From Turmoil in Iran to Bi

Hello and welcome back to Citizen Tech, InformationWeek’s monthly policy roundup. This month, we’re looking at President Biden’s continued impasse with the Republicans over how to regulate web content; cryptocurrency platform Ethereum going green; European Parliament asking at what point AI violates human rights; Big Tech’s battles in Brussels; Elon Musk’s attempt to give the Iranian people internet in defiance of their government; and more.

Biden, Congress, and Tech Policing

The fight over Big Tech in Congress continued this month with a tap of the spurs from the White House. On Sep. 8, President Biden met in a “listening session” with advisors and tech executives, notably from Sonos and Mozilla, to discuss the endless problems of the tech sector: misinformation and disinformation, extremist and violent content, youth mental health, privacy, competition, and lack of transparency, among others.

POLITICO has linked this session with the recent scuffle over Section 230 of the Communications Decency Act, which implies that online platforms bear no responsibility for the user content they host. Biden wants Congress to strike the section entirely, allowing the government to police content for things like misinformation and algorithmic racial discrimination. But Republicans see this as a cynical political maneuver, a wink and a nod to Silicon Valley to push conservatives off the internet altogether.

It will be up to midterm voters to break this impasse. In the meantime, it’s interesting to note that neither Google nor Meta was invited to the “listening session.” Whatever the validity of GOP suspicions, this was hardly a Big Tech conspiracy. It almost looked like the opposite.

Iran Abroad…

American authorities have issued arrest warrants for three Iranian nationals on charges of cyber-fraud and extortion (per the New York Times). The three allegedly launched malware attacks against hundreds of networks worldwide, particularly in the US and other countries hostile to Iran. The damage was serious: a children’s hospital and a domestic violence shelter figured among their victims, along with the expected government and business websites.

There’s more than a whiff of sabotage and spycraft about this case, which the Department of Justice’s statement to the Times did not obscure. All the accused work at companies connected to Iran’s Revolutionary Guards.

…And Iran at Home

The cyber-extortion plot seems to have started around 2020; it’s by clever timing or dumb luck that the American warrants should be issued just at the moment of Iran’s domestic crisis. The police murder of Mahsa Amini has sparked what looks more and more like a revolution, with scores of unarmed protesters slain. The Islamic Republic is in trouble. Authorities have blocked the internet in volatile regions, including greater Teheran and Iranian Kurdistan, since the 22nd. This was partly in response to a flood of anti-regime TikTok videos and other social media posts, often of young Iranian women cutting their unveiled hair as a gesture of defiance.
We talk so much about the importance of the internet to our daily lives that it’s worth imagining, if only as an exercise, what its complete shutdown would look like.
As to be expected, the White House condemned the Iranian government’s repression. Secretary of State Anthony Blinken announced on the 23rd that the Departments of State and the Treasury would issue a general license to allow American companies to offer web browsing, social media, video sharing, automated translation, and other services to users in Iran. Such services were previously banned under the Iranian Transactions and Sanctions Regulations.
But tech diplomacy only goes so far for a people without internet. That’s as true for states as it is for would-be, one-man states, like the Republic of Elon Musk. As PC Magazine reported, just after Blinken’s announcement, Musk ordered SpaceX’s Starlink satellite internet service to activate in Iran. Theoretically, this would mean good quality broadband beyond the control of the Iranian government. The Iranians responded the next day that they had blocked Musk’s satellite’s. That seems to have been a bluff, but whether they manage to disrupt Starlink or not, PC notes that a Starlink home satellite costs about $600.
A flash in the pan, in other words. This isn’t Musk’s first intervention in a foreign conflict: he offered Starlink services to Ukraine during the first few weeks of the invasion, and his stalled takeover of Twitter is a matter of geopolitical concern, as Citizen Tech has reported before. What gets lost in the noise of the news is how remarkable this is: a high-tech Caesar, jostling with sovereign states.

War Bulletin No. 8

Russia needs chips. Documents leaked to POLITICO show the Kremlin scrambling for materiel — not just missiles, of which the Russians are running low, but “semiconductors, transformers, connectors, casings, transistors, insulators” and other tech products, mostly produced by countries like Taiwan, the US, and Japan. The documents contained itemized “shopping lists,” organized by importance to the Russian war effort. Top of the list are chips.

International sanctions (including updated restrictions by the White House) have squeezed Russian tech supply, although a researcher at the Flemish Peace Institute (a Belgian government think tank) warns against overrating them. He told POLITICO that a gray market of online retailers and third party fronts has circumvented bans before.
But clearly, the Russians can’t rely on those channels. As early as May, Gina Raimondo of the Department of Commerce claimed that the Russian army had resorted to stripping chips out of kitchen appliances like dishwashers to press them into service as materiel, according to the Washington Post. It looks like she was right: good news for the Ukrainian army.

EU May Ban Facial Recognition

A majority of the European Parliament now supports an EU-wide ban on facial recognition technology. The center-left Socialists & Democrats parliamentary group and the left-ecologist Greens had called for such a ban for years; what made the difference this month was the decision by Renew, the centrist group whose members include La République En Marche, Emmanuel Macron’s party.

“We’re going to ban what we believe is not according to our values,” Dragoș Tudorache MEP (Romania, PLUS) told POLITICO. “As Europeans, we believe that we need to be free of the risks of mass surveillance.”

We mentioned Emmanuel Macron just now to highlight the key irony of this shifting mood. EU member governments, including France, are nervous about this. They see it as an impediment to law enforcement. Facial recognition AI is part of the anti-terrorism toolkit; the 2015 Bataclan terrorist attack in Paris is still fresh in the memory of French security forces, and unrest in Europe’s southern and eastern frontiers has governments nervous.
Nevertheless, the new anti-recognition majority in Strasbourg suggests that values may trump security concerns. A renewed dedication to human rights and republican values in response to the Ukraine War may be one cause; keeping up with American Big Tech may be another.

Vestager-1, Google-0

Moving from Strasbourg to Brussels, the European Commission won an important victory in the Court of Justice of the European Union against Google over competition law, a subject dear to Commission Vice President Margrethe Vestager. The Commission states Google is manipulating its Android phones to use the Google search engine and Google apps to the exclusion of others.

“Certain aspects of Google’s strategy for adapting its business model… constituted an abuse of a dominant position,” said the ruling. It was “an overall strategy by Google to cement its dominant position on the online general search market at a time when the importance of the mobile internet was growing significantly.”

This summer we reported on the hot autumn the European Commission faced as Big Tech firms like Google and Intel assembled their European legal teams. So far, it hasn’t looked good: Intel embarrassed the Commission in June (as Reuters reported), as did Qualcomm a month ago.

Ethereum Goes Green?

Sep. 15, the cryptocurrency platform Ethereum completed its promised “Merge,” a massive software update intended to cut 99% of the platform’s carbon emissions and protect against cyber attacks. At the heart of the Merge was a transition to proof-of-stake verification from proof-of-work, a process too complicated for even the Times’ crypto reporters to lay out succinctly. We needn’t bother here: suffice it to say that this architecture transition was incredibly risky, but seems to have worked more or less without a hitch.

The question is whether this virtuous strategic shift will soften the Biden administration’s unfriendly stance toward crypto. In August, for instance, Gary Gensler of the SEC warned the crypto sector that securities are securities, to be regulated like any capital market. The fact that a platform dealing in such securities is no longer contributing carbon dioxide to the environment will likely not change his opinion.

But who knows? Ethereum’s founder, boy wonder Vitalik Buterin, told Wired that the Merge was a key step toward legitimizing his company (and implicitly, his industry) to governments and other institutions. “Ethereum is not a proof of work network anymore, and that makes people who had… concerns, a lot more willing to use it now.”
We’ll see, Mr. Buterin.

What to Read Next: 

August 2022 Global Tech Policy Bulletin

Twilio Breach: 5 Questions to Ask About Protecting Your Own Business

Black Hat at 25: Why Cybersecurity Is Going to Get Worse Before It Gets Better