What the FSB is learning about you, the Baring case goes to the denouement and Fedor Ovchinnikov in “Russian norms!”

The FSB can get online access to the largest Internet services: what opportunities will this be given to special services and how the user can protect himself

The most unpleasant news of the week for Internet users-the FSB took up Internet services. As The Bell found out , in the summer of 2019, the special services began to send letters to Internet services demanding that the FSB provide round-the-clock access to all user data and the keys to their correspondence. Among the addressees could be the largest services like Yandex and Mail.ru. We figured out what new opportunities the FSB can get and whether the user has the opportunity to defend himself.

What's happened

The FSB began implementing new opportunities that she received according to the "Spring Law". Previously, the equipment that allowed the Chekists to intercept traffic was only among operators of communication and Internet providers-and now it can be installed in the systems of online services themselves, included in the register of the organizers of the dissemination of information (Ori). Among the participants in the registry are Yandex services, Mail.ru Group and Sberbank-Online, but there is no Facebook, WhatsApp or Twitter.

Until last summer, no one put forward new requirements for participants in the Ori Register, the interlocutors of The Bell say. All work with the FSB went on the official protocol: through written requests or by court decision. But now, at least part of the companies from the Ori Register has already installed the required equipment, all the participants in the list and their acquaintances are sure of the Bell respondents.

What does this give FSB

Two main requirements of the FSB for online services-give the special service access to these sites and issue traffic encryption keys.

The first means connecting the service to the “remote control” installed in the FSB, which is already connected, for example, the equipment of SORM, installed by operators of communication. Internet services should install equipment and write programs for joining their data centers with this remote control, explains the founder of the Diphost hosting provider, a blocked specialist in Runet Philip Kulin. The remote control itself is a computer in a separate closed office in the FSB, where only an employee with a certain level of access and internal regulations can get. Which one - no one knows, in the public domain and in the laws there are no references to him, Kulin explains.

Using the FSB remote control, it receives all the data that is obliged to issue by the law : textual, audio and video messages of users and all information about them that they are obliged to store six months after publication,- login, name, passport data, address, list of languages, its user, his communication circle, data of accounts in other services, IP addresses.

An FSB officer with access to the remote control can at any time unload the necessary data from any service connected to the service infrastructure. “Previously, they received data from the SORM of operators and providers - a large stream of garbage, which could not be deciphered and which could only give a digital trace. Now the FSB will be able to receive already formatted, detailed data, ”Kulin explains.

The second requirement of the FSB is to issue encryption keys, both ordinary and session. The former allow you to “listen” to the site’s traffic, but do not give deciphering the user actions. Session keys are responsible for the encryption of each user’s connection with the company’s server and allow you to access the entire correspondence of the service users. Kulin notes that due to the wide interpretation of laws in Russia, special services may not include messages deciphered with the help of keys to protected constitutional secret correspondence: keys are the so-called non-formatted data and are not spelled out in the laws in any way.

With all these capabilities, nothing will hinder the FSB, for example, to decipher the entire traffic of the service, drive out data on the necessary keywords - and find all mention. “If you start from the letter of the law, then the FSB will really have such an opportunity. The question is how to implement this, ”says Alexander Romanov, deputy director of the Digital Security Audit Department. Most likely, now there are no resources and ability to do this with special services, but the very opportunity now exists, Kulin says.

Dangers and risks

The Services themselves will not be able to control the actions of the FSB: Ori will not know what kind of special services this particular will access, says the chief lawyer of the Roskomsvobod organization Sarkis Darbinyan. “They still have to receive a court decision, but this is a formality. In addition, if we are talking about “cases that do not tolerate delay”, then access can be accessed without a warrant, ”he says.

• The requirements of the FSB are added to the “Esparty” Services: the number of points that the attacker can use will increase, explains Romanov from Digital Securities.
• The risk is obvious that the FSB officers who have gained access can use them for illegal selfish purposes. There are many such examples: the ex-head of the banking department of the Kirill Cherkalin management department extorted bribes for the roofing of banks, and the deputy head of the information security center (QIB) of the FSB Sergey Mikhailov received 22 years for espionage.
• Part of the services will simply be unable to fulfill the requirements of the FSB - small companies simply do not have money for equipment that they should buy at their own expense. They can close their business.

How to protect yourself

The question of how to protect yourself to the user in this situation is very provocative: in the context, it sounds like “How can I protect my data from the FSB?” Warns Romanov.

But there are general rules:

• Do not use messengers and social networks, especially included in the ORA register ;
• go to news resources and blogs only through VPN;
• Use browsers who do not give metadata that could be compared with you.

But the golden rule here is the same, says Romanov: “If you do not want any information about you to surfacing you on the Internet, then do not post it on the Internet.”

EDUCATION

The course in Silicon Valley from the creators of The Bell and "Russian norms!"

What, in your opinion, is related by the top managers of Hewlett-Packard and Intel, the President of the Bank of America and the founder of GAP? They are graduates of the Walter Haas business school, or just Haas, at the University of Berkeley. The future prestigious business school was created as a college of commerce in 1898. Today it is one of the best places in the world where you can get MBA. Haas is included in the TOP of all specialized ratings: in the USA it occupies No. 7 (according to US News & World Report), No. 11 (QS Global MBA Report), No. 14 (Businessweek), and in the world No. 7 (The Economist), No. 11 (Financial Times). The Bell team and "Russian norms!" Organizes for you an intensive educational course at the legendary business school, which will be held from March 29 to April 9, 2020. The number of places is limited.

https://innovationSchool.ai/

Exclusive

Between sanctions and consequences

After the collapse of Promsvyazbank at the end of 2017, its ex-owners of the Ananyev brothers, who left Russia, were between two lights. In their homeland, bankers in absentia were arrested on charges of embezzlement of more than $ 1 billion bank money. And now, as The Bell found out , American lawyers from the company of the former district district prosecutor Bad Cummins demanded from American regulators to impose against the Anani sanctions. Cummins represents the interests of the former VIP-clients of Promsvyazbank, who claim that the Ananyevs stole $ 170 million and € 60 million on them, invested in credit notes (CLN), fired under the personal guarantees of the brothers. The whereabouts of the younger, Alexei, is unknown, and the eldest, Dmitry Ananyev, after the collapse of the bank moved to Cyprus and received local citizenship, but after the Cypriot authorities began the revision of the Golden Passports program, it may lose it (representatives of Ananyev denied this).

The coincidence or not, but the very next day after the publication of this news in the British The Guardian, an interview with Dmitry Ananiev was published , in which he told how since the end of 2015 the Russian authorities began to demand from him to transfer Promsvyazbank to the state to transfer to it service of defense enterprises - which was eventually made after the bank’s rehabilitation in 2017.

Baring case is going to a denouement

In the Baring Vostok case, a new encouraging turn. The last three defendants remained in the pre -trial detention center - Russians Ivan Zyuzin , Vagan Abgaryan and Maxim Vladimirov - were under house arrest. Moreover, two sources of The Bell, surrounded by people who petitioned the revision of the Baring case, said with confidence: this is a signal that the case would be resolved in the coming months. One of them even called specific terms and described the script. According to him, the court will be held already in May 2020, the defendants will be found guilty, but with short or conditional terms that will be covered by their stay in jail and under house arrest. The Bell failed to confirm this scenario with other sources, but they all believe that "the ice has started."

INVESTMENTS

Outstanding value investors

How to choose a company and the right moment for buying or selling its shares? How to determine overvalued and underestimated papers? How to choose high -quality from them? How, finally, to collect a portfolio that will provide conservative income (and not a systematic sleep disturbance)? These questions are answered by the cycle of articles that was prepared by the partner of Movchan's Group for The Bell, associate professor of the Faculty of Finance of the Faculty of Economic Sciences of the Higher School of Economics Elena Chirkova. This week we published it entirely .

"Russian norms!"

Fedor Ovchinnikov (Dodo Pizza)

The hero of the new issue of "Russian norms!" - One of the most charismatic Russian businessmen Fedor Ovchinnikov, an entrepreneur from Syktyvkar, who founded the Dodo Pizza network and over the nine years opened 583 pizzerias in 13 countries, including the USA, China and Nigeria. Elizaveta Ossetian talked with him about whether it was possible to make fast food high -quality whether the pizza and Yeyska taste in Moscow and when Dodo Pizza will appear in Italy. The Bell published the most interesting fragments of the interview, see the full version on the channel “Russian Norms!”.