News: 1683606610

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

India bans open source messaging apps for security reasons. FOSS community says good luck

(2023/05/09)


India's government has reportedly banned 14 messaging apps on national security grounds, including some open source services.

News of the move [1]appeared in local media last week, citing government sources for news that apps including Element, Wickrme, Mediafire, Briar, BChat, Nandbox, Conion, IMO and Zangi were banned on the recommendation of the Ministry of Home Affairs. The Ministry cited risk of terrorism in the region of Jammu and Kashmir – a majority Muslim territory administered by India but also claimed by Pakistan.

Should open source sniff the geopolitical wind and ban itself in China and Russia? [2]READ MORE

India accuses Pakistan of backing independence activists in the region – and imposed years-long connectivity restrictions that meant only 2G services were available – on the grounds that it made it harder for separatists to organize.

This latest crackdown targets messaging apps India reportedly believes could be used by separatists to plan attacks without authorities being able to intercept their chatter. That's the logic India nearly always uses – indeed, that just about any government uses – when shuttering networks or banning content and apps.

But the Free Software Community of India – a collective of FOSS users and developers – has taken issue with the banning of peer-to-peer open source messaging apps Briar and Element.

[3]

The Community cited reports that India banned the two services because they do not have in-country representatives who can be held legally accountable for activity conducted with the apps. It points out that's a slightly ridiculous position given FOSS relies on decentralized collaboration.

[4]

[5]

"There seems to be a lack of understanding on part of the government on how these P2P software as well as federated apps work. These applications have been crucial for communication during disasters and are used regularly as communication medium in workplaces," the Community argued in a [6]blog post .

"The ban, we believe, will not serve the purpose as there are many anonymous alternate apps that can be used by terror outfits to fill their purpose."

[7]India smacked for illegal tech import tariffs that hurt buyers and exporters everywhere

[8]India-based cybergang busted for selling fake KFC franchises

[9]India's IT minister denies targeting Chinese apps for bans

[10]India uses emergency powers to order takedown of BBC documentary

And of course the source code for FOSS projects is readily available – thus the name – making bans on an app the first move in a likely futile game of whac-a-mole, rather than an effective enforcement tool.

As timing would have it, the Briar project's blog last week [11]detailed the project's efforts to build mesh networks out of Android devices during internet outages – so that messages can continue to flow even if the internet is down.

[12]

"When an Android device thinks that its internet connection doesn’t work, either due to a captive portal or due to certain Google domains being unreachable, apps on the device are still able to connect to IP addresses that remain reachable, and the device can still resolve DNS queries for other domains," the blog [13]stated on May 4. "Even though various parts of the UI indicate that the system considers the Wi-Fi connection to be offline, the system does not seem to block any traffic as a result of this assessment."

"For our project, this is good news: it means that even when access to the global internet is blocked, it should still be possible to communicate with other devices on local networks or national subsets of the internet. While other mechanisms could still influence the ability to form mesh networks, the Android operating system itself doesn't seem to get in our way."

In other words: "You want to block Briar? Go ahead and try." ®

Get our [14]Tech Resources



[1] https://indianexpress.com/article/india/mobile-apps-blocked-jammu-kashmir-terrorists-8585046/

[2] https://www.theregister.com/2023/01/01/foss_and_geopolitics/

[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZFoZxzFO@RXkP3AoXJoGjAAAAAA&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZFoZxzFO@RXkP3AoXJoGjAAAAAA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZFoZxzFO@RXkP3AoXJoGjAAAAAA&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[6] https://fsci.in/blog/statement-on-banning-of-free-software-apps-element-briar/

[7] https://www.theregister.com/2023/04/19/india_tech_tax_wto_rukling/

[8] https://www.theregister.com/2023/03/27/indian_cybergang_busted_for_selling/

[9] https://www.theregister.com/2023/02/13/asia_tech_news_roundup/

[10] https://www.theregister.com/2023/01/24/india_bbc_documentary_emergency_takedown/

[11] https://briarproject.org/news/2023-simulating-internet-shutdowns/

[12] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZFoZxzFO@RXkP3AoXJoGjAAAAAA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[13] https://briarproject.org/news/2023-simulating-internet-shutdowns/

[14] https://whitepapers.theregister.com/



3arn0wl

Interesting last paragraph about Briar. It has Bluetooth connectivity too, of course.

It's always been cat and mouse, ever since the advent of written communication. But however paranoid governments become, we have a right to privacy.

Rights - Peons have no rights !!

Duncan Macdonald

As far as governments worldwide are concerned citizens have no rights - they are required to support their governments without protest.

(Can you think of a living politician that you would be happy to leave alone in your house with valuables on display ? Yet they have life and death power over huge numbers.)

We do have rights

3arn0wl

Article 12

No one shall be subjected to arbitrary interference with his privacy, family, home or correspondence, nor to attacks upon his honour and reputation. Everyone has the right to the protection of the law against such interference or attacks.

https://www.un.org/en/about-us/universal-declaration-of-human-rights

Right to Privacy?

Anonymous Coward

@3arn0wl

Quote: "....right to privacy...."

(1) In a civil society, your right to privacy can be reduced if you are arrested and charged with an offence.

(2) But it's also clear that the idea of "innocent until proven guilty" has been replaced by "guilty by implication".....

.....no arrest, no formal charge!

(3) ....because it's also clear that the police (and others) regularly invade an individual's privacy without a warrant.

(Example: https://www.theregister.com/2018/02/28/privacy_international_questions_oversight_of_uks_mass_comms_data_collection/)

(Example: https://www.theguardian.com/world/2022/dec/05/met-police-illegally-filmed-children-as-young-as-10-at-climate-protest)

(Example: https://www.theguardian.com/uk-news/2022/oct/11/british-police-spy-unlawfully-operated-in-germany-court-finds)

(Example: https://www.theguardian.com/technology/2022/oct/27/live-facial-recognition-police-study-uk)

To get to the point.....citizens need to wonder whether there is any effective "right to privacy" in 2023!

Re: Right to Privacy?

Roland6

> ” To get to the point.....citizens need to wonder whether there is any effective "right to privacy" in 2023!”

If you become a person of interest to the tabloid press, evidence over decades shows you can forget any legal protections and reasonable ”right to privacy” expectations you may have…

Confused Old Person Here.....

Anonymous Coward

....wondering how anyone (nevermind a government) can ban a peer-to-peer application.

The application only exists on individual peer end points......so the ban seems to have an impossibly large number of targets.

But I suppose that the ban might only apply to the TRAFFIC between peers (and not the application).......but how does that work?

Confused.......

Re: Confused Old Person Here.....

Roland6

Having the app on your phone will be sufficient for authorities to infer you are up to no good and thus dig deeper into your life…

So in a society where stop and search and produce papers is normal, just another reason to bully people.

Interestingly, I wonder whether the P2P mesh functionality can be exploited to actively locate devices running the app. For example, outside cafe, police open their device (operating in stealth/ghost mode) note the details of six devices in cafe, so deem it is worth entering and grabbing people and devices…

Stress has been pinpointed as a major cause of illness. To avoid overload
and burnout, keep stress out of your life. Give it to others instead. Learn
the "Gaslight" treatment, the "Are you talking to me?" technique, and the
"Do you feel okay? You look pale." approach. Start with negotiation and
implication. Advance to manipulation and humiliation. Above all, relax
and have a nice day.