Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Privacy

VPN Law Latest Step in Kremlin Online Crackdown: Experts

A law coming into force on Wednesday will give the Kremlin greater control over what Russians can access online ahead of a presidential election next March.

A law coming into force on Wednesday will give the Kremlin greater control over what Russians can access online ahead of a presidential election next March.

Providers of virtual private networks (VPNs) — which let internet users access sites banned in one country by making it appear that they are browsing from abroad — will be required to block websites listed by the Russian state communications watchdog.

The law is the latest in a raft of restrictions introduced by President Vladimir Putin’s government and is expected to affect journalists and opposition activists, even though several VPN providers say they will not comply.

Videos by the punk band Pussy Riot and the blog of opposition leader Alexei Navalny have in the past been blocked under a law that allows authorities to blacklist websites they consider extremist.

“Journalists and activists who are using this to put out messages anonymously will be affected,” Eva Galperin, director of cybersecurity at the US-based Electronic Frontier Foundation, told AFP.

Even if they are able to work around the new restrictions, the law will send a powerful message to activists, she said.

“If you’re thinking about taking the steps that you need to stay anonymous from the government, you think maybe it’s not worth it.”

The law will likely be selectively applied and will probably not affect foreign business people using company VPNs, she said.

Advertisement. Scroll to continue reading.

The measure is part of a wider crackdown on online communications, which this month saw the popular messaging app, Telegram, fined for failing to register with the Roskomnadzor communications watchdog and provide the FSB with information on user interactions.

Starting from 2018, companies on the Roskomnadzor register must also store all the data of Russian users inside the country, according to anti-terror legislation which was passed last year and decried by the opposition and internet companies.

On Thursday, the Russian parliament’s lower house approved a draft law that would let the attorney general blacklist the websites of “undesirable organisations” without a court order.

– ‘Less safe, less free’ –

While falling short of a blanket ban on virtual private networks, the new law undermines one of their key purposes and “essentially asks VPN services to help enforce Russia’s censorship regime”, Harold Li, vice president at ExpressVPN International, told AFP by email.

“VPNs are central to online privacy, anonymity, and freedom of speech, so these restrictions represent an attack on digital rights,” Li said.

“We hope and expect that most major VPN services will not bend to these new restrictions.”

Providers ZenMate and Private Internet Access — which said it removed all of its servers from Russia in 2016 after several of them were seized by authorities without notification — have already announced that they would not enforce the list of banned websites.

Companies that do not comply are likely to see their own websites placed on the Russian blacklist.

Amnesty International has called the new legislation “a major blow to internet freedom” and Edward Snowden, the NSA whistleblower who lives in Russia, said the measure “makes Russia both less safe and less free”.

Laws curbing internet freedoms were drafted following mass protests in 2011 and 2012 against Putin over disputed election results.

The new measures come into force ahead of presidential elections next March, when Putin is widely expected to extend his grip on power to 2024.

Russia’s opposition groups rely heavily on the internet to make up for their lack of access to the mainstream media.

– ‘Complete control’ –

“The path that Russia chose four years ago is founded on the concept of digital sovereignty,” said Sarkis Darbinyan, lawyer and director of the Digital Rights Centre.

“It’s the idea that the government should control the domestic part of the internet. Western countries do not support this concept and so what we are seeing today is an Asian-style development of the internet,” along the lines of China and Iran, he said.

But Galperin of the Electronic Frontier Foundation noted that even if the Kremlin’s end goal is “complete control of communications on the internet”, its technical capabilities still lag way behind China with its “Great Firewall”.

Many of the invasive measures pushed by the Kremlin are comparable with the snooping powers demanded by Western governments, she said.

“Russia will frequently point to the fact that the FBI and (British Prime Minister) Theresa May want these powers as reasons why they should have them, and why they’re compatible with human rights.”

Written By

AFP 2023

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

Cody Barrow has been appointed as CEO of threat intelligence company EclecticIQ.

Shay Mowlem has been named CMO of runtime and application security company Contrast Security.

Attack detection firm Vectra AI has appointed Jeff Reed to the newly created role of Chief Product Officer.

More People On The Move

Expert Insights

Related Content

Artificial Intelligence

Two of humanity’s greatest drivers, greed and curiosity, will push AI development forward. Our only hope is that we can control it.

Cybercrime

Daniel Kelley was just 18 years old when he was arrested and charged on thirty counts – most infamously for the 2015 hack of...

Cybercrime

No one combatting cybercrime knows everything, but everyone in the battle has some intelligence to contribute to the larger knowledge base.

Cybercrime

The FBI dismantled the network of the prolific Hive ransomware gang and seized infrastructure in Los Angeles that was used for the operation.

Cybersecurity Funding

Los Gatos, Calif-based data protection and privacy firm Titaniam has raised $6 million seed funding from Refinery Ventures, with participation from Fusion Fund, Shasta...

Ransomware

The Hive ransomware website has been seized as part of an operation that involved law enforcement in 10 countries.

Privacy

Employees of Chinese tech giant ByteDance improperly accessed data from social media platform TikTok to track journalists in a bid to identify the source...

Privacy

Many in the United States see TikTok, the highly popular video-sharing app owned by Beijing-based ByteDance, as a threat to national security.The following is...