Wednesday, November 19, 2008

How to stop people circumventing your filter

So the ISPs have started blocking your secret blacklist by poisoning the DNS for all the domains in it. Since it's easy to use another DNS server, though, the ISPs have started discarding all traffic to to all IP addresses on the blacklist. Things seem to be going well for about six hours until a news story airs of a teenager using a proxy server to access some of the hideously violent and massively illegal material on the blacklist (for example, one of the several sites that were last year added to the blacklist for containing nudity).

You're the Communications Minister and your reputation is on the line, so you can't back down. This only shows, you tell the press, that the ISPs aren't co-operating and we need to go further and employ the dynamic filters that your trials showed to be so effective. You ask the public: You do think our children are worth protecting, don't you? ISPs are directed to put the service in place, and are given a few months and token payments to do so.

In the meantime, the blacklist is leaked and your media advisors are falling over themselves blaming extreme cyber-libertarians and ISP wreckers for publishing the Official Aussie Government List of the Nastiest Sites on the Net.

Once the dynamic filters are in place, the media is full of reports of slowdowns, technical glitches and massive overblocking. Your own daughter complained that she couldn't do research for a school assignment because a Wikipedia article was blocked. But you stick to your guns. The technology will improve, you say. It's worth it for the kiddies and to stop the pedophiles ("you don't want pedophiles to have kiddie porn, do you?").

Shortly thereafter comes the story on the current affairs show where a kid uses a free VPN to get around the dynamic filter. Don't teenage boys have anything better to do?, you wonder naïvely. You add the VPN site and encrypted proxies to the blacklist, but they keep cropping up faster and faster. Those extreme cyber-libertarians keep telling people how to get around the filter. Well, you say, the Australian people support your mission, and what's the point passing a filtering law if you don't try and enforce it?

How do they stop people getting around filters in Scandinavia? Oh, they don't. The filters aren't mandatory. What about Iran then, or China? The answer, you discover, is to criminalise it. People don't like to be lawbreakers, especially when the Government is watching and harsh penalties are involved.

As you reach for the phone to get the bureaucrats researching the appropriate criminal sanctions, you can't help but stop for a moment and wish that you'd never started with this whole bloody filter in the first place.

5 comments:

Danu said...

Amusing! If the thing ever did end up passing we could at least have a little fun by placing bets on when we think each step in the story will happen :)

Gerry said...

All correct

Just a couple of things you forgot to mention.

- The fact that they can't really justify blocking of secure proxies under the terms "illegal" or "unwanted content". Until that is... you make it "illegal" for people to protect their privacy online.

- The tor network which is dynamic and in a constant state of change so cannot be blocked by ip. They also won't be able to tell the difference between this and any other secure site because it's encrypted. So what do they do, ban all secure transactions? Ban online banking? Ban Ebay? Ban mom and pop online store?

- Information on secure proxies and even easier methods spread to the general public. The Federal Police go to the ISPs to request traffic for certain individuals (as they've always done in the past) only to be told, sorry it's all encrypted, you can have it but unless you know something that cryptography experts around the world don't, it won't be of any use to you. Any kids who didn't know before, are now more than informed about how to get around their school and government filters via one simple method.

There's also one VERY significant one that isn't being talked about. The ace card in the sleve. Anybody who knows about it is not telling because if the govt does bring in their stupid filter, it will deliver the ultimate bitch slap back to them. I'll say no more. :)

Bravo Conjob, you ignorant, self serving, fool.

Who said...
This post has been removed by the author.
normara's said...

As you may be aware ACMA was in the news yesterday (March 19 2009) with the release of the supposed blacklist of websites. Well access to the wikileaks site was not available yesterday but was today.

While I do not condone any of the material in the sites that is illegal, I have visited one or two sites as users had brought them to my attention as they were concerned that visitors were viewing them and thought that the material should not be allowed in case children stumbled across them in the shared computers that are available in the network I manage.

I appreciate the listing so as I can add the list of banned sites in the firewall server that I manage. Why should I seek out lists when I can
get one that is “approved” by the Australia Government.

But should the site listing be blacklisted itself, should ISPs be forced to censor and how much censorship is in the public interest when we already have slow connections?

These are some issues that are really questionable when a child can walk into a corner shop/service station/newsagent and see semi naked women
every day of the week.

Timmer said...

Very right
the internet is already providing so much pornography, that you can't really compare it to what is shown in the magazines in corner shops. Besides, it is way easier for the kids to get access to that stuff via the internet than in a store, where they are being watched.
On the other hand, I am also worried about the slow connections that censorship would bring with it...