Code Spring: the anti-terrorism law threatens Internet users

The Deputy of the state Duma Irina Yarovaya

On Friday, June 24, the state Duma should adopt a package of “anti-terrorist” amendments developed by the MP Irina Yarovaya and Senator Viktor Ozerov. After the first reading, some of the most high-profile provisions of the bill were eased or removed. But part of the provisions criticized by the IT industry remains in the document. RBC studied than threaten Telecom operators and Internet users the updated proposal Spring and Ozerov.

To spend trillions of storing data

Amendments Spring and Ozerov will require operators and Internet companies to store text messages to their conversations, but also images, sounds, video, other communications, up to six months. Exactly how and how long information is stored, will be determined by the government. In addition, operators will have three years to store information about the facts of reception, transmission, delivery and processing of messages and calls. Access to all the information operators will be required to provide law enforcement authorities without a court order. The initial draft was tougher: the authors proposed to require operators to store all the contents of the correspondence and conversations for three years. In this case, according to various estimates, the total costs of the industry would be $ 4-5 trillion.

Reducing the retention period to 6 months will not save operators: for this amount you still have to create a new system of storage and processing. Its cost will exceed total revenue by the largest Telecom operators in seven years, estimated by the Expert Council under the government in opinion on the bill. Operators “the big three” for the conclusion, its estimated one-time construction costs of data centers by 50 billion rubles each. And the state “Rostelecom” has estimated that to service the extra traffic it will need 1 trillion per year. Small operators users can lose in General: companies not included in the first hundred, can not meet the requirements, considers the Expert Council. Now in Russia 13.9 thousand operators.

Major operators will pass the costs on to customers. In April, the head of the Ministry Nikolai Nikiforov predicted in the case of the adoption of the bill in the old edition of the “dramatic growth of prices for services”, the CEO of Tele2 Sergey Emdin evaluated the growth of prices in two times. Even in the new edition requirements will lead to a significant increase in tariffs,” says the representative of “VimpelCom” (brand “Beeline”). The expert Council under the government predicts that operators will be forced to stop the development of networks. MTS at such expenditures will not be able to build a new base station, and available soon begin to miss, confirmed a company representative Dmitry Solodovnikov. Traffic is growing at 50% annually, and after some time, the call quality will start to “degrade”, in the delivery of SMS start running, and the mobile Internet will be available, he predicted. The bill will lead to a slowdown of the network, says the representative of “VimpelCom”.

“Organizers of information distribution” in the network, which will also be obliged to store the contents of messages and calls can be recognized as any online resources. The cost of rent, construction of data centers and other infrastructure can be prohibitive, according to the conclusion of the Russian Association for electronic communications (RAEC, brings together more than 200 of the largest Russian Internet companies). The law can lead to “withdrawal from the Russian market a large number of players,” says the RAEC.

Pass passwords FSB

Amendments to the “anti-terrorist” package for the second reading oblige “organizers of information distribution on the Internet” to decode all encrypted messages. The failure to pass the FSB “keys” to the encrypted traffic of Internet companies face a fine from 800 thousand to 1 million rubles Internet-companies under threat of penalty to 40 thousand rubles will be required to use only certified in Russia the means of encoding and encryption.

The requirement on the transfer of the FSB all the keys impossible: in modern applications for the encrypted communication keys are the interlocutors, and not the company that provides the service, explains the Vice-President and technical Director Mail.Ru Group Vladimir Gabrielyan. According to him, the Internet is encrypted 40% of the traffic. The transfer of the FSS certificate that can decrypt the traffic, will lead to the restriction of the secrecy of correspondence of the users, and this limitation is the prerogative of the court and can only be made in relation to a specific person, said Gabrielyan.

Transfer all passwords and means of access of citizens to financial and other personal data to the FSB violates the Constitution, says the curator of the working group “Communication and it” Open government Irina Levova. “The concentration of all the keys to all communications in one super-owner” makes this information vulnerable to hackers, terrorists, foreign intelligence services, said in the conclusion of the Expert Council under the government.

The second requirement would deprive users secure access to banking services and payment systems, warns Expert center for the government: most of the services that are provided secure transmission of data use are not certified in Russia, the protocols and encryption systems. It would threaten the Internet Protocol HTTPS, which is used in almost all sites where you can enter sensitive information in online banking, when you pay for the tickets and hotels, and even the provision of electronic services on the portal “public Services”. The HTTPS Protocol does not provide key storage: they are generated at the sender and receiver of the message and not sent over the network. Attempts to create algorithms or keys to encrypt create a dangerous vulnerability in the hands of the developers themselves, warns RAEC.

To inspect parcels

MPs propose to oblige the postal operator”Mail of Russia” and private SPSR, Pony Express and others) to ensure that the shipments were not prohibited items — weapons, drugs, poisonous plants or animals, perishable products, etc. To check parcels postal employees may use x-rays, metal detectors, gas detectors, and other devices.

To do this, postal operators have to purchase special equipment and its maintenance will require additional costs, said Director of the legal Department SPSR Express Nikita Corsairs. Tariffs may rise if it will require major investments, and state support will not, he warns. Yet, according to Korsunova, to estimate future costs is difficult. In the Association of nongovernmental postal operators (ANOPS) and the Pony Express, however, believe that for the citizens, nothing will change: the postal service, and so check the package with all these devices.

In the first quarter of 2016 compared with the first quarter of 2015, the volume of purchases of Russians in foreign online stores has doubled to 70 billion rubles In absolute terms, the number of purchases has increased almost threefold, at 182% and reached 48 million, given the data Association of companies the Internet-trade (AKIT).

To increase the sentences for extremism network

Spring lake and want to toughen terms of a number of “extremist” articles of the Criminal code, including article 282 — “incitement of hatred or enmity, and humiliation of human dignity”, which is regularly charged to Internet users. The amendments also equate public calls for terrorist activity or justification of terrorism in the Internet to the same action in the media (article 205.2 of the Criminal code).

The article 282 in the case of the adoption of the law will lower the threshold of the penalty of 2 years imprisonment (now the lower threshold), and upper — will grow to 5 years. For this article, for example, the accused blogger Anton Nosik for public support for the bombing of Syria. In the original version of the amendments on condemnation of the “extremist” articles are also threatened Russians ‘voluntary exit from the Russian citizenship”, but on 23 June the deputies refused from this position.

Violation of article 205.2 of the criminal code is punishable by a fine from 300 thousand to 1 million rubles or a prison term of five to seven years. In the case of adoption of law the punishment would threaten not only the media, but also Internet users. “By themselves, the wording in the [“extremist”] articles vague enough that actually allows you to bring people to justice for dissent — discussion of actual problems, or a statement of opinion,” said the lawyer Sergei adamsin.