CPJ Internet Channel

Defending Free Expression Online

Middle East & North Africa


Iran has invested in technology with the explicit intent of restricting
Internet access. (Reuters/Caren Firouz)

One big reason for the Internet's success is its role as a universal standard, interoperable across the world. The data packets that leave your computer in Botswana are the same as those which arrive in Barbados. The same is increasingly true of modern mobile networks. Standards are converging: You can use your phone, access an app, or send a text, wherever you are.

After the rash of political revolutions and criminal attacks on governments and companies last year, it wasn't hard to predict that 2012 would be the year of a cybercrime crackdown. The United States is considering its own cybercrime legislation, and the European Union is seeking to harmonize its member state's computer crime laws. Governments understandably want to prevent further online attacks. Journalists suffer these attacks also, but they don't necessarily gain from fiercer laws. And in the case of a proposed new cybercrime law in Iraq, they may face life imprisonment for simply doing their job.

A screen shot showing part of a Twitter blog post in which the company announced it could now censor messages on a country-by-country basis. (AP/Twitter)

Last week, Twitter provoked a fierce debate online when it announced a new capability--and related policy--to hide tweets on a country-specific basis. By building this feature into its website's basic code, Twitter said it hoped to offer a more tailored response to legal demands to remove tweets globally. The company will inform users if any tweet they see has been obscured, and provide a record of all demands to remove content with the U.S.-based site chillingeffects.org.

It's easy to use polarizing descriptions of online news-gathering. It's the domain of citizen journalists, blogging without pay and institutional support, or it's a sector filled with the digital works of "mainstream media" facing financial worries and struggling to offer employees the protection they once provided. But there is a growing middle ground: trained reporters and editors who work exclusively online on projects born independent of traditional media. They share many of the practices of an older generation of reporters, but their work draws from the decentralized and agile practices of the digital world. 

One of the most exciting aspects of working on Internet technologies is how quickly the tools you build can spread to millions of users worldwide. It's a heady experience, one that has occurred time and again here in Silicon Valley. But there's also responsibility that attaches to that excitement. For every hundred thousand cases in which a tool improves someone's day, there is another case in which it's used in a life-or-death situation. And for online journalists working on high-risk material, or in high-risk places, that life may be their own or that of a source. That's why CPJ, together with Alexey Tikhonov from Kazakhstan's Respublika, Esra'a al-Shafei from the pan-Arab forum MidEast Youth, and activist Rami Nakhle from Syria, spent this week visiting and meeting with technologists, entrepreneurs, and thinkers in Silicon Valley.

In August, Google introduced a new, if rather obscure, security feature to its Chrome web browser, designed to be triggered only under extreme circumstances.

If you were talking to Google's servers using the web's secure "https" protocol, your browser makes a number of checks to ensure that you are really talking to Google's servers. Like an overly obsessive bouncer, the new code double-checks the identity of any supposed Google site against a Chrome-only list of valid Google identities hardwired into the browser.

A Google developers conference in May. (Reuters/Beck Diefenbach)

When they're creating new features, software designers talk in terms of "use cases." A use case describes steps that future customers might perform with a website. "Starting a group with friends," would be a use case for Facebook. "Buying a book" would be case for Amazon's designers. 

President al-Assad appears to have encouraged hacking attacks. (AP)

On Monday, Syrian President Bashar al-Assad gave his third public address on the vast unrest that has roiled his nation. Reporters described him as nervous. He, the reporters, or perhaps both, may have been thinking about the significance of speech No. 3. Both Tunisia's Zine El Abidine Ben Ali and Egypt's Hosni Mubarak were overthrown shortly after they delivered their third addresses on tumult in their countries. My interest, however, was on a sentence buried near the end of his address. Here's the official translation:

A Gay Girl in Damascus was a personal blog, said to be written by a young woman named Amina Arraf, that appeared to give an everyday record of being a lesbian in modern-day Syria. Following the events of the Arab Spring, as the political situation in Syria grew less stable, the blog attracted more readers and media coverage. Its compelling descriptions of Syrian life gave many a way to connect emotionally to a distant crisis. On June 6, the author's "cousin" wrote that the blogger had been seized by the security services.

Jennifer Preston in the New York Times reports on some stories that we also have been hearing from Syrian Internet use. She documents incidents of passwords extracted by force, and the deliberate defacing of social networking pages by security forces, apparently in order to sabotage reports of unrest from that country.

A man in his 20s living in Syria said that the police demanded his Facebook password late last month after arresting him where he worked and taking his laptop. "I told him, at first, I didn't have a Facebook account, but he told me, after he punched me in the face, that he knew I had one because they were watching my 'bad comments' on it," he said. "I knew then that they were monitoring me."

The man, who asked that his name not be used because he fears that talking openly could cost him his life, gave up his password and spent two weeks in jail. After he was released, he said that he found pro-regime comments made in his name on his Facebook account. "I immediately created a new account with a fake name and so did most of my friends," he said.

A strong password is not much protection against what computer security types drily call "rubber-hose cryptanalysis" -- the use of violence to extract login details. We know that Syrian security forces also threaten users that they will violently punish anyone who changes their password after they leave.

Instead, Preston reports on new strategies developed by those on the ground. They share their passwords with colleagues, so if a Facebook user is arrested and his account misused, colleagues can log in and remove personal information or delete vandalised content. Distributors of content also create multiple Facebook accounts so that when threatened, they reveal an innocent account, instead of the one they use for dangerous activities.

Can Facebook and other US companies help their users working under these conditions? They could remind readers in that region to set their Account Security settings to force secure browsing, login notifications, and explain how to monitor account activity. And they may want to be more cautious in pro-actively taking down apparently fake accounts, in case these are being used as decoy accounts.

About this Blog

The CPJ Internet Channel examines the battle for free expression online. It’s written by Danny O’Brien, CPJ’s San Francisco-based Internet advocacy coordinator.

more »
47 Internet cases in 2012