Hacker News new | past | comments | ask | show | jobs | submit login
India IT Ministry orders VPN providers, crypto players to store data for 5 years (entrackr.com)
30 points by zinekeller on May 3, 2022 | hide | past | favorite | 8 comments



Yeah, pardon NY French but fuck you. I am self hosting my "VPN" that I paid for with sinpke crypto. I don't do drugs or cp or other vile stuff, I just don't want wiretap surveillance "just because" and I want to consume content and work in peace. Maybe rant online anonymously once a while. Let's see how much can they pressure a lowendbox provider who I paid $20/year if they could even tie my physical identity to somehow. Even then, I could nuke the vps and be done with it so what's this pathetic nonsense.

BTW, I use zetotier for my work. They don't and CANT keep "logs". Heck its not possible IMO so what's this assbackwards of dickwaving " I am big and hairy and smelly and I demand you comply to my orders". Fuck you.

Who are these "data centers, vps, cloud service providers" who have to comply? Only Indian ones? In mainland India? Indian companies with also foreign servers? Foreign companies with Indian subsidiary? Foreign company with Indian customers?

Pointless means of bureaucracy imposing their will, trying to mould internet according to their whims. Fuck you


> I am self hosting my "VPN

Great. So this doesn't apply to you. You're not a "VPN provider".


So what if I start giving keys to users, aka start selling access? Does that make me a "provider"???

What will they do then? Sue me?


> Does that make me a "provider"???

Sounds like it. You provide VPN access to other people. Sounds an awful lot like "a provider".

> ... aka start selling access? ... Sue me?

No idea what the government is going to do but you will live to find out. I assume you do it as a business, right? Otherwise you have undisclosed income which can be all source of other trouble.


Kind of tangential but this raises the issue that if laws had metrics and criteria for success and utility then silly power grabs like this would tend to sunset even if they did pass reps, executive, and courts.


> Data Centres, Virtual Private Server (VPS) providers, Cloud Service providers and Virtual Private Network Service (VPN Service) providers, shall be required to register the following accurate information which must be maintained by them for a period of 5 years or longer duration as mandated by the law after any cancellation or withdrawal of the registration as the case may be: a. Validated names of subscribers/customers hiring the services b. Period of hire including dates c. IPs allotted to / being used by the members d. Email address and IP address and time stamp used at the time of registration / on-boarding e. Purpose for hiring services f. Validated address and contact numbers g. Ownership pattern of the subscribers / customers hiring services.

From the original directive.


Can a foreign VPN provider refuse to comply? How much jurisdiction do these clowns have?


> Can a foreign VPN provider refuse to comply? How much jurisdiction do these clowns have?

Then you will definitely piss them and block you. It wouldn't be hard for them to block them, especially that they have already blocked a lot more sites (and has proven capabilities for DPI tampering).




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: