Feeds

Wikileaks Iraq War Logs vanish from Amazon US

Whistle-blower still on American registrar, DNS

The smart choice: opportunity from uncertainty

WikiLeaks' "Iraq War Logs" site is no longer hosted on US-based servers operated by Amazon.com, according to internet records.

Warlogs.wikileaks.org is now mirrored only on Ireland-based Amazon servers and France-based servers from French service provider Octopuce, records collected by UK-based internet research outfit NetCraft show.

The main WikiLeaks site, however, is still mirrored on US-based Amazon servers, according to NetCraft data. What's more, the site's DNS service is controlled by a US outfit, and it uses a US-base domain name registrar.

On Friday, after WikiLeaks released almost 400,000 classified documents related to the Iraq War, independent technology consultant Alex Norcliffe noticed that the whistle-blowing outfit was mirroring its content on Amazon's AWS infrastructure cloud in the US and Ireland, and on Octopuce servers in France. This included both the new warlogs.wikileaks.org, which serves up the Iraq Wars Logs, and the organization's primary site, www.wikilleaks.org.

Then, on Tuesday, Norcliffe noticed that the US mirrors had disappeared.

WikiLeaks maintains its central servers in Sweden with the outfit PRQ, run by the founders of the P2P file-sharing site The Pirate Bay. According to WikiLeaks founder Julian Assange, the organization uses servers in Sweden because the country provides legal protection for disclosures on the site. PRQ also offers what's commonly known as "bulletproof" hosting. It keeps almost no information about its users, and it maintains few if any logs.

But it would appear that Wikileaks began mirroring its data on Amazon and Octopuce in an effort to handle the additional traffic expected with the release of the Wars Logs. Wikileaks has not responded to emails sent to addresses it has answered in the past.

We've also contacted Amazon and the US Department of Defense, which has condemned the release of the Iraq War Logs, but neither has responded.

Wikileaks on Amazon

Warlogs.wikileaks.org was hosted on US-based Amazon servers. But no more...

It's unclear why the War Logs site is no longer hosted on Amazon's US servers. Conservative US newspaper The Washington Times is calling for a US government-led cyberattack on WikiLeaks. Though Amazon may not be legally compelled to remove the War Logs from its servers, Santa Clara law professor and tech law blogger Eric Goldman questioned whether Amazon might removed the data anyway.

"[Federal law] 47 USC 230 protects Amazon from being liable for WikiLeaks' content in most circumstances. The only relevant exception is that 230 does not protect Amazon if republishing the content constitutes a federal crime. I'm uncertain what crimes could apply to the content publication," Goldman told The Register over the weekend, while the Wars Logs site was still on Amazon's US-based servers.

"However, even if Amazon is insulated from liability, I suspect Amazon will choose to remove the content 'voluntarily' (motivated by a little persuasion from the government), presumably citing a breach of its terms of service as a pretext.

"A more 'ideological' web host would probably fight more vigorously for its users' publishing rights than Amazon will," Goldman said.

Another federal law, 18 USC 798, forbids the disclosure classified information about a "code, cipher, or cryptographic system of the United States" or "the communication intelligence activities of the United States." But according to George Washington University law professor Orin Kerr, this does not mean that Amazon is legally at fault. "The statute requires that the person held liable has to act 'knowingly and willfully,' and Amazon has not done either," he tells The Reg.

As NetCraft points out, it appears that WikiLeaks has set up its DNS so it can quickly shift its mirrors between locations. Warlogs.wikileaks.org has a 15-minute "time to live" (TTL) setting, which would allow for a rapid move if content is taken down in one location. NetCraft says it has not witnessed any outages at the site.

But even if WikiLeaks is not hosting the War Logs on US servers, it may be vulnerable because EveryDNS is owned by Dyn Inc., a US-based company. Wikileaks also uses a US-based domain register, Dynadot.®

Update: This story has been updated to show that Dyn Inc. – not Dynadot – owns EveryDNS and that there is only one major paper, The Washington Times, calling for a US-government-led cyberattack on Wikileaks.

Using blade systems to cut costs and sharpen efficiencies

More from The Register

next story
Auntie remains MYSTIFIED by that weekend BBC iPlayer and website outage
Still doing 'forensics' on the caching layer – Beeb digi wonk
Major problems beset UK ISP filth filters: But it's OK, nobody uses them
It's almost as though pr0n was actually rather popular
Microsoft unsheathes cheap Android-killer: Behold, the Lumia 530
Say it with us: I'm King of the Landfill-ill-ill-ill
All those new '5G standards'? Here's the science they rely on
Radio professor tells us how wireless will get faster in the real world
Apple orders huge MOUNTAIN of 80 MILLION 'Air' iPhone 6s
Bigger, harder trouser bulges foretold for fanbois
Yorkshire cops fail to grasp principle behind BT Fon Wi-Fi network
'Prevent people that are passing by to hook up to your network', pleads plod
US freemium mobile network eyes up Europe
FreedomPop touts 'free' calls, texts and data
Oh girl, you jus' didn't: Level 3 slaps Verizon in Netflix throttle blowup
Just hook us up to more 10Gbps ports, backbone biz yells in tit-for-tat spat
prev story

Whitepapers

Top three mobile application threats
Prevent sensitive data leakage over insecure channels or stolen mobile devices.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Top 8 considerations to enable and simplify mobility
In this whitepaper learn how to successfully add mobile capabilities simply and cost effectively.
Application security programs and practises
Follow a few strategies and your organization can gain the full benefits of open source and the cloud without compromising the security of your applications.
The Essential Guide to IT Transformation
ServiceNow discusses three IT transformations that can help CIO's automate IT services to transform IT and the enterprise.