A diagram of the SORM surveillance system. Illustration: MFI-Soft
A diagram of the SORM surveillance system. Illustration: MFI-Soft

A joint investigation by Agentura.RuCitizenLab and Privacy International with the title “In Ex-Soviet States, Russian Spy Tech Still Watches You” was recently published in Wired magazine. It explains how the SORM surveillance system, initiated in the mid 1980s’, is still working not only in Russia, but also in former USSR states, like Ukraine and Belarus. It also explains why the SORM surveillance mechanisms are different than the mechanisms used by Western societies. It is definitely worth reading for those curious about the Surveillance Society. I am not extremely convinced that the difference between surveillance techniques associated with SORM and surveillance techniques associated with Western mechanisms is a consistent one, but perhaps it is just me.

On November 12, the Russian Supreme Court okayed the wiretapping of an opposition activist. The Court ruled that spying on Maxim Petlin, a regional opposition leader in Yekaterinburg, was lawful, since he had taken part in rallies where calls against extending the powers of Russia’s security services were heard. The court decided that these were demands for “extremist actions” and approved surveillance carried out by the national interception system, known as SORM.

Manned by the country’s main security service, the FSB, this ”System of Operative Search Measures” has been in use for more than two decades. But recently, SORM has been upgraded. It is ingesting new types of data. It is being used as Moscow’s main tool for spying on the country’s political protesters. And it has become extremely useful in the quest to make sure that the Kremlin’s influence in the former Soviet Union continues long into the second regime of Vladimir Putin.

Meet the New Boss

When the Soviet Union collapsed, many of the KGB’s regional branches became the security services of the newly independent states. But they didn’t stray far from the Kremlin’s lead. They modeled their governing laws after Moscow’s, and used similar technology, too. Namely, SORM — Russia’s nationwide system of automated and remote legal interception on all kinds of communications.

SORM’s tactical and technical foundations were developed by a KGB research institute in the mid-1980s. Initially SORM was installed on analogue telephone lines. As new technologies developed, SORM did, as well.

 

Today SORM-1 intercepts telephone traffic, including mobile networks, while SORM-2 is responsible for intercepting internet traffic, including VoIP. SORM-3 gathers information from all communication media, and offers long-term storage (three years), providing access to all data on subscribers. In addition, SORM enables the use of mobile control points, a laptop that can be plugged directly into communication hubs and immediately intercept and record the operator’s traffic.

SORM also proved essential to spy on social networks based in Russia. “We can use SORM to take stuff off their servers behind their backs,” an FSB official told us. According to figures published by Russia’s Supreme Court, over the last five years the number of legal telephone intercepts alone has almost doubled, from 265,937 intercepts and recordings of phone calls and e-mails to 466,152 in 2011.

Read the whole study HERE.

One response to “Ample Study On Surveillance in Ex-Soviet States”

  1. Anonymous

    Your diagram bring back memories. Sorm on Version 5 telephone exchanges. TDM switch makes the copy for police.
    In Version 6, ip telephony, things are bit different. You need a proxy server to make a copy of RTP packets send between two ip terminals. The recording can also be send to police (sorm center) directly via ip as rtp stream. Or you can use hybrid local switch and via E1 links as before.
    I used to work for a company that produced telephone exchanges for Russians, Iskratel and SORM is one of the functionalities that i programed.

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

I’m Gabriela

Welcome to pdpecho, my blog about personal data protection and privacy. Here, I have been accompanying my passion for this field with thoughts and writing throughout the years, pushing the boundaries of data protection law and hoping to explain its beauty and value to the world. Opinions here are strictly mine, so is the writing (I never use LLMs to write).

Let’s connect

Discover more from pdpEcho

Subscribe now to keep reading and get access to the full archive.

Continue reading