Oh no, you're thinking, yet another cookie pop-up. Well, sorry, it's the law. We measure how many people read us, and ensure you see relevant ads, by storing cookies on your device. If you're cool with that, hit “Accept all Cookies”. For more info and to customise your settings, hit “Customise Settings”.

Review and manage your consent

Here's an overview of our use of cookies, similar technologies and how to manage them. You can also change your choices at any time, by hitting the “Your Consent Options” link on the site's footer.

Manage Cookie Preferences
  • These cookies are strictly necessary so that you can navigate the site as normal and use all features. Without these cookies we cannot provide you with the service that you expect.

  • These cookies are used to make advertising messages more relevant to you. They perform functions like preventing the same ad from continuously reappearing, ensuring that ads are properly displayed for advertisers, and in some cases selecting advertisements that are based on your interests.

  • These cookies collect information in aggregate form to help us understand how our websites are being used. They allow us to count visits and traffic sources so that we can measure and improve the performance of our sites. If people say no to these cookies, we do not know how many people have visited and we cannot monitor performance.

See also our Cookie policy and Privacy policy.

Mozilla cautions India's national open digital plan is 'open-washing'

Internet Society also weighs in with worries about vague definition of 'open'


Mozilla has cautioned that the Indian government's plan to develop a national GovTech framework risks "open-washing".

The National Open Digital Ecosystem (NODE) plan was launched in March 2020 and proposed a set of open standards that the government hopes will "inspire and guide innovators within the government and in the private sector, to come together to radically improve the lives of citizens, and that position India as a trailblazer in 'GovTech' thinking on a global stage."

India's Ministry of Electronics and Information Technology (Meity) released a white paper describing the framework and called for comments on its ideas.

Mozilla put up its hand to comment and the organisation's response [PDF] welcomed the move to implement an open framework, but said that the government's proposal "leaves much to be elucidated on both the need and manner of implementation of such ecosystems before a national strategy can be finalised."

The organisation also warned that the Indian government's proposal leaves the door open for 'open-washing'. "The white paper leaves the definition of 'open' vague and at at the complete discretion of individual implementers," the organisation wrote.

"Consequently, implementers are not required to adhere to any minimum baseline of 'open.' This risks empowering private parties to develop closed ecosystems that are only open in appearance while being closed in practice."

Aarogya Setu privacy

India said its coronavirus contact-tracing app is perfect... adds bug bounty and open-sources it anyway

READ MORE

Mozilla recommends that Meity establish "a clear minimum baselines for 'openness', guided by internationally accepted best practices and the Indian government's own policies. "Projects should be called 'open' only if they satisfy this baseline," Mozilla recommends.

It also recommends that the strategy "explicitly recommend that strong data protection law with an independent data protection authority be enacted before any NODE project is implemented" and that all outreach be transparent, accountable, and inclusive.

The Internet Society's Delhi Chapter echoed Mozilla's warnings, calling for "more details on the implementation strategy of the NODE, such as level of standardisation across nodes, ensuring security, the scope of public-private partnership, ownership rights, standards and levels of access and data sharing".

The foundation recommended that the framework follow "globally accepted definitions of Free and Open Source Software and refrain from coming up with confusing terminology". It added that all data collected and used under the framework should be "in line with the proposed legislation on Personal Data Protection" and that it would be better "to wait for the law to be enacted before going ahead with the development of NODEs."

NASSCOM, the Indian IT industry's lobby group, said that although the platforms should be open sourced, the components or software used to build them need not be. "We recommend that open source should be preferred, but not mandated [because it] will prevent the problem of vendor lock-in," it said. ®

Similar topics

Broader topics


Other stories you might like

  • Micron dangles predictable memory price agreements in front of vendors
    The idea? To get investors muttering: DRAM, those gross margins are stable...

    Memory and storage maker Micron Technology has revealed a new business model intended to address the volatility in the memory market that has resulted in sharp swings in pricing over the past several years.

    Revealed at Micron's Investor Day 2022 event, the new forward pricing agreements enable a Micron customer to sign a multi-year deal that guarantees them a supply of memory at a predictable price that follows the cost reduction that the chipmaker sees during the lifecycle of a particular product.

    Micron's chief business officer Sumit Sadana told Investor Day attendees that the chipmaker has already signed up an unnamed volume customer to one of the new agreements, which the company is currently trying out to see whether it delivers on the expected benefits.

    Continue reading
  • Most organizations hit by ransomware would pay up if hit again
    Nine out of ten organizations would do it all over again, keeping attackers in business

    Almost nine in 10 organizations that have suffered a ransomware attack would choose to pay the ransom if hit again, according to a new report, compared with two-thirds of those that have not experienced an attack.

    The findings come from a report titled "How business executives perceive ransomware threat" by security company Kaspersky, which states that ransomware has become an ever-present threat, with 64 percent of companies surveyed already having suffered an attack, but more worryingly, that executives seem to believe that paying the ransom is a reliable way of addressing the issue.

    The report, available here, is based on research involving 900 respondents across North America, South America, Africa, Russia, Europe, and Asia-Pacific. The respondents were in senior non-IT management roles at companies between 50 and 1,000 employees.

    Continue reading
  • 'Peacetime in cyberspace is a chaotic environment' says senior US advisor
    The internet is now the first battleground of any new war – before the shooting starts

    Black Hat Asia Cyber war has become an emerged aspect of broader armed conflicts, commencing before the first shot is fired, cybersecurity expert Kenneth Geers told the audience at the Black Hat Asia conference on Friday.

    "Peacetime in cyberspace is a chaotic environment," said Geers, who has served as a visiting professor at Kiev National Taras Shevchenko University, represented the US government at NATO, and held senior roles at the National Security Agency. "A lot of hacking has to be done in peacetime."

    Geers said the Russia-Ukraine war demonstrates how electronic and kinetic conflicts interact. Ahead of the Ukraine invasion, Russia severed network cables, commandeered satellites, whitewashed Wikipedia, and targeted military ops via mobile phone geolocations.

    Continue reading
  • Windows Subsystem for Linux gets bleeding-edge Ubuntu
    'This is not recommended for production development. It may be unstable and it will have bugs'

    Canonical has begun slinging daily builds of Ubuntu at Windows Subsystem for Linux. We took a look at the not-for-production code.

    Ubuntu has long been friends with the Windows Subsystem for Linux. If you pop wsl --install onto a virgin Windows 11 PC, the odds are it will be Canonical's Linux distribution that is installed by default.

    There are plenty of other options available – OpenSUSE and Debian spring effortlessly to mind, and we recently noted the arrival of AlmaLinux for RHEL refuseniks, but all require specifying manually.

    Continue reading
  • Iran-linked Cobalt Mirage extracts money, info from US orgs – report
    Khamenei, can you just not? Not right now, fam

    The Iran-linked Cobalt Mirage crew is running attacks against America for both financial gain and for cyber-espionage purposes, according to Secureworks' threat intelligence team.

    The cybercriminal gang has been around since June 2020, and its most recent activities have been put into two categories. One, using ransomware to extort money, as illustrated by a strike in January against a US philanthropic organization, according to Secureworks' Counter Threat Unit (CTU); and two, gathering intelligence, with a local government network in the United States targeted in March, CTU researchers detailed Thursday.

    "The January and March incidents typify the different styles of attacks conducted by Cobalt Mirage," they wrote. "While the threat actors appear to have had a reasonable level of success gaining initial access to a wide range of targets, their ability to capitalize on that access for financial gain or intelligence collection appears limited. At a minimum, Cobalt Mirage's ability to use publicly available encryption tools for ransomware operations and mass scan-and-exploit activity to compromise organizations creates an ongoing threat."

    Continue reading

Biting the hand that feeds IT © 1998–2022