Benjamin Sonntag: 'I stand in solidarity with Autistici/Inventati'

French computer engineer and security expert Sonntag has worked and fought for digital rights for over two decades now. , who should fight against unlawful restriction of their citizens' freedom, is baffling. I stand in solidarity with Autistici/inventati'. Speaking to, a French computer engineer who has been working for over twenty years to promote the internet as a tool for liberation. Our newspaper has interviewed him. Autistici/Inventati relied on the '.org' domain which is controlled by PIR, i.e. the Public Interest Registry organisation based in Virginia, in the United States. Not even 48 hours after the Trump administration designated A/I as a terrorist organisation, PIR shut down A/I's domain. Is this a confirmation that collectives which do not agree with Trump's policies on wars, migrants and civil rights should stay away from the .org domain, as they are within the reach of the U.S. authorities? The domain name of Austici/Inventati is only one face of the problem: if you step back a bit, any kind of US-controlled Internet service is politically dangerous to use nowadays, not only the '.org' domains. Any domain name root like '.com' or '.info' could have the same issue, since they are managed by US organisations too. And not only domain names: using Google ads, buying service from Microsoft or Adobe, put you at great risk of losing all your data and services if one morning Trump gets up on the wrong side of the bed and then heard about your organisation…That's a risk that any company or organisation should think about, and fast. I'm quite worried that the EU is not taking a stance on forcing EU companies to not comply with US sanctions if there is no EU equivalent sanction decided. The EU should understand that the instability of US policy is a big issue. Let's imagine that autistici.org had not relied on a .org domain managed by a U.S. organisation like PIR, but rather on a domain in France: would France have complied with the US designation promptly as PIR did in less than 48 hours? You can't really know, since domain name providers are mostly big companies, and the US sanctions have a very broad reach: many companies, even not incorporated in the US, would not take the risk of continuing to do business with organisations under US sanctions. The chilling effect is massive. This includes banks of course, but also insurance providers, domain name providers, or anyone, really. That said, there is nothing in the French rules for the '.fr' domain name that would force the domain provider to suspend a name in case of US sanction. So if your local provider does that, you should be able to ask the French AFNIC or even go to trial, to get your name back. A/I did nothing different from Signal: it offered digital services which are pro-privacy and for free. Why did the Trump administration target A/I whereas it did NOT target Signal and, quite the opposite, uses Signal to discuss top-secret military plans? The first idea would be to understand that this is stupidity speaking, not deep geopolitical thinking… Trump could also have threatened Signal, or other privacy-preserving services, or anyone else helping antifascist movements anywhere on earth. Them choosing to sanction A/I is unexpected. Maybe because one of the people hosted by A/I was mean to Trump or his policies recently, you can't really know. Signal is a great service for secure communications, that's why even people like Trump and his allies are using it. Since they use it, we could hope they understand that Signal is somehow neutral infrastructure. Also, Signal mostly handles private communications, A/I offers blogs, like a media. That's a big difference. This weekend Autistici/Inventati shut down its digital services. Had they kept them online, would users have risked being targeted by US intelligence and law enforcement, which could have used data to identify activists and use A/I services as a honey-pot? That's a risk, and I guess that could be a good reason for A/I to not take that risk. Again, the reach of US intelligence and law enforcement is large. Burning your bridge before you get invaded was, in my opinion, a good move from A/I to prevent risks against their engineers and their users. Autistici/Inventati was one of the very few free and pro-privacy digital services out there, given that even Protonmail is no longer free. What is left after A/I ? I'm not too worried right now, since we still have the ability to organise to build our own infrastructure providers. There is still riseup.net which is another well-known privacy-preserving public service, and in many countries you have people doing web, email and communication hosting by themselves, for their friends, organisations and collectives, like the Chatons in France, a collective of autonomous hosting providers. The most important thing is to not do it alone when you build your own infrastructure, to keep it more resilient, and to build your 'threat model' if you can, to know what your adversaries and their means are, and to ensure you protect your collective and their individuals against those threats. Finally, is the Autistici/Inventati case a wake-up call that the US authorities will go after anyone providing free community services online so that they can strengthen the already all-powerful hyper-centralised US companies which have taken over internet infrastructure and which are now part of the US military-industrial-digital complex? I have been involved in privacy-preserving services since 1998, and believe me, since Trump 2 came into office, I have never heard so many people worried about their dependency on US services, from small collectives to big corporations. That's good news. Now let's hope they walk the talk and start going more independent of Microsoft / Google / X / Meta and others. Since the artificial intelligence bubble started, most of those companies have totally thrown out their ecological promises and collaborated openly with military industries. If you don't think they are a threat to your organisation or to your company, you're wrong. Gentile lettore, la pubblicazione dei commenti è sospesa dalle 20 alle 9, i commenti per ogni articolo saranno chiusi dopo 72 ore, il massimo di caratteri consentito per ogni messaggio è di 1.500 e ogni utente può postare al massimo: evitare gli insulti, le accuse senza fondamento e mantenersi in tema con la discussione. I commenti saranno pubblicati dopo essere stati letti e approvati, ad eccezione di quelli pubblicati dagli utenti in white list . Infine non è consentito accedere al servizio tramite account multipli. Vi preghiamo di segnalare eventuali problemi tecnici al nostronon riesci a leggere ilfattoquotidiano.it perché hai negato i consensi relativi alla pubblicità. Per continuare a leggerci accetta i consensi o diventa nostro Sostenitore . Ti ricordiamo che il nostro lavoro ha un costo ripagato dalla pubblicità e dai sostenitori. Il tuo aiuto è per noi indispensabile.acconsenti in questo modo al trattamento dei tuoi dati personali mediante l'impiego di tutti i cookie presenti sul sito, fermo restando la possibilità di revocare il consenso in qualunque momento. Navigherai in modo totalmente gratuito e potrai visualizzare fino ad un massimo di 5 articoli al mese, e vedrai la pubblicità.sottoscrivi un abbonamento Sostenitore a 'ilfattoquotidiano.it', al costo promozionale di 1€ al mese per 3 mesi. A decorrere dal quarto mese il costo dell'abbonamento diverrà di 5,99€ al mese, il tutto mantenendo le tue attuali impostazioni. Da abbonato potrai navigare senza alcun tipo di pubblicità. Accedere all'archivio completo de il Fatto QuotidianoAccedere a tutti i programmi di TvLoftTesseramento alla Fondazione il Fatto Quotidiano a € 5,00