KAMPALA, Uganda (AP) — Outsiders have long profited from Africa’s riches of gold, diamonds, and even people. Digital resources have proven no different.
Millions of internet addresses assigned to Africa have been waylaid, some fraudulently, including through insider machinations linked to a former top employee of the nonprofit that assigns the continent’s addresses. Instead of serving Africa’s internet development, many have benefited spammers and scammers, while others satiate Chinese appetites for pornography and gambling.
New leadership at the nonprofit, AFRINIC, is working to reclaim the lost addresses. But a legal challenge by a deep-pocketed Chinese businessman is threatening the body’s very existence.
The businessman is Lu Heng, a Hong Kong-based arbitrage specialist. Under contested circumstances, he obtained 6.2 million African addresses from 2013 to 2016. That’s about 5% of the continent’s total — more than Kenya has.
The internet service providers and others to whom AFRINIC assigns IP address blocks aren’t purchasing them. They pay membership fees to cover administrative costs that are intentionally kept low. That left lots of room, though, for graft.
AFRINIC made no claim of graft when it revoked Lu’s addresses, now worth about $150 million, saying his company was not adequately serving Africa’s interests. Lu fought back. His lawyers in late July persuaded a judge in Mauritius, where AFRICNIC is based, to freeze its bank accounts. His company also filed a $80 million defamation claim against AFRINIC and its new CEO.
It’s a shock to the global networking community, which has long considered the internet as technological scaffolding for advancing society. Some worry it could undermine the entire numerical address system that makes the internet work.
“There was never really any thought, particularly in the AFRINIC region, that someone would just directly attack a foundational element of internet governance and just try and shut it down, try and make it go away.” said Bill Woodcock, executive director of Packet Clearing House, a global nonprofit that has helped build out Africa’s internet.
Lu told The Associated Press that he’s an honest businessman who broke no rules in obtaining the African address blocks. And, rejecting the consensus of the internet’s stewards, he says its five regional registries have no business deciding where IP addresses are used.
“AFRINIC is supposed to serve the internet, it’s not supposed to serve Africa,” Lu said. “They’re just bookkeepers.”
In revoking Lu’s address blocks, AFRINIC is trying to reclaim internet real estate critical for a continent that lags the rest in leveraging internet resources to raise living standards and boost health and education. Africa has been allocated just 3% of the world’s first-generation IP addresses.
Making things worse: the alleged theft of millions of AFRINIC IP addresses, involving the organization’s former No. 2 official, Ernest Byaruhanga, who was fired in December 2019. It’s unclear whether he was acting alone.
The registry’s new CEO, Eddy Kayihura, said at the time that he’d filed a criminal complaint with the Mauritius police. He shook up management and began trying to reclaim wayward IP address blocks.
Lu’s lawsuit is unrelated to the criminal complaint against Byaruhanga. But it has also stunned and dismayed the global internet-governance community. Network activists worry they could help facilitate further internet resource grabs by China, for starters. Some of Lu’s major clients include the Chinese state-owned telecommunication firms China Telecom and China Mobile.
“It doesn’t seem like he’s running the show. It seems like he’s the face of the show. I expect that he has got quite a significant backing that’s actually pulling the strings,” said Mark Tinka, a Ugandan who heads engineering at SEACOM, a South Africa-based internet backbone and services provider. Tinka worries Lu has “access to an endless pile of resources.”
Lu said allegations he’s working for the Chinese government are “wild” conspiracy theories. He said he’s the victim of ongoing “character assassination.”
While billions use the internet daily, its inner workings are little understood and rarely subject to scrutiny. Globally, five fully autonomous regional bodies, operating as nonprofit public trusts, decide who owns and runs the internet’s limited store of first-generation IP address blocks. Founded in 2003, AFRINIC was the last of the five registries to be created.
Just shy of a decade ago, the pool of 3.7 billion first-generation IP addresses, known as IPv4, was fully exhausted in the developed world. Such IP addresses now sell at auction for between $20 and $30 each.
The current crisis was precipitated by the uncovering of the alleged fraud at AFRINIC. The misappropriation of 4 million IP addresses worth more than $50 million by Byahuranga and perhaps others was discovered by Ron Guilmette, a freelance internet sleuth in California, and exposed by him and journalist Jan Vermeulen of the South African tech website MyBroadband.
But that was far from all of it.
Ownership of at least 675,000 wayward addresses is still in dispute. Some are controlled by an Israeli businessman, who has sued AFRINIC for trying to reclaim them. Guilmette calculates that a total of 1.2 million stolen addresses remain in use.
Someone had tampered with AFRINIC’s WHOIS database records — which are like deeds for IP addresses — to steal so-called legacy address blocks, Guilmette said. It’s unclear if it was Byahuranga alone or if other insiders or even hackers were involved, he added.
Many of the misappropriated address blocks were unused IP space stolen from businesses, including mining giant Anglo American.
Many of the disputed addresses continue to host websites that have nonsense URL address names and contain gambling and pornography aimed at an audience in China, whose government bans such online businesses.
When Kayihura fixed his sights on Lu this year, he told him in writing that IP address blocks allocated to his Seychelles-registered company were not “originating services from within the AFRINIC service region — contrary to the justification provided.”
Lu would not discuss the justifications he provided to AFRINIC for the IP addresses he’s obtained, but said he’s never broken any of AFRINIC’s rules. Such justifications are part of what is typically an opaque, confidential process. Kayihura would not comment on them, citing the legal case. Nor would the two men who were AFRINIC’s CEOs when Lu received the allocations.
Emails obtained by the AP show that in his initial request for IP addresses in 2013, Lu made clear to AFRINIC that his customers would be in China. In those emails, Lu said he needed the addresses for virtual private networks — known as VPNs — to circumvent the Chinese government’s firewall that blocks popular websites like Facebook and YouTube there.
He said he discussed this with Adiel Akplogan, AFRINIC’s first CEO, in Beijing in a 2013 meeting cited in the emails. Akplogan, who stepped down in 2015, would not comment on any discussions he may have had with Lu on the subject.
Akplogan’s successor, South African internet pioneer Alan Barrett, would say only that “all appropriate procedures were followed.”
By that time, in 2016-17, Lu said his company, Cloud Innovation, had quit the VPN business and shifted into leasing address space.
Lu notes that other regional registries – including RIPE in Europe and ARIN, the North American registry – routinely allocate address blocks outside their regions.
That may be so, experts say, but Africa is a special case because it’s still developing and vulnerable to exploitation – even if AFRINIC’s bylaws don’t explicitly ban geographical outsiders from obtaining IP space.
Unlike at other regional registries, AFRINIC’s stewards neglected to forge strong alliances with governments on the continent with the resources to fend off legal challenges from wealthy usurpers, said Woodcock of the Packet Clearing House.
“The governmental relationships necessary to get it treated as critical infrastructure were never prioritized in the African region,” he added. “This is not a threat coming from Africa. This is a threat from China.”
The international registry community has rallied to the aid of AFRINIC’s embattled reformers.
ARIN’s president, John Curran, said in a statement of support that the Mauritian court should also consider whether any fraud was committed in awarding the IP addresses to Lu. His legal battle “has potential for significant impact to the overall stability of the Internet number registry system,” he wrote.
A mutual assistance fund of more than $2 million created by the regional registries is available — and has been offered — should AFRINIC need it to keep running during the court fight.
The AP found several pornography and gambling sites aimed at a Chinese audience using IP addresses that Lu got from AFRINIC. While those sites are banned in China, they can still be accessed there via VPNs.
Lu said such sites make up a minuscule part of the websites using his IP addresses and his company has strict policies against posting illegal material like child pornography and terrorism-related content. He said he does not actively police the content of millions of websites hosted by those leasing from his company, but all actionable complaints of illegal activity are immediately forwarded to law enforcement.
It is not clear whether the police investigation into Byaruhanga has advanced. Mauritian police did not respond to attempts to determine if they have even sought to question him. Byahuranga is believed to be living in his native Uganda but could not be located for comment.
Akplogan, his former boss, said he was not aware at the time of Byahuranga’s alleged misappropriation of addresses.
“I don’t know how he did it,” said Akplogan, who is Togolese and now based in Montreal. “And for those who know the reality about my management of AFRINIC they know very well that it’s not something that I will have known and let it go (on).”
Inducted two years ago into the Internet Society’s Hall of Fame, Akplogan is currently vice president for technical engagement at ICANN (Internet Corporation for Assigned Names and Numbers), the California-based body that oversees the global network address and domain name businesses.
Bajak reported from Boston and Suderman from Richmond, Virginia.
In a story originally published Oct. 1, 2021, The Associated Press reported about how millions of internet addresses assigned to Africa are not serving Africa’s internet development. The story was updated Nov. 22, 2021, to further clarify that businessman Lu Heng’s lawsuit was not related to a criminal complaint against an official with AFRINIC, the nonprofit that assigns the continent’s internet addresses, and that AFRINIC made no claim of graft against Lu.
Alan Suderman, Frank Bajak And Rodney Muhumuza, The Associated Press
Shooter warning signs get lost in sea of social media posts
WASHINGTON (AP) — The warning signs were there for anyone to stumble upon, days before the 18-year-old gunman entered a Texas elementary school and slaughtered 19 children and two teachers.
There was the Instagram photo of a hand holding a gun magazine, a TikTok profile that warned, “Kids be scared,” and the image of two AR-style semi-automatic rifles displayed on a rug, pinned to the top of the killer’s Instagram profile.
Shooters are leaving digital trails that hint at what’s to come long before they actually pull the trigger.
“When somebody starts posting pictures of guns they started purchasing, they’re announcing to the world that they’re changing who they are,” said Katherine Schweit, a retired FBI agent who spearheaded the agency’s active shooter program. “It absolutely is a cry for help. It’s a tease: can you catch me?”
The foreboding posts, however, are often lost in an endless grid of Instagram photos that feature semi-automatic rifles, handguns and ammunition. There’s even a popular hashtag devoted to encouraging Instagram users to upload daily photos of guns with more than 2 million posts attached to it.
For law enforcement and social media companies, spotting a gun post from a potential mass shooter is like sifting through quicksand, Schweit said. That’s why she tells people not to ignore those type of posts, especially from children or young adults. Report it, she advises, to a school counselor, the police or even the FBI tip line.
Increasingly, young men have taken to Instagram, which boasts a thriving gun community, to drop small hints of what’s to come with photos of their own weapons just days or weeks before executing a mass killing.
Before shooting 17 students and staff members dead at Marjory Stoneman Douglas High School in 2018, Nikolas Cruz posted on YouTube that he wanted to be a “professional school shooter” and shared photos of his face covered, posing with guns. The FBI took in a tip about Cruz’s YouTube comment but never followed up with Cruz.
In November, 15-year-old Ethan Crumbley shared a photo of a semi-automatic handgun his dad had purchased with the caption, “Just got my new beauty today,” days before he went on to kill four students and injure seven others at his high school in Oxford Township, Michigan.
And days before entering a school classroom on Tuesday and killing 19 small children and two teachers, 18-year-old Salvador Ramos left similar clues across Instagram.
On May 20, the day that law enforcement officials say Ramos purchased a second rifle, a picture of two AR-style semi-automatic rifles appeared on his Instagram. He tagged another Instagram user with more than 10,000 followers in the photo. In an exchange, later shared by that user, she asks why he tagged her in the photo.
“I barely know you and u tag me in a picture with some guns,” the Instagram user wrote, adding, “It’s just scary.”
The school district in Uvalde had even spent money on software that, using geofencing technology, monitors for potential threats in the area.
Ramos, however, didn’t make a direct threat in posts. Having recently turned 18, he was legally allowed to own the weapons in Texas.
His photos of semi-automatic rifles are one of many on platforms like Instagram, Facebook and YouTube where it’s commonplace to post pictures or videos of guns and shooter training videos are prevalent. YouTube prohibits users from posting instructions on how to convert firearms to automatic. But Meta, the parent company of Instagram and Facebook, does not limit photos or hashtags around firearms.
That makes it difficult for platforms to separate people posting gun photos as part of a hobby from those with violent intent, said Sara Aniano, a social media and disinformation researcher, most recently at Monmouth University.
“In a perfect world, there would be some magical algorithm that could detect a worrisome photo of a gun on Instagram,” Aniano said. “For a lot of reasons, that’s a slippery slope and impossible to do when there are people like gun collectors and gunsmiths who have no plan to use their weapon with ill intent.”
Meta said it was working with law enforcement officials Wednesday to investigate Ramos’ accounts. The company declined to answer questions about reports it might have received on Ramos’ accounts.
More on the school shooting in Uvalde, Texas: https://apnews.com/hub/school-shootings.
Amanda Seitz, The Associated Press
Mosque shooter Bissonnette can apply for parole after 25 years, Supreme Court rules
OTTAWA — The Supreme Court of Canada says Alexandre Bissonnette, who went on a deadly shooting spree at a Quebec City mosque, can apply for parole after 25 years.
In its unanimous decision today, the high court declares unconstitutional a 2011 Criminal Code provision that allowed a judge, in the event of multiple murders, to impose a life sentence and parole ineligibility periods of 25 years to be served consecutively for each murder.
The Supreme Court says the provision violates the Charter of Rights and Freedoms guarantee against cruel or unusual treatment because it can deny offenders a realistic possibility of being granted parole before they die — a punishment that is degrading and incompatible with human dignity.
Bissonnette pleaded guilty to six charges of first-degree murder in the January 2017 assault that took place just after evening prayers.
A judge found the parole eligibility provision unconstitutional but did not declare it invalid, ultimately ruling Bissonnette must wait 40 years before applying for parole.
Quebec’s Court of Appeal ruled the provision invalid on constitutional grounds and said the parole ineligibility periods should be served concurrently, meaning a total waiting period of 25 years in Bissonnette’s case.
This report by The Canadian Press was first published May 27, 2022.
The Canadian Press
The Great Reset doesn’t care if you believe it exists and Canada is on the front line
Storm leaves at least nine dead, many powerless
CP NewsAlert: At least two people dead after storm sweeps through southern Ontario
From maybe to no: Alberta cabinet ministers give range of answers on replacing Kenney
Climate to conflict, Davos’ post-COVID return has full plate
CP News Alert: Quebec Halloween attacker found guilty of first-degree murder
MacKenzie Scott gives $123M to Big Brothers Big Sisters
Alberta2 days ago
Flood-stricken B.C. farmers given more time to apply for disaster assistance
Health2 days ago
Tentative $161.5M settlement reached in WVa opioid trial
Alberta2 days ago
OSC withdraws some charges against former CannTrust leaders at hearing
Alberta1 day ago
Calgary man who admitted to participating in terrorism activity to be sentenced
International2 days ago
UN official urges world not to forget Rohingya refugees
Crime1 day ago
Police face questions over delays in storming Texas school
Bruce Dowbiggin2 days ago
Big Can Be Beautiful. It Can Also Take Your Life
Alberta1 day ago
Cheese not on the table in Canada-U.K. trade talks as Britain seeks market access