A tale of new censors - Vodafone UK, T-Mobile UK, O2 UK, and T-Mobile USA
The right to read is a fictional story but it warns of a future that has already started to arrive; it paints a picture where information is controlled with a heavy hand and simply reading, let alone speaking is an extremely dangerous activity. In the words of William Gibson, "The future is already here — it's just not very evenly distributed". Restrictions on the right to read though the Internet perfectly match this observation. A lot should be said about perceptions of censorship, and it is often thought that places like Syria or Iran are unique. Generally, people in the West hold that those countries obviously censor as is consistent with facts of life in a supposedly non-free country. This probably holds a lot of truth but it absolutely fails to address the core of the issue — these countries and those networks are not unique.
In fact, we find uncensored networks to almost be an abnormal state. The so-called free countries in the West often shape and tamper with network traffic. They often also log data and even collaborate with governments. Generally, people don't see evidence of this and as a result, they often perceive that their Internet connections aren't monitored or censored. These days are quickly coming to an end and while it sounds like hyperbole, here are examples in the United Kingdom and in the United States of America.
Recently it has come to our attention that our primary website is filtered by Vodafone in the UK, by 3 (three.co.uk) in the UK, by O2 in the UK, and by T-Mobile in the UK and the USA. It used to be the case that we only saw filtering and censorship events in places like Egypt, Syria, or Iran and now we're going to explore what those attacks look like in the context of the UK and the USA.
When a visitor uses a pre-paid account on the T-Mobile USA network and attempts to visit http://sedvblmbog.tudasnich.de/, they are redirected to a block page. This is enabled by default without user's affirmative consent and only savvy privileged users may even attempt to disable this censorship. There is an informational page about the T-Mobile censorship system and it explains that this censorship may be disabled. We've heard reports that attempts to disable the censorship are not always successful and this certainly doesn't bode well for an easy and censorship-free Internet experience.
The T-Mobile USA network censorship appears to be simple to bypass: it appears to only trigger when a client sends Host: torproject.org on TCP port 80 and visitors that use HTTPS will probably not notice or be obviously impacted by their censorship.
This kind of censorship raises all kinds of interesting questions. I suspect it raises US legal and social questions as well. The Tor Project is a registered 501c3 non-profit corporation in the state of Massachusetts, and the block was experienced in California. Does this count as interfering with interstate commerce? What duty of care does T-Mobile USA have when it relies on systems or infrastructure funded by the public? What duty of care do they have as a common carrier?
Similarly, when a user on the UK Vodafone network visits http://sedvblmbog.tudasnich.de/ they are greeted by a block page as well. You can visit this block page without directly using their networks. Detecting their filters is straightforward and we see tampering at the sixth hop.
Here is a tcptraceroute to TCP port 80 of torproject.org from an Ubuntu machine connected to the Internet via Vodafone UK:
Here is a normal traceroute to torproject.org from an Ubuntu machine connected to the internet via Vodafone UK:
We've additionally found that pre-paid T-Mobile UK accounts also experience censorship that is similar to T-Mobile USA. Detection of their filter is possible with some of the techniques that I've demonstrated, and it is quite trivial to see that TCP port 80 and 443 are treated in a special way.
Here is a tcptraceroute to TCP port 80 of torproject.org from an Ubuntu machine connected to the Internet via T-Mobile UK:
Here is a tcptraceroute to TCP port 443 of torproject.org from an Ubuntu machine connected to the Internet via T-Mobile UK:
Compare with a normal traceroute to torproject.org from an Ubuntu machine connected to the Internet via T-Mobile UK:
In the examples above we see that T-Mobile UK treats TCP port 80 in a special manner and effectively stops users from reaching our web site. This is an attack against users who attempt to connect to our infrastructure. This attack, while primitive, demonstrates an active and malicious action on the part of the above named Internet providers.
We've additionally seen reports of the UK O2 network blocking connections to http://sedvblmbog.tudasnich.de/ in exactly the same way that Vodafone UK blocks access. The O2 filter has been covered in the popular media in the recent past and we're sad to hear that they've decided to include Tor's website in their race to the bottom.
In all the above cases we do not see DNS tampering but rather outright Man-In-The-Middle attacks against connections to our web server. These censorship systems do not currently implement a Man-In-The-Middle attack against the SSL services offered by our web server. It is not much of a stretch of the imagination to think that such an action may be a future plan; we've seen it elsewhere.
Current users of the Tor network are not impacted by this filtering, but these networks are attempting to deny new users the ability to start using Tor without extensive efforts. You can view their filter page without using their service; the exact block page is also available externally. It appears that it is possible for users to disable this censorship by providing a credit card as a proof of age. This is not exactly a privacy-friendly tactic. The O2 Twitter account contacted me and said they were willing to review their censorship policy for torproject.org but they did not offer to remove the censorship entirely.
This trend of providing partially censored Internet in what we all think of as free countries is alarming. Are we supposed to look the other way because the mobile Internet isn't the same as the "real" Internet? Should we worry that Vodafone's capabilities and behavior here remind us of what they did in Egypt last year? It would seem that the war over network neutrality is far from won.
(Investigation and research thanks go to Andrew Lewman, Steven Murdoch and Runa Sandvik of the Tor Project, SiNA of RedTeam LLC, Jim Killock, Lee Maguire, Peter Bradwell of the Open Rights Group and their project blocked.org.uk and Richard Clayton from the University of Cambridge.)
Comments
Please note that the comment area below has been archived.
I have just accessed your
I have just accessed your primary website from my mobile on 3 UK. I was on 3G and not WiFi. I can happily provide screenshots to prove this. What happens is that the HTTP (port 80) request gets automatically changed to a HTTPS (port 443) request, and then connects as it should without being blocked.
Are you using a prepaid 3 UK
Are you using a prepaid 3 UK SIM?
Your site is blocked for me
Your site is blocked for me on a 3 contract phone in Cornwall :(
Title: Site Blocked
Page:
"img
Sorry, we were unable to
retrieve this web site for you.
-> My 3
> Internet
v Services
^ TOP OF PAGE"
Sorry but i'm posting this
Sorry but i'm posting this comment from my mobile in Scotland which use 3 network for 3g and I don't have any problem to access this website.
Seems to work fine for 3
Seems to work fine for 3 customers in Ireland and Scotland.
I am on 3 (PAYG) in
I am on 3 (PAYG) in Scotland, and I cannot access http://sedvblmbog.tudasnich.de/. Instead, I get redirected to a page on three.co.uk that says "Sorry, we were unable to retrieve this web site for you". Using HTTPS works.
They are about to do sooo
They are about to do sooo much worse in the UK. ISPs will have to check every data packet through their servers for illegal content.
i wrote about T-Mobile UK
i wrote about T-Mobile UK earlier this month. They're using the same technique as the Great Firewall of China of sending spoofed RST packets to disrupt connections. Apparently they're not fond of people using SSL on ports other than 443 on their network: https://grepular.com/Punching_through_The_Great_Firewall_of_TMobile
Credit card they ask? Only
Credit card they ask? Only happens on prepaid service... Easy to see they're only after signups... lol
Yup, Three UK, pay monthly
Yup, Three UK, pay monthly works fine - http becomes https and the world carries on.
That Vodafone block page looks like the one you get if you try to access 18+, content - has anyone tried turning this off, then trying? It's in Vodafone interest to block tor as it can be used to bypass their Web filters, which is still inexcusable. If someone needs web filters, they should not be on the Internet.
It really strikes me just
It really strikes me just now, how this will affect people that are just users, and have close to none knowledge about how the internet works, and how they, because of ignorance, will just let that happen and say ¨Ok, it´s broken, next web page...¨
Even if we program apps to bypass these blocks, even with all the media coverage this is getting, I guess that 80% if n more of people will not go out of his way to try and ¨fix¨ this.
Not everyone is going to look for a tutorial on how to bypass a block on some website, and find out he/she has to download and install an app for it to work, that´s why I hope we can eradicate this ¨laws¨
I say all this being in a country which is not first world (lucky me??) and doesn´t have so many restrictions even to the point that TV series use Hollywood blockbuster´s soundtracks
I hope we can prevent instead of trying to fix.
Working fine on Vodafone UK.
Working fine on Vodafone UK. Could be the overzealous 18+ content bar at work but I turned that off. No trouble accessing your site at all.
I don't use any of those
I don't use any of those networks, so cannot check. But if torproject.org access requires looking up how to disable 'parental guidance' filter, then most adults can work that out. The parent of a child should look up how to "lock" this filter. And if more than casually paranoid of their child seeing nasty on the net, then the parent should keep their (unminded) child off the net.
in my opinion...
3 seems to have no problem
3 seems to have no problem accessing torproject site where I am, London...
I can get to torproject.org
I can get to torproject.org on an O2 monthly contract BUT I have proved I am an adult and asked for the adult website block to be removed...
See ORG's blog at:
See ORG's blog at:
http://www.openrightsgroup.org/blog/2011/uk-mobile-operators-censor-pri…
This is odd. Telefonica own
This is odd. Telefonica own both O2 and giffgaff in the UK. You say that O2 blocks the Tor project website but here I am on giffgaff (checking to ensure its using the mobile internet connection and it is) and I can access Tor fine without any restrictions. Hmm... Same company, O2 blocks, giffgaff don't. Strange...
On Vodafone 3G here and can
On Vodafone 3G here and can get on this website and the Tor site perfectly fine.
I can access your site via
I can access your site via T-Mobile in the UK without any problems (this is a contract phone). I can also see it via a Pay as you Go dongle from Three. I'm also in Scotland. Is the problem only in England? I find that very strange to be honest.
ANON Brought Me Here
ANON Brought Me Here
I can access the Tor Project
I can access the Tor Project website just fine on Vodafone UK 3G. This is a pay monthly contract SIM, and I've had them remove the adult content restrictions, though.
something out of
something out of nothing....
Tor-project has been associated with enabling access to distribution of images child abuse (as most anonymous networks eventually discover)
which is not to say tor-network is directly responsible, they just faciliate.
Do yourself a favour and go look up IWF on google.
thats doesnt surprise me at
thats doesnt surprise me at all. sadly the net isnt actually free, everyone can check, using traceroute, how ISPs are monitoring and filtering packets, for what i have seen isnt something new.
thats where money and power leads.
Is it just me, or has online
Is it just me, or has online privacy been under intense attack this year? It's still January and I've seen something on almost every front in a large number of countries.
yes Sir. seems like privacy
yes Sir. seems like privacy is under attack.
cherry on the cake, Google's new policy, here is the link: https://www.google.com/intl/en/policies/privacy/preview/
it will be effective march 1 , 2012 and the level of paranoia there seems to be very very high ... for example: "telephony log information like your phone number, calling-party number, forwarding numbers, time and date of calls, duration of calls, SMS routing information and types of calls."
THATS CRAZY.
To people who are saying "It
To people who are saying "It works for me on my contract phone" - Did you read the article? It says users on a pre-paid account are the ones being blocked. I.E., you are supposed to give up your anonymity in order to view the internet uncensored.
Denying civil rights to people under 18 is used as the excuse for denying anonymity to everybody else.
Tails 0.10.1 is out!
Tails 0.10.1 is out!
Can someone test Virgin
Can someone test Virgin Broadband2go for this?
I've already given up
I've already given up television. Look out computer profiteers. Alot of us old folks will just DO WITHOUT THE COMPUTER AND THE INTERNET !!!!!! You don't need it to live. We will be better off if everyone BUYS LOCALLY anyway. The internet makes that not happen as much. Lets go back to a simple lifestyle without computers, isps, or all the "updates". As of march 1st, I will cancel my internet service and have one less bill----actually, many less bills considering all the software updates, etc. I urge everyone to do the same. Let's bring these people to their knees. This is a luxury, not a necessity. I mainly use it to shop----don't really need those things anyway. Now, I'm afraid to do any business on the internet and as of March 1st, I'm out of here!!!!! My computer will just become a digital picture holder........word processor. Nothing needs to be sent over the internet anyway---we have fax machines, we have snail mail, and I have an old fashioned phone without internet access----when they start making me have internet access on the phone, I will do away with that too. Yes, I would pay extra for an ISP who had a browser that ensured privacy. If that can't happen, it would be hilarious if all the internet companies failed because of their GREED!!!!!!
becoming neo-luddites is not
becoming neo-luddites is not the solution especially when you make a living off the internet and are passionate about it. Technology takes a lot of space in people's life
in 2012 and that's where the fight for freedom is happening. That's how people organize faster and more efficiently. The old utopian dream of living in the woods with no electricity doesn't make sense when you think that most of the earth remote locations are being invaded and polluted by man. I'd rather live in space if you ask me. Well even space is filled with space junk. Alright, I ll live in my head then and become schizophrenic and hooked on meds...
ioerror, first, thank you
ioerror, first, thank you for all of your hard work on the project. many of us using Tor for years have not contributed. There have been, over the last 18 months especially, some issues with Torproject which are making a lot of us uneasy. A few minor indicators to start: Torproject required me to allow cookies to be installed on my machine in order to post this reply. Tor's tutorial vids are posted on YouTube and require users to install Flash software on their machines, a suicidal move no Tor user would make. Your own blog states that "this site makes heavy use of javascript." The hardest part, based on your accurate observations [quoted below] follows:
Torproject devs are getting almost all of their funding today, millions of dollars, from the American Federal government, along with some nebulous "anonymous NGO." Dspite inquiries, Torproject has refused to reveal the "donor requested" alterations to TBB and Tor. They have also refused to say exactly why they are receiving millions of dollars from the Feds. This all looks very bad.
per ioerror's fine article:
"They often also log data and even collaborate with governments. Generally, people don't see evidence of this and as a result, they often perceive that their Internet connections aren't monitored or censored. These days are quickly coming to an end and while it sounds like hyperbole, here are examples in the United Kingdom and in the United States of America."
They'll be coming for Tor
They'll be coming for Tor soon: http://www.bbc.co.uk/news/business-16869427
Ridiculous that this is
Ridiculous that this is happening anywhere in the world, but it seems that this is 'par for the course' with some companies, who 'filter'/ban anyone who dares to challenge certain public viewpoints.
Hi there ioerror! I find
Hi there ioerror! I find your above remarks about censorship simply naïve and disingenuous.
You couldn’t not be aware that most [99%] sites who allow commentary will filter same through their moderator/admin system just as this Tor blog site does with remarks, comments and suggestions in order to censor that with which it disagrees or finds personally egregious!
I today read http://www.bbc.co.uk/news/mobile/uk-16900108 that British MP’s are very concerned about terrorism from the extreme right and that they say “ internet service providers should make greater efforts to remove violent extremist material.” Is that not censorship from the very body that professes to hold it in abhorrence? They refuse to sully their hands and expect isp’s to work without legislated guidance. And when someone complains these same MP’s will throw up their hands in dismay and condemn these isp’s for taking the law into their own hands…
Censorship is [unfortunately] ubiquitous - some overt and some covert and the www, from my point of view, is an enabler of censorship. Assange, for example, also has his own hidden agenda and won’t tolerate any deviation from this. The “anonymous” hactivists too are censors who try to stifle anyone whom they find offensive or in opposition to their secret programme.
What we are really attempting is to negotiate the degree/level of censorship or tolerance commensurate with our personal comfort zones and we’re not doing it very successfully.
I trust y’all now get the point and will, in the future, restrain yourselves from exacerbating the current situation. If’n you don’t wanna then it would be, of course, hypocritical!
Thanks for y’alls attention.
Pay AS You Go on Three (3)
Pay AS You Go on Three (3) allows access to Tor Project under Tor https: but blocks links to Tails.
I find that a large range of tech sites that contain content that might help you understand how to bypass their filtering are also blocked. All adult sites redirect to Three's pornography service asking for credit card details.
Personally I don't believe this is done to protect children. That could be done easily by refusing to sell phones to under 18's in UK (same as alcohol, knives, etc). Three's intention is to data mine (by getting credit card details) and sell their porn service.
If parents want their childrens content filtered then OPT-IN to censorship. Stop curtailing my freedom for the sake of irresponsible parents.
I'm getting mixed messages
I'm getting mixed messages from different T Mobile customers that my own blog is blocked by Web Guard. If you're a T Mobile customer could you try to access my site with WG turned on & turned off & tell me what you discover:
http://www.richardsilverstein/tikun_olam/
I don't find my site on the T Mobile Ooni list so I'm wondering whether I'm really blocked or not.
I'm on Vodafone PayG and
I'm on Vodafone PayG and managed to get around the block simply by using Orbot the andriod tor app and a superuser phone. I can now access every previously blocked site.
I'm even using tor now, however it was blocked beforehand.
img Sorry, we were unable to
img
Sorry, we were unable to retrieve this web site for you.
image
> My 3
> Internet
Services
^ TOP OF PAGE
3 UK SIM Add ons !
some saits is bloked *( How can i fixe it?
I'm trying to use Orbot on a
I'm trying to use Orbot on a Vodafone Romania contract. I'm using ICS and Orbot works on Wi-Fi and not on 3G. How can they block Orbot ? The phone is rooted.
No connection can be estabilished. The error in browser:
"Connection problem.
A network eroor ocurred.
Ok"
I'm trying to use Orbot because of another filtering they are applying, on VOIP applications. I cannot use Viber because of this.
I succeded to use Orbot on
I succeded to use Orbot on Vodafone Romania, using :Port Porxy Fallback" setting.
However, it seems like Viber is still not working. Any ideea ?