IMC Under Attack

So this is about Swiss police, on a French site, on a server in England, taken away by American federal police… — Micah

The US government has seized the two ahimsa* servers which host around 20 Indymedia sites, lots & lots of radio streams, and the BLAG website & repository.

Rackspace took down the server and handed it over to the Empire before opening a trouble ticket. I say the Empire because we don’t really know who ordered it. It is believed to be the the U.S. State Department, but we don’t know this for sure. It is almost certainly the U.S. Government though. Why don’t I know? Because Rackspace won’t tell me why the servers were taken down other than they were complying with some Federal order.

The servers were located in London, but Rackspace is a US company.

It’s the new invisible US justice system. Guilty before proven innocent and you don’t even get to know the alleged crime!

heh, some great italians made a flash game about this… :)

This is what I got from rackspace:
Thu Oct 7 12:25:13 2004

Hello,

Unfortunately, we have received a federal order to provide your hardware to the requesting agency. We are complying at this time. Our datacenter technicians are building you a new server which will be online as soon as possible. Your account manager will notify you once the new server is online and available.

I apologize for abruptness of this. However, we are required to comply with all federal orders of this nature.

Please let us know if there is anything that we can do to make this easier on you.

Regards,

Jennifer O’Connell
AUP Administrator
Rackspace Managed Hosting
The Managed Hosting Specialistâ„¢
1-800-[CENSORED]

Thu Oct 7 12:52:54 2004

Jeff, I also wanted to let you know that we did attempt to call you. However, your voicemail said that your mailbox was full.

Regards,

Jennifer O’Connell
Rackspace AUP

Qwest (telephone provider in Colorado) jacked up my call forwarding! Doh, working again. Rackspace did turn off the servers before opening a trouble ticket or sending an email.

Sites hosted on AHIMSA that are back online
www.indymedia.org
brasil.indymedia.org
euskalherria.indymedia.org
galiza.indymedia.org
germany.indymedia.org
italy.indymedia.org
liege.indymedia.org
lille.indymedia.org
nantes.indymedia.org
nice.indymedia.org
pl.indymedia.org
portugal.indymedia.org
uk.indymedia.org

Sites hosted on AHIMSA that are offline
www.blagblagblag.org – Linux Distro, will be back up around Tuesday
www.foref.org – For Refugees (inactive?)
syndicate.org.uk – I don’t recall what was on the site, but they did mail.
indymail.org – Test/brainstorm webmail server
agnud.org – Linux distro — don’t know what happened to it (inactive?)
ambazonia.indymedia.org
andorra.indymedia.org
antwerpen.indymedia.org
belgrade.indymedia.org
keys.indymedia.org
oost-vlaanderen.indymedia.org
prague.indymedia.org
uruguay.indymedia.org
wmass.indymedia.org
wvl.indymedia.org

For around 4 years AHIMSA mirrored a number of Free Software projects. It was the main mirror for KDE (download.kde.org ???), mirrored php.net, kernel.org, Linux Documentation Project, apache, cpan, and probably a couple others. :) As the various Free Software projects developed more mirrors, the AHIMSA mirrors were removed to make space for Indymedia & BLAG.

All radio streams are down. If you want your stream back up or if you had a non-Indymedia site on AHIMSA mail me and I’ll set it up on another box.

Some bloggers/AC/chatters have mentioned some posts that were on IMC-Nantes that were purportedly of some undercover cops. Indymedia has info on the Nantes post. A San Francisco IMC dude was visited by the FBI about the Nantes post. He made comments about it in slashdot.

This is my & Indymedia’s correspondence with rackspace about IMC-Nantes & the “undercover cop post”:
Ticket Information:

Subject: Please review immediately
Category: AUP Violations – Other
Severity: Standard
Status: Confirm Solved

Message Transcript:

Rackspace said:
Wed Sep 22 10:59:56 2004

Hello,

We have received a complain from the FBI regarding some images and material hosted on your server on the page below.

http://nantes.indymedia.org/article.php3?id%20article=3910

Please remove this material immediately and we understand that it contains personal information regarding two Swiss police officers as well as threats against them.

Regards,

Jennifer O’Connell
Rackspace AUP

You said:
Wed Sep 22 15:55:45 2004

Ok. I just received this message from you. I don’t speak french so I don’t know what it says (trying babelfish).

/me looking for the nantes webmaster…

You said:
Wed Sep 22 16:26:53 2004

Ok. I just spoke to someone who speaks french. I’m not sure what personal info the FBI is talking about. It doesn’t even list their names, let alone addresses, phone numbers, or whatever. Also, where’s the threat?

Perhaps they can list the sentences they want removed (?). Are they saying the photos need to be removed? On what grounds?

I haven’t gotten ahold of a Nantes webmaster yet (it’s late there).

Rackspace said:
Thu Sep 23 10:07:27 2004

Hello,

The FBI has requested that the text and images be removed. The police in Geneva, Switzerland have deemd this information to be threatening to two of its officers. As per the complaint we received, “Photographs of the officers, along with the personal residence information, appears on the site. The Swiss also reported that the web site included an article suggestive of threats against the officers and that other messages of a threatening nature were placed on the Swiss platform of the web site.”

Therefore, we are requesting immediate removal of the previously mentioned pages, text and images.

Regards,

Jennifer O’Connell
Rackspace AUP

You said:
Thu Sep 23 16:20:25 2004

Ok, per our discussion

1) here’s a link to a translation:

http://translations.indymedia.org/Translations/1095935479

(manif is a demonstration, I believe)

2) I will let you know what Nantes says after they email me

You said:
Thu Sep 23 16:31:28 2004

I also got one email saying that originally there was personal info posted, but it was removed. It’s generally against the Indymedia guidelines to post personal stuff, so they probably removed it even before we heard about it.

You said:
Fri Sep 24 21:48:31 2004

Ok. I was offline for a day and my mailserver crashed (doh!). Its at another ISP… Anyway, I don’t have a message from them because of this. But it appears everything is OK now (?).

You said:
Sun Sep 26 12:49:20 2004

Ok. I got a message back from IMC-Nantes, which I will forward to you. There was never personal info in the post. They have put a redacted version back up.

Also, Kevin Bankston from the EFF (www.eff.org) is now working on this issue and will most likely contact you on Monday.

Thanks,

-Jeff

You said:
Sun Sep 26 12:52:46 2004

Dear Jennifer O’Connell

We have received your request about https://nantes.indymedia.org/article.php3?id_article=3910. Contrarily to your beliefs, this material does not contain any personal information such as names and addresses, except for the pictures (if you would like an english translation of the text included with the pictures, please contact us). We are aware of the problems it may have caused you, so we collectively decided to mask the police officers faces. We are very surprised that neither the swiss police nor the men on the pictures contacted us. Furthermore, if the complaint originated from the FBI, should they not contacted us first?
We would like to receive more information about all of this, and would like to know if any legal procedures have been taken. If so, could we please be notified.
We would also be very grateful if you could send us, the e-mails that were sent to you by the FBI concerning the article.

Best regards,

The imc-nantes team

You said:
Sat Oct 2 23:22:33 2004

I haven’t heard from you in over a week. What’s up? It appears that there never was any personal info, or if there was it was removed even before this ticket was opened.

The FBI visited/intimidated in person an Indymedia guy in San Francisco over this issue for some reason.

Indymedia Nantes asked me to ask you for a reply to their message (above).

Thanks,

-Jeff

Rackspace said:
Tue Oct 5 07:19:47 2004

Hello,

I apologize for the delay in responding. I have been trying to get a hold of the FBI agent I spoke with before, but haven’t been able to at this time. As the request originated with the Swiss police, I can only speculate on what they saw or what they were concerned about. However, at this time, I have received no further communications from either the FBI or the Swiss authorities, so I feel like we can close this this issue.

Regards,

Jennifer O’Connell
Rackspace AUP

You said:
Tue Oct 5 22:33:24 2004

Ok, thanks for the follow up. I’ll close the ticket. It appears they are just trolling/intimidating as they also stopped by in person to a SanFran Indymedia guy but have no real interest in actually addressing the issue or their claims.

Thanks,

-Jeff

I have made an error about the guy visited in person by the FBI. Apparently he’s from Seattle, not San Francisco.

RNC coverage
Some have speculated that the servers could be yanked about some post someone made listing delegates to the RNC. I have a blog entry about this below. I don’t think this is the issue. Also, a few people have said that “indymedia hacked into [some site]…” WTF? Remember, anyone can post to indymedia.

Diebold
Diebold is the company that has taken over the elections and is going to re-elect Bush in November. Ok, maybe that’s a bit overstated, but perhaps not…

The Hacktivist has an archived mailing list email about Diebold, Rackspace, & the DMCA.

A recent trouble-ticket I opened with rackspace should clarify this issue. Diebold sent rackspace/me a cease & desist order in October 2003.


Subject: A look back in time: IMMEDIATE SUSPENSION OF YOUR SERVER
Category: Security – AUP
Severity: Standard
Status: Closed

Message Transcript:

You said:
Sat Oct 2 23:37:52 2004

IMMEDIATE SUSPENSION OF YOUR SERVER

On Wed Oct 15 10:25:33 2003 you (rackspace) opened the following trouble-ticket for me (to my amazement):

“We have received the following DMCA notification. Please review this and remove all cited content by 8:00am CST, tomorrow, October 16, 2003. Failure to remove this content will result in the immediate suspension of your server.”

[url to old ticket]

IMMEDIATE SUSPENSION OF YOUR SERVER

Thats not what I’d call Fanatical Customer Support, or whatever it is that you claim.

IMMEDIATE SUSPENSION OF YOUR SERVER

You may find this interesting (via EFF):
“In a landmark case, a California district court has determined that Diebold, Inc., a manufacturer of electronic voting machines, knowingly misrepresented that online commentators, including IndyMedia and two Swarthmore college students, had infringed the company’s copyrights. This makes the company the first to be held liable for violating section 512(f) of the Digital Millennium Copyright Act (DMCA), which makes it unlawful to use DMCA takedown threats when the copyright holder knows that infringement has not actually occured.”

IMMEDIATE SUSPENSION OF YOUR SERVER

You can read the Judge Jeremy Fogel’s full decision here:

Diebold_SJ_Order.pdf

IMMEDIATE SUSPENSION OF YOUR SERVER

Please reflect.

-Jeff

Rackspace said:
Sat Oct 2 23:43:25 2004

Hello Jeff,

I will need to forward this ticket over to our Accounts receivable department, so that they can further assist you. They will update this ticket as soon as possible.
Thank you for choosing Rackspace Managed Hosting!

Warm Regards,
Sarah Mathews
Support Specialist
(210)892-4000 x 1269
(800)961-4454

Rackspace said:
Mon Oct 4 07:30:53 2004

Hello,

I am sorry for the tone of the ticket you referenced. However, we are at the mercy of the DMCA as it is written. As a hosting provider, once we have received a DMCA notification, we are responsible for removing the offending material regardless of the merit of the complaint. In fact, we are not even to look into the merits of the complaint. We are only to act to remove the offending material as quickly as possible. If we fail to remove the material, we can be held liable for damages.

Unfortunately, this means that we are some times required to take customer’s servers off line if they do not act quickly to remove the offending material. While we certainly don’t like doing it, we are bound by the law as it currently reads and as our legal department interprets it.

Please let me know if there is anything else I can do to assist you!

Regards,

Jennifer O’Connell
Rackspace AUP

Press release from rackspace about seizure
In the present matter regarding Indymedia, Rackspace Managed Hosting, a U.S. based company with offices in London, is acting in compliance with a court order pursuant to a Mutual Legal Assistance Treaty (MLAT), which establishes procedures for countries to assist each other in investigations such as international terrorism, kidnapping and money laundering. Rackspace responded to a Commissioner’s subpoena, duly issued under Title 28, United States Code, Section 1782 in an investigation that did not arise in the United States. Rackspace is acting as a good corporate citizen and is cooperating with international law enforcement authorities. The court prohibits Rackspace from commenting further on this matter.

For additional information on the MLAT, please visit
findlaw

There’s even an mp3 of Rackspace making this statement on kpft local news (!)

Articles online
Reporters sans frontières
Computer World
Digital Media News for Europe – Also mentions CIA activities in harassing Cyprus Indymedia
liberty forum thread
Common Dreams
The Register – competent
PC Advisor
PC Pro
BBC
washington times (UPI)
blog article looking at legal ramifications
Guardian article – /me waves
Inter Press Service News Agency
Second article on slashdot
my comments on slashdot
EFF press release
thread on web hosting talk
Reason blog entry
jungewelt (german)
More from Indymedia global
Article on Indymedia global
Ahimsa overview @ docs.indy
Statewatch
Democracy Now! excerpt (mp3)
AP article on MSNBC
Indymedia UK thread
slashdot
serpin
Who took AHIMSA?
Infoshop thread
the age AU
International Federation of Journalists Press Release
Corriere della Sera (italian)
Cop harassment of Indymedia
Heise (german)
The Register article
zmag
International Freedom of Expression Exchange Alert
Web Wereld (dutch)
Conspiracy Planet
Corporate media coverage
Democracy Now!
ahimsa legal
story on yahoo

 
12 Comments...
  1. Marseille.indymedia.org is down too

  2. tutti su xiaodongpeople.blogspot.com

  3. Rackspace in Stocley park near Heathrow Airport in Lonodon operates under United Kingdom law, not United States law.
    Why couldn’t the Swiss authorities contact the UK ones directly ? There are plenty of treaties and a well established organisation called Interpol.

    The UK’s National High Tech Crime Unit(Shockwave only) has published a Confidentiality Charter(.pdf)
    which tries to reassure businesses and ISPs that legal investigations do not cause “collateral damage” Denial of Service attacks on shared servers and unrelated websites. This is necessary to encourage the reporting of computer crimes which would otherwise be covered up, and that any data seizures are done so with the correct forensic safeguards and audit trails which will not compromise the use of such data as evidence in court.

    This case has just torpedoed this Confidentiality Charter initiative.

    It is unclear if the National High Tech Crime Unit were consulted or not (they do normally deal with the FBI etc. in computer crime related cases), and there are also mixed reports about wether the Metroplitan Police
    were involved either. Hopefully UK journalists will be asking questions, now that the mainstream media have started to report the story. e.g. The Guardian broadsheet newspaper: “US seizes webservers from independent media sites”

    Why was the radio streaming server also seized and taken offline if the “offending” material was on the other web server ?

    It is theoretically possible that the management of Rackspace both in the UK and in the USA, by not following the correct United Kingdom NHTCU procedures, could potentially face “tipping off” offences, of up to 5 years in prison, i.e. serious enough to permit extradition to the UK from the USA.
    c.f.
    “Seizure of IndyMedia servers in London compromises the NHTCU Confidentiality Charter”

  4. Seizure of IndyMedia servers in London compromises the NHTCU Confidentiality Charter
    The seizure of server hardware in London belonging to the international IndyMedia network raises some questions not yet covered by the reports in The Register etc. The United Kindom’s National High Tech Crime Unit used to try to work with…

  5. Indymedia server scandal – “no UK law enforcement agencies were involved”
    As suspected no UK law enforcement agencies were involved in the Indymedia disk seizure scandal, according to the responses to Parliamentary Questions:, http://www.publications.parliament.uk/pa/cm200304/cmhansrd/cm041020/text/41020w14.htm “Indymedia M…

  6. Indymedia server scandal – “no UK law enforcement agencies were involved”
    As suspected no UK law enforcement agencies were involved in the Indymedia disk seizure scandal, according to this response to a Parliamentary Question: “Indymedia Mr. Allan: To ask the Secretary of State for the Home Department which UK law enforceme…

  7. i like your website. hey can you talk to me at yahoo can we be friends? please!!!!!!!!!!!!!!!!!!!!!!!!!!!!! thank you for your time

    From,
    Elizabeth Appelt

  8. Free Chat Rooms…

    I couldn’t understand some parts of this article, but it sounds interesting…

  9. Federal Government and Politics…

    I couldn’t understand some parts of this article, but it sounds interesting…

  10. Web Hosting Providers Directory…

    Sorry, it just sounds like a crazy idea for me :)…

  11. Computer Security Tips…

    I couldn’t understand some parts of this article, but it sounds interesting…

  12. Thanks for sharing this post. This is a very helpful and informative material. Good post and keep it up. Websites are always helpful in one way or the other, that’s cool stuff, anyways, a good way to get started to renovate your dreams into the world of reality.

 

Speak your mind

Line and paragraph breaks are automatic.
All posts are moderated. This may delay your comment, but there is no need to resubmit it.
Allowed tags: <a href=""> <blockquote> <code> <em> <strong>.

(required)

(required)