Is Airtel really injecting code to spy on its customers?
Airtel was accused by Bengaluru-based programmer of “spying” on its subscribers
Hyderabad: A Bengaluru-based programmer has accused Indian telecom giant Airtel of “spying” on its subscribers using 3G. Thejesh GN (@thej on Twitter) posted that the company was “injecting javascript into browsing sessions” over its 3G network to both track user information and to target users with specific advertisements. Others online argued that placing of code on a web page was against the principles of net neutrality as a web page on the Airtel network would be visibly different from a page opened via another internet provider.
Airtell 3G is injecting javascript into your browsing session https://t.co/QHPpSKinve
— Thejesh GN (@thej) June 3, 2015
Airtel in a statement has accepted the existence of the code and said the “solution” was deployed to help “customer experience”. The issue had taken an interesting twist when Thejesh posted screenshots of a cease and desist notice that was issued by Israeli company Flash Networks, which asked him to take down his findings from a web forum. The company has claimed, via its legal team in India, that Thejesh broke the law by publishing proprietary code.
So I got cease and desist letter for exposing JS injection by big a telco for publishing JS code & screenshots. I will probably remove it :(
— Thejesh GN (@thej) June 8, 2015
. @r0h1n not airtel. Its the company that provides the service to airtel & others. Sorry if it was confusing.
— Thejesh GN (@thej) June 8, 2015
According to reports, the Israeli firm is partnering Airtel to make this data-tracking code with another telecom major, Ericsson, as the intermediary. Airtel, in its release, also distanced itself from the notice filed by Flash Networks, against Thejesh. “We are also surprised at the Cease & Desist notice served by Flash Networks to Thejesh GN, and categorically state that we have no relation, whatsoever, with the notice,” the company's statement read. “As a responsible corporate, we have the highest regard for customer privacy and we follow a policy of zero tolerance with regard to the confidentiality of customer data,” the statement added.