Skip to content or view mobile version

Home | Mobile | Editorial | Mission | Privacy | About | Contact | Help | Security | Support

A network of individuals, independent and alternative media activists and organisations, offering grassroots, non-corporate, non-commercial coverage of important social and political issues.

Alternative Servers Attacked: "Not a Private Question: A Question of Privacy"

imc uk | 27.06.2005 19:32 | Indymedia | Technology

Italy-based non-profit community webserver autistici have found out that the authorities have copied the keys necessary for the decryption of their webmail a year ago [statement 1 | 2]. Since then, the authorities potentially had access to all the data on the disks. Autistici's provider did not inform them about this. Apparently, this is connected to the same investigation as the one that caused an international law enforcement operation in London last October: A few days before the European Social Forum, Indymedia servers in London were seized, prompting a wave of solidarity statements [report].



Italy-based server autistici has informed its users that it has been compromised by the authorities for more than a year. During an investigation, the authorities shut down the server and copied the keys necessary for the decryption of the webmail. Since then, they potentially had access to all the data on the disks. This happened with the collaboration of Aruba, their provider. The autistici.org/inventati.org server hosts 4,700 mailboxes, 600 mailing lists (used by 30,000 people totally), and over 500 websites. A wide range of activists, associations, lawyers, legal services, self-organized workers and activist groups, student groups and collectives, as well as international networks are using it for their websites and emails.

Autistici are pointing out that their case is not a private matter, but a matter of privacy. They consider themselves to be treated as a "guinea-pig on whom to experiment new kinds of controls and eavesdropping", and see their situation connected to "all the people involved into file sharing enquiries". They state that the present case of eavesdropping is related to the same investigation as the one that caused an international law enforcement operation in London last October. A few days before the European Social Forum, Indymedia servers in London were seized - prompting a wave of protests and solidarity statements [report].

Austici are presently reviewing their technical set-up and consider taking political steps. They advise everyone "to use strong encryption instruments (i.e. pgp/gpg) for the protection of both mail and data on personal computers" to protect privacy and freedom of speech.

imc uk

Comments

Hide the following 8 comments

gristle

27.06.2005 21:40

In the light of all this, maybe it is time to start thinking about how to make a mirror of Indymedia available through the peer to peer distributed freenet network (  http://freenetproject.org/ ). This would (virtually) guarantee IP anonymity and there would be no way for any legal bodies to take down the Indymedia content again as it would be completely decentralised (requiring the location and confiscation of many personal computers dotted around the Internet to remove content).

I understand that it takes a lot of patience and technical competence to do this but as a backup to the websites and for those more paranoid about privacy it would be nice and would also contribute to the strength of the network (more people using it, better network).

anon


LEGAL FUND

28.06.2005 10:18

All donations towards new server / legal costs will very much appreciated.

Other methods of donating may follow shortly. For the moment it's the old-fangled cheque / postal order way of doing things.

Cheques can be made out to:
Bristol Indymedia. Box 3. 82 Colston Street, Bristol BS1 5BB

Thanks.

Friends Of BIM


Tor

28.06.2005 13:18

Agree with the above comment about freenet. Either that or hosting a mirror as a hidden service on the Tor network (tor.eff.org), which is much more usable in terms of speed and setup for non-techie users.

anon


more mainstream coverage

28.06.2005 16:28

More Mainstream Coverage + More Links In Comments:
 https://publish.indymedia.org.uk/en/2005/06/315097.html

munkeeunit


Alternarive Bristol Information Outlets

28.06.2005 16:41

In the days before the BIMC server was seized an 'unofficial emergency response network' was publicised on BIM in anticipation of the seizure. The re-routed  http://bristol.indymedia.org page to an extent, thankfully, makes this less necessary, but it doesn't have such a Bristol / South West focus.

So...

The Bristol Social Forum & Bristol Stop-The-War message boards have now been opened up so that anyone can currently post to them from any email account (although posts will continue to be moderated and there may be a delay of a few days on the Bristol Social Forum so that emails can be sent out in more user friendly batches direct to people's inboxes.)

As it has a subscription base of 350+, it is a valuable outlet.

Bristol Social Forum. (Bristol / South West focussed posts please)
Anyone can post to:  bristolsocialforum@yahoogroups.com
Visit:  http://groups.yahoo.com/group/bristolsocialforum/
You can also subscribe if you like, instructions at bottom of page, or PM me.

Bristol Stop The War. (National level posts are also welcome here)
Anyone can post to:  bristol-stop-the-war-coalition@yahoogroups.com
 http://groups.yahoo.com/group/brist...-war-coalition/
99% of subscribers only receive the monthly newsletter direct to their inbox, but it is widely publicised as a public message board too, so it has it's uses.

I hope this helps.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

A number of other contacts were given, but they seem less necessary now, as our networks aren't completely destroyed, and the additional contacts were postal addresses and alternative emails.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

munkeeunit


Whoops!

28.06.2005 16:46

Sorry, bad links provided in the above. Bristol-Stop-The-War is:
 http://groups.yahoo.com/group/bristol-stop-the-war-coalition/

munkeeunit


EXTRA OUTLET NOTE

28.06.2005 17:21

A better interim fix than using the above opened up yahoo groups (as well as sharing space on UK IMC) may follow shortly. SO WATCH THESE SPACES!

munkeeunit


"copied the keys"

30.06.2005 09:47

"During an investigation, the authorities shut down the server and copied the keys necessary for the decryption of the webmail. Since then, they potentially had access to all the data on the disks."

I personally use NetBSD's cgd (cryptographic disk driver), and DON'T keep the configuration file's /etc/cgd/cgd.conf, etc on disk.
The configuration files's are keept on separate removable date, or other location in encrypted form.
This means that I have to manually configure ("mount") the disk's everytime i reboot.
BUT it would also mean, that if a server were sized, they would never be able to recover or find anything on the disk.
If the autistici server had been configured to store the keys for decryption of the webmail on an cgd configured disk, the authorities could never have copied the keys.

Cgd have been mentioned before in Indymedia.
 http://docs.indymedia.org/view/Local/UkCrypto

Other links
 http://netbsd.gw.com/cgi-bin/man-cgi?cgd++NetBSD-2.0.2
 http://www.netbsd.org/guide/en/chap-cgd.html

Perhaps it's time to really implement a stronger policy and procedures to protect people.

kopime


Upcoming Coverage
View and post events
Upcoming Events UK
24th October, London: 2015 London Anarchist Bookfair
2nd - 8th November: Wrexham, Wales, UK & Everywhere: Week of Action Against the North Wales Prison & the Prison Industrial Complex. Cymraeg: Wythnos o Weithredu yn Erbyn Carchar Gogledd Cymru

Ongoing UK
Every Tuesday 6pm-8pm, Yorkshire: Demo/vigil at NSA/NRO Menwith Hill US Spy Base More info: CAAB.

Every Tuesday, UK & worldwide: Counter Terror Tuesdays. Call the US Embassy nearest to you to protest Obama's Terror Tuesdays. More info here

Every day, London: Vigil for Julian Assange outside Ecuadorian Embassy

Parliament Sq Protest: see topic page
Ongoing Global
Rossport, Ireland: see topic page
Israel-Palestine: Israel Indymedia | Palestine Indymedia
Oaxaca: Chiapas Indymedia
Regions
All Regions
Birmingham
Cambridge
Liverpool
London
Oxford
Sheffield
South Coast
Wales
World
Other Local IMCs
Bristol/South West
Nottingham
Scotland
Social Media
You can follow @ukindymedia on indy.im and Twitter. We are working on a Twitter policy. We do not use Facebook, and advise you not to either.
Support Us
We need help paying the bills for hosting this site, please consider supporting us financially.
Other Media Projects
Schnews
Dissident Island Radio
Corporate Watch
Media Lens
VisionOnTV
Earth First! Action Update
Earth First! Action Reports
Topics
All Topics
Afghanistan
Analysis
Animal Liberation
Anti-Nuclear
Anti-militarism
Anti-racism
Bio-technology
Climate Chaos
Culture
Ecology
Education
Energy Crisis
Fracking
Free Spaces
Gender
Globalisation
Health
History
Indymedia
Iraq
Migration
Ocean Defence
Other Press
Palestine
Policing
Public sector cuts
Repression
Social Struggles
Technology
Terror War
Workers' Movements
Zapatista
Major Reports
NATO 2014
G8 2013
Workfare
2011 Census Resistance
Occupy Everywhere
August Riots
Dale Farm
J30 Strike
Flotilla to Gaza
Mayday 2010
Tar Sands
G20 London Summit
University Occupations for Gaza
Guantanamo
Indymedia Server Seizure
COP15 Climate Summit 2009
Carmel Agrexco
G8 Japan 2008
SHAC
Stop Sequani
Stop RWB
Climate Camp 2008
Oaxaca Uprising
Rossport Solidarity
Smash EDO
SOCPA
Past Major Reports
Encrypted Page
You are viewing this page using an encrypted connection. If you bookmark this page or send its address in an email you might want to use the un-encrypted address of this page.
If you recieved a warning about an untrusted root certificate please install the CAcert root certificate, for more information see the security page.

Global IMC Network


www.indymedia.org

Projects
print
radio
satellite tv
video

Africa

Europe
antwerpen
armenia
athens
austria
barcelona
belarus
belgium
belgrade
brussels
bulgaria
calabria
croatia
cyprus
emilia-romagna
estrecho / madiaq
galiza
germany
grenoble
hungary
ireland
istanbul
italy
la plana
liege
liguria
lille
linksunten
lombardia
madrid
malta
marseille
nantes
napoli
netherlands
northern england
nottingham imc
paris/île-de-france
patras
piemonte
poland
portugal
roma
romania
russia
sardegna
scotland
sverige
switzerland
torun
toscana
ukraine
united kingdom
valencia

Latin America
argentina
bolivia
chiapas
chile
chile sur
cmi brasil
cmi sucre
colombia
ecuador
mexico
peru
puerto rico
qollasuyu
rosario
santiago
tijuana
uruguay
valparaiso
venezuela

Oceania
aotearoa
brisbane
burma
darwin
jakarta
manila
melbourne
perth
qc
sydney

South Asia
india


United States
arizona
arkansas
asheville
atlanta
Austin
binghamton
boston
buffalo
chicago
cleveland
colorado
columbus
dc
hawaii
houston
hudson mohawk
kansas city
la
madison
maine
miami
michigan
milwaukee
minneapolis/st. paul
new hampshire
new jersey
new mexico
new orleans
north carolina
north texas
nyc
oklahoma
philadelphia
pittsburgh
portland
richmond
rochester
rogue valley
saint louis
san diego
san francisco
san francisco bay area
santa barbara
santa cruz, ca
sarasota
seattle
tampa bay
united states
urbana-champaign
vermont
western mass
worcester

West Asia
Armenia
Beirut
Israel
Palestine

Topics
biotech

Process
fbi/legal updates
mailing lists
process & imc docs
tech