Wednesday, 28 July 2010

Is your mobile provider modifying your web pages? Instant test.

Prompted by an email earlier today I've produced a very simple web page that carries out a very simple test that checks whether one of the modifications to web pages has been carried out when the page is loaded.

If you access the page Inlining Test on your mobile device whilst connected through your mobile network (not through WiFi), you should see one of two messages:

  1. "No identified modification has happened to this page"; or
  2. "This page has been altered! It appears that the stylesheet on this page has been inlined by your network provider."

It would be really helpful to get some feedback on which providers, mobile devices and APNs are exhibiting issues and in which parts of the world. If you could leave a comment if you have a problem on a setup that hasn't already been listed then that would be great.

Please note that this test hasn't been extensively tested so I can't guarantee it will work on every mobile browser. Feel free to let me know if you spot a gaff!

For those interested to know the page contains a simple JavaScript that checks to see that the stylesheet link on the page is still there once the page has completed loading. If it isn't there (most likely because of the Bytemobile filter inlining the JavaScript) it displays the message to say that. This page also has Google analytics on it so that I can get a feel for how many times people are using it.

Friday, 23 July 2010

Letter to Ronan Dunne, CEO of O2

Dated 23 July 2010:

Thank you for your response.

The devices I have personally used to confirm that data modification is taking place are an iPhone and iPad. However, I have received confirmation from other users that that modifications are taking place for mobile broadband users using laptops as well, and I know that many of the practices are also occurring for users with other mobile phone devices.

In specific reference to the UK Government web site. The UK government web site uses the SWFObject JavaScript library which is made available under an MIT license which requires that the license is distributed with the software. It uses the jQuery JavaScript library which is also distributed under a joint MIT and GPL Version 2 license. I believe the GPL license prohibits the software being combined with any other software or modified. There are other works also used by the UK Government web site.

Currently, as far as I can tell, the O2 mobile network is running a caching proxy server which is combining JavaScript libraries into the main HTML source of web pages and removing copyright messages. I believe, and the informal advice I have received would confirm that this action is in contravention of the licensing terms. As it is O2 that are doing this then I believe that O2 is breaking the law. I should also make clear that I referred to the UK Government web site to try to ensure that my email was not ignored. These practices are being applied to every web site as far as I can tell, so there will be literally millions of other examples.

However, the broader and arguably more serious issue is the fact that O2 has a practice of modifying any data passing through their network between senders and receivers without notifying either party of the changes that are being made. Even when I tried to find out what was happening I was told by your technical department that they *did* compress data but that they were not legally required to give any detail of what they did. (I should add that this statement was misleading as they do a lot more than just compress data, they also change and remove data). In other words, even if I ask, I am not told what O2 are doing to my data.

I believe that this practice may nullify the contractual obligations of every customer of O2's mobile data services at the present time.

Finally, I refer you to European legislation being formed around 'net neutrality' <http://europa.eu/rapid/pressReleasesAction.do?reference=SPEECH/10/153> and curently being considered by Ofcom. The Vice President of the European Commission said: "Transparency is non-negotiable. This is already addressed in the new regulatory framework, but the principle is worth re-stating: in a complex system like the internet, it must be crystal clear what the practices of operators controlling the network mean for all users, including consumers."

Kind regards,

Stuart Roebuck.

Thursday, 22 July 2010

Correspondence with O2 about their data compression policy

Here is O2's response (22 July 2010 emphasis mine) to my enquiry asking for an explanation of their policy regarding modifying data sent over their mobile network. For those readers who are not clear on the technical details, the blanket statement that any phone compresses the data for better viewing is not true.

Hello Stuart

Thanks for your email about the data compression on your iPhone.

I get to know from your email that you wish to know our data compression
policy.

Just to let you know Stuart, that if you are accessing the internet on 
any phone, the phone automatically compresses the data to allow better 
viewing of the websites.

This is a technical query and we've a separate team which is specially 
trained on all the technical issues. So that you can get a satisfactory 
response to your query, all you need to do is speak to this technical 
team on 08448 752 302. We're open: 

- Monday to Friday between 8am and 9pm. 
- Saturday between 8am to 8pm
- Sunday 8am to 6pm.

Calls to the above number are free from all O2 Pay Monthly mobile 
phones. You can also dial 2302 free from an iPhone to speak to our 
iPhone customer service team.

I wish you a great day ahead. 

Kind regards

------
O2 Customer Service

Telefónica O2 UK Limited, Registered in England No 1743099. Registered 
Office: 260 Bath Road, Slough, Berkshire SL1 4DX.

I followed up on the number they gave but reached another customer support staff member who did not know what a "data compression policy" was and cut me off when they said they'd pass me on to someone who might.

I tried again and this time the person told me that I hadn't got through to the "technical team" and that the number I had been given was "just a generic number". He said he didn't know anything about the issue and nor did his manager but he would try and put me through to a different department that might.

He then came back again and told me that he could only pass me any further information if I confirmed that I was an O2 customer and gave my account details.

Finally, after approx. 2 hours on the phone I was told that O2 could official confirm that they "compress data" and they were not legally required to give any further information about what they do.

I'm now awaiting a response from O2's CEO.

Compiled list of web references to mobile compression - mostly O2

O2 (UK)

Note that all references to being able to use the "APN" username "bypass" on the O2 network to bypass image compression no longer apply for iPhone users. O2 appears to perform image compression and data modification regardless of this setting.

Vodafone (UK)

Optus (Australia)

Other

Oh and my own...

Wednesday, 21 July 2010

Should mobile operators be free to modify content they deliver?

My recent problems with delivering a web service to customers of the O2 network in the UK has got me thinking a lot about what we expect from mobile network providers.

I was trying to think of an analogy with something we are more used to and realised that web content delivery is very much like parcel delivery: we ask for something to be sent to us, they put it in a parcel and a delivery company are responsible for delivering it to us as quickly as possible without damaging it on route. In the internet context, we ask for a web page and we rely on the internet to deliver the page to us without modification.

However, it appears that we have fairly silently allowed the mobile networks to change this arrangement. For some time now we have been, wittingly or unwittingly, allowing many of the mobile networks (O2, T-Mobile, Virgin, Vodafone to name a few in the UK) to reduce the quality of images that we download. This seems fairly harmless and well intended. If it enables us to surf the internet quicker on our mobile phones when we can't see the images well anyway, then surely this is a good thing?

But it's not as simple as that.

What if I want to send someone an image over a mobile network and the image quality really matters. Firstly, I probably won't realise that O2 are going to modify it on route and may discover too late that the lower quality image has gone to print. Secondly, even if I do realise, how do I make sure that the important image isn't compressed? There is no option to bypass this. There is no way of getting hold of the content we have requested. O2 have substituted what we asked for with something inferior and they do it on purpose without asking us or giving us a choice to opt out.

It really calls into question the whole industry of web services. If you pay a web provider for some data and your mobile operator substitutes something different as it passes through their network, who has failed to deliver? If you pay for Flickr's Pro service and use it on your iPad, can you complain to them if the images you view are substandard? Will Flickr have any idea that the images they are sending you are not the ones you get?

And it's not just about images and image quality.

O2 may be going further than other providers, I really don't know. But I do know that they are modifying the very source code of the web pages you access over the internet. So the web services that painstakingly produced and tested by companies around the world are being modified by O2 in such a way that they may not work when they reach your mobile device or 3G connected laptop. You might blame your mobile phone or iPad whilst totally unaware that the problem is actually because O2 have changed the content enough to break it.

Can web content providers test all their services through every mobile network in the world to make sure that you get the service you have paid for? Of course not!

Should you, as a customer, have to figure out whether the problems you are having come from your mobile provider or the original content provider? Of course not!

Mobile phone networks should be reliable and they should provide the content you ask for without modification. If they want to optimise their networks then they can give you the option of accepting a modified network, but it should always be possible to turn off the modifications quickly and easily if anything goes wrong.

The craziest thing about this story is that, as far as I can work it out, O2's optimisations are probably increasing the load on their network and increasing the latency of their network. I have a suspicion that if they turned it all off they would save themselves some money overnight!

I have engineered a partial workaround for the web site I host and it now works on the O2 network and works quicker than it did before!

Tuesday, 20 July 2010

Mobile Proxy Cache content modification by O2

If you connect to the web on a mobile Safari device such as an iPhone or iPad using 3G over O2's network in the UK, then you may not realise that what you are seeing has been modified by O2 between the web site and your phone. If you are the author of a web site and find that some customers are not seeing what they should you may be frustrated to discover that O2 have changed the source code before it gets to your customer and that you have little way of finding out what they have done.

I'm sure O2 is doing this in order to speed up the service and reduce network load, but unfortunately their modifications are not without consequences, as I discovered trying to host a site designed specifically to work well on an iPad.

Image reduction

The most widely recognised change they make is to reduce the resolution of image files.  This has caused some complaint recently from iPad owners who have a large enough display to easily spot the different in quality that results when, for example, browsing photographs on Flickr.

However, they also do quite a lot more.

HTML parsing, inlining and compression

O2 takes HTML files, inlines some of the included JavaScript and CSS files and removes some comments and carriage returns:

  • No escaping of > and < symbols takes place when the code is embedded. In some circumstances, depending on the DOCTYPE specified, this can generate errors and effectively render the web site useless.
  • If you are using a third party JavaScript code library which requires you to maintain their copyright message on their source code, or you simply want your own copyright message to always appear in your source code, you might be a little concerned to discover that O2 removes the copyright message as it passes through their network. Not sure what the legal ramifications of this are!
  • Inlining appears to be carried out in a non-deterministic way (possibly based on load times at O2's proxy server). Consequently, errors can be generated that appear to the customer to be occurring randomly.

On top of this the processes carried out by O2 will be increasing the latency of delivering the page to the user and completely messing up any optimisations put in place by the web site designer. If, for example, you place all the JavaScript at the end so that the page can be rendered on screen before everything loads, you are now having to wait, not just for everything to load, but also for O2 to assemble it all into one inlined file.

Where this micro-optimisation really starts to hit is where the user visits multiple pages of one web site which all load in common libraries like jQuery or Google Analytics. Instead of your local mobile browser caching these resources, O2 has embedded them, so they have to be embedded uniquely into every web page and sent to the user in their entirety. It's called a micro-optimisation because it optimises in the small individual case but in the bigger picture it actually slows things down massively and increases your bandwidth usage. The usage that you may well be paying for.

What are you paying for?

So, if you are an O2 customer, how can it be that O2 can modify the web content without telling you? How can they sell a service and secretly make changes to what you get? It may be well intentioned, but it is nevertheless a completely hidden modification that even O2 customer support are unaware of.

How can any web site designer try to support their web site if customers are actually receiving something different that O2 have modified on the way in a way that they don't tell you about?

Legally, can O2 strip copyright messages from code and merge code which may, by the nature of their licenses be required to be distributed separately with copyright messages left intact.

If you are an O2 customer or a web designer, I suggest you contact O2 and make them aware that this is a serious issue.

 
Google Analytics Alternative