[liberationtech] Iraq block Social media

[Collin Anderson]

Anyone who wants to verify this assertion can query in-country resolvers

filternet$ dig facebook.com @ns1.itc.iq

; <<>> DiG 9.8.3-P1 <<>> facebook.com @ns1.itc.iq
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 13340
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;facebook.com. IN A

;; ANSWER SECTION:
facebook.com. 86400 IN A 185.23.153.235

;; AUTHORITY SECTION:
facebook.com. 86400 IN NS ns1.itc.iq.

;; Query time: 1250 msec
;; SERVER: 185.23.153.242#53(185.23.153.242)
;; WHEN: Sat Jun 14 14:44:58 2014
;; MSG SIZE  rcvd: 70



On Sat, Jun 14, 2014 at 2:54 PM, Collin Anderson <collin at averysmallbird.com>
wrote:

>
> On Sat, Jun 14, 2014 at 12:31 PM, David Gessel <gessel at blackrosetech.com>
> wrote:
>
>> I tested Facebook, youtube, google, and twitter and all loaded normally.
>>   Traceroute showed no anomalies.
>>
>
> I believe that your testing is a bit off -- as of yesterday Earthlink was
> blocking social media, primarily (or entirely) through local DNS
> manipulation. This could account for the difference of your experience, and
> why users with foreign DNSs can still browse without other tools.
>
> Yesterday I ran Alexa's top 100k through a DNS resolver in country and
> found aberrant results for the following domains:
>
> facebook.com
> youtube.com
> twitter.com
> xnxx.com
> whatsapp.com
> viber.com
> youtu.be
> hanein.info
>
>
> The returned address for these domains briefly attributed the filtering to
> the security situation in country, until it was modified within a couple of
> hours: https://twitter.com/CDA/status/477488959044321280
>
> If you have an Earthlink VPN, it might be interesting to see if you can
> browse to the RFC1918 address 192.168.222.66, I think it's the block page
> for that ISP.
>
> (Bonus points for a sending the domain of a porn site to Libtech)
>
> --
> *Collin David Anderson*
> averysmallbird.com | @cda | Washington, D.C.
>



-- 
*Collin David Anderson*
averysmallbird.com | @cda | Washington, D.C.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.stanford.edu/pipermail/liberationtech/attachments/20140614/63dc929b/attachment.html>