#EveningReads
If you’ve been surfing on @Twitter in the past 24 hrs, you know that it has been quite a day for @Meta. From takedowns of @\cringearchivist content, Meta’s controversial XCheck programme, to “censor privileges” for BJP’s Amit Malviya, we cover it all in this 🧵.1/10
Let’s recap:
Instagram took down a video minutes after it was posted by the account, 'Superhumans of Cringetopia'. The grounds?: It violated Instagram's nudity & sexual content' guidelines.
.@thewire_in later learnt, “from a well-placed source at Meta” that it was taken down only because it was reported by @amitmalviya, who also happens to be the president of the BJP's IT Cell.
Per the internal Instagram report accessed by The Wire, any post reported by Malviya, doesn't require auto-moderation/ review due to XCheck privileges, & is thus immediately taken down. All (705) posts reported by him have been removed.4/10
Meta's controversial 'XCheck' program exempts an identified set of high-profile users from enforcement action.
5/10
The Wire reports that this program not only allows certain influential people to post “rule-violating” content, but also restricts the rights of other users, by allowing their posts to be taken down even without justifiable cause. This new revelation is a cause of concern. 6/10
Hold on to your seats, it gets better (well, worse for Meta)!
An internal email sent by Meta’s policy communications director @andymstone was leaked & its screenshot published by The Wire today. He asks, "how the hell (the doc) got leaked?".
Moreover, Stone is seen asking for the document’s “activity report” for the past month. He also instructed his team to put the author of the initial article, @jahnavi_sen, & the Founding Editor, @svaradarajan, on their “watchlist”. 8/10
The tone in the mail is in stark contrast to Stone’s public response on Twitter where he refutes the allegations made against XCheck. He even claimed that the underlying document accessed by The Wire is “fabricated”.
The story doesn’t end here, and neither does the list of revelations made in the latest article by The Wire. What is apparent & urgent is the need for transparency & accountability with respect to the platform’s content moderation practises. 10/10
A report by @viceroyresearch alleges that @Truecaller (“TC”) isn’t as “privacy-focused” as it claims to be. It accuses TC of, among other things, collecting user data without obtaining their explicit consent. 1/8
TC seeks permission to access our contact list when we download it. This entire list of contacts, which could include you, is then put in an address book available to others. Thus, even if you haven’t downloaded TC, your data could still end up on their database. 2/8
The privacy implications for people who end up in TC’s database was highlighted by @privacyint back in 2019. The case study also revealed that TC places liability on the non-user, by offering them the option to “unlist” themselves from the database. 3/8
We promised you a quick explainer on the Draft Indian Telecommunication Bill, 2022 yesterday & we’re here to deliver! It represents a missed opportunity for legislative reform to bring the Indian telecom sector into the 21st century. 1/5
Now every telecom service, including OTT communication services, will have to obtain a licence from the Central Govt. This includes WhatsApp, Signal, Jitsi, G-Meet etc.! A win for large telecom companies, a huge loss for user rights. 2/5
Clause 24(2)(a) expands the surveillance powers under the Indian Telegraph Act, 1885 (which authorised interception of messages transmitted through telegraphs) by extending it to “telecommunication services or network”, threatening End-to-End encryption. 3/5
Q: When did you last download an app with any idea of its impact on your privacy? (no cheating)
If you aren’t worried, you should be. Downloading apps can be like opening a can of worms
It’s important to know where you’ve downloaded an app from. While the Google & Apple app stores have standards & regulations in place to ensure safety to an extent, 3rd party app stores may not & thus need greater scrutiny. 2/9
2️⃣ ❌No data without permission❌
Apps require permissions to collect data from your phone. While some data is necessary for its functionality, always check what permissions an app is seeking to avoid overbroad collection of data. 3/9
The House Committee, constituted by the Andhra Pradesh (AP) State Assembly, formed to probe if the Telugu Desam Party (@JaiTDP) govt. used Pegasus, submitted its report yesterday. However, the report makes no reference to the spyware. 1/6
Per the Committee on ‘Unlawful Interception of Communications, Data Theft & Illegal Transmission, causing infringement of citizens rights during 2016-2019’, a large volume of data was transmitted from 18 State Data Centres (SDC) servers to external & unknown servers. 2/6
Head of the committee, MLA Bhumana Karunkar Reddy, said that there was no permissible presence or reason for such “unauthorised & improper transmission of large amounts of sensitive data”, shared between Nov 30, 2018 & Mar 31, 2019, from SDC servers to external IP addresses. 3/6
During #HarGharTiranga, 5 Cr. Indians geotagged their homes & shared phone numbers. 6 Cr. uploaded their photos.
The campaign is over, but what will happen to the data?
Read about (surprise!) the lack of data protection & our demand for deletion 👇1/7 internetfreedom.in/har-ghar-priva…
After writing to the @MinOfCultureGoI on Aug 12, we sent a follow up letter on Sep 21, urging them to delete all data. We've also filed an RTI application asking whether the data has been deleted. 2/7
While the policy mentions that data will be deleted following the campaign, it continues to be available on the website. If the data hasn’t been deleted, it's a violation of the privacy policy. But it’s also concerning *because* of the privacy policy. 3/7
STATEMENT: The Criminal Procedure (Identification) Rules, 2022 have been notified.
They provide the procedure by which CPIA, 2022 will be enforced & have not provided sufficient safeguards to mitigate the risks and harms to the right to privacy caused by the CPIA (1/11)
As a recap - CPIA, 2022 considerably expanded:
👉The kind of data which could be collected (even blood samples!)
👉The people from whom it could be collected (anyone arrested under any law)
👉The period for which it would be stored (upto 75 years!) (2/11)
Rule 3 has limited the persons from whom measurements can be collected, but only to the extent that electoral offences and contempt-related offences require a Superintendent of Police’s approval for collecting measurement. (3/11)