Why filtering the internet is a bad idea

Published: August 28, 2013
The writer is one of the directors at Bolo Bhi and has previously worked at Newsline

The writer is one of the directors at Bolo Bhi and has previously worked at Newsline

It is not about YouTube, just like it was never about Facebook in 2010. The issue was never limited to the reopening of particular platforms which were accessed through the use of proxies by Pakistanis despite the bans in place. The issue has always been of governance, of mandates and of ad-hoc, of non-transparent decision-making that lacks accountability.

The process for blocking — on paper at least — is as follows. The Inter-Ministerial Committee for the Evaluation of Websites (IMCEW) convenes to reach a decision. This decision is communicated as a directive by the Ministry of Information, Technology and Telecom (MoITT) to the Pakistan Telecommunication Authority (PTA). The PTA issues orders to internet service providers (ISPs) and it is at the ISP level that the blocking takes place. The IMCEW and the MoITT are responsible for policymaking, the PTA for enforcement. The ISPs simply comply.

Decisions are reached and imposed. Who is on the IMC — other than the various ministries and agencies — and what its decision-making process entails remains unknown. There is no public disclosure or documentation of the decisions, neither is public input taken into account. The only input, it seems, that is taken into account is that of violent mobs and law-breakers. And there is no way of challenging the decision other than going the court route.

Also, this process has been known to be hijacked by vested interests who, by sheer clout, are able to override it and ensure their own decisions are implemented — at whichever level.

Time and again, Pakistan’s internet users have been subjected to bans and blockades. Always, these decisions have been arbitrary as has been the manner of implementation. In the past, ISPs have acted as whistle-blowers for outing political censorship. And this, in fact, has been the only disclosure regarding decisions made behind closed doors.

But what happens if state-level filters are installed? Since the first day in office, Minister of State Anusha Rahman has maintained that as soon as filters are in place, YouTube will be reopened. According to the minister, filters will do the needful — block the video but provide access to the platform. Repeatedly, the ministry and others in government have been apprised of the dangers of filtering. But what’s really surprising is how the ministry seems to have found a solution in a few weeks time, just as the next court hearing is upon them.

It is pertinent to mention that twice the minister and the secretary IT were told to appear in court but excused themselves. The objective was for the political leadership to get involved, hear what everyone had to say and then take steps to resolve the issue. But the pursuit of filters displays a disregard for any input other than their own. While the court has not reached a conclusion on the YouTube case yet, it has raised the question as to why attempts to block should be made, when they can’t guarantee 100 per cent results; should there not be another solution? This was arrived at after hearing state and non-state actors extensively on the policy and technology aspects of the issue.

A solution to address the YouTube ban and similar issues has been pending for months, years, in fact, as the same challenge presented itself when Facebook was banned in 2010. According to the PTA’s submission to court, no system exists in Pakistan that can block HTTPS URLs, which is why particular links to the video could not be blocked, but the whole domain had to be. How has this system suddenly been unearthed by the ministry? And why, against the cautioning of civil society and experts, who have consistently maintained it will cause a huge breach of privacy and compromise online safety and security, is it being pursued? Accepting filters to reopen YouTube will be an extremely damaging compromise if it is made, much worse than the blocking of one platform.

To date, manual methods have been employed to achieve blocking. What happens when ISPs are also taken out of the picture? If filters are installed, would they be at the gateway level? According to statements issued by the ministry, PTCL is providing it with the technology for free, for a period of one year. Where does it intend to install this system? At the gateway level or at landing stations where internet traffic enters the country? If government-owned landing stations are given the sole right to operate the mechanism, who is to check what more than ‘objectionable’ — and whose criteria of objectionable — is taken down? And what of compromised communication security? Who becomes privy to everything one says or does on the internet?

What China with innumerable resources and finances has not been able to achieve, Pakistan thinks it can. As rapidly as blocking technology evolves, so do circumvention tools. Access through proxies has proved this much. Is it justified then to spend millions on technology that is easy to sidestep in the first place? Also important to remember is that China, Iran and Saudi Arabia are not models to emulate, not if Pakistan is a democratic country and the present government intends for it to remain so. What China, Iran and Saudi Arabia do is in the capacity of a non-democratic set-up. Democracies don’t allow for authoritarian mindsets that decide and impose decisions even if they override citizens’ rights. So, either Pakistan is a democracy, or it is not. And if it is, then democratic processes must be followed and rights must be protected.

Published in The Express Tribune, August 29th, 2013.

Like Opinion & Editorial on Facebook, follow @ETOpEd on Twitter to receive all updates on all our daily pieces.

Facebook Conversations

Reader Comments (23)

  • Aug 28, 2013 - 11:37PM

    If NSA is able to “neutralize” SSL & HTTPS, why can’t PTA do that too: http://rt.com/usa/anonymous-alleges-tool-decrypts-https-085/


  • Sheikh
    Aug 29, 2013 - 12:09AM

    It’s about time we got together and made bold strides in the area of IT. Why should we depend on imported websites such as YouTube? We should encourage investment in local web technologies and companies. I propose a government-controlled website called PooTube, where only morally pure videos may be uploaded, after submitting a content-purity pdf file along with the video.


  • Major Gaps
    Aug 29, 2013 - 12:29AM

    This article is flawed from the very start.

    Youtube, Facebook are banned in China. Google is slower than a snail in China.
    This is how China achieves blocking.

    In return there are China equivalent of these companies Yoku, Toudou, QQ and all. This is how China companies grow and Foreign companies are kept in check.

    Pakistan should follow model of China and become serious International player in Internet applications.


  • irfaniftekhar
    Aug 29, 2013 - 2:03AM

    Why not allowing sex talks in homes is a bad idea?


  • Ali
    Aug 29, 2013 - 3:06AM

    U cannot control human nature……u known the pure Pakistani’s are highest pron watchers in the world…….Stop to behave as if we live in some Maya Khan show…..


  • Shah
    Aug 29, 2013 - 3:30AM

    Name is funny ‘PooTube’


  • nizamuddin khan
    Aug 29, 2013 - 6:00AM

    Quiet good from my perspective. I wish the author had compared us with “India” instead of China in her article and it would have increased the number of (irate) comments here…LOL.

    Censorship is difficult to manage and implement. China’s model is definitely not the one that we should opt for. We do not want to give birth to copycats but we need to broaden awareness to help our younger generations grow.

    I am not of the opinion that the legal system is quite ready to tackle YouTube since the laws are not very clear. We are a country that struggles with blaspheme so YouTube is too much for us to swallow at the end of the day.

    We are still a country of pirated CDs and DVDs so let’s stick with what we are good at and not mess with irking our religious thought leaders and bring a bad name to the land of pure.


  • yousafhaque
    Aug 29, 2013 - 7:06AM

    @author:::Where did you get the idea that Pakistan is a democracy?Just to inform you,she is an oligarchy,falsely called democracy and she shall remain so for long time to come.At least till after ours or our children’s lifetimes.So,bear it with a smile


  • Indian
    Aug 29, 2013 - 10:05AM

    @nizamuddin khan: Indians muslims have all the freedom and they are enjoying democracy for the last 66 years. There is no blocking of facebook or youtube in India. Thats real freedom for you. Yes please do not compare Pakistan with India.


  • darbullah
    Aug 29, 2013 - 10:22AM

    Why do we need internet? And why shouldn’t we copy Saudi Arabia as we share the same culture?


  • Feroz
    Aug 29, 2013 - 1:39PM

    Ban the TRUTH, it is too inconvenient.


  • Aug 29, 2013 - 2:49PM

    @darbullah: I agree, let’s copy the Saudis. Saudi Arabia hasn’t blocked Youtube. Let’s start with unblocking Youtube!


  • Nawaz Sharif
    Aug 29, 2013 - 3:26PM

    You dont get it. Obviously the IT minister her self knows that putting filters in place will not do anything. However, unfortunately there are some illiterate folks who get offended very easily and go out and kill 30-40 of their own country men.
    To stop that from happening again, the way to proceed is to block enough ‘objectionable’ material so that those illiterate folk are satisfied and dont cause further damage to life and property.


  • unbelievable
    Aug 29, 2013 - 3:43PM

    @Major Gaps: Your missing the point. China has thousands of people and spent enormous sums of money trying to control the internet – yet every time they block something it re-appears within 24 hours like a bad virus. Pakistan has zero chance of trying to control the internet and YouTube is a great example as despite it’s ban anyone who wants to get on YouTube in Pakistan can/does.


  • United
    Aug 29, 2013 - 3:48PM

    All Muslim countries should establish a united blocking service. So that all sites and data can be pooled in from all countries, checked and censored. We should finish off the OIC and get something new with in independent.Recommend

  • Imran
    Aug 29, 2013 - 4:06PM

    Why non-technical people blogs on purely technical issue. This lady knows nothing about technology.


  • Hassan J
    Aug 29, 2013 - 5:04PM

    Actually,Web filtering is not at all a bad idea in view of our religious and cultural values.The main issue is to decide proper parameters for filtering to block content which is blasphemous,racist and violent etc.

    And the best way to implement it is to take into account complaints and feedback from local internet users and then to decide whether to block a particular URL based on the filtering parameters already decided.

    Now,the job of ministry of information technology and telecom is to form a policy and decide about these parameters.The ministry should make sure that the parameters involved do not violate freedom of speech and expression or give it enormous censorship rights.

    Otherwise,it would be just like sending all print newspapers for censorship to information ministry before they are published giving it infinite power to censor anything involving editorials,opinions,news stories.

    So clearly the decision of these parameters is a delicate matter.


  • Kashaf
    Aug 29, 2013 - 5:21PM

    @Imran, if you know more why don’t you point out what is technologically incorrect instead of making a sweeping statementRecommend

  • FactCheck
    Aug 29, 2013 - 5:57PM

    Filtering the Internet is an enormous undertaking and never all that effective. People can always get around and almost every Chinese knows how to get around their great Firewall.

    One would think there are many other things Pakistan can use the money. Why not make Internet access widely available and use it as a tool for education?


  • Strategic Asset
    Aug 29, 2013 - 6:17PM

    All these problems will go away if Pakistan uses an INTRANET and cuts itself off from the INTERNET. That way only content approved by local maulvis can be accessed.


  • Secular Pakistan
    Aug 29, 2013 - 9:29PM

    If you want freedom be secular.Pakistanis are watching porn more than Americans, land of the Pure Pakistan has become Pornistan. Is it not Pakistanis are Hippocrates having a large beard and watching porn on internet?


  • hassan J
    Aug 29, 2013 - 10:08PM

    @Imran I agree with you the author has little knowledge about a topic that is technology based. She mixes up web censoring with web monitoring.Moreover she has no idea about gateway level and land stations level of internet and that they do not effect what so ever is being filtered as it is more a matter of policy than the technological implementation.


  • Farieha (Author)
    Aug 30, 2013 - 6:13PM

    Responding to some comments at length. I say what I have after spending months getting to the bottom of the issue by speaking to policy-makers, technology experts, citizens etc. Nevertheless, it’s fine and you don’t need to take my word for it, so go ahead and do some digging and research for yourself and falsify or verify some of the claims I have made.

    For starters, the gentleman who said NSA has been able to neutralize SSL and TSL so why can’t PTA. For one, what the NSA has done is not a good thing – that would be apparent through the huge uproar against the PRISM programme. Secondly, the way they attempted to neutralize it is by gaining access to keys through the companies directly; not breaking in. Either way, it is a bad practice that compromises user security. If anything, NSA is to be viewed as a terrible example.

    As for the China example, view it from two perspectives. First, from the technology perspective. Yes, services are blocked in China and the Firewall prevents access. However, does that prevent access 100%? No. Read up and you will find how the Firewall of China has been circumvented. The second argument is that the governance model of China is not of a democracy. Sure, you can say Pakistan is no democratic country either, but on paper it is. So you’re going to need to change its governance model first to say it is not a democracy and that democratic principles should not be applied. Therefore, for the simple reason that Pakistan is a democracy and certain democratic need to be in place – even if they are not – implies you cannot follow in the footsteps of a communist regime nor of a theocracy or monarchy. Neither can you take or justify the actions they take and apply them here.

    Both China and the USA have far greater resources in terms of man-power and money, to attempt to do such things. Is this where we want to put our money? Also, don’t we hate following the US? Then why idolize NSA?

    Yes blocking takes place all over the world, but because the world does, so should we? And are we comparable to the rest of the countries in the world by any standards?

    Those alleging that I have no technical knowledge and so should not be commenting on technology issues. That’s okay. But have you been listening to what technical experts have been saying? Have a look at these two resources and that should tell you how SSL/TSL work and what are the risks if breached: http://luxsci.com/blog/how-does-secure-socket-layer-ssl-or-tls-work.html & http://tools.ietf.org/html/draft-iab-filtering-considerations-03#section-5.

    Quickly to address the point about gateways. To date, blocking takes place at the ISP level. However, according to Ministry, PTCL is providing filters. PTCL is one of the gatekeepers – we have two. Them and TWA. All Internet traffic comes to these two landing stations and from there bandwidth is distributed to other service providers. If filters are installed at the gateways, what you will get it a centrally filtered Internet. No directives will be passed on to smaller ISPs to carry out blocking.

    Now here is the connection between web-censoring and web-monitoring. When you block HTTP traffic, it is fairly simple and no covert methods are required. This has been happening so far. The problem starts with HTTPS which is encrypted traffic. Beyond .com you do not know what appears in another person’s browser. The long link (i.e. https.youtube.com/734785369/u47A/) is mostly unique to a session and not known to a third party except for the user and the domain. The only way knowing is by breaking through the encryption by waging a man-in-the-middle attack, which basically means you pose as the intended recipient even though you are not. Communication is then intercepted by third parties. Attempts to filter HTTPS traffic will do just this, and will not simply be limited to youtube, but HTTPS traffic as a whole – email, e-banking etc. That is where the concern lies. Because then one’s communication can easily be intercepted, there can be identity thefts, credit card information can be stolen etc. Here is something explains this in very layman terms (not by me but a techie/game developer: http://bolobhi.org/understanding-how-https-works-with-ahmed-bilal-uncle-tipu/)

    About Intranet, if you want to separate yourself from the world, sure go ahead. But then what is the point of the Internet. Think beyond products, services. The wealth of knowledge – yes surprise, surprise: there are actually good and useful things on the Internet too – that platforms such as youtube host, such as educational content etc, will not be accessible. And if you think there isn’t any content worth mentioning or watching, do have a look at this: http://bolobhi.org/bolo-bhis-submission-to-court-in-youtube-case-august-2-2013/

    You cannot separate the policy and technology from one another. Both go hand in hand. A policy that is not technologically possible or viable doesn’t work. Also a policy which does not bear in mind the balance required by law, also does not work.

    No one is saying sentiments should not be respected and solutions should not be looked into. But they have to be measured in terms of feasibility money wise and legally. Instead of blocking at the state-level, why not block at the home-level. Empower every household to do so. This also is not my non-techie view, but a techie’s suggestion for an alternate solution: http://techies.pk/articles/lifting-the-youtube-ban-in-pakistan-a-possible-solution/

    By all means criticise. But also point out where something is wrong and back it up with some credible research and examples.


More in Opinion