In Trying To Ban Telegram, Russia Breaks The Internet

from the unintended-consequences dept

Russia's war on encryption and privacy has reached an entirely new level of ridiculous. We've noted for a while how Putin's government has been escalating its war on encrypted services and VPNs in the misguided hope of keeping citizens from dodging government surveillance. But things escalated dramatically when the Russian government demanded that encrypted messaging app Telegram hand over its encryption keys to the FSB. After Telegram refused, a Russian court banned the app entirely last Friday, and the Russian government began trying to actually implement it this week.

It's not going particularly well.

Telegram tried to mitigate the ban by moving some of its essential infrastructure to third-party cloud services. But Russian telecom regulator Roskomnadzor responded by blocking upwards of 16 million IP addresses, many belonging to Amazon Web Services and Google Cloud. Not too surprisingly, the heavy-handed maneuver resulted in connectivity problems across massive swaths of the Russian internet:

Some users say the ban has disrupted the functionality of unrelated online games and services:

And even credit card terminals:

While the Russian government has been portrayed as a technological and hacking mastermind in the wake of its escalating global disinformation and hacking campaign, there's nothing at all competent about this effort. The Russian government is demanding that both Apple and Google pull encrypted messaging apps from their app stores. They've also tried to pressure sideloading websites like APK Mirror into refusing to offer alternative access to the Telegram app. But it's just another game of Whac-a-Mole, with VPN provider NordVPN saying it saw a 150% spike in Russian usage in the wake of the ban.

The Russian government is claiming that its ham-fisted blockade has resulted in a 30% dip in Telegram usage. But Telegram founder Pavel Durov has downplayed the ban's impact on overall "user engagement":

"For the last 24 hours Telegram has been under a ban by internet providers in Russia. The reason is our refusal to provide encryption keys to Russian security agencies. For us, this was an easy decision. We promised our users 100% privacy and would rather cease to exist than violate this promise.

"Despite the ban, we haven’t seen a significant drop in user engagement so far, since Russians tend to bypass the ban with VPNs and proxies. We also have been relying on third-party cloud services to remain partly available for our users there."

Russian state media meanwhile continues to demonize Telegram as a haven for villains, and is directing users to alternatives like TamTam with alleged ties to the Russian government. All told, it's another wonderful illustration of how filtering the internet doesn't work (unless collateral damage and annoyance is your stated goal), and a war on fundamental security and privacy tools only makes everybody less secure. This is not a battle Russia can "win," but it's apparently too far down the rabbit hole of bad ideas to stop now.

Filed Under: banning, encryption, ip addresses, privacy, roskomnadzor, russia, surveillance
Companies: amazon, google, telegram

Russia Threatens To Ban YouTube And Twitter, But Probably Won't Try

from the VPN-crackdown?-what-VPN-crackdown? dept

Last year, the Russian authorities ordered LinkedIn to be blocked in the country, supposedly for failing to store personal data locally. Since other US companies like Google and Facebook had also ignored this data localization requirement, it was curious that only LinkedIn was affected. Now the German news site Deutsche Welle is reporting that Twitter and YouTube risk being locked out of Russia, but for quite different reasons. These involve Mikhail Khodorkovsky, once the wealthiest person in Russia, and a long-time vocal opponent of President Putin. Khodorkovsky spent a number of years in prison, allegedly for fraud and embezzlement. He now lives outside Russia, and has set up the NGO Open Russia, which promotes democracy and human rights in Russia.

Open Russia was put on the official list of "undesirable organizations" in April of this year. The Russian government has shut down Open Russia's web site, and now it is demanding that the NGO's presence on social media be deleted as well. Roskomnadzor, the country's media regulatory agency, gave YouTube and Twitter a deadline to delete Open Russia's accounts on their services, or be blocked entirely. The deadline has now passed, but the accounts are still accessible within Russia. The question is: what happens now?

If Twitter and Google continue to refuse to delete the accounts, the Russian authorities could try to block them individually. That wouldn't be easy, so the government might simply order the whole of Twitter and YouTube to be blocked. After all, that is what it did with LinkedIn. However, the local experts interviewed by Deutsche Welle point out that LinkedIn was never very popular in Russia, so its loss passed largely unnoticed. Shutting down Twitter and YouTube would be a different matter, and would probably cause widespread online protests -- something the authorities would be keen to avoid.

In any case, users could use proxies, VPNs, and Tor to circumvent such blocks. It's true that Russia has brought in a law that gives the authorities the power to order those kinds of services to block access to particular sites, or be shut down. But the Deutsche Welle post contains the following information about what is actually happening on the ground:

The Russian government has already limited the use of such [circumvention] tools. But [Russian reporter and blogger Alexandr] Plushev pointed out that is just a formality. "They have declared about seven VPNs illegal but there are tens of thousand of them to be found online," he said. "Both the Tor and Opera browsers allow you to get around such blocks."

That's an indication that the latest threats to block Twitter and YouTube may not amount to much in practice, and are designed more as a warning of what the Russian authorities could do at some point, rather than what they will do immediately. The fact that Russia will be holding a presidential election next March, in which Vladimir Putin is standing, and presumably expects to win, may be a factor here.

Follow me @glynmoody on Twitter or identi.ca, and +glynmoody on Google+

Filed Under: bans, mikhail kordorkovsky, roskomnadzor, rozkomnadzor, russia, social media
Companies: twitter, youtube

Russia Threatens To Go To War With Google Over Stupid Comments By Eric Schmidt

from the what-a-mess dept

What a world we live in, where a giant country and a giant company may be about to go to war. At a security conference, Alphabet "executive chairman" Eric Schmidt made some fairly dumb comments saying that the company was looking at downranking sites like RT and Sputnik:

“We’re working on detecting this kind of scenario ... and de-ranking those kinds of sites,” Schmidt said, in response to a question at an event in Halifax, Canada. “It’s basically RT and Sputnik. We’re well aware and we’re trying to engineer the systems to prevent it.”

To be clear: I have no doubt that RT and Sputnik have engaged in attempts to push anti-US propaganda in the US. That seems fairly obvious at this point. My concern is twofold: first of all, saying that "it's basically RT and Sputnik" suggests Schmidt thinks that the issue is just those two sites and merely downranking them will solve problems related to propaganda. That's both wrong and naive. Second, having the executive chair of Google's parent company directly announce that Google is working on ways to downrank two specific sites is bad. Part of Google's longstanding position has always been that they don't interfere to go after specific sites, in part because that creates a massive slippery slope. Of course, Google gave up on part of that position five years ago when it caved in to Hollywood and agreed to start downranking sites based on accusations (not actual convictions) of copyright infringement.

Directly coming out and saying that Google is targeting these two sites -- no matter how bad those sites are -- only reinforces the idea that Google will ideologically rank sites, rather than focus on what was its core mission of helping people find the information they were looking for.

And, of course, there are the wider implications of this -- whereby you now have the head of Russia's media regulator Roskomnadzor, threatening to retaliate should Google actually downrank those sites:

Alexander Zharov, head of media regulator Roskomnadzor, said his agency sent a letter to Google on Tuesday requesting clarification on comments Saturday by Alphabet Executive Chairman Eric Schmidt about how the Russian websites would be treated in search, according to Interfax.

“We will receive an answer and understand what to do next,” Interfax quoted Zharov as saying. “We hope our opinion will be heard, and we won’t have to resort to more serious” retaliatory measures.

Now that's quite an interesting SEO strategy, to have a nuclear power threaten retaliation for dropping in the rankings. Never mind that this is the same Roskomnadzor currently involved in a corruption scandal, and which has been pushing forward on widespread internet censorship without due process.

The whole thing seems like quite a mess -- one that easily could have been avoided if Schmidt hadn't specifically called out those two sites, which, at best, are only a small corner of a larger issue. It would have been fine to suggest that Google was looking to algorithmically do a better job of minimizing false reports or outright propaganda (though, even that might raise serious questions). But to single out two specific sites backed by the Russian government just seems dumb. On the flip side, having Roskomnadzor hit back so strongly also seems fairly short-sighted, as it appears to be the Russian government more or less admitting that it relied on US companies to spread propaganda, and it won't tolerate efforts to diminish the power of its propaganda.

Of course, it does seem worth noting that three years ago, Google shut down its Russian office just as Russia picked up its efforts to censor the internet in that country. So it's not as if Google and the Russian government haven't been at odds before -- but this certainly feels like an escalation.

Filed Under: downranking, eric schmidt, fake news, propagranda, roskomnadzor, rozkomnadzor, russia
Companies: alphabet, google, rt, sputnik

Russian Censor Bans Comodo... Doesn't Realize Its Own Security Certificate Is From Comodo

from the ow!-my-foot!-shot-it-right-off! dept

The Russian government's state censorship organization, Roskomnadzor (technically its telecom regulator) has been especially busy lately as the government has continued to crack down on websites it doesn't like. However, as pointed out by Fight Copyright Trolls, it appears that Roskomnadzor may have gone a bit overboard recently, in response to a court ruling that had a massive list of sites to be banned (over a thousand pages). Apparently, as part of that, various sites associated with Comodo were all banned. That's pretty bad for a variety of reasons, starting with the fact that Comodo remains one of the most popular issuers of secure certificates for HTTPS.

In fact, as many quickly noted, Roskomnadzor's own website happens to be secured with a certificate from... Comodo: It's not entirely clear the impact of this, but the Rublacklist site appears to be implying (via my attempt at understanding Google translate's translation...) that this also means that sites that rely on Roskomnadzor's registry of sites to block... may be blocked from accessing the list. Because its own site is effectively blocked by the list. Oops.

Filed Under: ban list, censorship, https, roskomnadzor, russia, security certificate, ssl
Companies: comodo

MPAA Happily Gets Into Bed With Russian State Censor Agency... To Protect Copyright!

from the the-friends-you-keep dept

Roskomnadzor is the Russian "telecommunications regulator" or "watchdog," but it could just as easily be described as the Russian internet censor, because that appears to be a large part of its role in the country. In the past, we've written about Roskomnadzor blocking all of Wikipedia over a single reference to hashish (really) and also a plan to block all of CloudFlare because the company made it difficult for Russia's internet censorship plans to work. Earlier this month, Roskomnadzor made news for blacklisting a Vice article, claiming that it would encourage shoplifting.

So, who better to support such a censorship regime than... Hollywood! The MPAA has now proudly signed an agreement with Roskomnadzor to cooperate on protecting copyright online. The linked article is unfortunately horribly written. The title implies that the MPAA represents the government of the United States (while sometimes true in practice, that's not how it's supposed to work...) and then provides frightfully few details on what the agreement really is), beyond "protect copyright!"

The memorandum reflects the principles and rules of self-regulation in the interaction of rights holders with internet facilities, essentially protecting copyright on the internet.

That feels like something the reporter pulled straight from a press release and didn't bother to check what it meant. Still, the MPAA getting into bed with the Russian state internet censor should raise some pretty serious questions. The Russian government has, somewhat infamously, been known to use copyright law to intimidate and silence government critics. The government also has used SOPA-like laws to encourage spying on users.

And yet, this is the same MPAA that claims that one of its core principles is preserving free speech. Perhaps they just mean in the US? Those in Russia are on their own, apparently, because the MPAA is on the side of the government censor. Or, perhaps the reality is that the MPAA has no problem with censorship anywhere, so long as it's censorship on behalf of the MPAA.

Filed Under: blocklist, censorship, copyright, roskomnadzor, russia, sopa
Companies: mpaa

Russia Blocks Another Archive Site Because It Might Contain Old Pages About Drugs

from the block-bloc dept

The Russian block party continues. The government agency in charge of censoring the internet is still working its way backwards, hoping to erase the collective memories of the web… or at least, keep Russian citizens from seeing certain bits of the archived past.

Last summer, Russia blocked the Internet Archive's "Wayback Machine," an extremely useful tool that allows users to see historical snapshots of websites. The government may only have intended to block a single page, but because the Internet Archive utilizes HTTPS, the only practical way for ISPs to block the targeted pages was to block it at the domain level.

The same thing is now happening to archive.is, another useful tool that allows users to archive pages they feel might be altered or disappear altogether at some point in the future. (via Google Translate and an anonymous TD reader)

Roskomnadzor introduced archive.is service to Internet resources registry, prohibited by the law of the Russian Federation.

On the site supervisory authority pointed out that archive.is entered in the register by order of the Federal Service for Drug Control 28 January 2016.

Service continues to work as usual, but for many Russian customers of providers it is no longer available.

The problem here is the Russian's take on the War on Drugs. Because it's illegal to discuss drug use/abuse/sales, Roskomnadzor has disappeared another archive that might contain copies of pages it's blocked in the past. That the service would be of use to Russian citizens for non-drug related purposes appears to be of no concern to the Russian government.

And again, it's the use of HTTPS that's resulted in the entire site being blocked. Targeted pages can't be targeted if the connection is encrypted. So, down goes the entire site and, of course, no one in the web censorship body seems to be bothered by the collateral damage.

Filed Under: archives, censorship, drugs, free speech, roskomnadzor, russia, site blocking
Companies: archive.is

Russia Reaches The Censorship Endgame: Banning VPNs, Tor And Web Proxies

from the ghouls,-all-gathered-in-one-place dept

We have been tracking for some time the increasingly repressive measures that the Russian authorities have brought in to censor and control the Internet. Of course, Techdirt readers know that an easy way to circumvent both censorship and control is to use tools like VPNs and Tor. Unfortunately, the Russian authorities also know this, and are now calling for action against them, as TorrentFreak reports:

Speaking at Infoforum-2015, Russian MP Leonid Levin, who is deputy head of the Duma Committee on information politics, indicated that access to anonymization and circumvention tools such as TOR, VPNs and even web proxies, needs to be restricted.

Levin also called for Roskomnadzor, the state agency that oversees communications and the Internet, to be given more powers to intervene. If the views of Vadim Ampelonskogo, Roskomnadzor's chief press officer, are anything to go by, that is likely to have serious consequences for online freedom:

Describing the Tor network as a "den of criminals" and "ghouls, all gathered in one place", Ampelonskogo said Roskomnadzor would find a solution to block anonymous networks if it was supported by a relevant regulatory framework.

What's troubling about this latest call for even tighter control is that it was entirely predictable. Once governments start blocking sites and restricting freedom of speech online, people inevitably respond by using VPNs and Tor to circumvent these measures. And that means that if governments want their laws to be effective, at some point they will take direct action against circumvention tools. That's why it's particularly worrying that Western governments have started down this road: it implies that they, too, might one day try to ban VPNs and Tor.

Follow me @glynmoody on Twitter or identi.ca, and +glynmoody on Google+

Filed Under: censorship. vladimir putin, free speech, leonid levin, proxies, roskomnadzor, russia, tor, vpns