Measuring Internet filters
and their unexpected impact
Leonid Evdokimov nullcon, Goa, March 2018
Measuring Internet filters and their unexpected impact Leonid - - PowerPoint PPT Presentation
Measuring Internet filters and their unexpected impact Leonid Evdokimov nullcon, Goa, March 2018 WHAT IS I N T E R N E T C E N S O R S H I P? Internet Censorship |ntnt snsrp| 1. a distortion of the reality of the Internet
and their unexpected impact
Leonid Evdokimov nullcon, Goa, March 2018
Internet Censorship |ˈɪntənɛt sɛnsərʃɪp|
power.
The Open Observatory of Network Interference
OPEN METHODOLOGIES
OPEN SOURCE SOFTWARE
Blocked domains in Iran
From 2014 to 2017
2 4 6 8 1 1 2 1 4 Economics Gaming Hate speech Environment E-commerce Militants and terrorists Public health Search engines Communication tools Hacking tools Government File-sharing Hosting and blogging platforms Sex education Online dating Alcohol and drugs Provocative attire Social networking Gambling Media sharing Religion Anonymity and circumvention tools LGBT Pornography Political criticism Culture Human rights issues News media 121 109 101 82 62 46 44 37 35 30 26 24 21 18 17 16 15 12 10 10 8 8 8 7 6 5 4 4September 2017
At least 25 websites related to the Catalonia Independence Referendum were blocked. The .cat registry was raided and forced to take down many websites.
Spain
October 2017
independence-referendum
November 2017
twitter.com/statuses/948320651407962112
Web Censorship Instant Messaging Apps Censorship Circumvention Middleboxes Speed & Performance
Android iOS macOS Linux
MEASUREMENT APP FOR
https://run.ooni.io
Provides evidence of censorship events Allows researchers to conduct independent studies & to explore other research questions Allows the public to verify our findings
https://explorer.ooni.io
https://api.ooni.io
Mining OONI data
HTTPS throttled, AlexaTop50 adult websites serving malware. Users complaining for months. Unauthorised access? Corrupt sysadmin?
Egypt
Autumn 2016
October 2016
Prosecutor's experts try to ban gambling app endpoints Probably, enumerating them with network sniffer… Digicert OCSP responders are gone Chrome and Firefox lag, Safari can't access wikipedia & facebook at all October 2016
June 2017
Hacktivists added some IPs from MSK-IX-NET as A records of blacklisted domain Filtering /32 routes appeared at borders… 8% of traffic is gone June 2017
Geoff Huston, APNIC Labs
~600 domains for "entity" like Grani, BaltBet or ZenitBet (or ~3900 available expired domains per Phil Kulin's stats) × 4093 A DNS RRs per domain name ≈ 2.5M /32 routes in RIB and, maybe, TCAM
OPEN METHODOLOGIES
OPEN SOURCE SOFTWARE
api.ooni.io explorer.ooni.io
Contacts
slack.openobservatory.org contact@openobservatory.org