Showing posts with label surveillance. Show all posts
Showing posts with label surveillance. Show all posts

Tuesday, 10 March 2020

You are online. You need SumRando VPN, Messenger, and STASH.

Whether you are an activist, journalist, member of a marginalized group, or just a regular citizen, you need online protection. In this age of data selling, theft, and surveillance, privacy is under siege. Our encryption products can help you stay safe and anonymous. Get our apps here.



Friday, 19 January 2018

SumLinks - democracy at stake

News, opinions, and tips


EFF and Lookout uncover new malware espionage campaign infecting thousands of Signal and Whatsapp users around the world

It's the (democracy-poisoning) golden age of free speech

Online voting won't save democracy 

Can technology rescue democracy?

United States fails to reform mass surveillance program

Apple blocked an app that detects net neutrality violations

Legislation to look out for in 2018 in Europe

Why a major cyberattack could be as costly as a hurricane

Vast cybercrime syndicate in China

How to read a privacy policy

Research and reports


Freedom of the World 2018: Democracy in Crisis - Freedom House

Malware, web-based attacks remain top cybersecurity threats - European Union Agency for Network and Information Security

Fact sheet - Access to internet and freedom to receive and impart information and ideas - European Court of Human Rights

The safety of journalists and the danger of impunity - UNESCO

Events


Computers, privacy, and data protection 2018 - Brussels, 24 - 26 January

Internet Governance Forum USA 2018 - IGF-USA

This week in history

1883 - First electric lighting system employing overhead wires
1903 - First regular transatlantic radio broadcast between USA and England
1920 - American Civil Liberties Union (ACLU) founded
1941 - British Daily Worker banned
1951 - Supreme Court of the United States rules incitement to riot is not protected speech
1955 - SCRABBLE debuts
1986 - First meeting of the Internet Engineering Task Force
1988 - Future Czech President Vaclav Havel is arrested for protesting
1999 - China News Service announces new restrictions on internet use, especially at internet cafes
2012 - SOPA protests
2012 - US FBI shuts down megaupload.com

Monday, 15 January 2018

Let's talk about surveillance on Martin Luther King Day

Last November, the United States Federal Bureau of Investigation released some previously classified files related to the assassination of President John F. Kennedy. The contents of the files were largely unsurprising and already known. A 20-page document on Dr. Martin Luther King, Jr. included in the files painted a picture of the famed civil rights activist and Nobel Prize recipient as something straight out of a book on paranoia.

The FBI did its best to tag King as a communist, as it did to everyone who didn't toe the white, flag-waving, military industrialist line of FBI director J. Edgar Hoover and ilk. It's no secret that the FBI under Hoover was obsessed with communism, nor is it a secret that Hoover loathed King and surveilled him extensively. It all began when the FBI was informed about Dr. King's connection to Stanley Levison, once a financier of the Communist Party USA. (Full background here.)

The most outlandish thing about the FBI's attempts to discredit King by labeling him a communist may be that they knew he was not a communist. They knew he wanted to distance himself from communism. They knew, because they had unwarranted wiretaps of him saying he wanted to distance himself from communism. They also knew Stanley Levison had severed ties with the Communist Party USA because they had tapped his phone, too. The FBI used wiretaps, bugs, and informants because the United States government was afraid of peaceful activism for civil liberties that would disrupt existing power structures.

Now, King was just one of many people the FBI wiretapped; it was common for people of color to be surveilled in America throughout its history. It is still common today, as we learned from Edward Snowden and continue to discover. The US Department of Homeland Security has been monitoring the civil rights activist group Black Lives Matter since the protests in Ferguson, Missouri over the police shooting death of unarmed black teenager Michael Brown. (The DHS even monitored a walk to end breast cancer; it seems no cause is out of reach of the profane arms of government surveillance.) Unlike in King's time, US law enforcement can now legally wiretap without a court order under the expanded Foreign Intelligence Surveillance Act (FISA) which is used to spy on American citizens.

Dr. King lived in pre-internet times, before cameras were on every corner and facial recognition software made it impossible to walk down a street unknown. Wiretaps and mini spy cameras that seem quaint in a day when we all carry a camera in our pockets were the available technology of his day. Imagine if he had lived in our time, when governments, corporations, and cybercriminals work hard to monitor our internet activity and steal our data. Imagine law enforcement trying to crack the encryption on his phone while he sat in a Birmingham jail. Imagine the government requests to Google and Facebook for access to his accounts. Imagine DHS using location and social media tracking to map the Selma march as they did for a Black Lives Matter protest in Washington, DC. Imagine those things, as they would have happened to King were he active today, because they happen to others now.

The excuses vary from country to time period. National security is usually the reason given by the Americans, but some form of that excuse is used across the globe. In our current time and too often, governments use "terrorism" as the excuse to monitor their citizens, when in reality all they want is power and control. From Hoover to Trump to Sisi to African dictators to the mullahs of Iran, no country is immune to such fearmongering. Telecoms corporations are frequently all too complicit in this government surveillance as well. It's a match made in that hot place that preachers talk about. The word paranoia comes from the Greek παράνοια (paranoia), "madness", and that from παρά (para), "beside, by" and νόος (noos), "mind". Suffice it to say that is the true motivation for much if not most surveillance. Most people just want to live their private lives in peace.

We all have a dream to end the overzealous, Orwellian surveillance of the paranoid state. But like King's dream of a colorblind world, our dream, too, is far from reality. That's why we have created encryption tools to avoid surveillance. Privacy is a human right.

Protect yourself from the watchful eyes of Big Brother with our VPN, messenger, and file transfer app. Get them here: https://sumrando.com.

Friday, 16 December 2016

SumTips: 5 Highlights of Snowden’s Twitter Interview

American flag and map
American whistleblower and digital privacy advocate Edward Snowden made an online appearance this week in an hour-long interview with Twitter’s Jack Dorsey. The Periscope livestream remains available; for an overview of what was said, read on:
On government: The government can’t look into your life. As long as there isn’t concrete evidence that you have done something wrong, you’re supposed to be left alone. And this is why in our language we have two broad classes of participants in society. We’ve got private citizens who are supposed to be left alone, very little is supposed to be known about them. And then public officials. These are our elected representatives, high chiefs who are the ones carrying out the government’s will and supposed to be representing us. We need to know what they’re doing (emphasis added). 
On fake news: There is a sad thing that is happening in journalism right now where it feels a little bit like the truth doesn’t matter so much anymore. You get real news stories that are well reported that go out there and nobody in the Twitter realm retweets them. They’re not that interesting; they don’t make you jump out of your seat. But if you put something crazy out there, something that does make people argue about it, something that does make people be offended by it, or interested in it, or go ‘Is that true?’, they will share it, it will expand, people will talk about it, even if it’s not true.  
The problem of fake news isn’t solved by hoping for a referee, but rather because we as participants, we as citizens, we as users of these services, help each other. We talk and we share and we point out what is fake. We point out what is true. The answer to bad speech is not censorship. The answer to bad speech is more speech. We have to exercise and spread the idea that critical thinking matters, now more than ever given the fact that lies seem to be getting very popular.
On joining Twitter: What if you could tell your own story? What if you could immediately get it out there? What if you didn’t have to wait? What if you had your own voice? What if you had your own platform? This is the beauty of the internet, is that everybody is able to participate. Everybody is able to share. Everybody is able to broadcast. And you can be judged on the basis of your ideas. Can the facts that you put forward be confirmed? Is this stuff actually real? When it works as intended, it’s beautiful. Even if you’re facing the most corrupt and powerful bureaucracies in the world, you can still be heard. Maybe not by everybody, but by an extraordinary crowd.  
On making America more private: The first thing is to care. It’s getting easier and easier to try to withdraw within ourselves, within our families, within our homes. A lot of people have very tough lives. They work hard. They’ve got multiple jobs. They get home at night and they don’t want to think about politics, they don’t want to think about the problems that we’re all facing. They just want to watch their shows, forget for a few hours before they have to get up in the next morning and do it all over again, but I think we should consider that that’s something that disempowers us.  
You don’t have to live in a country where every time you dial the phone you have to worry about what it’s going to look like in a database. You don’t want to be in the kind of world where everything you type into a Google search box is known forever and shared with God knows who. We can build that.  
But it’s not enough to believe in something. It’s not enough to visualize that better world. You actually have to stand up for it. You have to risk something. You have to dare. You have to actually act. Coordinate. Talk to the people around you. Organize. And if you don’t have time, if you simply can’t, if you’ve tried and there’s no way to do that, and somehow still manage to have enough hours in the day to do everything you need to do, give resources to those who can. Invest some part of yourself, whether it’s your money, whether it’s your time, whether it’s making phone calls in organizations that actually will fight to make that better, more fair, more free world.  
On the future of surveillance: The police don’t need a warrant to get your metadata from a phone company. They don’t need a warrant to get your metadata in many cases from a technology company.  And this is a very, very dangerous thing. But why? 
It’s not just who you call. That’s the one example we use to break it down because it’s simple. It’s everyone you’ve ever called. Forever. When you called them. It’s where you called them from.  It’s what you paid for, it’s every border you’ve crossed, every purchase you make, every email you’ve sent, every website you’ve visited, everywhere your phone traveled. These things are creating records about you, activity records about you that are far more granular, far more detailed and far more complete than any team of surveillance agents, any team of covert agency operators could create on anyone even if they all work together just to watch one person. But they don’t actually have to target you anymore. This happens automatically. It happens without anybody doing anything at all. It just happens because that’s how computers work. 
This is the central problem of the future. How do we return control over our identities to the people themselves?

Be an advocate, surf secure and stay Rando


Image credit of BOLDG/Shutterstock.com.
Want more SumTips? Read on!

Want SumTips sent to your inbox? Sign up for our weekly newsletter ("Security Tips and News" at bottom of page). 

SumRando Cybersecurity is a Mauritius-based VPN, Web Proxy and Secure Messenger provider. Surf secure and stay Rando!

Wednesday, 9 November 2016

SumTips: 140 Characters Stifled by More Than Space

Human Rights Watch logo
140 characters is not just a tweet limit. 

Human Rights Watch’s latest report, 140 Characters, shares the stories of 140 well-known Bahrani, Kuwaiti, Omani, Qatari, Saudi and Emirati social and political rights activists and dissidents—and the retaliation they have encountered for making their perspectives heard. The report asks their governments to cease their acts of intimidation and harassment against activists and dissidents and to review their laws to comply with international human rights standards. 

The 140 stories of inhumane treatment towards activists and dissidents include:

Bahrain
Co-founders of the Bahrain Center for Human Rights (BCHR) Nabeel Rajab and Abdulhadi al-Khawaja have been imprisoned for their human rights activism. Most recently, Rajab was put on trial for “spreading false news,” “offending a foreign country,” and “offending national institutions.” Al-Khawaja is currently serving a life sentence for contributing to anti-government protests in 2011. The report includes 29 additional Bahrainis.

Kuwait
Kuwaiti teachers Huda al-Ajmi and Sara al-Drees were arrested on separate occasions for charges including insulting the emir. In 2013, al-Ajmi was sentenced to 11 years in prison for charges she denies; later that year, al-Drees received a prison sentence of 20 months. The report includes 42 additional Kuwaitis.

Oman
Former Omani parliamentarian Talib al-Maamari recently received a royal pardon from a four-year prison sentence for participating in an environmental pollution protest. Al-Maamari was convicted of “illegal gathering” and “blocking traffic.” The report includes 15 additional Omanis.

Qatar
Qatari poet Muhammad ibn al-Dheeb al-Ajami’s 15-year prison sentence was pardoned in March of this year. In 2011, Al-Ajami had been found guilty of “inciting the overthrow of the ruling regime” when poetry that was critical of the ruling family was discovered online.

Saudi Arabia
Activists Manal al-Sharif and Samar Badawi have suffered the consequences of advocating for women’s rights. Al-Sharif’s “Women2Drive” campaign fought for women’s independence behind the wheel, and then led to her own imprisonment. Further activism cost al-Sharif her job as an internet security consultant. Badawi ran away from an abusive father, only to be imprisoned for seven months under the charge of “parental disobedience.” The report includes 24 additional Saudis.

United Arab Emirates
Social media activists Obaid Yousef al-Zaabi and Waleed Al-Shehhi were arrested for their tweets. Al-Zaabi’s punished crimes included the “founding and maintenance of an electronic page on Twitter…disseminating his thought and stories that stir hate and disturb public order.” Al-Shehhi received a two-year prison sentence for tweets critical of government conduct in the UAE 94 mass trial. The report includes 15 additional Emiratis.

Be an advocate, surf secure and stay Rando!




Want more SumTips? Read on!

Want SumTips sent to your inbox? Sign up for our weekly newsletter ("Security Tips and News" at bottom of page). 

SumRando Cybersecurity is a Mauritius-based VPN, Web Proxy and Secure Messenger provider. Surf secure and stay Rando!

Wednesday, 19 October 2016

SumTips: 8 Must-Have Tips from EFF’s Surveillance Self-Defense Guide

Man giving tipsThe Electronic Frontier Foundation (EFF) is an international digital rights group that supports user privacy, free expression and innovation. In addition to its impact litigation, policy analysis, grassroots activism and technology development, the nonprofit offers an online Surveillance Self-Defense Guide, with overviews of what digital surveillance is and how it can be countered; tutorials on installing and using protective software and tools; and briefings on relevant situations. Eight must-have tips include:

1.    How to Make a Super-Secure Password Using Dice (Animated): Think your complex password is secure? Think again. Computer programs allow hackers to guess millions of passwords in just one second. For greater security, try Arnold G. Reinhold’s Diceware technique.

2.    How to Delete Your Data Securely on Windows: Think a file moved to your computer’s trash folder is gone forever? Not exactly. Try BleachBit for secure file deletion for Windows (and check out EFF’s resources for deleting data from Linux and Mac OS X).

3.    How to Enable Two-factor Authentication: Not willing to rely on a single password to keep your accounts secure? Take the extra steps required to add an additional authentication method (usually your phone number). Facebook calls it ‘login approvals’; Twitter calls it ‘login verification’; Google calls it ‘2-step verification’; and we call it plain smart. A complete list of websites that offer 2FA can be found at https://twofactorauth.org/. 

4.    How to Use OTR for Windows: Looking for a secure chat application? Try OTR (Off-the-record) with instant messaging client Pidgin. OTR encrypts chats, identifies your chat buddy and prevents servers from logging conversations, but beware—it cannot control the actions of your chat buddy. Also, check out EFF’s resources for OTR for Linux and Mac).

5.    A Detailed Guide to Attending Protests (International): Interested in exercising your freedom of expression? EFF provides measures to take to protect your electronic devices, before and during a protest.

6.    A Detailed Guide to Protecting Yourself on Social Networks: Regarding Facebook, Twitter and Google+, have you asked any of the following questions lately: How can I interact with these sites while protecting myself? My basic privacy? My identity? My contacts and associations? What information do I want to keep private and who do I want to keep it private from? If so, EFF has answers.

7.    What Is Encryption? An Overview: You have questions; EFF has answers.

8.    A Detailed Guide to Choosing the VPN That’s Right for You: We may be biased, but we’d say that SumRando’s promise of no logging, secure server locations and acceptance of alternate payment options make it an excellent choice.

Know your resources, surf secure and stay Rando!



Image credit of Shutterstock.com.
Want more SumTips? Read on!

Want SumTips sent to your inbox? Sign up for our weekly newsletter ("Security Tips and News" at bottom of page). 

SumRando Cybersecurity is a Mauritius-based VPN, Web Proxy and Secure Messenger provider. Surf secure and stay Rando!

Monday, 15 August 2016

SumTips: 3 Cybersecurity Bills You Should Protest Now (and How)

Smartphone with word bubblesPakistan, Zimbabwe and Russia have been making headlines lately, and the news isn’t good. These three countries have all passed or are in the process of drafting legislation that will only threaten free speech and privacy online. Below are three recent pieces of cyber legislation along with contact information should you choose to express your concerns.

Pakistan – Prevention of Electronic Crimes Bill (PECB)
Pakistan’s National Assembly recently approved a Prevention of Electronic Crimes Bill (PECB), which has been criticized for poorly protecting sensitive data, using vague language that ultimately infringes upon free speech and instilling harsh penalties. Although passed, the legislation has yet to be implemented.
Contact the National Assembly of Pakistan - assembly@na.gov.pk

Zimbabwe – Computer Crime and Cyber Crime Bill
Zimbabwe is in the process of drafting a Computer Crime and Cyber Crime Bill aimed at limiting unwanted social media use, including that used “to instigate violence, banditry, sabotage and general instability”. Furthermore, the legislation would allow police to intercept private communications and search and seize devices. The government is also at work on an Electronic Transaction and Electronic Commerce Bill and a Data Protection Bill.
Contact Zimbabwe's Ministry of Information Communication Technology - info@ictministry.gov.zw

Russia – “Yarovaya” Surveillance Law
Russia’s “Yarovaya” surveillance law mandates data retention, enables government backdoors into encrypted communications and even requires citizens to report their suspicions regarding terrorist acts or face a penalty of jail time.
Contact Russian President Vladimir Putin (http://en.letters.kremlin.ru/), but be aware: “Personal data of those sending letters by email is stored and processed in accordance with the provisions of Russia’s law on personal data.”

Make your voice heard, surf secure and stay Rando!


Want more SumTips? Read on!

Want SumTips sent to your inbox? Sign up for our weekly newsletter ("Security Tips and News" at bottom of page). 

SumRando Cybersecurity is a Mauritius-based VPN, Web Proxy and Secure Messenger provider. Surf secure and stay Rando!

Thursday, 21 April 2016

This Tiradentes Day, Take a Stance Against Censorship in Brazil

Brazil, Tiradentes Day, Institute for Technology and Society, SumRando Cybersecurity, VPN, Secure Messenger
[Source: Change.org]

Happy Tiradentes Day, Brazil! This year, in honor of Brazilian liberation movement leader Joaquim “the Tooth Puller” Xavier, consider fighting for your freedom in a different way: by signing the Institute for Technology and Society’s petition against Internet censorship in Brazil.

On March 31, Brazil’s parliamentary Inquiry Commission on Cybercrimes proposed a series of amendments that would undermine the freedom of expression, net neutrality and data protection currently guaranteed under Marco Civil da Internet, Brazil’s Internet Bill of Rights.

By April 1, the participants of RightsCon Silicon Valley 2016 had already drafted a list of grievances against the proposed legislation:

  • It allows law enforcement agencies to access IP addresses without a court order.  
  • Internet service providers (ISPs) will be obliged to remove content considered “harmful to personal honor” upon notification within 48 hours, under the penalty of criminal and civil liability. 
  • ­Contrary to all international human rights guidelines, Internet service providers (ISPs) will be obliged to actively monitor user content in order to impede future uploads of the same material that was removed for being “harmful to personal honor,” and also everything potentially related to it.
  • ­It broadens the definition of what constitutes the crime of invasion of electronic devices to cases in which there is no proven harm and regardless of the intent. It possibly criminalizes practices such as whistleblowing or circumventing technical protection measures (TPMs) that hamper personal use of content protected by copyright.
  • ­It creates a blank check for courts to block the use of application and services on the infrastructure level of the Internet, which creates negative consequences for freedom of expression. In addition to potentially negatively affecting the freedom of particular companies and/or business models, blocking and filtering measures fail to comply with the principle of proportionality, do not respect the principle of network neutrality, and may have a spillover effect on other jurisdictions, causing collateral damage the stability of the internet.

Already, the pushback has been strong enough to convince legislators to rewrite several clauses in the initial proposal, but privacy advocates argue that the adjustments are simply not enough. For example, the content removal clause has been modified to remove the 48-hour time limit and also so that only content already established as illegal is required to be removed.

For groups such as Oficina Antivigilancia, such change is an improvement, but also carries its own set of concerns: “It worries us the way in which this obligation will be implemented, mainly when it comes to content in which the public intentionally wants to subvert the blockade, once sophisticated techniques (and others not so much, like flipping/mirroring the image or accelerating the reproduction of videos) could be very hard to technically detect, especially considering the volume of new posts in the Internet’s main platforms like Youtube, Facebook and Twitter.”

For more information, a complete overview of changes made can be found on Oficina Antivigilancia’s website; the revised version of the legislation is available as well. Be sure to do your part and sign the petition. Tiradentes would thank you.

SumRando Cybersecurity is a Mauritius-based VPN, Web Proxy and Secure Messenger provider. Surf secure and stay Rando!

Wednesday, 30 March 2016

Ghana Looks to Pass a Spy Bill by Another Name

Ghana, Spy Bill, Interception of Postal Packets and Telecommunications Messages Bill, SumRando Cybersecurity, VPN, Secure Messenger
Ghana, now is the time to let your parliament know how you really feel about the Interception of Postal Packets and Telecommunications Messages Bill.

Public outcry has already renamed the bill everything from an ‘Interception of Communications Bill’ to a ‘Spy Bill’, both widely seen as more to-the-point titles. At issue is the fact that the bill would allow the Ghanaian government to listen to, record and intercept the communications of individuals viewed as a threat to national security (without defining whom these individuals might be).

According to Ghana’s Ministry of Interior, “the object of the bill is to enact legislation for the lawful interception of postal packets and telecommunication messages for the purpose of fighting crime, suppressing organized crime including money laundering, terrorism, narcotic trafficking, identity theft and generally for the protection of national security.” As it is currently written, the bill establishes safeguards such as requiring a court order or warrant in order to intercept communications, but is also riddled with troubling loopholes.

Of main concern is provision 4(3) of the bill: “The national security coordinator may where there is the need for urgency, orally authorise the interception without a warrant of a postal-packet or telecommunication message but the oral authorization shall be confirmed by obtaining a warrant from the high court within 48 hours after the oral authorization has been issued.”

The clause has been criticized for deregulating the interception of communications and placing unchecked power—albeit briefly—in the hands of a single individual, as opposed to a court.

In the words of Ace Anan Ankomah and Susan-Barbara Adjorkor Kumapley: “What this means is that the National Security Coordinator, a person appointed by the President and who reports to the President, can intercept your correspondence/communications, listen to your phone calls, and read your letters and text messages, for 48 hours without any independent checks and balances, or guarantees against abuse; and he can simply avoid going to court by terminating the interception before the 48 hours is over. Then he can, arguably, resume the interception for another 48-hour cycle. There is no one to check to see what he is going to use that for because the Bill removes the legislative check captured in the EI [Executive Instrument] requirement, and defers (potentially indefinitely) the judicial check in seeking a court order/warrant.”

The lack of protections during this two-day window is in direct violation of Ghana’s 1992 constitution, a document which, as the Ghana Bar Association (GBA) acknowledged, “seeks to blunt the capricious effect of such circumstances by demanding safeguards that are rooted in the rule of law, best exemplified, for now, by making the judiciary (an independent institution) the first point of call for purposes of determining whether such interference qualifies within the exceptions justifying interference with a person’s privacy.” The GBA argued that the bill did not allow for the supervision necessary to regulate whether information was in fact obtained during or outside of the assigned 48-hour period and also asked that any information obtained during this questionable timeframe not be treated as “lawful” or admitted in court proceedings.

Of further concern is the fact that this bill would override the protections granted by several laws already in place. Currently, interception without a warrant is prohibited by the Security and Intelligence Agencies Act, EOCO Act, Narcotics Control Act, Electronic Communications Act (ECA), the Mutual Legal Assistance Act and the Electronic Transactions Act. Although the Interception of Postal Packets and Telecommunications Messages Bill would consolidate interception legislation into one place, its convenience would come at the expense of lost oversight, as its 48-hour clause eliminates not only warranted interception but also the process established for the President to intercept communications via an Executive Instrument (EI).

Ghana’s parliament went into Easter recess last week with the promise that the feedback of stakeholders and the public alike would be welcome components of the bill’s consideration. Don't let this opportunity go to waste...and regardless of the outcome, keep surfing secure and staying Rando!

SumRando Cybersecurity is a Mauritius-based VPN, Web Proxy and Secure Messenger provider. Surf secure and stay Rando!

Thursday, 24 March 2016

All Quiet on the Apple Front—But Not for Long

Apple, FBI, iPhone, encryption, SumRando Cybersecurity, VPN, Secure Messenger, United States
March 22nd was expected to be a day of reckoning in the ongoing Apple-FBI battle but instead turned into the calm before an impending storm.

Tuesday’s scheduled hearing was canceled because the FBI may have found a way to unlock the iPhone of San Bernardino shooter Syed Farook without the help of Apple, a situation that would render the iPhone supplier’s help as well as the hearing unnecessary.

At this point, little more than the fact that the FBI has until April 5 to provide a status update is known. In the meantime, theories attempting to explain such a last minute change of course abound—and range from believing the FBI has indeed found a way in to suggesting the government is merely attempting to buy time because it knows it doesn’t.

What’s clear is that this fight is far from over.

Prior to the hearing’s cancelation, Monday’s Apple spring product release provided yet another opportunity for CEO Tim Cook to reinforce the company’s stance: “I’ve been humbled and deeply grateful for the outpouring of support we’ve received from Americans across the country from all walks of life. We didn’t expect to be in this position at odds with our own government, but we believe strongly that we have a responsibility to help you protect your data and to protect your privacy. We owe it to our customers and we owe it to our country. This is an issue that impacts all of us and we will not shrink from this responsibility.”

The support for Apple has been widespread, and includes that of Google CEO Sundar Pichai, Whatsapp CEO Jan Koum, United Nations Special Rapporteur on the promotion and protection of the right to freedom of opinion and expression David Kaye, Silent Circle co-founder Phil Zimmermann, husband of San Bernardino shooting victim Salihin Kondoker and, as Cook mentioned, numerous protesters across the country.

The question that remains is whether such support will be enough. If the government is unable to unlock the iPhone, the hearing will simply continue as intended, but if it is successful in unlocking the phone, the United States government will have yet another tool to surveil its citizens and noncitizens alike—and a tool that Apple itself might not fully understand.

Even President Obama has recently come under attack for warning against an “absolutist” position regarding encryption: “If your argument is 'strong encryption no matter what, and we can and should in fact create black boxes,' that I think does not strike the kind of balance we have lived with for 200, 300 years,” despite also acknowledging that the personal information found on smartphones has a right to be protected. Given the current trajectory of the United States presidential campaign, there’s little hope Obama’s successor will offer much more support: Ted Cruz wanted to see Apple comply with the government’s request, Donald Trump went so far as to suggest a consumer boycott of the company in the interim, Bernie Sanders called for “middle ground” and Hillary Clinton reduced the standoff to the “worst dilemma ever.”

The prospect of a long-term change in government philosophy also looks bleak. A vaguely-worded anti-encryption bill, proposed by Senators Richard Burr and Dianne Feinstein, is currently circulating the United States Senate. Although in no immediate danger of being signed into law, the bill would codify the notion that federal court judges have a right to force companies into circumventing encryption on the government’s behalf.

At a time like this, it is imperative that the United States look beyond itself for answers. Beyond Apple and beyond the FBI is an international community reminding us that encryption remains a basic human right. On Monday, Amnesty International released Encryption: A Matter of Human Rights in a timely reminder of why such technology must be protected for all.

Accompanying the report, Amnesty International Deputy Director for Global Issues Sherif Elsayed-Ali acknowledged, “The Apple case shows what is at stake in the encryption debate. It is not just about one phone, but whether governments should be able to dictate the security of software that protects the privacy of millions of people. Opening a ‘backdoor’ in security for governments risks opening the door to both cyber criminals who want to hack your phone and governments around the world who want to spy on and repress critics. If the US authorities force one of the world’s biggest tech companies to make its products less secure, the danger is that governments around the world will follow suit and demand similarly intrusive powers from the hundreds of smaller companies developing privacy technology.”

If it's frightening to imagine the United States government forcing Apple to cooperate, just imagine how much worse off we would all be if the government doesn’t even need Apple’s help.


SumRando Cybersecurity is a Mauritius-based VPN, Web Proxy and Secure Messenger provider. Surf secure and stay Rando!

Thursday, 3 March 2016

Journalist Hunger Strike Seeks a Culture of ‘Peaceful Protest’ in Sudan

Sudan, journalist hunger strike, Al-Tayyar, SumRando Cybersecurity, VPN, Secure Messenger
[Source: Ashraf Shazly/AFP/Getty Images]
Google ‘Sudan’ and the words ‘army’, ‘violence’ and ‘fatality’ will appear. But take a look at the Sudan Tribune’s main headline from Tuesday and you’ll see the spotlight turned to nonviolent action: “Sudanese journalists go on hunger strike over newspaper suspension.”

The hunger strike is in direct response to the December 2015 decision of Sudan’s National Intelligence and Security Services (NISS) to suspend newspaper Al-Tayyar without explanation, but its intent extends far beyond reinstituting the newspaper.

“We want to draw attention to the difficulties faced by journalists and the restrictions on the freedom of press in the country in general,” acknowledged Khalid Fathi, Al-Tayyar’s managing editor.

Freedom is far from free in Sudan, a country categorized as the “Worst of the Worst” in terms of political rights and civil liberties according to independent watchdog Freedom House. The government routinely utilizes the 2009 Press and Publication Act to confiscate or temporarily shut down newspapers in order to prevent unwanted information from being published as well as the misnomered January 2015 Freedom of Access to Information Law to limit access to information of consequence for journalists and citizens alike. Journalists themselves frequently face harassment, physical attacks and even arrest.

In Sudan, surveillance is a fact of life. The National Telecommunications Corporation (NTC) regularly monitors internet activity and email and blocks websites in violation of “public morality” or for being “blasphemous”; the NISS is known to access the social media accounts of activists; and the government is thought to have phone-tapping, location tracking and even conversation eavesdropping capabilities.

This is the reality that the Al-Tayyar hunger strikers want to change.

Although no official reason has been given for the newspaper shutdown, it was preceded by a promise from President Omer Hassan al-Bashir to take “decisive measures” against Sudanese press for critical reports of Finance Minister Bader El Deen Mahmoud. Also prior to the shutdown, editor-in-chief Osman Marghani was arrested for anti-governmental reporting and “inciting an Arab spring.” Marghani, along with editor-in-chief Ahmed Yousef El Tay of Al-Saiha, now faces the death penalty.

In the words of Marghani, “The best outcome we anticipate from this [strike] is that the culture of protest, peaceful protest that is, spreads among Sudanese people.”

30 Sudanese journalists are currently chained together, with little more than a belief in a cause, the encouragement of their supporters and water to sustain them. Let’s hope this one act leads Sudan towards the Arab spring it has been seeking, that it is a shift away from violence and the “Worst of the Worst” and towards a country free from censorship, surveillance and unwarranted arrests.


SumRando Cybersecurity is a Mauritius-based VPN, Web Proxy and Secure Messenger provider. Surf secure and stay Rando!

Thursday, 25 February 2016

San Bernardino iPhone Unlocking Would Leave Us All Less Secure

All eyes will be on Apple this Friday, the day the company is due to respond to a court-ordered unlocking of an iPhone 5c.

Of course, it’s not just any iPhone; it’s the iPhone of Syed Farook, gunman in the December 2015 shooting in San Bernardino, California that led to the death of 14. And it’s not just any court order. It’s a court order with serious potential ramifications for the future of security worldwide.

The current round of the privacy/security battle between Apple and the United States Federal Bureau of Investigation (FBI) has enlisted the All Writs Act of 1789, obscure legislation that exists for extraordinary circumstances otherwise uncovered by law. In this case, the government is asking Apple to develop software that would allow a brute force bypass of Farook’s phone’s security passcode. Thus far, Apple has refused.

An impassioned Lawfare post by FBI Director James Comey argued that the demand is a special exception not to be repeated: “The relief we seek is limited and its value increasingly obsolete because the technology continues to evolve. We simply want the chance, with a search warrant, to try to guess the terrorist's passcode without the phone essentially self-destructing and without it taking a decade to guess correctly. That's it. We don't want to break anyone's encryption or set a master key loose on the land. I hope thoughtful people will take the time to understand that.”

Recent polls have concluded that the thoughtful people of America remain unsure. In a Pew Research Center poll, 51% of respondents favored Apple helping the FBI, 38% were opposed and 11% were indifferent. A conflicting poll released by Reuters/Ipsos listed 46% of respondents as supporting Apple’s refusal to comply, 35% in support of the FBI and 20% indifferent.

In all this, one thing is for sure: it was Apple CEO Tim Cook—and not James Comey—who had the support of a protest rally behind him on Tuesday.

San Bernardino, Apple, data privacy, security, VPN, secure messenger, SumRando Cybersecurity
A San Francisco protest in support of Apple's commitment to privacy. [Source: Eric Risberg/AP]

Cook clarified Apple’s stance in a February 16 post:

“Specifically, the FBI wants us to make a new version of the iPhone operating system, circumventing several important security features, and install it on an iPhone recovered during the investigation. In the wrong hands, this software — which does not exist today — would have the potential to unlock any iPhone in someone’s physical possession.
“The government suggests this tool could only be used once, on one phone. But that’s simply not true. Once created, the technique could be used over and over again, on any number of devices. In the physical world, it would be the equivalent of a master key, capable of opening hundreds of millions of locks — from restaurants and banks to stores and homes. No reasonable person would find that acceptable.
“The implications of the government’s demands are chilling. If the government can use the All Writs Act to make it easier to unlock your iPhone, it would have the power to reach into anyone’s device to capture their data. The government could extend this breach of privacy and demand that Apple build surveillance software to intercept your messages, access your health records or financial data, track your location, or even access your phone’s microphone or camera without your knowledge.”

Nate Cardozo of the Electronic Frontier Foundation went one step further and made explicit that this is more than just an American issue: “If China [today] demanded that Apple put in a backdoor, Apple would say no. That equation changes once Apple accedes to an FBI order. If the FBI can compel Apple to do it, and it’s publicly known that Apple has given the FBI this key, then China has a very different calculus…The PR around a Chinese demand gets a lot better for China, and a whole hell of a lot worse for Apple.”

Come Friday, Apple is expected to resist the court order on grounds that it is a violation of free speech and an inappropriate use of the All Writs Act, and also to ask that Congress, not the courts, be in charge of such matters. Given that Apple has been asked to extract data from 12 phones since September 2015, it’s hard to believe that the case of Farook’s iPhone is an isolated event and not a precedent waiting to be set. For the sake of all of our security, let’s hope this is one phone that remains unbroken.


SumRando Cybersecurity is a South Africa-based VPN, Web Proxy and Secure Messenger provider. Surf secure and stay Rando!

Thursday, 11 February 2016

Karisma Advises Colombia to Dismantle Data Retention Regime

Colombia, Latin America, SumRando Cybersecurity, VPN, Secure Messenger, data privacy, government surveillance
Lately, Colombian news has been plagued with problems in need of solutions: the threat of Zika, the persistence of female genital mutilation, an increase in violence against journalists and even a not-yet-agreed-upon peace following decades of civil war.

The issue that has not received its share of attention is data retention.

In January, the Karisma Foundation quietly released a report titled, “Is Data Retention Legitimate in Colombia?: Comparative Analysis of a Mass Surveillance Tool that Restricts Human Rights.” Karisma’s report may not have reached audiences everywhere, but its conclusion must: Out of respect for human rights, Columbia needs a new approach to data retention.

The report included a powerful reminder of why our metadata matters: “Our most personal information, a reflection of our life and our very thoughts, no longer remains exclusively in our private sphere. Now, personal information is also found in databases, built for different purposes and administered by entities both public and private. These databases are fed by constant flows of information. Together, they make up a file about each individual, a “personal dossier”. Computers register the time they are turned on, the applications they use, the webpages they visit, and the location from which they are used. Cell phones are constantly aware of their location, and they register incoming and outgoing calls, text messages, and photos. The strength of these data lies in their combination: an analysis based on cross referencing various databases can reveal enough about a person to constitute a violation of their rights.”

In the report, Karisma compared practices in Colombia with those in Brazil, Mexico and Peru and investigated the legitimacy of each country’s data retention as defined by the Organization of American States, which finds communications surveillance legitimate if it is established in a law; pursues a legitimate aim; is necessary, adequate and proportional to the objective pursued; and respects due process and judicial review.

Specifically, two Colombian laws were examined: Decree No. 1704 of 2012, regarding criminal investigations, which requires telecommunications service providers to keep subscriber information and device location data and Law No. 1621 of 2013, focused on intelligence activities, which mandates retaining “communications activity histories for telephone subscribers, technical identification data for subscribers subject to operation” and location data.

Karisma found Colombia’s data retention according to Decree No. 1704 and Law No. 1621 to be illegitimate because:

  • The laws are vague and limitless, not legitimate or proportional. What exactly must be kept and for how long is ambiguous. All criminal investigations are granted access to data, as are all “authorized” intelligence activities; who provides such authorization is not defined.
  • Data retention is not subject to judicial authorization or review. It’s automatic for all.
  • There is a lack of transparency. Users are not notified of monitoring practices and the state does not disclose information about requests for communication interception and surveillance. Therefore, citizens cannot appeal or respond to what they don’t know.

The report concludes: “Data retention law in Peru, Colombia, Mexico and Brazil are too permissive, too broad, and provide so few guarantees that it isn’t possible to rely on them as a legal framework for the protection and respect of their citizens’ human rights. It would be advisable for Colombia and the remaining countries to demonstrate their strong commitment to the protection of human rights and to dismantle the current data retention regime.”

Colombia has her hands full right now, but if she can mitigate Zika while potentially concluding peace talks with the FARC, we’re confident there is also room at the table for data retention revisions.


SumRando Cybersecurity is a South Africa-based VPN, Web Proxy and Secure Messenger provider. Surf secure and stay Rando!

Tuesday, 26 January 2016

Sean Penn’s “Secret Visit” With El Chapo Has Become Everyone’s Business

Sean Penn, El Chapo, Mexico, United States, privacy, surveillance, encryption, VPN, secure messenger
Penn defends his interview on 60 Minutes. [Source: CBS News/60 Minutes via AP]

 On January 9, 2016, Rolling Stone magazine published an interview by American actor Sean Penn titled “El Chapo Speaks: A secret visit with the most wanted man in the world.” A short two weeks later, little about the visit has remained secret.

Joaquin “El Chapo” Guzman, known less casually as the powerful Mexican drug lord behind the infamous Sinaloa Cartel, made headlines last July when he successfully escaped from prison for a second time. His status as a wanted fugitive made Penn’s October interview all the more significant and also meant that numerous security precautions were required to arrange the meeting. In his article, Penn spoke at length of El Chapo’s “unusual trust,” as well as Blackphones, encryption, TracPhones, BBM messages and escorts by car and plane.

According to the Mexican authorities, the trust and security provided was not enough to shield El Chapo’s location from the powers that be. On January 8, Mexican marines apprehended El Chapo; shortly thereafter, Mexico’s attorney general described Penn’s October visit as “essential” to the capture. Penn himself has since denied a connection between his visit and El Chapo’s arrest, but his article’s words seem to imply otherwise: “Since our late-night visit in the Mexican mountains, raids on ranches there have been relentless. A war zone. Navy helicopters waging air assaults and inserting troops. Helos shot down by Sinaloa cartel gunmen. Marines killed. Cartel fighters killed. Campasinos killed or displaced…On Friday, January 8th, 2016, it happened. El Chapo was captured and arrested – alive.”

In jail El Chapo remains, but the fallout from this “secret” visit is far from over. Kate del Castillo, the Mexican actress who has been in communication with El Chapo since 2012 and arranged the meeting via BBM, has argued that the Mexican government is now trying to “destroy” her. Under investigation is del Castillo’s relationship with El Chapo, as well as whether illicit funds from him were used by del Castillo to launch her Honor del Castillo tequila business. The evidence comes in part from secret communications themselves: on January 13, Mexican news source Milenio published a series of encrypted BlackBerry messages between del Castillo and El Chapo leading up to the October visit, proving that what was thought to be secure was anything but.

Of the three, only Sean Penn does not currently find himself in legal trouble, but his 10,000-word account of the visit has left many wanting more. Journalists everywhere, including 60 Minutes’ Charlie Rose, are questioning Penn’s journalistic integrity and ability given his final product was a piece that failed to ask or answer tough questions and received its final approval from its subject. Mexican actor Gael Garcia Bernal was offended Penn would choose to profile El Chapo when there are “others more deserving of the attention.” The UK’s Daily Mail went so far as to publish the headline, “Sean Penn spotted for the first time since speaking about drug lord El Chapo during Charlie Rose interview as he spends time with son Hopper” with a series of invasive pictures. In attempting to share a secret with the world, Penn seems to have lost his rights to a personal opinion or to privacy.

This is one saga that appears to be far from over, but several lessons have already been learned. Most importantly, if you, like Penn, call yourself “the single most technologically illiterate man left standing,” educate yourself. El Chapo may have shown an “unusual trust,” but Penn displayed a blind trust in his “experiential journalism” process and now must face the aftermath, for himself and for others. Ultimately, the user must know how and when and when not to use the technology at his fingertips.



Want more of the latest cybersecurity news from around the world? Read on!
SumRando Cybersecurity is a South Africa-based VPN, Web Proxy and Secure Messenger provider. Surf secure and stay Rando!