How will the Autonomous Runet and than it threatens users
Right / / December 24, 2019
What is the essence of the law
Without going into technical details (which we'll do later), the meaning of a document is this. After the lawOn Amending the Federal Law "On Telecommunications" and the Federal Law "On Information, Information Technologies and Protection of Information" due to Roskomnadzor will take on a central Internet governance.
This will enable the agency to carry out blocking of all sizes - from specific sites before closing traffic channels, including cross-border. Lock themselves will become more accurate and faster. Runet completely isolated from the inside, too, Roskomnadzor can.
Pavel Lapin, a system administrator
Such powers are given authority in the event of threats to the stability, security and integrity of the operation of the Internet in Russia. What exactly - it is not yet known. With a list of the latest determined by the Russian government and put the Russians before the fact. Under normal situations, locks will, as before, to engage providers.
Theoretically, Roskomnadzor may, if necessary, take all these measures and before the law came into force. But now this path is longer. Office sends an order to the provider and blocks offending. It takes longer, but the accuracy is poor. For example, during a large-scale hunting of IP-addresses
Telegram It was violatedRoskomnadzor blocked the IP addresses of Facebook, Twitter, "VKontakte", "Yandex" and even Liveinternet Herman Klimenko work casually got under a hand Facebook, Twitter, "VKontakte", "Yandex".Why do it
According to the official version, the law should provide a safe and stable operation of the Internet in Russia. system will be created, through which Runet will work even if the country is shut off from the global network. As follows from the explanatory notes that these measures are taken in response to the possible action by the United States.
In practice, the sudden shutdown of the global Internet is less likely than in the Policy Statement.
There is no "black suitcase", in which the emergency shutdown button on the Russian web. But in general, the technical possibilities for this, the West has. For example, in 2012 the United States accidentally disabledSnowden: NSA accidentally caused Syria's internet blackout in 2012 Internet in Syria track data when you try. At the same time when it would have been done on purpose, yet.
Also, the new law, according to the plan, is to protect data from Russian leakage. Now part of the information can be transmitted via communication lines, actually located abroad, which creates an opportunity to intercept them. At the same time, studies show that only 3%RIPE NCC Country Report: Russia Russian domestic traffic is outside the country and it is transmitted most often through Sweden, Germany and Ukraine. Usually foreign networks are used, if a route is shorter and cheaper.
Lawmakers insist that they have no purpose to restrict access of Russians to the outside Internet.
That will change the law
The document includes several global steps:
1.operators They will be required to be installed on their networks, technical means of countering threats to security and report to Roskomnadzor, which they did. What kind of equipment is not yet known, but they will be issued free of charge. According to preliminary estimatesExecution of a bill on sovereign Runet gone up to 30 billion, From the budget for this it will be allocated 30 billion rubles, and this is not the final sum. For comparison, the cost of Tomsk oblast budget for 2019 is estimatedAbout Tomsk Oblast Law "On the regional budget for 2019 and the planning period of 2020 and 2021's" 33.8 billion.
How to install and use such devices is not yet known. It later decides to government. The devices will filter the traffic and block prohibited Internet resources, including automatically.
2. Operators and other entities subject to the Law, will be obliged to report on the communication channels that cross the border of Russia, Roskomnadzor. They will also report why use link and any communications on it installed.
3. Roskomnadzor will create a registry of traffic exchange points. This communication nodes to which service providers are connected, in order to reduce transmission routes and reduce the cost of traffic. Operators also will be obliged to report data on the network device.
4. national system will be formed domain nameIn which the information will be stored on the Russian network addresses and domain names. The law details about it there. It is known that will be engaged in the creation of a system of certain non-profit system of accountability Roskomnadzor.
5. For telecom operators provide teaching, during which they have to work out action in the event of threats Runet.
6. Politics will have to go to the Russian encryption, including the exchange of information with the citizens.
Than it threatens internet users
Malfunctions Network
In the early stages of implementation of the law aimed at the stability of the Internet, this is the stability may be adversely affected. The possibility of failure during the installation of traffic control devices are not excluded in the text of the regulation. Therefore, the "Gazprom" has already askedTechnological networks do without "sovereign Runet" bring the enterprise network from the application of the law as a violation of their work may lead to emergency situations.
Providers punished for failures caused by the new control devices, will not. It is written in the law.
blocking
In the future much will depend on the list of threats, which will form the government, and the scale of the lock. When targeted attacks users lose access site specific. Worst case scenario Runet off from the global network would make it impossible to attend all foreign sites, playing online games, buy in international online stores, to use international payment systems work, if you are a foreign employee company.
As for circumvention of locks, much will depend on how much Roskomnadzor decides to tighten the screws.
Pavel LapinIf Runet completely isolated, VPN will not help, they just will not be the channel to "catch" for the desired server. We'll have to wait for the World Wi-Fi by Elon Musk and invent new ways of transit traffic.
In the case of blocking individual channels or websites VPN will work. How to use it, the Russians have learned during the battle with the Roskomnadzor Telegram.
Disabling Internet an exercise
We should also mention the doctrine in which providers are required to participate. They can be a lever to turn the Internet on any territory without any external threats. If the region is brewing discontent, enough to declare the doctrine to arrest the spread of information.
There is one possible consequence which does not seem unlikely. The law will take, nothing terrible will happen, people will calm down and isolate Runet slowly and gradually, in the process of creating a framework for a more or less stable operation. Of course, when the public realized it, it's too late.
Open data
The transition to the Russian encryption, if the rule of law over time, touches not only government agencies, facilitate the decryption of data security services: law already expanding their powers, however, the wording of long vague.
When the law comes into force
Provisions of the Act come into force on 1 November. Creation of a national domain name system and the transition to domestic government agencies means kriptoshifrovaniya postponed until 1 January 2021.
see also💻🔒🤯
- Insecure communication: 9 ways to listen to your phone
- Guide for the paranoid: how to avoid surveillance and data theft
- What are proxy servers and how to use them
- How to protect yourself: techniques of special services