Feeds

Indian spooks snooping without ISP knowledge

'Lawful Intercept and Monitoring' systems don't sound very lawful

Choosing a cloud hosting partner with confidence

India's authorities are carrying out wide-ranging and indiscriminate internet surveillance of their citizens thanks to secret intercept systems located at the international gateways of several large ISPs, according to The Hindu.

The Chennai-based paper claimed after an investigation that Lawful Intercept and Monitoring (LIM) systems had been deployed by the Centre for Development of Telematics (C-DoT), in violation of the government’s own communications and privacy rules.

The LIMs are fully owned and operated by the government, unlike similar systems deployed by mobile operators which have to comply with Section 5(2) of the Indian Telegraph Act and Rule 419(A) of the IT Rules, it said.

In 2006 the government apparently released “Instructions for ensuring privacy of communications”, which forced all ISPs to employ “nodal officers” to regularly liaise with the authorities on interception requests. However, in reality few ISPs have such staff and the LIMs are operated without any consultation with them in any case, The Hindu claimed.

As a result no ISP contacted by the paper was able to confirm if it had ever received an authorisation letter for the monitoring of internet content.

The LIMs in question are apparently installed between the edge router and core network and have 100 per cent indiscriminate access to the online activity of India’s 160 million internet users with an “always live” link, so spooks can operate without legal oversight or ISP knowledge.

The authorities are therefore able to monitor not just by email address, URL or IP address but by broad keyword or text searches, paper said.

Nine security agencies are apparently involved including the Intelligence Bureau (IB) and the Research and Analysis Wing (RAW).

The government was not able to provide any clarity around who, if anyone, sends the interception requests, or who authenticates and implements it.

The news comes as New Delhi finalises a much more widely publicised surveillance system – the Rs.4 billion (£47.8m) Centralised Monitoring System (CMS).

The CMS, which has been branded as “chilling” by Human Rights Watch and is the subject of a popular Stop ICMS campaign, has hit several delays due to missing software and gaps in its coverage, but is expected to be pushed through.

The Indian government has shown itself to be pretty uncompromising when it comes to matters of “national security”, as BlackBerry can attest to after its long battle over providing spooks with access to customer comms. ®

Secure remote control for conventional and virtual desktops

More from The Register

next story
Bono apologises for iTunes album dump
Megalomania, generosity and FEAR of irrelevance drove group to Apple deal
HBO shocks US pay TV world: We're down with OTT. Netflix says, 'Gee'
This affects every broadcaster, every cable guy
Facebook, Apple: LADIES! Why not FREEZE your EGGS? It's on the company!
No biological clockwatching when you work in Silicon Valley
French 'terror law' declares WAR on the INTERNET itself, say digi-rights folks
Liberté, Égalité, Fraternité: Two out of three ain't bad
SCREW YOU, EU: BBC rolls out Right To Remember as Google deletes links
Not even Google can withstand the power of Auntie
Arab States make play for greater government control of the internet
Nerds told to get lost in last-minute power grab bid at UN meeting
Zippy one-liners, broken promises: Doctor Who on the Orient Express
Series finally hits stride, but Clara's U-turn is baffling
Don't bother telling people if you lose their data, say Euro bods
You read that right – with the proviso that it's encrypted
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Win a year’s supply of chocolate
There is no techie angle to this competition so we're not going to pretend there is, but everyone loves chocolate so who cares.
Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.