CERT-IN to develop an Early Warning System for website security
March 28: Cert-In, DIT’s cyber security arm, has tied up with the national cyber security centre of the Republic of Korea and the national computer board of Mauritius to develop advanced warnings and alerts on cyber attacks by analysing internet traffic patterns. Report in ET
US Court Assumes Jurisdiction on Foreign Domain Name Registrants
March 26, 2008: A recent decision by the United States District Court for the District of Virginia held it had 'In Rem Jurisdiction' over domain name registrants that were located in a foreign country and had been accused of Cyber squatting in Virginia. Even though this was not a contested case and the plaintiff was granted summary judgment, this decision is a great precedent on the interpretation of the US Anti-cybersquatting Act and US Courts" jurisdiction on foreign cybersquatters. Article at ibls.com
Cyber Crimes Threat Increases in 2008
March 22, 2008: Some 2.5 million new types of malicious programme have been launched in the past two months alone – more than the previous 15 years put together, according to the latest data from the security firm Trend Micro.
According to the yet to be released report of which a preview was made available, it is reported that to circumvent security measures in signing up free email accounts, a criminal group set up a high-tech sweat shop in India to process the part of the application that cannot be done automatically.
Another alarming observation is that hardware is starting to become infected in the manufacturing process, before it has even left the factory. It is reported that there have been recorded problems with Apple iPods, TomTom satnavs and, most recently, digital picture frames.
Google Loses Trademark Battle
March 22, 2008: The Office for Harmonisation in the Internal Market (OHIM), the body which is responsible for European community trademarks, rejected Google's appeal after a stiff battle with German-born venture capitalist Daniel Giersch. who has held his trademark for six years.The German entrepreneur founded a same-day mail delivery service called GMail designed to offer a swifter alternative to the Deutsche Post. Google has always argued the two names are not confusingly similar. The company even offered to buy the trademark rights from Giersch for $250,000, but the German entrepreneur declined. He called Google's behaviour "very threatening, very aggressive and very unfaithful".
The decision highlights the inevitability of co-existence of trademarks and domain names and the use of services such as lookalikes.in to resolve consumer confusion.
Global Cyber Crime Cooperation
March 21, 2008: A Strategic Alliance Cyber Crime Working Group has been formed by law enforcement in USA, Canada, New Zealand, the United Kingdom, and the United States. The group will fight cyber crime in a synergistic way by sharing intelligence, swapping tools and best practices, and strengthening and even synchronizing their respective laws. Report
Blackberry Issue raises concerns on Security dilution
This is, perhaps, the first time that the government is admitting to intercepting electronic communication. Blanket power to intercept emails will probably end up diluting the legal validity of encrypted communication in an age when privacy is of utmost importance to corporate and individuals. ...More in BS
Phishing on the Increase
Phishing is no longer what it used to be. While the objective has now bent towards financial gain, the methods or techniques have become even more deadly. Phishers now are extensively using this technique to install spyware, Trojans, worms and viruses..A report in Express Computers
Superiors can be pulled up for staff's illegal activities
Any cyber crimes committed with the company’s computer resource,” says Na Vijayashankar, a Bangalore-based e-business consultant and cyber law expert. ... Artilce in ETWas the You Tube attack a Cyber Terrorist attack?
A few days back You Tube site was temporarily disabled in what was then thought to be a mistake by an ISP. It is however speculated now that it was in deed a planned DOS attack launched in retaliation of You Tube hosting a Video of the trailer to a Dutch documentary that claimed that Islamic doctrine is an "inspiration for intolerance, murder and terror." which was considered objectionable by some terror outfit. It is now reported that You Tube has removed the video under dispute. If so, this would go down as a major Cyber terror strike which even a giant company like You Tube was unable to resist. Article in newsbusters.org
Did Microsoft and Intel Cheat the Public?
It is now being revealed in an investigation that when Vista OS was released, Microsoft and Intel agreed to put a "Vista Ready" label on Intel 915 motherboards though it was known that it did not have the required graphic capability. This was done to enable Intel protect its quarterly earnings though both companies knew that they were taking the public for a ride. The responsibility for the decision to pass 915 chipset as "Vista capable" is now taken by Microsoft though Intel was the main beneficiary. To curb such obnoxious practices in businesses, both the giants need to be punished appropriately. Detailed report at news.com
Cyber Law observers may note how e-discovery provisions and undigitally signed e-mails have been used as evidence in this case.
Blocking of You Tube Turns into a DOS attack
Pakistani ISP PieNet attempted to block You Tube in the country on the directions of the Government. It is however understood that the blocking was tried to be achieved by re-directing the youtube incoming traffic back to you tube. This became denial of service attack shutting the site off for two hours and eventually leading to the You tube blocking out Pakistan to continue its service.
Though unintended the incident demonstrates the lack of vision of the technical personnel who tried to handle the blocking of the site through reflecting back the incoming traffic.
"Global Warming Conference" and Nigerian Fraud
Two left Trade Union leaders P K Ganguly and M K Pandhe who wanted to participate in an international global warming conference but ended up being cheated of 300 pounds.becoming victims of the Nigerian e-mail scam...report in ibnlive.com
"Second life" could be used by Terrorists
Cyber war specialists have now come to recognize the potential of the "Virtual Game" sites such as the "Second life" to be misused by terrorists. The problem arises due to importance given by these websites on the "Privacy" of individuals which provides a good camouflage for the underworld to operate as online avatars and use the freedom for their nefarious activities. Security specialists should therefore try to find out solutions to prevent such misuse... Related Article
Copyright Needs Boundaries
The controversy of whether the online game "Scrabulous" violates copyright of the owners of the toy "Scrabble" raises the issue of the limits that needs to be placed on the concept of Copyright. May be the idea of the scrabble game might have been used in Scrabulous. But is the online version a clone of the "Expression"?. If this argument is accepted then use of online Cricket or Football or Baseball or Chess would also be adaptations of the original expressions. There is need for the society to progress forward without such narrow interpretation of the copyright provisions. Creating an online version of a "game" idea should be considered as either as a fair use or as a matter outside the Copyright and falling under the patent right. Report in gulftimes
More Cyber Crime Units to come up in Tamil Nadu
The Tamil Nadu Police which has made substantial progress in the prosecution of Cyber Crimes has announced that they would open more Cyber Crime Police stations in the State. The DGP of Tamil Nadu has stated that within the next six months, Cyber Crime Units will start functioning in Madurai and Coimbatore and in due course every district will have a Cyber Crime unit. Naavi.org has been urging for setting up of one Cyber Crime unit in every district of India and welcomes the initiatives taken by Tamil Nadu. Hopefully this will be an inspiration for other states also to take similar actions. The then Home Minister of Karnataka Sri M P Prakash had announced some time back that a Cyber Crime cell would be started in Hubli. We hope that this will become a reality during the Governor's rule. Report in Chennaionline
Chennai Police Score Another Cyber Crime Conviction
Close on the heels of a confirmation of Section 67 (ITA 2000) conviction in an appeal court, Chennai Police obtained an important conviction in the celebrated case of Dr L Prakash who had been accused of supplying obscene electronic pictures to a foreign wbsite. This case was registered in 2001. He has been awarded life sentence.. ..Report in CNN-IBN : About Sentence..report in NewsToday
Zapak.com accused of Trademark violation/Defamation
In an interesting observation, it is reported that the Reliance controlled Zapak.com uses online game situations to boost Reliance brand image and decry Vodafone and Airtel. Report in ET
Phishing is Hacking
The power of Indian Cyber Law is manifest in the definition of the Section 66 offence which covers a wide range of Computer and Internet Crimes. The recent concern of the Netizens is the "Phishing Attacks". Most of the time the attack ends up with a fraudulent withdrawal of money froma Bank account. In view of the end result we often see only the "Fraud Dimension" of the Phishing attack.These attacks consist of the following components.
1.Forging of e-mail headers
2.Spamming under the false name
3.Creation of pseudo websites/web page which appear similar to the better known Bank site
4. Using the stolen password for entering the real Bank system to withdraw money.
Under Section 66 of ITA 2000, these could be recognized as an offence not withstanding the offences that may be recognized under IPC. Victims would rather prefer action under ITA 2000 since it also simplifies the recovery of damages through adjudication proceedings... Naavi
Chennai Cyber Crime Police achieve another landmark
on 5th November 2004, Chennai Cyber Crime achieved a historical conviction under Section 67 of ITA 2000 in the Court of the Assistant Metropolitan Magistrate under case no 4680/04. This was the first conviction under ITA 2000 and the accused had been sentenced to a total of 5 years of imprisonment which included 2 years under Section 67 of ITA 2000, 2 years under Section 469 of IPC and 1 year under Section 509 of IPC. The case hinged on the evidence produced by Naavi under the Cyber Evidence Archival Center (www.ceac.in) . The case had been investigated meticulously by S Balu the then ACP in charge of the Cyber Crime Cell, Chennai.
The case established several guiding principles namely the investigation and conviction simultaneously under ITA 2000 and IPC, acceptance of evidence under Section 65B of IEA, Acceptance of evidence from CEAC, recognition of the concept of "Forgery" in the sending of a message under a different person's name as well as the forensic aspects of a crime committed through electronic documents.
The accused had preferred an appeal and the City Civil Court delivered its judgment on the appeal on 23rd January 2008 confirming the conviction and completely vindicating all aspects of investigation in the land mark case. The sentence however was reduced from 5 years to a modest 8 months and the accused has been released since he ahs already served the sentence.
Chennai Cyber Crime Police can now be proud of being the first Cyber Crime Police Station in India to successfully defend the conviction under ITA 2000 on appeal.
Copy of the judgment can be accessed here (PDF document 8MB)
CEO s shaken by the Supreme Court verdict
After the unfortunate incident involving rape and murder of Pratibha Srikant Murthy on December 13, 2005, the police in Bangalore had filed an FIR accusing Som Mittal, managing director of Hewlett Packard Global Soft Ltd,f of violating statutory orders .the 2002 order of the state government prohibiting night shift for women.
Mr Mittal's plea for quashing of FIR had been earlier rejected by the Karnataka High Court and further by Supreme Court on 30th January. Mr Mittal who is also the President of Nasscom might have been reminded of the plight of Mr Avnish Bajaj CEO of Baazee.com who was arrested under ITA 2000 a few years back. At that time Nasscom had vehemently supported Mr Bajaj and lobbied with the Government so that ITA 2000 was amended.
Do we now see a demand for changing the provisions of Section 304 A of IPC? which says " 304A. Causing death by negligence : Whoever causes the death of any person by doing any rash or negligent act not amounting to culpable homicide, shall be punished with imprisonment of either description for a term which may extend to two years, or with fine, or with both."
It must be remembered that the decision only means that the proceedings can be launched against the CEO for negligence which lead to the death. Of Course, the ultimate decision of whether the person is guilty or not depends on whether the CEO was negligent. This depends on what action the CEO had taken at that time to prevent the type of happening that caused the death. In case the CEO had initiated all actions that a "Prudent person under similar circumstance would have done", then he should be absolved of the liability.
The case would however be a trend setting case which would perhaps define the concept of "Due Diligence and its limitations. This will also apply to Cyber Crime cases and hence is of interest to Cyber Law observers.
We however record our profound sympathies both with the family who lost the loved one as well as Mr Som Mittal for whom the incident has caused extreme misery.
Victims of Cyber Investment Crimes now have a helping handIn order to empower the victims of Cyber Crimes in the online investment area and to protect the online investors, Naavi has initiated an action plan through the formation of "Online Investor's Association of India". In a press conference to announce the launch, Naavi said that several follow up initiatives have been planned starting with representing to various agencies such as the Governments, Police and Adjudicators so that Cyber Investment Crimes are taken cognizance of as Cyber Crimes and relief provided to the investors through available legal remedies. (Copy of Press Release available here)
The Days of Information Insurance are Here
Naavi.org has been long advocating that Insurance industries are required to work out insurance products to protect information users against risks arising out of data loss and cyber crimes. Even in the context of the launching of the Online Investor's Association of India (www.oliai.in), Naavi highlighted the need for employee's cyber crimes being covered under some insurance programmes so that victims can stand protected. In the light of the above it is heartening to note that some insurance companies such as HDFC Insurance, TAta AIG, and ICICI Lombard have started offering such insurance as indicated by this ET report. The report
Is "Cyber Law" a Trade Mark?
In an amusing development it appears that a lawyer in USA has applied for a :Service Mark registration for the word "Cyber Law". This as much reveals the ignorance of the applicant on the legal aspects of Trade Mark as well as the greedy ness fueled by the IPR legislation. More information available here :Read More Comments here:
Online Investor's Association of India
Naavi.org has been receiving many Cyber Crime complaints in recent days involving online investments. First it was the Swisscash.net investors. Then it was the investors through online broking. Now several investors in Banks have been complaining of having been victimized by online frauds.
The common problem that most of these victims are facing is that the Cyber Crime Police Stations are avoiding booking of cases stating that they come under the jurisdiction of the normal police stations. Normal police stations are however reluctant to accept the complaints since they feel that there is a specially trained manpower in Cyber Crime Police stations to handle such cases and they should handle these cases. As a result the victims are not getting the required attention.
In a few instances where SEBI has been notified, the response has not been adequate to redress the grievance of the victims. Even the Stock Exchanges have been not fully cooperative when an individual investor takes on a powerful broker.
It is also found that in some of the online investment frauds, the victims are NRIs who cannot pursue their cases physically with the Police stations or Courts.
In order to enable these victims get better justice from the system, Naavi.org proposes to start an "Online Investor's Association of India" (OLIAI). This will be supported by CCC-RAC (Cyber Crime Complaints and Resolution Assistance Center) and other services of Naavi.org. We have also sought the assistance of Dr Kiran Bedi's new initiative on Police reforms (Saferindia.com).
We welcome all like minded individuals to join Naavi and make this initiative a success. Naavi can be contacted at naavi@vsnl.com or +91 9343554943. More details and developments will be available on the website www.oliai.in which will soon be functional.
Plea bargaining used for a Section 67 case
In what can be considered a first in the history of Cyber Crimes in India, a case in Pune under Sec 67 of ITA 2000 is reported to have been settled under the "Plea-Bargaining" provision under Section 265 of CrPc. In this case the accused was a woman and had reportedly posted an obscene profile of her friend in Orkut with mobile number as she was angry with her friend being close to the man she loved. The accused has been let off without any imprisonment but a bond of good behaviour for 2 years and a payment of Rs 2.75 lakhs as compensation to the victim. Report in TOI
What is interesting in this case is that the decision has been at variance with ITA 2000 on two counts. According to Sec 67 of ITA 2000, the offender "Shall be punished" with imprisonment and the fine in the first instance is Rs 1 lakh. Civil compensation is not envisaged under ITA 2000 and is a subject matter of Section 43. Obviously, the CrPc amendment has been applied overriding the ITA 2000 provisions.
According to ITA 2000, its provisions will apply "notwithstanding anything inconsistent therewith contained in any other law for the time being in force.".
Plea bargaining in India : Amendment to CrPc
Rs 20 Crore damages Claimed for Cyber Injustice
The software engineer of Bangalore who had to face the humiliation and torture of having to spend 50 days in Yerawada jail because of the mistake of Bharati Airtel and Pune Police has reportedly sued for damages to the extent of Rs 20crores. TOI report
This should make other ISPs and Cyber Crime Police stations to wake up and stop cooking up false cases on individuals.
Related Article: Error by Pune Police brings discredit to ITA 2000
Kiran Bedi's Initiative
Kiran Bedi the renowned Police officer who resigned recently from service has embarked on a career of public service. During here distinguished service Ms Bedi was not only considered an efficient police officer but also an honest public service minded officer. It is reported that Ms Bedi is taking up an initiative to bring about long awaited reforms in the Police system and to provide support to crime victims by acting as a bridge between the victims and the Police.
Naavi.org has been consistently working with a similar objective in the field of Cyber Crimes and welcome Ms Bedi's initiative. More info at www.saferindia.com (Please note that the web address is "saferindia" and not "safeindia" as has been reported in some press.)
This initiative includes a mechanism to record complaints which the Police are rejecting to register. We have come across umpteen number of cases in Cyber Crimes which the Police refuse to register and we hope Kiran Bedi's initiative will help Cyber Crime victims also to ensure that their grievances reach the relevant authorities.
Related article: DNA
More Cyber Crime Cells?..Will it help?
Maharashtra is reportedly setting up 9 more Cyber Crime cells in the state to handle cases under ITA 2000. While the attention paid by the Government on Cyber Crime prevention is welcome, it is necessary that the Cyber Crime Cells are structured appropriately so that they can handle any Cyber Crime even when the crime comes under sections of IPC. At present Cyber Crime Police stations such as the one in Bangalore restrict their activity to only cases which come under the sections of ITA 2000 only. If therefore a crime is committed using a computer but falls under say "Fraud" under IPC, the case will be considered as outside the jurisdiction of the Cyber Crime Police Station.
Since the expertise of the Cyber Crime police staion/cell would be required to assist investigation of all crimes involving computers, it is necessary to structure the Cyber Crime cells as "Investigative" and "Consultancy" cells which support normal police stations so that Cyber Crime cases can be booked by any police station.
It is also necessary to introduce the system of registration of Cyber Crimes through digitally signed online messages and there should be no delay or discretionary rejection in registering complaints.
Let's hope that Maharashtra Police will set in this new trend through the newly planned Cyber Crime cells. Related Article
One More ICICI Phishing Case reported
The Cyber Crime Complaints and Resolution Assistance Center, ( www.ccc-rac.in ) has received another complaint from an NRI stating that more than Rs 6 lakhs has been fraudulently withdrawn from his account after the recent phishing attack on the customers of ICICI Bank. In this case the withdrawn amount has been transferred to another account in the Bank at Mumbai before being withdrawn.
Naavi.net invites affiliation from advocates in Tamil Nadu and Mumbai who are interested in handling litigation of this type to redress the grievances of the victims through appropriate legal measures.
Freelancer Frauds on Internet
Naavi.org has been suggesting a mechanism for accreditation of online job seekers and job offerors through the system of education commitment and registration. (Ref: E-Entrepreneurship Development Cell required). Absence of such a facility often helps unscrupulous persons taking Internet service buyers or sellers for a ride. A case of this nature has been reported at CCC-RAC (Cyber Crime Complaints and Resolution Assistance Center) where in an US buyer of a net service through freelancers.com has been apparently cheated by some person in Kolkata. In the interest of developing trust in e-contracts and e-business we need our Police to take up the case and take suitable action against the suspect. I would like to know if any public spirited lawyer from Kolkata can assist CCC-RAC in following up the issue.
Nigerian Fraud Alert
One of the recent tactics used by Fraudsters of Nigerian fame is to send a copy of the cheque stated to have been kept ready for delivery to you if you make the payment of the advance fee. One such photo is here. Those who still believe in such fraudsters may also check the disclaimer of the Central Bank of Nigeria on their website.
Here is a sample of two e-mails received by one of the earlier targetted victims abroad which is also interesting. http://www.lindqvist.com/en/two-mails-from-the-central-bank-of-nigeria
Another eventful year 2007 is behind us. The digital society in India entered its 9th year of existence. The year marked some new beginnings and also opened up some concern areas. Let's try to recall some of the important developments in the field of Cyber Law in India and also in the history of Naavi.org... More
ICICI Bank Phishing Fraud reported from Delhi
The ICICI Bank Phishing attempt reported in these columns earlier have started surfacing in the form of victims reporting the frauds. One such case has been reported by a Delhi customer of ICIC Bank who has found around RS 76000/- drawn from his Internet Banking account following the response to the phishing mail. What is to be noted is that the money has been credited to ICICI bank accounts in Mumbai before the trail was lost.
For the general information of victims, we would like to suggest victims to take immediate action to protect their interests by filing a complaint with the Police. We also urge the Police to register the cases not only under the sections of fraud under IPC but also under Section 66 of ITA 2000 (Diminishing the value of information and causing injury to information residing inside a computer resulting in wrongful harm). Case may also be registered against the Intermediary Banks (Under Section 85 for vicarious liability due to lack of due diligence). The Bank from which the money finally went untraceable will also be liable under the Anti Money Laundering Act.
Cyber Crime Complaints and Resolution Assistance center (www.ccc-rac.in) would provide assistance required by the victims through the group of advocates associated with the center where required.
74% of e-mails are Spam.. Who Benefits?
Symantec observes that over 74% of mails reaching India are spam mails. It also warns that spammers are teaming with criminals and providing a channel for spreading of Trojans and Frauds. In discussing the solution to this problem, we need to recognize that Spam is not getting reduced because ISPs are not cooperating in the reduction of Spam. The reason is that ISPs are directly benefiting from the proliferation of Spam and unless they are made responsible for the ill effects of Spam, the situation cannot improve. Symantec Report
One More Phishing Attack in ICICI Bank Name
Cyber Crime Complaints and Resolution Assistance Center ( www.ccc-rac.in ) has come across yet another phishing mail attacking the ICICI Bank account holders. (The e-mail ). The mail contains a hyperlink which is linked to the URL : http://br.geocities.com/icici_bankupdate/ICICI.htm
The page appears to have been disabled at present by geocities.com. It is also interesting to observe that when the site was visited with Firefox, an automated alert was generated while no such alert was generated in the Internet Explorer. (See the pages here)
Header information indicates that the mail has been originated from the @icicibank.com domain. This was also the case of an earlier phishing mail received on 21st December. Security specialists at ICICI Bank may check if their mail servers are compromised or this is simply a case of spoofing..
Convergence Conflict Surfaces in Mobile TV
Allocation of spectrum for Mobile TVs has reportedly created differences between the I&B Ministry and the Ministry of Communications and IT. While the TRAI looks at the issue of allocation of spectrum as the Telecom domain, the MCIT is concerned about the IP TV broadcasters. The problem however is that the convergence of technologies has left both the TV and Cable Industry and the Internet industry in the same business place and they need to integrate and compete with one another. It may be recalled that it was on the issue of such differences that the Communication Convergence Bill 2001 was shelved. It is perhaps time to think once again if the time is ripe for passing a uniform legislation for the convergence industry and bring it under one regulatory authority. Related Article in Hindu Business Line
Beware of the New Year Phishing Attacks
The creativity of criminals can be seen in the exploitation of every event which is socially considered important by individuals for any reason. With the coming of the New Year, now a Phishing attack has been launched in the name of ICICI Bank hinting that the Bank is undertaking an annual security drill and in order to keep one's account secure in 2008, they need to log in and update their accounts. This in effect is the content of the e-mail which has been sent to all ICICI Bank customers.
Copy of the mail is seen here.
Copy of the header information of the mail is available here.
Recipients may note that the hyperlink given in the mail links to a different website which is the indication that this is a phishing mail. We also observe that the sender's address is from the icicibank.com domain.
We request public not to respond to the mail and also request ICICI Bank to take necessary remedial action.
Address of Dr Abdul Kalam at SDM College Mangalore
Dr Abdul Kalam recently visited Mangalore and delivered a lecture to the students at SDM Law College. Amongst other things he singled out Cyber Law as one of the important segments of law for law students. Full Speech
Need for Protecting the E-Governance Assets
A spate of e-mail threats that have been received in recent days threatening in each case a terrorist action indicates their confidence that their e-mails will not be traced. Probably they are right since there are umpteen number of service providers who are ready to help them with technology for masking their identity. These "Anonymizer" tools which are meant to protect the "Privacy" of an individual also comes in handy for criminals. Today we are seeing the spate of e-mails some of which may be only pranks. But these incidents also indicate the possibility that soon similar channels will be used for launching cyber attacks on Indian information assets. As more and more aspects of Governance shifts to the e-space, the e-Governance assets become vulnerable to these attacks.
Sooner we realize these threats and take action, better it is for India. Naavi has observed that the awareness of Information security needs particularly the augmented security which we prefer to call "Techno Legal Security" as different from the normal Firewall security is in adequate in the e-Governance sphere. As a result a number of good initiatives in e-Governance fall woefully short in addressing the cyber law compliance issues. It appears that there needs to a mandating of such security initiatives in the e-governance sector through a specific legislation such as an "E-Governance Act".
Naavi.org welcomes thoughts on this issue "Do We Need an E-Governance Act of India" to supplement the Information Technology Act 2000? and if so what should be the scope of such an Act. If you have a view, write to naavi@vsnl.com
Human Rights and Netizens
Speaking at the valedictory function of the two day National Conference on Human Rights conducted by KILPAR (Karnataka Institute for Legal and Parliamentary Reforms) and SDM Law College at Mangalore on the 16th December, 2007, Naavi underscored the need for Human Rights Activists to also debate on how Human Rights are violated through Cyber Space. He also highlighted that human rights activists are already considering a drafting of a "Universal Declaration of Netizen's Rights" and Indian activists should also start taking interest in the same.
It may be recalled that the Cyber Crimes Complaints and Resolution Assistance Center (CCC-RAC) of Naavi.org has already started acting in the domain of "Human Rights in the Netizen sphere". Human Rights Activists who would like to support the activities of Naavi may contact the center at Bangalore. A branch of the center is proposed to be opened at Mangalore and if appropriate interest is shown by others, Naavi.org intends to open such units elsewhere. (18/12/2007)
Attacks from China are more than from Pakistan
In what must be considered as a matter of grave concern, security experts are indicating that Cyber attacks from China have increased to such an extent recently that they have surpassed attacks from Pakistan. It appears that China is developing an expertise in Cyber Warfare which challenges the US dominance in Cyber Space. Read the article in Mint
As Naavi.org has repeatedly brought out in these columns, we need a national strategy for cyber space security which should encompass the Cyber crime prevention activities of the Police as well as the Information Security activities of the IT users. Digital Society Foundation recently organized a seminar in Bangalore to focus on this issue. But we need more such seminars to discuss what needs to be done on an all India basis.
One of the other stake holders who seem to be need some nudging in this regard is the e-Governance sector. The e-Governance sector in India is still in the "Enablement mode" and in a bid to find innovative use of ICT in Governance, security aspects are being ignored. In the Banking segment also there is less than adequate security concern basically because the Banks are dependent on software vendors who are not keen to introduce security features on an ongoing basis since it means a "Cost" to them. They forget that with their reluctance, they are adding a "Deferred Cost" to their customers and perhaps a "Deferred Security Threat" to the nation.
Hopefully, the growing Chinese dominance in Cyber War fare will wake up our authorities.
Intermediaries Get a Jolt From Supreme Court
In what should be considered as a major legal decision in India affecting the domain of Cyber Crimes, Supreme Court of India has held that Intermediaries could also be guilty under narcotics control laws if the facilities are used to distribute banned drugs in the country and abroad.
The Court said that the network providers could not be treated merely as "innocent intermediaries" under the Information Technology Act. The immunity provided by the Act from prosecution referred only to offences under the that law but did not extend to the nefarious trade, the bench headed by Justice S B Sinha emphasised.
In this case, Sanjay Kedia, a highly qualified person set up two companies, Xponse Technologies and Xponse Services, and designed, developed and hosted a pharmaceutical website and was using it to distribute huge quantities of drugs in the US from Kolkotta. In view of the "overwhelming inculpatory evidence" the court denied his bail application.
This is of great importance in the light of the demand for exemption of liabilities under the proposed amendments to ITA 2000. This may also be treated as one of the first Case Laws that become relevant for future discussions on Cyber Crime liability. Report in BS
Experts Allege Cyber War preparation by China
The computer security firm McAfee has compiled a report with input from Nato, the FBI, and the Serious Organised Crime Agency, that according to Nato insiders, the wave of cyber attacks that hit Estonia earlier this year, disrupting government, news and bank servers for weeks, was the tip of the iceberg. According to the report, a "cyber cold war" is developing as international web espionage and cyber-attacks become the biggest threats to internet security.
Targets include air traffic control, financial markets, government computer networks and utility providers. In September, the Guardian reported that Chinese hackers, including some believed to be from the state military, had been attacking the computer networks of British government departments, including the Foreign Office. China has spelled out in a white paper that "informationised armed forces" are part of its military strategy... Report in Guardian
PR Syndicate honours 'Cyber Law Guru of India', Na.Vijayashankar
PR Syndicate, (an organization of Corporate PR Professionals in Chennai,) celebrated its First Anniversary on 20th January 2007 at Russian Cultural Centre. On the occassion, "Award of Excellence in Public Life" was presented to 'Cyber Law Guru of India' Na.Vijayashankar...More
Naavi's latest book "Cyber Laws Demystified" was soft launched at the Nimhans Convention Center during the Indian Police Congress. The book is a comprehensive coverage on Cyber Laws both ITA-2000 as well as IPR and other issues.
Structured into 24 chapters it also covers the proposed amendments to ITA-2000 in detail as an appendix. A copy of the Information Technology Act 2000 is also appended to the book.
The book also has several individual chapters on the legal issues of Cyber Banking, Cyber Advertising, Cyber Taxation and Cyber Terrorism.
The book is priced at Rs 750/-.
For Enquiries and Bulk orders click here. :
What is Naavi.org?
Naavi.org is India's premier portal on Cyber Law. It is not only an information portal containing information on several aspects concerning Information Technology Law in India but also represents the focal point of several services around Cyber Law carried on by Naavi.
The first such service is the Cyber Law College a virtual Cyber Law education center in India which provides various courses on Cyber Law.
The second key service is the Cyber Evidence Archival center which provides a key service to help administration of justice in Cyber Crime cases.
The third key service is the domain name look-alikes dispute resolution service which provides a unique solution for websites with similar looking domain names to co exist.
The fourth key service is the online mediation and arbitration service another unique global service.
The fifth key service is the CyLawCom service which represents the Cyber Law Compliance related education, audit and implementation assistance service.
Additionally, Naavi.org is in the process of development of four sub organizations namely the Digital Society Foundation, Naavi.net, International Cyber Law Research Center and Cyber Crime Complaints and Resolution Assistance Center. Digital Society Foundation is a Trust formed with the objective of representing the voice of Netizens in various fora and work like an NGO to protect their interests. Naavi.net is meant to develop a collaborative distributed network of LPO consultants. International Cyber Law Research Center would support research in Cyber Laws and Cyber Crime Complaints and Resolution Assistance Center would try to provide some support to victims of Cyber Crimes.
Together, Naavi.org represents a "Cyber Law Vision" that goes beyond being a mere portal. Started in 1997, when the concept of Cyber Law was new across the globe, consistent efforts over the last decade has brought Naavi.org to the beginning of "Phase 2" in which the services are ready to reach out to a larger section. This is recognized as the phase of collaborations and growth by association. Naavi.org will therefore be entering into a series of associations to develop each dimension of its vision with an appropriate partner. Individuals, Organizations and Commercial houses which have synergistic relationship with the activities of Naavi.org are welcome to join hands in commercial and non commercial projects of Naavi.org.
Naavi
Naavi