India Demands Source Code from Smartphone Makers, Giants Resist
Overview
India proposes stringent security standards for smartphone makers, including mandatory source code sharing. Giants like Apple and Samsung oppose the move, citing proprietary risks and lack of global precedent, as the government seeks to curb rising online fraud in its vast smartphone market.
Source Code Mandate Sparks Industry Pushback
India's government is pushing for a significant overhaul of smartphone security, proposing new standards that could force manufacturers to share source code and make critical software adjustments. This initiative aims to combat a surge in online fraud and data breaches affecting nearly 750 million mobile users across the country.
At the heart of the proposal lies a contentious requirement for smartphone makers to grant the government access to their source code. This underlying programming is typically guarded as proprietary information. Tech giants, including Apple Inc. and Samsung Electronics, are reportedly voicing strong opposition, arguing that such a mandate lacks global precedent and risks exposing sensitive intellectual property.
Broader Security Requirements Proposed
Beyond source code access, the proposed Indian Telecom Security Assurance Requirements include other stringent measures. Manufacturers would need to allow pre-installed apps to be uninstalled and prevent apps from secretly accessing device cameras and microphones. These steps are intended to prevent malicious usage and enhance user data protection.
Government Aims to Curb Digital Fraud
The push for enhanced security aligns with Prime Minister Narendra Modi's efforts to secure digital transactions and user data. With the smartphone market being one of the world's largest, the government sees a critical need to address vulnerabilities exploited by cybercriminals.
Industry Cites Global Precedent Concerns
Industry groups, such as MAIT (an association representing major tech firms), have stated that source code review is not feasible due to secrecy and privacy issues. They argue that major markets like the European Union, North America, and Australia do not impose such requirements. Discussions between the IT ministry and tech executives are ongoing.
