<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.apple-style-span
{mso-style-name:apple-style-span;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Another instance of extra-territoriality, national policy and the Internet.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>M<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> liberationtech-bounces@lists.stanford.edu [mailto:liberationtech-bounces@lists.stanford.edu] <b>On Behalf Of </b>John Scott-Railton<br><b>Sent:</b> Tuesday, August 21, 2012 7:50 PM<br><b>To:</b> Liberation Technologies<br><b>Subject:</b> Re: [liberationtech] Online tools blocked in Syria. Its probably not what you think.<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal>Hi Rafal <o:p></o:p></p></div><div><p class=MsoNormal>(and Libtech)<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><div><div><p class=MsoNormal>I'm a bit surprised. Is there a specific case where a license has been denied, or were services are no longer offered because of export restrictions? <o:p></o:p></p></div></div></blockquote><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Thanks for the question. Some of these issues are articulated in the petition text, and James Ball writing in the Washington Post on the 16th wrote this much more clearly than I can:<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><a href="http://www.washingtonpost.com/world/national-security/sanctions-aimed-at-syria-and-iran-are-hindering-opposition-activists-say/2012/08/14/c4c88998-e569-11e1-936a-b801f1abab19_story.html">http://www.washingtonpost.com/world/national-security/sanctions-aimed-at-syria-and-iran-are-hindering-opposition-activists-say/2012/08/14/c4c88998-e569-11e1-936a-b801f1abab19_story.html</a><o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>To answer your question, here are two of things you can't get right now in Syria:<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><div><p class=MsoNormal><b><u>Targeted Advertising Blocked</u></b><o:p></o:p></p></div><div><p class=MsoNormal><b><i>Problem</i></b>: Inability to do targeted advertising for users registered in Syrian space. E.g. purchasing PSAs on security issues on Facebook. This makes it difficult to do effective messaging on key issues, or for other groups providing information to direct, say, social media users to their content. <o:p></o:p></p></div><div><p class=MsoNormal style='margin-bottom:12.0pt'><b>Current Ad-hoc Solutions</b>: Information provided in higher-cost, more labor-intensive ways (e.g. trainings to small groups, other kinds of messaging that hit much smaller, informal pools of people etc).<o:p></o:p></p></div><div><div><p class=MsoNormal><b><u>Mobile</u></b><u> <b>Apple</b> <b>App Store</b>, <b>Google Play both blocked</b></u><o:p></o:p></p></div><p class=MsoNormal><b><i>Problem</i></b>: Lack of access means inability to securely and straightforwardly access a full range of tools in app stores, including mobile security tools, connectivity solutions (e.g. VPNs) as well as news and information. Bypassing these requires jailbreaking phones.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><b>User Quote on Mobile in Conflict:</b><i> " </i>if an iphone user wants to stream a protest or shelling he needs to jailbreak his phone or find a proxy that they can use to download the app or jailbreak the iphone...then i send him a cracked copy of the apps...[then] he then needs to upload it onto the phone then he is able to use the vpn or streaming app"<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal><b><i>Current Ad-hoc Solutions</i></b>: Unwieldy work arounds. Doesn't work for everyone, phones must be made more vulnerable by being jailbroken.<o:p></o:p></p><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>There are many other issues, including access to Sourceforge, auto-updates for Java, Windows Activation and so on. As the petition frames it, the complexity of this issue stems from the roles played both by sanctions and export licensure, and by companies own reluctance to undertake the legal determination of whether their products are legal (e.g. under General License #5). <o:p></o:p></p></div></div></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>The end result is that Syrians don't have access to important tools. Both government and private sector actors / tool developers have an imperative to address this, we think. On the government end, we think that encouraging better guidance and clarity and review of licensure for Syria is a natural step, and a stronger signal to the private sector. Recent efforts to review and ease sanctions on Iran are a good model to start with.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div></div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><div><div><div><p class=MsoNormal>Anyway, I'm interested what prompted this petition as our organization is about to embark on ramping up of a large-scale activity focused on Syria and digital safety.<o:p></o:p></p></div></div></div></blockquote><div><p class=MsoNormal><o:p> </o:p></p></div><p class=MsoNormal>Good luck! <o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><div><p class=MsoNormal>Very best,<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>John<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div></div><div><p class=MsoNormal><br><br><o:p></o:p></p><div><div><div><p class=MsoNormal><br>Many thanks<br><br>Rafal<o:p></o:p></p></div><p class=MsoNormal><br>Sent from my PsiPhone<o:p></o:p></p></div><div><p class=MsoNormal style='margin-bottom:12.0pt'><br>On 2012-08-21, at 2:18 AM, John Scott-Railton <<a href="mailto:john.scott.railton@gmail.com">john.scott.railton@gmail.com</a>> wrote:<o:p></o:p></p></div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><div><p class=MsoNormal>Hi All,<o:p></o:p></p><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>You're likely aware of US export restrictions intended to limit the Assad Regime's access to monitoring and filtering gear. But there is another side of this coin: unintended and negative effects on Syrians' access to personal communications and security technologies. This inadvertently compliments the regime's own filtering efforts.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal> A few hours ago, an online petition* started circulating, requesting that the Departments of Commerce and Treasury review and streamline export licensure, guidance and review to address the problem. The petition is hosted by <a href="http://Change.org/">Change.org</a>, and led by Dlshad Othman, a Syrian opposition IT expert.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><b>Please consider signing, and spreading the petition link:</b> <a href="http://www.change.org/syria">www.change.org/syria</a><o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>I've written a quick summary.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><b>TL;DR for Libtech:</b><o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>-Some key software and online services, including security tools, aren't making their way to Syrians. <o:p></o:p></p></div><div><p class=MsoNormal>- Even if the tools are exempted under the letter of the law<o:p></o:p></p></div><div><p class=MsoNormal>-Syrian digital activists don't understand why this is happening, given official statements from the US that say these tools should be available. <o:p></o:p></p></div><div><p class=MsoNormal>- Last week, the Washington Post laid out the problem: <a href="http://www.washingtonpost.com/world/national-security/sanctions-aimed-at-syria-and-iran-are-hindering-opposition-activists-say/2012/08/14/c4c88998-e569-11e1-936a-b801f1abab19_story.html">Washington Post Article</a><o:p></o:p></p></div><div><p class=MsoNormal>-Sanctions are complicated, and the process of licensure is quite long. It can be resource consuming, even for big players.<o:p></o:p></p></div><div><p class=MsoNormal>-Penalties for violations are severe<o:p></o:p></p></div><div><p class=MsoNormal>-Companies' risk-averse compliance regimes are partly responsible for why many tools currently legal under the letter of current law, or whose legality could be quickly determined, have not been made available to Syrians.<o:p></o:p></p></div><div><p class=MsoNormal>-Companies will benefit from clearer signals and guidance from Departments of Commerce and Treasury <o:p></o:p></p></div><div><p class=MsoNormal>-A new general license is needed: it should give clearer and more explicit exemptions on personal communications and security technologi balancing legitimate concerns over cryptography and financial transactions with the need to protect the safety of at-risk populations<o:p></o:p></p></div><div><p class=MsoNormal>- For specific licenses, a more streamlined process also needs to be implemented, giving clearer formal and informal guidance to companies, and a faster case-by-case licensing mechanism for companies and NGOs <o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><div><p class=MsoNormal>* (full disclosure, I'm involved) <o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Best,<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>John Scott-Railton<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><p class=MsoNormal><o:p> </o:p></p><div><div><p class=MsoNormal><span class=apple-style-span><span style='font-family:"Helvetica","sans-serif"'>John Scott-Railton</span></span><span style='font-family:"Helvetica","sans-serif"'><br><span class=apple-style-span><a href="http://www.johnscottrailton.com/">www.johnscottrailton.com</a></span><br><br><span class=apple-style-span>PGP key ID: 0x3e0ccb80778fe8d7</span><br><span class=apple-style-span>Fingerprint: FDBE BE29 A157 9881 34C7 8FA6 3E0C CB80 778F E8D7</span></span><o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p></div></blockquote><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><div><p class=MsoNormal>--<br>Unsubscribe, change to digest, or change password at: <a href="https://mailman.stanford.edu/mailman/listinfo/liberationtech">https://mailman.stanford.edu/mailman/listinfo/liberationtech</a><o:p></o:p></p></div></blockquote></div></div><p class=MsoNormal><o:p> </o:p></p></div></body></html>