CERT-In responded to our representation on the Responsible Vulnerability Disclosure and Coordination Policy and clarified that the Policy is following the existing provisions of the law. Therefore, now we ask MeitY to amend the law to provide a safe harbour for security researchers.
MEITY has published Frequently Asked Questions to ‘bring clarity’ to IT Rules, 21. We separate the Facts from the Claims made in the FAQ document.
In light of the recent facebook disclosures, we wrote to MEITY about any forthcoming updates to the Information Technology Act, 2000. We pointed out several inadequacies and lacunae in the Act, and asked the Ministry to publish a full consultation timeline over any proposed amendments.
Twitter unilaterally and arbitrarily suspended the account of Sushant Singh (@sushant_says) twice, i.e. on February 1 and May 26, 2021. We helped him file RTI requests with the Meity, DoT and MHA. Meity invoked the 2009 Blocking Rules and the RTI Act to deny information to Mr. Singh.
Rupesh Kumar Singh and Ipsa Shatakshi, activists reporting on issues related to Adivasi people in Jharkhand, approached the SC asking to declare that the use of a spyware such as Pegasus is unconstitutional. IFF has provided legal assistance.