CPJ Internet Channel

Defending Free Expression Online

More than a quarter million Twitter accounts have been hacked worldwide, the social media company disclosed in February, but Tuesday's attack on The Associated Press's verified account, @AP, had unusual effect. The Dow Jones industrial average fell 143 points after someone hijacked the AP's account to falsely tweet that two explosions at the White House had wounded President Barack Obama. The market recovered, but the hacking--just the latest in a series of attacks on news organizations--sent shudders through a profession that's grown accustomed to breaking its news on Twitter.

You have to wonder how this will be enforced, but China's State Administration of Press Publication, Radio, Film and Television has issued a "Notice on Strengthening Control of Media Personnel's Online Activities" (关于加强新闻采编人员网络活动管理的通知). Chinese media organizations have been told to stop posting foreign media news without government permission:  "Without authorization, no kind of media outlets shall arbitrarily use media release from overseas media agencies and media websites," is the way Caijing magazine translated it.

For more than six years the Committee to Protect Journalists has been working with freedom of expression advocates, investors, and giant Internet companies to promote online freedoms. Absent from the discussions under the umbrella of the Global Network Initiative have been the telecommunications companies--vital gateways to the Internet for journalists and bloggers, particularly in much of the global South. Today things have changed.

Kachin Independence Army soldiers guard an outpost in Northern Burma's Kachin-controlled region on January 31. Journalists who cover the conflict have been subject to email hacking attacks. (AP/Alexander F. Yuan)

Cyberattacks on news websites and apparent government hacking into journalists' email accounts have raised new questions about the integrity of media reforms in Burma. The New York Times reported on Sunday that several journalists who regularly cover Burma-related news recently received warning messages from Google that their email accounts may have been hacked by "state-sponsored attackers."

The Times reported in January that it had succeeded in expelling hackers from its computer systems. (AFP/Emmanuel Dunand)

Not every media company is as tempting a target for hackers as The New York Times, The Washington Post, or The Wall Street Journal. Not every company can afford high-priced computer security consultants, either. Is there anything that everyday reporters and their editors can learn about protecting themselves, based on the revelatory details the Times and other targets made public last week?

I remember sitting with a Yahoo employee in 2009, talking about the lack of protective encryption on Yahoo's Web mail accounts. Like many, the employee had been caught up in the news of how Iranians were using the Internet to document and protest the presidential elections in that country, and had grown worried about the possibility of governments intercepting Yahoo customer's emails without due process. As an immigrant from a repressive regime, he told me, he was aware of how much danger this posed. He said he was going to raise the topic internally.

China's new Communist Party leaders are increasing already tight controls on Internet use. (AP/Alexander F. Yuan)

China's mounting crackdown on online news dissemination took an extra step today, when the country's Standing Committee of the National People's Congress, its de facto legislative body, announced new requirements on Internet service providers and mobile phone companies to identify their users. The new rules would potentially allow ISPs and the authorities to more closely tie real identities to posts and commentary on micro-blogging sites like Weibo, as well as connect text messaging and mobile phone conversations to individuals.

Hamdoun Toure, ITU secretary general, speaks at the group's conference in Dubai. (AP/Kamran Jebreili)

For most of its almost-150-year history, the meetings of the International Telecommunication Union (ITU), the United Nations' communications standards body, have been rather predictable affairs.

This image provided by Edlib News Network shows an anti-Syrian regime protester holding up a placard reading: 'the victory fingers over the Place (the presidential palace),' during a demonstration at Binnish village, Idlib province, on Friday. (AP/Edlib News Network ENN)

The Syrian Internet, like the country, appears to have been collapsing into a patchwork of unconnected systems for some time. I spent time talking to Syrians tech activists this week in Tunisia before Thursday's shutdown, and their reports from the front painted a picture of two different networks.

An analyst looks at malware code in a lab. (Reuters/Jim Urquhart)

We talk a lot about hacking attacks against individual journalists here, but what typifies an attempt to access a reporter's computer? Joel Simon, CPJ's executive director, received an email last week that reflects some characteristics of a malware attack against a journalist or activist. There was nothing particularly notable about the targeting. (Like many reporters, CPJ receives such attempts occasionally). The attack failed at the first fence, and my casual investigation into the source was inconclusive. There are no shocking answers or big headlines to draw from this attack. But it does illustrate a contemporary reality: Opportunistic assailants regularly shower journalists with software attacks.

More Entries »

About this Blog

The CPJ Internet Channel examines the battle for free expression online.

Active Discussions
51 Internet cases in 2013