WhatsApp Pay may put Indian digital banking at risk: Experts

Agencies
November 8, 2019

After WhatsApp accounts of 121 Indians were compromised by the Israeli spyware Pegasus, experts have warned that the payment feature the Facebook-owned platform is planning to launch in India may put the digital banking system at risk.

"WhatsApp payment needs to be seen with microscopic eye, primarily because in payment you will be dealing with sensitive personal data and cyber security is going to be an essential building block component for WhatsApp to demonstrate its due diligence," Pavan Duggal, one of the nation's top cyber law experts, told IANS.

The Ministry of Electronics and Information Technology (Meity) has already expressed dissatisfaction over the manner WhatsApp communicated about the compromised accounts.

The piece of NSO Group software called Pegasus allegedly exploited WhatsApp's video calling system by installing the spyware via missed calls to snoop on 1,400 users globally. The devices were compromised with just a WhatsApp video call.

In May, WhatsApp, which has 400 million users in India, urged its 1.5 billion global users to upgrade the app after discovering the vulnerability.

"WhatsApp's recent operations have shown that it's difficult for the government to get information from it. WhatsApp is an intermediary under the Information Technology Act and is mandated to exercise due diligence under the law. But it has failed to do due diligence," Duggal said.

"You should not be in a hurry to grant new licences or permission to WhatsApp without being satisfied with its adherence to cyber-security norms, international best practices and Indian laws," he said.

The Facebook-owned company is learnt to have countered the government charge that it didn't inform it about a privacy breach on the messaging platform. WhatsApp didn't even comply with the data breach notification law in India, Duggal said.

"It (WhatsApp) didn't follow reasonable security practices as mandated in Section 43A of the IT Act, 2000. In fact, it abetted the crime of un-authorised access too. Granting WhatsApp pay licence should be given a second thought by the Reserve Bank of India," said Prashant Mali, cyber lawyer at Bombay High Court.

In light of the recent hack, the government, the RBI and the National Payments Corporation of India (NPCI) is reportedly evaluating the risk of allowing social media apps into the digital payment ecosystem.

"With the government, the RBI and the NPCI planning to evaluate the risks involved in making payments via social media apps and services, the security of the UPI payment infrastructure on WhatsApp Pay has been rendered under a cloud of vulnerability," said Salman Waris, Managing Partner at TechLegis Advocates & Solicitors, a law firm.

The RBI revealed in an affidavit in the Supreme Court earlier that WhatsApp had not complied with the data localisation norms. In an April 2018 circular, the RBI stated that the data of any payment banking system have to physically located in India.

"The history of WhatsApp has shown that it's not cooperative with the government in sharing of information. If financial information is compromised, it will not only have an impact on users, but it can also have an impact on the sovereignty and security of India," Duggal said.

The government must go slow till the time WhatsApp demonstrates compliance to Indian law and showed that the platform was secure, he said.

"Because almost every phone user in India is on WhatsApp, it's all the more important for the government and the RBI to ensure that WhatsApp not only complies with the parametres of cyber security and data localisation norms, but also the IT Act and the rules and regulations thereunder.

"If WhatsApp doesn't comply with the data localisation norms, rules and regulations of the IT Act, then there is no question of granting new permission," Duggal said.

In a statement, a WhatsApp spokesperson said that safety and security of users remains the platform's highest priority.

"In May, our security team caught and stopped a cyber attack designed to send malware to mobile devices. Unable to break end-to-end encryption, this kind of malware abuses vulnerabilities within the underlying operating systems that power our mobile phones," the WhatsApp spokesperson said.

"Technology companies are constantly working to stay ahead of these kind of challenges through updates and patches. The safety and security of our users remains our highest priority, which is why in May we blocked the attack and have taken action in the courts to hold NSO accountable," the statement added.

Facebook filed a lawsuit against Israel's NSO Group last month. According to Facebook, the NSO Group violated laws, including the US Computer Fraud and Abuse Act.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
Agencies
January 26,2020

New Delhi, Jan 26: Google on Sunday marked India's 71st Republic Day by dedicating a doodle illustrating the country's rich cultural heritage that permeates and unites the diverse nation.

From its world-famous landmarks like the Taj Mahal and India Gate, to the wide array of fauna such as its national bird (the Indian peafowl), to classical arts, textiles, and dances, the doodle, designed by Singapore-based artist Meroo Seth, brings together the rich cultural heritage of the country.

Republic Day marks the completion of India's transition towards becoming an independent republic after its constitution came into effect. The governing document had taken nearly three years of careful deliberation to finalise, and its eventual enactment was joyfully celebrated across the country.

While the Constitution was adopted by the Indian Constituent Assembly on 26 November 1949, it came into effect on January 26 -- a day when Declaration of Indian Independence (Purna Swaraj) was proclaimed by the Indian National Congress back in 1929, as opposed to the Dominion status offered by the British Regime.

Festivities embody the essence of diversity found in one of the world's most populous nations, celebrated over a three-day period with cultural events displaying national pride.

Last year's doodle on Republic Day, designed by artist Reshidev RK, had featured Rashtrapati Bhavan in the background along with a display of the country's iconic monuments and heritage.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
January 2,2020

United Nations, Jan 2: Nearly 400,000 babies were born around the world on New Year's Day with India recording the highest number of these births worldwide at 67,385, the UN children's agency said.

An estimated 392,078 babies were born around the world on New Year's Day, according to UNICEF. Of this, an estimated 67,385 babies were born in India, the most globally. China comes in second with 46,299 births.

The beginning of a new year and a new decade is an opportunity to reflect on our hopes and aspirations not only for our future, but the future of those who will come after us,” UNICEF Executive Director Henrietta Fore said.

As the calendar flips each January, we are reminded of all the possibility and potential of each child embarking on her or his life's journey—if they are just given that chance.”

Fiji in the Pacific most likely delivered 2020's first baby, while the US, the last of the New Year's Day. Globally, over half of these births were estimated to have taken place in eight countries - India (67,385), China (46,299), Nigeria (26,039), Pakistan (16,787), Indonesia (13,020), United States of America (10,452), Democratic Republic of Congo (10,247) and Ethiopia (8,493).

Each January, UNICEF celebrates babies born on New Year's Day, an auspicious day for child birth around the world, it said. However, for millions of newborns around the world, the day of their birth is far less auspicious.

In 2018, 2.5 million newborns died in just their first month of life; about a third of them on the first day of life. Among those children, most died from preventable causes such as premature birth, complications during delivery, and infections like sepsis. In addition, more than 2.5 million babies are born dead each year.

UNICEF said over the past three decades, the world has seen remarkable progress in child survival, cutting the number of children worldwide who die before their fifth birthday by more than half. But there has been slower progress for newborns. Babies dying in the first month accounted for 47 per cent of all deaths among children under five in 2018, up from 40 per cent in 1990.

UNICEF's Every Child Alive campaign calls for immediate investment in health workers with the right training, who are equipped with the right medicines to ensure every mother and newborn is cared for by a safe pair of hands to prevent and treat complications during pregnancy, delivery and birth.

Too many mothers and newborns are not being cared for by a trained and equipped midwife or nurse, and the results are devastating,” said Fore. “We can ensure that millions of babies survive their first day and live into this decade and beyond if every one of them is born into a safe pair of hands.”

India is projected to surpass China as the world's most populous country around 2027. According to UN estimates, India is expected to add nearly 273 million people between 2019 and 2050, while the population of Nigeria is projected to grow by 200 million. Together, these two countries could account for 23 per cent of the global population increase to 2050.

China, with 1.43 billion people in 2019, and India, with 1.37 billion, have long been the two most populous countries of the world, comprising 19 and 18 per cent, respectively, of the global total in 2019. Through the end of the century, India is estimated to remain the world's most populous country with nearly 1.5 billion inhabitants, followed by China with just under 1.1 billion, Nigeria with 733 million, the US with 434 million, and Pakistan with 403 million inhabitants.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
June 26,2020

New Delhi, Jun 26: With the highest single-day spike of 17,296 COVID-19 cases reported in the last 24 hours, India's COVID-19 count reached 4,90,401 on Friday, said the Union Ministry of Health and Family Welfare (MoHFW).

The country also saw 407 deaths in the last 24 hours, which pushed the death toll to 15,301.

The total number of cases includes 1,89,463 active cases, 2,85,637cured/discharged/migrated cases, as per the MoHFW.

According to the Indian Council of Medical Research (ICMR), the total number of samples tested up to June 25 is 77,76,228; the number of samples tested on 25 June is 2,15,446.

Maharashtra remains the worst-affected state in the country with 1,47,741 cases. The active cases in the state are 63,357. The number of people cured or discharged stands at 77,453 while the death toll is at 6,931.

Delhi has so far reported 73,780 cases. The active cases in the national capital stood at 26,586. While the cured and discharged numbers stood at 44,765. The death toll in the city is 2,429.

Tamil Nadu has so far reported 70,977. With active cases at 30,067 and the number of cured or discharged at 39,999, while the death toll stood at 911.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.