EU Commission gives up blocking TOR and VPN services [corrected 27 March 2012]

In February I noticed that I could no longer access the EU Commission’s website using a VPN service. Most TOR servers and VPN services turned out to have been blocked, preventing millions of users from accessing essential official information. The blocking affected even the European Court of Justice’s website which provides access to the Court’s jurisprudence.

I filed the following complaint on 16 February:

Dear Sir,

I have come to notice that the Commission’s website ec.europa.eu is no longer accessible using VPN services (error message: „Access Denied (policy_denied) Your system policy has denied access to the requested URL“).

This policy infringes on the citizens right to access EU public information anonymously. It is also for reasons of IT security, for example when using public wifi access points, that the Internet is used via VPN services. According to a representative poll, 12.8% of Germans
use a VPN service (http://www.vorratsdatenspeicherung.de/images/infas-umfrage.pdf).

Probably in the course of some update an anonymity blocklist provided by an international manufacturer has been installed inadvertedly. Please make sure that this blocklist is disabled. If, however, you should decide not to restore VPN access, I should have to file a complaint with the European Data Protection Commissioner. I hope that this will not be necessary.

Yours sincerely,

An Information Security Officer replied on 1 March (excerpt):

We fully understand this citizen’s request and also agree that you have the right to stay anonymous when accessing the Commission europa websites. But the Commission is obliged to keep the Commission websites available for all citizens. You can only realise this objective by implementing security measures, in this case preventing cyber attacks that typically use the TOR network. So to satisfy the higher rights of the general public, you are forced to block the TOR network, which implicitly blocks the possibility of some individuals to use anonymous access.

Despite this rebuke, the blocking was ended a few days later without further explanation. EU websites can once again be accessed anonymously. Obviously, blocking anonymity is not necessary to keep the websites available. The German Federal Crime Agency confirmed last year that „anonymization services are no longer an issue in the execution of DoS or DDoS attacks“.

If you come across websites that cannot be accessed anonymously, do complain about it. Together we will hopefully end the failed blocking or blacklisting policies that punish millions of users for the acts of a tiny fraction of them.

Just like other liberties, the freedom to remain anonymous is too beneficial to society to be given up in reaction to sporadic abuse. The benefits of anonymity have been explained in detail by Gary Marx („What’s in a name?“), the detriments of total traceability by AK Vorrat („Background information and facts“). To find out how to protect yourself, read our Comparative test of Internet Anonymizers.

German version of this article: EU-Kommission gibt Sperrung von Anonymisierungsdiensten auf (26.3.2012)

Correction of 27 March 2012:

Although the EU Commission has given up blocking the VPN service I use, tests show that it is still blocking the TOR network. TOR browser comes up with the following error message:

I have now filed a complaint with the European Data Protection Supervisor:

Dear Sir,

I have come to notice that the Commission’s website ec.europa.eu is no longer accessible using the TOR network (error message: „Access Denied (policy_denied) Your system policy has denied access to the requested URL“).

This policy infringes on the citizens right to access EU public information anonymously. It prevents millions of users from accessing essential official information. The blocking affects even the European Court of Justice’s website which provides access to the Court’s jurisprudence. Apart from privacy and human rights reasons for using TOR it is also valuable for reasons of IT security, for example when using public wifi access points. According to a representative poll, 12.8% of Germans use a VPN service such as TOR (http://www.vorratsdatenspeicherung.de/images/infas-umfrage.pdf).

I have filed a complaint with the Commission. […] (Local Information Security Officer) defended the policy with the following arguments: „But the Commission is obliged to keep the Commission websites available for all citizens. You can only realise this objective by implementing security measures, in this case preventing cyber attacks that typically use the TOR network. So to satisfy the higher rights of the general public, you are forced to block the TOR network, which implicitly blocks the possibility of some individuals to use anonymous access.“

This is false. A myriad of websites not blocking TOR (e.g. European Parliament, EDPS) prove that such blocking is not necessary for ensuring availability. Besides the German Federal Crime Agency has confirmed that TOR no longer plays a role in DDoS attacks.

In the context of its blocking policy, the EU Commission is processing personal data (IP address of Internet users) illegally as there is no legitimate interest in banning anonymous surfers.

Please make sure that the Commission restores TOR access to all EU websites.

Yours sincerely,

1 Stern2 Sterne3 Sterne4 Sterne5 Sterne (1 Bewertungen, durchschnittlich: 5,00 von 5)
Loading ... Loading ...
10.474mal gelesen

Beitrag per E-Mail versenden Beitrag per E-Mail versenden Seite drucken Seite drucken

Verwandte Artikel

Weitere Artikel zum Schlagwort · Weitere Artikel zum Thema English, Metaowl-Watchblog

4 Kommentare »


  1. Internet anonymizers | Altarversion — 9. September 2012 @ 11.25 Uhr

    [...] Comparative test of Internet Anonymizers – Daten-Speicherung.deComparative test of Internet Anonymizers [updated 28/10/2011]. 28. September 2011 um 12.59 Uhr · Abgelegt unter English, Metaowl-Watchblog · Schlagworte: … [...]


  2. Anonymous — 6. September 2012 @ 20.30 Uhr

    Looks like they have changed the message to:

    Network Error (gateway_error)

    Server overloaded
    The gateway may be temporarily unavailable, or there could be a network problem.

    At least that’s what I‘m seeing. Maybe trying to reduce bad press?


  3. security — 29. September 2011 @ 20.06 Uhr

    Gebt mal auf http://browsingprotection.f-secure.com/swp/ eure URL (http://browsingprotection.f-secure.com/swp/) ein…

    Webmaster: Danke für den Hinweis, ich versuche, eine Korrektur zu erreichen.


  4. Mark — 28. September 2011 @ 14.37 Uhr

    Amazing Comparison, I must say. A lot of people look for Users are always looking for VPN Service with unblocked email ports.

    Great work!

RSS-feed für Kommentare zu diesem Beitrag · TrackBack-URI

Kommentieren Sie diesen Artikel

*
To prove you're a person (not a spam script), type the security word shown in the picture. Click on the picture to hear an audio file of the word.
Anti-spam image


 
Stoppt die Vorratsdatenspeicherung! Jetzt klicken & handeln!Willst du auch bei der Aktion teilnehmen? Hier findest du alle relevanten Infos und Materialien: