< Return to Video

34C3 - Tightening the Net in Iran

  • 0:00 - 0:14
    Music
  • 0:14 - 0:17
    Herald: Because Iran pops up in the news
  • 0:17 - 0:21
    frequently and mostly when it pops up,
    it's often about censorship and
  • 0:21 - 0:27
    surveillance and our speaker here Mahsa
    Alimardani she's actually an expert on
  • 0:27 - 0:31
    this topic. She's a specialist, she
    currently works at the Oxford Internet
  • 0:31 - 0:37
    Institute, where she researches politics
    of Iran and of the Iranian internet but
  • 0:37 - 0:43
    she also works for the NGO Article 19 and
    in her talk - which we hope we'll have
  • 0:43 - 0:50
    the slides up very soon - in her talk
    she's doing a rundown of the current state
  • 0:50 - 0:56
    of censorship and surveillance in Iran. So
    thank you for waiting until now, please
  • 0:56 - 0:58
    give a warm round of applause to
  • 0:58 - 1:00
    Mahsa Alimardani
  • 1:00 - 1:08
    Applause
  • 1:08 - 1:10
    Mahsa Alimardani: Well, thank you for coming and
  • 1:10 - 1:16
    being so patient to hear me talk today I
    have to admit I did not anticipate doing
  • 1:16 - 1:21
    this without my computer in front of me
    but I guess it's a good exercise in
  • 1:21 - 1:25
    becoming less reliant on my devices. But I
    do still have my phone in my hand with the
  • 1:25 - 1:31
    slide so I think that'll be useful; so,
    the name of the talk is "Tightening the
  • 1:31 - 1:37
    Net" and so as the introduction went I'm
    going to be talking a little bit about how
  • 1:37 - 1:43
    information controls work on the Iranian
    intranet. You're probably listening to my
  • 1:43 - 1:50
    voice wondering why someone with an
    Iranian name sounds kind of American. I'm
  • 1:50 - 1:55
    - I grew up in Canada and I spent most of
    my life going back and forth between the
  • 1:55 - 2:01
    various countries I lived in abroad and
    back to Iran, so that's why I sound this
  • 2:01 - 2:08
    way. It's a Canadian accent. And so I, I
    had slides to accompany what I was going
  • 2:08 - 2:15
    to say next and it had a frightening
    Iranian vampire, that I was going to get
  • 2:15 - 2:21
    into later on, but it seems that I can you
    know replace the frightening Iranian
  • 2:21 - 2:30
    vampire for now. So the reason why I am
    here. Who am I?Well I wear a lot of
  • 2:30 - 2:34
    different hats, the introduction said that I am,
  • 2:34 - 2:36
    oh, that's not my slide,
  • 2:36 - 2:39
    there's a frightening woman in front of me.
  • 2:39 - 2:45
    Laughter
  • 2:45 - 2:50
    So I, I'm doing my PhD at the Oxford Internet
  • 2:50 - 2:55
    Institute and there I'm studying how
    social media evolves in Iran's information
  • 2:55 - 3:00
    control space to see how political
    participation shapes, especially during
  • 3:00 - 3:06
    elections and things like that. I also
    spend the majority of my time at a london-
  • 3:06 - 3:14
    based NGO called Article 19 and there I
    work with an Iran team that tracks how
  • 3:14 - 3:19
    freedom of expression and access to
    information takes shape in Iran, and uh, I
  • 3:19 - 3:32
    think my slides are on their way up here?
    No? Is it there? It will come? That's
  • 3:32 - 3:35
    promising. So at Article 19.
  • 3:35 - 3:42
    Applause
  • 3:42 - 3:44
    Yay, my slides are here, that's so
  • 3:44 - 3:51
    exciting. Oh can I actually? then I it goes
  • 3:51 - 3:53
    ... can I actually control it?
  • 3:53 - 3:54
    Herald: You have to signal.
  • 3:54 - 3:56
    MA: Oh, I have to signal, okay. We
  • 3:56 - 4:01
    can go to the next slide.
  • 4:01 - 4:04
    Laughter
  • 4:04 - 4:09
    No, nope, oh
    this is fun, okay, so this was the part
  • 4:09 - 4:14
    that would appear when I'm explaining
    who I am. What are you? It's the scene
  • 4:14 - 4:18
    from the movie, but, I've been
    referencing, it's called "A girl walkes
  • 4:18 - 4:23
    home alone at night" I think you should
    all watch it. So, we can go to the next
  • 4:23 - 4:31
    slide. So, um, there was a troll on
    Twitter yesterday when I posted about my
  • 4:31 - 4:35
    talk, who were saying that I'm kind of
    doing war-mongering or something like
  • 4:35 - 4:40
    that, so I just want to leave a
    disclaimer: I do work on human rights, I
  • 4:40 - 4:44
    am talking about some of the repressive
    things that happens in Iran, but this is
  • 4:44 - 4:54
    not a talk to scare you away from Iran. In
    fact, if - you can go back - in fact, if
  • 4:54 - 4:58
    it, if I weren't here and if I weren't
    doing this particular type of work I would
  • 4:58 - 5:04
    probably be in Iran with my family for the
    holidays, so I urge you, if you have no
  • 5:04 - 5:11
    security concerns, please go. It's a
    amazing country lots to see. But, one
  • 5:11 - 5:16
    thing you will find is that the internet
    experience is a little bit different than
  • 5:16 - 5:22
    what you would experience here in Leipzig,
    which kind of brings me round to the topic
  • 5:22 - 5:29
    of my talk. So, the Iranian internet is
    sometimes known as "Filter-Net", this is a
  • 5:29 - 5:34
    term that a lot of us who do kind of
    digital advocacy for Iran know and often
  • 5:34 - 5:42
    use. I think the term was coined around
    2009 or 2010 by a Iranian journalist, who
  • 5:42 - 5:48
    focuses on technology named Mima Akbar,
    for, you can follow the hashtag on Twitter
  • 5:48 - 5:52
    and you could see lots of different things
    related to Internet censorship and
  • 5:52 - 6:01
    surveillance in Iran. And so - next slide
    - there's also the series, that I helped
  • 6:01 - 6:06
    run with a number of colleagues at Article
    19, which is called "Tightening the Net"
  • 6:06 - 6:10
    the name of this talk and if you want to
    get into the nitty gritty details of what
  • 6:10 - 6:16
    happens in terms of internet policy, in
    terms of how users are put at risk in Iran
  • 6:16 - 6:22
    this is a series you can follow and it
    started initially with the national
  • 6:22 - 6:27
    internet project, which is sort of
    sometimes known as the "Halal-Net".
  • 6:27 - 6:32
    And then, we looked at software and cyber
    tactics in Iran for the next edition and
  • 6:32 - 6:37
    now every quarter we come out with a
    rundown of what's going on, online in
  • 6:37 - 6:42
    Iran, with a series of advocacy
    recommendations for various branches of
  • 6:42 - 6:47
    the Iranian government. So, if you want to
    get more information beyond the
  • 6:47 - 6:57
    generalities of this talk to check that
    out. Next slide. So, understanding the
  • 6:57 - 7:03
    #filternet. In order to understand - next
    slide - so whenever I do this, it means
  • 7:03 - 7:09
    next slide.
    So, understanding what happens online you
  • 7:09 - 7:15
    have to kind of understand that in Iran
    there is an infrastructure of control,
  • 7:15 - 7:23
    that kind of shapes how this works and I
    can show this to you. Here, which is kind
  • 7:23 - 7:32
    of a map of what's going on in Iran and
    you can see that in Iran the head of state
  • 7:32 - 7:38
    is in fact not elected, it's the supreme
    leader. He's kind of a religious
  • 7:38 - 7:42
    authority, but also he has ultimate veto-
    power over everything that happens in the
  • 7:42 - 7:48
    country and you can see him up at the top.
    I'm not signaling to change, I'm just pointing.
  • 7:48 - 7:52
    It's, he's up at the top there
    and everything sort of like falls under
  • 7:52 - 7:59
    his umbrella. And, what's interesting to
    know that, every four years there, are
  • 7:59 - 8:03
    there is a democratic element to the
    government in Iran and there is a
  • 8:03 - 8:09
    president that gets elected and within the
    president's cabinet you have the Ministry
  • 8:09 - 8:16
    of ICT information communications and
    technology and within the Ministry of ICT
  • 8:16 - 8:22
    you see a lot of what happens in terms of
    control inside of Iran. So the Ministry of
  • 8:22 - 8:28
    ICT runs the telecommunications company of
    Iran and they maintain and authorize all
  • 8:28 - 8:34
    the ISP and so in some ways this has been
    really good, because the current
  • 8:34 - 8:40
    administration, that was elected back in
    2013 and it was reelected in 2017 is a
  • 8:40 - 8:45
    moderate administration and so it's done a
    lot to improve internet conditions in
  • 8:45 - 8:50
    Iran.
    Internet speeds have improved by huge
  • 8:50 - 8:55
    amounts. So, sometimes the Iranian
    internet was named, known as "condnet"
  • 8:55 - 9:00
    which, kind of is like "slow internet",
    but that's really improved since this
  • 9:00 - 9:06
    government has come into power and it's
    the government of President Rouhani and
  • 9:06 - 9:10
    other things, like Internet access has
    come to villages, that often didn't have
  • 9:10 - 9:15
    this kind of access. So in terms of ICT
    for development there's been a lot of
  • 9:15 - 9:20
    progress over the past few years because
    of the work of this government in that
  • 9:20 - 9:26
    ministry, but in terms of how surveillance
    occurs. So all Internet traffic is routed
  • 9:26 - 9:33
    through the telecommunications company of
    Iran including private and government ISPs
  • 9:33 - 9:39
    and the TCI - as you can see right below
    the Ministry of ICT - is responsible for
  • 9:39 - 9:46
    blocking webpages and blacklists and
    keywords and in terms of surveillance the
  • 9:46 - 9:52
    TCI also uses proxy servers for
    surveillance by logging all unencrypted
  • 9:52 - 9:56
    web traffic which is why it's really
    important for there to be HTTPS over
  • 9:56 - 10:02
    websites in Iran.
    What was particularly concerning is that
  • 10:02 - 10:05
    underneath the control of the Supreme
    Leader there's a body called the
  • 10:05 - 10:12
    Revolutionary Guards and so, every time
    there's a protest movement in Iran or
  • 10:12 - 10:18
    there's any sort of opposition's of the
    status quo the Revolutionary Guards help
  • 10:18 - 10:24
    the regime kind of, you know, quell
    protesters, arrest them, gather
  • 10:24 - 10:37
    intelligence and so the IRGC, excuse me.
    In 2009 the IRGC a consortium owned by
  • 10:37 - 10:43
    this kind of paramilitary organization
    bought about 51% of the telecommunications
  • 10:43 - 10:48
    company of Iran, because the government
    was trying to privatize it, but in essence
  • 10:48 - 10:53
    its ownership falls, fell under this kind
    of repressive body within the
  • 10:53 - 11:00
    establishment. So, beyond strengthening
    the the Revolutionary Guards, with you
  • 11:00 - 11:06
    know, financial, through financial means
    they had direct access to the data of
  • 11:06 - 11:11
    ordinary citizens which is super
    concerning. We can go to the next slide now.
  • 11:11 - 11:16
    This was the news back in 2009 when they
  • 11:16 - 11:22
    got 51% of the shares of the
    telecommunications company of Iran. Next
  • 11:22 - 11:32
    slide. So, just to go over a brief history
    of controls, because along with the
  • 11:32 - 11:38
    infrastructure of control, there's kind of
    a legal mechanism for how this kind of
  • 11:38 - 11:45
    established itself. So, back in 2001,
    filtering really started in Iran because
  • 11:45 - 11:52
    there is a crackdown on newspapers and a
    lot of people started migrating online.
  • 11:52 - 11:58
    The scripts for writing Persian online was
    developing so, there was this huge
  • 11:58 - 12:02
    migration and it was only around 2001 that
    the government started targeting and doing
  • 12:02 - 12:08
    censorship of these, you know, more
    reformist or progressive journalists and
  • 12:08 - 12:14
    activists, who were writing and kind of
    going against the ethos of the regime.
  • 12:14 - 12:20
    You can go back, you went ahead too. Oh,
    so were you doing it? Oh sorry.
  • 12:20 - 12:22
    Laughter
  • 12:22 - 12:30
    Totally did not make that connection.
    So that was in 2001 and they wanted to
  • 12:30 - 12:36
    codify how the system works, in terms of
    the filtering committee that enables this
  • 12:36 - 12:43
    and so in 2006 there was a draft law known
    as the computer crimes law and actually
  • 12:43 - 12:47
    Article 19, the law team and that Iran
    team - I wasn't part
  • 12:47 - 12:52
    of it because this was before my time at
    the organization - they actually are the
  • 12:52 - 13:01
    only source of translating and analyzing
    this law and so, it came into a draft form
  • 13:01 - 13:07
    in 2006 and then by 2009 they really
    wanted to mobilize it and make sure it
  • 13:07 - 13:15
    went into law. And 2009 was when the green
    movement happened and so the government
  • 13:15 - 13:19
    was kind of trying to rein in control over
    what kind of discourse was going on
  • 13:19 - 13:24
    online, because they they effectively shut
    down the internet for a small period of
  • 13:24 - 13:30
    time during that protest movement and so
    right after this happened they picked up
  • 13:30 - 13:35
    speed on this and made sure it passed and
    by 2010 this became law.
  • 13:35 - 13:43
    You can take a look at this document in
    more precise form, different things like
  • 13:43 - 13:48
    article 10, which makes things like
    encryption illegal came out of this
  • 13:48 - 13:54
    document, different things like the
    filtering committee that decides through
  • 13:54 - 13:59
    multi agency network of different
    ministries and different experts in the
  • 13:59 - 14:01
    government what content needs to be
    filtered.
  • 14:01 - 14:03
    Do you want me to do this and you can.
  • 14:03 - 14:05
    Laughs
  • 14:05 - 14:09
    Sorry I feel bad I've made you, yeah.
  • 14:09 - 14:11
    Laughter
  • 14:11 - 14:12
    Here she is.
  • 14:12 - 14:17
    Applause
  • 14:17 - 14:22
    Okay, okay, yeah, I'm sorry, I
    didn't realize and she was crouching here
  • 14:22 - 14:32
    the entire time and that's not cool.
    So, so the next thing I have is a video
  • 14:32 - 14:38
    which I feel like it's gonna get really
    difficult. So, the law came into effect in
  • 14:38 - 14:45
    2010 and different bodies came into
    formation as well, things like the
  • 14:45 - 14:51
    Revolutionary Guard set up their own cyber
    division known as Gharargah in 2009, right
  • 14:51 - 14:58
    after the protest movement.
    Iran's police forces also established
  • 14:58 - 15:05
    their own pulley of cyber force named
    Fatah in 2011 and because the
  • 15:05 - 15:09
    establishment was realizing that the
    internet was so, basically crucial to the
  • 15:09 - 15:13
    functioning of the nation, national
    security was being compromised, things
  • 15:13 - 15:18
    like cyber attacks against the country's
    infrastructure was happening, the supreme
  • 15:18 - 15:22
    leader basically wanted everything
    centralized to him, and so he created the
  • 15:22 - 15:27
    "Supreme Council of Cyberspace" which, its
    name translated into English, is very
  • 15:27 - 15:33
    scifi and fun to say sometimes and that
    happened in 2012.
  • 15:33 - 15:38
    And so, this is all kind of like boring
    and I guess lots of dates and lots of
  • 15:38 - 15:42
    things, but it's really important to how
    things happen day to day in Iranian's
  • 15:42 - 15:48
    lives and how they experience the internet
    and so... Back in a few years ago, a
  • 15:48 - 15:54
    colleague and I, okay, at the University
    of Amsterdam, decided to go through the
  • 15:54 - 16:00
    censorship redirect page. So everytime you
    want to visit a page that's censored it's
  • 16:00 - 16:05
    called peyvandha.ir - you can probably
    look this up, if you want - and so we
  • 16:05 - 16:09
    using the wayback machine we, like, traced
    it over the years and how it evolved and
  • 16:09 - 16:13
    how it kind of reflects on this changing
    internet policy.
  • 16:13 - 16:18
    So I'm gonna take a crack at playing this,
    I'm probably gonna really mess this up,
  • 16:18 - 16:27
    actually, but... uhm... so this is the
    video... Can I do it without...?
  • 16:27 - 16:28
    AH: Let's try it... I can
  • 16:28 - 16:34
    MA: Yes. Yeah!
  • 16:34 - 16:38
    Video: arose with the establishment of
    Iran cybercrime laws following the 2009
  • 16:38 - 16:42
    Green movement. The different versions of
    peyvandha.ir, which contain literature
  • 16:42 - 16:47
    related to these laws and regulations,
    evolve as norms of what constitutes as
  • 16:47 - 16:50
    filtered content becomes more entrenched
    with Iran. From the inception of the very
  • 16:50 - 16:55
    first version of the page, whereby users
    are told: "In the name of god, according
  • 16:55 - 17:00
    to the Computer Crimes Act, access to this
    website requested, is not possible." The
  • 17:00 - 17:05
    messages users are viewing as censorship
    page, is toned down in the next version,
  • 17:05 - 17:08
    whereby users are only told, that the
    links they are viewing are some of the
  • 17:08 - 17:14
    registered links. Within version 2, we
    also see the peyvandha.ir website creating
  • 17:14 - 17:20
    pages related to Internet policy. the 3rd
    version of peyvandha.ir continues with the
  • 17:20 - 17:24
    theme of religious references, with a poem
    featured that states: "If you listen to
  • 17:24 - 17:30
    the words of the poet Saadi, he says, he
    consents to require the consent of him".
  • 17:30 - 17:34
    Immediately to the right of this, users
    see the text: "In the name of god and the
  • 17:34 - 17:39
    merciful", as if to subtly tell users that
    the censorship they are experiencing, is
  • 17:39 - 17:43
    by the will of god.
    These religious references are continued
  • 17:43 - 17:47
    in version 4, whereby the main feature of
    the page is a changing image that makes
  • 17:47 - 17:52
    references to national holidays and
    events, maintaining the theme of allusions
  • 17:52 - 17:58
    to Shia Islam and national Imams. This
    image, for instance, depicts a mosque,
  • 17:58 - 18:03
    marking the festival of Imam Reza, asking
    users to click on a link to submit ideas
  • 18:03 - 18:07
    for the festival.
    Version 5 of peyvandha.ir brings attention
  • 18:07 - 18:11
    to the islamic nature of censorship. The
    links featured here are perhaps the most
  • 18:11 - 18:15
    related to state propaganda in comparisons
    to the other versions. While the previous
  • 18:15 - 18:20
    version did not display any links, all
    previous versions of peyvandha.ir featured
  • 18:20 - 18:24
    the popular Persian language blogging
    platform, BlogFa. However, this version
  • 18:24 - 18:28
    omits the website. The omission of the
    main image in version 5 makes it hard to
  • 18:28 - 18:32
    establish a firm connection between the
    previous and following versions. This
  • 18:32 - 18:36
    finding is in line with the notion that
    archives of web pages are not always
  • 18:36 - 18:40
    successful in capturing all of the
    content. However, further research shows
  • 18:40 - 18:45
    that this version still made use of images
    regarding Shia Islam. The after the Green
  • 18:45 - 18:50
    movement, internet controls in Iran from
    2009 and 2012 report, by the OpenNet
  • 18:50 - 18:55
    initiative has captured and saved the
    version of peyvandha.ir, as it was on a
  • 18:55 - 19:02
    25th of October 2012. This image features
    quranic writings. The last 2 iterations of
  • 19:02 - 19:07
    the website in version 6 and 7 are very
    similar in design. The sudden change in
  • 19:07 - 19:12
    design was explained by an anonymous
    source to make filtering more pleasant. Or
  • 19:12 - 19:16
    rather to appear as a subtle part of the
    Iranian internet experience rather than
  • 19:16 - 19:21
    one presented with indoctrinating aspects
    of the government. The significant change
  • 19:21 - 19:26
    that comes in version 7, however, is the
    prominent feature of the Internet policy
  • 19:26 - 19:32
    links. Concluding, we can say that this
    historiography of the peyvandha.ir website
  • 19:32 - 19:35
    demonstrates a timeline of the beginning
    of the heightened internet controls from
  • 19:35 - 19:41
    the inception of the page in 2010 to the
    present day. The changes in the page
  • 19:41 - 19:45
    essentially demonstrate the evolution of
    the ways the Iranian state represents its
  • 19:45 - 19:51
    censorship policies. The notions of
    religious motifs decrease over time,
  • 19:51 - 19:54
    whereas the focus on internet policy
    becomes more present by the last iteration
  • 19:54 - 19:58
    of the page.
  • 19:58 - 20:01
    MA: And that was that. And as I struggle
  • 20:01 - 20:07
    to go back to my presentation... Oh, I did
    it... without any glitches... how
  • 20:07 - 20:11
    exciting... and so, over the years there
    have been different programs that the
  • 20:11 - 20:16
    government has kind of put into place
    beyond the censorship that they do. Things
  • 20:16 - 20:20
    that I have been following through my own
    work have been "the spider program", which
  • 20:20 - 20:26
    comes from the Revolutionary Guards
    Garrideb division, the cyber... kind of
  • 20:26 - 20:30
    Iranian cyber division of the
    Revolutionary Guards and intelligent
  • 20:30 - 20:37
    filtering, the National Information
    Network, and the different ways that the
  • 20:37 - 20:42
    Iranian government has been trying to
    attack journalist, activists, and human
  • 20:42 - 20:48
    rights defenders in terms of... that the
    attacking these kind of vulnerable
  • 20:48 - 20:52
    individuals that pose a threat. There's a
    lot of different projects article 19
  • 20:52 - 20:57
    had an Iranian cyber army report about
    this, and there's been really great work
  • 20:57 - 21:03
    to track this being done by the campaign
    for human rights in Iran by their
  • 21:03 - 21:08
    researcher Amir Rashidi and by two other
    researchers who've been tracking this with
  • 21:08 - 21:14
    the Iran threats project - Colin Anderson
    and Claudio Ranieri - so there's tons of
  • 21:14 - 21:21
    great research being done in terms of
    identifying these attackers. The
  • 21:21 - 21:25
    intelligent filtering project that the
    Iranian government has been doing is
  • 21:25 - 21:31
    something that I looked into with another
    colleague - Frederic Jacobs - in 2015 and
  • 21:31 - 21:35
    basically at that time we were noticing
    that the Iranian government was making
  • 21:35 - 21:41
    these really grand statements. That's the
    Ministry of ICT about how they had
  • 21:41 - 21:47
    sophisticated means to censor individual
    pages on different social media. And
  • 21:47 - 21:53
    basically this has been a old policy that
    they've wanted to do, so sites like
  • 21:53 - 21:59
    Facebook and Twitter were censored after
    the protest movement in 2009. Actually in
  • 21:59 - 22:04
    the lead-up to the protest movement they
    were censored. And so for a long time
  • 22:04 - 22:08
    various members of the government have
    said they want to unblock these platforms
  • 22:08 - 22:13
    and find the means to just censor
    individual pages, or problematic content
  • 22:13 - 22:16
    and leave these websites open.
    However, that's really
  • 22:16 - 22:20
    hard to do, unless the government has a
    relationship with these companies. If they
  • 22:20 - 22:25
    have a relationship with Facebook or
    Twitter. And so back in 2015, they made a
  • 22:25 - 22:28
    grand announcement that they had finally
    nailed it, and they were doing this on
  • 22:28 - 22:34
    Instagram. And Instagram is one of the
    more popular social media platforms and so
  • 22:34 - 22:39
    what we noticed was that the censorship -
    intelligence censorship, which is just
  • 22:39 - 22:44
    individual pages or individual pictures or
    accounts being censored - it was only
  • 22:44 - 22:51
    being done on the mobile app, and the
    reason was that Instagram hadn't yet
  • 22:51 - 22:57
    rolled out HTTPS on the mobile
    application. It had enabled it on the the
  • 22:57 - 23:02
    browser version of the website, and so the
    running governments great, grand unveiling
  • 23:02 - 23:08
    of intelligent censorship was in reality
    just Instagram not doing this.
  • 23:08 - 23:13
    And so we found what kind of content they
    were targeting, which was really
  • 23:13 - 23:19
    interesting, kind of cultural research in
    terms of how censorship was working.
  • 23:19 - 23:25
    And then my colleague got in touch with
    Instagram, and they soon rolled out the
  • 23:25 - 23:31
    HTTPS on the mobile app and then
    intelligent censorship came unraveling as
  • 23:31 - 23:36
    the motherboard writer Lorenzo "Iran smart
    Instagram censorship isn't that smart."
  • 23:36 - 23:42
    And so that's just one example of these
    grand policies that actually don't really
  • 23:42 - 23:47
    add up to very much in terms of
    intelligent filtering. The researcher
  • 23:47 - 23:53
    Colin Anderson recently found this
    database of Europe URLs that different
  • 23:53 - 24:01
    ISPs were giving to this company called
    Sahab Pardaz. I can't talk too much about
  • 24:01 - 24:06
    this, but this was kind of a public notice
    he put out to ask anyone interested in
  • 24:06 - 24:11
    this data set, to see if this is actually
    another phase of intelligent filtering.
  • 24:11 - 24:17
    However, the minister of ICT did respond
    to this and said that they are not
  • 24:17 - 24:23
    actually compromising users' data, and he
    condemned the work of this company Sahab
  • 24:23 - 24:30
    Pardaz, which doesn't quite add up, which
    I guess helps illustrate how confusing
  • 24:30 - 24:34
    Internet policy is in Iran, like what are
    they actually doing, what are they
  • 24:34 - 24:40
    actually saying, how does it align with
    the laws, and those kinds of regulations.
  • 24:40 - 24:47
    In 2016... through the budget, it was
    announced that Iran was spending about 66
  • 24:47 - 24:52
    million on the intelligent filtering
    project, however it's really unclear what
  • 24:52 - 24:56
    that adds up to, like what are the
    deliverables on this work that they're
  • 24:56 - 25:03
    doing? So again, it's kind of like this
    chaotic quagmire of what's actually
  • 25:03 - 25:08
    happening or not in terms of their ability
    to silence
  • 25:08 - 25:17
    different voices in Iran. They have been
    kind of targeting different users in
  • 25:17 - 25:26
    different ways in 2015, 2016 the Garrideb
    spider program was rounding up series of
  • 25:26 - 25:29
    models and people in the fashion industry
    in Iran that are quite prominently present
  • 25:29 - 25:36
    on Instagram, and while some of the
    statements coming from Garrideb was saying
  • 25:36 - 25:40
    that they had technical hacking abilities,
    what they were actually doing
  • 25:40 - 25:45
    was arresting these models and forcing
    passwords and getting their accounts that
  • 25:45 - 25:50
    way, but during that time I actually got
    an Instagram request from one of these
  • 25:50 - 25:57
    seized accounts, Nikahang Clothing, which
    you can see over there, and you can see
  • 25:57 - 26:02
    that Garrideb had taken it over, because
    there's a notice that's saying because of
  • 26:02 - 26:08
    such-and-such law this account has been
    seized under the spider program, and so
  • 26:08 - 26:14
    that was happening for a while under this.
    Again, more actual physical takeover than
  • 26:14 - 26:19
    technical sophistication of that kind of
    work. Another thing that's quite
  • 26:19 - 26:23
    concerning, that the campaign for human
    rights actually was the first to report
  • 26:23 - 26:31
    on, was the Supreme Council of cyberspace
    requiring all telegram accounts to
  • 26:31 - 26:38
    register with the government, and so
    Telegram is hugely popular inside of Iran,
  • 26:38 - 26:42
    it's almost ubiquitous, and it's often
    used as a social media application,
  • 26:42 - 26:47
    and so the public channels are run by
    administrators, and if you have more than
  • 26:47 - 26:52
    5,000 followers, they basically needed you
    to register and get approval, and by
  • 26:52 - 26:57
    registering they would add a bot to the
    account, and the bot could basically get
  • 26:57 - 27:02
    information of the administrators and the
    followers, which was quite dangerous
  • 27:02 - 27:08
    because last May, when in the lead-up to
    the presidential elections there was a
  • 27:08 - 27:13
    roundup of Telegram administrators that a
    lot of digital activists believe was
  • 27:13 - 27:23
    through this registration program of
    having all of this personal data. Excuse
  • 27:23 - 27:30
    me. In terms of the national internet
    project, it's quite a contentious project
  • 27:30 - 27:36
    in that a lot of people say that on one
    extreme it goes towards being like North
  • 27:36 - 27:41
    Korea's intranet, kind of closed off from
    the rest of the world. I... through
  • 27:41 - 27:45
    my own work I don't think this is what
    the Iranian government wants to do. They
  • 27:45 - 27:50
    do want to localize certain things like
    banking and different forms of
  • 27:50 - 27:56
    infrastructure against cyberattacks like
    Stuxnet, but in general what they want to
  • 27:56 - 28:01
    do is keep data inside of the country, so
    they can have access and control in...
  • 28:01 - 28:04
    part of this project has been to create
    imitation versions
  • 28:04 - 28:09
    of foreign companies, so like I
    said they couldn't force Facebook or
  • 28:09 - 28:13
    Twitter to censor things for them, because
    they don't have a relationship, but if
  • 28:13 - 28:18
    they have local versions they can
    effectively do this, and so and they've
  • 28:18 - 28:23
    come up with alternatives for things like
    Instagram, with Lenzor, which you can see
  • 28:23 - 28:32
    has a very oddly similar user interface,
    but oftentimes users inside of Iran don't
  • 28:32 - 28:36
    trust these imitation apps, so usage
    amongst for like Instagram it's always
  • 28:36 - 28:41
    much higher than it is
    for the local alternatives. One researcher
  • 28:41 - 28:49
    a few years ago saw that the way that a
    Telegram imitation app was implemented
  • 28:49 - 28:53
    kind of traced how the data was going back
    to the government, so there's generally a
  • 28:53 - 29:01
    sense of distrust for this kind of work.
    Throughout the year, since 2016 this
  • 29:01 - 29:06
    attempt to localize user content has
    really increased. They put a ultimatum on
  • 29:06 - 29:10
    platforms that have not been censored yet,
    like Telegram and Instagram, that they had
  • 29:10 - 29:15
    a year to bring their servers inside of
    the country, or else it would be censored.
  • 29:15 - 29:22
    This obviously didn't work, so in 2017,
    this past year, they've been doing
  • 29:22 - 29:28
    different things that kind of have
    basically added up to net discrimination,
  • 29:28 - 29:32
    like they've been going against net
    neutrality values by offering incentives
  • 29:32 - 29:38
    for people to use local traffic, access
    local traffic, local platforms and
  • 29:38 - 29:43
    websites over international ones, and
    they've been giving million-dollar
  • 29:43 - 29:49
    incentives to developers to create apps,
    and for example if they got a million
  • 29:49 - 29:57
    users, they would get a million American
    dollars for developing such a platform.
  • 29:57 - 30:05
    Recently, we just translated and analyzed
    a new policy that's forming into a law by
  • 30:05 - 30:09
    the Supreme Council of cyberspace policy,
    an action on organizing social media
  • 30:09 - 30:15
    messaging applications, and this is just a
    set of rules for local apps and foreign
  • 30:15 - 30:18
    apps that
    need to follow in order to operate inside
  • 30:18 - 30:28
    of Iran. This is supposed to be a gif,
    but that didn't work. So, another point
  • 30:28 - 30:33
    that's kind of come up over... especially
    over the past year, is how controls don't
  • 30:33 - 30:35
    only come from the Iranian government,
    but they
  • 30:35 - 30:46
    also come from abroad. So companies like
    Apple and Google, in order to comply and
  • 30:46 - 30:51
    sometimes over-comply with US sanctions,
    they've been denying certain services to
  • 30:51 - 30:57
    Iranians. So what has been happening... it
    has been... Iranian app developers have
  • 30:57 - 31:02
    been seeing their apps being rejected from
    the Google Play Store, and the Apple...
  • 31:02 - 31:09
    the App Store. Mainly because they were
    providing financial transactions over it,
  • 31:09 - 31:13
    and even things that weren't directly
    doing financial payments were getting
  • 31:13 - 31:19
    blocked, such as one particular app, which
    is kind of the Uber of Iran, called Snap,
  • 31:19 - 31:23
    they were told to remove financial
    payments over the app or else they would
  • 31:23 - 31:28
    be getting removed from the App Store.
    Once they did remove that, it seemed that
  • 31:28 - 31:32
    they knew that there was some sort of
    financial transaction occurring offline
  • 31:32 - 31:37
    and they still removed
    that app from the App Store, just to
  • 31:37 - 31:46
    comply with sanctions. There's also a kind
    of threat to other companies, as the
  • 31:46 - 31:51
    nuclear negotiations went through back in
    2015, there's a lot of foreign companies
  • 31:51 - 31:56
    going in. There's been a huge influx of
    the telecom sector, like Vodafone and
  • 31:56 - 32:01
    Orange, and different companies like that
    going to Iran, and there's kind of a fear
  • 32:01 - 32:05
    that social media giants like Twitter
    and Facebook might find incentive to also
  • 32:05 - 32:11
    go, so it's always good to keep pressure
    to... for them to the remain transparent
  • 32:11 - 32:18
    about their dealings with Iran. The new
    minister of ICT recently said that he had
  • 32:18 - 32:23
    started negotiations with Twitter to
    unfilter Twitter in Iran, however Twitter
  • 32:23 - 32:31
    has refused to officially reply, or say
    anything. So the thing that I spend most
  • 32:31 - 32:37
    of my time working on in terms of social
    media discourse is Telegram, because
  • 32:37 - 32:42
    Telegram is kind of an exciting new
    territory in understanding social media,
  • 32:42 - 32:47
    especially in Iran, because internet
    penetration and Telegram usage are
  • 32:47 - 32:55
    almost on par, so there's about 40 to 45
    million Internet users inside of Iran, and
  • 32:55 - 33:00
    according to the company Telegram, there's
    about 25 million daily users and about
  • 33:00 - 33:04
    40 million monthly users.
    So what this means for how
  • 33:04 - 33:10
    people communicate, how people are
    accessing information in Iran, is huge,
  • 33:10 - 33:15
    because oftentimes everything from
    shopping to staying in touch with friends
  • 33:15 - 33:19
    to getting updates on the weather and
    traffic and news, it comes from Telegram
  • 33:19 - 33:27
    and the public channels. So understanding
    this, and how the government is responding
  • 33:27 - 33:32
    to such an important application for
    communication, is also really important
  • 33:32 - 33:39
    and as always it's become sort of a target
    for vulnerable at-risk users, for example
  • 33:39 - 33:45
    a number of journalists a few years ago
    were having their accounts seized through
  • 33:45 - 33:51
    SMS brute-force entry, I mean through SMS
    logins, they were
  • 33:51 - 34:00
    able to get in, and so there's those kinds
    of concerns. Telegram has been kind of
  • 34:00 - 34:05
    reactive to these security flaws. When the
    journalist had their accounts taken over
  • 34:05 - 34:11
    through the SMS hacks, they did help
    reinstate them. A few weeks ago there was
  • 34:11 - 34:19
    a flaw in a notification that users got in
    Iran on Telegram, that hackers were able
  • 34:19 - 34:23
    to sort of take over - you can see in that
    picture over there - and Telegram kind of
  • 34:23 - 34:31
    reacted really fast and fixed the flaw.
    But the issue that a lot of digital rights
  • 34:31 - 34:38
    activists on Iran find is that Telegram is
    so important, and it's so crucial to how a
  • 34:38 - 34:43
    lot of things operate inside of Iran, yet
    they're not really trying to prevent
  • 34:43 - 34:51
    anything, they're being much more
    reactive. There's also been concerns about
  • 34:51 - 34:57
    how they interact with the Iranian
    government as well, and... however,
  • 34:57 - 35:03
    Telegram has kind of always made a...
    taking a stand to say that they are not
  • 35:03 - 35:12
    cooperating with the Iranian government
    and... but they do say large things,
  • 35:12 - 35:17
    boastful things, that they stand for
    freedom of speech, yet they have failed to
  • 35:17 - 35:23
    really reach out to civil society and
    human rights activists for Iran and so
  • 35:23 - 35:29
    there's a general kind of plea towards
    this platform that's so important, for
  • 35:29 - 35:34
    them to be a bit more cooperative and
    prioritize these human rights concerns in
  • 35:34 - 35:43
    Iran a little bit more. I was going to
    slightly get into more security
  • 35:43 - 35:50
    aspects of things, but I'll quickly go over
    it. Obviously, there's security concerns
  • 35:50 - 35:55
    with Telegram. It takes up some of the
    work that I do at article 19, working with
  • 35:55 - 36:01
    civil society and protecting them in that
    way, so I'll just quickly go over it
  • 36:01 - 36:10
    because I wanted to end on a particular
    note. This is like a very... a standard
  • 36:10 - 36:15
    thing I'd like to say is you don't
    necessarily apply the same security
  • 36:15 - 36:19
    concerns to Iran that you would here, so
    just these grand statements of
  • 36:19 - 36:25
    "use Signal, use TOR" often don't work.
    Telegram is hugely popular, so I often say
  • 36:25 - 36:29
    "why don't we work on making Telegram
    safer," because users are not going to
  • 36:29 - 36:34
    migrate away from it unless Signal comes
    and creates a whole infrastructure
  • 36:34 - 36:38
    and platform that's going to cater to
    those specific needs of being both social
  • 36:38 - 36:44
    media and having the different usability
    features. That's really the last point
  • 36:44 - 36:53
    I wanted to take away with. But I also just
    wanted to have one kind of message, which is
  • 36:53 - 36:59
    I am super privileged to be standing
    here and talking about this topic that
  • 36:59 - 37:07
    I am really passionate about and I am really
    grateful that I've had this opportunity,
  • 37:07 - 37:15
    since over the years to work on these kind
    of digital rights concerns on Iran, and
  • 37:15 - 37:23
    I've had certain personal hurdles in terms
    of, without cutting into the nitty-gritty
  • 37:23 - 37:28
    of my personal life and the things I've
    had to go through, but there's been this
  • 37:28 - 37:35
    general kind of mood in the past year,
    with the #MeToo movement and all these
  • 37:35 - 37:44
    different stories of harassment and
    basically I've been really grateful to all
  • 37:44 - 37:48
    the people who have supported me over the
    years to make sure that the hurdles I've
  • 37:48 - 37:55
    had to encounter for the specific kind of
    unfortunate personal events that took
  • 37:55 - 38:01
    place, that have affected my career...
    To really help support me and when I was
  • 38:01 - 38:05
    coming to Leipzig I
    was super proud to be coming to the Chaos
  • 38:05 - 38:12
    Computer Club's events and the stories
    I've been hearing about people who have
  • 38:12 - 38:19
    been victims of harassment have really
    upset me and I think it would be...
  • 38:19 - 38:23
    I would be remiss to not make a point
    of saying that I'm a little bit
  • 38:23 - 38:28
    disappointed, that I've been reading these
    things, and
  • 38:28 - 38:39
    Applause
  • 38:39 - 38:42
    And while I really appreciate all of you
  • 38:42 - 38:48
    and all the help you
    give me to set up my talk and I appreciate
  • 38:48 - 38:52
    that I've been given this platform, but I
    really hope we can do better, because this
  • 38:52 - 38:58
    is just not cool. It's not cool for people
    to not feel safe and I know how it feels
  • 38:58 - 39:04
    personally and I hope Dina - I haven't
    seen her yet, I have chatted with her
  • 39:04 - 39:10
    briefly, I hope she's having a great time
    at this Congress, because... and I'm
  • 39:10 - 39:14
    really sorry to hear that some of... some
    people that I think are doing great work
  • 39:14 - 39:19
    and should be in the space are not here
    this year, and I just hope we can do
  • 39:19 - 39:25
    better in 2018. And that's about it. Thank
    you.
  • 39:25 - 39:45
    Applause
  • 39:45 - 39:46
    Herald: Thanks for your talk. Mahsa
  • 39:46 - 39:51
    Alimardani, and for your patience with our
    technical problems. Thank you very much.
  • 39:51 - 39:56
    Please line up at the microphones. There
    are four microphones here in the room.
  • 39:56 - 39:59
    Please
    line up there. We have a couple more
  • 39:59 - 40:02
    minutes for Q&A. You wanna hold a Q&A? Yes?
  • 40:02 - 40:04
    MA: Sure.
  • 40:04 - 40:06
    H: But first, maybe there are the signal
  • 40:06 - 40:10
    angels in the back. Is he waving or not,
    are there any questions from the internet?
  • 40:10 - 40:14
    Signal angel: No, nothing.
    H: Okay, thank you. There is someone
  • 40:14 - 40:16
    standing at microphone 3. What's your
    question?
  • 40:16 - 40:22
    Microphone 3: Hi. Thanks for your last
    statement, really. Thanks a lot. My
  • 40:22 - 40:28
    question would be about Instagram and
    Telegram. I don't know if I missed that
  • 40:28 - 40:32
    part, but does it mean that then the
    Iranian government has relationships with
  • 40:32 - 40:36
    them? Because you mentioned that they
    help. I mean, they show these things, so
  • 40:36 - 40:42
    you've been blocked and this is because of
    this. So why this happens? And why is it
  • 40:42 - 40:47
    only these two particular platforms? I
    understood that Twitter and Facebook don't
  • 40:47 - 40:50
    cooperate. If you could say more about
    that, thanks.
  • 40:50 - 40:54
    MA: yeah, that's a really great question,
    and something that's been really
  • 40:54 - 40:58
    interesting. So, I think, I mentioned that
    this new government the moderate Rouhani
  • 40:58 - 41:04
    administration has kind of, at least in
    terms of how its positioned the words it
  • 41:04 - 41:10
    says, has been a bit more open to internet
    freedoms and things like that. And so I think
  • 41:10 - 41:14
    one of the achievements of that government
    is stopping the censorship of Instagram
  • 41:14 - 41:16
    and Telegram.
    Because there's lots of hardline elements
  • 41:16 - 41:21
    in the establishment that have wanted this
    to get censored. And it's kind of like
  • 41:21 - 41:25
    come to deliberation to censor it over the
    years. There have been some rumors that
  • 41:25 - 41:32
    Telegram has been working with... with the
    Iranian government. Although, I think that
  • 41:32 - 41:36
    might be rumors, because the Ministry of
    ICT every so often says that they have a
  • 41:36 - 41:42
    direct relationship and then Telegram
    comes and refutes it. So, yeah, that's up
  • 41:42 - 41:47
    in the realm of rumours, however. But I
    think it's mainly the work of this
  • 41:47 - 41:51
    moderate administration that's been able
    to prevent the censorship. If that answers
  • 41:51 - 41:53
    your question.
    M3: So they are in connection
  • 41:53 - 41:58
    with Instagram?
    MA: No, there are as far as I know they're
  • 41:58 - 42:02
    not working with Instagram. Instagram is
    owned by Facebook, so Facebook is
  • 42:02 - 42:07
    censored. But, I mean there could be many
    different reasons but these are all
  • 42:07 - 42:12
    conjecture. Instagram is just kind of more
    for entertainment, so they have less of a
  • 42:12 - 42:19
    reason to block it, but also the work of
    this moderate administration to kind of
  • 42:19 - 42:22
    keep Instagram going. Although, for a
    short while during the elections they were
  • 42:22 - 42:27
    blocking Instagram live, because it was
    being used for like protests and
  • 42:27 - 42:35
    gatherings and things like that.
    H: Microphone number 1 please.
  • 42:35 - 42:38
    Microphone 1: Mahsa I just wanted to thank
    you for you for your talk, and also
  • 42:38 - 42:41
    appearing persevering through all the
    adversity. Not only of nation state
  • 42:41 - 42:43
    actors but of also people inside the
    community that might.
  • 42:43 - 42:45
    H: Come a little bit closer to the
    microphone please.
  • 42:45 - 42:48
    M3: Sure. I just wanted to say
    thank you for persevering through all the
  • 42:48 - 42:52
    adversity that has come your way, and for
    being here today to give this talk. It's
  • 42:52 - 42:59
    important and vital and your voice is
    valued. The question about Iran in a
  • 42:59 - 43:04
    geopolitical landscape as its exerting
    itself more in Yemen, Lebanon, perhaps
  • 43:04 - 43:07
    other places. Do you see that the
    technology that's being pioneered by the
  • 43:07 - 43:13
    state apparatuses, the state bodies inside
    of, inside of Tehran and Iran, will have a
  • 43:13 - 43:19
    trickle-down effect into other countries,
    that may replicate the oppressive
  • 43:19 - 43:25
    structures in which that Iran has placed?
    Do you see it being a model, as Iran
  • 43:25 - 43:29
    geopolitically exerts this muscle? Well,
    do you see that some of these the
  • 43:29 - 43:33
    technical sophistication and other things
    will be picked up by other actors in the
  • 43:33 - 43:37
    region?
    A: Yeah, that's a good question. I think
  • 43:37 - 43:41
    Iran would like to have the technical
    sophistication that would be replicated
  • 43:41 - 43:47
    elsewhere. And I guess in some ways the
    capabilities are some that you're on cyber
  • 43:47 - 43:53
    Iran cyber army which is kind of very hard
    to associate directly with the government,
  • 43:53 - 43:57
    because sometimes the affiliations are
    very loose. They have certain
  • 43:57 - 44:02
    capabilities, but in terms of the
    technology, I think, for censorship and
  • 44:02 - 44:07
    surveillance, I think Iran more models
    itself on the technology coming out of
  • 44:07 - 44:12
    China and Russia. Because they have had
    more effective and more sophisticated
  • 44:12 - 44:15
    platforms and means of doing it. So, I
    think it's a little bit the other way
  • 44:15 - 44:20
    around.
    H: Microphone number 1 please.
  • 44:20 - 44:26
    Microphone 1: Thank you for your talk.
    You, if I'm not wrong, you mentioned some
  • 44:26 - 44:36
    government supporters being arrested. Is
    this correct? Do you see any kind of clash
  • 44:36 - 44:42
    between the Revolutionary Guard or the
    religious power and the government?
  • 44:42 - 44:47
    MA: Yeah, absolutely. I mean after the
    nuclear negotiations the foreign minister
  • 44:47 - 44:52
    Javad Zarif, who is like kind a little
    bit westernized, he speaks perfect
  • 44:52 - 44:58
    English. And he had, he has a huge fan
    base in Iran because he established the
  • 44:58 - 45:02
    nuclear deal. He had like almost physical
    confrontations in Parliament with the
  • 45:02 - 45:08
    hardline elements. So, yeah there
    definitely is that, and the reason why
  • 45:08 - 45:13
    some of the Telegram administrators, who
    are actually supporters of Rouhani, were
  • 45:13 - 45:17
    arrested is because of this kind of clash
    between hardline elements like the
  • 45:17 - 45:22
    Revolutionary Guards and the more moderate
    administration. So, there is this kind of,
  • 45:22 - 45:25
    yeah, differentiation and nuance that
    happens.
  • 45:25 - 45:30
    H: I guess we're moving to the last
    question at microphone number 3 please.
  • 45:30 - 45:33
    M3: Oh hey. I just want to ask a question.
  • 45:33 - 45:36
    What can we... First of all
    thank you for your great talk, it was very
  • 45:36 - 45:42
    well researched and great information and
    for your very brave proclamation. What can
  • 45:42 - 45:47
    we in the room do, other than fund your
    work? Can we put pressure on the companies
  • 45:47 - 45:52
    that, you know, work inside of Iran? Can
    we put pressure on the governments of the
  • 45:52 - 45:58
    nations we're citizens in? What's the next
    step for people who are listening and want
  • 45:58 - 46:02
    to do something? Thank you.
    MA: Yeah, I mean especially if you're not
  • 46:02 - 46:06
    American, I think, laughs, Iranian
    government would be more open to hearing
  • 46:06 - 46:10
    kind of the non-western perspective. But I
    think the reason why I think it's so
  • 46:10 - 46:15
    important to be here in Europe, is because
    Europe is actively engaging in dialogue
  • 46:15 - 46:19
    with Iran. So, if there's way to put
    pressure through the different companies
  • 46:19 - 46:24
    that are going into Iran, like I mentioned
    there's you know the British Vodafone and
  • 46:24 - 46:28
    like Frances Orange that are going in. If
    they can make certain demands for, you
  • 46:28 - 46:34
    know, human rights standards and things
    like that. That would be, that would also
  • 46:34 - 46:38
    be really great. I mean campaigning and
    putting pressure different ways through
  • 46:38 - 46:45
    social media is always helpful. The main
    thing that I think we could perhaps have
  • 46:45 - 46:51
    effect on is, hopefully a company like
    Telegram is listening and they can make
  • 46:51 - 46:57
    the security and privacy of Iranians one
    of them one of their bigger priorities. So
  • 46:57 - 47:03
    that's really the place that I think can
    have the most change, because we can have
  • 47:03 - 47:08
    more, we can have easier dialogue with
    like Facebook, Telegram and all these
  • 47:08 - 47:13
    different platforms to ensure that privacy
    and security is upheld.
  • 47:13 - 47:18
    H: Mahsa Alimardani, thank you very much
    for the talk. And please give her a warm
  • 47:18 - 47:20
    round of applause.
  • 47:20 - 47:26
    Applause
  • 47:26 - 47:32
    Music
  • 47:32 - 47:48
    subtitles created by c3subtitles.de
    in the year 2017. Join, and help us!
Title:
34C3 - Tightening the Net in Iran
Description:

more » « less
Video Language:
English
Duration:
47:48

English subtitles

Revisions