Comments (1)
An article by Ramsha Jahangir in Dawn, dated 2020-06-16, provides more details. The PTA has recently deployed a new DPI-based VPN detection system supplied by Sandvine.
https://www.dawn.com/news/1563843 (archive)
PTA asks internet users to register VPNs to avoid ban after June 30
KARACHI: Internet users in Pakistan will be unable to browse the web using encryption software after June 30, unless they register Virtual Private Networks (VPNs) with the telecom authorities.
Legitimate users can register their VPNs through their service providers by filling two forms, including undertaking and provision of basic documentation, without any charges, the PTA told Dawn.
A registration form shared with Dawn by an internet service provider shows that users will be required to disclose their static IP addresses as well as details of the VPN software they use, the purpose, and business details.
To monitor and curbing “grey traffic” — which includes Voice over Internet Protocol and Virtual Private Networks — the PTA has deployed a sophisticated web monitoring system.
The equipment, which is worth $18.5m, is provided by Canada-based company Sandvine. The web monitoring system will use Deep Packet Inspection (DPI) to monitor communications, measure and record traffic on behalf of the PTA.
“The PTA can block VPN traffic by analysing the country’s traffic, flagging traffic that looks potentially VPN-like, and then breaking that connection,” said Amin Shah Gilani, former interim chief technology officer of Patari.
Sandvine, according to Mr Gilani, uses a mix of techniques to identify the type of traffic flowing through the system. This includes looking for patterns in the individual chunks of data as they pass through the system, observing the behaviour of a citizen’s traffic and matching it with previously known types of behaviours to understand what they’re doing.
It also involves machine learning models, where a computer has been trained to identify traffic types based on past data.
Several users have reported throttling of VPN services in Pakistan recently, including inability to access Tor Browser — a software that allows users to browse the Web anonymously.
However, the PTA said Tor was not blocked by the PTA and the authority would begin banning services after the June 30 deadline.
Citizen Lab's posts tagged "Sandvine" have information on Sandvine's past cooperation with censorship and malware delivery.
By searching Reddit (archive), I found an article from 7 months ago saying that the government had made a $18.5 million contract with Sandvine to create a "web monitoring system."
https://www.codastory.com/authoritarian-tech/surveillance/pakistan-nationwide-web-monitoring/ (archive)
Pakistan moves to install nationwide ‘web monitoring system’
Text by Umer Ali and Ramsha Jahangir 24 October, 2019
Pakistan has acquired the services of a controversial Canada-based company to help build a nationwide “web monitoring system,” Coda Story can reveal.
Sandvine is expected to provide equipment for monitoring and analyzing all incoming and outgoing internet traffic from Pakistan.
The agreement raises serious concerns about privacy and civil liberties in Pakistan, where government critics have sometimes seen digital retribution from officials and other powerful groups.
According to the agreement — a copy of which was exclusively shared with Coda — the contract is worth $18.5 million and dated December 12, 2018. The “web monitoring system” will use Deep Packet Inspection (DPI) to monitor communications, measure and record traffic and call data on behalf of the country’s national telecommunications regulator, Pakistan Telecom Authority (PTA).
The new system is the result of a controversial 2010 law that mandates the monitoring and blocking of any traffic to and from Pakistan.
Sandvine has come under criticism in the past for selling technology to authoritarian regimes. The company came under fire last year after an investigation by the Canada-based Citizen Lab revealed Sandvine DPI was being used in Turkey, Egypt and Syria to redirect users to download legitimate programs “bundled with spyware.”
Citizen Lab also found out that the Sandvine DPI equipment was being used to “block political, journalistic, and human rights content.”
from bbs.
Related Issues (20)
- Blocking of fully encrypted protocols (Shadowsocks, VMess) in Russia, targeting HTTPS traffic fingerprints HOT 23
- Blocking of *.pages.dev in Russia HOT 4
- I have my own VPN application, and I published it in the app markets. What is the difference between LTE and Home internet? HOT 3
- Snowflake, a censorship circumvention system using temporary WebRTC proxies (USENIX Security 2024) HOT 3
- Bleeding Wall: A Hematologic Examination on the Great Firewall (FOCI 2024)
- Assistance Needed to Bypass Restrictions on Irancell Network HOT 5
- VPN blocking in Myanmar since 2024-05-30 reportedly implemented by a Chinese company, Geedge Networks HOT 6
- Is TLS fragment available in China? HOT 1
- Firefox Add-ons blocks access to some proxy extensions from Russia HOT 6
- vmess://
- Is it possible to implement a man-in-the-middle (MITM) tool to bypass censorship? HOT 11
- ss://
- Issues with Trading & Banking Apps and Google Services HOT 6
- Free livestream of FOCI, PETS, and HotPETs, 2024-07-15 to 2024-07-19 HOT 4
- Russia forces Apple to remove dozens of VPN apps from App Store HOT 5
- Turkmenistan:"Internet amnesty? 3 billion IP addresses, hosting and CDNs unblocked" (2024-07-17)
- Looking at the Clouds: Leveraging Pub/Sub Cloud Services for Censorship-Resistant Rendezvous Channels (Update)
- 使用Google新部署的W开头的中间证书签发的网站在TLS 1.2下100%阻断 / Sites issued with Google's newly deployed intermediate certificates starting with W are 100% blocked under TLS 1.2 HOT 7
- Throttling→blocking of YouTube in Russia, 2024-07-12 HOT 12
- Security Notions for Fully Encrypted Protocols (FOCI 2023) HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from bbs.