Feeds

Apple, RIM deny claims of data backdoor for Indian government

Symantec hackers claim intelligence memo shows secret deal

New hybrid storage solutions

Updated Apple and RIM have denied providing the Indian government with backdoor access to customers' data, after the release of a memo that appears to suggest that they and Nokia did a deal in exchange for access to the Indian smartphone market.

The document purportedly comes from the Indian Directorate General of Military Intelligence, and was released by the hacking group the Lords of Dharmaraja, who posted up outdated Norton security source code last week. Dated October 2011, it states that a "decision was made earlier this year to sign an agreement with mobile manufacturers (MM) in exchange for the Indian market presence."

It claims that an agreement was signed with all major vendors, including domestic supplier Micromax, and that a CYCADA data intercept team are in operation on the networks using backdoors supplied by RIM, Nokia, and Apple (RINOA). Symantec is mentioned as the system used to transfer data to mobile platforms.

Claimed Indian smartphone spying memo

Western firms fingered in purported memo

Also contained are details of recent intercepts from the CYCADA team, including conversations between members of the US-China Economic and Security Review Commission (USCC) on currency issues and discussions on the actions of Western firms helping the Chinese aircraft industry improve its avionics and engine manufacturing.

An Apple spokesman told The Register that the company denied giving any access to the Indian government to its systems, although he couldn't comment on the veracity of the memos themselves. RIM told us that it "does not typically comment on rumors or speculation," and pointed out that it has no ability to provide its customers' encryption keys and doesn't do deals with specific countries.

Rumors of governments getting backdoor access to software are as old as the hills - the NSA getting access to Windows 95 in exchange for monopoly control of PCs story lasted until the DOJ case started - and on the face of it there's nothing to suggest that this isn't merely a ruse. There would be considerable technical problems with using Symantec as a distribution system, for example.

The subject matter also seems just a little too juicy for this El Reg hack. As Professor Marcello Truzzi used to say, "Extraordinary claims require extraordinary proof." ®

Update

A Symantec spokesman has told The Register that the company is investigating the documents, but issued an unequivocal statement on the matter:

"We would never develop or help distribute a backdoor program regarding anyone’s programs, mobile or otherwise. Ever."

He also pointed out that the hacking group claimed to have got the Norton source code that was leaked from Indian government servers. There are no records of the Indian government ever being given access to Symantec's source code. The code is however genuine.

Secure remote control for conventional and virtual desktops

More from The Register

next story
Brit telcos warn Scots that voting Yes could lead to HEFTY bills
BT and Co: Independence vote likely to mean 'increased costs'
Phones 4u slips into administration after EE cuts ties with Brit mobe retailer
More than 5,500 jobs could be axed if rescue mission fails
Radio hams can encrypt, in emergencies, says Ofcom
Consultation promises new spectrum and hints at relaxed licence conditions
Blockbuster book lays out the first 20 years of the Smartphone Wars
Symbian's David Wood bares all. Not for the faint hearted
'Serious flaws in the Vertigan report' says broadband boffin
Report 'fails reality test' , is 'simply wrong' and offers ''convenient' justification for FTTN says Rod Tucker
This flashlight app requires: Your contacts list, identity, access to your camera...
Who us, dodgy? Vast majority of mobile apps fail privacy test
Apple Watch will CONQUER smartwatch world – analysts
After Applelocalypse, other wristputers will get stuck in
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
Top 5 reasons to deploy VMware with Tegile
Data demand and the rise of virtualization is challenging IT teams to deliver storage performance, scalability and capacity that can keep up, while maximizing efficiency.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
Secure remote control for conventional and virtual desktops
Balancing user privacy and privileged access, in accordance with compliance frameworks and legislation. Evaluating any potential remote control choice.