Twitter, #iranelection and confusion, or why changing your timezone doesn’t help
by dbasch — 4 Comments »Right now there is a firehose of information on Twitter about the situation in Iran. For the past week, between 1% and 3% of all tweets have been tagged with #iranelection.
Boing Boing published a Cyberwar guide for Iran elections
which tries to clarify the confusion, but point #4 on it adds to it:
4. Help cover the bloggers: change your twitter settings so that your location is TEHRAN and your time zone is GMT +3.30. Security forces are hunting for bloggers using location and timezone searches. If we all become ‘Iranians’ it becomes much harder to find them.
This just doesn’t make sense. Security forces do not have a magical Twitter search engine that allows them to find people by anything other than hints people themselves give about their location. Let’s explain this better:
Put yourself in the place of the security forces. Let’s assume that they have people who understand the nuts and bolts of the Twitter API. How would they go about finding people? For one, you cannot search by timezone. Changing your timezone to Tehran’s doesn’t obscure any searches. You can search by location. If you are in Iran and you have a cellphone that constantly updates Twitter with your latitude and longitude, you could be found. Of course, you would only enable that information if you wanted to be found.
Let’s assume a person in Iran is twittering surreptitiously and doesn’t want to be found by the police. They may want to change the location on their profile to Butte, Montana and their timezone to US Mountain. This is not much of a security measure though. Suppose you are twittering from New York and your profile truthfully discloses your location. I’m interested in finding you because of the things you say. Knowing that you are in New York doesn’t help me in the least. If on the other hand you say that you are the tall guy wearing the Knicks jersey next to the Washington Square Arch, then I could find you. Again, why would you say that if you didn’t want to be found? If I wanted to find you and you didn’t want to be found, I’d have to track everything you said hoping for a slip that gave me a useful hint as to your whereabouts.
If I were a blogger/twitterer in a surveillance society, I would assume that a computer at an Internet cafe is not safe. It may have a keystroke logger and it could be connected to some central agency whenever certain keywords are typed. I don’t know if that’s the case in Iran, but I would not risk it. Likewise, ISPs could be monitoring traffic. If that were the case, everyone else outside of your country could pretend to be you on Twitter and it wouldn’t help you in the least.
Let’s assume you are twittering from a secure computer, using a proxy and your traffic is not being monitored by the government (either because you are either using encryption or because they just didn’t get around to it). If that’s the case, make sure that you cannot be personally identified/located from your information and you’ll be fine.
For everyone else, you can support Iranians by making your avatar green, changing your location (and your timezone if you will). Remember it’s all symbolic though. You are showing your solidarity and that’s good. Just keep in mind that you are not helping anyone avoid the security forces.
