Slack Banning Random Iranian Ex-Pats Shows Why Making Tech Companies Police The Internet Is Crazy Stupid

from the this-is-a-bad-idea dept

On Thursday morning, I started seeing a bunch of tweets pop up in my feed from people of Iranian backgrounds, who no longer lived in Iran, who were having their entire Slack groups shut down, with the company blaming US laws regarding sanctions on Iran.

There are a lot more reports like this, but that was just the first batch I found with a quick search. Slack's explanation to the press seems... lacking:

“We updated our system for applying geolocation information, which relies on IP addresses, and that led to the deactivations for accounts tied to embargoed countries,” the representative said. “We only utilize IP addresses to take these actions. We do not possess information about nationality or the ethnicity of our users. If users think we’ve made a mistake in blocking their access, please reach out to feedback@slack.com and we’ll review as soon as possible.”

All of the blocked people talking about it on Twitter note that they don't live in any sanctioned country -- though many admit to having visited those countries in the past (often years ago) and probably checking in on Slack while they were there. That... is not how the sanctions system is supposed to work. In another press statement Slack tries to pin the blame on the US government:

But that's bullshit. The sanctions rules don't say you have to cut off completely anyone who ever connected from a sanctioned country. The Verge (linked above) spoke to an Oxford researcher with knowledge in this area:

“They are either incompetent at OFAC interpretation or racist,” said Oxford researcher Mahsa Alimardani, who specializes in communication tools in Iran. [....] “Detecting an Iranian IP address on a paid account (which is presumed to be for business) login as a violation of sanctions is a wrong interpretation of these regulations,” Alimardani says. “At best it’s over-regulation to prevent any sort of misunderstanding or possible future hassle with OFAC.”

Of course, as former Facebook Chief Security Officer Alex Stamos notes in his own tweet on this topic, this is exactly what happens when you have vague rules with strong punishment, and expect internet platforms to magically police the web:

This is a warning of what you get with regulation that:

1) Puts enforcement responsibility on a tech platform

2) Without real guidelines/safe harbor of how to interpret

3) Over-penalizes false positives

4) Has no appeals process in the actual legal system Get ready for more! https://t.co/vBUar6Nnap — Alex Stamos (@alexstamos) December 20, 2018

And of course, we're seeing more and more and more of that. FOSTA does that in the US. The GDPR is doing that around the globe. The EU Copyright Directive will do that. The EU Terrorist Content Regulation will do it. And a bunch of other regulations targeting the internet as well. That's why some of us keep warning that these laws are going to lead to widespread censorship and suppression of free speech. Because that's how it always works out. If you threaten internet platforms with huge penalties for failing to block content, but leave the details pretty vague, they're going to make decisions like that and simply kick people off their services entirely, rather than face liability. It's a recipe for disaster -- and one that seems to be favored by tons of clueless regulators, politicians, and plenty of people who just don't realize how much harm they will cause.

Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community. Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis. While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.

–The Techdirt Team

Filed Under: iran, iranians, ofac, sanctions, technology

Companies: slack