How to Use the Internet in Stealth Mode

The Key to Staying Private When Big Brother is Watching

Kyle Gonzales | International Man

February 16, 2012

“For the first time ever, it will become technologically and financially feasible for authoritarian governments to record nearly everything that is said or done within their borders - every phone conversation, electronic message, social media interaction, the movements of nearly every person and vehicle, and video from every street corner.”This was from the opening paragraph of a Brookings Institution report (PDF).

Does that send chills up your spine? If so, don’t read the rest of this article: you might not touch your computer for a week.

As I discussed in the case for e-mail diversification, planting your electronic flag is certainly an important part of the “online privacy equation”, as it gets the storage and routing of your e-mail messages out of jurisdictions which are not respectful of your privacy.

However, there are additional concerns that you should be worried about.

Many Internet Service Providers (ISPs) in the western world are required by law to track nearly everything you do online. While the US government has been trying to hide their electronic wiretapping program as a state secret, the EU made theirs public by passing the Data Retention Directive of 2006. Article 5, under “Categories of data to be retained”, lists the gory details of what is tracked. This is required for home phones, mobile phones, Internet telephony and e-mail. And depending on the country, this information will be kept for 6 months to 2 YEARS.

Under the Data Retention Directive, here is what is being tracked in every e-mail sent:

• Your name and address
• The name and address of everyone you send e-mail to
• The time and date you logged on and off of your Internet service, along with your IP address and username
• The time and date you sent your e-mail
• Your computer’s operating system, hardware, and other identifying information

Other EU countries are taking electronic surveillance even further. Denmark, for instance, passed a law in 2007 tracking all Internet access, not just e-mail and VoIP calls. And Sweden, while delaying implementation of the Data Retention Directive, passed a law in 2008 to record all Internet and phone communications which cross their borders.

Forget about authoritarian governments, "democratically" (s)elected ones are tracking your every move online.

So how do you gain some manner of privacy in this environment?

By creating your own private network across the Internet.

How to make the Internet your own private network

A virtual private network (VPN) allows users to access private networks (like the corporate network of your employer) by creating an encrypted “tunnel” across the Internet between the user’s computer and the private network. The encryption ensures that any information shared between the user and the private network is kept safe from prying eyes. It is similar to the encryption between a secure website and your web browser, except it protects all the traffic sent over that network (including things like e-mail, instant messaging, and Skype) and not just web traffic.

A number of service providers are taking this to the next level. They allow users to connect to their networks via a VPN “tunnel”, then access the Internet through their private network.

How does this give you more privacy?

Over your regular ISP network, all of your traffic is being monitored. The ISP can see what sites you are connecting to, who your e-mail provider is, what chat services you are using, and so forth. When you enable your VPN “tunnel” to access the Internet, the only thing your ISP can see is your connection to your VPN service provider, not anything else. (Your connection to the VPN service provider is highly encrypted, so your ISP cannot see what is happening “inside” the tunnel.)

A VPN also provides protection when using unencrypted “free Wifi” networks that you may use at coffee shops and airports while traveling. It is much easier than people expect for hackers to break into these networks and steal your usernames and passwords. But if you are using your VPN “tunnel” to access the Internet, hackers will not be able to see where you are going online, and all of your information will be protected. Also, most Internet sites and services you connect to are monitoring your connections to their servers.

Google, for instance, records the IP address with every search you make in their search engine. Most websites also record the IP address of your computer when you browse their web pages. Chat networks, e-mail providers, all record the IP addresses of those who are accessing their network. When your Internet connections pass through the provider’s network, these sites will not see your computer’s IP address. Instead, it will only see your VPN service provider’s address. Many times, this IP address will even be in a different country from your own!

So, by using a VPN, your Internet Service Provider cannot track where you are going (other than seeing you connect your VPN), and remote services like Google, Amazon or whatever do not know where you are coming from.

An interesting side benefit: some VPN providers let you choose the country from which websites will think you’re visiting from.

How is this useful?

Well, let’s say you’re an international traveler who is also a Hulu addict. You are in a location where Hulu has yet to negotiate viewing rights (e.g. Canada). So you fire up your VPN and choose to have your traffic appear as if it’s coming from a computer in the USA. Voila! Now you can watch recent US-based TV shows on Hulu through your VPN connection in whatever far off land you may find yourself in.

Not all VPN providers are created equally

For those less interested in Internet entertainment and more interested in privacy, we should discuss different aspects of VPN providers that differentiate them from each other…

• As discussed in my last article about how the US Patriot Act affects people in other jurisdictions, it is important that your VPN provider is not located within the US or be owned by a US company. While you might gain protection from hackers sniffing traffic at a coffee shop, the US government could still access your information as it transits your US-based VPN provider’s network.
• An “anonymous proxy” is not the same as a VPN. Most anonymous proxies provide privacy for web browsing only. A proper VPN service will provide privacy for ALL of your Internet traffic, including Operating System updates, VoIP calls, chat networks, and other non-web traffic.
• Some VPN providers are focused on allowing you to choose your own “exit point” (where your traffic appears to be coming from) while others are focused on mixing and “anonymizing” your traffic within their networks to provide the highest levels of privacy. While having a VPN is better than no VPN, you often have to make a decision between convenience and privacy.

Next steps

Start investigating what other international travelers and privacy-inclined individuals are using for their VPN services. Find out what their primary needs were and how their chosen VPN service “scratched their itch”.

Did the FCC just bless a capped, two-tier Internet?

By Nate Anderson | ArsTechnica

You like the idea of Internet data caps and overage charges, right? And the prospect of paying your ISP separate fees for "the Internet" and for "managed" IP services like voice, video, VPN, telehealth, and smart grid applications, even when these directly compete with similar Internet-delivered services?

Okay, you probably don't—if you're a business or home Internet user. But if you're a major Internet provider, you love both of these ideas a lot... and you found support for both of them in Wednesday's "net neutrality preview" from the Federal Communications Commission.

"Broadband rationing"

When FCC Chair Julius Genachowski previewed his net neutrality proposal this week, he mentioned "usage-based pricing" and failed to mention "managed services." Neither item was accidental, and it didn't take long for interested observers to read the tea leaves.

Craig Moffett, an influential Wall Street tech analyst, said after the speech that "broadband rationing is now the order of the day" once Genachowski gave his support to the idea. It's something of a strange comment, since usage-based pricing has not been either regulated or illegal, and in fact data caps are now common even though many are high (such as Comcast's 250GB/month limit). Still, the FCC's endorsement of the idea should provide a bit of cover to wireline ISPs who want to try it.

Moffett added, "We would expect the introduction of UBP [usage-based pricing] plans from major cable [ISPs] to follow in short order, and we would expect that their stocks will respond well to such introductions."

NCTA, the influential lobby for the major cable operators, today quoted Moffett and expressed its own support for UBP as a way to "focus on what best serves consumers." CEO Kyle McSlarrow says he doesn't support any particular model (and likes flat-rate himself), but that ISPs need the flexibility to experiment in order to help "price-sensitive consumers at the lower end of the socioeconomic ladder."

In response to Moffett's quotes, a senior FCC official sent us a statement making clear that data caps, overage charges, and the like would be watched carefully for signs of price gouging in the limited-competition wireline ISP market.

"Usage-based pricing can create more choice and flexibility for consumers," said the official. "But practices that are arbitrary, anti-consumer, or anti-competitive would cause serious concern. The FCC will be a cop on the beat for consumers."

But Genachowski does support the idea, and the ISPs are glad of that explicit support. There's nothing wrong with the idea, in our view, when implemented fairly, but it's not popular with the public in large part because past attempts to implement it have correctly been viewed as a massive cash grab by ISPs that already make insanely high profit margins.

When the cable companies roll out $5 data-capped Internet access to make it easy for poor families to get online, it's hard to envision much opposition. But of course, that's not what we've seen.

We're excellent "managers"

Imagine that you are Netflix boss Reed Hastings. You're busy trying to eat the cable companies' collective lunch by offering on-demand Internet streaming video; sure, you're not there yet, but it's clear this model has a bright future… except for one little worry.

The cable companies and telcos you rely on to deliver your bits also compete with you, offering profitable video services of their own that don't come through "the Internet" but are increasingly based on IP and use the exact same pipe. Should those companies be allowed to offer managed quality of service enhanced video streams over a segregated section of the last-mile Internet pipe to directly compete with your own best-effort Internet offering? And how could this possibly be a fair fight?

We don't need to imagine Hastings worrying about this scenario, though, since Netflix has made its concerns clear in writing. Back in January, the company warned the FCC about letting "managed services" swallow up the open Internet.

"The fact that network operators control the delivery pipes and generate significant revenue from content that travels over those pipes provides both the means and motive for discriminating against new ventures that might threaten revenue sources of the network operators," Netflix warned. These developments "exacerbate the growing concern that [video providers] will use their control over programming networks to stifle competition, including the growing competition from online video providers like Netflix."

Therefore, according to Netflix, the FCC should apply its open Internet principles to "managed services," too, possibly by requiring that such services could never consume more than a set fraction of the Internet pipe, reserving the rest for the "open Internet."

The FCC itself recognized the potential for these kinds of problems when it issued its call for comment on the open Internet (PDF), but it also didn't want to hinder genuine innovation in a nascent market.

"We recognize that these managed or specialized services may differ from broadband Internet access services in ways that recommend a different policy approach," it said at the time, "and it may be inappropriate to apply the rules proposed here to managed or specialized services. However, we are sensitive to any risk that the growth of managed or specialized services might supplant or otherwise negatively affect the open Internet."

The ISPs were aghast at the idea that the FCC might limit them from setting up priority access deals both on the Internet and through these separate managed services. While selling an increasingly fast raw pipe to the 'Net (with neutral congestion management and even customer-directed QoS) might sound like a boon to consumers, ISPs dread the thought of becoming mere bit haulers. The real money comes when you can charge people once for the open Internet, once more for IP voice, a third time for IP video, and another five or six times for various smaller IP services.

They've been lobbying against the idea for months, almost always insisting that "managed services" are about "telehealth" or "smart grids." And you don't hate healthy people, do you?
In the end, the ISPs got their way. Despite the many questions raised by the FCC about managed services, Genachowski's speech didn't mention it once. That was no accident.

Our understanding is that the proposed open Internet rules include nothing about managed services, leaving it entirely unregulated. The FCC has apparently decided—and this is certainly a legitimate point—that no one really knows what services will develop and that it's just too early in the game to lay down any sort of detailed rules. Such rules might, in fact, be counterproductive if offered too early and could squelch a nascent market.

We know the FCC has such concerns because Genachowski stated them explicitly in relation to wireless, where he also accepted the ISPs' arguments that "wireless is different" and doesn't need neutrality rules (transparency is good enough). Instead, the FCC will "monitor" the situation in this young market and act if needed.

The ISP industry has been lobbying for a "light touch" when it comes to open Internet regulation, and they got it; if the touching here were any lighter, it would be nonexistent. The cable industry sees things the same way—and they love it.

"We further understand that the rules do not preclude or inhibit our ability to innovate and deploy new and specialized services," said NCTA after the speech. "Importantly, they appear to reflect Chairman Genachowski’s previously stated position that such rules will not and should not result in price regulation and to recognize the value of flexible business models such as usage based pricing."

Of course, the ISPs aren't in the managed services game because "telehealth" and "distance education" are going to butter their bread, though there is certainly some cash in these services. (Looking for a fun drinking game this weekend? Dig up public references to "managed services" by CEOs and lobbyists and do a shot whenever you see "telehealth" trotted out.)

No, they're in it in order to do things like earn cable-TV-style fees from millions and millions of users, as Google and Verizon at least had the decency to admit earlier this year. ISPs should be free to manage their networks, the two companies said, and "they should also be free to offer managed network services, such as IP television."

Like usage-based pricing, this isn't necessarily a bad idea—who wants their Sunday football games to buffer or glitch out?—but we continue to have real worries about how this affects competition and how it might be implemented. (And this isn't all speculative, either; AT&T already reserves part of its U-Verse connection for IP video and can squeeze Internet traffic when home users are watching more HDTV. Is that good for home TV watchers, bad for innovation at the network edge, or both?)

Arms merchants love an arms race

The FCC has its concerns, too, but it won't act, at least not now. Instead it will "monitor." Those who own the last-mile pipes have permission to continue their experimentation with managed services.

Fortunately, though wireline broadband isn't as competitive as many would like, the major ISPs remain susceptible to public and political pressure that will place constraints on their ability to do anything too outrageous—at least in one giant step. (See the flood of anger at Time Warner Cable's pricing plan experiments in 2009—anger that reached Congress—for a good recent example.)

But what will happen by slow degrees as ISPs condition Internet content providers and the public to pay for more and more services, and to accept certain forms of usage-based pricing?
Verizon already knows—the "open Internet" will take a back seat to the managed "broadband platform."

As the company's top lobbyist, Tom Tauke, put it this summer, "Certainly nobody believes that the promise of broadband is Internet access and video, which is what we have today." No, the future is "'other services' that should be available over the broadband pipe. They need unique creativity and partnerships to make them work. It’s the communications company partnering with the power company to do the smart grid. It’s the communications partnering with the health care provider to do heart monitoring at home. [Editor's note: drink up!] That requires a different set of rules than the rules that govern the best-efforts Internet."

It's a model where ISPs extract rents on every service they can imagine. The danger, of course, is one that Google warned about in a slightly different context: "creating incentives to monetize scarcity rather than build capacity, to generating an 'arms race that benefits only the arms merchants' (where broadband providers increase their income but not overall speeds), to fashioning an Internet where only those who can 'pay to play' will fare well and others will be relegated to a slow lane."

Will that happen? ISPs say no. We're about to find out.