- ooni-talk - lists.torproject.org

OONI statement in support of OTF
by Maria Xynou 22 Jul '20

22 Jul '20

Hello, The OONI team just published a second statement in support of the OTF: https://ooni.org/post/2020-support-otf/ In our latest statement, we share our experience working with the OTF and discuss how they played a crucial role in supporting the fight against internet censorship worldwide. We also discuss the importance of expertise in supporting innovative projects, and the importance of trust in OTF leadership by the internet freedom community. Please help share our statement: https://twitter.com/OpenObservatory/status/1285999878691336192 Thanks, Maria. -- Maria Xynou Research & Partnerships Director Open Observatory of Network Interference (OONI) https://ooni.org/ PGP Key Fingerprint: 2DC8 AFB6 CA11 B552 1081 FBDE 2131 B3BE 70CA 417E

1 0

Updated OONI Data Policy
by Maria Xynou 22 Jul '20

22 Jul '20

Hello friends, We have updated the OONI Data Policy: https://ooni.org/about/data-policy/ The latest version (1.4.0) of the OONI Data Policy includes the following changes: * We now use our own ASN database (following the changes to MaxMind's license) * You can no longer opt out of submitting country code information (e.g. "IT" for Italy), as this significantly limits the value of measurements (i.e. we have no idea where a test was run) * We use a self-hosted analytics platform on our websites and OONI Probe apps in order to better understand how our apps are used, improve our understanding of user needs, improve OONI tools, and better serve the OONI community. You can opt out of our use of analytics by disabling the collection of app usage statistics in the OONI Probe app settings (and you can opt out of our use of analytics on ooni.org and explorer.ooni.org by unchecking the opt-out box at the end of our Data Policy). * In our Data Policy, we have added a section on the collection of app usage statistics * In our Data Policy, we have added a section where we disclose what information we will collect if you opt in to push notifications * OONI measurements are openly published by default, but we will not publish data related to app analytics and push notification support (which is securely stored separately from the public measurement metadb) Happy to address any questions you may have. Thanks, ~ OONI team. -- Maria Xynou Research & Partnerships Director Open Observatory of Network Interference (OONI) https://ooni.org/ PGP Key Fingerprint: 2DC8 AFB6 CA11 B552 1081 FBDE 2131 B3BE 70CA 417E

1 0

[Report] Network performance during the COVID-19 pandemic in Northern Italy
by Maria Xynou 17 Jul '20

17 Jul '20

Hello friends, Today OONI and M-Lab co-published a report examining network performance in Northern Italy during the peak of the COVID-19 pandemic. You can read the report on the following sites: * OONI: https://ooni.org/post/2020-network-performance-covid19-italy/ * M-Lab: https://www.measurementlab.net/blog/measurement-observations-on-network-per… We analyzed NDT measurements collected from the provinces in the Milan metropolitan area between 1st January 2020 to 15th June 2020 with the goal of examining whether network performance was affected amid the surge in internet use during the nationwide lockdown. In summary, we observe: * Significant increase in the number of NDT tests run per day around the beginning of Italy’s nationwide lockdown (which started on 10th March 2020); * Reduced NDT download and upload speed results during the nationwide lockdown in Italy (between March 2020 to May 2020); * Improved NDT download and upload speed results from early May 2020 onwards, when the Italian government gradually started to lift the strict lockdown measures. As the available measurements suggest that there may be a correlation between increased internet use and reduced network performance, they highlight the need to invest in internet infrastructure that is more robust and sustainable in the long-term. They also highlight the need for more longitudinal measurements collected from more stable vantage points to improve our understanding of network performance issues. You can run NDT and contribute measurements on network performance through the OONI Probe apps (https://ooni.org/install/) or by deploying the Murakami tool (https://github.com/m-lab/murakami) in a Docker container. Please help share our report: https://twitter.com/OpenObservatory/status/1284162147249987584 Thanks, ~ OONI team. -- Maria Xynou Research & Partnerships Director Open Observatory of Network Interference (OONI) https://ooni.org/ PGP Key Fingerprint: 2DC8 AFB6 CA11 B552 1081 FBDE 2131 B3BE 70CA 417E

1 0

[Report] Investigating TLS blocking in India
by Maria Xynou 08 Jul '20

08 Jul '20

Hello, Today OONI and India's Centre for Internet & Society (CIS) published a joint report investigating TLS blocking in India. You can read the report here: https://ooni.org/post/2020-tls-blocking-india/ This investigation sought to understand whether there were cases of TLS blocking that were not only caused by the value of the Server Name Indication (SNI) field in the ClientHello TLS message, but also by the destination IP address. This was part of our efforts to expand our SNI blocking methodology (discussed here: https://ooni.org/post/2020-iran-sni-blocking/) To this end, we wrote and ran a series of experiements (that will eventually be integrated into the OONI Probe measurement engine) to measure the blocking of four domains (facebook.com, google.com, collegehumor.com, and pornhub.com) on three popular Indian ISPs: ACT Fibernet (fixed line), Bharti Airtel, and Reliance Jio (mobile). We recorded SNI-based blocking on both Bharti Airtel and Reliance Jio. We also discovered that Reliance Jio blocks TLS traffic not just based on the SNI value, but also on the web server involved with the TLS handshake. We also noticed that ACT Fibernet’s DNS resolver directs users towards servers owned by ACT Fibernet itself. Such servers caused the TLS handshake to fail, but the root cause of censorship was the DNS. We also found that one of the tested endpoints (for collegehumor.com:443) does not allow establishing a TCP connection from several vantage points and control measurements. Yet, in Reliance Jio, we saw cases where the connections to such endpoints completed successfully and a timeout occured during the TLS handshake. This is likely caused by some kind of proxy that terminates the TCP connection and performs the TLS handshake. Please share our research with your networks: https://twitter.com/OpenObservatory/status/1280931688391065600 Thanks, ~ OONI team. -- Maria Xynou Research & Partnerships Director Open Observatory of Network Interference (OONI) https://ooni.org/ PGP Key Fingerprint: 2DC8 AFB6 CA11 B552 1081 FBDE 2131 B3BE 70CA 417E

1 0

Event - Internet Measurement Village 2020
by Maria Xynou 03 Jul '20

03 Jul '20

Hello friends, We're excited to host the first online Internet Measurement Village. Learn all about it here: https://ooni.org/post/2020-internet-measurement-village This is an online event that starts next Wednesday, 10th June 2020 and ends on Friday, 3rd July 2020. The schedule is available here: https://ooni.org/post/2020-internet-measurement-village#schedule Almost every day, we will live-stream presentations on: * Internet measurement projects (those that measure internet censorship, internet performance, and internet outages) * Local censorship measurement projects (in Venezuela, Ukraine, and Southeast Asia) * Advocacy efforts against internet shutdowns (globally and in West Africa) * Censorship circumvention tool projects All presentations will be live-streamed on the OONI YouTube channel: https://www.youtube.com/c/OONIorg We will include a live chat in the stream so that you can ask presenters questions. Please help spread the word: https://twitter.com/OpenObservatory/status/1268951324378488832 Thanks, Maria. -- Maria Xynou Research & Partnerships Director Open Observatory of Network Interference (OONI) https://ooni.org/ PGP Key Fingerprint: 2DC8 AFB6 CA11 B552 1081 FBDE 2131 B3BE 70CA 417E

1 4

Register for RightsCon Online
by Maria Xynou 02 Jul '20

02 Jul '20

Hello friends, This year (in light of COVID-19) RightsCon is taking place entirely online! * When? Last week of July => 27th-31st July 2020. * Where? Online (details will be shared for each session) * Why attend? RightsCon is the world's largest digital rights conference, annually bringing together human rights defenders, technologists, policy makers, academics, people from the industry, etc to discuss how to make the Internet a better place for human rights. There will be many tracks and many interesting sessions! As part of RightsCon Online, OONI will participate in/facilitate the following sessions: * Investigating internet shutdowns with open data (co-facilitated with IODA) * Ethics around network measurement * OONI Explorer tech demo Register for FREE before 20th July 2020: https://www.rightscon.org/join-us-at-rightscon-online-registration-now-open/ Hope to see you there! Cheers, Maria. -- Maria Xynou Research & Partnerships Director Open Observatory of Network Interference (OONI) https://ooni.org/ PGP Key Fingerprint: 2DC8 AFB6 CA11 B552 1081 FBDE 2131 B3BE 70CA 417E

1 0

Test Tor & Psiphon with OONI Probe Mobile 2.5!
by Maria Xynou 29 Jun '20

29 Jun '20

Hello friends, We're super excited to share that OONI Probe Mobile 2.5 is out! Why is this so exciting? 1) Circumvention tool testing => The latest release includes OONI Probe tests for measuring the blocking of Tor & Psiphon! 2) 5 new languages => Thanks to the Localization Lab community, the OONI Probe mobile app is now also available in Indonesian, Thai, Romanian, Slovak, and Icelandic (in total, the OONI Probe mobile app is now available in 20 languages!) Please update to the latest version: https://ooni.org/install/mobile And help spread the word: https://twitter.com/OpenObservatory/status/1277648271067033601 Thanks, ~ OONI team. -- Maria Xynou Research & Partnerships Director Open Observatory of Network Interference (OONI) https://ooni.org/ PGP Key Fingerprint: 2DC8 AFB6 CA11 B552 1081 FBDE 2131 B3BE 70CA 417E

1 0

Thursday discussion on internet censorship in Manipur, India
by Maria Xynou 24 Jun '20

24 Jun '20

Hello, This Thursday, we're hosting an online discussion on internet censorship in Manipur, India and its impact on womxn in the region. * When? Thursday, 25th June 2020 at 10am UTC * Where? OONI Slack channel: https://slack.ooni.org/ (bridged with IRC: ircs://irc.oftc.net:6697/#ooni) * Who? We will be joined by Chinmayi S K, OTF Information Controls Fellow (hosted with OONI) This will provide an opportunity to discuss Chinmayi's recently published research report, titled "Those Unspoken Thoughts: A study of censorship and media freedom in Manipur, India". Summary of report: https://ooni.org/post/2020-those-unspoken-thoughts-otf-fellow-report/ Full length report: https://ooni.org/documents/those-unspoken-thoughts-otf-fellow.pdf The discussion will start off with a brief summary of the key findings (by Chinmayi), and then we will open up the floor for your questions. Please join us! :) Best, Maria. -- Maria Xynou Research & Partnerships Director Open Observatory of Network Interference (OONI) https://ooni.org/ PGP Key Fingerprint: 2DC8 AFB6 CA11 B552 1081 FBDE 2131 B3BE 70CA 417E

1 1

New report: DNS over TLS blocked in Iran
by Maria Xynou 24 Jun '20

24 Jun '20

Hello friends, Today OONI published a new research report, titled: "DNS over TLS blocked in Iran". You can access this report here: https://ooni.org/post/2020-iran-dot/ DNS over TLS (DoT) is a network protocol that secures DNS queries (https://ooni.org/support/glossary/#dns-query) DoT improves the privacy and security of DNS queries, and makes DNS-based blocking harder. We investigated whether DoT works in Iran by gathering a list of 31 well-known DoT endpoints and running experiments from four distinct Iranian mobile and fixed-line Internet Service Providers (ISPs): MCI, TCI, Irancell, and Shatel. We discovered that: * 57% of the endpoints are blocked on a least one ISP; * the blocking is not implemented uniformly across ISPs; * most blocking happens by interfering with the TLS handshake; * in some cases TLS handshake blocking seems to depend on the SNI, while in other cases it seems to depend strictly on the TCP endpoint being used; * forcing TLSv1.3 does not change the rate of successful TLS handshakes compared to letting the server choose a TLS version between v1.0 and v1.3. In our report, we share details from our experiments and findings. Please share our research: https://twitter.com/OpenObservatory/status/1275842846520741888 Thanks, ~ OONI team. -- Maria Xynou Research & Partnerships Director Open Observatory of Network Interference (OONI) https://ooni.org/ PGP Key Fingerprint: 2DC8 AFB6 CA11 B552 1081 FBDE 2131 B3BE 70CA 417E

1 0

OONI statement in support of the OTF
by Maria Xynou 19 Jun '20

19 Jun '20

Hello, The Trump administration recently appointed a new CEO to USAGM, who fired the leadership of the Open Technology Fund (OTF). Meanwhile, lobbyists are suggesting that funds that would normally go to the OTF should go to some commercial VPNs instead. This is extremely concerning, given that the OTF is one of the main funders of free censorship circumvention and privacy-enhancing technologies that human rights defenders and vulnerable communities around the world rely on. Today, OONI published a statement on why the OTF is essential for internet freedom: https://ooni.org/post/2020-06-19-save-internet-freedom-support-the-open-tec… Please help share it: https://twitter.com/OpenObservatory/status/1274030123608616960 And please join us in signing this letter to congress: https://saveinternetfreedom.tech/ (you don't need to be American, we aren't either!) Thanks, Maria. -- Maria Xynou Research & Partnerships Director Open Observatory of Network Interference (OONI) https://ooni.org/ PGP Key Fingerprint: 2DC8 AFB6 CA11 B552 1081 FBDE 2131 B3BE 70CA 417E

1 0