EFF Condemns Tunisian Cyberwar Tactics

Is it still Cyberwar if the battles are between a government and its own citizens? Would it be Civil Cyberwar or Cyber Civilwar?

The EFF “calls for immediate action to defend activists”. Tunisian authorities are reported to have blocked HTTPS access to Facebook, Google and Yahoo! in order to attack or track down dissenters and compromise their on-line identities.

…last week the Tunisian government turned up the heat on bloggers, activists, and dissidents by launching a JavaScript injection attack that siphoned off the usernames and passwords of Tunsians logging in to Google, Yahoo, and Facebook. The Tunisian government has used these stolen credentials to log in to Tunisians’ email and Facebook accounts, presumably downloading their messages, emails, and social graphs for further analysis, and then deleting the accounts entirely.

The EFF gives the following recommendations, which are a good idea all the time and not just when in Tunisia:

* If HTTPS is available, use HTTPS to login to Facebook, Google, and Yahoo. If you are using Firefox, EFF’s HTTPS Everywhere plug-in will do this for you automatically.
* EFF has received reports that the Tunisian government is periodically blocking HTTPS access to Facebook, Google, and Yahoo. If that is the case and you must login over HTTP, install the following Greasemonkey script to strip out the JavaScript which the Tunisian government has inserted to steal your login credentials.
* If you have logged in to Facebook, Google, or Yahoo recently over HTTP, login using HTTPS and change your password.

One thought on “EFF Condemns Tunisian Cyberwar Tactics”

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.