India. Comments can be submitted to madhan@dbt.nic.in.

The objective of this policy is to provide unrestricted access to research work funded by the departments. The draft states that since all funds disbursed by DBT and DST are public funds, it is important that the information and knowledge generated through the use of these funds are made publicly available as soon as possible.

As per the draft, DBT/DST will be creating a central repository wherein grantees can either publish their papers in an open-access journal or post the final accepted manuscript to an online repository. This includes papers funded by the two departments in 2012-13 as well as review articles invited by DBT/DST or author initiated that received funding from these departments.

The draft suggests that the full text of the research paper and metadata of all research projects fully or partially funded by DBT/DST or the projects that utilised infrastructure built with the support of DBT/DST will have to be made publicly available, failing which they wouldn’t be considered for future grants or fellowship opportunities among others.

The department believes that providing free access to these publications through gratis open access repository will enable increasing the distribution of these publications and will ensure that these research can be read and built upon.

Copyright of research papers: The draft also sheds light on copyright issues. It states that research work produced by a scientist as an employee of a government body or private institution the copyright would remain with the respective government body or private institution. However, following the final acceptance of the paper by any journal, it has to be deposited in an open access repository within a period of one week.

The author of the research paper will retain the right to reproduce, distribute, publicly perform, and publicly display the article in any medium for non-commercial purposes. They can also prepare derivative works from the article, and authorise others to make any non-commercial use of the article with credit.

Implications: This is a godsend for students, teachers and institutions that don’t have the means to purchase expensive academic journals. Sunil Abraham, executive director of Centre for Internet and Society (CIS) told TOI that the idea is that taxpayers shouldn’t pay twice to access research funded by taxpayers’ money.

Earlier developments in Open Data

In August 2013 the Department of School Education and Literacy, Ministry of Human Resource Development, the Central Institute of Educational Technology (CIET), and National Council of Educational Research and Training (NCERT) had launched an initiative called National Repository of Open Educational Resources (NROER). The objective was to provide free educational resources to school students under the Creative Common license.

The Union Cabinet had cleared the DST formulated National Data Sharing and Accessibility Policy (NPDSA) back in February 2012. NPDSA was supposed to increase accessibility and ease sharing of non-sensitive data amongst the registered users and their availability for scientific, economic and social developmental purposes. However, very little has been reported on how NPDSA was utilised since then.

Click to read the article published in Medianama here.

For more details visit https://cis-india.org/news/medianama-july-23-2014-riddhi-mukherjee-indian-govt-looks-to-provide-free-access-to-public-funded-research-works

Indian govt blocks 40 smut sites, forgets to give reason

praskrishna — 2013-07-01T09:04:26Z

Don't mind us, we're just censoring your content for you...

The article by Phil Muncaster was published in "The Register" on June 27, 2013. Sunil Abraham is quoted.

The Indian government has ordered ISPs to block 39 smut flick web sites hosted outside the country without giving any explanation, stoking further fears of online censorship by the back door.

Most of the sites are web forums and so allow for the uploading of naughty images and URLs where smut-seekers can download their grumble flicks, according to Times of India.

However, the sites claim to operate under the 18 USC 2257 rule, meaning actors are (supposedly) over 18 years of age, and there is apparently no indication from the Department of Telecom's order why ISPs are being asked to comply.

The message greeting web users who try to visit a blocked site now reads as follows:

This website has been blocked until further notice either pursuant to court orders or on the directions issued by the Department of Telecommunications.

While the law, updated in 2011, does forbid production, transmission and sharing of smutty content in India - therefore requiring internet cafes, for example, to block such content - there is no ban on consumption, especially from sites hosted outside India.

Sunil Abraham, director of Indian not-for-profit the Centre for Internet and Society, told ToI that the government is probably interpreting the law to serve its own ends, and that its ISP order “is a clear overreach”.

The Union government has certainly been quick in the past to order blocks on any content deemed inappropriate.

Facebook and Google were forced to remove “objectionable content” from their Indian sites last year after complaints it was offensive to Muslims, Hindus and Christians.

The government was also one of many across the globe to force Google to block notorious YouTube video Innocence of Muslims.

A controversial anti-piracy ruling last June, meanwhile, led to a clumsy, large-scale block on a number of legitimate sites in the country – drawing the ire of hacktivist group Anonymous.

The government also closed hundreds of sites and social media accounts in August last year in a bid to prevent the escalation of sectarian violence across the country.

In fact, the number of content removal requests received by Google increased by 90 per cent from July-December 2012 compared with the previous six months.

For these reasons, India only enjoys “Partly Free” status, according to the Freedom on the Net 2012 report from not-for-profit Freedom House.

For more details visit https://cis-india.org/news/the-register-phil-muncaster-june-27-2013-indian-govt-blocks-40-smut-sites-forgets-to-give-reason

Indian government websites: Gold mine for cybercriminals

praskrishna — 2014-01-31T06:18:12Z

If you are a cybercriminal trying to commit identity theft or digitally impersonate a citizen, you have help from the unlikeliest of sources — the Government of India.

The article by Srutijith KK was published in the Times of India on January 3, 2014. Sunil Abraham is quoted.

Various government agencies have put vast amount of personal information online, often with little barrier to access and with hardly any provision to prevent their misuse.

Combine a few of these databases and you have a gold mine of information on India's citizens, including some of its wealthiest residents, whose bank accounts are of special interest to thieves. "If I want to target someone, I now have access to so much detail that shouldn't have been in public. Hackers with good social engineering skills will be able to call a call centre and impersonate a person. And from a stalking perspective, it has implications for not just celebrities, but anybody with a jilted lover, a political rival, and so on," said Binoo Thomas, a digital security expert at McAfee Labs.

For example, if somebody wants to get personal details of some of India's richest people, he would simply need to click on the LPG transparency links on Indane, Bharat Gas and HP portals and narrow the search to the South Mumbai region. Many gas agencies have their area of service in their names, such as Bandra Gas Agency or Colaba Gas Agency.

Select one of these gas agencies and you have a list of all the customers, with their consumer number, address and, in many cases, a mobile number. This database is also searchable by name. You can quickly search for any famous surname and be rewarded with a consumer number, residence address and in many cases, a mobile phone number.

A cursory search gave ET the mobile number and full residential address of the well-known matriarch of a famous business family. A search under the Bandra Gas Agency promptly showed the full residential address of a famous Bollywood actress. Your next stop could be the website of the Election Commission of India, which has asked all state Election Commissions to place the entire voter rolls online.

The voter roll also has the full residential address, age and gender of a person. A quick search on the MTNL Mumbai directory online will reveal the landline number for a person. With a little bit of luck and time to troll social networks such as Facebook and LinkedIn, a skilled cybercriminal can discern your date of birth and professional details.

Date of birth, phone number, alternate number and billing address are the details many telephone companies and banks use to determine whether a person calling its customer helpline is indeed who she says she is. This kind of information also allows a hacker to design effective phishing attacks, which lures a person into revealing information such as passwords or credit card numbers. An email that lists accurate personal information appears authoritative and has greater likelihood of being trusted by a recipient.

Thread of identity theft
This kind of crime has been on the rise. In December, US Department of Justice estimated that $24.7 billion were lost to identity theft in 2012, as 11.5 million Americans found themselves defrauded. Similar data is unavailable for India. "Privacy has become a matter of personal security. As the state has been pushed to function in a more transparent manner, authorities are making the details about us transparent instead! The data protection principles are well evolved all over the world.

All of these data controllers are in violation of every good principle. We don't need to wait for a law to observe these principles," said Usha Ramanathan, an independent law researcher specialising in privacy, surveillance and related issues. The ministry of rural development, which administers the Mahatma Gandhi National Rural Employment Guarantee Scheme, goes a step further, and places online the bank account numbers and IFSC codes for all its beneficiaries.

RTI requirements
The justification for publishing this kind of data online is typically section 4 of the RTI Act, which requires all government departments to proactively publish details of subsidy programmes, including details of the subsidy availed. However, section 8(1) of the same Act says that personal information that invades privacy of an individual need not be published unless an appellate authority decides that a larger public interest is served by it. It's unclear what public interest is served by the publication of full residential address, mobile number or bank accounts by various agencies.

In some cases, like the MNREGS and the voter rolls, sector-specific laws also apply. "Going by the provisions of the MGNREGA, which mandates proactive disclosures, we keep all processes in the public view... We have not perceived any threat in displaying bank account numbers of wage seekers, most of which have been opened for receiving wages," said R Subrahmanyam, the joint secretary at the ministry of rural development who heads the MNREGA division.

The petroleum ministry did not respond to an email requesting comment. In an emailed response, Chief Election Commissioner VS Sampath referred to Rule 33 of the Registration of Elector Rules, 1960, to establish that the voter roll was a public document. "Thus it can be seen that Electoral Roll is a public document which is available to the public for inspection. The Commission has, therefore, given instructions to put this public document on the website to facilitate inspection by public. When law stipulates that it is a public document, the public has a right to access it," he said. But no law states that anonymising techniques or relevant barriers to accessing private information should not be deployed.

Legal vacuum
India does not have an omnibus privacy law that overrides sector specific legislation. According to Sunil Abraham of the Bangalore-based thinktank Centre for Internet and Society, there are some 50 different laws that have a privacy element in India. The Department of Personnel and Training has been working on a draft privacy law for three years now.

"We need to think of this problem in the light of the privacy law that is being drafted. Traditionally and culturally our view of privacy has been different. A more explicit understanding of the privacy needs of the citizens is certainly welcome. Section 43A of the IT Act has provisions for data protection," said J Satyanarayana, secretary at the department of information technology.

But 43A applies only to corporations, and government agencies are not bound by it. Apart from the central government agencies, several state government agencies and schemes also collect and store personal information. But no standard protocol binds them in deciding who shall have access and who shall not.

For more details visit https://cis-india.org/news/the-times-of-india-january-3-2014-sruthijit-kk-indian-govt-websites-gold-mine-for-cybercriminals

Indian government wakes up to risk of Hotmail, Gmail

praskrishna — 2013-12-30T04:24:57Z

Worried by US spying revelations, India has begun drawing up a new email policy to help secure government communications, but the man responsible for drafting the rules still regularly uses Hotmail.

This was originally published by AFP on December 7, 2013, was also mirrored by the Times of India, Livemint, Reuters, Dawn, NDTV, Yahoo News, The Malaysian Insider and Asia One Digital. A slightly modified version was published by Silicon India on December 11. Sunil Abraham is quoted.

Like many of his peers in ministries across New Delhi, IT Minister Kapil Sibal's office recently sent an email inviting journalists to the launch of his new personal website using the free email service.

Others, including senior foreign ministry officials, the information and broadcasting minister and the health ministry secretary, also use Gmail, Hotmail or Yahoo instead of their government accounts.

When asked why he continued to use his Hotmail for official use, Sibal declined to comment, but a senior bureaucrat in his ministry admitted that he personally preferred Gmail because it is "just a lot easier".

"We keep moving, get different designations, go different places and with that, our emails change. You lose contacts and important emails, which you don't need to worry about with a Gmail account," the bureaucrat told AFP.

"To be honest, the quality of our official mail isn't that great yet. It still needs some work," he added on condition of anonymity.

Security concerns

IT security expert Sunil Abraham said the use of Gmail and the like was highly risky since the American services had their servers in the US and the National Security Agency has been known to tap into their database systems.

It is unclear how many state and federal public workers actively use popular email services for office, but some of the estimates are startling.

"As much as 90 percent of government officials use private email (services) for official use... that's because their official email is not as stable or speedy," said Abraham, executive director of the Bangalore-based Centre for Internet and Society.

In September Sibal's ministry announced a new "Email Policy of the Government of India" in the wake of spying allegations about the NSA revealed by former NSA contractor Edward Snowden.
NSA's tentacles not only crept into the Indian embassy in Washington and its UN office in New York, but also accessed email and chat messenger contact lists of hundreds of millions of ordinary citizens worldwide, according to media reports.

During a single day last year, the NSA's Special Source Operations branch collected 444,743 email address books from Yahoo, 105,068 from Hotmail, 82,857 from Facebook, 33,697 from Gmail and 22,881 from unspecified other providers, The Washington Post said, according to an internal NSA presentation.

The $11 million Indian project aims to bring some five million public employees onto the government's email domain powered by the National Informatics Centre (NIC) as early as mid-December.

It is awaiting clearances and suggestions from all ministries before the proposal goes to the cabinet this month.

J. Satyanarayana, secretary of the department of electronics and IT, dismissed claims that the policy was too late and was a response to the Snowden scandal.

"The policy is not a reaction to any global spying revelations, it was already in the works. It is just a mere coincidence that both came around the same time," he said.

Fresh doubts

Some cyber security experts say bringing millions aboard a centralised server could make a hacker's job easier, with all critical government information available on a single platform.
More than 11,000 Indian websites were hacked or defaced between May and August this year, with a large number of attacks on the ".in" domain whose servers are in India, the Times of India reported last month.

"Making the use of a centralised government server is not the best way to proceed. Having everything on one platform makes it even more vulnerable to cyber attacks and hacking," said Abraham.

"It also brings about new worries of the NIC becoming the local snoop."

Some also predict that the ambitious policy would eventually fizzle out for lack of attention from ministers and bureaucrats, who work in government offices where stacks of yellowing files and papers are still a common sight.

"It's sad but most of these officials don't understand much about technology, so mastering email is something that is miles and miles away," said Vijay Mukhi, a Mumbai-based cyber security expert.

"These guys saw all the snooping news and suddenly they woke up and said 'lets make an email policy'. Enforcing this is not possible on a practical basis."

The IT ministry also plans to conduct workshops to teach employees about email security such as when to change passwords and user names and how to use email.

"Every employee should know how, what and when critical data can be vulnerable... with most work still done on paper, it is important to know the nitty-gritty of using email," Satyanarayana said.

For more details visit https://cis-india.org/news/afp-december-7-2013-annie-banerjee-indian-government-wakes-up-to-risk-of-hotmail-gmail

Indian government to bar politicians from using Gmail for official business

praskrishna — 2013-09-05T09:52:17Z

US-based email services seen as too risky.

This article by Neil McAllister was published in the Register on August 30, 2013. Sunil Abraham is quoted.

The government of India is reportedly planning to bar its employees from using Gmail and other foreign-based email services, amid concerns over surveillance by US spy agencies.

"Gmail data of Indian users resides in other countries as the servers are located outside," J Satyanarayana, India's secretary of electronics and information technology, told the Times of India. "Currently, we are looking to address this in the government domain, where there are large amounts of critical data."

The Indian government currently employs some 500,000 people, many of whom use Gmail for their primary email addresses. A quick glance at the contact page for the country's Department of Electronics and Information Technology reveals at least eight senior officials using Gmail, and still others with Yahoo! addresses.

Under the new directive, government employees will be asked to stick to official email addresses provided by India's National Informatics Centre (NIC). But an unnamed senior government IT official told the Times of India that many government workers choose Gmail and other foreign services because they are easier to use, and setting up accounts is much faster than working within the bureaucratic process of the NIC.

The move toward locally run email for Indian government workers comes in the wake of a string of revelations from documents leaked by Edward Snowden. Among the recent disclosures has been details of US electronic surveillance of foreign governments on US soil, where the National Security Agency even went as far as to snoop encrypted communications from United Nations headquarters in New York City.

No doubt equally concerning was a motion filed by Google in a US district court earlier this month, in which the Chocolate Factory asserted that "a person has no legitimate expectation of privacy in information he voluntarily turns over to third parties" such as Gmail.

But Sunil Abraham of the Bangalore-based think tank the Centre for Internet and Society said that foreign spying wasn't the only reason why government officials should be required to use a homegrown email.

"Use of official government email would also make it easier to achieve greater transparency and anti-corruption initiatives," Abraham told the paper. "Ministers, intelligence and law enforcement officials should not be allowed to use alternate email providers under any circumstance."

When contacted for comment, a spokeswoman for Google India said the company had not been informed of the proposed ban, adding, "Nothing is documented so far, so for us, it is still speculation." ®

For more details visit https://cis-india.org/internet-governance/news/the-register-neil-mc-allister-august-30-2013-indian-govt-to-bar-politicians-from-using-gmail-for-official-business