WhatsApp Pay may put Indian digital banking at risk: Experts

Agencies
November 8, 2019

After WhatsApp accounts of 121 Indians were compromised by the Israeli spyware Pegasus, experts have warned that the payment feature the Facebook-owned platform is planning to launch in India may put the digital banking system at risk.

"WhatsApp payment needs to be seen with microscopic eye, primarily because in payment you will be dealing with sensitive personal data and cyber security is going to be an essential building block component for WhatsApp to demonstrate its due diligence," Pavan Duggal, one of the nation's top cyber law experts, told IANS.

The Ministry of Electronics and Information Technology (Meity) has already expressed dissatisfaction over the manner WhatsApp communicated about the compromised accounts.

The piece of NSO Group software called Pegasus allegedly exploited WhatsApp's video calling system by installing the spyware via missed calls to snoop on 1,400 users globally. The devices were compromised with just a WhatsApp video call.

In May, WhatsApp, which has 400 million users in India, urged its 1.5 billion global users to upgrade the app after discovering the vulnerability.

"WhatsApp's recent operations have shown that it's difficult for the government to get information from it. WhatsApp is an intermediary under the Information Technology Act and is mandated to exercise due diligence under the law. But it has failed to do due diligence," Duggal said.

"You should not be in a hurry to grant new licences or permission to WhatsApp without being satisfied with its adherence to cyber-security norms, international best practices and Indian laws," he said.

The Facebook-owned company is learnt to have countered the government charge that it didn't inform it about a privacy breach on the messaging platform. WhatsApp didn't even comply with the data breach notification law in India, Duggal said.

"It (WhatsApp) didn't follow reasonable security practices as mandated in Section 43A of the IT Act, 2000. In fact, it abetted the crime of un-authorised access too. Granting WhatsApp pay licence should be given a second thought by the Reserve Bank of India," said Prashant Mali, cyber lawyer at Bombay High Court.

In light of the recent hack, the government, the RBI and the National Payments Corporation of India (NPCI) is reportedly evaluating the risk of allowing social media apps into the digital payment ecosystem.

"With the government, the RBI and the NPCI planning to evaluate the risks involved in making payments via social media apps and services, the security of the UPI payment infrastructure on WhatsApp Pay has been rendered under a cloud of vulnerability," said Salman Waris, Managing Partner at TechLegis Advocates & Solicitors, a law firm.

The RBI revealed in an affidavit in the Supreme Court earlier that WhatsApp had not complied with the data localisation norms. In an April 2018 circular, the RBI stated that the data of any payment banking system have to physically located in India.

"The history of WhatsApp has shown that it's not cooperative with the government in sharing of information. If financial information is compromised, it will not only have an impact on users, but it can also have an impact on the sovereignty and security of India," Duggal said.

The government must go slow till the time WhatsApp demonstrates compliance to Indian law and showed that the platform was secure, he said.

"Because almost every phone user in India is on WhatsApp, it's all the more important for the government and the RBI to ensure that WhatsApp not only complies with the parametres of cyber security and data localisation norms, but also the IT Act and the rules and regulations thereunder.

"If WhatsApp doesn't comply with the data localisation norms, rules and regulations of the IT Act, then there is no question of granting new permission," Duggal said.

In a statement, a WhatsApp spokesperson said that safety and security of users remains the platform's highest priority.

"In May, our security team caught and stopped a cyber attack designed to send malware to mobile devices. Unable to break end-to-end encryption, this kind of malware abuses vulnerabilities within the underlying operating systems that power our mobile phones," the WhatsApp spokesperson said.

"Technology companies are constantly working to stay ahead of these kind of challenges through updates and patches. The safety and security of our users remains our highest priority, which is why in May we blocked the attack and have taken action in the courts to hold NSO accountable," the statement added.

Facebook filed a lawsuit against Israel's NSO Group last month. According to Facebook, the NSO Group violated laws, including the US Computer Fraud and Abuse Act.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
March 23,2020

Dubai, Mar 23: The United Arab Emirates announced on Monday it will temporarily suspend all passenger and transit flights amid the novel coronavirus outbreak.

The Emirati authorities "have decided to suspend all inbound and outbound passenger flights and the transit of airline passengers in the UAE for two weeks as part of the precautionary measures taken to curb the spread of the COVID-19", reported the official state news agency, WAM.

It said the decision -- which is subject to review in two weeks -- will take effect in 48 hours, adding: "Cargo and emergency evacuation flights would be exempt."

The UAE, whose international airports in Abu Dhabi and Dubai are major hubs, announced on Friday its first two deaths from the COVID-19 disease, having reported more than 150 cases so far.

Monday's announcement came hours after Dubai carrier Emirates announced it would suspend all passenger flights by March 25.

But the aviation giant then reversed its decision, saying it "received requests from governments and customers to support the repatriation of travellers" and will continue to operate passenger flights to 13 destinations.

Emirates had said it will continue to fly to the United Kingdom, Switzerland, Hong Kong, Thailand, Malaysia, the Philippines, Japan, Singapore, South Korea, Australia, South Africa, the United States and Canada.

"We continue to watch the situation closely, and as soon as things allow, we will reinstate our services," said the airline's chairman and CEO, Sheikh Ahmed bin Saeed Al-Maktoum.

Gulf countries have imposed various restrictions to combat the spread of the novel coronavirus pandemic, particularly in the air transport sector.

The UAE has stopped granting visas on arrival and forbidden foreigners who are legal residents but are outside the country from returning.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
February 26,2020

Feb 26: In a midnight hearing, the Delhi High Court directed police to ensure safe passage to government hospitals and emergency treatment for those injured in the communal violence erupted in northeast Delhi over the amended citizenship law.

The court held a special hearing, which started at 12:30 am, at the residence of Justice S Muralidhar after receiving a call from an advocate explaining the dire circumstances under which the victims were unable to be removed from a small hospital to the GTB Hospital.

A bench of Justices S Muralidhar and Anup J Bhambhani directed the Delhi Police to ensure safe passage of the injured victims by deploying all resources at its command and on the strength of this order as well as to make sure they receive immediate emergency treatment if not at the Guru Teg Bahadur Hospital then at the Lok Nayak Jai Prakash Narayan Hospital (LNJP) or Maulana Azad or any other hospital.

The bench also called for a status report of compliance, including information about the injured victims and the treatment offered to them, and the matter will be heard during the day at 2:15 pm.

It said the order be communicated to the medical superintendents of the GTB and the LNJP Hospitals.

The urgent hearing was conducted after advocate Suroor Mander called the judge and sought urgent orders for safe passage of ambulances for the injured.

The Delhi Police and the government were represented through additional standing counsel Sanjoy Ghose.

During the hearing, the bench spoke over phone to doctor Anwar of the Al-hind Hospital in New Mustafabad who told the court that there were two bodies and 22 injured persons there and he had been trying to seek police assistance since 4 pm on Tuesday without success.

The court then directed the senior officials to reach to the hospital forthwith, following which they started the process of evacuating the injured to the nearest hospitals.

It also said this order be brought to the knowledge of the Delhi Police Commissioner.

Communal violence over the amended citizenship law in northeast Delhi claimed at least 18 lives till Wednesday.

On Tuesday, the violence escalated in northeast Delhi as police struggled to check the rioters who ran amok on streets, burning and looting shops, pelting stones and thrashing people.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
June 9,2020

Jun 9: Prime Minister Narendra Modi wants all 1.3 billion Indians to be “vocal for local” — meaning, to not just use domestically made products but also to promote them. As an overseas citizen living in Hong Kong, I’m doing my bit by very vocally demanding Indian mangoes on every trip to the grocery. But half the summer is gone, and not a single slice so far.

My loss is due to India’s COVID-19 lockdown, which has severely pinched logistics, a perennial challenge in the huge, infrastructure-starved country. But more worrying than the disruption is the fruity political response to it. Rather than being a wake-up call for fixing supply chains, the pandemic seems to be putting India on an isolationist course. Why?

Granted that the liberal view that trade is good and autarky bad isn’t exactly fashionable anywhere right now. What makes India’s lurch troublesome is that the pace and direction of economic nationalism may be set by domestic business interests. The Indian liberals, many of whom are Western-trained academics, authors and — at least until a few years ago — policy makers, want a more competitive economy. They will be powerless to prevent the slide.

Modi’s call for a self-reliant India has been echoed by Home Minister Amit Shah, the cabinet’s unofficial No. 2, in a television interview. If Indians don’t buy foreign-made goods, the economy will see a jump, he said. The strategy — although it’s too nebulous yet to call it that — has a geopolitical element. A military standoff with China is under way, apparently triggered by India’s completion of a road and bridge near the common border in the tense Himalayan region of Ladakh. It’s very expensive to fight even a limited war there. With India’s economy flattened by COVID, New Delhi may be looking for ways to restore the status quo and send Beijing a signal.

Economic boycotts, such as Chinese consumers’ rejection of Japanese goods over territorial disputes in the East China Sea, are well understood as statecraft. In these times, it’s not even necessary to name an enemy. An undercurrent of popular anger against China, the source of both the virus and India’s biggest bilateral trade deficit, is supposed to do the job. But is it ever that easy?

A hastily introduced policy to stock only local goods in police and paramilitary canteens became a farcical exercise after the list of banned items ended up including products by the local units of Colgate-Palmolive Co., Nestle SA, and Unilever NV, which have had significant Indian operations for between 60 and 90 years, as well as Dabur India Ltd., a New Delhi-based maker of Ayurveda brands. The since-withdrawn list demonstrates the practical difficulty of bureaucrats trying to find things in a globalized world that are 100% indigenous.

Free-trade champions fret that the prime minister, whom they saw as being on their side six years ago, is acting against their advice to dismantle statist controls on land, labor and capital to help make the country more competitive. Engage with the world more, not less, they caution. But Modi also has to satisfy the Rashtriya Swayamsevak Sangh, the umbrella Hindu organisation that gets him votes. Its backbone of small traders, builders and businessmen — the RSS admits only men — was losing patience with the anemic economy even before the pandemic. Now, they’re in deep trouble, because India’s broken financial system won’t deliver even state-guaranteed loans to them.

The U.S.-China tensions — over trade, intellectual property, COVID responsibility and Hong Kong’s autonomy — offer a perfect backdrop. A dire domestic economy and trouble at the border provide the foreground. Big business will dial economic nationalism up and down to hit a trifecta of goals: Block competition from the People's Republic; make Western rivals fall in line and do joint ventures; and tap deep overseas capital markets. The first goal is being achieved with newly placed restrictions on investment from any country that shares a land border with India. The second aim is to be realized by corporate lobbying to influence India's whimsical economic policies. As for the third objective, with the regulatory environment becoming tougher for U.S.-listed Chinese companies like Alibaba Group Holding Ltd., an opportunity may open up for Indian firms.

All this may bring India Shenzhen-style enclaves of manufacturing and trade, but it will concentrate economic power in fewer hands, something that worries liberals. They’re moved by the suffering of India’s low-wage workers, who have borne the brunt of the COVID shutdown. But when their vision of a more just society and fairer income distribution prompts them to make common cause with the ideological Left, they’re quickly repelled by the Marxist voodoo that all cash, property, bonds and real estate held by citizens or within the nation “must be treated as national resources available during this crisis.” Who will invest in a country that does that instead of just printing money?

At the same time, when liberals look to the business class, they see a sudden swelling of support for ideas like a universal basic income. They wonder if this isn’t a ploy by industry to outsource part of the cost of labor to the taxpayer. Slogans like Modi’s vocal-for-local stir the pot and thicken the confusion. The value-conscious Indian consumer couldn’t give two hoots for calls to buy Indian, but large firms will know how to exploit economic nationalism. One day soon, I’ll get my mangoes — from them.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.