The Russian Internet (Runet) Becomes More Opaque

Recent implementation of amendments to Russian Law make the Russian Internet (Runet) more opaque to anyone other than the Russian security services.  For example, below is the domain registration for a Russian IT company as listed on November 2, 2011.  The registrar—Reg.Ru—is a Russian registrar located in Moscow:

domain: SAYTECH.RU

nserver: ns1.reg.ru.

nserver: ns2.reg.ru.

state: REGISTERED, DELEGATED, UNVERIFIED

org: Saitek, LLC

phone: +7 495 9843552

e-mail: villaine@mail.ru

registrar: REGRU-REG-RIPN

created: 2011.05.25

paid-till: 2012.05.25

source: TCI

As amended, however, Russian Federal Law FZ-152 On Personal Data now prohibits the release of personal data to any foreign entity by a Russian business operator.  Personal data includes phone numbers and email addresses.  As a result, the same domain registration now appears as below:

domain SAYTECH.RU

nserver: ns1.reg.ru.

nserver: ns2.reg.ru.

state: REGISTERED, DELEGATED, UNVERIFIED

org: Saitek, LLC

registrar: REGRU-REG-RIPN

admin-contact: http://www.reg.ru/whois/admin_contact

created: 2011.05.25

paid-till: 2012.05.25

free-date: 2012.06.25

source: TCI

Note that the email address and telephone number no longer appear.  Instead, anyone desiring contact information for Saitek, LLC must use the Reg.Ru whois administrative service.  Using the whois service returns the form below.  As you can see, the requestor must provide their email address and the information desired.  However, under Federal Law FZ-152, the domain administrator will simply refuse to provide the information except under a very limited set of circumstances.  Nevertheless, they will know who is interested and what they want.

The information is available since Federal Law FZ-152 now requires an internal passport for domain registration from a Russian registrar.  Federal Law FZ-149 On Information, Information Technologies and Data Protection requires the operator to provide that information to investigators from the Russian security services.  As a result, if the Federal Security Service (FSB) wants to know who registered the site posting information criticizing the government (usually referred to as exciting violence or extremism), no problem.  However, if a US system administrator wants to contact someone about the problems originating from a Russian registered domain, tough luck.

This is a guest blog post by Taia Global's lead Russia analyst.

Add to Cart View detail

Announcing the 2011 Russian Federation InfoSec Reference Book

THE 2011 RUSSIAN FEDERATION INFORMATION SECURITY REFERENCE

This book is a collection of special reports prepared by my company on the information security framework, training, techniques, and procedures of the Russian Federation Federal Security Service (FSB), as well as key labs and elite universities. We also provide coverage on key provisions of the FSB law and how it may be interpreted. The information was acquired through open sources on the Russian Internet (Runet) over a period of 12 months. Analysis was conducted by Taia Global’s veteran intelligence analysts who’ve recently retired from the U.S. intelligence community. This book is the culmination of many hundreds of hours of work. It contains findings that will be of use to corporate executives and their boards, law enforcement, intelligence agencies, and the military. It is unique in the marketplace and has been priced accordingly.


TABLE OF CONTENTS:

1. RUSSIAN INFORMATION SECURITY STANDARDS AND SPECIALTIES 
2. VORONEZH HACKING SCHOOL
3. RUSSIAN INTERIOR MINISTRY CYBER CRIMES DIRECTORATE (DEPT K)
4. RUSSIA STATE HUMANITIES UNIVERSITY (FACULTY OF INFORMATION SECURITY)
5. MOSCOW STATE INSTITUTE OF ELECTRONICS AND MATHEMATICS (MIEM) (DEPT OF APPLIED MATHEMATICS) 
6. MOSCOW ENGINEERING PHYSICS INSTITUTE (FACULTY OF INFORMATION SECURITY)
7. MOSCOW STATE INSTITUTE OF RADIO ENGINEERING, ELECTRONICS, AND AUTOMATION (MIREA) (FACULTY OF INFORMATION TECHNOLOGY - FACULTY OF CYBERNETICS)
8. MOSCOW STATE TECHNICAL UNIVERSITY (BAUMAN) (SCHOOL OF INFORMATICS AND CONTROL SYSTEMS)
9. THE ACADEMY OF THE FEDERAL SECURITY SERVICE RUSSIA (FSB) (INSTITUTE OF CRYPTOLOGY, TELECOMMUNICATIONS AND INFORMATICS - IKSI)
10. FEDERAL SECURITY SERVICE (FSB) ADMINISTRATIVE CENTERS FOR INFORMATION SECURITY
11. FEDERAL SECURITY SERVICE INFORMATION SECURITY CENTER (FSB RF / VCH 64829 )
12. FEDERAL SECURITY SERVICE CENTER FOR ELECTRONIC SURVEILLANCE OF COMMUNICATIONS (16TH CENTER FSB / VCH 71330)
13. FEDERAL LAW: ON THE FEDERAL SECURITY SERVICE (FSB)

This reference book is 76 pages long with written analysis accompanied by maps, table data, and screen shots of supporting documentation. When ordering, remember to include your email address in the space provided for a message to the seller. A personalized copy of the book in .pdf format will be sent to the address provided within a few minutes of receipt of your order. Feel free to contact me with any questions or for quantity pricing.

To Order:

US$149.00

(Be sure to provide your email address for delivery of your .pdf book)

Add to Cart View detail