Contact Me By Email

Showing posts with label Joe Lieberman. Show all posts
Showing posts with label Joe Lieberman. Show all posts

Friday, February 11, 2011

Egypt Flips Internet Kill Switch. Will the U.S.? | Dan Costa | PCMag.com

Egypt Flips Internet Kill Switch. Will the U.S.? | Dan Costa | PCMag.com

By Dan Costa
What can an undemocratic government to do to control its people? If tear gas and rubber bullets don't work, take away their Twitter and Facebook access, of course. And if the people still don't fall into line, cut off their Internet and mobile phone access entirely. That's exactly what the Egyptian government did today when confronted with citizenry taking to the streets and demanding regime change. The surprising thing isn't that a corrupt, authoritarian regime would launch this kind of state-sponsored denial of service attack on its own citizens. Nor that it is willing to jeopardize its economy by cutting its businesses off from world markets. No, the thing that surprises me is that the U.S. government has plans for its own Internet Kill Switch.

The legislation was first introduced last summer by Sens. Joseph Lieberman (I-Conn.) and Susan Collins (R-Maine), and the former has promised to bring it to the floor again in 2011. It isn't called anything as obvious as the Internet Kill Switch, of course. It is called the "Protecting Cyberspace as a National Asset Act." Who could be against that? Anyone who's watching the news on TV today, that's who.

The proposal calls for the Department of Homeland Security to establish and maintain a list of systems or assets that constitute critical cyber-infrastructure. The President would be able to be able to control those systems. He or she would have ability to turn them off. The kicker: none of this would be subject to judicial review. This is just a proposal, mind you, but it certainly warrants concern. Particularly given the heavy-handed example being provided by Egypt.

Reports of Egypt's grand disconnection came first from James Cowie of Renesys, a New Hampshire-based firm that tracks Internet Traffic. As he watched Egypt drop off the grid, Cowie wrote:

"Every Egyptian provider, every business, bank, Internet cafe, website, school, embassy, and government office that relied on the big four Egyptian ISPs for their Internet connectivity is now cut off from the rest of the world."
Keeping citizens off the Internet is becoming standard operating procedure during civil unrest. The Iranian government slowed Internet access to a crawl during last year's civil unrest, but the country online. Myanmar has a little more success blocking its citizens. Egypt's move, however, is unprecedented in its scope.

Only about 25% of the Egyptian population has Internet access, but that still works out to 20.1 million users. There are about 55.3 million cell phones, and most of them are dark too, right? Not quite. At this moment the streets are still filled with protesters carrying those disconnected phones—and cameras, and camcorders. With or without Internet access, those protesters are recording both the protests and the government's response. Shutting down Internet access may slow the rate at which those images get out, but it will happen eventually. And by eventually, I mean hours, not days.

Even if the government manages to keep their incipient rebellion off Twitter and Facebook, everything they're doing is bound to leak out sooner or later anyhow. And the denial of service doesn't seem to be hurting the protestors' ability to organize. Once something becomes a trending topic, cutting off Twitter is like closing a barn door after the horses have fled. Egypt's heavy handed actions show how little the country's government understands the Internet. If anything, all they're accomplishing is enraging the protesters even more by proving just how thuggish they can be.

The United States would do well to learn the lesson that Egypt has not. Because, really, the case is all the more complicated here. There are only four major service providers in Egypt: Telecom Egypt, Raya, Link Egypt, Etisalat Misr, and Internet Egypt. Last night, all four took their networks—and the IP addresses of every man, woman, and business in Egypt—offline. This presumably happened at the government's request, though it's worth noting that they haven't admitted anything. (Their email is probably down.)

The U.S. telecommunication industry is much more complex and far more decentralized. To do something similar in the U.S. would require a lot more than four phone calls. There are simply too many connections inside the nation already for them to be silenced. Also, since our economy is more dependent on the Internet obstructing the free flow of information would be disastrous. Still, the push for a U.S. Internet Kill Switch is here, but no one understands the consequences.

The fact is, no one in the U.S. should ever have the right or the ability to take the Internet offline. As an editor of a purely online publication (we made the switch from print a few years ago), it's very clear to me that freedom of the press relies more than ever on the Internet. No one in the U.S.—or anywhere—should have the right to shut it down.

As Cowie put it in his post:

"What happens when you disconnect a modern economy and 80,000,000 people from the Internet? What will happen tomorrow, on the streets and in the credit markets? This has never happened before, and the unknowns are piling up."
Egypt is going to find out what happens the hard way. Let's hope the U.S. never has to.

Friday, December 03, 2010

WikiLeaks Rebounds as New Hosting Provider Seeks Protection - PCWorld

WikiLeaks Rebounds as New Hosting Provider Seeks Protection - PCWorld

WikiLeaks appears to be quickly taking steps to reduce its reliance on Internet infrastructure in the U.S. as it battles to keep secret diplomatic cables online while its new French hosting provider is seeking court protection.

Early on Friday, WikiLeaks began using a new domain name, WikiLeaks.ch, which is owned by The Pirate Party Switzerland, a group that is apparently sympathetic to the controversial website.

Since it began posting classified U.S. diplomatic cables, WikiLeaks has come under consistent denial-of-service attacks that have aimed to shut down the release of the documents.

It has also faced problems with its hosting providers. The site briefly used Amazon.com's hosted Web Services, which caused U.S. Senator Joe Lieberman, a Connecticut Independent, to criticize the company. Amazon cut WikiLeaks, denying that it did so under political pressure and saying instead that the site violates its terms of service. After Amazon, Bahnhof Internet AB in Uppsala, Sweden, hosted WikiLeaks.

Amid the hosting problems, WikiLeaks was abandoned by its DNS (Domain Name System) provider on Thursday due to sustained attacks. One of its domain names, WikiLeaks.org, no longer works after a subsidiary of Dynamic Network Services called EveryDNS.net terminated that DNS.

EveryDNS.net said the attacks were threatening the reliability of its infrastructure, which is used for 500,000 other websites.

But WikiLeaks is remaining on the run in what appears to be a fast-moving, constantly shifting effort to keep online.

As of Friday, WikiLeaks.ch resolved to an IP (Internet protocol) address, (http://88.80.13.160) that then redirects to an IP address in France, (http://213.251.145.96), said Paul Mutton, a security analyst with Netcraft.

The latter address is allocated to the French hosting provider OVH. The company has delegated a block of 16 IP addresses to WikiLeaks, "which suggests more than a temporary relationship between the two organisations," Mutton wrote on Netcraft's blog.

OVH's CEO, Octave Klaba, wrote on Friday in an e-mail to the company's customers that WikiLeaks has been hosted on its infrastructure since early Thursday. A person ordered a dedicated server and "protection against attack," paying less than €150 (US$198) on a credit card, Klaba wrote.

The order was made through OVH's automated systems. The company found out that WikiLeaks was hosted on its infrastructure on Thursday "from the press," Klaba wrote. OVH is neither for or against WikiLeaks, he wrote, and will fulfill its contract with the customer.

"He is hosting WikiLeaks," Klaba wrote. "Legally speaking, OVH is not the host of this site. OVH is simply the provider of the service the customer ordered. In short, the story is banal."

Nonetheless, Klaba complained about political pressure to shut the site down, and has asked the courts for an urgent declaratory ruling on its legality. The ruling should be released Friday or Saturday, he wrote. France's Minister of Industry Eric Besson has reportedly asked advisers to find a way to have the site removed from French territory.

In an interview, Mutton said that having 16 IP addresses on OVH's network would make WikiLeaks more resilient to an attack, as WikiLeaks can change which of those IP addresses WikiLeaks.ch redirects to.

"It gives them flexibility to hop around IP addresses instantly," Mutton said.

WikiLeaks is also using a nameserver called "ns.WikiLeaks.ch." But despite EveryDNS.net's actions on Friday, it appears the nameserver is using services from that company.

"I think it's curious that they have chosen to use EveryDNS again, given that EveryDNS terminated DNS services for their other domain, WikiLeaks.org, earlier this morning," Mutton said.

Nonetheless, the changes make it appear that WikiLeaks want to ensure their infrastructure is not reliant on servers in the U.S. or on services provided by U.S. companies, Mutton said.

"WikiLeaks.ch will be hard for the U.S. government to influence," Mutton said.
Enhanced by Zemanta

WikiLeaks fights to stay online after US company withdraws domain name | Media | guardian.co.uk

WikiLeaks fights to stay online after US company withdraws domain name | Media | guardian.co.uk

Everydns.net says attack against leaks site endangered other customers' service – effectively pushing site off the web

The US was today accused of opening up a dramatic new front against WikiLeaks, effectively "killing" its web address just days after Amazon pulled the site from its servers following political pressure.

The whistleblowers' website went offline for the third time in a week this morning, in the biggest threat to its online presence yet.

Joe Lieberman, chairman of the Senate's committee on homeland security, earlier this week called for any organisation helping sustain WikiLeaks to "immediately terminate" its relationship with them.

On Friday morning, WikiLeaks and the cache of secret diplomatic documents that have proved to be a scourge for governments around the world were only accessible through a string of digits known as a DNS address. The site later re-emerged with a Swiss domain, WikiLeaks.ch.

Julian Assange this morning said the development is an example of the "privatisation of state censorship" in the US and is a "serious problem."

"These attacks will not stop our mission, but should be setting off alarm bells about the rule of law in the United States," he warned.

The California-based internet hosting provider that dropped WikiLeaks at 3am GMT on Friday (10PM EST Thursday), Everydns, says it did so to prevent its other 500,000 customers of being affected by the intense cyber attacks targeted at WikiLeaks.

The site this morning said it had "move[d] to Switzerland", announcing a new domain name – wikileaks.ch, with the Swiss suffix. However, the new address still only points to an IP address, suggesting WikiLeaks has been unable to quickly find a new hosting provider.

The Wikileaks.ch domain name, which only surfaced on Friday morning, is being served by the Swiss Pirate Party. And the routing to it is still being done by everydns.

Late yesterday evening Tableau Software, a company which published data visualisations, pulled one of its images picturing the WikiLeaks diplomatic cables at the request of Senator Lieberman. Writing on the company's blog, Elissa Fink said: "Our decision to remove the data from our servers came in response to a public request by Senator Joe Lieberman, who chairs the Senate Homeland Security Committee, when he called for organisations hosting WikiLeaks to terminate their relationship with the website."

Mark Stephens, the London-based lawyer acting on behalf of Assange, wrote on Twitter after the shutdown: "Pressure appears to have been applied to close the WikiLeaks domain name."

Andre Rickardsson, an expert on computer security at Sweden's Bitsec Consulting, told Reuters: "I don't believe for a second that this has been done by everydns themselves. I think they've been under pressure," he said, apparently referring to US authorities.

A new Germany-based WikiLeaks domain – wikileaks.dd19.de – also appeared on Friday morning, with its data apparently hosted in California. People have also taken to setting up alternative domain names that point to the WikiLeaks address. Robin Fenwick, a UK-based web services director, this morning launched Wikileeks.org.uk – a "joke domain" that points to the WikiLeaks DNS address.

In a statement on its website, the free everydns.net service said that the "distributed denial of service" (DDOS) attacks by unknown hackers – who are trying to knock WikiLeaks off the net – meant that the leaks site was interfering with the service being provided to other users. That in turn meant that WikiLeaks had broken everydns.net's terms of service, and it cut the site off at 3am GMT on Friday (10PM EST Thursday).

DNS services translate a website name, such as guardian.co.uk, into machine-readable "IP quads" – in that case 77.91.249.30, so that http://77.91.249.30 will show the Guardian site. If the DNS fails, the site is only reachable via IP address – but WikiLeaks has not yet provided one via Twitter or other means.

Everydns.net said that the attacks – which have been going on all week, and led the site to temporarily host its services on Amazon's more resilient EC2 "cloud computing" service – "threaten the stability of the EveryDNS.net infrastructure, which enables access to almost 500,000 other websites".

WikiLeaks was given 24 hours' notice of the termination, and everydns said: "Any downtime of the wikileaks.org website has resulted from its failure to use another hosted DNS service provider."

The move comes after several days of WikiLeaks coming under a determined DDOS attack, apparently from hackers friendly to the point of view of the US government, which has disparaged the site's leaking of thousands of US diplomatic cables.

US companies have also come under intense political pressure to remove any connection to, or support for, WikiLeaks. Amazon ended its hosting of the cables on its EC2 cloud computer service earlier this week, but last night insisted in a blogpost that its decision was not due to pressure from Senator Joe Lieberman, who has called for the removal of the data – and who has influenced at least one other US company to withdraw support for WikiLeaks data.

In a blogpost late on Thursday, Amazon said reports that government inquiries prompted it to remove the data were "inaccurate".

Amazon said:

"[Amazon Web Services] does not pre-screen its customers, but it does have terms of service that must be followed. WikiLeaks was not following them. There were several parts they were violating. For example, our terms of service state that "you represent and warrant that you own or otherwise control all of the rights to the content… that use of the content you supply does not violate this policy and will not cause injury to any person or entity". It's clear that WikiLeaks doesn't own or otherwise control all the rights to this classified content. Further, it is not credible that the extraordinary volume of 250,000 classified documents that WikiLeaks is publishing could have been carefully redacted in such a way as to ensure that they weren't putting innocent people in jeopardy."

It noted that:

"When companies or people go about securing and storing large quantities of data that isn't rightfully theirs, and publishing this data without ensuring it won't injure others, it's a violation of our terms of service, and folks need to go operate elsewhere."

But as commentators have pointed out, that stance is contradicted by the fact that Amazon has previously hosted the "war logs" from WikiLeaks which contained data about the US wars in Afghanistan and Iraq.

Connecting to WikiLeaks is presently not possible until it gets a new DNS service. WikiLeaks itself said on Twitter that the ending of DNS services was allegedly due to "claimed mass attacks" and called for further donations to "keep us strong".
Enhanced by Zemanta