Domain: opennetinitiative.net
Stories and comments across the archive that link to opennetinitiative.net.
Stories · 12
-
Will AT&T Start Filtering Your Connection?
We have another essay from Bennett Haselton for you to peruse. "Last week's coverage of AT&T's newly announced "anti-piracy initiative" mostly downplayed the key part of AT&T's proposal, which is filtering what their end users can access in the first place, not finding pirates or suing them after the fact. Friday's Associated Press article, which was reprinted on many news sites with headlines like "AT&T to Help Hollywood Track Down Internet Pirates" and "AT&T to ID Offshore Web Pirates", actually said only that "the effort is primarily aimed at pirates who set up operations in other countries" -- and since you can't really "aim" at pirates in Russia and China with anything except missiles, the statement suggests not identifying pirates or tracking them down, but pre-emptively blocking people from connecting to their servers. Only the Red Herring nailed it with their article title, "AT&T to Block Pirated Content"." Follow the magical URL to read the rest of Bennett's words on the matter.I think this is a crucial distinction, because efforts to filter end users' connections (as opposed to making them pay consequences for their actions after the fact) have always been controversial, even when the content is illegal. The Center for Democracy and Technology successfully overturned a Pennsylvania law that required ISPs to block overseas child pornography sites, partly on the grounds that the filtering included many third-party Web sites as collateral damage. I've argued that a similar private-sector initiative called Canada Cleanfeed, where Canadian ISPs attempt to block child pornography Web sites, would do more harm than good. On the other hand, nobody's fighting very hard for the cause of child pornography downloaders who were caught and arrested. Web sites get sued and shut down all the time, but it was bigger news when Canadian ISP Telus blocked the Web site of a Telus labor union for three days. So it's a big deal whether we're talking about "pre-emptive" filtering, or fighting piracy "reactively" by going after violators.
AT&T Senior VP James Cicconi said in e-mail that "discussion about what the technology will or won't do is premature until we can invent it", but most of the hints so far have been that the anti-piracy technology will be "pre-emptive", i.e. filtering users' connections. Cicconi said on a conference panel that AT&T has to spend billions on network maintenance to carry illegal pirated traffic -- which they probably couldn't recoup by suing people, so the only way to prevent that would be to block it. And Cicconi has referred to the technology several times as a "network-based solution" -- but what else could that mean, except filtering?
So let's assume that's what's on the horizon. Interestingly, Cicconi said that AT&T did not plan to block actual Web sites. However, he said in e-mail, "If one could, with a high degree of certainty, spot and isolate illegal traffic from an offshore site, would you not think the copyright holders would have a reasonable argument for a court order to block that traffic (as opposed to the site itself)?" Presumably this could refer to a Web page with an index of links to BitTorrent files -- so they'd be willing to block the BitTorrent links, but not the Web page? But from that point of view, why not just block Web sites too? If an overseas webpage has a list of links to pirated content, and that content is served over http from the same Web server, wouldn't they want to block it?
But I doubt this would stem much piracy in the long run, because connection filtering to fight piracy became more commonplace, then the next generation of p2p file-trading programs would all just have circumvention capabilities built into them, that let you route your connection through a friend at an unfiltered ISP. You're on AT&T, you upload a file to your friend on Verizon which earns you some "credits" with his node in the p2p network, and instead of redeeming those credits to download a file from him, you use his node as a proxy to download a file indirectly from a site in Russia that AT&T is blocking you from accessing. Advanced users can do this already with tools like Virtual Private Networks and Tor, and some tweaks in a p2p program would just bring it within the range of the casual user.
On the other hand, if AT&T starts filtering traffic, it could set a bad precedent that any time a party in a legal proceeding wants a site declared "illegal", they can demand that AT&T (or other ISPs) block the site. It could be a site libeling a person, or a site hosting a decryption tool that breaks some company's poorly-designed code, or pretty much anything that some powerful person wanted to go away. Meanwhile, if an AT&T customer did get accused of downloading pirated content, now they could invoke the "AT&T didn't stop me" defense -- they thought that AT&T was filtering illegal content, and if they could get to it, then that meant it was legal! In both cases the problem comes from someone using the argument that once AT&T started doing any filtering at all, they should have gone further.
So I would watch the situation closely, even if you're not an AT&T user, and don't assume the situation will take care of itself. Cicconi said, "If a company like ours does dumb things and upsets our customers, we will lose them to someone else," which is something I'm skeptical of whenever I hear it used to defend various draconian anti-spam measures, but in this case I think it's even less applicable. When you're talking about spam filters, at least they always bring some benefit to the user (less spam), and the question is whether the free market weighs those benefits properly against the costs (more lost mail). On the other hand, if an ISP filters the user's connection, that brings no benefit to the user, and in a truly efficient market, all customers of such an ISP would just switch to an unfiltered one -- if that doesn't happen, it simply means the market in that case is not efficient. Is your ISP filtering your connection right now? Probably not, but how could you tell if they were? Right now we assume that ISPs don't filter connections because generally it's "just not done" (except when it is). In a few years we might not be so sure.
-
Hundreds of Sites Blocked By Canadian ISP
An anonymous reader writes "Last week Slashdot reported on the blockage of a union website by Telus, a leading Canadian ISP. Since that story, the company has restored access but the fallout continues. The move may lead to new ISP regulations in Canada and a study by the OpenNet Initiative has found that by blocking the union site, Telus also blocked an additional 766 websites including a breast cancer fundraising site." From the article: "While there are a number of different ways to block access to Web sites, the method Telus chose to block the Voices for Change site -- blocking its IP address -- produced massive collateral filtering. Filtering by IP address is efficient since ISPs can quickly and effectively block access to the target site using their existing routing technology. Many ISPs already block certain IP addresses to combat spam and viruses. Large networks, like Telus, have mechanisms in place to block IP addresses almost instantaneously, simply by updating their routers with a "block list" of addresses. However, it is common for many different, unrelated Web sites to share the same IP address." -
Iran Continues to Censor Internet Communications
eldawg writes "Iran has recently been in the news after electing a 'hardliner' president. But even previous 'liberal' Iranian governments have been putting together a sophisticated Internet filtering system to prevent their citizens from visiting 'questionable' websites and censoring dissent. An earlier posting at Slashdot outlined the crackdown on blogs, chat rooms and email communications. A more recent research paper from the OpenNet Initiative provides an update on the censoring activity in Iran. Reports indicate that the Iranian authorities are specifically targetting 'content in the local Farsi language using a filterning second only to China.' We know Cisco has played a large role in bulding the 'Great Firewall of China' but is the Iranian initiative homegrown?" -
Study Shows China Tightens Internet Filtering
Torrey Clark writes "China is the world's leading censor of the Internet, filtering web sites, blogs, e-mail, and online forums for sensitive political content, according to a study released Thursday. The OpenNet Initiative said that China employs thousands officials and private citizens to build a 'pervasive, sophisticated, and effective' system of Internet censorship. 'ONI sought to determine the degree to which China filters sites on topics that the Chinese government finds sensitive, and found that the state does so extensively,' said the study. 'Chinese citizens seeking access to Web sites containing content related to Taiwanese and Tibetan independence, Falun Gong, the Dalai Lama, the Tiananmen Square incident, opposition political parties, or a variety of anti-Communist movements will frequently find themselves blocked,' the report said." -
Study Shows China Tightens Internet Filtering
Torrey Clark writes "China is the world's leading censor of the Internet, filtering web sites, blogs, e-mail, and online forums for sensitive political content, according to a study released Thursday. The OpenNet Initiative said that China employs thousands officials and private citizens to build a 'pervasive, sophisticated, and effective' system of Internet censorship. 'ONI sought to determine the degree to which China filters sites on topics that the Chinese government finds sensitive, and found that the state does so extensively,' said the study. 'Chinese citizens seeking access to Web sites containing content related to Taiwanese and Tibetan independence, Falun Gong, the Dalai Lama, the Tiananmen Square incident, opposition political parties, or a variety of anti-Communist movements will frequently find themselves blocked,' the report said." -
Contrabandwidth
tcd004 writes "Kate Palmer writes in Foreign Policy Magazine that an international black market for Internet access has arisen in many authoritarian countries who keep their populations offline. Savvy black marketers in cybercafes, universities, private homes, and elsewhere are exploiting technological loopholes to circumvent government filters and charge fees for access. According to OpenNet Initiative, a nonprofit that tracks banned sites, visiting a single website in Saudi Arabia can cost anywhere from $26 to $67. And as censorship spreads, the prices are only going up." It's just a few paragraphs, but thought provoking. -
Googling Behind China's Great Firewall
xcham writes "The OpenNet Initiative, a joint project of the Citizen Lab at the University of Toronto, the Berkman Center at Harvard Law School, and the Advanced Network Research Group at Cambridge, have released a bulletin regarding the type of filtering applied to Google by the Chinese government. Most notably, certain keywords are filtered, as well as Google's 'cache' function. More information on how the keyword filtering is implemented is available in a previous bulletin." -
Googling Behind China's Great Firewall
xcham writes "The OpenNet Initiative, a joint project of the Citizen Lab at the University of Toronto, the Berkman Center at Harvard Law School, and the Advanced Network Research Group at Cambridge, have released a bulletin regarding the type of filtering applied to Google by the Chinese government. Most notably, certain keywords are filtered, as well as Google's 'cache' function. More information on how the keyword filtering is implemented is available in a previous bulletin." -
Googling Behind China's Great Firewall
xcham writes "The OpenNet Initiative, a joint project of the Citizen Lab at the University of Toronto, the Berkman Center at Harvard Law School, and the Advanced Network Research Group at Cambridge, have released a bulletin regarding the type of filtering applied to Google by the Chinese government. Most notably, certain keywords are filtered, as well as Google's 'cache' function. More information on how the keyword filtering is implemented is available in a previous bulletin." -
U.S. Gov Agency Blunders With Keyword Blacklist
Anonymous Submitter writes "There's an interesting CNet article which highlights a report released by the OpenNet Initiative. The report examines how "a U.S. government agency charged with fighting Iranian and Chinese Internet censorship is quietly censoring the Web itself". Among some of the sites this U.S. agency accidentally blocks are breastcancer.com, teens.drugabuse.gov, several gay rights websites, and even usembassy.state.gov. Some of the members of the group who prepared this report were responsible for a previous Slashdot discussion entitled "Academics Take On Government Net Censorship". The report raises questions about the potential inaccuracy of proprietary and other secretive filtering mechanisms: who should be responsible for ensuring their accuracy?" -
U.S. Gov Agency Blunders With Keyword Blacklist
Anonymous Submitter writes "There's an interesting CNet article which highlights a report released by the OpenNet Initiative. The report examines how "a U.S. government agency charged with fighting Iranian and Chinese Internet censorship is quietly censoring the Web itself". Among some of the sites this U.S. agency accidentally blocks are breastcancer.com, teens.drugabuse.gov, several gay rights websites, and even usembassy.state.gov. Some of the members of the group who prepared this report were responsible for a previous Slashdot discussion entitled "Academics Take On Government Net Censorship". The report raises questions about the potential inaccuracy of proprietary and other secretive filtering mechanisms: who should be responsible for ensuring their accuracy?" -
Anti-Censorship Efforts And Port Scanning
scubacuda writes "According to Wired, the University of Toronto's Internet Censorship Explorer permits people test the limits of national and organizational Internet-blocking schemes. Users enter a target URL (and a country), and the software then scans the ports of available servers in that country, looking for open ones to connect on from behind that country's firewall. Many consider port scanning a gray area, as it's often used by various hackers to find vulnerabilies that can be exploited."