Facebook and Contestation

Where did it starts?

This post is the result of a discussion I had with @ElodieChatelais, @jujusete and @oOBaNOo following the publication of an article on indymedia written by NADIR (the piece is here. This article, a bit harsh but hey activists can be harsh, expose the implication of using Facebook to plan the contestation.

The context in which it has been publicized is the occupation of the ZAD in the NDDL airport battle (because,yes, it looks like a battle).

There is, in fact, two problems at stakes here. The first one is the question of the tool used to plan and organise a contestation or a social movement that can lead to repression from a form of government (may it be civilized or not). The second one is the communication around a manifestation, this communication is a necessity to give a movement some momentum.

The people I’m talking with about those issue generally says that they use Facebook, even if they know the so called danger, because everyone is doing it and because there’s no time to develop new tools to communicate,it’s time to fight.

And, as you may expect it, I disagree with that.

What exactly is Facebook

Facebook is a tool. It’s not a place (for it has no physical boundaries), so people aren’t on Facebook – they are connected or not. It’s a tool that is, apparently, good at building and growing social networks and bonds. It’s a tool that is, apparently, good to propagate idea and memes.

It is supposed to be the perfect tool to organise your private life except that it is a lot of thing, except private. Facebook is the biggest database of consumering habits and the biggest maps of social network that have ever existed. It is run by a private corporation whose only goal is to monetize your privacy by selling it to everyone who is willing to pay for it.

Let’s be clear about that, Facebook is to freedom what arsenic is to life. Facebook don’t want you to leave their pages, they want to know exactly where you’re going, who you’re talking with and what you’re talking about. They want to control what is said, what has been said and they want to keep a log of everything, even if you’ve deleted it. They even have personal profile and data collections about people who do not even have an account. If,at any time, a form of government asks you to wear a GPS enabled device, to permanently wear a voice recorder, and to asks an ID for everything you’re doing (from reading newspaper, to shopping) you will call it a fascist state,but that’s why Facebook is doing. They’re gathering data about your habits online, and you do not even know what they know about you (also, they also possess all the content you’ve generated on their websites).

So yes, Facebook is a poison.

Organise

So, organisation. If you’re plotting something on Facebook, they will know about it. I mean, you’re gonna use a platform that keeps deleted personal messages, do not hash those messages (granting the ability to read them), is centralized and closed, and maps social networks for profit.

Imagine a government wanted to infiltrate a social network,Facebook provides them with the perfect tool. They can create profiles and join your social group quite easily. They can probably forces Facebook to collaborate and to just give them all the data they got on you – which is way too much.

So, organising yourself for something that can bring to repression is endangering yourself as well as all the other ones implied, even if they’re not using Facebook. By the only fact that one person is using it among the people who tries to organises themselves put the whole organisation at risk.

I’ve been told that Facebook is a good way to authenticate the people you’re speaking with. Well, it does not protect yourself from impersonation, someone stealing, or building, an identity that they will later uses to infiltrate your network – But it’s not a Facebook related issue – and it’s not a proof of authenticity. A session can be hijacked, a password can be stolen, etc. The only way you have to authenticate is cryptography (using a pre-shared secret) and Facebook does not provides tool for that.

You need to organise your contestation. You do not need Facebook for that. What you need is tools that will be usable, decentralized and free – as in freedom. They exist, you do not need to build them. Pick one, there are wikis, communication server (think jabber for instance), platforms such as https://kune.cc (based on Wave) or https://riseup.net already exists and are tailored for paranoid activists (well, each activists should be paranoid).

If you’re not in total and full control of your communication link, it means that your communication link is controlling you and your organisation. And the only way to get in total control of those links is for them to be free and decentralized (and, in the ideal case, to be run by each and everyone on his personal home box).

Communication

The other issue is communication. Protesting, disobeying, contesting is, in fine, a communication issue. You will need communication to tell other people what you’re doing and why and, since you’re convinced you’re on the good side, to try to convince them to join you, to develop your movement.

So, you need to reach out. And to go where people are. The common mistakes is to publish your content on Facebook. By doing so, you’re doing two things. First, you give a non revocable, non exclusive licence on your content to Facebook. Second you centralise all the information in one site.

When Tim Berners Lee invented the World Wide Web, he designed a handy tool to help the sharing of information. This tool is the hyperlink. It grants to someone the possibility to go from one website to another one by just following a link. No registration system, no directory system, just the URL describing the resource to go onto. Facebook tries to discourage this (because most of the interaction done is made by like of Facebook hosted content) and so Facebook tries to destroy the basis of the Web.

Hypertext is all that is needed to propagate information. This text as a Uniform Resource Locator (yeah, URL) and that’s all what you need to access it. A content on Facebook requires you to have an account to access it.

But, people are on Facebook you’re going to tell. Well, no. People arein their houses. They’re not on Facebook. You can reach them with so much tools that I won’t count them. Also, I’m not sure that seeing a like (one among so many others) on a wall will create implication. Evgeny Morozov has wrote some good pieces about slacktivism and you should read it.

I do believe that, when I reach out to people, I’m best in the flesh, having a casual talk with my inner circle friends. They’re the people I have most influence on, and this is mutual (hell, friends exist for a reason: manipulate them and being manipulated by them). It won’t take me long top have ten more people fighting a cause (maybe an evening, perhaps two) when having a discussion. To get this same results on any social media (and I do not mean 10 likes, I mean 10 people that will do something), it will takes me way much more works.

I do not think you need Facebook to get momentum and to motivate people. You do not need Facebook to have media coverage. You do not need Facebook to change the world. You do not need a megaphone to speak – even if that’s classy – you need arguments, idea, and freedom. Facebook can’t provides any of them.


Companies and hacktivism

Companies and hacktivism

Google’s case

On the 12nd of March, I was at the Cyber-censorship event organized by RWB and sponsored by Google. There was a nice panel after that, with a lot of activists from Belaruss, Egypt, Tunisia and Syria among others. And, well, could not restrain myself, but I’ve expressed some worries about Google, Skype and others companies providing tools used by activists to communicate and about the lack of openness of them.

The Google representative that was there answered briefly that

"[He] do not understand the criticism about the lack of openness of Youtube, everyone can access it".

Well, that’s not true. For instance, tehre’s a video posted by Fhimt.com was locally censored for no apparent reason (the story is on reflets.info). And that’s only one case. I’ve got another one of an allegedly leaked video of torture of syrian that is ‘not available’ (but given the numbers of views and other thing, it was available), and while building the TBS I saw that about twenty videos we once got in the past, are not available anymore.

So, yeah, youtube.com is available in most part of the world. But not the content of it, and Google gives no reason of the specifics (except for ‘copyright claims’), they give no guarantee that anything that is available now, will be available tomorrow.

Worst, when reading their terms of use they restrain the avaibility of the contents to the only authorized Google apps (youtube.com being one), that means that, yes TBS is violating the clause 4.C and H of the terms of use:

You agree not to access Content through any technology or means other than the video playback pages of the Service itself, the Embeddable Player, or other explicitly authorized means YouTube may designate.

You agree not to use or launch any automated system, including without limitation, "robots," "spiders," or "offline readers," that accesses the Service in a manner that sends more request messages to the YouTube servers in a given period of time than a human can reasonably produce in the same period by using a conventional on-line web browser. Notwithstanding the foregoing, YouTube grants the operators of public search engines permission to use spiders to copy materials from the site for the sole purpose of and solely to the extent necessary for creating publicly available searchable indices of the materials, but not caches or archives of such materials. YouTube reserves the right to revoke these exceptions either generally or in specific cases. You agree not to collect or harvest any personally identifiable information, including account names, from the Service, nor to use the communication systems provided by the Service (e.g., comments, email) for any commercial solicitation purposes. You agree not to solicit, for commercial purposes, any users of the Service with respect to their Content.

So, it means that, everything that is on youtube is subject to the good will of Google. If they decide for one reason or another that you must not see a content on youtube, then they will destroy it and you have no legal way to make an archive of it. Not without a commercial agreement.

Hence, the youtube services is, indeed, free of charge and accessible. But it is not free at all, because you cannot do a lot of things with it.

I mean, Google could be an amazing archiving tool, they have an insane amount of data at end, and they could archive them, providing to the citizens that content on Google (email, video, docs, search results, whatever) will always be available using, for instance, documented and free standard. But they aren’t and they won’t.

They won’t because, besides what Google can say, they are a company. And the only goal of a company is to earn a big pile of cash. They can have an ethics, they can pretend their going social, whatever. In the end, what will dictates their move is the quantity of money they will have at the end of the month.

That’s why they moved in China, despite the censorship over there. They saw 300 millions people that can use Google, that’s 300 millions people that can be submitted to compartmental analysis to serve theme efficiently targeted advertisement (which is the Google job).

Google is not about freedom of information, so they accepted a partial censorship from China authority. Then, they discovered they where targeted by a huge attack, the Aurora attack, probably commanded by China’s authority to go after some intellectual property of Google, so they went out.

They didn’t move because their tool was censored. They moved because their business was under attack. They’ve done some PR move about the China being uncooperative, violating their property (no shit?) and forcing them to do insane censorship (oh, really? So, you’re not censoring yourselves?) and then they moved to Hong Kong, acting like the good guys.

The good guys will have stay there, will have disobey and will have provided activists there online tool to preserve their anonymity and their security, fighting the laws and regulation of the Chinese government.

The Skype case

Skype is even worse. Even without being now a Microsoft product, Skype is designed on closed and obfuscated protocols that are designed to go through most of the firewall on both side of the call. The utility allow for Desktop Sharing that grants execution on distant host, your address book is stored somewhere, the cryptography is based on secret algorithm not documented anywhere, so it is Security through obscurity which is as bad as no security (even worse, because it gives a false feeling of security).

The only strength of Skype is to have a good marketing team, and to be available on whatever platform you can think about (the free of charge thing is the same for all VoIP providers).

One big problem with Skype, is the auto-update thing. It is used a lot to deploy malware, notably in Syria where activists get killed for organized themselves (so, yes, a government using such malware can now the people you’re calling and can arrest you and them, alongside with their friend and families). I’m not saying Skype is collaborating with government, just that a closed proprietary software that will get installed on all the computers, that can install things on his own without warning users, that can get through all firewall and that do things in your back is called a trojan over here.

Worst, now Microsoft bought Skype. And Microsoft have a lot of patents. There is one that need all your attention right now. The patent 2010153809 labelled ‘Legal Intercept‘. So, in short, Microsoft as patented the technology required to give any government the capability to intercept any communication using one of their software. Most of the government now have law to authorize such things. There was law for that in classic-phone system, as long as on GSM, and I always thought it’s legal for them to intercept any communication they need to build a case against you as long as the legal system allow them (and it will). The thing with Skype is, it was supposed to be end to end encrypted, so, mainly, the snoopers cannot have a verbatim of the talk.

With this patent, however, Microsoft is telling that any government can now intercept communication in Skype. So, basically, anyone who have access to the Microsoft tool for lawful intercept can now intercept Skype communication. So, the encryption is now broke and will never be recoverable.

The weird thing is that the Syrian government, for instance, has law that grants him access to spy on its people. With this kind of patent, they do not even need DPI and hackers tobreak it, just to ask Microsoft to give them the key of the system.

Facebook Google, Twitter and the One identity problem

As I saod before, most of the website you use have only one goal: serves you with the data they want you to access (because they’re paid for that), not the one you want. And, for this to be efficient, they need to know you in a lot of details.

They do not care about you having a pseudonym or a real name (except for Facebook). What they do care about is the fact that you must have only one name. They need it, because they wants to track you everywhere you go to build of profile of you they can sell to whoever pays for it (or access their data using more creative way).

For instance, Google has changed their Privacy Policy, requiring that you use only one account for all their services (and that all of those services will share data with all the services). So, youtube will now about what you wrote on gmail and what’s on your blog (if you use blogger).

Facebook, and its ‘like’ button is even worse. If you’ve got a facebook cookie in your browser (which, if you have a facebook account, is the case) and even if you’re disconnected, the simple fact of loading the ‘like’ button (which is a script) will tell it to facebook.

Twitter is now selling your public tweets (and all the informations associated to each tweet, including localisation if it’s active). I still do not understand who will buy something that is already free because it’s public, so I suppose they, in fact, sell analysis and profile that match some criteria to target them with advertisement. Or by selling them to a governmental agency that is willing to pay to watch their citizen. Don’t think it’s not the case, government are spending a huge amount of money on CCTV camera and other way of spying on their people.

So what?

The thing is that those company have product almost in every country, their product is free of charge because the users are the product, but still, you have it every where. They can live with insane traffic, they’re translated in the much common languages, they are easy to use, multi-platform and idiot-proof. And that’s why people uses them to share pictures of their sex life or of their last trip to Vietnam, to share videos of riots and uprising or about clever cats playing on a keyboard, to harass underage girls or to share an amazing animation clip.

Those tools are everywhere because they are big, they’ve made internet popular, they’re in part responsible for the development of those smart-phones and of the eradication of the dumb-phones.

And given that, and the fact that the last websites you will access in case of crisis are Google, Facebook and Twitter while news sites will be closed to protect the government, activists can and will uses them. And some of them will get killed for this, because those website do not provides way of communication that are really anonymous.

Google told they’re making an effort to be as ethical as possible. If they really was, they’ll open the code they use on their servers, they’ll open and disclose their algorithm, they’ll provide way of enjoying fully their services without building a profile.

Surely, they’ll earn less money. But they will still earn some. Plus, some people should have remain alive and free instead of being jailed for having uploaded content on facebook or Google.