Internet surveillance and boomerang routing: A call for Canadian network sovereignty

11
Electronic copy available at: http://ssrn.com/abstract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

Transcript of Internet surveillance and boomerang routing: A call for Canadian network sovereignty

Electronic copy available at: http://ssrn.com/abstract=2311792

!

!

"#$%&'%$!()!*+%,-!($.,/0!12/3/$&!

"#$%&#%$!'(&)%*++,#-%!,#.!/001%&,#2!30($*#2!4!5!6,++!70&!6,#,.*,#!8%$90&:!'0)%&%*2#$;!4$!5)!6#77!8!")!9'&/,$!:;.7)<-!!"#$%&'($)$*+,-../0123$,4$56.$!.-61,7,28$9$":.+2012$#./0;$!+;-<!

!

!

!

6*$,$*0#!*+%,-!")!()!8!12/3/$&-!()!:=>?@<)!4$&/,$/&!9A,B/C22%$D/!%$.!E##3/,%$F!6#A&C$F!G!(!1%22!H#,!1%$%.C%$!I/&0#,J!

9#B/,/CF$&K)!4$!5)!6#77!8!")!9'&/,$!:;.7)<-!!"#$%&'($)$*+,-../0123$,4$56.$!.-61,7,28$9$":.+2012$#./0;$!+;-<$=$>11?;7$@,14.+.1-.$,4$56.$@;1;/0;1$@,::?10-;50,1$>33,-0;50,1$AB0-5,+0;C$D?1.$E$=$FC$%&'%G-!L6M!G!'&&NGOO000)&/3)H2)A2%B%2)D%OH,OBCD&#,C%P=>?@O!!

!

!

!

!

!

Electronic copy available at: http://ssrn.com/abstract=2311792

1

"#$%&#%$!'(&)%*++,#-%!,#.!/001%&,#2!30($*#2!4!5!6,++!70&!6,#,.*,#!8%$90&:!'0)%&%*2#$;<!

!

5($=0&! "#$%&'%$!()!*+%,!! Q%DA2&K!#H!4$H#,3%&C#$-!L$CB/,7C&K!#H!R#,#$&#!! S/N%,&3/$&!#H!R/2/D#33A$D%&C#$-!4$H#,3%&C#$!9&A.C/7!%$.!T/.C%-!TCD'CF%$!9&%&/!L$CB/,7C&K!! U#$%&'%$)#+%,VA&#,#$&#)D%!!!! ($.,/0!12/3/$&!! Q%DA2&K!#H!4$H#,3%&C#$-!L$CB/,7C&K!#H!R#,#$&#!! %$.,/0)D2/3/$&VA&#,#$&#)D%!!!5>?$&,-$! ($%2K7C7!#H!3#,/!&'%$!=W->>>!C$&/,$/&!&,%D/,#A&/7!,/B/%27!%!N'/$#3/$#$!0/!D%22!X+##3/,%$F!

,#A&C$FY-!0'/,/+K!1%$%.C%$P&#P1%$%.C%$!C$&/,$/&!&,%$73C77C#$7!%,/!,#A&C$/2K!,#A&/.!&',#AF'!&'/!L$C&/.!9&%&/7)!1%$%.C%$!#,CFC$%&/.!&,%$73C77C#$7!&'%&!&,%B/2!&#!%!1%$%.C%$!./7&C$%&C#$!BC%!%!L)9)!70C&D'C$F!D/$&,/!#,!D%,,C/,!%,/!7A+U/D&!&#!L)9)!2%0!P!C$D2A.C$F!&'/!L9(!5%&,C#&!(D&!%$.!Q49(()!(7!%!,/7A2&-!&'/7/!&,%$73C77C#$7!/ZN#7/!1%$%.C%$7!&#!N#&/$&C%2!L)9)!7A,B/C22%$D/!%D&CBC&C/7-!C$D2A.C$F!&'#7/!'CF'2CF'&/.!!+K!&'/!9$#0./$!%22/F%&C#$7![!%!BC#2%&C#$!#H!1%$%.C%$!$/&0#,J!7#B/,/CF$&K)!

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

!@%;90&.?! 9A,B/C22%$D/]!I9(]!R/2/D#33A$CD%&C#$7]!5,CB%DK]!ECF!S%&%]!I/&0#,J!9#B/,/CF$&K!!

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!? !R'C7! ,/7/%,D'! '%7! ,/D/CB/.! HA$.C$F! H,#3! 1%$%.%Y7! 9#DC%2! 9DC/$D/7! %$.!^A3%$C&C/7! 6/7/%,D'! 1#A$DC2! %$.! &'/! *HHCD/! #H! &'/! 5,CB%DK! 1#33C77C#$/,! #H!1%$%.%)! R'/! 4_3%N7! N,#U/D&! C7! &'/! 0#,J! #H! %! ,/7/%,D'! &/%3! &'%&! DA,,/$&2K!C$D2A./7! 1#2C$! TD1%$$! %$.! ($&#$C#! `%3+%)! S%BC.! 5'C22CN7-! 9&/B/! ^%,B/K-!`%++K!6/7D'-!;,CJ!9&/0%,&-!I%$DK!5%&/,7#$-!TC7'%!9$K./,!%$.!M%A,/$!SCT#$&/!'%B/!3%./!C$B%2A%+2/!D#$&,C+A&C#$7!%&!/%,2C/,!7&%F/7!#H!&'/!N,#U/D&)!\/!%,/!%27#!F,%&/HA2!&#!&'#7/!C$.CBC.A%27-!2%,F/2K!%$#$K3#A7-!0'#!'%B/!D#$&,C+A&/.!&#!&'/!.%&%+%7/!+K!C$7&%22C$F!%$.!,A$$C$F!R6F/$-!#,!'%B/!N,#BC./.!H//.+%DJ!&'%&!'%7!'/2N/.!C3N,#B/!&'/!%NN2CD%&C#$)!

Obar & Clement • Internet Surveillance and Boomerang Routing TEM 2013 • ACC-CCA

2

<A "#$&0.(-$*0#!

I%&C#$%2! 7#B/,/CF$&K! C7! &',/%&/$/.!0'/$!%$!#&'/,0C7/! C$&/,$%&C#$%22K!C$./N/$./$&! 7&%&/! '%7! C&7! ,CF'&7! %$.! N#0/,7! #H! C$&/,$%2! ,/FA2%&C#$! %$.!D#$&,#2!BC#2%&/.!+K!&'/!/$D,#%D'3/$&!#H!%!H#,/CF$!+#.K!:E%,,-!=>>=<)!(7!%!7#B/,/CF$!0C22!D%$!+/! C3N#7/.! C$!%$K!%,/%!0'/,/!&'/,/! C7!%!,/2%&C#$7'CN!+/&0//$!&'/!N#2C&CD%2!/$&C&K!J$#0$!%7!&'/!7&%&/!%$.!C&7!DC&Ca/$7-!&'/,/!%,/!%! 3A2&C&A./! #H! 7C&/7! H#,! N#&/$&C%2! BC#2%&C#$)! *$/! 7AD'! 7C&/! C7! $/&0#,J!7#B/,/CF$&K! P! &'/! %A&'#,C&%&CB/! b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

1%$%.%Y7! &/2/D#33A$CD%&C#$! 7K7&/3-! %7! %! D,C&CD%2! C$H,%7&,AD&A,/! H#,!$%&C#$! +AC2.C$F! %$.! 7#DC#P/D#$#3CD! 0/22P+/C$F-! C7! #$/! 7C&/! 0'/,/! &'/!7&%&/! '%7-! #B/,! 3%$K! K/%,7-! %&&/3N&/.! &#! /Z/,DC7/! $%&C#$%2! $/&0#,J!7#B/,/CF$&K)! Q#22#0C$F! H,#3! %! 2#$F! 'C7&#,K! #H! N,#&/D&C#$C7&! N#2CDK-! &'/!R/2/D#33A$CD%&C#$7! (D&! #H! ?cc@! $#&/7! &'%&! 1%$%.C%$!&/2/D#33A$CD%&C#$7! N/,H#,3! d%$! /77/$&C%2! ,#2/! C$! &'/! 3%C$&/$%$D/! #H!1%$%.%Y7! C./$&C&K! %$.! 7#B/,/CF$&Ke! :R/2/D#33A$CD%&C#$7! (D&-! ?cc@<)!;Z/,DC7C$F!%!7#B/,/CF$!0C22-!&'/!1%$%.C%$!F#B/,$3/$&!%27#!./&/,3C$/.!%!D#$$/D&C#$!+/&0//$!C&7!&/2/D#33A$CD%&C#$!7K7&/3!%$.!&'/!N,#&/D&C#$!#H!DCBC2! 2C+/,&C/7)! Q#,! /Z%3N2/-! &'/! (D&! $#&/7! &'%&! 1%$%.C%$!&/2/D#33A$CD%&C#$7!7'#A2.!dD#$&,C+A&/!&#!&'/!N,#&/D&C#$!#H!&'/!N,CB%DK!#H!N/,7#$7e!:4+C.<)!R'/7/!N,CB%DK!N,#&/D&C#$7!%,/!,/C$H#,D/.!+K!9/D&C#$!f!#H! &'/! @;1;/0;1$ @6;+5.+$ ,4$ H02653$ ;1/$ I+../,:3! &'%&! N,#&/D&7! %F%C$7&!A$2%0HA2!7/%,D'!%$.!7/CaA,/-!%$.!+K!&'/!*.+3,1;7$J14,+:;50,1$*+,5.-50,1$;1/$"7.-5+,10-$K,-?:.153$>-5!:545;S(<-!0'CD'!7%H/FA%,.7!.%&%!N,CB%DK!C$!&'/!N,CB%&/!7/D&#,)!(7!%!,/7A2&-!7'#A2.!%!H#,/CF$!+#.K!/$D,#%D'!AN#$!&'/!D#$&,#2!#H!%!1%$%.C%$!&/2/D#33A$CD%&C#$!$/&0#,J!%$.!C&7!#N/,%&C#$-!&'%&!%D&C#$!0#A2.!D#$7&C&A&/!%!BC#2%&C#$!#H!1%$%.C%$!$/&0#,J!7#B/,/CF$&K-!%$.!N#&/$&C%22K!&',/%&/$!1%$%.C%$!DCBC2!2C+/,&C/7)!

R'C7! N%N/,! N,/7/$&7! HC$.C$F7! H,#3! &'/! 4_3%N7! :H#,! C$&/,$/&! /ZD'%$F/!3%NNC$F<!N,#U/D&!%&!&'/!L$CB/,7C&K!#H!R#,#$&#=![!%!,/7/%,D'!C$C&C%&CB/!&'%&!3%N7! %$.! %$%2Ka/7! &'/! ,#A&/7! 1%$%.C%$! .%&%! N%DJ/&7! &%J/! %D,#77! &'/!C$&/,$/&!+%DJ+#$/)!\'C2/!1%$%.C%$7!%DD/77C$F!(3/,CD%$!7/,B/,7!&',#AF'!

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!=!!000)CZ3%N7)D%!

Obar & Clement • Internet Surveillance and Boomerang Routing TEM 2013 • ACC-CCA

3

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g)!(7!%!,/7A2&-! 1%$%.C%$P&#P1%$%.C%$! C$&/,$/&! &,%$73C77C#$7! &'%&! +##3/,%$F!/ZN#7/!1%$%.C%$!D#33A$CD%&C#$7!&#!N#&/$&C%2!L)9)!7A,B/C22%$D/!%D&CBC&C/7![! %! BC#2%&C#$! #H! 1%$%.C%$! $/&0#,J! 7#B/,/CF$&K)! R'/7/! D#$D/,$7! %,/!N%,&CDA2%,2K! %DA&/! C$! &'/! 0%J/! #H! ;.0%,.! 9$#0./$Y7! ,/B/2%&C#$7! %+#A&!&'/! I%&C#$%2! 9/DA,C&K! (F/$DKY7! :I9(<! C$&/,$/&! 7A,B/C22%$D/! N,#F,%37!:12/3/$&-!=>?g<)!

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

BA C,DD*#2!6,#,.*,#!/001%&,#2!E&,77*-!E=&0(2=!$=%!FA'A!

\'/$!A7/,7! C$&/,%D&!0C&'! C$&/,$/&!%NN2CD%&C#$7! :/3%C2-!0/+-!N=N-!/&D)<!&'/K! 7/$.! .%&%! N%DJ/&7! #B/,! &'/! C$&/,$/&)! (7! /%D'! N%DJ/&! &%J/7! C&7!C$.CBC.A%2! N%&'-! C&! &,%B/27! &',#AF'! .%&%! &,%HHCD! ,#A&/,7! &'%&! N%77! &'/!N%DJ/&! D2#7/,! &#! &'/! ./7&C$%&C#$)! ($K#$/! 0'#! '%7! &,%DJ/.! %! D#A,C/,/.!3%C2!N%DJ%F/!J$#07!&'%&!3%C2!.#/7!$#&!&,%B/2!C$!%!7&,%CF'&!2C$/!H,#3!N#C$&!(! .C,/D&2K! &#! N#C$&! E-! &'/,/! %,/! 7&#N7! :#,! X'#N7Y<! C$! .CHH/,/$&! 2#D%&C#$7!%2#$F!&'/!0%K![!&'/!7%3/!C7!&,A/!H#,!.%&%!N%DJ/&!,#A&C$F)!

4_3%N7!7#H&0%,/!3%N7!.%&%!N%DJ/&!,#A&/7!:X&,%D/,#A&/7Y<!A7C$F!`##F2/!;%,&'!%$.!`##F2/!T%N7!&#!&,%D/!&'/!,#A&/7!N%DJ/&7!&%J/!H,#3!&'/!A7/,Y7!3%D'C$/-! &',#AF'! &'/!.CHH/,/$&! &,%HHCD! ,#A&/,7! :X'#N7Y<!%2#$F! &'/!0%K! &#!&'/! HC$%2! ./7&C$%&C#$)! (7! 7'#0$! C$! QCFA,/! ?-! &'/! 7#H&0%,/! N,#BC./7!2#D%&C#$!.%&%!:C)/)!2%&C&A./!%$.!2#$FC&A./<!H#,!/%D'!'#N!%2#$F!&'/!,#A&/)!!

9C$D/!=>>c-!&'/!4_3%N7!&/%3!'%7!/$F%F/.!C$!%!D,#0.7#A,DC$F!/HH#,&!&#!F/$/,%&/!%$.!%DDA3A2%&/!&,%D/,#A&/7)!T#,/!&'%$!=>>!D#$&,C+A&#,7!'%B/!C$7&%22/.!%$.!,A$!DA7&#3Ca/.!&,%D/!F/$/,%&C#$!7#H&0%,/!:R6F/$<-!%..C$F!

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!@ !\'C2/! $#&! ,/D#F$Ca/.! NA+2CD%22K-! C&! C7! 0/22PJ$#0$! C$! &'/! C$&/,$/&! ,#A&C$F!D#33A$C&K!&'%&!7CF$CHCD%$&!N#,&C#$7!#H!C$&,%P1%$%.C%$!&,%HHCD!&,%$7C&7!&'/!L9)!

g!!I#&%+2K! 9/D&C#$! =?W! #H! &'/! L9(! 5%&,C#&! (D&-! %$.! 9/D&C#$! h>=! #H! &'/! Q#,/CF$!9A,B/C22%$D/!4$&/22CF/$D/!(3/$.3/$&7!(D&!:Q49((<)!

Obar & Clement • Internet Surveillance and Boomerang Routing TEM 2013 • ACC-CCA

4

&#! %! .%&%+%7/! DA,,/$&2K! D#$&%C$C$F! 0/22! #B/,! =W->>>! &,%D/,#A&/7! H,#3!#B/,!=>>!.C7&C$D&!#,CFC$%&C$F!%..,/77/7-! &/,3C$%&C$F! C$!3#,/! &'%$!=-W>>!.C7&C$D&!./7&C$%&C#$7)!

!!"#$%&'(')'*+%+,-+./&0'1+%2.34"56#+.*+%+,-+'7++8&%6,#'*%65&%+$-&'9&-6":;'

QCFA,/!?!N,/7/$&7!&'/!&,%D/,#A&/!.%&%!H#,!%! X+##3/,%$F!,#A&/Y-!%!N%&'!&'%&!#,CFC$%&/7!%$.!&/,3C$%&/7!C$!&'/!7%3/!D#A$&,K-!+A&!&,%$7C&7!%$#&'/,)!(7!./NCD&/.! C$!QCFA,/!=-! &'C7! &,%D/,#A&/!+/FC$7!%$.!/$.7! C$!1%$%.%-!+A&!D,#77/7!C$&#!&'/!L)9)!%2#$F!&'/!0%K)!

!!"#$%&'<')'*+%+,-+./&0'1+%2.34"56#+.*+%+,-+'7++8&%6,#'=+$-&$

Q,#3! &'/! .%&%+%7/! #H! =W->>>! &,%D/,#A&/7-! W-Wi>! #,CFC$%&/! %$.!&/,3C$%&/! C$! 1%$%.%-! #H! &'#7/-! ?-=f>-! ,#AF'2K! #$/PbA%,&/,-! +##3/,%$F!&',#AF'! &'/! L$C&/.! 9&%&/7)! 9#3/! #H! &'/! #$2C$/! C$&/,%D&C#$7! &'%&!+##3/,%$F! &',#AF'! &'/! L)9)! C$D2A./! BC7C&7! &#! 1%$%.C%$! F#B/,$3/$&!0/+7C&/7-!C$D2A.C$F!&'/!*HHCD/!#H!&'/!5,CB%DK!1#33C77C#$/,!#H!1%$%.%-!%7!0/22!%7!%!$A3+/,!#H!N/,7#$%2!+%$JC$F!7C&/7!7AD'!%7!E%$J!#H!T#$&,/%2-!RS!1%$%.%!R,A7&!%$.!14E1)!

Obar & Clement • Internet Surveillance and Boomerang Routing TEM 2013 • ACC-CCA

5

GA 6,#,.*,#!/001%&,#2!E&,77*-!,#.!8'5!'(&)%*++,#-%!

4$!=>>i-!T%,J!j2/C$-!%! ,/&C,/.!(R8R!&/D'$CDC%$-! ,/B/%2/.!&'%&! &'/!L)9)!I%&C#$%2! 9/DA,C&K!(F/$DK! :I9(<!'%.! C$7&%22/.! 7A,B/C22%$D/!/bACN3/$&! %&!(R8RY7!3%C$!9%$!Q,%$DC7D#! C$&/,$/&!/ZD'%$F/!N#C$&! :4_5<!%&!i??!Q#27#3!9&)! :j2/C$-! =>>c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`,//$0%2.-!h!"A$!=>?@]!`,//$0%2.!/&!%2-!=>?@<!

E%7/.! #$! D#$B/,7%&C#$7! %$.! 3//&C$F7! 0C&'! #&'/,! (R8R! 7&%HH-! j2/C$!:=>>c<! ,/N#,&7! &'%&! 7A,B/C22%$D/! C$7&%22%&C#$7-! 2CJ/! &'%&! C$! 9%$! Q,%$DC7D#-!/ZC7&!C$!HCB/!#&'/,!2#D%&C#$7G!(&2%$&%-!M#7!($F/2/7-!9%$!SC/F#-!9%$!"#7/!%$.!9/%&&2/)! 12/3/$&! :=>?@<! C./$&CHC/7! ?f! DC&C/7! C$! &'/! L)9)! &'%&! 2CJ/2K! '%B/!7C3C2%,!7A,B/C22%$D/!7C&/7)!QA,&'/,3#,/-!#H!&'/!?-@?c!L)9)P#$2K!&,%D/,#A&/7!'/2.! C$! &'/! 4_3%N7!.%&%+%7/-! cc!N/,D/$&! &,%B/2! &',#AF'!%&! 2/%7&!#$/!#H!&'/7/! DC&C/7-! 7AFF/7&C$F! &'%&! &'/! I9(! '%7! %23#7&! D#3N2/&/! 7A,B/C22%$D/!D%N%+C2C&C/7!H#,!%22!L)9)!C$&/,$/&!&,%HHCD!:4+C.<)!

R'/!/Z&/$&!#H!L)9)! 7A,B/C22%$D/!#H!1%$%.C%$!.%&%!N%DJ/&7! C7! 2/77! D2/%,)!R%+2/! ?! 2C7&7! &'/! &#NP?>! L)9)! DC&C/7! 7A7N/D&/.! #H! '%BC$F! C$7&%22/.! I9(!7N2C&&/,!#N/,%&C#$7!:12/3/$&-!=>?@<)!R'/!&%+2/!%27#!$#&/7!&'/!N/,D/$&%F/!#H! &'/! ?-=f>! 1%$%.C%$PL9P1%$%.%! +##3/,%$F! ,#A&/7! '#A7/.! C$! &'/!4_3%N7! .%&%+%7/! &'%&! N%77! &',#AF'! &'/7/! DC&C/7-! N#&/$&C%22K! 7A+U/D&! &#!L)9)!7A,B/C22%$D/!/HH#,&7)!1A,,/$&!HC$.C$F7!,/B/%2!&'%&!DC&C/7!D2#7/7&!&#!&'/!1%$%.C%$!+#,./,!%,/!3#,/!2CJ/2K!&#!,#A&/!1%$%.C%$!.%&%)!(NN,#ZC3%&/2K!W>! N/,D/$&! #H! 4_3%N7! +##3/,%$F! ,#A&/7! N%77! &',#AF'! I/0! k#,J! %$.!1'CD%F#-!&'/!&#N!&0#!DC&C/7!7A7N/D&/.!#H!'%BC$F!I9(!7N2C&&/,7-!%$.!%+#A&!=W!N/,D/$&!&,%B/2!&',#AF'!9/%&&2/)i!

! !

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!W!!R'/! 7Ca/! #H! +CF! .%&%! %$.! &'/! 7N//.! #H! C&7! /ZN#$/$&C%2! F,#0&'! %,/! .CHHCDA2&! &#!F,%7N)!4ET!,/N#,&7!&'%&!%&!&'/!&A,$!#H!&'/!3C22/$$CA3-!f>>->>>!N/&%+K&/7!:?>?W!+K&/7<!0/,/!7&#,/.!C$!&'/!0#,2.!:lCJ#N#A2#7-!;%&#$-!./6##7-!S/A&7D'-!8!M%NC7-!=>?=<)! 4$!=>=>-! C&! C7!N,#U/D&/.! &'%&! &'C7!$A3+/,!0C22! ,/%D'!@W!a/&&%+K&/7! :?>=?!+K&/7<)!R'/!%3#A$&!#H!.%&%!&'/!I9(!0C22!,/N#,&/.2K!+/!D%N%+2/!#H!7&#,C$F!C7! C$!&'/!,%$F/!#H!K#&&%+K&/7!:?>=g!+K&/7<)!

i!!R'/7/!HCFA,/7!%,/!%NN,#ZC3%&/!%7!&'/!F/#P2#D%&C#$!#H!,#A&/,7!C7!$#&!N,/DC7/)!

Obar & Clement • Internet Surveillance and Boomerang Routing TEM 2013 • ACC-CCA

6

8'5!H*:%+*=00.! 6*$;! /001%&,#2?! I!07!6J8KF'K6J8!E&,77*-!

L<BMN!30($%?O!?! I/0!k#,J-!Ik! i=W! gcm!=! 1'CD%F#-!4M! ig@! W>m!@! M#7!($F/2/7-!1(! i! n?m!g! (&2%$&%-!`(! g=! @m!W! S%22%7-!R_! =?! =m!i! 9%$!Q,%$DC7D#-!1(! ?=! ?m!h! \%7'C$F&#$-!S1! ?W>! ??m!f! 9/%&&2/-!\(! @>?! =gm!c! 9%$!SC/F#-!1(! >! >m!?>! E#7&#$-!T(! ?>! ?m!

*6>:&'(')'36,[email protected],6?6'7++8&%6,#;'6,?'B"2&:"4++?'+C'/AD'A$%E&"::6,5&'

R'/! +##3/,%$F! ,#A&C$F! %$.! &',/%&! #H! I9(! 7A,B/C22%$D/! 7AFF/7&7! &'%&!3%$K! #H! &'/! 4957! ,#A&C$F! 1%$%.C%$! C$&/,$/&! &,%HHCD! %,/! U/#N%,.CaC$F! &'/!7#B/,/CF$&K! %$.! N,CB%DK! #H! 1%$%.C%$7! 3%$.%&/.! +K! &'/!R/2/D#33A$CD%&C#$7!(D&!%$.!545;S()!

PA 5!6,++!70&!6,#,.*,#!8%$90&:!'0)%&%*2#$;!

Q#,/CF$! 7A,B/C22%$D/! #H! 1%$%.C%$! C$&/,$/&! &,%$73C77C#$7! &',/%&/$7!1%$%.C%$! DCBC2! 2C+/,&C/7! %$.! BC#2%&/7! #A,! 7#B/,/CF$&K)! R'C7! D%22! H#,!1%$%.C%$! $/&0#,J! 7#B/,/CF$&K! A,F/7! &'/! Q/./,%2! F#B/,$3/$&! &#!7&,/$F&'/$!#A,!7/DA,C&K!N#2CDC/7!%$.!,/2%&/.!/$H#,D/3/$&!3/D'%$C737!&#!/$7A,/! &'%&! 1%$%.C%$P&#P1%$%.C%$! D#33A$CD%&C#$! ,/3%C$7! 0C&'C$! #A,!$%&C#$%2! +#A$.%,C/7! %$.! UA,C7.CD&C#$)! 1%$%.C%$! ./3#D,%&CD! C$7&C&A&C#$7!2CJ/2K! D%$$#&! %HH/D&! L)9)! 7A,B/C22%$D/! N,%D&CD/7-! +A&! &'/K! D%$! /Z/,&!N,/77A,/! &#! /$7A,/! &'%&! &'#7/! #N/,%&C$F! 0C&'C$! &'/! UA,C7.CD&C#$! #H!1%$%.C%$! 2%0! 3%J/! &'/! N,#&/D&C#$! #H! 1%$%.C%$! 7#B/,/CF$&K! %$.! DCBC2!2C+/,&C/7!%!&#N!N,C#,C&K)!\/!,/D#33/$.!&'%&!N#2CDK!/HH#,&7!7&,/$F&'/$!%$.!/$H#,D/!1%$%.C%$!N,CB%DK!2%07-!%$.!0#,J!&#!,/N%&,C%&/!1%$%.C%$!C$&/,$/&!&,%HHCD!+K!+AC2.C$F!3#,/!C$&/,$/&!/ZD'%$F/!N#C$&7)!

PA<A '$&%#2$=%#!6,#,.*,#!Q&*),-;!H,9?!L*A%A!Q"QRJ5O!

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

1%$%.%Y7! 5,CB%DK! 1#33C77C#$/,7! 7'#A2.! 3#,/! BCF#A,#A72K! %NN2K!/ZC7&C$F!2%0-!%$.!1%$%.C%$!N,CB%DK!N#2CDC/7!%27#!$//.!&#!+/!7&,/$F&'/$/.)!(7! H/./,%2! 1#33C77C#$/,! "/$$CH/,! 9&#..%,&! $#&/7-! 545;S(! C7! #A&.%&/.!%$.!C$!$//.!#H!,/H#,3-!

(7! #,F%$Ca%&C#$7! HC$.! $/0! 0%K7! &#! N,#HC&! H,#3! N/,7#$%2!C$H#,3%&C#$-!&'/!,C7J7!! &#! N,CB%DK! %,/! F,#0C$F!/ZN#$/$&C%22K)!opq!4&!C7!C$D,/%7C$F2K!D2/%,!&'%&!&'/!2%0!C7!$#&!AN! &#! &'/! &%7J! #H!3//&C$F! &'/! D'%22/$F/7! #H! &#.%K! [! %$.!D/,&%C$2K!$#&!&'#7/!#H!&#3#,,#0)!:*51-!=@!T%K!=>?@<!

Obar & Clement • Internet Surveillance and Boomerang Routing TEM 2013 • ACC-CCA

7

QA,&'/,3#,/-!0'C2/! &'/!*HHCD/!#H! &'/!5,CB%DK!1#33C77C#$/,! :*51<!'%7!N,#3N&/.! D#3N%$C/7! &#! C3N,#B/! &'/C,! N,CB%DK! N,%D&CD/7-! %D&C#$7! %,/!,%,/2K! N,#%D&CB/-! 0C&'! 3C$C3%2! ,/%D&C#$7! 3#,/! #H&/$! &'/! ,/7A2&! %H&/,!D#$7C./,%+2/! *51! ,/7#A,D/7! '%B/! +//$! 7N/$&! :4+C.<)! 9&#..%,&! $#&/7-!do&q'/! 2/FC72%&C#$! 2%DJ7! 3/D'%$C737! 7&,#$F! /$#AF'! &#! /$7A,/!#,F%$Ca%&C#$7!C$B/7&!%NN,#N,C%&/2K!C$!N,CB%DKe!:4+C.<)!

R'/!*51!'%7! ,/2/%7/.!%!N#7C&C#$!NC/D/! :*51-!=>?@<! D%22C$F! H#,!545;S(!,/H#,3!&'%&!0#A2.!.#!3#,/!&#!7&,/$F&'/$!$%&C#$%2!$/&0#,J!7#B/,/CF$&K!%7!0/22!%7!N,CB%DK)!R'/7/!,/H#,37!C$D2A./G!

?< 9&,/$F&'/$C$F! *51! /$H#,D/3/$&! N#0/,7! C$D2A.C$FG! %<! 7&%&A&#,K!.%3%F/7! &#! +/! %.3C$C7&/,/.! +K! Q/./,%2! 1#A,&! H#,! BC#2%&C#$7-! +<!#,./,P3%JC$F!N#0/,7!H#,!&'/!*51!&'%&!0#A2.!H#,D/!#,F%$Ca%&C#$7!&#!N/,H#,3!#,!D/%7/!D/,&%C$!%D&C#$7-!%$.!D<!3#$/&%,K!N/$%2&C/7!&#!+/!C3N#7/.!+K!&'/!*51)!

=< E,/%D'! $#&CHCD%&C#$G! ,/bAC,C$F! #,F%$Ca%&C#$7! &#! ,/N#,&! N,CB%DK!+,/%D'/7!&#!&'/!*51!%$.!&#!%HH/D&/.!A7/,7)!

@< 4$D,/%7/.!&,%$7N%,/$DKG!&,%$7N%,/$DK!,/N#,&7!0#A2.!+/!,/bAC,/.-!.C7D2#7C$F! 2%0! /$H#,D/3/$&! %$.! #&'/,! F#B/,$3/$&! ,/bA/7&7! H#,!N/,7#$%2!C$H#,3%&C#$-!%$.!&'/!/Z&/$&!&#!0'CD'!/$&C&C/7!D#3N2K)!

g< 5,#3#&/!%DD#A$&%+C2C&KG!#,F%$Ca%&C#$7!0#A2.!'%B/!&#!./3#$7&,%&/!%DD#A$&%+C2C&K! :N,#%D&CB/! N,CB%DK! N,#&/D&C#$7<! AN#$! ,/bA/7&)! R'/!X/$H#,D/%+2/! %F,//3/$&7Y! D#$D/N&-! &'/! $#&C#$! &'%&! *51! D%$!D#3N/2! %D&C#$-! 0#A2.! +/! C$D#,N#,%&/.! C$&#! &'/! 2%0-! 0C&'!%DD#A$&%+C2C&K! N,#BC7C#$7! +/C$F! 7A+U/D&! &#! ,/BC/0! +K! %! Q/./,%2!1#A,&)!

;%D'! #H! &'/7/! ,/H#,37! 7'#A2.! +/! C3N2/3/$&/.! 0C&'! %! H#DA7! #$! .%&%!D#22/D&C#$! %$.! 3%$%F/3/$&! N,%D&CD/7-! C$D2A.C$F! ,#A&C$F! +/'%BC#A,7)!\'C2/! /$H#,D/3/$&! N#0/,! 0C22! +/! /77/$&C%2! &#! /$7A,/! D#3N2C%$D/-!F,/%&/,! &,%$7N%,/$DK! C7! %27#! BC&%2! &#! /$7A,/! %! 3#,/! ./3#D,%&CD!%77/773/$&! #H! DA,,/$&! N,%D&CD/7)! 4&! C7! A$,/%2C7&CD! &#! /ZN/D&! %! bACDJ! %$.!D#3N2/&/!7'CH&!&#!$/&0#,J!7#B/,/CF$&K-!%$.!&'A7-!NA+2CD!A$./,7&%$.C$F!#H!&'/! ,/H#,3! C7! /77/$&C%2)! 1A,,/$&2K-! 545;S(! ,/bAC,/7! &'%&! A7/,7! 7A+3C&!N,CB%DK! D#3N2%C$&7! &#! D%,,C/,7)! \C&'#A&! F,/%&/,! &,%$7N%,/$DK-! &'C7!,/bAC,/3/$&!C7! 2CJ/2K!&#!%DD#3N2C7'!2C&&2/!N,#&/D&C#$-!%7!A7/,7!%,/!A$%+2/!&#!./&/,3C$/!&'/!/Z&/$&! &#!0'CD'!&'/C,!DCBC2! 2C+/,&C/7!%,/!+/C$F!BC#2%&/.)!`,/%&/,! &,%$7N%,/$DK! %$.! /$H#,D/3/$&! 0C22! NA7'! +%DJ! %F%C$7&! &'/!./B/2#N3/$&! #H! C$.A7&,K! N,%D&CD/7! &'%&! 7A+U/D&! 1%$%.C%$7! &#! L)9)!7A,B/C22%$D/!/HH#,&7!%$.!&',/%&/$!#A,!N,CB%DK!%$.!$%&C#$%2!7#B/,/CF$&K)!!

PABA 3%D,$&*,$%!"#$%&#%$!E&,77*-!/;!/(*+.*#2!C0&%!6,#,.*,#!"#$%&#%$!RS-=,#2%!Q0*#$?!

5%77C$F!2%07!3%$.%&C$F!,#A&C$F!N%&&/,$7!0C22!+/!N,#+2/3%&CD!CH!D%,,C/,7!%,/! $#&! N,#BC./.! 0C&'! &'/! &##27! &#! /$7A,/! &'%&! %! 7#B/,/CF$! 1%$%.C%$!C$&/,$/&! $/&0#,J! 0C22! +/! %+2/! &#! HA$D&C#$)! \'C2/! N#2C&CD%2! /D#$#3CD!,/2%&C#$7'CN7! +/&0//$! D%,,C/,7! D#$&,C+A&/! &#! ,#A&C$F! N%&&/,$7-! $/&0#,J!D#$F/7&C#$! C77A/7-! 7N/DCHCD%22K! 1%$%.C%$! 4_5! +#&&2/$/DJ7-! %,/! %! ,/%2C7&CD!D#$D/,$! &'%&! D%$! .C,/D&! ,#A&C$F! %$.! %7! %! ,/7A2&-! C3N%D&! $/&0#,J!7#B/,/CF$&K!%$.!N,CB%DK)!

Obar & Clement • Internet Surveillance and Boomerang Routing TEM 2013 • ACC-CCA

8

4$&/,$/&!/ZD'%$F/!N#C$&7!:4_57<!'%B/!3%$K!+/$/HC&7!C$D2A.C$F!&'/!%+C2C&K!&#! '/2N! ,/.AD/!$/&0#,J! D#$F/7&C#$! %$.! C$D,/%7/! &'/! 2CJ/2C'##.!#H! 2#D%2!N//,C$F! :4RL-!=>?@<)! 4&!'%7!+//$!7AFF/7&/.! &'%&! &'/!N,/7/$D/!%7!0/22!%7!3%$%F/3/$&! #H! 4_57! D%$! C3N%D&! %$! /$&C,/! ,/FC#$Y7! 4$&/,$/&! /D#$#3K!:6K%$! %$.! `/,7#$-! =>?=]! 4RL-! =>?@<)! *&'/,! ,/2%&/.! +/$/HC&7! C$D2A./G!,/.ADC$F!&'/!$A3+/,!#H!$/&0#,J!'#N7!&#!/ZD'%$F/!&,%HHCD-!#N&C3CaC$F!&'/!A7/!#H!C$&/,$%&C#$%2!D#$$/D&CBC&K-!C3N,#BC$F!$/&0#,J!,/7C2C/$D/!%$.!2CJ/2K!bA%2C&K!#H!7/,BCD/-!,/.ADC$F!&,%$73C77C#$!D#7&7!%$.!C$&/,$%&C#$%2!D%N%DC&K!D#7&7! :N#&/$&C%22K! 3C22C#$7! #H! .#22%,7! N/,! K/%,<-! %$.! C$D,/%7C$F! &'/!N#77C+C2C&K! #H! F,/%&/,! C$&/,$/&! N/$/&,%&C#$! ,%&/7! :4RL-! =>?@<)! 4$.//.-!FCB/$! &'/! ,C7/! #H! &'/! C$&/,$/&! /D#$#3K! %$.! &'/! C$&/$7CHCD%&C#$! #H! &'/!C$&/,$/&Y7! D/$&,%2C&K! &#! /B/,K.%K! 2CH/-! &'/! C3N#,&%$D/! #H! 4_57! C7! #$2K!F,#0C$F)!

R#!/$7A,/!1%$%.C%$!$/&0#,J!7#B/,/CF$&K-!3#,/!4_57!$//.!&#!+/!+AC2&)h!(7! #H! "A$/! =>?=-! 1%$%.%! #$2K! '%.! &',//! 4_57)! 4$! &'/! 2%7&! K/%,-! &0#!%..C&C#$%2! 4_57!'%B/!+//$!%../.! &#! &'/! 2C7&)!EK! D#3N%,C7#$-! &'/!L$C&/.!9&%&/7! '%7! fi! 4_57! :5%DJ/&! D2/%,C$F! '#A7/-! =>?@<)! (7! EK,#$! ^#22%$.-!N,/7C./$&!#H!&'/!1%$%.C%$!4$&/,$/&!6/FC7&,%&C#$!(A&'#,C&K!$#&/7-!

R'/,/!C7!#$/!0%K!&#!N,#&/D&!#A,7/2B/7-!&#!7#3/!./F,//-!H,#3!'%BC$F!#A,!.%&%! H%22! A$./,! &'/! UA,C7.CD&C#$! #H! %! H#,/CF$! D#A$&,K)! \/! 3A7&! /$7A,/!3#,/!#H!C&!&,%B/27!&#!C&7!./7&C$%&C#$!BC%!1%$%.C%$!,#A&/7)!opq!4&!C7!&C3/!H#,!1%$%.%!&#!,/N%&,C%&/!C&7!4$&/,$/&!&,%HHCD!&#!&'/!+/7&!/Z&/$&!N#77C+2/!opq!&#!.#! &'C7! 0C22! ,/bAC,/! 3#,/! 4$&/,$/&! ;ZD'%$F/! 5#C$&7! opq! EK! +AC2.C$F! %!,#+A7&!1%$%.C%$!4$&/,$/&!C$H,%7&,AD&A,/-!C$D2A.C$F!%!$%&C#$P0C./!H%+,CD!#H!4_57-! 0/! D%$! /$7A,/! 3#,/! 1%$%.C%$! &,%HHCD! 7&%K7! C$! 1%$%.%-! %$.! C7!&'/,/H#,/!#$2K!7A+U/D&!&#!1%$%.C%$!2%0)!:^#22%$.-!=g!"A$!=>?@<!

R'/! 1%$%.C%$! F#B/,$3/$&! 7'#A2.! D#$&C$A/! &#! C$B/7&! C$! &'C7! BC&%2!C$H,%7&,AD&A,/-!0'CD'! C7! D/,&%C$2K! 2C$J/.! &#! /D#$#3CD! +/$/HC&-! %7!0/22! %7!&'/!N,#&/D&C#$!#H!N,CB%DK!%$.!$/&0#,J!7#B/,/CF$&K)!

TA 60#-+(?*0#!

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

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!h!!9//!&'/!146(!,/N#,&!+K!\##.D#DJ!8!;./23%$!:=>?=<)!

Obar & Clement • Internet Surveillance and Boomerang Routing TEM 2013 • ACC-CCA

9

R'/7/! /HH#,&7! 0C22! D#$&,C+A&/! &#! 7&%&/! 7#B/,/CF$&K-! +A&! 0C22! $#&! H,//!1%$%.C%$7!H,#3!+/C$F!7A,B/C22/.)!4$&/,D/N&C#$!7&,%&/FC/7!7C3C2%,!&#!&'#7/!+/C$F! N/,N/&,%&/.! +K! &'/! I9(! %,/! %27#! 2CJ/2K! &%JC$F! N2%D/! C$! 1%$%.%)!9C3C2%,!&#!&'/!+C22C#$P.#22%,!X7NK!D/$&/,Y!+/C$F!+AC2&!C$!L&%'!:E%3H#,.-!?W!T%,! =>?=<-! 1#33A$CD%&C#$7! 9/DA,C&K! ;7&%+2C7'3/$&! 1%$%.%! :19;1<! C7!DA,,/$&2K!+AC2.C$F!%$!rff>!3C22C#$!C$&/22CF/$D/!D#3N2/Z!,CF'&!$/Z&!&#!&'/!1%$%.C%$! 9/DA,C&K! 4$&/22CF/$D/! 9/,BCD/Y7! '/%.bA%,&/,7! :5AF2C/7/-! ?=! *D&!=>>c<)! \'C2/! 19;1! ./$C/7! %$K! D2%C3! #H! .#3/7&CD! 7A,B/C22%$D/! %D&CBC&K!:1Rs-!?>! "A$!=>?@<! C&!'%7!+//$! 7AFF/7&/.! &'%&! &'/!NA,N#7/!#H! &'C7!$/0!H%DC2C&K!C7!&#!/3A2%&/!&'/!I9(!:R/$D/,-!f!"A$!=>?@<)!

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

Obar & Clement • Internet Surveillance and Boomerang Routing TEM 2013 • ACC-CCA

10

3%7%&%#-%?

E%3H#,.-! ")! :?W! T%,! =>?=<)! R'/! I9(! C7! +AC2.C$F! &'/!D#A$&,KY7!+CFF/7&!7NK!D/$&/,!:0%&D'!0'%&!K#A!7%K<)!L0+./M! 6/&,C/B/.! "A2K! =>-! =>?@! H,#3!000)0C,/.)D#3O&',/%&2/B/2O=>?=O>@OHHt$7%.%&%D/$&/,O!!

E%,,-!E)!:=>>=<)!5,#&/D&C$F!$%&C#$%2!7#B/,/CF$&K!C$!%$!/,%!#H!C$&/,$%&C#$%2! 3/..2C$FG! %$! C$D,/%7C$F2K! .CHHCDA2&!&%7J)!N;+O;+/$$ P,?+1;7$,4$7.2037;50,1C$(QC!=ccP@=g)!

12/3/$&-!()! :=>?@<)! 4_3%N7![! &,%DJC$F! K#A,!N/,7#$%2!.%&%!&',#AF'! &'/! I9(Y7! 0%,,%$&2/77! 0C,/&%NNC$F! 7C&/7)!*+,-../0123$ ,4$ 56.$ J"""$ =$ JR!>R$ -,14.+.1-.)!R#,#$&#)!"A$/!=hP@>-!=>?@)!

12/3/$&-! ()! :=>?g-! H#,&'D#3C$F<! I9(! 9A,B/C22%$D/G!;ZN2#,C$F!&'/!F/#F,%N'C/7!#H!C$&/,$/&!C$&/,D/N&C#$-!R#! +/! N,/7/$&/.! %&! &'/! C1#$H/,/$D/=>?g-! E/,2C$-!T%,D'!gPh-!=>?g!

1Rs)!:?>!"A$!=>?@<)!S%&%PD#22/D&C#$!N,#F,%3!$#&!&%,F/&C$F!1%$%.C%$7G!T%Dj%K)! 6/&,C/B/.! "A2K! =i-! =>?@! H,#3!000)D&B$/07)D%OD%$%.%O.%&%PD#22/D&C#$PN,#F,%3P$#&P&%,F/&C$FPD%$%.C%$7P3%DJ%KP?)?@?c>ci!!

`,//$0%2.-!`)!:h!"A$!=>?@<)!I9(!5,C73!N,#F,%3!&%N7!C$!&#!A7/,! .%&%! #H! (NN2/-! `##F2/! %$.! #&'/,7)! !6.$S?;+/0;1M$ 6/&,C/B/.! "A2K! =>-! =>?@! H,#3!000)FA%,.C%$)D#)AJO0#,2.O=>?@OUA$O>iOA7P&/D'PFC%$&7P$7%P.%&%!!

`,//$0%2.-! `)-! T%D(7JC22-! ;)! 8! 5#C&,%7-! M)! :?>! "A$! =>?@<)!;.0%,.!! 9$#0./$G!&'/!! 0'C7&2/+2#0/,!+/'C$.! &'/! I9(! 7A,B/C22%$D/! ,/B/2%&C#$7)! !6.$2?;+/0;1M$$ 6/&,C/B/.! "A2K! =>-! =>?@! H,#3!000)FA%,.C%$)D#)AJO0#,2.O=>?@OUA$O>cO/.0%,.P7$#0./$P$7%P0'C7&2/+2#0/,P7A,B/C22%$D/!!

^#22%$.-!E)!:=g!"A$!=>?@<)!5649T-!C$&/,$/&!/ZD'%$F/!N#C$&7!%$.! 1%$%.%)! *?T70-$ /,:;01$ AT7,2GM$ (DD/77/.! "A2K!=i-! =>?@! H,#3! '&&NGOO+2#F)DC,%)D%O=>?@O>iON,C73PC$&/,$/&P/ZD'%$F/PN#C$&7P%$.PD%$%.%O!$

4$&/,$%&C#$%2! R/2/D#33A$CD%&C#$7!L$C#$)! :=>?@<)! 4$&/,$/&!/ZD'%$F/7! N#C$&7! :4_57<)! \R5Q! +%DJF,#A$./,!7/,C/7)!6/&,C/B/.!"A2K!=i-!=>?@!!H,#3!'&&NGOO000)C&A)C$&O/$O0&NHP?@OS#DA3/$&7O+%DJF,#A$./,P0&NHP?@PCZN7P/$)N.H!!

j2/C$-!T)!:=>>c<)!\C,C$F!AN!&'/!+CF!+,#&'/,!3%D'C$/p!%$.!HCF'&C$F!C&)!1'%,2/7&#$-!91G!E##J9A,F/!5A+2C7'C$F)!

*+%,-! ")()! :=>?@<)! 5'%$&#3! .%&%! 7#B/,/CF$7G! \%2&/,!MCNN3%$$-!+CF!.%&%!%$.!&'/!H%22%DK!#H!N/,7#$%2!.%&%!7#B/,/CF$&K)! \#,JC$F! N%N/,)! 6/&,C/B/.! "A2K! =i-!=>?@! H,#3!

'&&NGOON%N/,7)77,$)D#3O7#2@ON%N/,7)DH3u%+7&,%D&tC.v==@c?ff!!

*HHCD/!#H!&'/!5,CB%DK!1#33C77C#$/,!#H!1%$%.%)!:=>?@<)!!6.$-;3.$4,+$$ +.4,+:012$ 56.$ *.+3,1;7$ J14,+:;50,1$*+,5.-50,1$ ;1/$ "7.-5+,10-$ K,-?:.153$ >-5M$6/&,C/B/.! "A2K! =i-! =>?@! H,#3!'&&NGOO000)N,CB)FD)D%ON%,2O=>?@ONCN/.%t,t=>?@>Wt/)%7N!$

*HHCD/! #H! &'/! 5,CB%DK! 1#33C77C#$/,! #H! 1%$%.%)! :=@! T%K!=>?@<)! I/0! ,/2/%7/G! $/0! N,CB%DK! D'%22/$F/7!./3%$.! 7&,#$F/,! N,#&/D&C#$7! H#,! 1%$%.C%$7)!6/&,C/B/.! "A2K! =i-! =>?@! H,#3!'&&NGOO000)N,CB)FD)D%O3/.C%O$,PDO=>?@O$,PDt?@>W=@t/)%7N!!

5%DJ/&! D2/%,C$F! '#A7/)! :=>?@<)! 4$&/,$/&! /ZD'%$F/! N#C$&!F,#0&')! 6/&,C/B/.! "A2K! =i-! =>?@! H,#3!! '&&N7GOON,/HCZ)ND')$/&O%NN2CD%&C#$7OCZN.C,O7A33%,KOF,#0&'O!!

5AF2C/7/-! S)! :?=! *D&! =>>c<)! 1%$%.C%$! 7NC/7Y! X1%3/2#&YG!./H/$D/!'#NC$F!#&!! %&&,%D&!0#,2.P! D2%77!&%2/$&! 0C&'! rff>T! C$&/22CF/$D/! D#3N2/Z)!U;50,1;7$*,35)!6/&,C/B/.!"A2K!! =i-! =>?@! H,#3!'&&NGOO$/07)$%&C#$%2N#7&)D#3O=>?=O?>O>fOD%$%.C%$P7NC/7PD%3/2#&P./H/$D/P'#NC$FP&#P%&&,%D&P0#,2.PD2%77P&%2/$&P0C&'Pff>3PC$&/22CF/$D/PD#3N2/ZO!!

6K%$-! 5)9)! 8! `/,7#$-! ")! :=>?=<)! (! N,C3/,! #$! C$&/,$/&!/ZD'%$F/! N#C$&7! H#,! N#2CDK3%J/,7! %$.! $#$P/$FC$//,7)! 6/&,C/B/.! "A2K! =i-! =>?@! H,#3!'&&NGOON%N/,7)77,$)D#3O7#2@ON%N/,7)DH3u%+7&,%D&tC.v=?=f?>@!!

R/2/D#33A$CD%&C#$7!(D&)!:?cc@-!D)!@f<)!6/&,C/B/.!H,#3!&'/!`#B/,$3/$&! #H! 1%$%.%! "A7&CD/! M%07! 0/+7C&/G!'&&NGOO2%07P2#C7)UA7&CD/)FD)D%O/$FO%D&7O&P@)gO!!

R/$D/,-! S)! :f! "A$! =>?@<)! I9(! 7NKC$F! #$! 1%$%.C%$7-! 19;1!D%N%+2/!#H!7C3C2%,!7A,B/C22%$D/G!/ZN/,&7)!^AHHC$F&#$!5#7&)! 6/&,C/B/.! "A2K! =i-! =>?@! H,#3!'&&NGOO000)'AHHC$F&#$N#7&)D%O=>?@O>iO>fO$7%P7NKC$FPD%$%.%t$t@g>fii=)'&32!!

\##.D#DJ-!E)!8!;./23%$-!E)!:=>?=<)!R#0%,.!/HHCDC/$DC/7!C$!1%$%.C%$!C$&/,$/&!&,%HHCD!/ZD'%$F/)!(!,/N#,&!H#,!&'/!1%$%.C%$! 4$&/,$/&! 6/FC7&,%&C#$! (A&'#,C&K)!6/&,C/B/.! S/D/3+/,! c-! =>?@! H,#3!'&&NGOO000)DC,%)D%O%77/&7OLN2#%.7OR#0%,.P;HHCDC/$DC/7PC$P1%$%.C%$P4$&/,$/&PR,%HHCDP;ZD'%$F/=)N.H!!

lCJ#N#A2#7-!5)-! ;%&#$-!1)-! ./6##7-!S)!S/A&7D'-! R)-!8! M%NC7-!`)! :=>?=<)!V1/.+35;1/012$T02$/;5;M!I/0!k#,J-!IkG!TD`,%0P^C22)!

!