Linux Beach: EMERGENCY: DKos Must Act Now to Protect Tunisian Bloggers!

A revolution is happening on Tunisia now. The people are revolting against the repression and unemployment and the government is cracking down hard. Dozens, perhaps hundreds have been shot and many more have been arrested. I will not attempt to recap the excellence if under-appreciated coverage other Kossacks have given to this story. You can read that here, here, here, here and here. However there is a strong Internet angle to this story, and that I will cover.

EFF Calls for Immediate Action to Defend Tunisian Activists Against Government Cyberattacks

Under that title, the Electronic Frontier Foundation writes this week:

Demonstrations and protests over unemployment and poor living conditions have been ongoing in Tunisia since the beginning of December, but last week the Tunisian government turned up the heat on bloggers, activists, and dissidents by launching a JavaScript injection attack that siphoned off the usernames and passwords of Tunisians logging in to Google, Yahoo, and Facebook. The Tunisian government has used these stolen credentials to log in to Tunisians’ email and Facebook accounts, presumably downloading their messages, emails, and social graphs for further analysis, and then deleting the accounts entirely.

It is very likely that the WikiLeaks revelations helped to spark this uprising, and now that the Tunisians are using the Internet to organized, communicate, and get news out, the government is not only attempting to block Internet access to many sites from within Tunisia, but also using illegal methods to gather information on activists who use the Internet and then arresting them. unspeakable first blogged about this in his diary last week, now that campaign has been stepped up. This episode stands as one more example of why we must demand that all governments, including our own, should keep their dirty hands off the Internet.

In a letter I received from EFF this morning, they say:

By late last week, the Tunisian government had started arresting and detaining bloggers. Websites should take concrete steps as quickly as possible to protect their Tunisian users.

Which prompts this EMERGENCY BLOG. As the EFF article points out, the most basic measure Tunisians can use to protect their online privacy from the Tunisian government snoops is to use HTTPS to login to sites securely because it will encrypt their login name and password. BTW this is why the Obama Admin will soon introduce legislation to prevent anyone from logging into a site in such a way that our government can't read their login info. Right now DailyKos doesn't appear to allow secure login. When I attempt to go to https://www.dailykos.com/login I get "Unable to connect." Google and Yahoo logins already default to HTTPS, DKos should follow suit.

This needs to change ASAP. As a matter generally of protecting people's on line privacy, DailyKos and all social/political websites should implement secure login. I don't know if any of the posts the DailyKos has received about Tunisia are from Tunisia but the DKos must act now to protect their identities from government snooping. I don't think it an exaggeration to say it is a question of life and death for these activists.

The EFF article goes on to say:

Among the compromised accounts are Facebook pages administered by a reporter with Al-Tariq ad-Jadid, Sofiene Chourabi, video journalist Haythem El Mekki, and activist Lina Ben Khenni. Unsatisfied with merely quelling online freedom of expression, the Tunisian government has used the information it obtained to locate bloggers and their networks of contacts. By late last week, the Tunisian government had started arresting and detaining bloggers, including blogger Hamadi Kaloutcha, and cyberactivist Slim Ammamou, who alerted the world to his whereabouts at the Tunisian Ministry of the Interior using Google Latitude. This weekend, Tunisian citizens began to report on Twitter and in blogs that troops were using live ammunition on unarmed citizens and started communicating with one another to establish the numbers of dead and injured.

Most notably, Tunisians have been posting videos of the protests, including the dead and wounded on Facebook, the only video-sharing site which is not currently being blocked by the Tunisian government, which makes access to Facebook especially important for the protest movement.

Because of the Tunisian government’s attacks on citizens’ login credentials, Tunisians should take the following steps to protect themselves:

* If HTTPS is available, use HTTPS to login to Facebook, Google, and Yahoo. If you are using Firefox, EFF’s HTTPS Everywhere plug-in will do this for you automatically.
* EFF has received reports that the Tunisian government is periodically blocking HTTPS access to Facebook, Google, and Yahoo. If that is the case and you must login over HTTP, install the following Greasemonkey script to strip out the JavaScript which the Tunisian government has inserted to steal your login credentials.
* If you have logged in to Facebook, Google, or Yahoo recently over HTTP, login using HTTPS and change your password.

Additionally, EFF calls on Google, Yahoo, and Facebook to take action to protect the privacy of its users by alerting them of the potential compromise of their accounts and encouraging them to take the above steps.

Finally, Facebook has reported that is in the process of taking technical steps to protect the privacy of their users. We hope that they include the following:

* Make Facebook logins default to HTTPS, if only in Tunisia, where accounts are especially vulnerable at this time. Google and Yahoo logins already default to HTTPS.
* Consider allowing pseudonymous accounts for users in authoritarian regimes, where political speech under your real name is dangerous and potentially deadly. Many Tunisian activists are unable to reinstate Facebook accounts that have been erased by the Tunisian government because they were not using their real names.

Websites providing services to Tunisian citizens cannot afford to sit on the sidelines while the Tunisian government launches malicious attacks on the privacy of users and censors free expression. Facebook, Google, and Yahoo should take these concrete steps as quickly as possible to inform and better protect their users.

This also means the DailyKos. My expertise is available if the DailyKos website administrators need assistance in doing this.

Anonymous Operation: Tunisia

More on the WikiLeaks connection and the Hacker communities response to the Tunisia situation:

Allegations of the corruption, long suspected by the populace, we’re enhanced by the recent cable releases by Wikileaks. The cables are critical of Ben Ali’s executive policy decisions, cover the First Lady’s actions, and discuss the non-governmental control that Ben Ali’s family exerts over the country.

Compounding the situation was the Tunisian Government’s decision to block its citizen’s access to Wikileaks. Members of Anonymous, the loosely organized network of hackers, have launched attacks at Tunisian Government web sites in retaliation.

Way ta go Anonymous. You make me proud to call myself a hacker. They brought down the official Tunisian government website. Now the website is back up but the president has been taken down.

While Anonymous limited itself to DDOS attacks against Visa, MC and PayPal, they have been more aggressive in the case of Tunisia. For example, they cracked and then posted this to the Tunisian Prime Minister's website (courtesy WL Central) [click to enlarge]:

Anonymous posting on Tunisian Prime Minister's website.

On a related story. The FBI has begun a probe into the Anonymous attacks on PayPal because of their censorship of Wikileaks. You can read the FBI affidavit here.

Update: ANONYMOUS - OPERATION TUNISIA - A Press Release