Feeds

Apple, RIM deny claims of data backdoor for Indian government

Symantec hackers claim intelligence memo shows secret deal

The Power of One Infographic

Updated Apple and RIM have denied providing the Indian government with backdoor access to customers' data, after the release of a memo that appears to suggest that they and Nokia did a deal in exchange for access to the Indian smartphone market.

The document purportedly comes from the Indian Directorate General of Military Intelligence, and was released by the hacking group the Lords of Dharmaraja, who posted up outdated Norton security source code last week. Dated October 2011, it states that a "decision was made earlier this year to sign an agreement with mobile manufacturers (MM) in exchange for the Indian market presence."

It claims that an agreement was signed with all major vendors, including domestic supplier Micromax, and that a CYCADA data intercept team are in operation on the networks using backdoors supplied by RIM, Nokia, and Apple (RINOA). Symantec is mentioned as the system used to transfer data to mobile platforms.

Claimed Indian smartphone spying memo

Western firms fingered in purported memo

Also contained are details of recent intercepts from the CYCADA team, including conversations between members of the US-China Economic and Security Review Commission (USCC) on currency issues and discussions on the actions of Western firms helping the Chinese aircraft industry improve its avionics and engine manufacturing.

An Apple spokesman told The Register that the company denied giving any access to the Indian government to its systems, although he couldn't comment on the veracity of the memos themselves. RIM told us that it "does not typically comment on rumors or speculation," and pointed out that it has no ability to provide its customers' encryption keys and doesn't do deals with specific countries.

Rumors of governments getting backdoor access to software are as old as the hills - the NSA getting access to Windows 95 in exchange for monopoly control of PCs story lasted until the DOJ case started - and on the face of it there's nothing to suggest that this isn't merely a ruse. There would be considerable technical problems with using Symantec as a distribution system, for example.

The subject matter also seems just a little too juicy for this El Reg hack. As Professor Marcello Truzzi used to say, "Extraordinary claims require extraordinary proof." ®

Update

A Symantec spokesman has told The Register that the company is investigating the documents, but issued an unequivocal statement on the matter:

"We would never develop or help distribute a backdoor program regarding anyone’s programs, mobile or otherwise. Ever."

He also pointed out that the hacking group claimed to have got the Norton source code that was leaked from Indian government servers. There are no records of the Indian government ever being given access to Symantec's source code. The code is however genuine.

The Power of One eBook: Top reasons to choose HP BladeSystem

More from The Register

next story
Google Nest, ARM, Samsung pull out Thread to strangle ZigBee
But there's a flaw in Google's IP-based IoT system
Orange spent weekend spamming customers with TXTs
Zero, not infinity, is the Magic Number customers want
Want to beat Verizon's slow Netflix? Get a VPN
Exec finds stream speed climbs when smuggled out
US freemium mobile network eyes up Europe
FreedomPop touts 'free' calls, texts and data
'Two-speed internet' storm turns FCC.gov into zero-speed website
Deadline for comments on net neutrality shake-up extended to Friday
GoTenna: How does this 'magic' work?
An ideal product if you believe the Earth is flat
NBN Co execs: No FTTN product until 2015
Faster? Not yet. Cheaper? No data
prev story

Whitepapers

Reducing security risks from open source software
Follow a few strategies and your organization can gain the full benefits of open source and the cloud without compromising the security of your applications.
Consolidation: The Foundation for IT Business Transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.
Application security programs and practises
Follow a few strategies and your organization can gain the full benefits of open source and the cloud without compromising the security of your applications.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Consolidation: the foundation for IT and business transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.