Summary of the technical report and the current status of the WomenOnWeb

May 22, 2020

Since the end of January 2020, the information website on abortion Women on Web is being blocked in Spanish territory. As described in a detailed technical report published on the 5th of May, several Internet Service Providers (ISPs) are blocking the website. In the absence of confirmation from the ISP companies, we can only speculate that this blockade could arise as an initiative of the Ministry of Health, through the Spanish Agency of Medicines and Health Products (AEMPS for its acronym in Spanish). Despite the fact that Women On Web has been operating all over the world for years thanks to its unquestionable rigour in the medical and legal field, its website is being censored silently, without any legal intervention and without giving any explanation about the existence of the blockade itself to the users.

Women on Web is a project that provides assistance and information on abortion processes. If we manage to access the website *womenonweb.org*, and request its help to perform an abortion, a medical consultation will be carried out initially, starting with an extensive questionnaire in which there will be no lack of information about the possibilities and alternatives in each country. In many cases, contact details of and health care centres and practitioners who can perform the abortion close to home are facilitated; if necessary, an exchange of emails with the medical service of the web takes place afterwards. If this process is completed, the medical service of the website sends a prescription to an international pharmacy which in turn sends the medicines (Mifepristone & Misoprostol) to the address we will have indicated. On the website it is made clear at all times that what takes place is not a sale: no stipulated price is paid for the medicines. Women On Web provides an international counseling service, and under these terms people who complete the consultation process are invited to make a donation. This donation is in no way compulsory, and is intended to ensure that the service is maintained.

We have gathered firm evidence that, at the very least, the following internet companies have blocked or continue to block the website: Vodafone, Vodafone Ono, Orange, Jazztel, CSUC, MÁSMÓVIL, Telefónica/Movistar and Euskatel.

Perhaps more serious than preventing us from reaching a page of our interest in an internet service for which we pay, is to realise that the blocking itself is trying to go unnoticed. During the tests carried out to provide forensic technical documentation to the case file, we could verify that the website we are trying to visit is never reported as being censored. Neither since when, under what conditions, let alone the reasons or legal basis for doing so. We are only made to believe that the page does not exist or is down.

The censorship mechanism simulates a problem on the web, a bad link, or that the project no longer exists. In reality, the internet company intercepts our navigation, blocks it, and returns a fabricated and illegitimate “error”. They have literally bought the same surveillance and repression technology that is used, in other countries, such as Azerbaijan, the Middle East and North Africa, to persecute political dissidents and infect their devices. Because of the legal battles we have lost in recent years, several state agencies have access to introduce websites in the “ blacklist” of sites to block without judicial guarantees.

Technically, blocking happens through four different mechanisms:

DNS manipulation.

The domain name system is tricked into sending our device information about the server’s IP that is not real. As detailed in the report, the potential visitor will receive a false message explaining that there is a problem outside the company, making it appear that the “error” has occurred on the Women On Web server.

HTTP blocking.

Movistar, in particular, intercepts the communication of its users to show a fake website that displays the text HTTP 404 error, that is, a code to announce that the specific page does not exist. Similarly, Vodafone displays a page stating that “Due to reasons beyond Vodafone’s control, this website is not available”.

Secure HTTP Interception (HTTPS).

The technology deployed by Vodafone goes further, to the point of impersonating the Women on Web server. Vodafone servers attack the exchange of security keys that occurs at the beginning of every browsing session with a secure page (those with the “padlock”, which almost all websites should have nowadays). The user’s browser receives a forged certificate, which claims to belong to the www.womenonweb.org website, but which is actually issued by Vodafone’s servers.

TCP restarts.

Another method used by Movistar. It is a way of interrupting the connection between a browser and a web server. This attack has already been used in several countries as one more method in the arsenal of methods to censor the Internet. This is the technique used by Movistar when it detects the start of a key exchange to establish a secure session.

Additionally, we have seen the use of Deep Packet Inspection (DPI) servers from two companies, Allot and Fortinet. These are much more intrusive techniques for censoring websites, as they are actually intercepting the content of their users’ network communications. Telefónica contracts the censorship services of Fortinet and Vodafone those of Allot in order to carry out the blocking so that their clients cannot access this website

Fortunately, it’s very easy to use tools to get around this censorship. Nevertheless, we believe that it is our duty to contribute to the awareness of the increasing censorship of websites, and the information controls that are being deployed by several internet companies in the Spanish territory. For this reason we share all the technical details of the systematic blocking of the Women On Web page.

Any act of censorship is deplorable. In this case we would like to insist that, in addition, access to information is censored in a country where abortion is legal. For now.

**Group contact:** nobloc(at)3msg.es

Since pepephone blocked me from accessing riseup.net, the people from the magma guide know how to contact me, and so they did, when they noticed that the website http://womenonweb.org/ , which offers contraceptive and abortion pills for donation, which seems to be from the Netherlands, was blocked by Spanish internet service providers (ISPs). I didn’t know how to give them a reason apart from confirming that pepephone also blocks it, so I asked some people from hackmeeting. A commotion was raised, articles were written in Catalan, in Spanish, in English. They website seems still blocked today. Even though it can be accessed over VPN. Apparently the Opera browser offers some free VPN. (So do riseup.net and aktivix.org but you need a friend to introduce you).

The website can also be accessed through google cache

You can contribute to report this and of course other cases of censorship on by running the program or app from ooni.

What follows is a translation from Donestech in Catalan:

Hey, people! If you have 10 minutes, you can contribute to report one more case of censorship on the net at home. It’s not clictivism! It’s more fun and above all, useful!

They are blocking “www.womenonweb.org”, which has information and resources on contraceptives and abortions. You’ll see, try to access it and see what it says! NOBODY EXPECTS ENGLISH INQUISITION

To counteract this, what can we do? Ooni is a collective that researches internet censorship, and offers tools to check the censorship we receive, and compiles and offers this information in the world. It makes it very easy to have reliable data to be able to denounce the deprivation of rights publicly, that’s why we need to do a lot of tests!

To contribute, the easiest way for many people will be from a windows computer (instructions at www.ooni.org) or on a mobile phone:

1. Install the ooniprobe application from fdroid, google play, or the application repository you use:
2. In the first ‘box’, give the “tap card for more”, “choose websites” add womenonweb.org to the line where you invite with a “http://” and give the “run”
3. Wait a few according to, and check the results.

That’s it! The reports are automatically sent to the good people at Ooni, who will analyze them to understand how they did the censorship this time and find out exactly what is blocked and what is not.

If you fly more, it is very useful to repeat the experiment from different Wifi and data connection. That way we’ll have a broader view of which ISPs are blocking us and how, and maybe we’ll discover them the day they start blocking those that aren’t yet! If this is not possible for you, please feel free to share this text with everyone you know.

The tests are anonymous in the sense that you do not have to give personal information, but your reports will include the phone company, date and time, and ASN (which can be linked to a geographical area), but not the IP or boss other more personal data, such as email, name, phone number. This is never shared!

Thank you very much!