Bits Blog: Syria Loses Access to the Internet

Umbrella Security Labs A graphic shows Internet addresses in Syria were no longer reachable after 3 p.m.

Syria’s access to the Internet was cut on Tuesday. The most likely culprit, security researchers said, was the Syrian government.

Syrian Internet traffic came to a halt just before 3 p.m. Eastern time. Google reported a drop in Internet traffic around that time, as did the Local Coordinating Committees, an antigovernment activist group in Syria.

Four physical cables connect Syria to the Internet — three under the sea, and the fourth over land through Turkey. For outsiders to cause Tuesday’s outage, security experts say, they would have had to physically cut all four cables simultaneously.

That does not appear to have happened in this case, according to security experts. Instead, someone with access to the physical connections dropped the Border Gateway Protocol, or B.G.P., routes into Syria in such a way that any information trying to enter the country was not able to find its way.

“It’s akin to someone removing all the street signs into Syria,” said Matthew Prince, the founder of CloudFlare, an Internet security firm that distributes large volumes of traffic across the Internet. The firm put together a video illustrating Syria’s outage.

The same technique was used to shut down the Internet and mobile phone service last November. Syrian government officials said terrorists, not the government, were responsible for that outage, but evidence pointed to government involvement.

Ironically, Syrian opposition groups are more immune to Internet and cellphone outages than ordinary Syrians. In Syria’s opposition-controlled territories, rebels have successfully built an alternate system of Internet and cellphone connectivity using two-way satellite devices.

But experts warn that the use of satellite devices also makes it much easier for the Syrian government to track the rebels’ location.

“Radio direction finding and signals intelligence could easily be deployed in this scenario to figure out where the opposition is communicating from,” said John Scott-Railton, a research fellow at the Citizen Lab, an organization at the University of Toronto that focuses on Internet security.

Dell Products Make Their Way, Circuitously, to Syria

The disclosure of the computer sales is the latest example of how the Syrian government has managed to acquire technology, some of which is used to censor Internet activity and track opponents of the Syrian president, Bashar al-Assad.

According to internal company e-mails, cash transfer statements, sales receipts and shipping documents, the computer equipment was sold by BDL Gulf, which is based in Saudi Arabia and is a large distributor of computer equipment in the Middle East. It is an authorized dealer for Dell in the Middle East and Africa, and is also a reseller for other computer brands, including Samsung and Acer.

BDL sold the equipment to Anas Hasoon Trading, a Damascus-based company with contracts to provide computers to the Syrian government, according to billings records and e-mail exchanges between the companies.

Jess Blackburn, a spokesman for Dell in Round Rock, Tex., confirmed that BDL was an authorized reseller. He said the company was recently made aware of a possible shipment of Dell equipment to Syria by an anonymous source.

“We are investigating an allegation we received recently that BDL was involved in a possible transaction involving Syria,” Mr. Blackburn said in a statement. “Dell requires its resellers to follow U.S. trade requirements, just as Dell does. Resellers of Dell products and services are contractually prohibited from selling or shipping any technology to a customer in a restricted country.”

The United States has barred the sales of most American-made goods to Syria for nearly a decade and has repeatedly tightened sanctions against the government. An executive order by President Obama, dated April 22, 2012, specifically addresses the sale of computer technology to Syria, barring Americans from helping the Iranian and Syrian governments engage in human rights abuses, including monitoring and tracking of dissidents.

United States officials charged with enforcing sanctions against Syria would not comment on the possible violation of export sanction laws but did say that exporting technology to Syria was illegal unless the sale would promote the free flow of information between the Syrian people and the outside world.

Asked about the evidence of shipments to Syria, a manager at BDL said the company had hundreds of customers and did not keep track of their locations.

“We cannot know if they are from Pakistan, Egypt or Morocco; we just sell in Dubai,” said RamaNarayan Singh, who is listed as BDL’s sales manager for the United Arab Emirates, Africa and Iran. “I’m just an employee doing my duty. I don’t know if a company is from Syria.”

But e-mails between Mr. Singh and a representative from Anas Hasoon Trading show that the Syrian company made it clear to him that it was working on behalf of the Assad government. Mr. Singh signed several invoices that listed a Syrian address for the trading company. Mr. Singh said he did not recall the e-mails or the invoices.

The records, which were provided to The Times by an individual who was briefed on the transactions, showed that BDL sold hundreds of laptops, tablets and desktop computers to the Syrian company.

In e-mails sent between Mr. Singh and Yahya Rifai, who was listed as a purchasing manager for the Anas Hasoon Trading company, Mr. Rifai mentioned several times that he was working to buy the computers for the Syrian government.

The companies dealt mainly in cash, records showed, after transfers from Syrian banks to banks in Dubai were rejected because of financial sanctions against the country.

In an e-mail to Mr. Singh dated Sept. 2, 2012, Mr. Rifai wrote about his difficulties in using bank transfers to pay for the computers because of the sanctions.

“Dear Ram, my problem is how to get money from Syria to you? As you know I’m working on tenders deals with the government which required many documents and approvals!!” he wrote.

“Try please do not worry,” Mr. Singh wrote in response. “I will support you whatever best for you.”

Barred by banks from making electronic transfers, Mr. Rifai made several large cash deposits into the bank account of BDL to purchase the computers, the documents show. Asked last month about the purchases, Mr. Rifai responded in an e-mail: “We are Syrian company so we don’t care about the rules America put, its only for American companies not us.”

Last year, the Syrian government made similar purchases of computer equipment from a reseller of Hewlett-Packard. The equipment, according to various news reports, was used to monitor the e-mail and Internet use of opposition forces. Hewlett-Packard said its computers were sold without its knowledge.

In 2011, Internet-blocking devices from Blue Coat Systems, of Sunnyvale, Calif., were shipped to Syria from Dubai. Blue Coat thinks the gear was sold to the Iraqi government.

“It’s a pattern that we’ve seen across the Middle East from governments trying to avoid democratic changes — using proxies to bypass sanctions and buy equipment to stifle dissent and track Internet activity,” said Charles Dunne, a former National Security Council official and director of the Middle East and North Africa program at Freedom House, a Washington nonprofit group that promotes democratic change. “The U.S. government and companies need to do a better job of making sure this equipment does not end up in the hands of governments like the Assad regime.”

This article has been revised to reflect the following correction:

Correction: May 3, 2013

An earlier version of this article and an accompanying picture erroneously identified Prince Alwaleed bin Talal of Saudi Arabia as the owner of BDL Gulf. Representatives of Prince Alwaleed said that neither he nor his senior advisers are aware of any connection between the prince and BDL Gulf.

Syria Rebels Find Skype Useful, but Dangers Lurk

When Syria’s Internet service disappeared Thursday, government officials first blamed rebel attacks. Activist groups blamed the government and viewed the blackout as a sign that troops would violently clamp down on rebels.

But having dealt with periodic outages for more than a year, the opposition had anticipated a full shutdown of Syria’s Internet service providers. To prepare, they have spent months smuggling communications equipment like mobile handsets and portable satellite phones into the country.

“We’re very well equipped here,” said Albaraa Abdul Rahman, 27, an activist in Saqba, a poor suburb 20 minutes outside Damascus. He said he was in touch with an expert in Homs who helped connect his office and 10 others like it in and around Damascus.

Using the connection, the activists in Saqba talked to rebel fighters on Skype and relayed to overseas activists details about clashes with government forces. A video showed the rebels’ bare-bones room, four battery backups that could power a laptop for eight hours and a generator set up on a balcony.

For months, rebels fighting to overthrow President Bashar al-Assad have used Skype, a peer-to-peer Internet communication system, to organize and talk to outside news organizations and activists. A few days ago, Jad al-Yamani, an activist in Homs, sent a message to rebel fighters that tanks were moving toward a government checkpoint.

He notified the other fighters so that they could go observe the checkpoint. “Through Skype you know how the army moves or can stop it,” Mr. Yamani said.

On Friday, Dawoud Sleiman, 39, a member of the antigovernment Ahrar al-Shamal Battalion, part of the Free Syrian Army, reached out to other members of the rebel group. They were set up at the government’s Wadi Aldaif military base in Idlib, a province near the Turkish border that has seen heavy fighting, and connected to Skype via satellite Internet service.

Mr. Sleiman, who is based in Turkey, said the Free Syrian Army stopped using cellphone networks and land lines months ago and instead relies almost entirely on Skype. “Brigade members communicate through the hand-held devices,” he said.

This week rebels posted an announcement via Skype that called for the arrest of the head of intelligence in Idlib, who is accused of killing five rebels. “A big financial prize will be offered to anyone who brings the head of this guy,” the message read. “One of our brothers abroad has donated the cash.”

If the uprisings in Tunisia and Egypt were Twitter Revolutions, then Syria is becoming the Skype Rebellion. To get around a near-nationwide Internet shutdown, rebels have armed themselves with mobile satellite phones and dial-up modems.

In many cases, relatives and supporters living outside Syria bought the equipment and had it smuggled in, mostly through Lebanon and Turkey.

That equipment has allowed the rebels to continue to communicate almost entirely via Skype with little interruption, despite the blackout. “How the government used its weapons against the revolution, that is how activists use Skype,” Mr. Abdul Rahman said.

“We haven’t seen any interruption in the way Skype is being used,” said David Clinch, an editorial director of Storyful, a group that verifies social media posts for news organizations, including The New York Times (Mr. Clinch has served as a consultant for Skype).

Mr. Assad, who once fashioned himself as a reformer and the father of Syria’s Internet, has largely left the country’s access intact during the 20-month struggle with rebels. The government appeared to abandon that strategy on Thursday, when most citizens lost access. Some Syrians could still get online using service from Turkey. On Friday, Syrian officials blamed technical problems for the cutoff.

The shutdown is only the latest tactic in the escalating technology war waged in Arab Spring countries.

But several technology experts warned that the use of the Internet by rebels in Syria, even those relying on Skype, could leave them vulnerable to government surveillance.

Liam Stack contributed reporting from New York; Hala Droubi from Dubai, United Arab Emirates; and Hwaida Saad from Beirut, Lebanon.