Measuring Internet filters and their unexpected impact Leonid - PowerPoint PPT Presentation

Measuring Internet filters and their unexpected impact Leonid Evdokimov nullcon, Goa, March 2018

WHAT IS I N T E R N E T C E N S O R S H I P?

Internet Censorship |ˈɪntənɛt sɛnsərʃɪp| 1. a distortion of the reality of the Internet created by those in power. 2. another term for FILTERNET.

The Open Observatory of Network Interference

OONI IS OPEN METHODOLOGIES OPEN SOURCE SOFTWARE OPEN DATA

121 News media 109 Human rights issues 101 Culture 82 Political criticism 62 Pornography 46 LGBT 44 Anonymity and circumvention tools 37 Religion Media sharing 35 30 Gambling 26 Social networking 24 Provocative attire Alcohol and drugs 21 Online dating 18 Sex education 17 16 Hosting and blogging platforms 15 File-sharing 12 Government 10 Hacking tools Communication tools 10 Search engines 8 Public health 8 Militants and terrorists 8 E-commerce 7 Environment 6 5 Hate speech 4 Gaming 4 Economics 0 0 0 0 0 0 0 2 2 4 6 8 0 4 1 1 1 Blocked domains in Iran From 2014 to 2017 September 2017 ooni.torproject.org/post/iran-internet-censorship

At least 25 websites related to the Catalonia Independence Referendum were blocked. The .cat registry was raided and forced to take down many websites. Spain October 2017 ooni.torproject.org/post/internet-censorship-catalonia- independence-referendum

November 2017 ooni.torproject.org/post/not-quite-network-censorship

twitter.com/statuses/948320651407962112

O O N I S O F T W A R E E C O S Y S T E M

OONI Software tests Instant Messaging Censorship Web Censorship Apps Circumvention Middleboxes Speed & Performance

MEASUREMENT APP FOR Android macOS iOS Linux

https://run.ooni.io

O P E N D ATA Provides evidence of censorship events Allows researchers to conduct independent studies & to explore other research questions Allows the public to verify our findings

https://explorer.ooni.io

https://api.ooni.io

G O R A W ! Mining OONI data ooni.torproject.org/post/mining-ooni-data

What's wrong with I N T E R N E T C E N S O R S H I P?

HTTPS throttled, AlexaTop50 adult websites serving malware. Users complaining for months. Unauthorised access? Corrupt sysadmin? Egypt Autumn 2016 ooni.torproject.org/post/egypt-network-interference

October 2016

Prosecutor's experts try to ban gambling app endpoints Probably, enumerating them with network sniffer… Digicert OCSP responders are gone Chrome and Firefox lag, Safari can't access wikipedia & facebook at all October 2016

June 2017

Hacktivists added some IPs from MSK-IX-NET as A records of blacklisted domain Filtering /32 routes appeared at borders… 8% of traffic is gone June 2017

Geoff Huston, APNIC Labs

~600 domains for "entity" like Grani, BaltBet or ZenitBet (or ~3900 available expired domains per Phil Kulin's stats) × 4093 A DNS RRs per domain name ≈ 2.5M /32 routes in RIB and, maybe, TCAM

OONI IS OPEN METHODOLOGIES OPEN SOURCE SOFTWARE OPEN DATA LOTS OF FUN!

L E A R N M O R E ooni.torproject.org api.ooni.io explorer.ooni.io Contacts slack.openobservatory.org contact@openobservatory.org