More stories

  • in

    Inside the Face-Off Between Russia and a Small Internet Access Firm

    The cat-and-mouse experience of Proton, a Swiss company, shows what it’s like to be targeted by Russian censors — and what it takes to fight back.After Moscow erected a digital barricade in March, blocking access to independent news sites and social media platforms to hide information about its unfolding invasion of Ukraine, many Russians looked for a workaround. One reliable route they found came from a small Swiss company based nearly 2,000 miles away.The company, Proton, provides free software that masks a person’s identity and location online. That gives a user in Russia access to the open web by making it appear that the person is logging in from the Netherlands, Japan or the United States. A couple of weeks after the internet blockade, about 850,000 people inside Russia used Proton each day, up from fewer than 25,000.That is, until the end of March, when the Russian government found a way to block Proton, too.Targeting Proton was the opening salvo of a continuing back-and-forth battle, pitting a team of about 25 engineers against a country embarking on one of the most aggressive censorship campaigns in recent memory.Working from a Geneva office where the company keeps its name off the building directory, Proton has spent nine pressure-packed months repeatedly tweaking its technology to avoid Russian blocks, only to be countered again by government censors in Moscow. Some employees took Proton off their social media profiles out of concern that they would be targeted personally.The high-stakes chess match mirrors what is playing out with growing frequency in countries facing coups, wars and authoritarian rule, where restricting the internet is a tool of repression. The blocks drive citizens to look for workarounds. Engineers at companies like Proton think up new ways for those people to secretly reach the open web. And governments, in turn, seek out new technical tricks to plug leaks.The digital censorship battle is reaching “an inflection point,” said Grant Baker, a research analyst for technology and democracy at Freedom House, which recently reported that internet censorship globally had reached a new high in 2022. While Russia has spent years working on a more closely controlled, sovereign internet, the controls imposed after the war are “a stark contrast” to anything Moscow had ever done before, Mr. Baker said.Companies rarely discuss being targeted by an authoritarian government out of fear of escalating the conflict. But Andy Yen, Proton’s founder and chief executive, said that after a period of trying to keep its “head down,” Proton wanted to raise awareness about the increasing sophistication of governments, in Russia and elsewhere, to block citizens from reaching the open web and the need for technologists, companies and governments to push back.Proton’s account provides a rare inside look at what it’s like to be entangled in Russia’s censorship net as President Vladimir V. Putin tries to suppress information about the war and mounting battlefield losses in Ukraine.Dozens of VPN services have been blocked inside Russia, but Proton, perhaps best known for its encrypted email service, seemed to receive extra attention from the authorities. In June, Russia’s internet regulator labeled the company a “threat.”“We’re gearing up for a long fight,” Mr. Yen said in an interview at the company’s office. “Everybody hopes this will have a happy ending, but it’s not guaranteed. We don’t see the light at the end of the tunnel, in fact, but you keep going because if we don’t do it, then maybe nobody else will.”The VPN team at Proton, whose virtual private network gives users a way around government internet restrictions.Aurélien Bergot for The New York TimesProton, which makes money by selling $10-a-month subscriptions for extra features, was founded in 2014 by a team of young engineers from the European Organization for Nuclear Research, known as CERN, the institute outside Geneva where the worldwide web was created. Their main project was working on the Large Hadron Collider, the world’s largest particle accelerator, a $5 billion instrument built to unlock some of the world’s biggest scientific mysteries.After the disclosures of mass digital surveillance that were made by Edward Snowden, the former U.S. intelligence contractor, Mr. Yen and a few colleagues created an email service that encrypts messages so they cannot be intercepted, simplifying use of a technology that had been too complicated for many people. It became popular with activists, journalists and privacy-conscious consumers.The State of the WarStriking Deep in Russia: In its most brazen attack into Russian territory, Ukraine used drones to strike two military bases hundreds of miles inside Russia, showing an ability to take the war beyond its borders.Weaponizing Winter: Russian attacks on Ukrainian infrastructure have left millions without power, heat or water as the snow begins to fall. The Daily looks at what life is like in Ukraine as winter sets in.Russian Oil Price Cap: The E.U. agreed on a $60-a-barrel limit for Russian oil, the latest effort by Western allies to try to deprive Moscow of revenue to finance its war in Ukraine. Here’s how it will work.Mr. Yen, who grew up in Taiwan, said the threat of Chinese aggression looming over the island’s democracy had shaped his worldview. Privacy and fighting censorship were core to Proton’s mission from the start, he said, and the company seemed to almost relish confronting authoritarianism.In 2017, after several governments, including Turkey and Russia, temporarily blocked access to the email service, Proton created its virtual private network, or VPN, a technology used to sidestep internet restrictions.The technology behind a VPN traces back to the 1990s. It is a relatively basic tool used most commonly by people trying to pirate movies or watch a sports broadcast available only in another country. Yet in recent years the systems, which are easy to use and often difficult to detect, have become a vital tool for circumventing internet restrictions.The Kremlin spent years building the legal foundation and technological abilities to control the internet more closely. Yet even as Russia blocked certain websites and interrupted access to Twitter last year, few thought it would outright block major social media platforms and independent news websites. While television has always been heavily censored, the internet had been less restricted.The crackdown in March interrupted communications and commerce for many otherwise apolitical Russians, said Natalia Krapiva, tech-legal counsel at Access Now, a group focused on online speech-related issues. VPN use was already high among tech-savvy Russians, she said, but the blocks and news of harsh punishment for online protest led even more casual internet users to seek ways around the restrictions.Demand for VPNs surged in Russia, with downloads in March jumping 2,692 percent from February, said Simon Migliano, head of research for the review site Top10VPN.com. Proton was a popular choice, he said, hovering among the 10 most popular products despite being slower than some other choices.Since then, VPNs have become a way of life for many. Roskomsvoboda, a Russian civil society group focused on internet freedom, estimates that a quarter of the Russian population is using one.“To simply read independent news or to post a picture, you had to open your VPN,” said Viktoriia Safonova, 25, who now delivers food by bike in Sweden after she fled Russia in July. Both she and her husband were racked by anxiety after the invasion. Finding independent news and information was difficult. Workarounds often weren’t reliable.“If the one you’re using gets blocked, you have to find another VPN,” Ms. Safonova said.She recalled the paranoia that set in as new internet restrictions and surveillance took effect. She and her husband, Artem Nesterenko, worried about whether they could criticize the war online, even on international social networks. He recalled how the police had come to check on their building after he scrawled “No to war” in the elevator. He feared being arrested for things he posted online.As people turned to VPN services to avoid the blocks, Proton struggled to keep up. Over a weekend in March, engineers scrambled to buy and configure more than 20 new servers to avert a crash of its entire network.At the same time in Moscow, censors were at work trying to patch holes in the government’s internet controls.The first block that took down Proton, at the end of March, was a technically basic interruption that company engineers quickly overcame, but they figured more powerful attempts loomed.The battle took on a “Spy vs. Spy” dynamic in Proton’s headquarters. Mr. Yen said a network of people within the government, telecommunications firms and civil society groups had helped Proton operate in Russia, providing access to local networks and sharing intelligence about how the censorship system worked. But those contacts began to go dark as the Kremlin’s crackdown on dissent intensified.At the start of June, censors struck again.The service, which had more than 1.4 million daily users inside Russia at this point, collapsed as employees were going about their day. Complaints from Russian users poured into Proton’s customer service email. The company concluded that the government had deployed more sophisticated software that could filter through all internet traffic to identify when a person was trying to connect to Proton’s VPN service. Russia had used similar technology to block Twitter and other social media sites.Around this time, the company noticed a suspicious spike in negative reviews of its service in the Apple and Google app stores, reducing its search ranking.“They had clearly studied us,” said Antonio Cesarano, a senior engineer working on the VPN project.Some at Proton questioned whether they should continue the fight with Russia. It was costing millions of dollars and slowing down development of other products. But after Proton faced criticism in 2021, when the French police obtained the IP address of a climate activist using its email service, backing down from Russia could have added another bruise to the company’s reputation.Over about two weeks in June, Proton created yet another workaround that bounced internet traffic to servers in different geographical areas faster than censors could track. It was a technically complex move that would take considerable resources for Russia to counter.The fix worked — for about six weeks.Mr. Yen was interrupted during a staff meeting in mid-July with news that Russian censors had come up with an even more elaborate block. A corporate chart from the time shows use dropping off a cliff. Russian engineers had identified what is known as an authentication “handshake,” the vital moment when Proton’s VPN connection gets established before reaching the wider web. Blocking the link made Proton’s service essentially unusable.“We had no idea what was happening and how they were doing it,” Mr. Cesarano said.By August, after working around the clock for days to find a fix, Proton acknowledged defeat and pulled its app from Russia. The company has spent the months since then developing a new architecture that makes its VPN service harder to identify because it looks more like a regular website to censorship software scanning a country’s internet traffic. Proton has been successfully testing the system in Iran, where Proton has seen a sharp increase in VPN use during recent political demonstrations.In Russia, Proton has reintroduced its apps using the new system. Mr. Yen acknowledged that it probably wasn’t a long-term fix. He has confidence in the new technology, but figures Russian engineers will eventually figure out a new way to push back, and the game will continue. More

  • in

    Facebook Failed to Stop Ads Threatening Election Workers

    The ads, submitted by researchers, were rejected by YouTube and TikTok.Facebook says it does not allow content that threatens serious violence. But when researchers submitted ads threatening to “lynch,” “murder” and “execute” election workers around Election Day this year, the company’s largely automated moderation systems approved many of them.Out of the 20 ads submitted by researchers containing violent content, 15 were approved by Facebook, according to a new test published by Global Witness, a watchdog group, and New York University’s Cybersecurity for Democracy. Researchers deleted the approved ads before they were published.Ten of the test ads were submitted in Spanish. Facebook approved six of those ads, compared with nine of the 10 ads in English.TikTok and YouTube rejected all the ads and suspended the accounts that attempted to submit them, the researchers said.The tests underscored the challenges that social networks face in moderating increasingly partisan and violent content around elections, especially as poll workers are facing additional threats from election deniers and far-right extremists. The Justice Department and other federal agencies warned ahead of this year’s midterm elections that threats against election workers had surged.In a statement, a spokesman for Meta, Facebook’s parent company, said it later disabled several accounts that had submitted the ads. The company also said that ads continue to be reviewed after they go live.“This is a small sample of ads that are not representative of what people see on our platforms,” the spokesman said in a statement. “Content that incites violence against election workers or anyone else has no place on our apps, and recent reporting has made clear that Meta’s ability to deal with these issues effectively exceeds that of other platforms.”The research adds to previous tests conducted by the same groups, including one this year in which 20 ads were submitted containing political misinformation. In that test, Facebook approved only two of the misleading ads in English from an account in the United States, while TikTok approved about 90 percent of them. YouTube suspended the account that tried to submit the ads.But this round used more overt language that tested Facebook’s largely automated moderating system. Those included direct threats of violence, which were sourced from real statements by election deniers and other far-right extremists in the United States. One ad, which was approved by Facebook, read: “We are going to kill you all.” Another ad, which threatened to abuse children, was also approved.“It was really quite shocking to see the results,” said Damon McCoy, an associate professor at N.Y.U. “I thought a really simple keyword search would have flagged this for manual review.”In a statement, researchers also said they wanted to see social networks like Facebook increase content moderation efforts and offer more transparency around the moderation actions they take.“The fact that YouTube and TikTok managed to detect the death threats and suspend our account, whereas Facebook permitted the majority of the ads to be published shows that what we are asking is technically possible,” they wrote. More

  • in

    Elon Musk reinstates Donald Trump’s Twitter account after taking poll

    Elon Musk reinstates Donald Trump’s Twitter account after taking poll‘The people have spoken,’ says site’s owner, having acknowledged during online poll that automated bots were voting too Elon Musk has reinstated Donald Trump’s Twitter account after users on the social media platform voted by a slim majority to lift a ban on the former US president.Trump’s account was suspended in 2021 after the January 6 Capitol riot, for violating Twitter guidelines and because of the risk of “further incitement of violence”.The account appeared to be live on Sunday, although the former president had yet to post to the more than 80 million users following him. His last tweet was on 8 January 2021, in which he declared he would not attend Joe Biden’s inauguration as the 46th president of the US.Trump did not appear keen to return to Twitter when discussing the issue on Saturday. “I don’t see any reason for it,” the former president said via video when asked about it by a panel at the Republican Jewish Coalition’s annual leadership meeting.He said he would stick with his new platform Truth Social, developed by his Trump Media and Technology Group startup.Last week, Trump announced his candidacy for the Republican presidential nomination in 2024 and praised Musk, saying he had always liked him. Nevertheless, Trump also said Twitter suffered from bots and fake accounts, and that the problems it faced were “incredible”.Musk, Twitter’s new owner, announced the move after a poll on his own account in which more than 15m votes were cast, with 51.8% in favour of reinstatement.Shortly after taking over Twitter last month, the Tesla CEO had said no decisions would be taken on reinstatement until a newly announced “content moderation council” had met, later adding that no bans would be lifted until there was a “clear process for doing so”.The people have spoken. Trump will be reinstated.Vox Populi, Vox Dei. https://t.co/jmkhFuyfkv— Elon Musk (@elonmusk) November 20, 2022
    During the poll, Musk acknowledged that the vote numbers were being affected by automated bots, which are not operated by people, and suggested there was a need to clean up Twitter polls from being influenced by “bot and troll armies”.Bot & troll armies might be running out of steam soon. Some interesting lessons to clean up future polls.— Elon Musk (@elonmusk) November 19, 2022
    Elon Musk summons Twitter engineers amid mass resignations and puts up poll on Trump banRead moreTwitter banned Trump after the January 6 attack last year, saying his posts were “highly likely to encourage and inspire people to replicate the criminal acts that took place at the US Capitol”. Trump was also banned from Facebook, Instagram and YouTube after the riot.The National Association for the Advancement of Colored People (NAACP), a leading US civil rights organisation, urged all advertisers still funding Twitter to immediately pause their spending after Trump’s reinstatement.The accounts used by the US rapper Ye – formerly Kanye West – and the British-American former kickboxer Andrew Tate have also been reinstated.Ye’s account was suspended in recent weeks after a series of antisemitic comments prompted Adidas and other companies to cut financial ties with him, costing him his status as a billionaire. He tweeted Sunday: “Testing Testing Seeing if my Twitter is unblocked.”Tate was banned in 2017 for breaching Twitter’s guidelines with extreme misogynistic views, including saying women should “bear some responsibility” for being raped.“Any advertiser still funding Twitter should immediately pause all advertising,” said the NAACP’s president, Derrick Johnson. “If Elon Musk continues to run Twitter like this, using garbage polls that do not represent the American people and the needs of our democracy, God help us all.”A Republican member of the congressional committee investigating the January 6 attack said he expected Trump to be as troublesome on Twitter as he was previously if he returns to the platform.“This idea that he’s going to come on and be reformed, everybody knows he won’t,” the committee member, Adam Kinzinger, said.Musk admitted this month that Twitter, which relies on ads for 90% of its revenue, had recorded a “massive drop in revenue” after advertisers stopped booking space on the platform because of concerns that content guidelines would be relaxed.Advertisers were also concerned by the botched relaunch of Twitter’s subscription service, Twitter Blue, after impersonators jumped on the offer to be verified by simply paying $7.99 (£7) a month. Omnicom, a media agency whose clients include McDonald’s, Apple and Pepsi, has told companies to pause their Twitter spending because of concerns over brand safety.Yoel Roth, a former head of trust and safety at Twitter who resigned after Musk’s takeover, said in a New York Times op-ed that he quit because it was clear Musk would have unilateral control of content policies. “A Twitter whose policies are defined by unilateral edict has little need for a trust and safety function dedicated to its principled development,” Roth wrote.Musk, a self-described “free-speech absolutist”, first mooted the reinstatement of Trump in May after agreeing a $44bn deal to buy Twitter. He said: “I would reverse the permanent ban,” claiming that Twitter was “left-biased”.This week, Musk reinstated the comedian Kathy Griffin, who had been banned for changing her profile name to “Elon Musk”, which violated his new rule against impersonation without indicating it was a parody account. He has also reinstated Jordan Peterson, the Canadian psychologist and author, who was suspended from Twitter after violating the platform’s content policies with a tweet about the transgender actor Elliot Page.Imran Ahmed, CEO of Center for Countering Digital Hate, a campaign group, said the reinstatements had made Musk’s intent for Twitter “crystal clear”.“He is sending a clear message to users and to advertisers that brand safety and an inclusive space for all users is no longer the aim for Twitter. Instead he is turning Twitter into the home for extreme and fringe voices who have been rightly shunned by other platforms,” said Ahmed.On Friday, Musk announced a new content policy of “freedom of speech, but not freedom of reach”, stating that “negative/hate” tweets would be “deboosted” and no adverts would appear near them.New Twitter policy is freedom of speech, but not freedom of reach.Negative/hate tweets will be max deboosted & demonetized, so no ads or other revenue to Twitter. You won’t find the tweet unless you specifically seek it out, which is no different from rest of Internet.— Elon Musk (@elonmusk) November 18, 2022
    Also on Friday, Twitter temporarily closed its offices after an unspecified number of staff quit the company after an ultimatum from Musk that they should commit to “being hardcore” or leave. According to the New York Times, 1,200 of Twitter’s remaining 3,750 workers – a workforce that had already been halved in size after Musk’s takeover – left the business last week.TopicsTwitterDonald TrumpElon MuskUS politicsRepublicansSocial mediaDigital medianewsReuse this content More