Govt proposes phone makers to give source code, firms push back, Pg3

Key Highlights:

• India proposes new security measures requiring smartphone makers to share source code and make software changes.
• The proposal includes 83 security standards, such as alerting the government to major software updates.
• Tech companies like Apple and Samsung are opposing the measures, citing a lack of global precedent.
• The plan aims to boost user data security amid rising online fraud in India's large smartphone market of nearly 750 million users.

Detailed Insights:

• The Indian government's proposal includes requirements for pre-installed apps to be uninstalled and blocking apps from using cameras and microphones in the background.
• Tech companies argue that sharing source code risks revealing proprietary details and that no other country mandates such security requirements.
• The Indian Telecom Security Assurance Requirements would involve analysis and testing of source code at designated Indian labs.
• MAIT (Manufacturers’ Association for Information Technology) has requested the ministry to drop the proposal, citing concerns about battery drain from malware scanning and impracticality of seeking government approval for software updates.
• The government previously revoked an order mandating a state-run cyber safety app due to surveillance concerns, but has also required rigorous testing for security cameras over fears of Chinese spying.
• The proposal also mandates storing phone logs for at least 12 months on the device, which MAIT argues is not feasible due to limited storage space.

Key Concepts Involved:

• Source Code: The fundamental programming instructions that make software and devices function.
• Malware: Software designed to intentionally cause damage to a computer, server, or computer network.
• Proprietary Details: Confidential information or trade secrets owned by a company.