"A world of fantasy and technical nonsense": An IT security consultant commented on Roskomnadzor's attempt to collect data from those visiting blocked websites.
Today it became known about the draft of a new order from Roskomnadzor: it will oblige — providers transmit data about internet users who try to bypass blocking (including using VPNs and visiting websites banned in the Russian Federation).
According to the document, the supervisory authority wants to receive information about clients' communications equipment and user devices, including their place of residence, equipment numbers, and IP addresses.
At the same time, an information security consultant Alexey Shlyapuzhnikov He believes that even this will not help Roskomnadzor track the routes of users who turn on VPNs.
"The fact that a VPN is being used can be determined somehow, but not always. But the provider can't know exactly why a person is using it. Because it's completely encrypted," Shlyapuzhnikov said NotMoscow.
He also emphasized that Russians use VPNs not only to visit resources banned by Russian authorities.
— A VPN is also needed to access resources that are permitted in Russia but blocked by the West for Russians, — Shlyapuzhnikov reminded. — For example, ChatGPT or Microsoft services. Furthermore, there are companies operating in Russia that use their own VPNs to access their internal networks. Therefore, the first impression [from reading the draft order] is of a world of science fiction and technical nonsense.
Alexey Shlyapuzhnikov admits that the government wants to put small providers at the microdistrict or even entry level in their place.
— As a rule, they work without TCTS [technical means of countering threats], — the expert explains. — Even major providers sometimes disable TSPUs because they frequently glitch, causing internet freezes and users to call support and complain. Now Roskomnadzor wants to pressure providers to provide more detailed reporting and prevent them from disabling this equipment or rerouting traffic.
According to Shlyapuzhnikov, large providers and telecom operators will simply perish under the reporting obligations that Roskomnadzor intends to demand from them.
— The most interesting thing is that most providers in Russia assign IP addresses dynamically, not statically. This means that a person's IP address can change throughout the day, whether on a mobile phone or even a home phone. And the provider will be required to report every change to that IP address.
