Slashdot Mirror


India Now Wants Access To Google and Skype

crabel writes "A couple of weeks ago India went after RIM and its mail service; it has extended its hunger for data now to all telecommunications. All telecom companies have to give them access to all voice over IP services that go in/out or happen within the country. Heck, they are even going after VPNs used by corporate employees working remotely."

20 of 366 comments (clear)

  1. Is India trying to *stab* its economy? by FooAtWFU · · Score: 5, Insightful

    Demanding access to all the corporate VPNs is a great way to make companies more skittish about outsourcing there!

    --
    The World Wide Web is dying. Soon, we shall have only the Internet.
    1. Re:Is India trying to *stab* its economy? by CaptBubba · · Score: 5, Insightful

      This is especially true considering just how notoriously corrupt a lot of the Indian government is. It has been featured on NPR and other news outlets as being a large impediment to business.

      Then you will have someone in a position where they have access to all of your company's secure communications? For the price of a bribe anyone could find out proprietary information that could sink your company or they could gain access to listen in on calls and glean account information for identity theft or just to solicit customers.

    2. Re:Is India trying to *stab* its economy? by pavera · · Score: 4, Insightful

      This really wouldn't be too uncommon. IBM has to have very detailed technical conversations/emails/etc with outsourced people in India, it would not take much to determine their future plans, product launches, progress, feature sets, etc. If you're competing with IBM and have access to all this information, you can easily beat them in the game. Same goes for any company with outsourced workers in India. It's not necessarily that it would "quickly sink" IBM, but it could easily quickly sink a new product launch, or a new division... And if you're a startup, and IBM, HP, or MSFT has access to this information that you've passed off to your outsourced labor, it could very quickly sink your company. IBM releases your product 2 months before you do you're done.

      You mentioned "thinking about your internal security" the problem isn't internal security, it is that your perceived internal security now has an open spigot to the government of India... you have no internal security by default. Employees have to be able to discuss project progress, plans, etc. You have to have product meetings, there has to be communication about these things or nothing will ever get done. And the nature of these discussions if revealed to a third party can easily spell doom to a product, business division, or startup.

      Further, it would be a huge temptation to use this information to trade stocks... Think you overhear an HP conversation where its revealed that they just lost a major customer to IBM, or they are months behind schedule on a new product... You've finally found step 2
      1) Use gov't access to private communication to glean insider information
      2) Short/Buy stock as appropriate
      3) Wait for information to become public/earnings release
      4) Profit

  2. well... by Anonymous Coward · · Score: 3, Insightful

    Maybe this is a good thing, in a way. maybe if India requires access to corporate vpn, it will dissuade security-conscious companies, such as a large, multinational, 3-lettered one, from outsourcing to india

  3. If only ... by m0s3m8n · · Score: 3, Insightful

    If only all google, skype, and others would just stop service for 1 day, maybe the Indian Government would reconsider. But that would probably be called collusion or something and branded illegal. Were is the State Department? Are they trying to defuse the situation? I ask because I don't know if they have any involvement.

    --
    Conservative, mod down for violating /. political norms.
  4. Re:Well... by jgagnon · · Score: 4, Insightful

    Considering how many businesses still flock to China with relatively little protection for their IP, I doubt this will affect business relations much as long as it is more profitable to do business there than elsewhere.

    --
    Remember to maintain your supply of /facepalm oil to prevent chafing.
  5. Re:Sevens Sins by Anonymous Coward · · Score: 4, Insightful

    Given that the "Seven Deadly Sins" are a Christian construct and only 2.3% of India's population is Christian, I don't think a nation state with polytheistic Hindu as it's official religion will care much about your datum.

  6. That's Nice by Greyfox · · Score: 3, Insightful

    They could potentially do some real damage to their economy while still not being able to monitor all electronic communications in their country. Hopefully they're not putting all their security eggs in the "monitoring" basket, because people will find a way to communicate under the radar. Any terrorists that monitoring catches are probably not the ones you have to worry about.

    --

    I'm trying to teach myself to set people on fire with my mind... Is it hot in here?

  7. Re:Well... by moogied · · Score: 5, Insightful

    Flamebait?! This is a VERY valid statement. If have sensitive documents and do a lot of work in India because you own a call center there or something, you would most certainty need to look at this.

    --
    So basically, -1 troll/offtopic is really slashdots way of saying "I hate that you thought of something before me."
  8. how is this NOT an outlawing of encryption? by TheGratefulNet · · Score: 4, Insightful

    so let me get this straight. the indian government thinks it has a RIGHT to intercept all communication that it wants to (sans warrant, mind you).

    does that essentially make personal end-to-end encryption illegal? it has to! the concept of you being able to conceal your comms is in the process of being ILLEGAL there.

    people are commenting on 'well, just use SSH or SSL or ...'.

    but you are missing the point. if they insist on getting access to all comms, you think they'll tolerate people doing an end-run around this?

    the VERY next step is to identify users who side-step this with their own encryption layer and persecute them, one way or another. it has to follow. first you require all data to be sniffable and then you go after those that won't agree.

    I remember about 20 yrs or so ago, it was illegal for french citizens to use encryption (details are fuzzy; I may not have this exactly accurate). but france was some kind of exception and vendors had to do all kinds of backflips to sell to french companies. are we going back to shit like this, again??

    I think we are. its absolutely coming that encryption will be deemed 'munitions' again. or, encryption that WORKS; the bullshit encryption you think you can trust but is breakable will be 'allowed' to you to keep you feeling like you have some control.

    I guess its now: any encryption that is legal is encryption you cannot trust.

    --

    --
    "It is now safe to switch off your computer."
    1. Re:how is this NOT an outlawing of encryption? by Yvanhoe · · Score: 4, Insightful

      people are commenting on 'well, just use SSH or SSL or ...'. but you are missing the point. if they insist on getting access to all comms, you think they'll tolerate people doing an end-run around this?

      I think the legislators miss the point about "encrypted VPN" being such a trivial technology. They probably think there must be around 100 big companies doing that in India right now and they will soon discover that their law is inadapted. Back to the drawing board.

      I remember about 20 yrs or so ago, it was illegal for french citizens to use encryption (details are fuzzy; I may not have this exactly accurate). but france was some kind of exception and vendors had to do all kinds of backflips to sell to french companies. are we going back to shit like this, again??

      There was a limitation to the key length. More than a certain length was considered "military material" and required some authorization. Mind you we were happily generating 1024 bits keys (the limitation was something ridiculous. IIRC but it was something like 56 bits), using them routinely. I doubt anyone has ever been prosecuted for this. It bothered vendors though. We do that a lot in France : vote bad laws, do not apply them, use them as a precedent to vote even worse laws, rinse, repeat.

      --
      The Wise adapts himself to the world. The Fool adapts the world to himself. Therefore, all progress depends on the Fool.
  9. Too bad for Democracy by Anonymous Coward · · Score: 3, Insightful

    India Now Wants Access To Google and Skype

    Google and Skype should just say no. In fact, if everybody said "NO!" then India would condemn itself to being a third world country. It would also give BlackBerry an incentive to say "NO!" too, because if your competition isn't making money off of evil, then BlackBerry isn't losing any business from competition. Of course India (et al) could always just continue to steal technology, but at least that would give trading partners an incentive to retaliate.

    When the democracies start spying on there own citizens then being in a "democracy" is quite useless. Warrants, oversight and checks and balances are what made America (on paper at least) a great nation. Too bad everybody is falling for the lowest common denominator repression that used to be the primary domain of dictatorships.

  10. Re:Not A Surprise by jgagnon · · Score: 4, Insightful

    This level of monitoring without transparency will just make corruption easier.

    --
    Remember to maintain your supply of /facepalm oil to prevent chafing.
  11. Re:Well... by tophermeyer · · Score: 3, Insightful

    I'll second that because I see you got modded flamebait as well. It's nothing against Indians or companies that operate in India, but data disclosure is something you need to be aware of. If a company is going to be distributing your information you need to know who it goes to and why they want it. The fact that this would apply to every company that operates in India seems very relevant.

    Maybe you decide it's ok that the Indian government gets ahold of your data. Maybe your data is sensitive and you don't want any government obtaining it. It's worth paying attention to at the very least.

  12. Re:India = not all that democratic by Herkum01 · · Score: 3, Insightful

    our CFO's will outsource the 'mundane' coding, sure. but sensitive stuff? any smart CFO will rethink this.

    Yeah right, the executives that work their way up to CxO are the guys who would save a nickel today to get their bonuses and take a golden parachute out tomorrow when the company tanks.

  13. Re:ok... by bickerdyke · · Score: 3, Insightful

    Or a "National Security Letter" where you can't neither talk nor complain about?

    --
    bickerdyke
  14. Re:Well... by delinear · · Score: 3, Insightful

    Unfortunately, for anyone who cares about how their data is used, it's the companies who will make the decision. I might switch my bank to one I consider more secure only to find in two months time that they intend to outsource key parts of the business. I wonder if we'll eventually see a niche market in organisations which guarantee to keep your data within the boundaries of your own country (then you only have to worry about your own government getting their hands on it).

  15. Re:Going too far, BUT... by CohibaVancouver · · Score: 4, Insightful

    And Indian civil society is not going to take it

    Sure they will.

    Over the past ten years the government of the USA has eroded the civil rights in your nation, and the citizens by and large have said "meh" and gone back to watching Kate Gosselin on "Dancing with the Stars." Why should India be any different?

  16. Re:S/MIME by Lord+Ender · · Score: 3, Insightful

    Actually, they make a lot of sense. If you rely on blackberry encryption, you have no idea when your privacy is being invaded by the Indian government. With S/MIME, they can't even attempt to spy on you without you being aware. They won't go fishing through your correspondence. They won't data-mine you. They would need to be specifically targeting you and admitting to you that you're under investigation to even have a chance of seeing your mail.

    --
    A slashdotter who didn't build his own computer is like a Jedi who didn't build his own lightsaber.
  17. Re:Well... by jgagnon · · Score: 3, Insightful

    And that patent in China means far less than it does in the US. In China, companies copy products and ideas from other companies all the time, with little risk of losing more than they stand to gain by doing so.

    Now in India you may lose trade secrets (schematics, blue prints, secret recipes, etc.) simply because your email is intercepted by a corrupt government official that hands it off to your competitor for a kickback.

    Either way your company loses something that you can't easily get back. These situations are not all that different.

    --
    Remember to maintain your supply of /facepalm oil to prevent chafing.