Feeds

Apple, RIM deny claims of data backdoor for Indian government

Symantec hackers claim intelligence memo shows secret deal

The Essential Guide to IT Transformation

Updated Apple and RIM have denied providing the Indian government with backdoor access to customers' data, after the release of a memo that appears to suggest that they and Nokia did a deal in exchange for access to the Indian smartphone market.

The document purportedly comes from the Indian Directorate General of Military Intelligence, and was released by the hacking group the Lords of Dharmaraja, who posted up outdated Norton security source code last week. Dated October 2011, it states that a "decision was made earlier this year to sign an agreement with mobile manufacturers (MM) in exchange for the Indian market presence."

It claims that an agreement was signed with all major vendors, including domestic supplier Micromax, and that a CYCADA data intercept team are in operation on the networks using backdoors supplied by RIM, Nokia, and Apple (RINOA). Symantec is mentioned as the system used to transfer data to mobile platforms.

Claimed Indian smartphone spying memo

Western firms fingered in purported memo

Also contained are details of recent intercepts from the CYCADA team, including conversations between members of the US-China Economic and Security Review Commission (USCC) on currency issues and discussions on the actions of Western firms helping the Chinese aircraft industry improve its avionics and engine manufacturing.

An Apple spokesman told The Register that the company denied giving any access to the Indian government to its systems, although he couldn't comment on the veracity of the memos themselves. RIM told us that it "does not typically comment on rumors or speculation," and pointed out that it has no ability to provide its customers' encryption keys and doesn't do deals with specific countries.

Rumors of governments getting backdoor access to software are as old as the hills - the NSA getting access to Windows 95 in exchange for monopoly control of PCs story lasted until the DOJ case started - and on the face of it there's nothing to suggest that this isn't merely a ruse. There would be considerable technical problems with using Symantec as a distribution system, for example.

The subject matter also seems just a little too juicy for this El Reg hack. As Professor Marcello Truzzi used to say, "Extraordinary claims require extraordinary proof." ®

Update

A Symantec spokesman has told The Register that the company is investigating the documents, but issued an unequivocal statement on the matter:

"We would never develop or help distribute a backdoor program regarding anyone’s programs, mobile or otherwise. Ever."

He also pointed out that the hacking group claimed to have got the Norton source code that was leaked from Indian government servers. There are no records of the Indian government ever being given access to Symantec's source code. The code is however genuine.

Boost IT visibility and business value

More from The Register

next story
Scotland's BIG question: Will independence cost me my broadband?
They can take our lives, but they'll never take our SPECTRUM
Trying to sell your house? It'd better have KILLER mobile coverage
More NB than transport links to next-gen buyers - study
Auntie remains MYSTIFIED by that weekend BBC iPlayer and website outage
Still doing 'forensics' on the caching layer – Beeb digi wonk
NBN Co adds apartments to FTTP rollout
Commercial trial locations to go live in September
Samsung Z Tizen OS mobe is post-phoned – this time for good?
Russian launch for Sammy's non-droid knocked back
Telstra to KILL 2G network by end of 2016
GSM now stands for Grave-Seeking-Mobile network
Seeking LTE expert to insert small cells into BT customers' places
Is this the first step to a FON-a-like 4G network?
prev story

Whitepapers

Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Consolidation: The Foundation for IT Business Transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.
Backing up Big Data
Solving backup challenges and “protect everything from everywhere,” as we move into the era of big data management and the adoption of BYOD.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.