[iwar] [fc:Russian.Spies,.They've.Got.Mail]

From: Fred Cohen (fc@all.net)
Date: 2002-03-08 06:41:50


Return-Path: <sentto-279987-4584-1015598456-fc=all.net@returns.groups.yahoo.com>
Delivered-To: fc@all.net
Received: from 204.181.12.215 [204.181.12.215] by localhost with POP3 (fetchmail-5.7.4) for fc@localhost (single-drop); Fri, 08 Mar 2002 06:47:09 -0800 (PST)
Received: (qmail 2458 invoked by uid 510); 8 Mar 2002 14:45:48 -0000
Received: from n26.groups.yahoo.com (216.115.96.76) by all.net with SMTP; 8 Mar 2002 14:45:48 -0000
X-eGroups-Return: sentto-279987-4584-1015598456-fc=all.net@returns.groups.yahoo.com
Received: from [216.115.97.189] by n26.groups.yahoo.com with NNFMP; 08 Mar 2002 14:27:45 -0000
X-Sender: fc@red.all.net
X-Apparently-To: iwar@onelist.com
Received: (EGP: unknown); 8 Mar 2002 14:40:55 -0000
Received: (qmail 9742 invoked from network); 8 Mar 2002 14:40:55 -0000
Received: from unknown (216.115.97.172) by m3.grp.snv.yahoo.com with QMQP; 8 Mar 2002 14:40:54 -0000
Received: from unknown (HELO red.all.net) (12.232.72.152) by mta2.grp.snv.yahoo.com with SMTP; 8 Mar 2002 14:40:54 -0000
Received: (from fc@localhost) by red.all.net (8.11.2/8.11.2) id g28Efp316086 for iwar@onelist.com; Fri, 8 Mar 2002 06:41:51 -0800
Message-Id: <200203081441.g28Efp316086@red.all.net>
To: iwar@onelist.com (Information Warfare Mailing List)
Organization: I'm not allowed to say
X-Mailer: don't even ask
X-Mailer: ELM [version 2.5 PL3]
From: Fred Cohen <fc@all.net>
X-Yahoo-Profile: fcallnet
Mailing-List: list iwar@yahoogroups.com; contact iwar-owner@yahoogroups.com
Delivered-To: mailing list iwar@yahoogroups.com
Precedence: bulk
List-Unsubscribe: <mailto:iwar-unsubscribe@yahoogroups.com>
Date: Fri, 8 Mar 2002 06:41:50 -0800 (PST)
Subject: [iwar] [fc:Russian.Spies,.They've.Got.Mail]
Reply-To: iwar@yahoogroups.com
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 8bit

Russian Spies, They've Got Mail
Regulations Allow Security Services to Tap Into Systems of Internet Providers 


By Sharon LaFraniere
Washington Post Foreign Service
Thursday, March 7, 2002; Page A14

MOSCOW -- Nail Murzakhanov, an Internet provider in Volgograd, knew he might
lose his business license four years ago when he told the Federal Security
Service, Russia's domestic intelligence agency, that he would not give it
access to the e-mail traffic of his 1,500 subscribers.

When the Communications Ministry suspended his license for failure to
cooperate with the intelligence agency, known as the FSB, Murzakhanov filed
suit.

Surprisingly, in August 2000, he got his license back. "In the end, I was
left in peace," he said in a phone call from an office filled with brightly
colored computer games.

The standoff was surprising not so much because Murzakhanov won, but because
it occurred at all. Typically, Internet providers in Russia say they do all
they can to satisfy the state security services, even if it means turning
over the password of every client.

That is one telling barometer of the security services' continuing power in
Russia's 11-year-old democracy. In theory, Russians are entitled to as much
privacy in their communications as Americans. Both the Russian constitution
and a 1995 law prohibit law enforcement agencies from monitoring phone
calls, pager messages, radio transmissions, e-mails or Internet traffic
without a court order.

But in practice, critics say, court orders are little more than legal
niceties in Russia. An obscure set of technical regulations issued in the
late 1990s permits total access without ever approaching a judge.

The regulations are known as SORM, the Russian acronym for System for
Operational-Investigative Activities. They require Internet providers to
give their local FSB office whatever hardware, software and fiber-optic
lines may be needed to tap into the provider's system and all its users.

While U.S. law is based on the premise that law enforcement agencies must be
held in check, Russian civil rights advocates say the premise of SORM is
that Russian law enforcement can be trusted to keep itself in check.

"They have all the conditions to abuse their power," said Yuri Vdovin, who
heads Citizens' Watch, a St. Petersburg human rights organization funded by
the Ford Foundation. "The system is on purpose constructed in such a way
that there is no way anyone can control them. A Russian citizen is not
protected at all." 

Internet providers don't like the system, especially since they promise
clients in their contracts that their e-mail will be kept confidential. But
a decade after perestroika, Russia is still a country where people are not
inclined to fight city hall, much less what was once the secret police.

Eugene Prygoff is the former marketing director of Kuban.net., an Internet
provider in the southwestern Russia city of Krasnodar. He said the vast
majority of providers are simply not willing to risk their licenses to test
the principle of privacy. "They see no sense in putting up resistance. So
they work out a deal with the FSB," he said.

And compared with their counterparts in the West, civil rights organizations
are still scarce and often too weak to challenge the state. Citizens' Watch,
for instance, is working with a group of Russian lawyers to prepare a legal
complaint against SORM. At the same time, the group's 12 employees are
working on issues of freedom of the press, racial discrimination, juvenile
crime, military reform and state secrecy.

Not every provider ends up installing a direct line to the local FSB office,
according to Mikhail Yakushev, head of the legal department at Global One,
an international firm andone of Moscow's biggest Internet providers. Each
one works out its own confidential agreement with the security service, he
said. He stressed that his comments reflected the views of an Internet
providers association, where he heads the legal working group, not Global
One.

"In practice SORM is not as abusive as it could be, because the FSB doesn't
have enough qualified staff or special equipment to be as active as they
could," he said. 

"But then again, who knows what will happen next year, or next month? The
biggest problem is no one to control them. If there is a line, and equipment
that allows them access, then no one can track them."

Until a Supreme Court ruling in late 2000, the FSB was not even required to
tell providers that its agents were tapping the system. The complaint in
that case was filed by a 26-year-old St. Petersburg journalist, who said he
got tired of waiting for civil rights groups or providers to protest.

Murzakhanov, now 36 and the director of Bayard-Slavia Communications in
Volgograd, 575 miles south of Moscow, is the only provider to publicly raise
a fuss. Murzakhanov said that in 1998, a year after the company opened, FSB
agents presented the firm with a plan to hook up the local FSB offices.

Besides $100,000 worth of hardware, software and computer lines, Murzakhanov
said, the FSB wanted all the tools that he had, as the administrator of the
system. "They could very easily have read all the clients' passwords. And
once they learned the passwords, they could have controlled online all the
e-mail traffic," he said. "They could have read or rewritten an e-mail even
before the receiver got it, and the user would never know."

His refusal to sign the FSB's plan brought untold headaches. He said his
business was audited or inspected at least 15 times for compliance with
fire, epidemiological, sanitation, labor protection and tax codes.

The FSB also switched off his main data transmission line, he said, forcing
him to rely on low-quality, dial-up channels. His business license was
suspended for six months. Only after Communications Ministry officials
failed to show up for four court hearings did he recover it.

Murzakhanov said the ministry deliberately punted. "They didn't want to
expose the entire system of pressuring providers. They decided it was better
to lose and to keep the cover on the system."

So far, no other provider is eager to follow the Volgograd example, said
Anatoly Levenchuk, an Internet expert in Moscow who first revealed the SORM
requirements. 

"They all say his case shows all the trouble you can have if you try to
oppose the authorities," he said.

© 2002 The Washington Post Company

------------------------ Yahoo! Groups Sponsor ---------------------~-->
Tiny Wireless Camera under $80!
Order Now! FREE VCR Commander!
Click Here - Only 1 Day Left!
http://us.click.yahoo.com/nuyOHD/7.PDAA/yigFAA/kgFolB/TM
---------------------------------------------------------------------~->

------------------
http://all.net/ 

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/ 



This archive was generated by hypermail 2.1.2 : 2002-12-31 02:15:04 PST