by March 14, 2014 0 comments

India, years behind the US in this arena, is trying hard to catch up.
Here’s five ways you could get snooped on in 2014.
This is the most likely way a government department will snoop on you. By askingyour phone company for your “call data records” (CDR): who you spoke to, how oftenand for how long, locations of both parties, and more.There are nearly a dozen Indian organizations (such as the income-tax department), apart from the police, who are allowed to do this.

So you have “nothing to hide”? And they’re not listening to what you’re actuallysaying? Most people do have things to hide – not all of them illegal.

One government officer got the call records for a man being investigated for taxevasion, but misused the data – which showed frequent calls to a married lady – forsome blackmail.Or let’s say you’re in India and you make a friend in Pakistan over Facebook.And you call her a few times from your phone. What you discuss is irrelevant: thegovernment snoops will just flag the pattern of frequent calls to one Pakistan number.
If they were actually listening to the call, they’d know your chat was innocuous, butthey’re not, so they’ll assume the worst.

What do you do? Use Internet based systems like Skype for frequent long-distance calls. They’re more difficult to intercept, and cheaper.

This is easy to do when targeting one person. But it takes “big data” tech to profilelarge groups.Don’t forget that your social-media information is available to anyone, not just togovernment agencies.
What you say and do on social media paints a clear picture of you.
Password crackers look for clues in your social media activity: names of your cat,or son, or favorite song. Most people pick passwords drawn from objects of interest to them. On top of that, most people use the same passwords across multiple accounts.
And repeatedly, posts on Twitter, Facebook and elsewhere have
resulted in arrest under the IT Act’s section 66A.
What can you do? Check your privacy settings on Facebook so that
everyone can’t see your posts. Avoid posting personal information. Avoid
using passwords that have anything visibly to do with you.
People worry a lot about this, but it’s actually not so easy for the Indian
government to do this legally. Most popular email services are US-based, with servers located outside India, and do not fall under Indian jurisdiction.
There is no easy way to intercept a Gmail message you send from a
web browser. (The US agency NSA taps directly into those servers, under
the Prism program.)
This does not mean your email is safe. ‘Phishing’ (acquiring login, password, credit card and other details) is so rampant most Indians will lose an email, banking, or other account to hackers, at some point. You get an email supposedly from Gmail or your bank, saying you need to validate your account. Enter your login and password,
and someone steals your account. India is the fourth most phishing-attacked nation globally. A recent survey by EMC says phishing scams cost Indian firms $53 million in just July-September 2013.
So can the government take over your email account this way? Not legally. But yes, rogue individuals could “phish” and break into your email.
The only people safe from government snooping are terrorists. They use
encryption, making it difficult to crack their messages. More and more people now will begin to do the same thing.
The people most vulnerable to targeted phishing attacks are government
officials who, in India, tend to use Gmail and Hotmail extensively, and are simply not trained in security.
Prasanto K Roy (@prasanto) is editorial
advisor, CyberMedia

No Comments so far

Jump into a conversation

No Comments Yet!

You can be the one to start a conversation.