Anees CK

Programmer. CyberSec. മലയാളി.

[Anees CK @ckmanees]

ഇത് സൈബർ യുഗം ആണ്. ലോകം മൊത്തം ഒരു സ്ക്രീനിൽ കാണാവുന്ന കാലം. ടെക്നോളജി വികസിക്കുന്നതിനൊപ്പം അത് ഉയർത്തുന്ന ഭീഷണികളും പതിന്മടങ്ങ് കൂടിയിട്ടുണ്ട്. നമ്മുടെ കേരളത്തിലും കുറെ Incidents ഉണ്ടായി. കുറച്ച് കാര്യങ്ങൾ ശ്രദ്ധിച്ചാൽ നമുക്ക് ഇത്തരം അറ്റാക്കുകളിൽ നിന്ന് രക്ഷ നേടാം.

[Anees CK @ckmanees]

@kollamboyi @varath_an So you're saying that GoI plans to change that? Now non citizens will also able to hold Indian passport?

[Anees CK @ckmanees]

@kollamboyi @varath_an "Sports Passport" is not passport. Only Indian citizens can hold a passport according to the law. അപ്പോ പിന്നെ ഈ സ്റ്റേറ്റ്മെൻ്റിൻ്റെ കാര്യം എന്താണ്? "Sports Passport is not a proof of citizenship" എന്നല്ലല്ലോ സ്റ്റേറ്റ്മെൻ്റ് 🤔

[Anees CK @ckmanees]

@kollamboyi @varath_an പിന്നെ ഫുട്ബോളും ഇപ്പോഴത്തെ ഈ സ്റ്റേറ്റ്മെൻ്റും തമ്മിൽ ഒരു ബന്ധവും ഞാൻ എവിടെയും കണ്ടില്ല. ഞാൻ കാണാത്ത സോഴ്സ് വല്ലതും ഉണ്ടേൽ ഒന്ന് കാണിച്ച് തന്നാൽ നന്നായിരുന്നു.

[Anees CK @ckmanees]

@kollamboyi @varath_an ഇതൊക്കെ എനിക്കും അറിയാം. പക്ഷെ എനിക്കറിയാത്തത് ഈ OCI കാർഡിൻ്റെ കാര്യത്തിൽ പാസ്പോർട്ട് എങ്ങനെ വന്നു എന്നാണ്. ഇന്ത്യൻ origin football പ്ലേയർസിന് ഇന്ത്യയ്ക്ക് വേണ്ടി കളിക്കാൻ നമ്മൾ അവർക്ക് പാസ്പോർട്ട് ഒന്നും കൊടുക്കുന്നില്ലലോ. OCI card അല്ലെ ഉള്ളൂ.

[Anees CK @ckmanees]

@kollamboyi @varath_an ഈ സ്പോർട്സ് പാസ്പോർട്ട് ഒക്കെ ഇപ്പൊ എവിടെന്ന് വന്നു? ഇങ്ങനെ ഒരു context MEA statement il ഒന്നും ഇല്ലല്ലോ.
https://t.co/ZdQAufAufn

[Anees CK @ckmanees]

@jezwn4 @krishnakantkr25 ഇതു വരെ ആപ്പിൾ തോട്ടത്തിൽ കേറി നോക്കിയിട്ടില്ലാത്തത് കൊണ്ട് അഭിപ്രായം ഇല്ല.

[Anees CK @ckmanees]

@restmassenergy Nokia 3210 4G
https://t.co/ubp7e2jB9M

[Anees CK @ckmanees]

@thispodcastguy You can't read Malayalam, right?
He's saying he won't attend and accept this. I don't understand your reaction.

[Anees CK @ckmanees]

Shameless! An AI generated excuse of a letter copied word by word even without removing the subtitles and a AI generated "source image" (you can see the gemini symbol clearly in the corner). You are the ones who defame the India in public.

[Internet Freedom Foundation (IFF) @internetfreedom]

IFF's Statement on the Sanchar Saathi App Pre-Installation Directive

The Department of Telecommunications (DoT), specifically its AI & Digital Intelligence Unit (AI & DIU) on 21st November, 2024 has under the Telecommunications (Telecom Cyber Security) Rules, 2024 issued a sweeping Direction mandating the pre-installation of the Sanchar Saathi mobile application on all mobile handsets manufactured or imported for use in India. As a preliminary matter the DoT has yet to by itself disclose the full text of the direction. Initial reports by Reuters revealed it's existence and subsequently it's full text was disclosed by Medianama which form the basis of our statement, which will be followed up by RTI, analysis as well as steps, if required to support a challenge to it in a court of law.

The direction by requiring manufacturers and importers of mobile handsets to pre-install the Sanchar Saathi App represents a sharp and deeply worrying expansion of executive control over personal digital devices. The stated objective of curbing IMEI fraud and improving telecom security is, on its face, a legitimate state aim. But the means chosen are disproportionate, legally fragile, and structurally hostile to user privacy and autonomy. Clause 7(b) is the clearest expression of this. It requires that the pre-installed Sanchar Saathi application be “readily visible” and that, “its functionalities are not disabled or restricted.” In plain terms, this converts every smartphone sold in India into a vessel for state mandated software that the user cannot meaningfully refuse, control, or remove. For this to work in practice, the app will almost certainly need system level or root level access, similar to carrier or OEM system apps, so that it cannot be disabled. That design choice erodes the protections that normally prevent one app from peering into the data of others, and turns Sanchar Saathi into a permanent, non-consensual point of access sitting inside the operating system of every Indian smartphone user.

Viewed through the lens of the Supreme Court’s judgment in K.S. Puttaswamy (2017) that reaffirmed the fundamental right to privacy, this structure cannot pass the proportionality test. K.S. Puttaswamy requires that any intrusion into the right to privacy must meet the standards of legality, necessity, and proportionality. Even if we assume legality and necessity for the limited purpose of checking the genuineness of devices, the order clearly stumbles on proportionality. The government’s own ecosystem already offers less intrusive means to verify IMEI numbers and detect fake handsets such as the Sanchar Saathi web portal, SMS-based KYM (Know Your Mobile) services, and USSD codes all allow a user to perform this task without a permanent app baked into the firmware. There is no technical explanation in the order for why a one-time or occasional verification exercise justifies a resident, non-removable application with elevated privileges that lives on the phone for the lifetime of the device. Forcing a permanent app installation for a sporadic verification function is not a marginal overreach; it is a textbook example of disproportionate state action under the Puttaswamy standard.

The problems deepen when we look at the scope and safeguards. The order invokes “telecom cyber security” as a catch all justification, but it does not define the functional perimeter of the app. Clause 5 of the Directions refers to identifying acts that “endanger telecom cyber security,” an expression so vague that it invites function creep as a design feature, not a bug. Today, the app may be framed as a benign IMEI checker. Tomorrow, through a server side update, it could be repurposed for client side scanning for “banned” applications, flag VPN usage, correlate SIM activity, or trawl SMS logs in the name of fraud detection. Nothing in the order constrains these possibilities. In effect, the state is asking every smartphone user in India to accept an open ended, updatable surveillance capability on their primary personal device, and to do so without the basic guardrails that a constitutional democracy should insist on as a matter of course. IFF is deeply concerned with this direction that sets up a precedent to enforce client side scanning on all smartphones in India and calls for its recall.

As a first step we have filed a RTI with the Department of Telecom not only for a copy of this direction/order but also the underlying justification on how and why it was issued. We will fight this direction till it is rescinded.

[Anees CK @ckmanees]

WTF???
A govt sponsored app come pre-installed without option to uninstall or disabling?
That too with camera and full file system access?
No value for privacy in this regime?
@Google @GoogleIndia @Apple Don't do it.
We need the people talk about the real issues like this.

[PIB India @PIB_India]

.@DoT_India issues directions for pre-installation of Sanchar Saathi App in mobile handsets to verify the genuineness of mobile handsets

Pre-installed App must be Visible, Functional, and Enabled for users at first setup

Manufacturers must ensure the App is easily accessible during device setup, with no disabling or restriction of its features

Compliance Report due in 120 Days

Read here: https://t.co/lerjet5Jg6

[Anees CK @ckmanees]

@jod_insane I can only find one possible pakistani account after checking about 20 retweets randomly. This tweet has more than 1500 retweets. Please show at least 1000 Pakistani/Bangladeshi accounts which retweeted this. Or just STFU and accept you got ratioed.

[Anees CK @ckmanees]

@sathyamaanu അത്രക്ക് ഉറപ്പുണ്ടെങ്കിൽ രാജ്യം തന്നെ കാണിച്ചൂടെ. എന്തിന് കഷ്ടപ്പെട്ട് region കാണിക്കുന്നു? അപ്പോൾ എന്തോ ഒളിക്കാനുണ്ട്. 😆

[Anees CK @ckmanees]

@monkeymarxist നേരത്തെ ഒരു വലിയ സൂചന തന്നായിരുന്നു 😂

[Anees CK @ckmanees]

@pattaazhy @minicnair Hence the pipe water connection in 54% homes. Is that so difficult to understand? 🙄

[Anees CK @ckmanees]

@Tovarishch_KL02 @AlimShan_ പുതിയ apps നല്ല casback തരും. ഇതും ഇപ്പൊ കുറഞ്ഞ് തുടങ്ങിയിട്ടുണ്ട്.

[Anees CK @ckmanees]

@Tovarishch_KL02 @AlimShan_ Kiwi, about 4 months. Milestone rewards are pending.

[Anees CK @ckmanees]

@Sai_swaroopa Normally these are pastes in pastebin. But this particular one is 𝗔𝗜 𝗴𝗲𝗻𝗲𝗿𝗮𝘁𝗲𝗱 . People do this for show-off. You can easily detect it by the duplicate buttons in the UI and typos in the email address. Here's the real UI of pastebin if someone wants to check.

[Anees CK @ckmanees]

The level of reading comprehension of these guys 🥴🥴🥴

[Mr Sinha @Mrsinha]

Yeah absolutely....