Gap between the FOSS approach, infosec research, & how the Indian Govt functions
summary
Government drafts a controversial draft encryption policy withdrawn in 2015–16 and later issues CERT‑In directions (VPN/log‑retention) under the IT Act that force short breach reporting and long data retention, discouraging vulnerability disclosure; researchers report legal threats after finding bugs in Aadhaar and government sites. India’s infosec community earns most income from global bug‑bounty markets — a report finds a majority of global bug‑bounty submissions come from Indians — while the promised national cyber security strategy and systemic disclosure processes remain unpublished.
AI-written summary · about
chapters (22)
- 0:00Introduction
- 0:28Why talk about cyber security
- 2:40The problem
- 5:47VPN directions
- 7:36Indian cyber security community
- 8:11Data Society report
- 8:54Why do people contribute
- 9:41Common approaches
- 10:11Trust but verify
- 10:36Focus on others
- 11:01Systemwide solutions
- 11:55What do governments do
- 12:48Signals on cyber security
- 13:53Role of open conversation
- 15:01Role of information assurance
- 15:24What should happen next
- 16:36Cyber security conversations
- 17:19Cyber security policy in India
- 19:01Is everything secure
- 21:11Active cyber security posture
- 23:42The story matters
- 25:03Wrap up
related talks
25mInterview with Robert Baptiste aka Elliot Alderson [@fs0c131y]
45mLegal & Policy Session
32mIndia’s path to digital independence: AI, Cloud, and Sovereignty
01h 20mClosing the Digital Backdoor Strengthening Vulnerability Management to Combat Spyware
42mUnlocking India’s cyber potential through policy, innovation, and partnerships
37mVibe Check: IDK About This…. Why Students May Shy Away From Cyber in a Surveillance State
58mPanel Discussion - The Risks of Requiring Premature Vulnerability Disclosures
19mGeo-politics, business decisions and your security