Single-Pixel Tracker Leads Paranoid Turkish Authorities To Wrongly Accuse Over 10,000 People Of Treason

from the tiny-web-beacons,-massive-consequences dept

We've written many articles about the thin-skinned Turkish president, Recep Tayyip Erdoğan, and his massive crackdown on opponents, real or imagined, following the failed coup attempt in 2016. Boing Boing points us to a disturbing report on the Canadian CBC News site revealing how thousands of innocent citizens have ended up in prison because they were falsely linked with the encrypted messaging app Bylock:

The Turkish government under President Recep Tayyip Erdogan links Bylock with treason, because of the app's alleged connection to followers of Fethullah Gülen, the man the Turkish government believes is behind the deadly 2016 coup attempt. Gülen denies the allegations.

Alleged Bylock users are a large part of the nearly 150,000 Turks detained, arrested or forced from their jobs under state of emergency decrees since the summer of 2016.

An estimated 30,000 are believed to be among the innocent swept up in this particular campaign, victims of the chaos, confusion and fear in Turkey.

It's bad enough that the Turkish authorities are equating the mere use of the Bylock app with treason. But it gets worse. It turns out that many of those arrested for that reason didn't even use Bylock, but were falsely accused:

it was due to a single line of code, which created a window "one pixel high, one pixel wide" -- essentially invisible to the human eye -- to Hypothetically, people could be accused of accessing the site without having knowingly viewed it.

That line redirected people to the Bylock server using several other applications, including a Spotify-like music app called Freezy and apps to look up prayer times or find the direction of Mecca. Some people have been accused because someone they shared a wifi connection with was linked to Bylock.

According to the CBC News report, the single-pixel trackers that linked back to were used intentionally by the Bylock developers in order to muddy the waters, and make it harder to identify real Bylock users. However, it's not clear how these Web "beacons" came to be associated with other apps. Whatever the mechanism used to accuse innocent people, the Turkish authorities have confirmed indirectly that the misleading calls to did indeed take place, albeit releasing that information in a way that violates the victims' privacy pretty badly:

The Turkish government and the country's courts rarely admit they are wrong, but in December, they revealed the gravity of the mistake they'd made by publishing a list of 11,480 mobile phone numbers. Each number represented a person wrongly accused of terrorism in the Bylock affair.

As well as confirming that Turkey remains in the grip of institutionalized paranoia emanating from the country's president, this episode underlines just how serious the implications of single-pixel tracking can be. In an ideal world, such surreptitious tracking would not be taking place. As a second best, browsers would incorporate technology that warned users of such tricks and blocked their callbacks as a matter of course, but it's hard to see how this could be done in a way that isn't easily circumvented.

Follow me @glynmoody on Twitter or, and +glynmoody on Google+

Filed Under: bylock, evidence, pixel, tracking, treason, turkey

Reader Comments

Subscribe: RSS

View by: Time | Thread

  1. identicon
    Turk here, 7 Feb 2018 @ 2:36pm

    Re: Re: Re:

    I`m secular, didn't go to a mosque in at least 20 years. I`m covered in tattoos, i drink alcohol and enjoy the separation of government and religion.
    I hear western people always talk good about secular governments Turkey had. Yet they never research what those governments did. They`re the ones which took away every right kurds had. They invested nothing in Turkey and killed every big project. If they did their job, no one would have voted for the akp. Good start would be wiki

    The sad thing is, the opposition parties would lose an election to a demented eldery. 3 main parties next to akp

    chp(secular) Basically trump with even worse ideas. They suck so bad. They had a convention last week where 100 got food poison en they fought among each other.

    MHP(ultra nationalistic party) Run by a 80 year old dude, who wants to go to war with everyone(russia/iran/the west)

    HDP (leftist pro pkk) They even go to kandil mountains and do photo shoots with terrorist. Brother of their leader is in the pkk.

    As much as i want more parties in the government. There is no other party which works like one should. Until they fix their parties, akp will keep winning. The way the west is reacting to Turkey, only strengthens the hand of akp. Turks from all sides will fight each other with no problem. But we always unite against an outside attack.

    Just trying to explain how Turks think. Do with this info as you pleas.

Add Your Comment

Have a Techdirt Account? Sign in now. Want one? Register here

Subscribe to the Techdirt Daily newsletter

Comment Options:

  • Use markdown. Use plain text.
  • Remember name/email/url (set a cookie)

Follow Techdirt
Special Affiliate Offer

Essential Reading
Techdirt Insider Chat
Recent Stories

This site, like most other sites on the web, uses cookies. For more information, see our privacy policy. Got it

Email This

This feature is only available to registered users. Register or sign in to use it.