Quantcast StorefrontBacktalk » Blog Archive » New Indian Cyberlaw Lets Government Block Web Access
advertisement
advertisement

New Indian Cyberlaw Lets Government Block Web Access

Written by Fred J. Aun
November 3rd, 2009
Like this story? Share it
To share this story with people in your social network, please click on the network icons below.

We had a little fun discussing a recent Chicken Little-ish U.S. Government Accountability Office (GAO) report that discussed the potentially terrible effect a flu pandemic would have on the Web. Even if, as the GAO warned, such a pandemic slowed the Internet to a crawl–thanks to people being forced to stay home from school or work and spending their time surfing the Web (not in bed shivering and sneezing)–there’s little the government could do about it.

But that’s in the U.S. Things are different in India, where a new law gives the government the clout to actually block access to Web sites if doing so would help ensure public order. Whether an inability to shop online can be defined as a form of public disorder is questionable, but there’s no doubt an Internet crippled by bandwidth-hogging flu sufferers could wreak havoc with E-Commerce and dent the economy.

According to the Business-Standard newspaper of India, the new law gives the Indian government the authority to “block public access of any information generated, transmitted, received, stored or hosted in a computer resource,” including, presumably, data kept by retailers. The government’s newfound and far-reaching power is included in a section of the nation’s amended Information Technology Act that took effect Wednesday (Oct. 28).

The government can engage in site access blocking to protect the sovereignty or integrity of India, to foster “friendly relations with foreign states” and to ensure good old “public order,” said the paper.

In a news release, the government said tightening its 9-year-old IT law was necessitated by “a rapid increase in the use of computers and the Internet,” which gave rise to “new forms of crimes like sending offensive E-mails and multimedia messages, child pornography, cyber-terrorism, publishing sexually explicit materials in electronic form, video voyeurism, E-Commerce frauds like cheating by impersonation, etc.” India didn’t mention the flu, swine or otherwise.


advertisement

Leave a Reply

Newsletter

Quickly catch-up on the latest in E-Commerce and Retail Tech with our free weekly newsletter, with urgent bulletins as news merits.
advertisement

Most Recent Comments

Kill All The Passwords

This article does mention, but does not give enough attention to, the fact that the attacks discussed are only feasible when the encrypted password file can be copied and subjected to an offline attack. The trick is to have authentication performed on a separate, much more strongly secured host - such as an Active Directory Domain Controller, or a Kerberos server, or a NIS+ server, or even using something as banal as an LDAP-over-SSL authentication dialog. In these environments, the odds of the "password file" being stolen and subjected to an offline attack go to near zero, and only online attacks may be carried out by the attacker. With sensible exponential backoff between failed password attempts, lockout after a modest number of failed attempts on a single account, and pattern detection, that minimum 7 character password is quite secure enough. Passwords aren't dead yet for security purposes, and they will be with us for a very long while to come for practical purposes. The trick is to employ them correctly. Read more...
The possibilities you describe are years away from being implemented at best, so for the moment passwords are an ugly reality. Luckily, password managers can easily manage hundreds of passwords of any length. The only thing a user needs to remember is the master password. It seems like an easier task to educate users on how to use password managers rather than implement complex security technology on a global basis. Read more...