RIL's rights issue to make a debut on BSE, NSE next week

Giving each and every app access to personal information stored on Android smartphones such as your contacts, call history, SMS and photos may put you in trouble as bad actors can easily use these access to spy on you, send spam messages and make calls anywhere at your expense or even sign you up for a premium "service", researchers from cybersecurity firm Kaspersky have warned.

But one can restrict access to such information as Android lets you configure app permissions. 

Giving an app any of these permissions generally means that from now on it can obtain information of this type and upload it to the Cloud without asking your explicit consent for whatever it intends to do with your data.

Therefore, security researchers recommend one should think twice before granting permissions to apps, especially if they are not needed for the app to work. 

For example, most games have no need to access your contacts or camera, messengers do not really need to know your location, and some trendy filter for the camera can probably survive without your call history, Kaspersky said. 

While decision to give permission is yours, the fewer access you hand out, the more intact your data will be.

Here's what you should know to protect your data.

SMS: An app with permission to send and receive SMS, MMS, and WAP (Wireless Application Protocol) push messages, as well as view messages in the smartphone memory will be able to read all of your SMS correspondence, including messages with one-time codes for online banking and confirming transactions.

Using this permission, the app can also send spam messages in your name (and at your expense) to all your friends. Or sign you up for a premium "service." You can see and conrol which apps have these rights by going to the settings of your phone.

Calendar: With permission to view, delete, modify, and add events in the calendar, prying eyes can find out what you have done and what you are doing today and in the future. Spyware loves this permission.

Camera: Permission to access the camera is necessary for the app to take photos and record video. But apps with this permission can take a photo or record a video at any moment and without warning. Attackers armed with embarrassing images and other dirt on you can make life a misery, according to Kaspersky.

Contacts: With permission to read, change, and add contacts in your address book, and access the list of accounts registered in the smartphone, an app can send your entire address book to its server. Even legitimate services have been found to abuse this permission, never mind scammers and spammers, for whom it is a windfall.

This permission also grants access to the list of app accounts on the device, including Google, Facebook, and many other services.

Phone: Giving access to your phone means permission to view and modify call history, obtain your phone number, cellular network data, and the status of outgoing calls, add voicemail, access IP telephony services, view numbers being called with the ability to end the call or redirect it to another number and call any number.

This permission basically lets the app do anything it likes with voice communication. It can find out who you called and when or prevent you from making calls (to a particular number or in general) by constantly terminating calls. 

It can eavesdrop on your conversations or, of course, make calls anywhere at your expense, including to pay-through-the-nose numbers, Kaspersky warned.

Soon, you may be able to withdraw cash from an ATM without touching any part of the machine. AGS Transact Technologies, a provider of cash and digital payment solutions and automation technology, on Monday said it has successfully developed and tested a touchless ATM solution in light of the COVID-19 pandemic.

The ‘contactless' solution, currently under demo at interested banks, enables a customer to perform all the steps required to withdraw cash from an ATM using the mobile app itself. 

The customer simply has to scan the QR code displayed on the ATM screen and follow the directions on their respective bank's mobile application. 

This includes entering the amount and mPIN required to dispense the cash from the ATM machine. 

According to the company, the QR code feature makes cash withdrawals quicker and more secure, and negates the chances of compromising the ATM Pin or card skimming.

"The new Touchless ATM solution is an extension of the flagship QR Cash solution which ensures safety of the users and will provide a seamless cash withdrawal experience with enhanced security," said Ravi B. Goyal, Chairman and MD, AGS Transact Technologies Ltd.

With minimum investment, the banks can enable this solution for their ATM networks by upgrading the existing software.

AGSTTL has so far installed, maintained and managed a network of over 72,000 ATMs across the country and also provides customised solutions to leading banks. 

The company earlier introduced UPI-QR based Cash withdrawal solution in partnership with Bank of India. 

This is how the solution works.

Open the Bank mobile application on your smartphone and select QR Cash Withdrawal. Enter the amount you wish to withdraw on the mobile app and scan the QR code on the ATM screen.

Next, confirm the amount by clicking on ‘proceed' in the app and enter the mPin to authenticate the transaction. Now collect the cash and receipt and you are done.

"The seamless, cardless and touchless withdrawal method is designed to provide easy transaction flow, without the need to touch the ATM screen or enter the pin," said Mahesh Patel, President and Group Chief Technology Officer, AGS Transact Technologies.

Google on Monday announced it is gradually winding down its free public Wi-Fi Station programme currently available at over 400 railway stations in India, and will work with the Indian Railways and Railtel Corporation to help them with existing sites so they can remain useful resources for people.

Google launched its Station initiative in India in 2015 to bring fast, free public Wi-Fi to over 400 of the busiest railway stations in the country by mid-2020.

"We crossed that number by June 2018 and implemented Station in thousands of other locations around the country in partnership with telecommunications companies, ISPs and local authorities," Caesar Sengupta, Vice President, Payments and Next Billion Users, Google, said in a statement.

"Over time, partners in other countries asked for Station too and we responded accordingly. We're grateful for these partnerships, especially with the Indian Railways and the Government of India, that helped us serve millions of users over the last few years," he added.

According to Google, the decision to shut Station has been taken keeping the affordable mobile data plans and mobile connectivity in mind that is improving globally including in India.

"India, specifically now has among the cheapest mobile data per GB in the world, with mobile data prices having reduced by 95 per cent in the last 5 years, as per TRAI in 2019," said Sengupta.

The Indian users consume close to 10GB of data, each month, on average, according to reports.

"Our commitment to supporting the next billion users remains stronger than ever, from continuing our efforts to make the internet work for more people and building more relevant and helpful apps and services," Sengupta noted.

Global networking giant Cisco last year teamed up with Google to roll out free, high-speed public Wi-Fi access globally, starting with India.

The first pilot under the partnership was rolled out at 35 locations in Bengaluru.

Sengupta said that in addition to the changed context, the challenge of varying technical requirements and infrastructure among our partners across countries has also made it difficult for Station to scale and be sustainable, especially for our partners.

"And when we evaluate where we can truly make an impact in the future, we see greater need and bigger opportunities in building products and features tailored to work better for the next billion user markets," he said.