This Month
June 2009
Sun Mon Tue Wed Thu Fri Sat
1 2 3 4 5 6
7 8 9 10 11 12 13
14 15 16 17 18 19 20
21 22 23 24 25 26 27
28 29 30

Everyone's Guide to By-Passing Internet Censorship

PDF link available here

Access Denied: The Practice and Policy of Global Internet Filtering

by Ronald J. Deibert, John G. Palfrey, Rafal Rohozinski, Jonathan Zittrain (Editors)

Parchment, Printing, and Hypermedia: Communication in World Order Transformation

by Ronald J. Deibert. New York: Columbia University Press, 1997.

View Article  Ottawa needs a strategy for cyberwar - National Post comment
Recently, the Canadian envoy to Iran was called in and admonished by Iranian officials for contributing to the destabilitization of ...   more »
View Article  NPR Here and Now interview
I did an interview with NPR's Here and Now about psiphon and The Use of Proxy Servers in Iran
View Article  Psiphon, Iran, and OpenNet Initiative
There is a lot going on right now on so many exciting fronts. We at the OpenNet Initiative have released three major reports: An Asian regional overview, and country reports on China and Iran. We released these at the ONI Asia regional meeting in Penang Malaysia. Thanks to the ONI team for all of their hard work.

You can read about ONI Asia results here, and the Iran country report here

Second, we have been actively engaged in a campaign to allow Iranians to access the Internet freely via Psiphon, using Twitter and other outreach tools. The Globe and Mail has a report on it, among other media stories.
View Article  ONI Bulletin on China's Green Dam Filtering Software
The OpenNet Initiative has released a bulletin entitled "China's Green Dam: The Implications of Government Control Encroaching on the Home PC." You can read more about it here

Executive Summary

A recent directive by the Chinese government requires the installation of a specific filtering software product, Green Dam, with the publicly stated intent of protecting children from harmful Internet content. The proposed implementation of software as reviewed in this report would in fact have an influence that extends beyond helping parents protect their children from age inappropriate material; the filtering options include blocking of political and religious content normally associated with the Great Firewall of China, China’s sophisticated national-level filtering system. If implemented as proposed, the effect would be to increase the reach of Internet censorship to the edges of the network, adding a new and powerful control mechanism to the existing filtering system.

As a policy decision, mandating the installation of a specific software product is both unprecedented and poorly conceived. In this specific instance, the mistake is compounded by requiring the use of a substandard software product that interferes with the performance of personal computers in an unpredictable way, killing browsers and applications without warning while opening up users to numerous serious security vulnerabilities. The level of parental control over the software is poor such that this software does not well serve parents that wish to the limit exposure of their children to Internet content.

The mandate requiring the installation of a specific product serves no useful purpose apart from extending the reach of government authorities. Given the resulting poor quality of the product, the large negative security and stability effects on the Chinese computing infrastructure and the intense backlash against the product mandate, the mandate may result in less government control.
View Article  Response to Obama's Cybersecurity Plan on NY Times
President Obama announced the US Cybersecurity strategy yesterday, after a lengthy review. The report can be found here. I was asked, along with Bruce Shneier, James Bamford, Gus Hosein, Mykko Hoppenin, and Marjorie Blumenthal, to give feedback for the New York Times forum.
View Article  Hearsay Culture Interview
Dave Levine of Stanford University host's a regular radio show called Hearsay Culture. I was a guest a while back and the show is archived here.
View Article  Summer of Psi
Inspired by Google’s Summer of Code, this year, Psi-Lab - a joint project of the Citizen Lab and Psiphon Inc -- will organize the "Summer of Psi", which aims to establish a rich and highly interactive set of communication and archiving tools and accompanying documentation to enable community participation in Psiphon open source development. Expect to see a newly invigorated forum, documentation, development tasks, and other interactive features earmarked for the open source community. Citizen Lab research associate Jeremy Vernon is driving the summer of psi.

Follow the blog here.
View Article  Psiphon Launch -- Let the revolution begin!
Last night in Toronto, at the new Psiphon digs, we held our public launch of Psiphon Inc -- the first company to be spun out of the Citizen Lab. Although Psiphon is spinning out, its relationship with the Citizen Lab is stronger than ever. We have developed a strategic partnership with Psiphon around Psi-LAB -- which will be the home for research and development, red team threat modeling, and curation of all that is open source.

One of the most exciting aspects of the new Psiphon service is the "right2know" nodes, where denied content can be pushed to users in censored jursidictions and users, in turn, can sign up for the psiphon service, or simply use the right2know nodes for free without subscription. Find out more here.

Thanks to Rafal, Nart, Mike, Jane, Dirk, Rod, Adam, Jeremy, Jaymz, Greg, Eugene, Vlad, and everyone else involved in the psiphon project!
View Article  Psiphon wins Index on Censorship Economist New Media Award
We were very pleased to hear that Psiphon was the recipient of the Economist New Media Award at the Index on Censorship 2009 Free Expression Award Ceremony in London yesterday.

Details here. Although we are proud to win the award, we feel that this award belongs to the others on the shortlist as well. In particular, it is noteworthy that nominee Hoder is still imprisoned in Iran for merely expressing his opinions.
View Article  Tracking GhostNet
Dear Friends and Colleagues

Please find below a link to Tracking GhostNet: Investigating a Cyber Espionage Network, the second major report from the Information Warfare Monitor -- a joint project of the SecDev Group (Ottawa) and the Citizen Lab (Munk Centre for International Studies, University of Toronto).
Tracking GhostNet: Investigating a Cyber Espionage Network Tracking GhostNet: Investigating a Cyber Espionage Network The SecDev Group This report documents the GhostNet - a suspected cyber espionage network of over 1,295 infected computers in 103 countries, 30% of which are high-value targets, including ministries of foreign affairs, embassies, international organizations, news media, and NGOs.

The report can be downloaded here here

For security reasons, we have redacted parts of the report until affected parties can be notified by the relevant authorities. A full uncensored report will be released in one week.

A New York Times story by John Markoff about the report is here

This report is the culmination of a 10 month investigation of alleged Chinese cyber spying against Tibetan institutions. It documents a vast suspected cyber espionage network of over 1,295 infected computers in 103 countries, referred to in the report as GhostNet. Close to 30% of the infected hosts are considered high-value political and economic targets, and include computers located at ministries of foreign affairs, embassies, international organizations, news media, and NGOs.

The capabilities of the attack tools used by the GhostNet system were far-reaching, and include the ability to retrieve documents, and turn on web cameras and audio systems. The investigation was able to conclude that Tibetan computer systems were compromised by multiple infections that gave attackers unprecedented access to potentially sensitive information, including documents from the private office of the Dalai Lama.

While our analysis reveals that numerous politically sensitive and high value computer systems were compromised in ways that circumstantially point to China as the culprit, we do not know the exact motivation or the identity of the attacker(s), or how to accurately characterize this network of infections as a whole. One of the characteristics of cyber-attacks of the sort we document here is the ease by which attribution can be obscured. Regardless of who or what is ultimately in control of GhostNet, it is the capabilities of exploitation, and the strategic intelligence that can be harvested from it, which matters most. This report underscores the growing capabilities of cyber attacks, the ease by which cyberspace can be used as a vector for signals intelligence, and the importance of taking information security seriously by security professionals and policy makers worldwide. We look forward to your comments.
View Article  Web 2.0 Presidency (Canada Watch Paper) and KMDI Lecture
I recently wrote a short discussion piece for York University's here, called the "Web 2.0 Presidency," which can be downloaded here.

Additionally, I recently gave a talk to the KMDI called "Leveling the Playing Field for Citizen Intelligence," which can be viewed here
View Article  How Free is the Internet? 2007 Al Jazeera Interview with Riz Khan
I did an interview in 2007 on the Riz Khan show/Al Jazeera with Mortin Sklar. I never did see the broadcast, but in going through some youtube videos I see someone posted. I am reposting it here.

View Article  CBC Radio-Canada Profile of the Citizen Lab
In November 2008, CBC Radio-Canada did a profile of the Citizen Lab for the program "Une Heure Sur Terre." The program provides an overview of the Lab, our research on information warfare, Nart Villeneuve's Skype report, the OpeNet Initiative, and our psiphon circumvention software project.

View Article  PC World - Beating Internet Censorship the Canadian Way
..."What we're trying to do with psiphon is build a technology that supports that original notion of innovation that drove the Internet," explains Lab Director Ronald Deibert.

"[T]he guarantee of uninterrupted access to free information" is what is at stake, says Professor Deibert, whose background and training as a political scientist - not a computer scientist - shows through clearly.

The Citizen Lab started in 2001, as a research and development centre for "politically-motivated hacktivists." Among other activities, it operates the Open Net Initiative, collaborating with organizations around the world on matters of online access, cyber security and Internet censorship.

Read more here.
View Article  Radio Canada International Interview
I recently did a radio interview with Radio Canada International's "MASALA CANADA with Wojtek Gwiazda." Wojtek sent me an MP3 of the interview, which can be accessed here. In the interview, we discuss the Citizen Lab, the OpenNet Initiative, and the ONI Asia project, supported by IDRC Canada.

Radio Canada International's Masala Canada show can be accessed here
View Article  Radio Canada Une heure sur terre
Radio Canada's "Une heure sur terre" did a very nice profile piece on the Citizen Lab recently. Here is a link to a stream
of the program. Included are discussions about our research on the Russia-Georgia Cyberwar, Nart Villeneuve's Skype Report and psiphon.
View Article  TVO Big Ideas
I am scheduled to appear on TVO Big Ideas this weekend; details below.

TVO: Saturday and Sunday November 22 and 23 2008 4 pm.
Repeats Saturday and Sunday at 5 am.

RON DEIBERT
In this lecture entitled "Hacking Back: The Battle for Human Rights Online", political science professor Ron Deibert looks at the issue of internet censorship and surveillance around the world and the tools being created (like "psiphon") to empower global citizens to freely share and access information online. Deibert is Director of The Citizen Lab at the Munk Centre for International Studies.

The video can be viewed here:


View Article  Breaching Trust
I am pleased to announce our release of a major investigative report, Breaching Trust: An analysis of surveillance and security practices on China’s TOM-Skype platform, written by Nart Villeneuve, Psiphon Fellow, the Citizen Lab, at the Munk Centre for International Studies, the University of Toronto.

The full report can be downloaded here:
here

John Markoff of the New York Times has just released a story about the report, which will appear in tomorrow's paper, but can be found online here:
here

Major Findings of this report are as follows:

• The full text chat messages of TOM-Skype users, along with Skype users who have
communicated with TOM-Skype users, are regularly scanned for sensitive keywords, and
if present, the resulting data are uploaded and stored on servers in China.
• These text messages, along with millions of records containing personal information, are
stored on insecure publicly-accessible web servers together with the encryption key required to
decrypt the data.
• The captured messages contain specific keywords relating to sensitive political topics such
as Taiwan independence, the Falun Gong, and political opposition to the Communist Party
of China.
• Our analysis suggests that the surveillance is not solely keyword-driven. Many of the
captured messages contain words that are too common for extensive logging, suggesting
that there may be criteria, such as specific usernames, that determine whether messages are
captured by the system.

As my colleague Rafal Rohozinski and I say in the foreword to the report, "If there was any doubt that your electronic communications – even secure chat – can leave a trace, Breaching Trust will put that case to rest. This is a wake up call to everyone who has ever put their (blind) faith in the assurances offered up by network intermediaries like Skype. Declarations and privacy policies are no substitute for the type of due diligence that the research put forth here represents."
View Article  Announcement: Greg Walton joins Citizen Lab as Senior SecDev Fellow
I am pleased to announce that Greg Walton will be joining the Citizen Lab.

Greg Walton is the senior security researcher for ONI Asia, and the first SecDev fellow at the Citizen Lab. He is a graduate of the Department of Peace Studies, University of Bradford (International Relations and Security Studies), and holds an MSc from the Computer Science Department, University of Sunderland (UK). In the past Greg worked for a number of human rights organizations, and as a radio and TV journalist in Asia. He is the author of a seminal study analyzing China's censorship and surveillance systems and the complicity of western corporations (Golden Shield). In addition to his work for ONI Asia, Greg is also the editor of ONI's sister project, the Information Warfare Monitor and the Chief Security Officer for the start-up Psiphon, heading up the "red cell" -- responsible for penetration testing and security analysis.

Welcome Greg!
View Article  CBC Spark, Digital Wish List
I was a guest on CBC's Spark, with Nora Young as part of their special election coverage "digital wish" list. You can listen to and watch the interview here.

You can also download the MP3 of the interview here.

And see the video here:


Digital Wish List: Ron Deibert from CBC Radio: Spark on Vimeo.
View Article  Canadian Business -- 6 Questions with Ron Deibert
• What is the greatest challenge currently facing Citizen Lab and what are you doing about it?

More here
View Article  A New Breed Of Hackers Tracks Online Acts of War (Washington Post)
TORONTO -- Here in the Citizen Lab at the University of Toronto, a new breed of hackers is conducting digital espionage.

They are among a growing number of investigators who monitor how traffic is routed through countries, where Web sites are blocked and why it's all happening. Now they are turning their scrutiny to a new weapon of international warfare: cyber attacks.

Tracking wars isn't what many of the researchers, who call themselves "hacktivists," set out to do. Many began intending to help residents in countries that censor online content. But as the Internet has evolved, so has their mission.

Ronald J. Deibert, director of the Citizen Lab, calls the organization a "global civil society counterintelligence agency" and refers to the lab as the "NSA of operations."


From the Washington Post
here   more »
View Article  Experts: Internet filtering and censorship rife (CNN)
From CNN

"Some states block access to a wide swathe of content, while others tend to concentrate on one or two narrow baskets. South Korea, for example, tends to block access only to sites related to North Korea," Deibert said.

Although countries such as Iran and China -- home to the 'Great Firewall of China' -- are obvious examples of where filtering is prevalent, other countries are also restricting content for varying reasons.   more »
View Article  Software can bypass China's 'Great Firewall,' but hard to get inside country
Two years ago the Citizen Lab released a program called Psiphon, which allows users in countries such as China and Iran to circumvent their governments' Internet censorship. The free software uses computers outside the censoring country - known as proxies - to fetch web pages and send them back over encrypted connections. The technique is also used by a host of other tools, but Deibert says the goal was to make it as user-friendly as possible.

From the Canadian Press
View Article  Washington Post: Longtime Battle Lines Are Recast In Russia and Georgia's Cyberwar
"In terms of the scope and international dimension of this attack, it's a landmark," said Ronald J. Deibert, director of the University of Toronto's Citizen Lab.... "International laws are very poorly developed, so it really crosses a line into murky territory . . . Is an information blockade an act of war?"

From Washington Post
View Article  Russia-Georgia Cyberwar and Chinese Internet Censorship
Several projects that I am involved in are bubbling with activity right now. The Information Warfare Monitor Project has been going overtime monitoring the Russia-Georgia cyberwar. We are issuing notices and posting news items as we come across them, and intend on issuing a detailed report soon. Greg Walton, the editor of the IWMP, has been leading up the effort. The OpenNet Initiative is also very actively involved in testing for Internet censorship in China with our researchers in field in several places. You can read about our findings at the ONI blog. Lastly, the psiphon project is in the midst of vigorously developing version 2.0, which we hope to release in the next few months. As we are working on it, we are also actively involved in outreach with psiphon to ensure users in places like China and Georgia are able to access the Internet in an unfettered way.
View Article  Publius: The Looming Destruction of the Global Communications Environment
Ask most citizens worldwide to identify the most pressing issue facing humanity as a whole and they will likely respond with global warming. However, there is another environmental catastrophe looming: the degradation of the global communications environment. The parallels between the two issues are striking: in both cases an invaluable commons is threatened with collapse unless citizens take urgent action to achieve environmental rescue. The two issues are also intimately connected: solutions to global warming necessitate an unfettered worldwide communications network through which citizens can exchange information and ideas. To protect the planet, we need to protect the Net.

Read the full essay on Publius here:
View Article  Citizen spy fights to uphold our rights
A professor from Vancouver says what was once an open global space is now being carved up, colonized and militarized

...   more »
View Article  Forbes: China's Overeager American Censors
Practically every U.S.-owned search engine has caved to the Chinese government's demands that they censor political Web sites in China. But none of them seem to agree on just what sites need censoring. Google, at times, blocks Chinese users' access to the BBC while Yahoo! permits it. Yahoo! sometimes filters out Voice of America--Google doesn't. And Microsoft removes entries from the Chinese version of Wikipedia from its results while every other search engine includes them--even the dominant Chinese search engine Baidu.com.

Confused? So are the search engines themselves, says Nart Villeneuve, a researcher at the University of Toronto's Open Net Initiative. In a study released on Wednesday, he points to the wild variation in search engine censorship in China as a sign that the Chinese government isn't handing companies a uniform list of censored sites but leaving them to guess at which sites are contraband.
------------------------
In a congressional hearing before the U.S.-China Economic and Security Review Commission on Wednesday, ONI director Ron Deibert held up the study as evidence of the complicity of U.S. firms in China's control of the media. Worse, he argued, they seemed to be doing more than China's dictators required to repress information.

"This kind of self-selection raises the prospect of anticipatory over-blocking, in which content not officially blocked by China ends up being filtered because of the eagerness of search engines," Deibert said.

Read the entire article here

Read the my testimony to US Congress here

Read Nart's research paper here
View Article  Testimony to US Congress
I am testifying to US Congress today, at the US China Economic and Security Review Commission. My testimony covers the research of the OpenNet Initiative on Internet censorship practices in China, the range and effectiveness of circumvention methods, including our own tool -- psiphon, and the role of US and Western corporations in aiding and supporting Internet censorship in China. My full testimony can be downloaded here.