Centre for Internet and Society

Why NPCI and Facebook need urgent regulatory attention

sunil — 2018-06-12T02:07:42Z

The world’s oldest networked infrastructure, money, is increasingly dematerialising and fusing with the world’s latest networked infrastructure, the Internet.

The article was published in the Economic Times on June 10, 2018.

As the network effects compound, disruptive acceleration hurtle us towards financial utopia, or dystopia. Our fate depends on what we get right and what we get wrong with the law, code and architecture, and the market.

The Internet, unfortunately, has completely transformed from how it was first architected. From a federated, generative network based on free software and open standards, into a centralised, environment with an increasing dependency on proprietary technologies.

In countries like Myanmar, some citizens misconstrue a single social media website, Facebook, for the internet, according to LirneAsia research. India is another market where Facebook could still get its brand mistaken for access itself by some users coming online. This is Facebook put so many resources into the battle over Basics, in the run-up to India’s network neutrality regulation. an odd corporation.

On hand, its business model is what some term surveillance capitalism. On the other hand, by acquiring WhatsApp and by keeping end-toend (E2E) encryption “on”, it has ensured that one and a half billion users can concretely exercise their right to privacy. At the time of the acquisition, WhatsApp founders believed Facebook’s promise that it would never compromise on their high standards of privacy and security. But 18 months later, Facebook started harvesting data and diluting E2E.

In April this year, my colleague Ayush Rathi and I wrote in Asia Times that WhatsApp no longer deletes multimedia on download but continues to store it on its servers. Theoretically, using the very same mechanism, Facebook could also be retaining encrypted text messages and comprehensive metadata from WhatsApp users indefinitely without making this obvious.

My friend, Srikanth Lakshmanan, founder of the CashlessConsumer collective, is a keen observer of this space. He says in India, “we are seeing an increasing push towards a bank-led model, thanks to National Payments Corporation of India (NPCI) and its control over Unified Payments Interface (UPI), which is also known as the cashless layer of the India Stack.”

NPCI is best understood as a shape shifter. Arundhati Ramanathan puts it best when she says “depending on the time and context, NPCI is a competitor. It is a platform. It is a regulator. It is an industry association. It is a profitable non-profit. It is a rule maker. It is a judge. It is a bystander.”

This results in UPI becoming, what Lakshmanan calls, a NPCI-club-good rather than a new generation digital public good. He also points out that NPCI has an additional challenge of opacity — “it doesn’t provide any metrics on transaction failures, and being a private body, is not subject to proactive or reactive disclosure requirements under the RTI.”

Technically, he says, UPI increases fragility in our financial ecosystem since it “is a centralised data maximisation network where NPCI will always have the superset of data.” Given that NPCI has opted for a bank-led model in India, it is very unlikely that Facebook able to leverage its monopoly the social media market duopoly it shares with in the digital advertising market to become a digital payments monopoly.

However, NCPI and Facebook both share the following traits — one, an insatiable appetite for personal information; two, a fetish for hypercentralisation; three, a marginal commitment to transparency, and four, poor track record as a custodian of consumer trust. The marriage between these like-minded entities has already had a dubious beginning.

Previously, every financial technology wanting direct access to the NPCI infrastructure had to have a tie-up with a bank. But for Facebook and Google, as they are large players, it was decided to introduce a multi-bank model. This was definitely the right thing to do from a competition perspective. But, unfortunately, the marriage between the banks and the internet giant was arranged by NPCI in an opaque process and WhatsApp was exempted from the full NPCI certification process for its beta launch.

Both NPCI and Facebook need urgent regulatory attention. A modern data protection law and a more proactive competition regulator is required for Facebook. The NPCI will hopefully also be subjected to the upcoming data protection law. But it also requires a range of design, policy and governance fixes to ensure greater privacy and security via data minimisation and decentralisation; greater accountability and transparency to the public; separation of powers for better governance and open access policies to prevent anti-competitive behaviour.

For more details visit https://cis-india.org/internet-governance/blog/economic-times-june-10-2018-sunil-abraham-why-npci-and-facebook-need-urgent-regulatory-attention

When the war’s on WhatsApp

praskrishna — 2016-09-25T16:36:01Z

Slick, jingoistic videos are whipping up pro-war rhetoric on social media after the Uri terror attack.

The article by Manju V was published in the Times of India on September 25, 2016. Nishant Shah was quoted.

It packs a meaner punch than any 140-character tweet. In 140 jingoistic seconds, the cleverly packaged YouTube film veers from Mohammed Rafi to Chandra Shekhar Azad drumming up pro-war rhetoric to avenge the Pathankot attack. Set to the tone of chirping crickets on a moonlit night somewhere along the western border that India shares with its neighbour, the short film has two armymen in fatigues deliberate over the absolute need to respond with a counter attack. It ends in a staccato military drumbeat with a voiceover quoting Azad: "If yet your blood does not rage, then it is water that flows in your veins."

Posted about 10 days after the Pathankot attack in January, the video was resurrected last week after the country woke up to the Uri attack that killed 18 Indian soldiers in the deadliest assault on security forces in Kashmir in over two decades. Even as photographs of a grenade smoke-filled valley, tricolour-draped coffins, grieving sons, daughters and widows made the rounds in media outlets scores of Indians marched onto social media, some armed with incendiary prose and other with slick videos that expressed more anger than anguish.

In another video doing the rounds, a jawan, or someone in uniform, sings a poem warning Pakistan. His mates join in the refrain: "Kashmir toh hoga, lekin Pakistan nahi hoga."

These videos of jawans threatening to decimate Pakistan were shared by thousands. WhatsApp profile pictures and statuses were changed, Facebook posts got longer and vitriolic, Twitter #UriAttack exploded with expletives as the enough-is-enough sentiment peaked. It heralded the beginning of an era where the dynamics of Indo-Pakistan relations will play out not just in the diplomatic corridors of Delhi and Islamabad, the valley of Kashmir or the barracks of security forces; but also on the mobile phones, tablets and laptops of millions of Indians.

When contacted for a comment, the makers of the war-mongering 'Pathankot Tolerance' video didn't endorse war outright. "My individual opinion is that war is not a solution," said producer Santosh Singh, who heads the Mumbai-based V Seven Pictures. "Before we resort to war, we have to solve our internal problems. How can we let infiltration take place so blatantly?" he asked. Why then does the video not talk about this? Singh said that when one hears about such attacks, the instant reaction is to retaliate. "The video is based on that sentiment."

An electronics engineer, Singh also owns an IT recruitment firm. His film production company, which he runs along with his friend Vivek Joshi, made the Mauka Mauka World Cup video that went viral and also produces short films and videos for clients. "We have no political affiliations, in fact we turned down a couple of political parties who approached us," says Singh, adding that his company has made 30-35 films in less than two years. "Of these, about 10 are on issues close to our heart, like those on Afzal Guru and the Pathankot attack. We upload them on YouTube, they are aired without ads. We don't earn money from them," he adds.

Ugly gets outlet

Nitin Pai, director of Takshashila Institution, an independent centre for research and education in public policy, says that social media and some television studios have enabled people to express their subconscious fears and desires. "It is not just today that the people of India have been angry with Pakistan for fomenting terrorism in our country. But it is only now that they have ways to express this anger; unfortunately, social media dynamics amplify this anger in a grotesque, distorted manner, allowing the ugly and less-sensible views to rise to the top of the public discourse," said Pai.

Tracing the many origins of this phenomenon, psychiatrist Harish Shetty says that in an angst-ridden, globalized world, we need a whipping boy. "With the Uri attacks, the entire nation had a common enemy. In expressing collective anger, there's catharsis." The current outpouring is not just over the deaths of soldiers; such an incident also opens up older wounds, he says. "For a long time, Indians have found their leaders to be helpless. It's like a family that is attacked again and again by a neighbour, but the father does nothing about it. There has been a lack of strong response from 'papa figures' across time, which has led to a sense of anger and rage. After the Uri attacks, the collective self-esteem of the country took a beating, and people felt a need to assert themselves on social media. At such times strong action is viewed as legitimate, valid and free of guilt," he adds.

Amplifying angst

If social media brought together protesters in Tunisia and Egypt during the Arab spring, in democratic India it has turned into a platform for expressing mass disenchantment with the government, especially in the wake of such attacks.

Social media plays several roles in times of crises, says Nishant Shah, professor of digital media and co-founder of the Centre for Internet & Society, Bengaluru. One, it amplifies what is already being said in friend circles and living-room conversations in front of the telly, but spreads it to a larger audience. "The second role it plays is distribution: social media allows people to inherit other people's opinions, thus exposing them to new ways of thinking but also find corroborators for their own viewpoints," he says. The third is catalysis — social media also has the capacity to generate new information. "The format creates new kinds of truths. Things that can be caught in Snapchat videos, or visuals which can be remixed, all become a part of this zeitgeist," Shah says.

Virtual wars

But in India at least, social media is no indicator of considered public opinion, points out Pai. Shah adds: "What we are seeing is a filter bubble of a privileged set of people who are engaging in this debate."

Then again, what's said on social media needn't be endorsed in real life. Vivek Joshi, who wrote and directed the Pathankot video, says nobody in the world would want a war. "But when it comes to the lives of our soldiers, an answer has to be given. If the government had taken any visible action, then there would have been no need to put out a video like this," Joshi adds. And therein probably comes the new-age heuristic of venting out on social media.

For more details visit https://cis-india.org/internet-governance/news/times-of-india-september-25-2016-manju-vi-when-the-war-is-on-whatsapp

When the virtual world wakes up the real one

praskrishna — 2013-11-30T09:35:06Z

The unprecedented wave of voices speaking up against sexual harassment in recent times has as much to do with technology as the determination to seek justice. From Twitter to Tumblr, and blogs to pastebin, the internet's anonymity, reach and speed allow small, personal stories of abuse to swell into big stories.

The article by Malini Nair was published in the Times of India on November 24. Nishant Shah is quoted.

The outrage over the Tehelka case started with a post on pastebin, an anonymous document sharing site, on Wednesday evening. It contained the email managing editor Shoma Chaudhury had sent to the Tehelka staff with editor Tarun Tejpal's "atonement" letter appended below. A few hours later, the story had ballooned into a heated debate, and the outpouring forced what was being dismissed as an "internal matter" to be treated as a criminal case.

The two women who recently spoke up against harassment at the hands of a retired Supreme Court judge also used Facebook and the blogosphere to tell their stories, ensuring that the real world was actually moved into taking action. "The social web's biggest comfort is that we are no longer alone," says Nishant Shah, director, Research at the Centre for Internet and Society, Bangalore. "No matter what has happened to us, it has happened to somebody else. The possibility of finding credulous and empathetic audiences who but share our pain, understand it, and respond to it is unprecedented." Retweets and comments have often been described as the digital equivalent of holding hands.

Shah's pick of web campaigns that highlighted the problems include Blank Noise which calls women to talk of small, everyday stories of harassment, the Pink Chaddi drive and Why We Need Feminism, a web venture across American universities.

The other reason why the net encourages victims of abuse who might otherwise have stayed quiet to speak out is its "pseudonymity", as Shah terms it. In societies where there is shame attached to talking about sexual assault, the online space saves women from having to put themselves out in the "physical space" while ensuring that the perpetrator is exposed, he points out.

A plus for social web is that it gets other victims to speak up as well, gathering force and magnitude in the process. This happened in the instance of the legal interns. Another instance that surfaced just a month ago was of two American women science bloggers Danielle Lee and Monica Byrne. When Lee refused to write a piece for free for Biology Online, she was called "urban whore" by an enraged editor. She blogged about it and the ensuing storm over social media got her huge support. After Lee's expose, Byrne blogged about an acutely sexual conversation a powerful science writer inflicted on her. The outrage this provoked abated only after he made amends.

As an article in Gender and Culture blog project puts it: "( The digital world provided) a forum for these victims to document their abuse, and a courtroom where the abusers have been judged and found guilty by public opinion".

Of course there are problems with the internet's version of justice — it tends to play judge, jury and executioner with giddy recklessness. In the Tehelka case, the first questionable moment came when the survivor's email was tweeted and re-tweeted with no concern for her requests for anonymity. "The problem with Twitter and Facebook is the incredible and gross violations of privacy of the survivor. And otherwise responsible adults join lynch mobs calling either the survivor or the accused names, making ridiculous allegations, desperately looking for an easy narrative to hang everything on," says author Nisha Susan, who led the Pink Chaddi campaign.

Commentator Santosh Desai says that it is tough to choose between an unbridled but powerful social web and one that is cautious and governed by norms. "Earlier, there were receivers and broadcasters who were few and governed by licenses and a code of behaviour. Now everyone is a broadcaster, everyone is a circulator and everyone is an aggregator. Having no oversight here could be problematic," he says.

Susan says communities need to go beyond social media in such situations. "It should also be a time for us to reflect. On what we would do in such a situation, how we could perhaps prevent it, on the sense of entitlement powerful men have all over the world, on the awful pressures young women face. We should all be reflecting. Instead we are just re-tweeting."

For more details visit https://cis-india.org/news/the-times-of-india-malini-nair-november-24-2013-when-the-virtual-world-wakes-up-the-real-one

When politics gets social

praskrishna — 2014-04-04T07:52:46Z

In the run-up to the general election, social media companies explain how the political campaigns this time are very different from what they were five years ago.

The article by Chanpreet Khurana was published in Livemint on March 11, 2014. Sunil Abraham is quoted.

“Okay, I didn’t gain anything. I lost,” Aam Aadmi Party (AAP)’s Arvind Kejriwal conceded disarmingly during a town hall meeting on Facebook last week. He was responding to a question from Candidates 2014 host Madhu Trehan on his much critiqued dharna (sit-in protest) during his 49-day chief ministership of Delhi.

Even as elections to 543 constituencies approach, political parties and politicians are putting their online campaigns in top gear. Sample some of the activity in just the last week. On Sunday, the Indian National Congress party asked voters to share their thoughts on what to include in the party’s Lok Sabha election manifesto—on Twitter. On 8 March, Narendra Modi, the Bharatiya Janata Party’s prime ministerial candidate, held the second session in his Chai Pe Charcha with NaMo series—this time on women’s empowerment. And All India Trinamool Congress chief Mamata Banerjee’s “Girls are our assets” post on Facebook was liked more than 22,000 times.

	Recognizing the high level of engagement around politics on social media, companies like Facebook and Google are driving initiatives on this theme in peak election season—polling starts on 7 April. The Facebook Talks Live’s Candidates 2014 series (also broadcast on NDTV), which in its first week featured Kejriwal, Banerjee, Rashtriya Janata Dal chief Lalu Prasad and the Samajwadi Party’s Akhilesh Yadav, is one example. There are many new services being launched online in the run-up to the Lok Sabha election.

Recognizing the high level of engagement around politics on social media, companies like Facebook and Google are driving initiatives on this theme in peak election season—polling starts on 7 April. The Facebook Talks Live’s Candidates 2014 series (also broadcast on NDTV), which in its first week featured Kejriwal, Banerjee, Rashtriya Janata Dal chief Lalu Prasad and the Samajwadi Party’s Akhilesh Yadav, is one example.

There are many new services being launched online in the run-up to the Lok Sabha election.

Know your candidate

On 20 April 2011, US President Barack Obama appeared on Facebook Talks Live, opening the floodgates for a new kind of engagement between political leaders and the electorate. Cut to almost three years later, and the Facebook-led “town hall” meeting has come to India. On 4 March, Candidates 2014 launched with Kejriwal taking questions on issues like women’s safety, reservation for the backward classes and the plight of contractual workers, and detailing his vision for the country. A video of the town hall is available on Facebook and YouTube and has been viewed at least 30,000 times. As part of the format of the town hall, the questions came in equal parts from the live audience, Trehan and from a pool of questions submitted on the Facebook India page.

To the agile leader then, social media can be more than just another pulpit to broadcast views and give a speech from. It’s something Sunil Abraham, executive director of The Centre for Internet And Society, a non-profit research organization, can’t stress enough. “Social media provides unmediated access; in that sense it is a tremendously effective tool,” says Bangalore-based Abraham in a phone interview. “The question is, are political parties agile enough to take advantage of it?”

For more details visit https://cis-india.org/news/livemint-march-11-2014-chanpreet-khurana-when-politics-gets-social

WhatsApp ruling: Experts seek privacy law

praskrishna — 2016-09-27T02:35:06Z

On August 25, Whatsapp updated its policy to share user content with social network; the decision opened new monetisation models for the messaging app.

The article by Apurva Venkat and Moulishree Srivastava quoted Sunil Abraham. It was published in the Business Standard on September 24, 2016.

The recent Delhi High Court ruling that messaging app Whatsapp cannot share user data highlights the need for legislation on privacy, according to experts.

On August 25, Whatsapp, a platform with 70 million users in India that was acquired by Facebook in 2014, updated its policy to share user content with the social network. The decision opened new monetisation models for the messaging app.

In response to a PIL, the court ordered WhatsApp to delete data of users who chose to opt out of its policy changes before September 25. It also orderedWhatsApp not to share data collected before September 25 with Facebook for users who had not opted out.

"The decision makes a strong statement on privacy," said Sunil Abraham, executive director of the Centre for Internet Society. According to him, a user trusts a platform and provides access to his data. As another firm acquires the platform, it gains access to the data.

"Facebook owns Whatsapp. It has to look at ways of monetising it," said Nikhil Pahwa, co-founder of SavetheInternet.in.

"With so much digital data being generated, there is a need for a privacy law in the country," said Pahwa.

"Facebook's consent interface is confusing. It can make a person who wants to opt out let the company access his data," said Abraham, adding a law would take care of such intricacies. The government is working on a privacy bill.

Saroj Kumar Jha, partner, SRGR Law Offices, said there were few judgments on privacy in India based on constitutional rights.

"While the Information Technology Act enables courts to pass judgments on global companies on privacy, enforcing the orders is difficult," he said.

"What is required is a privacy law that can protect user data and uphold the individual's right to privacy," he added.

For more details visit https://cis-india.org/internet-governance/news/business-standard-september-24-apurva-venkat-and-moulishree-srivastava-whasapp-ruling-experts-seek-privacy-law

WhatsApp races against time to fix fake news mess ahead of 2019 general elections

Admin — 2018-07-25T15:27:20Z

On Friday, when WhatsApp announced that it would pilot a ‘five media-based forwards limit’ in India, the government came up with an unequivocal reminder.

The article by Venkat Ananth was published in Economic Times on July 24, 2018. Sunil Abraham was quoted.

“When rumours and fake news get propagated by mischief mongers, the medium used for such propagation cannot evade responsibility and accountability. If they remain mute spectators, they are liable to be treated as abettors and thereafter face consequent legal action,” noted a ministry of electronics and information technology (MeitY) statement.

The statement also said there was a need for bringing in traceability and accountability, “when a provocative/inflammatory message is detected and a request is made by law enforcement agencies.”

Significantly, MeitY took aim at WhatsApp’s core end-to-end encryptionbased product feature and its oft-quoted and reiterated commitment to privacy. It was specific, going beyond the usual “do more” requests.

The stand also poses an interesting dilemma for the messenger service. How can it act while protecting its privacy commitment?

“It is practical ly impossible for WhatsApp to regulate content in the peer-to-peer encrypted environment it is set up in,” says Rahul Matthan, partner, Trilegal. “An encrypted platform is what we want. The government is trying to maintain a strict and difficult balance. The government tends to err on the side of violating civil liberties over offering privacy to innocent users. The WhatsApp case is going in that direction.”

No Longer Low-Key

In India, its largest market, WhatsApp has benefitted from quietly operating in the shadows of its more popular parent, Facebook, growing to a currently active user base of 200 million.

However, in the last six months, while it continues to be perceived as an asset by politicos for outreach and propaganda, WhatsApp is now increasingly being tapped by the bad guys to disseminate deliberate misinformation, rumour mongering and fake news. And not the Donald Trump kind either.

It is leading to loss of lives on the ground, through lynchings, kidnappings and related crimes.

WhatsApp spokesperson Carl Woog says, “The recent acts of violence in India have been heartbreaking and reinforce the need for government, civil society and technology companies to work together to keep people safe.”

“By focusing on solutions to fake news inside our smartphones, we are ignoring a tougher problem that requires several complementary solutions,” says Apar Gupta, a Delhi-based lawyer and cofounder of the Internet Freedom Foundation.

“Let us not forget that a platform is not responsible for policing.”

But the general public and government perception — and, to some extent, concern — remains that WhatsApp has been slow to react to these situations.

To Police or Not to Police

Interestingly, the government and ruling party realise WhatsApp could be pivotal to their fortunes in the next electoral cycle — in the run-up to Elections
2019.

“The government is coming under increased pressure to act on these lynchings, which is why it is taking a shootthe-messenger kind of an approach,” says Matthan. “An unsophisticated government would have advocated a blanket ban on the source. But here, the government, it appears, wants to regulate tech by having access to your device, through an app, in the case of the (telecom regulator) Trai DND app to battle spam.”

This is also why WhatsApp has intensified its outreach efforts. Over the past 10 days, a team of its US and India-based executives have been meeting key stakeholders in Delhi and Mumbai, including the Election Commission, political parties, the Reserve Bank of India, banks and civil society, as ET reported last week.

The team includes public policy manager Ben Supple, senior director, customer operations, Komal Lahiri and WhatsApp India communication manager Pragya Misra Mehrishi. They are now expected to meet key government officials from MeitY from Monday, sources say.

“The intense outreach efforts is essentially linked to WhatsApp wanting to protect its payments play in India,” says a Delhi-based public policy professional, who did not want to be named as he is not authorised to speak to the media.

“It (WhatsApp) is really worried about Google’s efforts with Tez and the gap that will only widen if the government delays grant of permission.”

WhatsApp is stressing some key points while reinforcing the steps it is taking to counter challenges. One, the best practices of using the platform. Two, the need to work together to prevent abuse of WhatsApp, and three, most importantly, to educate people about the best ways of using the platform. WhatsApp was primarily designed for private, oneon-one messaging or group chats among acquaintances, not for mass broadcast, which parties resort to during elections.

WhatsApp says it is working on a warfooting to tackle the problems. It has introduced product changes to counter user behaviour. There’s more control, where a group ‘admin’ can restrict users who can send messages to the group, modify a group icon or edit description, a feature for which it has taken a leaf out of rival Telegram’s book. To counter fake news, it added a ‘forwarded’ label. And now, limited the forwarding to five in India, and 20 in the rest of the markets, a significant reduction from 250 prior to that.

While the impact of these product tweaks is yet to be seen at an individual user level, the larger concern for WhatsApp today is the potential misuse of its platform to manipulate elections, a very real possibility next year.

Tipping Point

The company’s noticeable change of tack comes after it noticed certain trends during the recent Karnataka elections, during which one of its executives spent a week in Bengaluru.

One of the political parties, which a person aware of the developments in WhatsApp declined to name, was using “dozens of accounts to create thousands of groups,” as part of its campaign.

The party, the source says, was adding random numbers (approximately 100) to the group during creation. By random numbers, he meant people who did not know each other, something WhatsApp can identify using the metadata it collects when a user gives it access to its phone book. WhatsApp deems this behaviour ‘organised spamming.’

“These were real people not necessarily known to each other,” says the person quoted above. “A specific account would be added to that group to be made the admin.”

Mostly, this admin was the number used to create these multiple groups or, in WhatsApp terms, the account that was not behaving the way private or group communication happens.

Also, the users would be a mix of fake accounts, which is a major red flag for WhatsApp. “The group starts with some bulk added users and then the real ones get bulk-added,” says the source. WhatsApp deems this practice a violation of its terms of service.

Company sources add that WhatsApp was able to detect these trends and proactively banned these users before they were able to add people. “In some cases, our systems didn’t catch this in time, but we were able to proactively prevent users from receiving such spam. That detection is now internalised and if someone tries to replicate that behaviour anywhere in the world, we will be able to detect them,” says another person familiar with developments at WhatsApp.

According to several media reports, the BJP and the Congress too created over 30,000 groups for campaigning and organising efforts. To counter organised political spamming, WhatsApp has now begun using machine learning tools. WhatsApp can trace the last few messages in a group and block it entirely from the platform. At the detection level, WhatsApp checks for familiarity. “Do the persons know each other, or have they interacted before?” through metadata it possesses through phone numbers.

The second person quoted in the story says the company now focuses its detection “upstream,” that is, catching the user at the registration stage. “When you register on WhatsApp and immediately create a group, questions asked are, ‘Does this behaviour look like what a regular user does? Or does it look like users who have misused it in the past?’” he says.

WhatsApp, sources tell ET, is also using machine learning to detect sequential numbers that could be used to create these groups. “If they go and buy a phone number, they go to one carrier and its mostly sequential. If we notice 100 numbers with the same prefix have signed up, nearly 80 get automatically banned. What we do is feed these sequences, permutations and combinations to detect good/bad users,” the person quoted above says. “It learns millions of these combination signals on behaviour and help us make a decision.”

Civil Society as a Key Layer

WhatsApp also sees an enabling role for civil society, especially for digital literacy. Its team has currently met seven non-governmental organisations, including digital literacy groups and others involved in the area of financial inclusion. This is part of its public policy efforts while also solidifying its payments play.

“The level of responsibility for a platform is to not consciously cause — and, in fact, to take active measures to prevent — social harm,” says Gupta of IFF. “It has to be done without injury to end-to-end encryption, which offers safety and privacy to users.

Many products and product strategies can be adopted — from increasing media diversity on the platform to promoting auditing features that rely on partnerships with fact-checking organisations. We must demand accountability but resist the rhetorical attraction of technophobia.”

As ET has reported, WhatsApp will adapt a fact-checking model, Verificado 2018, deployed during the recent Mexican presidential elections. Verificado proactively debunked fake news and misinformation on the platform. “The rumours were found to be very similar to India.

Verificado was specifically focused on misinformation from candidates,” says the first person quoted in the story. “Plus, it helped effectively tackle misinformation during an earthquake in Mexico.”

For WhatsApp, one of the key learnings from the Mexico elections was that it could look at the spam reports and categorise them as politics-related. The company, unsurprisingly, saw an increase in political spam in the buildup to election day.

“They realised Verificado assists users to get help within the app. But it also aids news organisations, political parties, the government and users,” adds the person. The company is undertaking a similar exercise in Brazil, where 24 media outlets have come together under the Comprova initiative to fact-check viral content and rumours on WhatsApp.

Sunil Abraham, executive director of the Bengaluru-based Centre for Internet and Society believes WhatsApp can further tweak its product to enable real-time checks. “They can enable a ‘fact check this’ button for users to upload content to a fact-checking database. If the content has already been fact-checked, the score can be displayed immediately. Alternatively, the fact-checking service can return the score at a later date,” he explains.

For more details visit https://cis-india.org/internet-governance/news/economic-times-venkat-ananth-july-24-2018-whatsapp-races-against-time-to-fix-fake-news-mess-ahead-of-2019-general-elections

WhatsApp and Transnational Lower-End Trading Networks

Maitrayee Deka — 2015-09-13T10:44:15Z

This post by Maitrayee Deka is part of the 'Studying Internets in India' series. Maitrayee is a postdoctoral research fellow with the EU FP7 project, P2P value in the Department of Sociology, University of Milan, Italy. Her broader research interests are New Media, Economic Sociology and Gender and Sexuality. This is the first of Maitrayee's two posts on WhatsApp and networks of commerce and sociality among lower-end traders in Delhi.

One of the first things that stood out in the Delhi traders’ anonymous bearings was their love for smartphones. In the two mass electronic markets in the city, Lajpat Rai Market and Palika Bazaar, the traders of video games carried varieties of smartphones of different sizes and colours. From iPhones to Samsung Galaxies, the traders vied for the latest gadget available in the market. As a researcher, within a year, I moved from getting an accidental peek into their smartphone screens to a phase when the traders felt comfortable sharing their personal messages with me.

I spend considerable time in Lajpat Rai Market and Palika Bazaar in Delhi between September 2012 and September 2013. I interviewed different traders and had day-to-day conversations with the people coming to their shops. Tracking several events in the shops, I knew the relative time that the traders spent on various activities. I saw on most days the traders divided their time between interacting with consumers and browsing through their smartphones. The traders spent maximum time of their virtual existence by being on WhatsApp. A large part of the goods to local electronic markets in Delhi were coming from China. And increasingly, WhatsApp was becoming an important communication channel managing transnational trade related exchanges.

Entry into the WhatsApp World

When I started visiting Lajpat Rai Market and Palika Bazaar at the end of 2012, I had not installed WhatsApp on my phone. The traders in the different markets were curious to know what was keeping me away from it. They came to a point when they could not anymore see me outside of WhatsApp. I, on the other hand had reservations of being part of a medium that meant continuous contact with the world. When finally I got past my initial doubts, there arose another problem. I could not download WhatsApp on my phone without the server asking for a rental fee of 250 Indian Rupees. After a few days, on being asked the same question again in Palika Bazaar, I told the traders about my problem. Lalit, a trader in Palika Bazaar retorted, ‘That is not possible! We did not pay to install WhatsApp on our phones’. He asked me to pass him my phone. Lalit cracked the security code by getting on to the Palika Bazaar Wi-Fi network and installed WhatsApp on my phone.

It was interesting to see that the traders did not always use legal channels to buy their smartphones and get an Internet connection. Many of the conversations about their smartphones were about where the traders bought their stolen iPhone. There were discussions about how much money different traders paid to get their hands on a used iPhone. They compared the feature and quality of each other’s smartphone. Sometimes even I was asked if I wanted a new cell phone for a good price and if I wanted to sell my old phone. The fascination for smartphones that in the first instance seemed like a fad for a shiny branded product, showed its own complex side. The importance of keeping an expensive phone had its conspicuous side and that explained the fascination of traders for iPhones. However, that was not all. The conspicuous side of the trader was not visible in other dimensions of their being, for instance the clothes they wore. The traders on most days were happy to buy second-hand and knock off goods from the street vendors outside Lajpat Rai Market and Palika Bazaar. The inclination of the traders to carry expensive phones and willingness to try different measure to possess them showed that smartphones were important to the traders.

I tried to understand the inclination of the traders towards their smartphones. One way by which I thought their smartphone usage could become intelligible to me was by locating it in their everyday world. What the traders did on most days and exploring where and how smartphones configured amongst other activities could make its usages noticeable. I observed one of the things that the traders hated in both the markets was to have free time in their hands. The time for chatter meant that they were not doing business. And the possibility of not making enough money made them anxious. The traders were trying to curtail the amount of time they spent on insignificant activities including the need to talk to me. Most of the times, they only entertained me when they did not have consumers in their shops. It was then interesting for me to see the traders’ fascination for their smartphones. The usage of the Internet also ideally carried levels of non-productivity that on other instances made the traders very anxious. It meant that they were not making direct monetary transactions with consumers. Having seen the traders obsessed about making sales, I was unable to place their choice of being on their smartphones in their free time. Soon, this dilemma was cleared. Being on the smartphone did not mean the traders were making social calls. Most of the times when the traders were on their smartphones, they were texting each other on WhatsApp. Eventually, I found out that most of the exchanges on WhatsApp were trade related. The traders not using WhatsApp for pleasure indicated that their activity on the Internet reflected how they are offline. The traders were preoccupied with the prospect of making profit and they did not want to waste any opportunity coming their way. This was the driving force and the source of innovation in the markets. The traders’ smartphone usage also followed the instinct of minimising wastage and find business opportunities in everything they did. The result was to make dominant in the markets another usage of WhatsApp other than its use for social communication: transnational real time trade exchanges.

WhatsApp and Trading

Especially in the year’s post 2010, the mass markets of video games in Delhi were in a strange predicament. The heyday of these markets as the sole channels of distribution and acquisition of video games was over. Increasingly, these markets that sold paraphernalia of gaming devices were challenged by the onslaught of online gaming market and gaming franchises in Delhi. In such a situation, many of the traders were trying to find alternative ways to boost up their sales. One of the ways in which these markets were trying to sustain themselves in the face of immense competition was to find niche market of electronic products. The traders in Lajpat Rai Market and Palika Bazaar extended their trading links to China in an effort to get diverse as well as cheap electronic products. The Chinese lower end markets particularly in the Guangdong province became an important supply node of different qualities of video games to the mass markets in Delhi. For each PlayStation Portables in Lajpat Rai Market and Palika Bazaar, there were a number of cheap varieties of ‘Made in China’ handheld games.

All the multiple links with the Chinese lower-end economy that sustained the day-to-day functioning of the Delhi markets depended on continuous communication between the Indian and Chinese traders. This was where WhatsApp took control of the trading scene. Traders used it regularly to communicate with the Chinese traders. In the absence of face-to-face interaction, WhatsApp messages were the only way to initiate business transactions with the Chinese traders. The lack of face-to-face interaction presupposed that trading details were resolved on WhatsApp. There were a large number of to and fro exchanges of messages. As the traders felt comfortable showing me glimpses of their WhatsApp messages, I saw that on a single day hundreds of messages were exchanged even before the real transaction of placing an order and payment details were discussed. Many of the messages were exchanges of images of different varieties of a game that the Indian traders might be interested in. Image after image arrived of video games with their prospective prices. Most of these exchanges were in English. However, at times there were also messages in Cantonese that the traders translated online.

WhatsApp therefore, developed as a space where the traders got past their geographical and linguistic gap to successfully communicate and complete business transactions. WhatsApp facilitated messages enabled the markets to get new innovative products into the local market as well as track the complete transaction process.

For individual traders, WhatsApp was the lifeline of their present trade networks. Before the arrival of ‘instant messaging app for smartphone’, most of the links that the traders had with the transnational markets were through individual importers that travelled to Hong Kong, Bangkok and other places in Asia to get games manufactured in Japan and the West. During those days, a trader had to depend on the importers to bring him exclusive products that could be profitable in the local markets. The traders pointed out that the problem with this arrangement was that traders were almost entirely dependent on the importer not only to smuggle new products into the country but also for information. Often the traders knew of new products only with the information they acquired from the importers.

Things changed drastically with the advent of instant messaging especially WhatsApp. Now the traders were only a message away from connecting to their collaborators in China. An individual trader had the possibility to bring new innovative products without relying on others for information and trade negotiations. This increased the possibility for him to have a period of privileged profit before the product got widely popularised in the market. The constant exchanges of samples of video games and accessories were a step towards that. Often the traders kept up with continuous communication with the Chinese traders, as they did not want to miss an opportunity to be the first one to track the next big trend in the market. If the traders felt that they had picked up a product that had the potential of becoming a popular product, they were not hesitant to place huge orders. The traders said that they trusted the work ethics of the Chinese people. However, what also helped the traders to appreciate the Chinese work ethics was their constant tracking of transaction on Whatsapp. Bharat, a trader in Lajpat Rai Market had placed a large order for adaptors of gaming consoles in July 2013. Once when I was visiting his shop, he was messaging with a trader in China to sort out the delay that was occurring in the delivery process. Bharat said to me still texting on WhatsApp, ‘I don’t worry about the Chinese; they are very sincere and trustworthy’.

WhatsApp is synonymous with transnational trading alliances in the lower-end markets in Delhi. It has seamlessly merged into the trading environment to the extent that the traders do not consciously reflect on the role it plays in pushing their individual trade forward. It seemed traders lived two parallel lives: one with the local market goers in Delhi and another with the Chinese traders on their smart phones. The individual trader-to-trader exchanges between two countries are unprecedented in history. And with time, the trade networks are becoming denser and wider.

The post is published under Creative Commons Attribution 4.0 International license, and copyright is retained by the author.

For more details visit https://cis-india.org/raw/blog_whatsapp-and-transnational-lower-end-trading-networks

WhatsApp and the Creation of a Transnational Sociality

Maitrayee Deka — 2015-07-10T04:22:38Z

This post by Maitrayee Deka is part of the 'Studying Internets in India' series. Maitrayee is a postdoctoral research fellow with the EU FP7 project, P2P value in the Department of Sociology, University of Milan, Italy. Her broader research interests are New Media, Economic Sociology and Gender and Sexuality. This is the second of Maitrayee's two posts on WhatsApp and networks of commerce and sociality among lower-end traders in Delhi.

The beginnings of WhatsApp messages in Lajpat Rai Market and Palika Bazaar with lower-end traders in China were mostly trade related. However, with time, the messages were not just confined to the domain of products and prices. The traders in India started sharing personal messages and images with their counterparts in China. Some of the social exchanges could be interpreted within the gambit of the economy. In other words, these social exchanges in the form of photographs of anime and food developed trust and familiarity that further led to the strengthening of trade ties. However, other social exchanges on WhatsApp could be related to a more personal space whereby traders were binding themselves with Chinese traders in romantic relationships. In 2012 and 2013, the transnational sociality through WhatsApp was at its embryonic stage and showed signs of becoming much more layered in the future.

Friendship and Trust

The traders in Lajpat Rai Market and Palika Bazaar elaborated on how the electronic shops in China were usually managed by polite and pretty women. Women managing the business transactions in China made the Indian traders come in touch with them via WhatsApp. One day at Rakesh’s shop at Palika Bazaar, he was browsing through his WhatsApp messages. He invited me to see some of the messages that he thought were interesting. As I went closer to the screen, I saw images of food, a bowl of soup and salad. Rakesh told me how he had become friends with this particular trader. She was a married woman and had a shop that sold accessories of games in China. Rakesh said over time that they had developed a special relationship. He regarded her as a warm person. He was familiar with her domestic life, her children and how old they were. Their interactions were governed by the exchange of information on everyday activities going on in their lives.

I observed that the trading exchanges were mitigated by various social and personal messages. It appeared that the personal messages were a way to maintain continuity of ties, business and otherwise. Whereas the traders between the two countries might not be doing business with the same set of people everyday, an image of a teddy bear and food acted as an assurance of a lasting relationship. It indicated that even though trade between two persons was temporarily suspended, they were going to revive it in the near future. The exchange of personal messages in between trade activities developed trust and mutual respect. In a physical market place, traders developed special relationship with different people, for instance, with the customers who came to the same shop regularly. These relationships were born out of investment of time and energy on part of the both parties, the traders as well as the customers. In both Palika Bazaar and Lajpat Rai Market, often a trader had a customer who had been visiting his shops since he was a child. The trader knew what his customer did for a living as an adult, how many members his family had and their whereabouts. The same case was true for a customer. He quickly noticed what were the changes that had been made to the physical layout of the shop. The long-term ties were advantageous to both the parties. Usually the customer got a good discount for a product and he also knew that in case of a defect he could easily ask for a replacement. For the trader, a customer was a constant source of income, as he knew that the customer would not choose another trader over him. Rarely, a permanent customer approached another trader in the market.

In the absence of physical proximity between the Chinese and Indian traders, there were few occasions in which the ties of trust based on familiarity could be developed. Simple exchange of trade messages did not build social solidarity. In order for the traders to substitute the strength of physical proximity and face-to-face interaction online, the cute anime were seen to intervene. The exchange of photographs and cartoons indicated that individual traders invested in each other and developed a circle of familiar objects and symbols that generated trust.

WhatsApp and Movement

Bubo is a fascinating figure in Palika Bazaar. In Govind’s shop, several people had different things to say about Bubo. Some claimed that he was a genius; other told me he was a techno nerd. Some even thought of him as an eccentric person who lacked social skills and etiquettes. Everyone however, unanimously agreed that I should not miss an opportunity to talk to him. Bubo handled the online sales of video games for Govind’s shop. He was responsible for putting up new/ second hand video games and accessories on diverse e-commerce sites in India such as OLX and Flipkart. He had a rented apartment in Pitampura area in New Delhi. Bubo and his brother usually spend days in their apartment in front of their computer screens. The traders in Govind’s shop were of the opinion that Bubo was more comfortable being online than meet people physically. This proved to be true. I on different occasions tried to talk to Bubo. I called him on his phone and he evaded the prospect of meeting me face to face. In the end, I gave up on him, as I did not know how to convince him to have a chat with me. While I personally never met Bubo, I collected information about him from different sources. As the traders at Govind’s shop found him peculiar, they had many things to say about him. They were all impressed by the fact that Bubo self taught himself to be a hacker and got past through many of the website requirements. The online trading networks entailed certain rules. For instance, with relation to the matters of quality of goods, many of the online marketing websites such as Flipkart in India wanted the trader to put up guaranteed products. According to the traders, Bubo was able to find solution to get past the different barriers put up by the big companies. Bubo with his hacking skills was an assent to Govind’s shop. Therefore, it was not surprising to see that throughout the course of my fieldwork, his name kept reappearing. In January 2015, when I went to Govind’s shop, the mythical figure of Bubo came up again. This time I saw his face for the first time on WhatsApp through Govind’s iPhone 5. I learnt that Bubo was in China. He had a new Chinese girlfriend whom he had met through online trading exchanges. As I flipped through the images on Govind’s phone, I saw Bubo dining with his girl friend, meeting her wide circle of friends and family in China.

Bubo’s story is an interesting illustration of how the lower-end trading alliances initiated by WhatsApp start to have a life of its own. Bubo was ambitious and wanted to make the most of the opportunities available to him. However, as Govind maintained his relocation to China could not be simply put as a business strategy. Govind recollected that Bubo held a fascination for Chinese women. His move to China therefore was both an attempt to better his economic prospects as well as an attempt at finding romantic love. Bubo was trying hard to teach himself Chinese and if everything worked in his favour, he might end up making a permanent move to China, Govind added.

Conclusion

For many of the users of WhatsApp all over the world, it is difficult to imagine it as a tool for business. We are accustomed to sharing personal messages and images with friends and families living in different parts of the world. Only in recent times, we hear varied usages of WhatsApp: to spread xenophobic messages in closed groups, and organize events and community tasks. Even then, the impersonal usage of WhatsApp is marginal.

In early May 2015, I was part of a meeting of peer-to-peer value creation in Europe. One of the participants spoke about how a Fablab in Madrid was beginning to use WhatsApp to assign community related tasks and operations. It made me realise how the traders in Delhi were one step ahead of all of us. Already in 2013, traders were co-opting WhatsApp to their work sphere. At a time in which high-skilled knowledge workers in Europe are devising community platforms akin to WhatsApp, traders in Delhi saw the potential of it as a social and economic tool much earlier. I was amazed at the pace at which traders submerged themselves in different endeavours. The traders never had a half-hearted relationship with anything, their consumers and the search for profit. The similar merging into the environment was visible through their use of smartphones as well. The traders in Lajpat Rai Market and Palika Bazaar learnt to stay alert surviving in the margins of an urban economy. It had become their second nature to see an opportunity in everything. And this attitude meant that they pushed every situation to its limits. Flirting with laws, selling of contraband and pirated media goods showed that the traders were ready to test the limits of any situation.

WhatsApp and trade related texts are an example of thinking out of the box. Even in its early days, WhatsApp facilitated trading links show a lot of potential. The traders from China and India have established profitable business links. Some of them have developed friendship and romantic relationships. Only time will tell to what extent and in which direction trade related ties would evolve. One could only imagine the prospect of long-term dense trading networks with China. With the official players in India and China having strong visions about where the futures of both countries should head, the experimental and out of the box thinking of many of the traders with technology per se gives hope for a more hybrid regime in Asia.

The post is published under Creative Commons Attribution 4.0 International license, and copyright is retained by the author.

For more details visit https://cis-india.org/raw/blog_whatsapp-and-the-creation-of-a-transnational-sociality

What’s up with WhatsApp?

Aayush Rathi and Sunil Abraham — 2018-04-23T16:45:51Z

In 2016, WhatsApp Inc announced it was rolling out end-to-end encryption, but is the company doing what it claims to be doing?

The article by Aayush Rathi and Sunil Abraham was published in Asia Times on April 20, 2018.

Back in April 2016, when WhatsApp Inc announced it was rolling out end-to-end encryption (E2EE) for its billion-plus strong user base as a default setting, the messaging behemoth signaled to its users it was at the forefront of providing technological solutions to protect privacy.

Emphasized in the security white paper explaining the implementation of the technology is the encryption of both forms of communication – one-to-one and group and also of all types of messages shared within such communications – text as well as media.

Simply put, all communication taking place over WhatsApp would be decipherable only to the sender and recipient – it would be virtual gibberish even to WhatsApp.

This announcement came in the backdrop of Apple locking horns with the FBI after being asked to provide a backdoor to unlock the San Bernardino mass shooter’s iPhone. This further reinforced WhatsApp Inc’s stand on the ensuing debate between the interplay of privacy and security in the digital age.

Kudos to WhatsApp, for there is growing discussion around how encryption and anonymity is central to enabling secure online communication which in turn is integral to essential human rights such as those of freedom of opinion and expression.

WhatsApp may have taken encryption to the masses, but here we outline why WhatsApp’s provisioning of privacy and security measures needs a more granular analysis – is the company doing what it claims to be doing? Security issues with WhatsApp’s messaging protocol certainly are not new.

Man-in-the-middle attacks

A study published by a group of German researchers from Ruhr University highlighted issues with WhatsApp’s implementation of its E2EE protocol to group communications. Another paper points out how WhatsApp’s session establishment strategy itself could be problematic and potentially be targeted for what are called man-in-the-middle (MITM) attacks.

An MITM attack takes the form of a malicious actor, as the term suggests, placing itself between the communicating parties to eavesdrop or impersonate. The Electronic Frontier Foundation also highlighted other security vulnerabilities, or trade-offs, depending upon ideological inclinations, with respect to WhatsApp allowing for storage of unencrypted backups, issues with WhatsApp’s web client and also with its approach to cryptographic key change notifications.

Much has been written questioning WhatsApp’s shifting approach to ensuring privacy too. Quoting straight from WhatsApp’s Privacy Policy: “We joined the Facebook family of companies in 2014. As part of the Facebook family of companies, WhatsApp receives information from, and shares information with, this family of companies.” Speaking of Facebook …

Culling out larger issues with WhatsApp’s privacy policies is not the intention here. What we specifically seek to explore is right at the nexus of WhatsApp’s security and privacy provisioning clashing with its marketing strategy: the storage of data on WhatsApp’s servers, or ‘blobs,’ as they are referred to in the technical paper. Facebook’s rather. In WhatsApp’s words: “Once your messages (including your chats, photos, videos, voice messages, files and share location information) are delivered, they are deleted from our servers. Your messages are stored on your own device.”

In fact, this non-storage of data on their ‘blobs’ is emphasizes at several other points on the official website. Let us call this the deletion-upon-delivery model.

A simple experiment

While drawing up a rigorous proof of concept, made near-impossible thanks to WhatsApp being a closed source messaging protocol, a simple experiment is enough to raise some very pertinent questions about WhatsApp’s outlined deletion-upon-delivery model. It should, however, be mentioned that the Signal Protocol developed by Open Whisper Systems and pivotal in WhatsApp’s rolling out of E2EE is open source. Here is how the experiment proceeds:

Rick sends Morty an attachment.

Morty then switches off the data on her mobile device.

Rick downloads the attachment, an image.

Subsequently, Rick deletes the image from his mobile device’s internal storage.

Rick then logs into a WhatsApp’s web client on his browser. (Prior to this experiment, both Rick and Morty had logged out from all instances of the web client)

Upon a fresh log-in to the web client and opening the chat with Morty, the option to download the image is available to Rick.

The experiment concludes with bewilderment at WhatsApp’s claim of deletion-upon-delivery as outlined earlier. The only place from which Morty could have downloaded the image would be from Facebook’s ‘blobs.’ The attachment could not have been retrieved from Morty’s mobile device as it had no way of sending data and neither from Rick’s mobile device as it no longer existed in the device’s storage.

As per the Privacy Policy, the data is stored on the ‘blobs’ for a period of 30 days after transmission of a message only when it can’t be delivered to the recipient. Upon delivery, the deletion-upon-delivery model is supposed to kick in.

Another straightforward experiment that leads to a similar conclusion is seeing the difference in time taken for a large attachment to be forwarded as opposed to when the same large attachment is uploaded. Forwarding is palpably quicker than uploading afresh: non-storage of attachments on the ‘blob’ would entail that the same amount should be taken for both.

The plot thickens. WhatsApp’s Privacy Policy goes on to state: “To improve performance and deliver media messages more efficiently, such as when many people are sharing a popular photo or video, we may retain that content on our servers for a longer period of time.” The technical paper offers no help in understanding how WhatsApp systems assess frequently shared encrypted media messages without decrypting it at its end.

A possible explanation could be the usage of metadata by WhatsApp, which it discloses in its Privacy Policy while simultaneously being sufficiently vague about the specifics of it. That WhatsApp may be capable of reading encrypted communication through the inclusion of a backdoor bodes well for law enforcement, but not so much for unsuspecting users.

The weakest link in the chain

Concerns about backdoors in WhatsApp’s product have led the French government to start developing their own encrypted messaging service. This will be built using Matrix – an open protocol designed for real-time communication. Indeed, the Privacy Policy lays out that the company “may collect, use, preserve, and share your information if we have a good-faith belief that it is reasonably necessary to respond pursuant to applicable law or regulations, to legal process, or to government requests.”

The Signal Protocol is the undisputed gold standard of E2EE implementations. It is the integration with the surrounding functionality that WhatsApp offers which leads to vulnerabilities. After all, a chain is only as strong as its weakest link. Assuming that the attachments stored on the ‘blobs’ are in encrypted form, indecipherable to all but the intended recipients, this does not pose a privacy risk for the users from a technological point of view.

However, it is easy lose sight of the fact that the Privacy Policy is a legally binding document and it specifically states that messages are not stored on the ‘blobs’ as a matter of routine. As a side note, WhatsApp’s Privacy Policy and Terms of Service are refreshing in their readability and lack of legalese.

As we were putting the final touches to this piece, news from WABetaInfo, a well-reputed source of information on WhatsApp features, has broken that newer updates of WhatsApp for Android are permitting users to re-download media deleted up to three months back. WhatsApp cannot possibly achieve this without storing the media in the ‘blobs,’ or in other words, in violation of its Privacy Policy.

As the aphorism goes: “When the service is free, you are the product.”

For more details visit https://cis-india.org/internet-governance/blog/asia-times-april-20-2018-aayush-rathi-sunil-abraham-what-s-up-with-whatsapp

What Bengaluru Thinks of the Big Tech Announcements in Silicon Valley

praskrishna — 2015-10-18T13:26:35Z

There is a split verdict on the big tech announcements made out of California during the Prime Minister's visit, in the desi version of Silicon Valley - Bengaluru.

This was published by NDTV on September 29, 2015. Pranesh Prakash was quoted.

Companies here are still assessing how they will be impacted by the big connectivity projects that Google, Microsoft and others announced when Prime Minister Narendra Modi dropped in at Silicon Valley, the global hub for innovation and technology, over the weekend.

CEO Sunder Pichai said Google would tie up with the government to provide free Wi-Fi at 500 railway stations across the country. Microsoft's Satya Nadela said his company would take broadband connectivity to five lakh villages across the country.

And that its cloud services would operate out of India's data centres.

Some smaller companies in Bengaluru hope they will get some business when these giant projects are implemented. "Smaller companies like ours would be hoping we get a share of the pie when it comes to implementation. The government should ensure that," said Soujanya Prakash, a General Manager at Vee Technologies, to NDTV. Vee one of the companies assigned to implement part of the massive Aadhar identity card project.

Ms Prakash said companies like Microsoft and Google bring great technological expertise with them.

Pranesh Prakash, Policy Director for the Centre for Internet and Technology, had a word of caution as he voiced concern about the privacy policies of some big global companies. "The government should push for a strong data protection regime in India and force these companies to abide by that," he said.

Mr Prakash also said, "These companies need India more than we need them since there are more than one billion customers here. The Indian government must be wise in using this bargaining power."

For more details visit https://cis-india.org/internet-governance/news/ndtv-maya-sharma-september-29-2015-what-bengaluru-thinks-of-big-tech-announcements-in-silicon-valley

We Truly are the Product being Sold

vidushi — 2016-09-01T02:08:37Z

WhatsApp has announced it will begin sharing user data such as names, phone numbers, and other analytics with its parent company, Facebook, and with the Facebook family of companies. This change to its terms of service was effected in order to enable users to “communicate with businesses that matter” to them. How does this have anything to do with Facebook?

The article was published in the Hindustan Times on August 31, 2016.

WhatsApp clarifies in its blog post, “... by coordinating more with Facebook, we’ll be able to do things like track basic metrics about how often people use our services and better fight spam on WhatsApp. And by connecting your phone number with Facebook’s systems, Facebook can offer better friend suggestions and show you more relevant ads if you have an account with them.”

WhatsApp’s further clarifies that it will not post your number on Facebook or share this data with advertisers. This means little because it will share your number with Facebook for advertisement. It is simply doing indirectly, what it has said it won’t do directly. This new development also leads to the collapsing of different personae of a user, even making public their private life that they have so far chosen not to share online. Last week, Facebook published a list of 98 data points it collects on users. These data points combined with your WhatsApp phone number, profile picture, status message, last seen status, frequency of conversation with other users, and the names of these users (and their data) could lead to a severely uncomfortable invasion of privacy.

Consider a situation where you have spoken to a divorce lawyer in confidence over WhatsApp’s encrypted channel, and are then flooded with advertisements for marriage counselling and divorce attorneys when you next log in to Facebook at home. Or, you are desperately seeking loans and get in touch with several loan officers; and when you log in to Facebook at work, colleagues notice your News Feed flooded with ads for loans, articles on financial management, and support groups for people in debt.

It is no secret that Facebook makes money off interactions on its platform, and the more information that is shared and consumed, the more Facebook is benefitted. However, the company’s complete disregard for user consent in its efforts to grow is worrying, particularly because Facebook is a monopoly. In order for one to talk to friends and family and keep in touch, Facebook is the obvious, if not the only, choice. It is also increasingly becoming the most accessible way to engage with government agencies. For example, Indian embassies around the world have recently set up Facebook portals, the Bangalore Traffic Police is most easily contacted through Facebook, and heads of states are also turning to the platform to engage with people. It is crucial that such private and collective interactions of citizens with their respective government agencies are protected from becoming data points to which market researchers have access.

Given Facebook’s proclivity for unilaterally compromising user privacy, the Federal Trade Commission (FTC) in 2011 charged the company for deceiving consumers by misleading them about the privacy of their information. Following these charges, Facebook reached an agreement to give consumers clear notice and obtain consumers’ express consent before extending privacy settings that they had established. The latest modification to WhatsApp’s terms of service seems to amount to a clear violation of this agreement and brings out the grave need to treat user consent more seriously.

There is a way to opt out of sharing data for Facebook ads targeting that is outlined by WhatsApp on its blog, which is the best example for a case of invasion-of-privacy-by-design. WhatsApp plans to ask the users to untick a small green arrow, and then click on a large green button that says “Agree” (which is the only button) so as to indicate that they are opting-out. The interface of the notice seems to be consciously designed to confuse users by using the power of default option. For most users, agreeing to terms and conditions is a hasty click on a box and the last part of an installation process. Predictably, most users choose to go with default options, and this specific design of the opt-out option is not meaningful at all.

In 2005, Facebook’s default profile settings were such that anyone on Facebook could see your name, profile picture, gender and network. Your photos, wall posts and friends list were viewable by people in your network. Your contact information, birthday and other data could be seen by friends and only you could view the posts that you liked. Fast forward to 2010, and the entire internet, not just all Facebook users, can see your name, profile picture, gender, network, wall posts, photos, likes, friends list and other profile data. There hasn’t been a comprehensive study since 2010, but one can safely assume that Facebook’s privacy settings will only get progressively worse for users, and exponentially better for Facebook’s revenues. The service is free and we truly are the product being sold.

For more details visit https://cis-india.org/internet-governance/blog/hindustan-times-vidushi-marda-august-31-2016-we-truly-are-the-product-being-sold

We the goondas

praskrishna — 2014-08-04T15:06:18Z

You can now be arrested in Karnataka even before you commit an offence under the IT Act. You could be in jail under the Goonda Act even if not guilty under the Indian Copyright Act. If govt thinks you are planning to send a 'lascivious' photo to a WhatsApp group, or forwarding a copyrighted song, you can be arrested.

The article by Shyam Prasad was published in the Bangalore Mirror on August 4, 2014. Sunil Abraham gave his inputs.

Have a smartphone? Run for cover. Bizarre as this might sound, the cops are going to come after you if you so much as forward a song to a friend. Forget actually doing it, any plans to do so could land you in serious trouble too. You could be labelled a 'goonda' in the eyes of the State and find yourself behind bars.

In a completely unfathomable move, Karnataka has brought most offences under the Information Technology Act, 2000, and Indian Copyright Act, 1957, under the ambit of the Goonda Act. Until now, people with a history of offences like bootlegging, drug offences and immoral trafficking could be taken into preventive custody. But the government, in its enthusiasm, while adding acid attackers and sexual predators to the law, has also added 'digital offenders'. While it was thought to be against audio and video pirates, Bangalore Mirror has found it could be directed at all those who frequent FB, Twitter and the online world, posting casual comments and reactions to events unfolding around them.

So if you are planning a digital 'offence' — which could be an innocuous opinion like the young girls' in Mumbai after the bandh declared on Bal Thackeray's death — that could attract the provisions of the Information Technology Act. You can even be taken into preventive custody like a 'goonda'. Even those given exceptions under the Indian Copyright Act can find themselves in jail for a year without being presented before a magistrate. Technically, if you are even planning to forward 'lascivious' memes and images to a WhatsApp group or forwarding a song or 'copyrighted' PDF book, you can be punished under the Goondas Act.

The law-makers clearly did not dwell much on the implications while bringing the majority of the populace within the ambit of this law. On July 28, the Karnataka Legislature passed (it took barely a minute from tabling to voice vote), 'The Karnataka Prevention of Dangerous Activities of Bootleggers, Drug-offenders, Gamblers, Goondas, Immoral Traffic Offenders, Slum-grabbers and Video or Audio Pirates, (Amendment) Bill, 2014'. The amendment adds, "Acid attackers, Depradator of Environment, Digital Offenders, Money Launderers and Sexual Predators", to the title. In common parlance, this law is known as the 'Goonda Act'.

The move has come as a shock to the legal community which has slammed it, terming it an attempt by the state to usurp central powers. The government had earlier included 'piracy' under the Goonda Act. But it was applicable only to those pirating film DVDs. Now, this will include books, film songs, music, software or anything big corporates and multinationals claim they have copyright on.

Sunil Abraham, executive director, Centre for Internet and Society, is left in no doubt that the new law is "a terrible thing". "It is a sad development. It is not just bringing the provisions of the IT Act, but also the Copyright Act, that will hurt the common man," he said.

'Digital Offenders' means "any person who knowingly or deliberately violates, for commercial purposes, any copyright law in relation to any book, music, film, software, artistic or scientific work and also includes any person who illegally enters through the identity of another user and illegally uses any computer or digital network for pecuniary gain for himself or any other person or commits any of the offences specified under sections 67, 68, 69, 70, 71, 72, 73, 74 and 75 of the Information Technology Act, 2000."

Section 67 of the IT Act will be the most dangerous for the common man with a smartphone in hand now. The section, "Publishing of information which is obscene in electronic form," includes "any material which is lascivious or appeal to the prurient interest." This could have a very broad interpretation.

Advocate Nagendra Naik says, "The Goonda Act provides for preventive arrest. In the Information Technology Act and The Copyright Act, you have to commit the offence to be arrested. But here, you can be taken into preventive custody even before you commit the said offences. In normal arrests, you can straightaway apply for bail. But under the Goonda Act, you cannot. There is a long process of review and you will be in custody at least till then. The third impact is, you can have a history sheet started against you by the police. Technically, your slips on WhatsApp will attract the Goonda Act against you."

Supreme Court advocate KV Dhananjay said the Goonda Act is a draconian piece of legislation and it necessarily mocks at the institution of courts and lawyers. "After the passage of the various amendments to the Goonda Act, Karnataka now looks like a mini North Korea where police mood swings will decide whether the ordinary citizen has any right at all," he said.

Advocate Shyam Sundar, says, "What if your smartphone has a list of repeated material sent out over days or weeks. Most people do not even know if their phones are affected by viruses which could be sending out such material. Another example is of Facebook. There are so many FB pages with pornographic content. If someone who has subscribed to such a page sends you a friend request and you accept it, that content will surface on your page. It will have a history of repetition. The amendment clearly opens up huge problems for the common people. There is no doubt of the law being grossly misused and the amendment to include provisions of the IT Act has been done without application of mind. What is lascivious appeal in the first place? A porn star has been made a film star in India. Is this not lust? Are there enough filters in place to secure your smartphone from online abuse?"

The new law will in all probability create more corruption than anything else, say experts. Dhananjay says, "Until last week, police postings in Bangalore and other bigger cities were selling for tens of lakhs. Thanks to these amendments, some postings that enforce the Goonda Act will now sell for a couple of crores. The public will not feel safe due to this draconian legislation. Those who enforce the Goonda Act, however, will become richer through corruption, thanks to the fear created by these new amendments."

One year in jail for the innocent too

Sunil Abraham gives two examples by which the amended Goonda Act will become a ruthless piece of legislation. "If I publish an image of a naked body as part of a scientific article about the human body, is it obscene or not? It will not be obscene and, if I am arrested under the IT Act, I will be produced before the magistrate within 24 hours and can explain it to him. But now, I will be arrested under the Goonda Act and need not be produced before a magistrate for 90 days. It can be extended to one year. So for one year, I will be in jail even if I have not committed any wrong. Another example pertains to bringing offences under the Copyright Act under the Goonda Act. In the Copyright Act, there is an exception for reporting, research, educational and people with disability. A visually impaired person, for example, can, without paying royalty, convert a book into another format like Braille or audio and share it with another visually impaired person on a non-profit basis. But if he is arrested under Goonda Act, he will be in jail for one year, even before he does it."

HAVE THEY READ STATUTE?
Supreme Court advocate KV Dhananjay says, "The definition of a 'digital offender' is simply laughable. I do not think that whoever asked the state government to include 'digital offence' under the Goonda Act has carefully read the Constitution of India. Under the Constitution, both copyright and telecommunications are exclusive central subjects. This means that states simply cannot make any law on these subjects." Dhananjay gives the example of payment of income tax. "You know already that only the central government can demand and collect your income taxes. Can any state government say that it will create a new law to punish its resident who defaults in payment of income tax? You would simply laugh at any such law. This new definition of 'digital offender' is no less amusing. Offences under the Information Technology Act, 2000, are exclusively punishable by the central government only. State governments have no power to say that an Act shall become an offence when it does not even have the power to regulate such an Act."

CRIMINAL LAW EXPERTS SAY
Senior designate advocate, MT Nanaiah: "This law will be too harsh. There are MLAs who do not know the meaning of cyber crime. We (advocates) will be kept busy at the cost of innocent people because of this step. It provides for arresting anyone who would allegedly be planning to do something. Finding him guilty or otherwise comes later. What happens if your phone is lost or somebody sends something from your phone without your knowledge? For the first few years, innocents will go to jail. Then the courts will probably intervene and call for modifying what is at best a bad law. A similar situation arose with Section 498(A) of IPC and Sections 3 and 4 of Dowry Prohibition Act. It was misused to such an extent that courts had to step in." Senior designate advocate and former State Public Prosecutor HS Chandramouli : "Even social legislations have been misused. And, in this case, most people are illiterate about what cyber crime is. It is mostly teenagers and college students who will feel the heat. These are the people who mostly forward material considered obscene. It is necessary to educate people through discussions, workshops in the bar associations, law college and with experts. The amendment has been passed in the Legislature without discussion, which is a tragedy. At least now, before it is gazetted, people should be warned about what is being brought into the Goonda Act. I do not know how fair adding 'digital offenders' in the Goonda Act will be to the public, but the chances of misuse are more. There are no riders or prosecution for misuse. And how many policemen know about cyber crimes? During the infamous 'kidney' case (where people were cheated and their kidneys removed) many policemen did not know the difference between kidneys and testicles."

ONE YEAR IN JAIL WITHOUT CHANCE OF BAIL FOR..

Forwarding a song from your phone
Forwarding an e-book from your email
A nude photo which the govt thinks is obscene
Any software that a company says it owns
A movie which a company says it has copyright on

For more details visit https://cis-india.org/news/bangalore-mirror-shyam-prasad-august-4-2014-we-the-goondas

Vote: Will Social Media Impact the Election?

praskrishna — 2013-04-15T08:30:59Z

As India enters election mode, social media has become one of many platforms where possible prime ministerial candidates are being scrutinized.

The article by R. Jai Krishna was published in the Wall Street Journal on April 15, 2013. Sunil Abraham is quoted.

On top of the list are Rahul Gandhi and Narendra Modi, who recently acquired the Twitter monikers #Pappu (“naïve”) and #Feku (“boastful”), respectively, following a string of public appearances observers saw as evidence they will be leading their respective parties in the upcoming national election.

A recent study found that social media could influence the electoral outcome in as many as 160 out of 543 seats in the Lok Sabha, the lower house of Parliament.

(These are constituencies where 10% of the voting population uses Facebook, or where the number of Facebook users is higher than the winning candidate’s margin of victory at the last election.)

	“No contestant can afford to ignore social media in the next Lok Sabha elections,” argued the study, put together by IRIS Knowledge Foundation, a Mumbai-based research group, and the Internet and Mobile Association of India, a trade body. Others are more skeptical. “The study assumes that users will behave homogenously, which isn’t true,” says Sunil Abraham, executive director at the Bangalore-based Centre for Internet and Society. While calling the study’s findings “ambitious,” Mr. Abraham said it was important to recognize the political power of Facebook, which could be used as a social platform but also to “plan a revolution.” But India’s Internet penetration is low: only 150 million people out a population of 1.2 billion go online, according to the IRIS-IAMAI study. The study estimates the number of social media users in the country is around 62 million, and that it may increase up to 80 million by time of national elections, which have to happen by May 2014.

“No contestant can afford to ignore social media in the next Lok Sabha elections,” argued the study, put together by IRIS Knowledge Foundation, a Mumbai-based research group, and the Internet and Mobile Association of India, a trade body.

Others are more skeptical. “The study assumes that users will behave homogenously, which isn’t true,” says Sunil Abraham, executive director at the Bangalore-based Centre for Internet and Society.

While calling the study’s findings “ambitious,” Mr. Abraham said it was important to recognize the political power of Facebook, which could be used as a social platform but also to “plan a revolution.”

But India’s Internet penetration is low: only 150 million people out a population of 1.2 billion go online, according to the IRIS-IAMAI study. The study estimates the number of social media users in the country is around 62 million, and that it may increase up to 80 million by time of national elections, which have to happen by May 2014.

Indian political parties have started wising up to the power of online campaigning. Ahead of state elections in Uttar Pradesh last year, for instance, parties including the winning Samajwadi Party, Congress and the Bharatiya Janata Party turned to social media ranging from Facebook to YouTube as well as to blogs and smartphone apps to promote their candidates and their agenda.

For more details visit https://cis-india.org/news/wall-street-journal-april-15-2013-r-jai-krishna-vote-will-social-media-impact-the-election

Vodafone Report Explains Government Access to Customer Data

joe — 2014-06-19T10:38:01Z

Vodafone Group PLC, the world’s second largest mobile carrier, released a report on Friday, June 6 2014 disclosing to what extent governments can request their customers’ data.

The Law Enforcement Disclosure Report, a section of a larger annual Sustainability Report began by asserting that Vodafone "customers have a right to privacy which is enshrined in international human rights law and standards and enacted through national laws."

However, the report continues, Vodafone is incapable of fully protecting its customers right to privacy, because it is bound by the laws in the various countries in which it operates. "If we do not comply with a lawful demand for assistance, governments can remove our license to operate, preventing us from providing services to our customers," The report goes into detail about the laws in each of the 29 nations where the company operates.

Vodafone’s report is one of the first published by a multinational service provider. Compiling such a report was especially difficult, according to the report, for a few reasons. Because no comparable report had been published before, Vodafone had to figure out for themselves, the “complex task” of what information they could legally publish in each country. This difficulty was compounded by the fact that Vodafone operates physical infrastructure and thus sets up a business in each of the countries where it provides services. This means that Vodafone is subject to the laws and operating licenses of each nation where it operates, unlike as a search engine such as Google, which can provide services across international borders but still be subject to United States law – where it is incorporated.

The report is an important step forward for consumer privacy. First, the Report shows that the company is aware of the conflict of interest between government authorities and its customers, and the pivotal position that the company can play in honoring the privacy of its users by providing information regarding the same in all cases where it legally can. Additionally, providing the user insight into challenges that the company faces when addressing and responding to law enforcement requests, the Report provides a brief overview of the legal qualifications that must be met in each country to access customer data. Also, Vodafone’s report has encouraged other telecom companies to disclose similar information to the public. For instance, Deutsche Telekom AG, a large European and American telecommunications company, said Vodafone’s report had led it consider releasing a report of it’s own.

Direct Government Access

The report revealed that six countries had constructed secret wires or “pipes” which allowed them access to customers’ private data. This means that the governments of these six countries have immediate access to Vodafone’s network without any due process, oversight, or accountability for these opaque practices. Essentially, the report reveals, in order to operate in one of these jurisdictions, a communications company must ensure that authorities have, real time and direct access to all personal customer data at any time, without any specific justification. The report does not name these six nations for legal reasons.

"These pipes exist, the direct access model exists,” Vodafone's group privacy officer, Stephen Deadman, told the Guardian. “We are making a call to end direct access as a means of government agencies obtaining people's communication data. Without an official warrant, there is no external visibility. If we receive a demand we can push back against the agency. The fact that a government has to issue a piece of paper is an important constraint on how powers are used."

Data Organization

Vodafone’s Report lists the aggregate number of content requests they received in each country where it operates, and groups these requests into two major categories. The first is Lawful Interceptions, which is when the government directly listens in or reads the content of a communication. In the past, this type of action has been called wiretapping, but now includes reading the content of text messages, emails, and other communications.

The second data point Vodafone provides for each country is the number of Communications Data requests they receive from each country. These are requests for the metadata associated with customer communications, such as the numbers they have been texting and the time stamps on all of their texts and calls.

It is worth noting that all of the numbers Vodafone reports are warrant statistics rather than target statistics. Vodafone, according to the report, has chosen to include the number of times a government sent a request to Vodafone to "intrude into the private affairs of its citizens, not the extent to which those warranted activities then range across an ever-expanding multiplicity of devices, accounts and apps."

Data Construction

However, in many cases, laws in the various companies in which Vodafone operates prohibit Vodafone from publishing all or part of the aforementioned data. In fact, this is the rule rather than the exception. The majority of countries, including India, prohibit Vodafone from releasing the number of data requests they receive. Other countries publish the numbers themselves, so Vodafone has chosen not to reprint their statistics either. This is because Vodafone wants to encourage governments to take responsibility for informing their citizens of the statistics themselves.

The report also makes note of the process Vodafone went through to determine the legality of publishing these statistics. It was not always straightforward. For example, in Germany, when Vodafone’s legal team went to examine the legislation governing whether or not they could publish statistics on government data requests, they concluded that the laws were unclear, and asked German authorities for advice on how to proceed. They were informed that publishing any such statistics would be illegal, so they did not include any German numbers in their report. However, since that time, other local carriers have released similar statistics, and thus the situation remains unresolved.

Other companies have also recently released reports. Twitter, a microblogging website, Facebook, a social networking website, and Google a search engine with social network capabilities have all released comparable reports, but their reports differ from Vodafone’s in a number of ways. While Twitter, Google, and Facebook all specified the percent of requests granted, Vodafone released no similar statistics. However, Vodafone prepared discussions of the various legal constraints that each country imposed on telecom companies, giving readers an understanding of what was required in each country for authorities to access their data, a component that was left out of other recent reports. Once again, Vodafone’s report differed from those of Google Facebook and Twitter because while Vodafone opens businesses in each of the countries where it operates and is subject to their laws, Google, Facebook, and Twitter are all Internet companies and so are only governed by United States law.

Google disclosed that it received 27,427 requests over a six-month period ending in December, 2013, and also noted that the number of requests has increased consistently each six-month period since data began being compiled in 2009, when fewer than half as many requests were being made. On the other hand Google said that the percentage of requests it complied with (64% over the most recent period) had declined significantly since 2010, when it complied with 76% of requests.

Google went into less detail when explaining the process non-American authorities had to go through to access data, but did note that a Mutual Legal Assistance Treaty was the primary way governments outside of the United States could force the release of user data. Such a treaty is an agreement between the United States and another government to help each other with legal proceedings. However, the report indicated that Google might disclose user information in situations when they were not legally compelled to, and did not go into detail about how or when it did that. Thus, given the difficulty of obtaining a Mutual Legal Assistance Treaty in addition to local warrants or subpoenas, it seems likely that Google complies with many more non-American data requests than it was legally forced to.

Facebook has only released two such reports so far, for the two six month periods in 2013, but they too indicated an increasing number of requests, from roughly 26,000 to 28,147. Facebook plans to continue issuing reports every six months.

Twitter has also seen an increase of 22% in government requests between this and the previous reporting period, six months ago. Twitter attributes this increase in requests to an increase in users internationally, and it does seem that the website has a similarly growing user base, according to charts released by Twitter. It is worth noting that while large nations such as the United States and India are responsible for the majority of government requests, smaller nations such as Bulgaria and Ecuador also order telecom and Internet companies to turn over data.

Vodaphone’s Statistics

Though Vodafone’s report didn’t print statistics for the majority of the countries the report covered, looking at the few numbers they did publish can shed some light on the behavior of governments in countries where publishing such statistics is illegal. For the countries where Vodafone does release data, the numbers of government requests for Vodafone data were much higher than for Google data. For instance, Italy requested Vodafone data 605,601 times, while requesting Google data only 896 times. This suggests that other countries such as India could be looking at many more customers’ data through telecom companies like Vodafone than Internet companies like Google.

Vodafone stressed that they were not the only telecom company that was being forced to share customers’ data, sometimes without warrants. In fact, such access was the norm in countries where authorities demanded it.

India and the Reports

India is one of the most proliferate requesters of data, second only to the United States in number of requests for data from Facebook and fourth after the United States, France and Germany in number of requests for data from Google. In the most recent six-month period, India requested data from Google 2,513 times, Facebook 3,598 times, and Twitter 19 times. The percentage of requests granted varies widely from country. For example, while Facebook complies with 79% of United States authorities’ requests, it only grants 50% of India’s requests. Google responds to 83% of US requests but only 66% of India’s.

Facebook also provides data on the number of content restrictions each country requests. A content restriction request is where an authority asks Facebook to take down a particular status, photo, video, or other web content and no longer display it on their site. India, with 4,765 requests, is the country that most often asks Facebook to remove content.

While Vodafone’s report publishes no statistics on Indian data requests, because such disclosure would be illegal, it does discuss the legal considerations they are faced with. In India, the report explains, several laws govern Internet communications. The Information Technology Act (ITA) of 2000 is the parent legislation governing information technology in India. The ITA allows certain members of Indian national or state governments order an interception of a phone call or other communication in real time, for a number of reasons. According to the report, an interception can be ordered “if the official in question believes that it is necessary to do so in the: (a) interest of sovereignty and integrity of India; (b) the security of the State; (c) friendly relations with foreign states; (d) public order; or (e) the prevention of incitement of offences.” In short, it is fairly easy for a high-ranking official to order a wiretapping in India.

The report goes on to detail Indian authorities’ abilities to request other customer data beyond a lawful interception. The Code of Criminal Procedure allows a court or police officer to ask Vodafone and other telecom companies to produce “any document or other thing” that the officer believes is necessary for any investigation. The ITA extends this ability to any information stored in any computer, and requires service providers to extend their full assistance to the government. Thus, it is not only legally simple to order a wiretapping in India; it is also very easy for authorities to obtain customer web or communication data at any time.

It is clear that Indian laws governing communication have very little protections in place for consumer privacy. However, many in India hope to change this reality. The Group of Experts chaired by Justice AP Shah, the Department of Personnel and Training, along with other concerned groups have been working towards the drafting of a privacy legislation for India. According to the Report of the Group of Experts on Privacy, the legislation would fix the 50 or so privacy laws in India that are outdated and unable to protect citizen’s privacy when they use modern technology.

On the other hand, the Indian government is moving forward with a number of plans to further infringe the privacy of civilians. For example, the Central Monitoring System, a clandestine electronic surveillance program, gives India’s security agencies and income tax officials direct access to communications data in the country. The program began in 2007 and was announced publicly in 2009 to little fanfare and muted public debate. The system became operational in 2013.

Conclusion

Vodafone’s report indicates that it is concerned about protecting its customer’s privacy, and Vodafone’s disclosure report is an important step forward for consumer web and communication privacy. The report stresses that company practice and government policy need to come together to protect citizen’s privacy and –businesses cannot do it alone. However, the report reveals what companies can do to effect privacy reform. By challenging authorities abilities to access customer data, as well as publishing information about these powers, they bring the issue to the government’s attention and open it up to public debate. Through Vodafone’s report, the public can see why their governments are making surveillance decisions. Yet, in India, there is still little adoption of transparent business practices such as these. Perhaps if more companies were transparent about the level of government surveillance their customers were being subjected to, their practices and policies for responding to requests from law enforcement, and the laws and regulations that they are subject to - the public would press the government for stronger privacy safeguards and protections.

For more details visit https://cis-india.org/internet-governance/blog/vodafone-report-explains-govt-access-to-customer-data

Vimeo, DailyMotion, Pastebin Among Sites Blocked In India For 'Anti-India' Content From ISIS

praskrishna — 2015-01-02T16:43:20Z

The Indian government has convinced ISPs to block dozens of popular websites accused of hosting “anti-India” content posted by members of the Islamic State group, also known as ISIS or ISIL.

The story was published by IB Times on December 31. Pranesh Prakash is quoted.

GitHub, Pastebin, as well as the video sites Vimeo and DailyMotion were among those rendered inaccessible to many of India’s nearly 250 million Internet users.

The text repository Pastebin first tweeted on Dec. 19 that it had been blocked, confirming on Dec. 26 that the blockade was at the behest of India’s Department of Telecom. Pranesh Prakash, the policy director at the Center for Internet and Society in Bangalore, posted a list of the blocked sites Wednesday. Notice the list was issued Dec. 17.

Insane! Govt orders blocking of 32 websites including @internetarchive @vimeo @github @pastebin #censorship #FoEx pic.twitter.com/F75ngSGohJ

â€” Pranesh Prakash (@pranesh_prakash) December 31, 2014

Hours later Arvind Gupta, the national head of information technology at India’s Bharatiya Janata Party, confirmed on Twitter that a block had indeed been put in place. Other than referencing “ongoing investigations,” Gupta did not provide specific details on the type of threats being made.

The websites that have been blocked were based on an advisory by Anti Terrorism Squad, and were carrying Anti India content from ISIS. 1/2

â€” Arvind Gupta (@buzzindelhi) December 31, 2014

The sites that have removed objectionable content and/or cooperated with the on going investigations, are being unblocked. 2/2

â€” Arvind Gupta (@buzzindelhi) December 31, 2014

The move comes after it was discovered that the operator of a prominent pro-ISIS Twitter account was based in Bangalore. Mehdi Masroor Biswas, 24, was arrested earlier this month after a Channel 4 News investigation determined he was behind @ShamiWitness, an account with more than 17,700 followers and 2 million tweets seen each month.

Indian Prime Minister Narendra Modi unveiled the “Make in India” campaign earlier this year in an attempt to encourage international businesses to invest in India. The campaign specifically mentions information technology as a sector in which India wishes to improve.

For more details visit https://cis-india.org/internet-governance/news/ib-times-jeff-stone-december-31-2014-sites-blocked-in-india-for-anti-india-content-from-isis