Slashdot Mirror

Slithe writes "Last week at the National Conference for Media Reform, Ohio congressman Dennis Kucinich (a long-shot candidate for the Democratic presidential nomination) stated that the Fairness Doctrine may be reinstated. Kucinich will be heading up a new House subcommittee that will focus on issues around the FCC. The Fairness Doctrine was an FCC regulation that required broadcast media to present controversial issues in an honest, equal, and balanced manner. The FCC repealed it in 1987 — Democrats at the time tried to forestall this move but were ultimately thwarted by a veto by President Ronald Reagan. Critics of the Fairness Doctrine have stated that it was only used to intimidate and silence political opposition. At the convention, Kucinich said, 'We know the media has become the servant of a very narrow corporate agenda. We are now in a position to move a progressive agenda to where it is visible.'" In the interest of fairness, here is a Republican, free-market perspective on the return of the Fairness Doctrine.

gloom writes "In 2000 the Finnish demoscene musician Janne Suni (also known as 'Tempest') won the Oldskool Music Competition at the Assembly demoparty with his four-channel Amiga .MOD entitled 'Acid Jazzed Evening.' A Commodore 64 musician called 'grg' remade the song on the C64 (using the infamous SID soundchip); it is this that was stolen. The producer's name is Timbaland and he is one of the hottest names in American music these days. The track in question is called 'Do it' and it is featured on the Nelly Furtado album 'Loose' on the Geffen label. Getting nowhere with Geffen, the demoscene has now risen to the aid of Tempest, first by creating a stir at SomethingAwful (files downloadable from the forum), then at Digg.com, then on YouTube, with a video demonstrating the blatant ripoff. Being an online-posting musician myself — what rights do I have if this should ever happen to me, and what can be done to raise awareness about such things?"

theodp is concerned about the following: "Alarmed by Goldman Sachs CEO Lloyd Blankfein's record-setting $53M bonus, Charles Wheelan (aka The Naked Economist) argues that income inequality matters. Wheelan notes that the Gini Coefficient (a measure of income inequality) for the U.S. has been moving away from countries like Japan and Sweden and closer to that of Brazil, where the murder rate is 5X that of NYC and crime is materially impacting GDP."

222 asks: "Mission: Create an intermediate distribution frame. Difficulty: A few feet away, industrial equipment will be generating roughly 2000 degree heat. Bonus: Keep the network switches inside the IDF from melting. Does anyone have experience in making IT work in such extreme conditions? Is there an enclosure in existence that can handle this type of abuse? This is essentially what I've been asked to accomplish, and now I'm asking my fellow readers for help: Can it be done?"

48 hours have passed since Steve Jobs's MacWorld keynote and the reality distortion field is beginning to wear off. Lists of the drawbacks of the announced iPhone are sprouting all over the Net (and there is the occasional defense by true believers). Now narramissic writes, "The iPhone may be poised to take over the high-end cell phone market, but is it a market worth taking? Not if an InStat survey from July is any indication: Of 1,800 consumers surveyed, just 21 had spent more than $400 for a cell phone. Prices for the iPhone, admittedly more of a handheld computer than a cell phone, start at $499 for the 4G-byte version with a required two-year contract with Cingular. So, is Apple pricing it right? Analysts quoted in this article seem to think Apple's going to have a hard time getting the 1% of market share that Jobs called for."

evw writes "The NYTimes is reporting that legislation was introduced in the Senate on Tuesday in support of Net Neutrality. It is bipartisan legislation introduced by Olympia Snowe, R-Maine and Byron Dorgan, D-N. Dakota, however the article notes that Senator Snowe is one of the few Republicans that supports it. "Senior lawmakers, emboldened by the recent restrictions on AT&T and the change in control of Congress, have begun drafting legislation that would prevent high-speed Internet companies from charging content providers for priority access." This isn't the first attempt. Last year a similar amendment was blocked. However, conditions placed on AT&T in its merger with SBC have emboldened supporters of the legislation."

evw writes "The NYTimes is reporting that legislation was introduced in the Senate on Tuesday in support of Net Neutrality. It is bipartisan legislation introduced by Olympia Snowe, R-Maine and Byron Dorgan, D-N. Dakota, however the article notes that Senator Snowe is one of the few Republicans that supports it. "Senior lawmakers, emboldened by the recent restrictions on AT&T and the change in control of Congress, have begun drafting legislation that would prevent high-speed Internet companies from charging content providers for priority access." This isn't the first attempt. Last year a similar amendment was blocked. However, conditions placed on AT&T in its merger with SBC have emboldened supporters of the legislation."

eldavojohn writes "Google has signed on with the Large Synoptic Survey Telescope project that will construct a powerful telescope in Chile by 2013. Google's part will be to 'develop a search engine that can process, organize, and analyze the voluminous amounts of data coming from the instrument's data streams in real time. The engine will create "movie-like windows" for scientists to view significant space events.' Google's been successful on turning its search technology on several different media and realms. Will they be successful with helping scientists tag and catalog events in our universe?" The telescope will generate 30 TB of data a night, for 10 years, from a 3-gigapixel CCD array.

An anonymous reader writes "Space.com is reporting that NASA has decided to use the metric system for its new lunar missions. NASA hopes that metrication will allow easier international participation and safer missions. The loss of the Mars Climate Orbiter was blamed on an error converting between English units and metric units. 'When we made the announcement at the meeting, the reps for the other space agencies all gave a little cheer,' said a NASA official."

galaad2 writes "Want to own the real castle that may have inspired the legend of Dracula? The Transylvanian castle associated with Vlad the Impaler, who may have been part of the inspiration for Bram Stoker's Count Dracula, is on sale for £40 million ($77 million). Bran Castle, near the historic city of Brasov, in central Romania, draws 450,000 visitors a year because of its association with 15th-century Prince Vlad Tepes III. (Wikipedia points out that Bran Castle's ties to Vlad are weak and disputed.) The local town council has been offered first refusal; they have 30 days to review the offer and then the property will be put on the market."

stair69 writes "Since 2004 many visitors to the United States have had 2 fingerprints taken under the US-VISIT scheme. Now there are new plans to extend this scheme — under the proposal all 10 fingerprints will be taken, and they will be stored permanently on the FBI's criminal fingerprint database. The fingerprints will also be made available to police forces in other countries. The scheme is due to be introduced by the end of 2008, but it will be trialled in 10 of the bigger airports initially." Of course, it is worth pointing out that given the recent change in Congress, I suspect that a number of countries will get a "bye" on this round,

eldavojohn writes "It may be no surprise but Wikipedia is now being used in the field of artificial intelligence. The applications for this may be endless. For instance, the front of spam fighting is a tough one and it looks as though researchers are now turning towards an ontology or taxonomy based solution to fight spammers. The concept is also on the forefront of artificial intelligence and progress towards an application passing the Turing Test and creating semantically aware applications. The article comments on uses of Wikipedia in this manner: '"... spam filters block all messages containing the word 'vitamin,' but fail to block messages containing the word B12. If the program never saw B12 before, it's just a word without any meaning. But you would know it's a vitamin," Markovitch said. "With our methodology, however, the computer will use its Wikipedia-based knowledge base to infer that 'B12' is strongly associated with the concept of vitamins, and will correctly identify the message as spam," he added.'"

brian0918 writes "Until now, the assumption has been that the rapid spin of a pulsar comes from the spin of the original star. The problem was that this only explained the fastest observed pulsars. Now, researchers at Oak Ridge have shown that the spin of a pulsar is determined by the shock wave created when the star's massive iron core collapses. From the article: 'That shock wave is inherently unstable, and eventually becomes cigar-shaped instead of spherical. The instability creates two rotating flows — one in one direction directly below the shock wave and another, inner flow, that travels in the opposite direction and spins up the core. The asymmetrical flows establish a 'sloshing' motion that accounts for the pulsars' observed spin velocities from once every 15 to 300 milliseconds.'"

brian0918 writes "Until now, the assumption has been that the rapid spin of a pulsar comes from the spin of the original star. The problem was that this only explained the fastest observed pulsars. Now, researchers at Oak Ridge have shown that the spin of a pulsar is determined by the shock wave created when the star's massive iron core collapses. From the article: 'That shock wave is inherently unstable, and eventually becomes cigar-shaped instead of spherical. The instability creates two rotating flows — one in one direction directly below the shock wave and another, inner flow, that travels in the opposite direction and spins up the core. The asymmetrical flows establish a 'sloshing' motion that accounts for the pulsars' observed spin velocities from once every 15 to 300 milliseconds.'"

theodp writes "It came as no surprise to Tim O'Reilly that Nielsen BuzzMetrics found 'Web 2.0' the most cited Wikipedia article of the year (as measured by blog mentions). After all, says Tim, 'the Wikipedia article on Web 2.0 is indeed pretty darn good.' IIRC, the Web 2.0 Trademark Scandal was also good for a citation or two. BTW, the material in the article crediting O'Reilly & Co. with originating the term 'Web 2.0' was first contributed by '209.204.147.33', which is coincidentally an O'Reilly IP address."

theodp writes "It came as no surprise to Tim O'Reilly that Nielsen BuzzMetrics found 'Web 2.0' the most cited Wikipedia article of the year (as measured by blog mentions). After all, says Tim, 'the Wikipedia article on Web 2.0 is indeed pretty darn good.' IIRC, the Web 2.0 Trademark Scandal was also good for a citation or two. BTW, the material in the article crediting O'Reilly & Co. with originating the term 'Web 2.0' was first contributed by '209.204.147.33', which is coincidentally an O'Reilly IP address."

theodp writes "It came as no surprise to Tim O'Reilly that Nielsen BuzzMetrics found 'Web 2.0' the most cited Wikipedia article of the year (as measured by blog mentions). After all, says Tim, 'the Wikipedia article on Web 2.0 is indeed pretty darn good.' IIRC, the Web 2.0 Trademark Scandal was also good for a citation or two. BTW, the material in the article crediting O'Reilly & Co. with originating the term 'Web 2.0' was first contributed by '209.204.147.33', which is coincidentally an O'Reilly IP address."

JHWH asks: "I've been asked to design and implement a management software system with text based user interface as the replacement of an older one running on AS/400. Despite my attempts towards a web UI, the customer is actually willing to have a text based UI. The main reasons are the need for a very low bandwidth and the ability to run on serial terminals. All this in the 21st century! Host systems will be Linux, the language will be C or C++. I already thought about the use of text based browsers like lynx or links. So now I have to wipe the dust away from my ncurses manual, or can Slashdot suggest something more effective?"

JHWH asks: "I've been asked to design and implement a management software system with text based user interface as the replacement of an older one running on AS/400. Despite my attempts towards a web UI, the customer is actually willing to have a text based UI. The main reasons are the need for a very low bandwidth and the ability to run on serial terminals. All this in the 21st century! Host systems will be Linux, the language will be C or C++. I already thought about the use of text based browsers like lynx or links. So now I have to wipe the dust away from my ncurses manual, or can Slashdot suggest something more effective?"

JHWH asks: "I've been asked to design and implement a management software system with text based user interface as the replacement of an older one running on AS/400. Despite my attempts towards a web UI, the customer is actually willing to have a text based UI. The main reasons are the need for a very low bandwidth and the ability to run on serial terminals. All this in the 21st century! Host systems will be Linux, the language will be C or C++. I already thought about the use of text based browsers like lynx or links. So now I have to wipe the dust away from my ncurses manual, or can Slashdot suggest something more effective?"

Cheeze asks: "As I am sure some of you know, Daylight Saving Time is slated to change this year thanks to The Energy Policy Act of 2005. This means nothing to the large majority of the population except they will either sleep late one day or have to commute in the dark. To a select few, this is a crunch time akin to the Y2K fiasco, only there has been almost zero publicity recently. These select few are the ones responsible for updating the millions of computers, both servers and workstations, with the new time zone information. For newer servers, this usually means just install a patch and reboot (which is slightly more than mildly inconvenient). For older servers, this is basically an 'End of Life' declaration. Servers running software for which no patch is available will be unable to update their own clocks. This doesn't seem like such a big deal until you realize Microsoft is only offering patches for Windows XP and beyond, and Sun will not be supporting Solaris 7 and older. That should knock a large percentage of the computers 1 hour off for a few weeks this spring. What are you doing in your datacenters to prepare?"

Cheeze asks: "As I am sure some of you know, Daylight Saving Time is slated to change this year thanks to The Energy Policy Act of 2005. This means nothing to the large majority of the population except they will either sleep late one day or have to commute in the dark. To a select few, this is a crunch time akin to the Y2K fiasco, only there has been almost zero publicity recently. These select few are the ones responsible for updating the millions of computers, both servers and workstations, with the new time zone information. For newer servers, this usually means just install a patch and reboot (which is slightly more than mildly inconvenient). For older servers, this is basically an 'End of Life' declaration. Servers running software for which no patch is available will be unable to update their own clocks. This doesn't seem like such a big deal until you realize Microsoft is only offering patches for Windows XP and beyond, and Sun will not be supporting Solaris 7 and older. That should knock a large percentage of the computers 1 hour off for a few weeks this spring. What are you doing in your datacenters to prepare?"

Reality Master 101 writes "Space start-up Blue Origin (financed by Amazon CEO Jeff Bezos) had a secret test flight on November 13, 2006. They've now released video and pictures of the very successful flight. Looks like they're making good progress." From the page: "We're working, patiently and step-by-step, to lower the cost of spaceflight so that many people can afford to go and so that we humans can better continue exploring the solar system. Accomplishing this mission will take a long time, and we're working on it methodically."

peterwayner writes "If you're jazzed by the communitarian impulses driving Wikis, idea agora, Web 2.0 and other collaborative happenings, you'll be pleased to know that the new book Wikinomics is a great gift for that boss, spouse, or friend who doesn't quite grok it yet. The only logic bomb hidden in this statement is that much of what is wonderful in this book is wonderful because it's a book printed on pulp and written by two and only two authors. That is, the book is good because it's not a wiki." Read the rest of Peter's review. Wikinomics: How Mass Collaboration Changes Everything author Don Tapscott, Anthony D. Williams pages 320 publisher Penguin Group rating 8 reviewer Peter Wayner ISBN 1591841380 summary The pros and cons of wikis and their place in business

This statement isn't exactly true. The authors, Don Tapscott and Anthony Williams, have a wiki site at www.wikinomics.com devoted to the book. You can edit the wiki and have your say, but that's not what they're asking folks to buy. For the price of the book, you get a well-designed collection of thoughtful anecdotes stitched together by two talented business writers and polished by a good editor. They've made a good attempt to cover most aspects of the topic and they do an excellent job of explaining why the ideas are important for CEOs that are struggling to move their business forward. All of this is almost as portable as an iPod , dramatically less expensive and guaranteed never to need new batteries.

The tone of the book is bright and optimistic about how openness and wiki principles will help companies. We hear about how the wikipedia covered the London subway explosions, the way that Innocentive is opening up the R&D process for companies and the surprising inventiveness of Google maps users. The descriptions are thorough and well-researched, as far as they go, and when they're done going, the writers summarize them well. It's clear that the writers feel that the word "wikis" should be the new one word answer that CEOs should trot out when faced with the kind an impossible question, the kind of question that they the answered with "Internet" during the 1990s and "China" after the turn of the millenium.

The great advantages of the pulp-bound book become clear as you work your way through the text. In one section, for instance, Tapscott and Williams dismiss Jaron Lanier's worry that wikis can devolve when a smart mob develops the the same kind of "mass stupidity" that brought us Pol Pot or the Stalinist movement. "The winners will outnumber the losers", say the authors and conclude that Lanier "ran afoul". I don't really agree with the easy way that they dismissed the danger and if I had a wiki edit button in front of me, I would change the text to amplify Lanier's warnings. I've watched the mob rule delete perfectly good information from the wikipedia for no other reason than it wasn't "notable". The revision wars are legendary and any savvy wiki reader knows that skirmishes are more common than we would like. The well-meaning editors at the Wikipedia have probably destroyed more knowledge in the name of notability than the book burners of history. At least it's still there in the article history. But since Tapscott and Williams wrote a book that doesn't come with a wiki edit button, the text is better off because I didn't glue in my own divergent rant.

The optimism of the book is contagious and it would be a shame for it to be limited by a neutral point of view. Wikis organize casual information like how to install software, and this is the kind of job that is very important to business. Wikis may just be the wrong tool for, say, capturing political truthiness, but the book gives several good examples of how they energize corporations by making it easier for divisions, groups, and project teams to cooperate without going through traditional channels. If a business wants to formalize its collective intelligence, a wiki offers an ideal amount of flexibility.

If the book needs any editing, it would be to add more skepticism. At the beginning, they hint that they will address the kind of concerns that led Bill Gates to wonder about how society will pay for innovation if there's no profit incentive, but analyzing the limitations of the wikiworld isn't really their goal. There's little discussion of endeavors that have largely failed like Wikinews. That experiment with collaborative reporting had two articles on the day I wrote this and one article on the day before. (December 19 and 20th).

I've begun to feel lately that there is a real danger that free information will drive out paid information in much the same way that economists note that cheap money drives out the dear.

It's probably too early for us to have a firm grasp on the downsides to the wiki world and so it might be unfair to expect the book to be much of a buzz kill. One of the biggest logical problems I've found with the wikipedia is the inconsistent way that the movement treats traditional scholarship. On one hand, we're supposed to revel in the way that the wikipedia is often better than traditional mechanisms, but on the other hand the wikipedia gives more weight to outside sources. On the day I wrote this, the guide counseled, "Avoid weasel words such as, `Some people say ...' Instead, make your writing verifiable: find a specific person or group who holds that opinion and give a citation to a reputable publication in which they express that opinion." If the wikis become good enough to rival if not replace original sources, where will the wikis find the outside beacons of authority? Any strict logician will realize that there's a danger of proving 1=0 with this system, although I realize that all grown ups know that life is filled with logical inconsistencies like that.

The book, for instance, doesn't really question why the Wikipedia worked but the Wikinews didn't, something that no one may really know. The tone is closer to Ray Kinsella than Crash Davis. It celebrates Cory Doctorow, the famous editor of BoingBoing.net, a wonderful blog that I read daily. The authors explain how Doctorow gives away digital copies of his books because "his problem isn't piracy, it's obscurity."

Perhaps that's true, but a deeper question is how the wikis, mashups, and mixes will find their benchmarks of authority, their geodetic markers in memespace, their means of support. To test this danger, I wrote this greasemonkey script to count the words in a webpage between certain tags. On the day I wrote this, the admittedly imprecise script found 11788 words on the front page of Boing Boing, of which 6472 were between <blockquote> tags. That's about 50% borrowed text.

So far, this non-stop homage, this pantheon of fair use sells ads and seems to do quite well — Wikinomics suggests that BoingBoing's "readership now eclipses most mainstream media outlets." So why bother playing by the old school rules when you can just let others do the work while you push the boundaries of fair use and make money? There is a real danger that the original sources will find themselves starved for air as the Wikipedia and others fair use devotees suck up the top search rankings.

This may be why I think the book was right to bring these wiki worlds to the business community. At first I thought it was rather cynical to package up the wiki ideals into a neat bundle for the business leaders, but now I think that businesses are the ones who can really use and support the ideals. We now know that wikis can't be trusted for important, contentious areas of truthiness like politics, news, history, or any place where there's a difference of opinion about the facts, but it can still be ideal for semi-closed environments with outside means of support. I can imagine that wikis would be great for a corporation that needed to manage communication between the two divisions in different states. Openness gets rid of the natural inertia of bureaucracies. And it's clear that every company should have a wiki devoted to the user's guide so the customers can add what the manual writers never anticipated. Wikis allows one group to move ahead without asking another "mother may I". The umbrella business can pay the bills for keeping the lights on.

My guess is the folks in business who need to get things done may be the only ones who support the wikiconomy in the long term after the average joe gets a bit bored and tosses the wikis onto the pile of amusing distractions with the CB radios. The businesses are the ones with the real incentives to embrace the values of wikiness. And if you've spent a few years in the cubicle trenches, you know that words like "truthiness" have a certain ring to them.

Peter Wayner is the author of Translucent Databases and 12 other books.

You can purchase Wikinomics: How Mass Collaboration Changes Everything from bn.com. Slashdot welcomes readers' book reviews -- to see your own review here, read the book review guidelines, then visit the submission page.

Rexdude writes "Here is a list of predictions from 'The Internet' magazine at the end of 1994. It highlights the major changes and events on the net as it was back then (20 million users only, for starters). Seems a throwback to a relatively more innocent time, when the unwashed masses had not taken over the net as much as today. And look at the reverence accorded to long dead protocols like Gopher!"

Freshly Exhumed writes to tell us about a Florida State University study of 700 employees indicating that nearly two of five bosses don't keep their word. The study will be published later this year. From the article: "The abusive boss has been well documented in movies ('Nine to Five'), television (Fox's 'My Big Fat Obnoxious Boss') and even the Internet. 'They say that employees don't leave their job or company, they leave their boss. We wanted to see if this is, in fact, true,' said Wayne Hochwarter, an associate professor of management in FSU's College of Business."

ZeldorBlat writes "The French Minitel service is closing it's doors at the end of today. Started in 1982, Minitel provides several services now widely available on the web including phone listings, train ticketing, and many other third-party content. Many prefered it to the web for it's simplicity and perceived security. The system is to be replaced with Le Compte Achats, available to businesses only. The notice can be found here."

GrumpySimon writes "Wikipedia has blocked the entire country of Qatar from editing pages. Whilst the ban is due to spam-abuse coming from the IP address in question, the fact that this belongs to the country's sole high-speed internet provider has the unintended consequence of stopping Qataris from editing the wiki. The ban has raised concerns about impartiality — the majority of Al Jazeera journalists operate out of Qatar, for example. This raises a number of issues about internet connectivity in small countries — what other internet bottlenecks like this exist?" Update: 01/02 13:32 GMT by Z : Jim Wales wrote in the comments that the story is 'completely false'. Either way, the ban has been lifted and anonymous editing is once again possible from Qatar.

rangeva writes to tell us about a twist he has developed on the common Captcha technique to discourage spam bots: HECs encode the Captcha image into HTML, thus presenting an unsolved challenge to the bots' programmers. From the writeup: "The Captcha is no longer an image and therefore not a resource they can download and process. The owner of the site can change the properties of the Captcha's HTML, making it unique,... add[ing] another layer of complication for the bot to crack." HECs are not exactly lightweight — the one on the linked page weighs in at 218K — but this GPL'd project seems like a nice advance on the state of the art.

knight17 writes "This year was a really good year for space exploring nations, but Russians may be the most happiest among them, because they grabbed a huge 45% of the spacecraft launching market this year. The coming year is also very good for Russian space programs, since next year they will finish the GLONASS navigation project. The US is in second place, and China & Japan in third with six launches each. The Russian officials said that the launches of spacecrafts will be lesser than what this year has been seen."

GMontag wrote to mention a Washington Post article about the always-intriguing 'number' radio broadcasts. The numbers stations, as they are known, are 'hiding in plain sight' spycraft. Random digits broadcast at little-used frequencies are known to be intelligence agencies broadcasting their secrets in encrypted form. The Post article gives a nice run-down on the truth behind the transmissions, and touches a bit on the odd community that has grown fascinated by them. From the article: "On 6840 kHz, you may hear a voice reading groups of letters. That's a station nicknamed 'E10,' thought to be Israel's Mossad intelligence. Chris Smolinski runs SpyNumbers.com and the 'Spooks' e-mail list, where 'number stations' hobbyists log hundreds of shortwave messages transmitted every month. 'It's like a puzzle. They're mystery stations,' explained Smolinski, who has tracked the spy broadcasts for 30 years." This article made me recall a great All Things Considered story from a few years back about Akin Fernandez's 'Numbers' CD, a CD compilation of some of the most interesting strings of randomly read numbers reaching out across the airwaves.

watashi writes "Blake Ross the man whose scratched itch became the Firefox browser explains on his blog why he has a problem with Google's policy of promoting their own products over competitors' in search results. His main gripe is that the tips (e.g. "Want to share pictures? Try Google Picasa") result in an inability for other products (perhaps even Parakey?) to compete for the top slot on Google."

Rob Carr writes "Considered unethical to ever perform again with humans, researcher Mel Slater recreated the Milgram experiment in a immersive virtual environment. Subjects (some of whom could see and hear the computerized woman, others who were only able to read text messages from her) were told that they were interacting with a computer character and told to give increasingly powerful electric shocks when wrong answers were given or the 'woman' took too long to respond. The computer program would correspondingly complain and beg as the 'shocks' were ramped up, falling apparently unconscious before the last shock. The skin conductance and electrocardiograms of the subjects were monitored. Even though the subjects knew they were only 'shocking' a computer program, their bodies reacted with increased stress responses. Several of the ones who could see and hear the woman stopped before reaching the 'lethal' voltage, and about half considered stopping the study. The full results of the experimental report can be read online at PLoS One. Already, some (like William Dutton of the Oxford Internet Institute) are asking whether even this sanitized experiment is ethical."

bigmammoth writes "C-SPAN's bid to "liberate" the House and Senate floor footage has re-emerged and been shot down. In an aim to build support a recent New York Times editorial called for reality TV for congress. But what is missing from this editorial is the issue of privatization and the subsequent restriction of meaningful access to these media assets. Currently the U.S. government produces this floor footage and it is public domain. This enables projects such as metavid to publicly archive these media assets in high-quality Ogg Theora using all open source software, guaranteeing freely reusable access to both the archive and all the media assets. In contrast C-SPAN's view-only online offerings disappear into their pay for access archive after two weeks and are then subject to many restrictions." (Continues) "If C-SPAN succeeds, reusable access to floor footage will be lost and sites such as metavid will be forced to stop archiving. Because of C-SPAN's zealous IP enforcement metavid has already been forced to take down all already 'liberated' committee hearings which are C-SPAN produced. Fortunately, the house leadership sees private cameras as a loss of 'dignity and decorum' and will be denying C-SPAN's request."

tmk writes "After five years Hyperion announces the availability of AmigaOS 4.0: 'Amiga OS 4.0 is the most stable, modern and feature-rich incarnation to date of the multi-media centric operating system launched by Commodore Business Machines (CBM) in 1985 with which it still retains a high degree of compatibility.' But there is a snag: the new OS supports only the AmigaOne, which is not available anymore. According to Hyperion, the new hardware platform will be announced by third parties early 2007."

An anonymous reader writes "Nobel prize-winning economist Joseph Stiglitz, who was fired by the World Bank blasted drug patents in an editorial in the British Medical Journal titled 'Scrooge and intellectual property rights.' 'Knowledge is like a candle, when one candle lights another it does not diminish its light.' In medicine, patents cost lives. The US patent for turmeric didn't stimulate research, and restricted access by the Indian poor who actually discovered it hundreds of years ago. 'These rights were intended to reduce access to generic medicines and they succeeded.' Billions of people, who live on $2-3 a day, could no longer afford the drugs they needed. Drug companies spend more on advertising and marketing than on research. A few scientists beat the human genome project and patented breast cancer genes; so now the cost of testing women for breast cancer is 'enormous.'"

GraWil writes "On Christmas eve 1906, a Canadian physicist named Reginald Fessenden presented the world's first wireless radio broadcast from his transmitter at Brant Rock, MA. The transmission included Christmas music and was heard by radio operators on board US Navy and United Fruit Company ships equipped with Fessenden's wireless receivers at various distances over the South and North Atlantic, and in the West Indies. Fessenden was a key rival of Marconi in the early 1900s who, using morse-code, succeeded in passing signals across the Atlantic in 1901. Fessenden's work was the first real departure from Marconi's damped-wave-coherer system for telegraphy and represent the first pioneering steps toward radio communications and radio broadcasting. He later became embroiled in a long-running legal dispute over the control of his radio-related patents, which were eventually acquired by RCA."

GraWil writes "On Christmas eve 1906, a Canadian physicist named Reginald Fessenden presented the world's first wireless radio broadcast from his transmitter at Brant Rock, MA. The transmission included Christmas music and was heard by radio operators on board US Navy and United Fruit Company ships equipped with Fessenden's wireless receivers at various distances over the South and North Atlantic, and in the West Indies. Fessenden was a key rival of Marconi in the early 1900s who, using morse-code, succeeded in passing signals across the Atlantic in 1901. Fessenden's work was the first real departure from Marconi's damped-wave-coherer system for telegraphy and represent the first pioneering steps toward radio communications and radio broadcasting. He later became embroiled in a long-running legal dispute over the control of his radio-related patents, which were eventually acquired by RCA."

johkir writes "Last year, evolution was the breakthrough of the year; We found it full of new developments in understanding how new species originate. But we did get a complaint or two that perhaps we were just paying extra attention to the lively political/religious debate that was taking place over the issue, particularly in the United States. Perish the thought! Our readers can relax this year: Religion and politics are off the table, and n-dimensional geometry is on instead. This year's Breakthrough salutes the work of a lone, publicity-shy Russian mathematician named Grigori Perelman, who was at the Steklov Institute of Mathematics of the Russian Academy of Sciences until 2005. The work is very technical but has received unusual public attention because Perelman appears to have proven the Poincaré Conjecture (Our coverage from earlier this year), a problem in topology whose solution will earn a $1 million prize from the Clay Mathematics Institute. That's only if Perelman survives what's left of a 2-year gauntlet of critical attack required by the Clay rules, but most mathematicians think he will. There is also a page of runner-ups. Many of which have been covered here on Slashdot."

mtruch writes "BLAST, the Balloon-borne Large Aperture Sub-millimeter Telescope, is about to be launched from McMurdo Station, Antarctica. BLAST is a 2700 kg telescope with a 2 meter primary mirror that hangs from a 1.1 million cubic meter balloon floating at an altitude of 38 km that will study the star formation history of the universe. It will float west at nearly constant latitude for about 14 days until it is (hopefully) located over McMurdo again and will be terminated and recovered. Real time position and flight track is available from the CSBF. Watch the launch live via a crappy webcam link. Three of the graduate students working on the project have photo blogs of much of the prep period, and specifically Don's blog should have launch photos soon (bandwidth to/from McMurdo is at a premium). BLAST made it on Slashdot in the past, when it launched from Sweden in June 2005, and indirectly with an interview with Prof. Barth Netterfield and George Staikos. Yes, the flight computers still run Slack, and yes, we still use kst for data viewing and analysis. There is a Discovery Science show about BLAST and high-altitude balloons, and a future documentary film being made as well."

Regular Slashdot contributor Bennett Haselton writes in to say "The December 1st release of Psiphon has sparked renewed interest in the various software programs that can help circumvent Internet censorship in China, Iran, and other censored countries. (Some of this interest undoubtedly being motivated by the fact that many of these programs also work for getting around blocking software at work or school.) Have you ever wanted to understand the science behind these programs, the way that mathematicians and codebreakers understand the magic behind PGP? If you loved the mental workout of reading "Applied Cryptography", have you ever wanted a tutorial to do the same for Psiphon and Tor and other anti-censorship programs?" The rest of his editorial follows.

Well, here's a primer, but you might be disappointed. Like making the Statue of Liberty disappear, it doesn't sound very cool once you know how it's done; the truth is that most anti-censorship programs, including mine, only work because the censors are not trying very hard.

(Note that I am going to be talking about ways that certain anti-censorship programs can be defeated. I don't believe that this is giving much help to censors, because these are obvious weaknesses that would occur to anyone who knows how the programs work. For reasons I'll get into at the end, I don't think these weaknesses actually make much difference.)

Basically, all anti-censorship programs fall into two categories: those that require you to have a helper outside of the censored country, and those that don't.

Take Psiphon. To use Psiphon, someone in a non-censored country has to install it on their home computer, which turns their computer into a Web server with an interface similar to Anonymouse.org, where you type in the URL of the page you want to view and it fetches it for you. The difference, of course, is that Anonymouse.org is widely known and blocked by any self-respecting Internet filtering system, while your newly created Psiphon URL pointing to your home computer is not blocked anywhere, yet. So if you set up a Psiphon URL on your computer in the U.S. and e-mail it to your friend in China, your friend can use it to surf wherever they want. (Note that this also has the desirable property that the person in China doesn't have to install any software, so they can use the URL even from a cybercafe computer with restricted user permissions.) The hurdle, of course, is that the person in China has to have a contact outside the country to help them. This is not a huge barrier for many Chinese, but it still means the program doesn't have the instant gratification property of something that you turn on and it just works.

Peacefire, by the way, had released the Circumventor program in 2003 which did essentially the same thing. (And the Circumventor was itself really just a wizard for installing a Web server with James Marshall's CGIProxy script, which deserves most of the credit, although the Circumventor did help bring it "to the masses", since most users don't have the ability to set up an SSL-enabled Web server themselves.) Psiphon made some improvements, namely:

• Ability to create password-protected accounts to restrict the URL to certain users.
• Smaller download (although it may not matter much since only broadband users would be installing it anyway).
• Ability to run on Linux. (Circumventor only works on Windows, although you can install CGIProxy on a Linux webserver if you know how.)

Circumventor has some of its own advantages, although they're the kind that could easily be incorporated into Psiphon soon:

• A wizard to help users forward incoming connections on their router and enter exceptions in software firewalls to make the software work. (If they want to. No tweaking people's firewall settings without asking them!)
• Slightly harder to block, due to some strategies such as using a different SSL certificate for each install (Psiphon uses the same one each time).

And both programs fall victim to the same attacks, although as far as I know, none of these have been implemented in practice:

• Blocking sites whose SSL certificates do not match the site hostname (easier for a censoring proxy server like the ones used in the Middle East, than for an IP firewall like the Great Firewall of China).
• Blocking outgoing Web connections to residential IP address ranges like Comcast.

But basically, they're the same program -- so the difference in press coverage has been illustrative of how much context matters to reporters. Psiphon is the "politically correct" version -- they've played down the fact that it can be used to get around blocking software in schools and played up the fact that it can be used to beat the censors in China and Iran, and the press coverage has focused exclusively on that human rights aspect. The Circumventor was also written to help foreign victims of censorship, and articles have been written about its uses for that purpose, but I've also been unapologetically promoting its use to get around blocking software at home and in school, as part of an advocacy for greater civil rights for people under 18. (Also because the more installations there are in the U.S., the more it helps users abroad.) As a result, some of the TV news pieces about it have used such ominous music and lighting that they practically looked like recycled footage from "To Catch a Predator". Of course, Psiphon can be used for exactly the same thing. (I also emailed some of the reporters who recently wrote about Psiphon, to tell them about Circumventor; so far, I haven't heard back from any of them, but I doubt they're being politically correct this time, I think they're just not thrilled that C-Net scooped them by three years and seven months.)

So, Psiphon and Circumventor fall in the first category -- programs that only work if you've got a contact outside the censored country to help you. In the second category is Tor, which was originally written to provide mathematically secure anonymity, but had the nice property that it could be used to get around the Great Firewall of China as well. With your browser in China using Tor as a proxy, packets are routed to other Tor nodes outside the country, which connect you with any blocked Web site that you want to see. Best of all, you just install it on a machine in China, and presto, it works, no nagging your expat cousin in the U.S. to install something on their computer to help you. Dynamic Internet Technologies, run by Chinese dissident Bill Xia in North Carolina, runs another service that works "out of the box" -- you send an instant-message to one of the DIT screen names, and it replies with a list of currently running Web proxies. (Bill has asked me not to publicize the actual screen names that perform this service, because it's intended only for Chinese users. I think that's a case of "security through obscurity", but I respect his wishes.)

Unfortunately, all such "instant gratification" solutions have the same basic weakness, which by a simple argument can be extended even to hypothetical future programs in the same category. In the case of a program like Tor, the censor only has to install the software, look at what IP addresses the software connects to when it bootstraps itself, and add those IP addresses to the blacklist. Even if the software chooses at random from multiple IP addresses to bootstrap to, the censor can still obtain all of them by repeatedly re-installing the software (possibly wiping the machine each time so the software can't tell that it's been installed before). No matter how you slice it, if Alice the legitimate user and Bob the censor download the program on the same day, Bob can make the program not work for Alice if he updates the blacklist quickly enough. He doesn't even have to reverse-engineer the software, he just has to use a network sniffer to see where it connects to. (For DIT's proxy-by-instant-message system, the censor can instant-message the screen name repeatedly, from different accounts, until they've collected and blocked all the available proxies; this would be analogous to re-installing Tor repeatedly and seeing what IPs it connects to.)

Peacefire has produced other approach which is a simple, obvious idea, and it was quite by accident that we found out it slips through the cracks of the seemingly "unsolvable" problem with instant-gratification outlined above. Like the other solutions, it works only as long as the censors are fairly lazy, but they are, and it does. About 30,000 people have signed up through a form on our site to be notified each time we create a new Circumventor site and mail it out, every 3 or 4 days. Agents of the blocking companies have joined the list too, of course, but we mail different sites to different subsets of the list. Now, an attack analogous to the attacks listed in the previous paragraph, would be for the censors to join under many different accounts, and then block any site that gets mailed to any of those accounts. But the catch is that when an address joins the list, a new site doesn't get mailed to that address until some random time in the future. So the censor has to check all of the fake Hotmail accounts that they've created, over and over, if they want to block all of the new sites as soon as they're released. Hardly impossible, but the censor can no longer use the instantaneous approach of: (1) enter the system / join the list / install the software; (2) see where it connects to and block those points of access; (3) repeat. (If we instantly e-mailed a randomly selected site to each new signup, then this attack would work.) By going from instant gratification to almost-instant-gratification, you change one of the conditions for the theorem stated in the previous paragraph, so that it no longer holds true. Still, like Tor and the DIT system, it could be blocked with a moderate amount of effort.

The Tor protocol, by the way, has been the subject of a great deal of sophisticated mathematical analysis, really brainy stuff that is beyond the scope of this article. But it's important to understand that that analysis focuses on the security of the Tor protocol for achieving anonymity. For anonymity, the protocol is very strong; for routing around censorship, it's fairly straightforward to defeat. That's not at all a criticism of the Tor developers; Tor was designed to achieve anonymity, and just turned out to work for beating censorship as well -- but only, of course, as long as the censors aren't making much effort to block it.

Which all leads to the obvious question: Why have the censors not bothered?

Nobody knows for sure, but I fear the answer is that the Chinese government and other censors know that the greatest weapon in their arsenal is not IP blocking, or keyword filtering, or even the threat of arrest. It's just apathy. The Chinese censors know what we anti-censorware developers in the free world keep forgetting: that most Chinese are not liberty-minded Jeffersonians chomping at the bit under the oppressive yoke of their government and waiting to be freed by circumvention software. As Michael Chase and James Mulvenon of the RAND Corporation put it in their report on Internet usage by Chinese dissidents, You've Got Dissent!: "[A]lthough some peer-to-peer applications... are designed specifically to combat censorship on the Internet and address privacy concerns, most Chinese Internet users are undoubtedly more interested in using peer-to-peer applications for entertainment purposes such as downloading MP3 music files." The censors know what Netscape knew when they fought tooth and nail against Microsoft including Internet Explorer on the desktop of every Windows machine: defaults matter. It doesn't matter that users can go to Netscape's site and download their browser, and it doesn't matter that users can access a banned site by installing a cool p2p program. Most people just don't.

When I first started working on the Circumventor, I assumed that since the Chinese Internet censorship bureau reportedly employed about 30,000 people, surely if they were already spending that much effort and money, they'd throw plenty of resources at defeating any new anti-censorship program, so the Circumventor would have to be able to withstand any such attack. But I was wrong. According to the RAND corporation paper, the censors have been quite busy, for example, policing political forums for dissident postings that other users might casually run into. But they apparently assume -- correctly, it seems -- that content doesn't pose much of a threat if users have to go out of their way and download a program to access it. And if the user has to have a friend outside the country to help them, then forget it.

This is not to downplay the enormous good that programs like Tor, Circumventor and Psiphon can do in bringing free speech to the people in censored countries who want it. But it's easy to forget that those often do not comprise a large part of the population.

One of the biggest disappointments for me came in May 2005 when I was looking for ways to get around the word filter on MSN China's blogging service. Microsoft, apparently acting on public relations advice from Lex Luthor, had decided to filter the words "freedom", "democracy", and "Taiwan independence" from the titles of blogs on MSN China. (I know, I know, they have to comply with Chinese laws to do business there. But I don't think the Chinese have actually outlawed the word "democracy".) Eventually I did find a loophole, so I searched on MSN for some Chinese blogs published by expatriates to ask them to help test the workaround for me. With a few exceptions, most of the bloggers were rather hostile, saying that they supported their government's efforts to censor the Internet and to stamp out Falun Gong as a dangerous "cult". (These were expats living in the U.S., so presumably they were not worried about the Chinese government sending a tank across the Pacific to run them over if they criticized the ruling party. Even if they thought they had to watch what they said because they might someday return to China, or because they still had family there, surely it would have been easier just to ignore me; the hostility that I encountered sounded genuine.) The moral is, no matter how much your movement believes in its efforts to help oppressed people, you can't just assume you'll be greeted as liberators (ahem).

So now you know most of what there is to know about the state of the art in anti-censorship software. It's just that there is less to understand than the hype originally suggests -- the programs aren't really secure, but they work because the censors aren't really trying. And there aren't any cool mathematical formulas that you can impress your friends with -- for that, you'll still have to go back to Applied Cryptography. It's a lot less impressive to be the Bruce Schneier of circumvention algorithms than it is to be the real Bruce Schneier.

Regular Slashdot contributor Bennett Haselton writes in to say "The December 1st release of Psiphon has sparked renewed interest in the various software programs that can help circumvent Internet censorship in China, Iran, and other censored countries. (Some of this interest undoubtedly being motivated by the fact that many of these programs also work for getting around blocking software at work or school.) Have you ever wanted to understand the science behind these programs, the way that mathematicians and codebreakers understand the magic behind PGP? If you loved the mental workout of reading "Applied Cryptography", have you ever wanted a tutorial to do the same for Psiphon and Tor and other anti-censorship programs?" The rest of his editorial follows.

Well, here's a primer, but you might be disappointed. Like making the Statue of Liberty disappear, it doesn't sound very cool once you know how it's done; the truth is that most anti-censorship programs, including mine, only work because the censors are not trying very hard.

(Note that I am going to be talking about ways that certain anti-censorship programs can be defeated. I don't believe that this is giving much help to censors, because these are obvious weaknesses that would occur to anyone who knows how the programs work. For reasons I'll get into at the end, I don't think these weaknesses actually make much difference.)

Basically, all anti-censorship programs fall into two categories: those that require you to have a helper outside of the censored country, and those that don't.

Take Psiphon. To use Psiphon, someone in a non-censored country has to install it on their home computer, which turns their computer into a Web server with an interface similar to Anonymouse.org, where you type in the URL of the page you want to view and it fetches it for you. The difference, of course, is that Anonymouse.org is widely known and blocked by any self-respecting Internet filtering system, while your newly created Psiphon URL pointing to your home computer is not blocked anywhere, yet. So if you set up a Psiphon URL on your computer in the U.S. and e-mail it to your friend in China, your friend can use it to surf wherever they want. (Note that this also has the desirable property that the person in China doesn't have to install any software, so they can use the URL even from a cybercafe computer with restricted user permissions.) The hurdle, of course, is that the person in China has to have a contact outside the country to help them. This is not a huge barrier for many Chinese, but it still means the program doesn't have the instant gratification property of something that you turn on and it just works.

Peacefire, by the way, had released the Circumventor program in 2003 which did essentially the same thing. (And the Circumventor was itself really just a wizard for installing a Web server with James Marshall's CGIProxy script, which deserves most of the credit, although the Circumventor did help bring it "to the masses", since most users don't have the ability to set up an SSL-enabled Web server themselves.) Psiphon made some improvements, namely:

• Ability to create password-protected accounts to restrict the URL to certain users.
• Smaller download (although it may not matter much since only broadband users would be installing it anyway).
• Ability to run on Linux. (Circumventor only works on Windows, although you can install CGIProxy on a Linux webserver if you know how.)

Circumventor has some of its own advantages, although they're the kind that could easily be incorporated into Psiphon soon:

• A wizard to help users forward incoming connections on their router and enter exceptions in software firewalls to make the software work. (If they want to. No tweaking people's firewall settings without asking them!)
• Slightly harder to block, due to some strategies such as using a different SSL certificate for each install (Psiphon uses the same one each time).

And both programs fall victim to the same attacks, although as far as I know, none of these have been implemented in practice:

• Blocking sites whose SSL certificates do not match the site hostname (easier for a censoring proxy server like the ones used in the Middle East, than for an IP firewall like the Great Firewall of China).
• Blocking outgoing Web connections to residential IP address ranges like Comcast.

But basically, they're the same program -- so the difference in press coverage has been illustrative of how much context matters to reporters. Psiphon is the "politically correct" version -- they've played down the fact that it can be used to get around blocking software in schools and played up the fact that it can be used to beat the censors in China and Iran, and the press coverage has focused exclusively on that human rights aspect. The Circumventor was also written to help foreign victims of censorship, and articles have been written about its uses for that purpose, but I've also been unapologetically promoting its use to get around blocking software at home and in school, as part of an advocacy for greater civil rights for people under 18. (Also because the more installations there are in the U.S., the more it helps users abroad.) As a result, some of the TV news pieces about it have used such ominous music and lighting that they practically looked like recycled footage from "To Catch a Predator". Of course, Psiphon can be used for exactly the same thing. (I also emailed some of the reporters who recently wrote about Psiphon, to tell them about Circumventor; so far, I haven't heard back from any of them, but I doubt they're being politically correct this time, I think they're just not thrilled that C-Net scooped them by three years and seven months.)

So, Psiphon and Circumventor fall in the first category -- programs that only work if you've got a contact outside the censored country to help you. In the second category is Tor, which was originally written to provide mathematically secure anonymity, but had the nice property that it could be used to get around the Great Firewall of China as well. With your browser in China using Tor as a proxy, packets are routed to other Tor nodes outside the country, which connect you with any blocked Web site that you want to see. Best of all, you just install it on a machine in China, and presto, it works, no nagging your expat cousin in the U.S. to install something on their computer to help you. Dynamic Internet Technologies, run by Chinese dissident Bill Xia in North Carolina, runs another service that works "out of the box" -- you send an instant-message to one of the DIT screen names, and it replies with a list of currently running Web proxies. (Bill has asked me not to publicize the actual screen names that perform this service, because it's intended only for Chinese users. I think that's a case of "security through obscurity", but I respect his wishes.)

Unfortunately, all such "instant gratification" solutions have the same basic weakness, which by a simple argument can be extended even to hypothetical future programs in the same category. In the case of a program like Tor, the censor only has to install the software, look at what IP addresses the software connects to when it bootstraps itself, and add those IP addresses to the blacklist. Even if the software chooses at random from multiple IP addresses to bootstrap to, the censor can still obtain all of them by repeatedly re-installing the software (possibly wiping the machine each time so the software can't tell that it's been installed before). No matter how you slice it, if Alice the legitimate user and Bob the censor download the program on the same day, Bob can make the program not work for Alice if he updates the blacklist quickly enough. He doesn't even have to reverse-engineer the software, he just has to use a network sniffer to see where it connects to. (For DIT's proxy-by-instant-message system, the censor can instant-message the screen name repeatedly, from different accounts, until they've collected and blocked all the available proxies; this would be analogous to re-installing Tor repeatedly and seeing what IPs it connects to.)

Peacefire has produced other approach which is a simple, obvious idea, and it was quite by accident that we found out it slips through the cracks of the seemingly "unsolvable" problem with instant-gratification outlined above. Like the other solutions, it works only as long as the censors are fairly lazy, but they are, and it does. About 30,000 people have signed up through a form on our site to be notified each time we create a new Circumventor site and mail it out, every 3 or 4 days. Agents of the blocking companies have joined the list too, of course, but we mail different sites to different subsets of the list. Now, an attack analogous to the attacks listed in the previous paragraph, would be for the censors to join under many different accounts, and then block any site that gets mailed to any of those accounts. But the catch is that when an address joins the list, a new site doesn't get mailed to that address until some random time in the future. So the censor has to check all of the fake Hotmail accounts that they've created, over and over, if they want to block all of the new sites as soon as they're released. Hardly impossible, but the censor can no longer use the instantaneous approach of: (1) enter the system / join the list / install the software; (2) see where it connects to and block those points of access; (3) repeat. (If we instantly e-mailed a randomly selected site to each new signup, then this attack would work.) By going from instant gratification to almost-instant-gratification, you change one of the conditions for the theorem stated in the previous paragraph, so that it no longer holds true. Still, like Tor and the DIT system, it could be blocked with a moderate amount of effort.

The Tor protocol, by the way, has been the subject of a great deal of sophisticated mathematical analysis, really brainy stuff that is beyond the scope of this article. But it's important to understand that that analysis focuses on the security of the Tor protocol for achieving anonymity. For anonymity, the protocol is very strong; for routing around censorship, it's fairly straightforward to defeat. That's not at all a criticism of the Tor developers; Tor was designed to achieve anonymity, and just turned out to work for beating censorship as well -- but only, of course, as long as the censors aren't making much effort to block it.

Which all leads to the obvious question: Why have the censors not bothered?

Nobody knows for sure, but I fear the answer is that the Chinese government and other censors know that the greatest weapon in their arsenal is not IP blocking, or keyword filtering, or even the threat of arrest. It's just apathy. The Chinese censors know what we anti-censorware developers in the free world keep forgetting: that most Chinese are not liberty-minded Jeffersonians chomping at the bit under the oppressive yoke of their government and waiting to be freed by circumvention software. As Michael Chase and James Mulvenon of the RAND Corporation put it in their report on Internet usage by Chinese dissidents, You've Got Dissent!: "[A]lthough some peer-to-peer applications... are designed specifically to combat censorship on the Internet and address privacy concerns, most Chinese Internet users are undoubtedly more interested in using peer-to-peer applications for entertainment purposes such as downloading MP3 music files." The censors know what Netscape knew when they fought tooth and nail against Microsoft including Internet Explorer on the desktop of every Windows machine: defaults matter. It doesn't matter that users can go to Netscape's site and download their browser, and it doesn't matter that users can access a banned site by installing a cool p2p program. Most people just don't.

When I first started working on the Circumventor, I assumed that since the Chinese Internet censorship bureau reportedly employed about 30,000 people, surely if they were already spending that much effort and money, they'd throw plenty of resources at defeating any new anti-censorship program, so the Circumventor would have to be able to withstand any such attack. But I was wrong. According to the RAND corporation paper, the censors have been quite busy, for example, policing political forums for dissident postings that other users might casually run into. But they apparently assume -- correctly, it seems -- that content doesn't pose much of a threat if users have to go out of their way and download a program to access it. And if the user has to have a friend outside the country to help them, then forget it.

This is not to downplay the enormous good that programs like Tor, Circumventor and Psiphon can do in bringing free speech to the people in censored countries who want it. But it's easy to forget that those often do not comprise a large part of the population.

One of the biggest disappointments for me came in May 2005 when I was looking for ways to get around the word filter on MSN China's blogging service. Microsoft, apparently acting on public relations advice from Lex Luthor, had decided to filter the words "freedom", "democracy", and "Taiwan independence" from the titles of blogs on MSN China. (I know, I know, they have to comply with Chinese laws to do business there. But I don't think the Chinese have actually outlawed the word "democracy".) Eventually I did find a loophole, so I searched on MSN for some Chinese blogs published by expatriates to ask them to help test the workaround for me. With a few exceptions, most of the bloggers were rather hostile, saying that they supported their government's efforts to censor the Internet and to stamp out Falun Gong as a dangerous "cult". (These were expats living in the U.S., so presumably they were not worried about the Chinese government sending a tank across the Pacific to run them over if they criticized the ruling party. Even if they thought they had to watch what they said because they might someday return to China, or because they still had family there, surely it would have been easier just to ignore me; the hostility that I encountered sounded genuine.) The moral is, no matter how much your movement believes in its efforts to help oppressed people, you can't just assume you'll be greeted as liberators (ahem).

So now you know most of what there is to know about the state of the art in anti-censorship software. It's just that there is less to understand than the hype originally suggests -- the programs aren't really secure, but they work because the censors aren't really trying. And there aren't any cool mathematical formulas that you can impress your friends with -- for that, you'll still have to go back to Applied Cryptography. It's a lot less impressive to be the Bruce Schneier of circumvention algorithms than it is to be the real Bruce Schneier.

Regular Slashdot contributor Bennett Haselton writes in to say "The December 1st release of Psiphon has sparked renewed interest in the various software programs that can help circumvent Internet censorship in China, Iran, and other censored countries. (Some of this interest undoubtedly being motivated by the fact that many of these programs also work for getting around blocking software at work or school.) Have you ever wanted to understand the science behind these programs, the way that mathematicians and codebreakers understand the magic behind PGP? If you loved the mental workout of reading "Applied Cryptography", have you ever wanted a tutorial to do the same for Psiphon and Tor and other anti-censorship programs?" The rest of his editorial follows.

Well, here's a primer, but you might be disappointed. Like making the Statue of Liberty disappear, it doesn't sound very cool once you know how it's done; the truth is that most anti-censorship programs, including mine, only work because the censors are not trying very hard.

(Note that I am going to be talking about ways that certain anti-censorship programs can be defeated. I don't believe that this is giving much help to censors, because these are obvious weaknesses that would occur to anyone who knows how the programs work. For reasons I'll get into at the end, I don't think these weaknesses actually make much difference.)

Basically, all anti-censorship programs fall into two categories: those that require you to have a helper outside of the censored country, and those that don't.

Take Psiphon. To use Psiphon, someone in a non-censored country has to install it on their home computer, which turns their computer into a Web server with an interface similar to Anonymouse.org, where you type in the URL of the page you want to view and it fetches it for you. The difference, of course, is that Anonymouse.org is widely known and blocked by any self-respecting Internet filtering system, while your newly created Psiphon URL pointing to your home computer is not blocked anywhere, yet. So if you set up a Psiphon URL on your computer in the U.S. and e-mail it to your friend in China, your friend can use it to surf wherever they want. (Note that this also has the desirable property that the person in China doesn't have to install any software, so they can use the URL even from a cybercafe computer with restricted user permissions.) The hurdle, of course, is that the person in China has to have a contact outside the country to help them. This is not a huge barrier for many Chinese, but it still means the program doesn't have the instant gratification property of something that you turn on and it just works.

Peacefire, by the way, had released the Circumventor program in 2003 which did essentially the same thing. (And the Circumventor was itself really just a wizard for installing a Web server with James Marshall's CGIProxy script, which deserves most of the credit, although the Circumventor did help bring it "to the masses", since most users don't have the ability to set up an SSL-enabled Web server themselves.) Psiphon made some improvements, namely:

• Ability to create password-protected accounts to restrict the URL to certain users.
• Smaller download (although it may not matter much since only broadband users would be installing it anyway).
• Ability to run on Linux. (Circumventor only works on Windows, although you can install CGIProxy on a Linux webserver if you know how.)

Circumventor has some of its own advantages, although they're the kind that could easily be incorporated into Psiphon soon:

• A wizard to help users forward incoming connections on their router and enter exceptions in software firewalls to make the software work. (If they want to. No tweaking people's firewall settings without asking them!)
• Slightly harder to block, due to some strategies such as using a different SSL certificate for each install (Psiphon uses the same one each time).

And both programs fall victim to the same attacks, although as far as I know, none of these have been implemented in practice:

• Blocking sites whose SSL certificates do not match the site hostname (easier for a censoring proxy server like the ones used in the Middle East, than for an IP firewall like the Great Firewall of China).
• Blocking outgoing Web connections to residential IP address ranges like Comcast.

But basically, they're the same program -- so the difference in press coverage has been illustrative of how much context matters to reporters. Psiphon is the "politically correct" version -- they've played down the fact that it can be used to get around blocking software in schools and played up the fact that it can be used to beat the censors in China and Iran, and the press coverage has focused exclusively on that human rights aspect. The Circumventor was also written to help foreign victims of censorship, and articles have been written about its uses for that purpose, but I've also been unapologetically promoting its use to get around blocking software at home and in school, as part of an advocacy for greater civil rights for people under 18. (Also because the more installations there are in the U.S., the more it helps users abroad.) As a result, some of the TV news pieces about it have used such ominous music and lighting that they practically looked like recycled footage from "To Catch a Predator". Of course, Psiphon can be used for exactly the same thing. (I also emailed some of the reporters who recently wrote about Psiphon, to tell them about Circumventor; so far, I haven't heard back from any of them, but I doubt they're being politically correct this time, I think they're just not thrilled that C-Net scooped them by three years and seven months.)

So, Psiphon and Circumventor fall in the first category -- programs that only work if you've got a contact outside the censored country to help you. In the second category is Tor, which was originally written to provide mathematically secure anonymity, but had the nice property that it could be used to get around the Great Firewall of China as well. With your browser in China using Tor as a proxy, packets are routed to other Tor nodes outside the country, which connect you with any blocked Web site that you want to see. Best of all, you just install it on a machine in China, and presto, it works, no nagging your expat cousin in the U.S. to install something on their computer to help you. Dynamic Internet Technologies, run by Chinese dissident Bill Xia in North Carolina, runs another service that works "out of the box" -- you send an instant-message to one of the DIT screen names, and it replies with a list of currently running Web proxies. (Bill has asked me not to publicize the actual screen names that perform this service, because it's intended only for Chinese users. I think that's a case of "security through obscurity", but I respect his wishes.)

Unfortunately, all such "instant gratification" solutions have the same basic weakness, which by a simple argument can be extended even to hypothetical future programs in the same category. In the case of a program like Tor, the censor only has to install the software, look at what IP addresses the software connects to when it bootstraps itself, and add those IP addresses to the blacklist. Even if the software chooses at random from multiple IP addresses to bootstrap to, the censor can still obtain all of them by repeatedly re-installing the software (possibly wiping the machine each time so the software can't tell that it's been installed before). No matter how you slice it, if Alice the legitimate user and Bob the censor download the program on the same day, Bob can make the program not work for Alice if he updates the blacklist quickly enough. He doesn't even have to reverse-engineer the software, he just has to use a network sniffer to see where it connects to. (For DIT's proxy-by-instant-message system, the censor can instant-message the screen name repeatedly, from different accounts, until they've collected and blocked all the available proxies; this would be analogous to re-installing Tor repeatedly and seeing what IPs it connects to.)

Peacefire has produced other approach which is a simple, obvious idea, and it was quite by accident that we found out it slips through the cracks of the seemingly "unsolvable" problem with instant-gratification outlined above. Like the other solutions, it works only as long as the censors are fairly lazy, but they are, and it does. About 30,000 people have signed up through a form on our site to be notified each time we create a new Circumventor site and mail it out, every 3 or 4 days. Agents of the blocking companies have joined the list too, of course, but we mail different sites to different subsets of the list. Now, an attack analogous to the attacks listed in the previous paragraph, would be for the censors to join under many different accounts, and then block any site that gets mailed to any of those accounts. But the catch is that when an address joins the list, a new site doesn't get mailed to that address until some random time in the future. So the censor has to check all of the fake Hotmail accounts that they've created, over and over, if they want to block all of the new sites as soon as they're released. Hardly impossible, but the censor can no longer use the instantaneous approach of: (1) enter the system / join the list / install the software; (2) see where it connects to and block those points of access; (3) repeat. (If we instantly e-mailed a randomly selected site to each new signup, then this attack would work.) By going from instant gratification to almost-instant-gratification, you change one of the conditions for the theorem stated in the previous paragraph, so that it no longer holds true. Still, like Tor and the DIT system, it could be blocked with a moderate amount of effort.

The Tor protocol, by the way, has been the subject of a great deal of sophisticated mathematical analysis, really brainy stuff that is beyond the scope of this article. But it's important to understand that that analysis focuses on the security of the Tor protocol for achieving anonymity. For anonymity, the protocol is very strong; for routing around censorship, it's fairly straightforward to defeat. That's not at all a criticism of the Tor developers; Tor was designed to achieve anonymity, and just turned out to work for beating censorship as well -- but only, of course, as long as the censors aren't making much effort to block it.

Which all leads to the obvious question: Why have the censors not bothered?

Nobody knows for sure, but I fear the answer is that the Chinese government and other censors know that the greatest weapon in their arsenal is not IP blocking, or keyword filtering, or even the threat of arrest. It's just apathy. The Chinese censors know what we anti-censorware developers in the free world keep forgetting: that most Chinese are not liberty-minded Jeffersonians chomping at the bit under the oppressive yoke of their government and waiting to be freed by circumvention software. As Michael Chase and James Mulvenon of the RAND Corporation put it in their report on Internet usage by Chinese dissidents, You've Got Dissent!: "[A]lthough some peer-to-peer applications... are designed specifically to combat censorship on the Internet and address privacy concerns, most Chinese Internet users are undoubtedly more interested in using peer-to-peer applications for entertainment purposes such as downloading MP3 music files." The censors know what Netscape knew when they fought tooth and nail against Microsoft including Internet Explorer on the desktop of every Windows machine: defaults matter. It doesn't matter that users can go to Netscape's site and download their browser, and it doesn't matter that users can access a banned site by installing a cool p2p program. Most people just don't.

When I first started working on the Circumventor, I assumed that since the Chinese Internet censorship bureau reportedly employed about 30,000 people, surely if they were already spending that much effort and money, they'd throw plenty of resources at defeating any new anti-censorship program, so the Circumventor would have to be able to withstand any such attack. But I was wrong. According to the RAND corporation paper, the censors have been quite busy, for example, policing political forums for dissident postings that other users might casually run into. But they apparently assume -- correctly, it seems -- that content doesn't pose much of a threat if users have to go out of their way and download a program to access it. And if the user has to have a friend outside the country to help them, then forget it.

This is not to downplay the enormous good that programs like Tor, Circumventor and Psiphon can do in bringing free speech to the people in censored countries who want it. But it's easy to forget that those often do not comprise a large part of the population.

One of the biggest disappointments for me came in May 2005 when I was looking for ways to get around the word filter on MSN China's blogging service. Microsoft, apparently acting on public relations advice from Lex Luthor, had decided to filter the words "freedom", "democracy", and "Taiwan independence" from the titles of blogs on MSN China. (I know, I know, they have to comply with Chinese laws to do business there. But I don't think the Chinese have actually outlawed the word "democracy".) Eventually I did find a loophole, so I searched on MSN for some Chinese blogs published by expatriates to ask them to help test the workaround for me. With a few exceptions, most of the bloggers were rather hostile, saying that they supported their government's efforts to censor the Internet and to stamp out Falun Gong as a dangerous "cult". (These were expats living in the U.S., so presumably they were not worried about the Chinese government sending a tank across the Pacific to run them over if they criticized the ruling party. Even if they thought they had to watch what they said because they might someday return to China, or because they still had family there, surely it would have been easier just to ignore me; the hostility that I encountered sounded genuine.) The moral is, no matter how much your movement believes in its efforts to help oppressed people, you can't just assume you'll be greeted as liberators (ahem).

So now you know most of what there is to know about the state of the art in anti-censorship software. It's just that there is less to understand than the hype originally suggests -- the programs aren't really secure, but they work because the censors aren't really trying. And there aren't any cool mathematical formulas that you can impress your friends with -- for that, you'll still have to go back to Applied Cryptography. It's a lot less impressive to be the Bruce Schneier of circumvention algorithms than it is to be the real Bruce Schneier.

Bennett Haselton has another article on offer for us today, this time looking at the implications of a Canadian initiative to protect children online. Bennet writes: "Cybertip.ca, a Canadian clearinghouse for providing information to law enforcement about online child luring and child pornography, has announced that a group of major ISPs will begin blocking access to URLs on Cybertip's list of known child pornography sites. A Cybertip spokesperson says that the list fluctuates between 500 and 800 sites at any given time." Read on for the rest of his analysis. The system is named after a similar filtering system used by service provider BT in the UK. It is also reminiscent of a law passed in Pennsylvania in 2002 requiring ISPs to block URLs on a list of known child pornography sites; the law was struck down in 2004 on First Amendment grounds. Although child pornography is of course not protected by the First Amendment, the law was struck down partly because the ISPs were blocking entire servers and IP address ranges, hundreds of thousands of non-child-pornography sites were also being blocked.

Under the implementation of the Cleanfeed system, representatives from Sasktel, Bell Canada, and Telus claim that only exact URLs will be filtered, not sites hosted at the same IP address. (Although conventional Internet filtering programs sold to parents and schools have also made the same claims, only to turn out to be filtering sites by IP address after all, so we'll have to wait until the filtering is implemented before we know for sure.) The other difference of course is that the Cleanfeed system is not the law, so there's nothing to "strike down" in court. Cybertip did acknowledge that this means customers can get around the filtering for now by switching to a non-participating service provider, although they are encouraging more providers to sign up. Cybertip declined to say whether any providers had simply refused to participate. But of course it's much easier than that to get around the filter, since filter circumvention sites like Anonymouse and StupidCensorship will not be blocked.

So, if it's that easy to circumvent, does it do any good? Even respected Canadian academic and columnist Michael Geist, hardly a friend of censorship in other forms, has spoken out in favor of the plan. I'm going to go out on a limb and say that it doesn't accomplish anything meaningful, and may set a horrible precedent that could make it much easier to block other content in the future.

First of all, it seems that it obviously won't stop anyone who is deliberately looking for child porn. Empirically there's no way to tell -- we don't whether systems like Cleanfeed in the UK have prevented people from accessing child pornography on purpose. Even if the providers are counting the number of blocked accesses to known child porn sites, nobody knows what people have been looking at instead through proxy sites like Anonymouse. All we can do is ask, logically, whether it is likely to work. I think purely logical arguments are frustrating when there is no empirical data to act as a referee, but let's face it, users are not going to self-report on their success at finding child pornography, and there's no way to see what users are accessing through encrypted circumvention sites. Logic is all we have.

So, consider people who are deliberately looking for child pornography. Such people are likely to be resourceful to begin with (since real child porn -- remember, non-sexual pictures of naked children do not count -- is vastly less common than regular porn; Cybertip claims after all that they "only" have about 800 sites on their list, compared to millions of regular porn sites). Virtually all such people would be aware of circumvention sites like Anonymouse, or of peer-to-peer networks, which Cybertip says they have no plans to block. So nothing is blocked from people who want to get around the filter.

The only scenario where the filters could make a difference is the case where someone accidentally accesses a child porn site. Now when I first read the Cybertip press release announcing that the filter would aim to stop "accidental" exposure to child porn, I thought that was just a tactfully sarcastic way of referring to the people who get caught accessing child porn and claim it was just a mistake. But Cybertip.ca claims they've received over 10,000 reports since January 2005 from people who accessed child porn by accident. Even though that only works out to about 15 per day, I have to concede in those cases it almost certainly was a bona fide mistake, for the simple reason that nobody would voluntarily report accessing a child pornography URL that they visited on purpose. But even so, there's the question: What have you accomplished by blocking accidental exposure?

I would argue that the harm done by child pornography is to the minors coerced into the production of it, not to the people who view it. (This, by the way, corresponds with current U.S. jurisprudence; the U.S. Supreme Court ruled in 2002 that a law banning fake child porn was unconstitutional, even when the viewer can't tell the difference.) Obviously you prevent the most damage by stopping child porn at the production stage, but if it's too late for that, you can try to stop people from obtaining it willfully. This lowers the demand and decreases the incentive for people to produce more in the future.

But how would it lower demand if you block people from accessing it accidentally? If those people weren't going to proceed to buy or download more pictures anyway, then they're not fueling the demand. You can block them from accessing the pictures, but the pictures are still out there, and the people who really are fueling the demand can still access them.

So it seems that by blocking someone from accidentally viewing child porn, all you've really accomplished is to avoid offending their sensibilities. Now I don't mean that mockingly, I'm certainly not disagreeing with anyone whose sensibilities are offended by child porn. But there are lots of graphic pictures on the Internet that could offend someone's sensibilities, which are outside of Cleanfeed's mandate. Consider a photo of a 16-year-old having sex, versus a photo of an adult woman fellating a horse; even though the former is illegal to possess and the latter isn't, I think most people would be more grossed out by the second one. (I would even argue that there was more harm to the participants in the making of the second one, and in this case the law's priorities are a bit screwed up. Poor horse!)

So, why block 1% of the content that would offend someone's sensibilities, when 99% of the content that would still offend that person would still be out there? The fact that the 1% is illegal doesn't answer the question; even if it's illegal, you don't have to block it, so what have you accomplished if you do?

Possibly law enforcement is sick of people using the "I accidentally clicked on it" excuse when they get caught accessing child pornography, and wants to remove that as a defense. But couldn't someone just as easily claim that they "accidentally" accessed child pornography through a circumvention site like Anonymouse? They could claim that they thought they were accessing a regular porn site, they were using a circumventor to protect their privacy, and they didn't know that the site carried child porn and didn't find out until they'd already accessed it. So it doesn't seem like the filtering would remove the "accidental" defense.

So, I don't think the filtering accomplishes much at all, but it could set a very bad precedent once the filters are in place. Once Internet users have accepted the precedent that ISPs should block content that is "probably" illegal, what's to stop organizations and lawmakers from demanding that ISPs block access to overseas sites that violate copyright, for example, as the RIAA did in 2002? The technical means will already be in place, and more importantly, people will have gotten used to the idea that legally "questionable" content should be blocked. And with lobbyists claiming that 90% of content on peer-to-peer networks violates copyright laws, wouldn't it follow logically to block peer-to-peer traffic as well?

In a legislative climate where lawmakers have proposed everything from jail time for p2p developers to letting the RIAA hack people's PCs for distributing copyrighted files, we should resist any kind of content-based blocking that would let them get their foot in the door. That includes even well-intentioned efforts like Cleanfeed.

An anonymous reader writes "UK Home Secretary John Reid has urged a ban on computer-generated images of child abuse, including cartoons. The Register asks if this would criminalize role-playing gamers, and what about Hentai? Currently, such images may be illegal to publish under the Obscene Publications Act, but they do not come under child pornography laws. The attempt to criminalize possession of virtual images mirrors the attempt to criminalize possession of 'extreme porn' which would also include fake images, as well as photos of simulated acts involving consenting adults (as discussed on Slashdot). A petition on the Government's new website urges an end to such plans."

An anonymous reader writes "UK Home Secretary John Reid has urged a ban on computer-generated images of child abuse, including cartoons. The Register asks if this would criminalize role-playing gamers, and what about Hentai? Currently, such images may be illegal to publish under the Obscene Publications Act, but they do not come under child pornography laws. The attempt to criminalize possession of virtual images mirrors the attempt to criminalize possession of 'extreme porn' which would also include fake images, as well as photos of simulated acts involving consenting adults (as discussed on Slashdot). A petition on the Government's new website urges an end to such plans."

Much like the deleted content from KOTOR 2, Xbox 360 fanboy has word that Star Trek: Legacy's storyline has been cut as well. Derek Chester, a writer for the game, spoke up on the official boards for the game: "[Forum poster] Star Dagger is correct, a lot of what was intended was cut. From rendered cinematics and interstitial cutscenes to a great deal of backstory and events that took place between the eras to tie them together. The total portrayal of the intended story was incomplete. Dorothy and I wrote a lot for this game...but not everything made it in. As a result there may be some difficulty in following the motivations for characters or the reasons for crucial events. The story as was written, tied together a great deal of Trek history and events to make it seem more substantial than it came across in the final game."

h2g2bob writes "VideoLAN yesterday released a new version of VLC media player. A shout out goes to ffmpeg for many of the codec improvements." From the blurb: "Building on feedback from the 29 million downloads of VLC media player 0.8.5, we bring you version 0.8.6 with many bugfixes, as well as a couple of new features we think you will truly enjoy. Most prominent are probably Windows Media Video 9 and Flash Video. Other important changes are improved H.264 decoding, better Windows Unicode support, a Fullscreen controller, and Apple Remote support for Mac OS X."

eldavojohn writes "Recently, a new discovery has been made explaining how & predicting when space weather occurs. Hopefully this will allow us to predict when and where these extreme forces of magnetic flux occur so that we can prepare to repair satellites or shut them down for safety reasons. Recent activities on the sun have surprised scientists including the explosive "solar tsunami" that happened last week. From the article, "The new study shows that the Northern Lights, also called aurora, and other space weather near Earth are driven by the rate at which the Earth's and Sun's magnetic fields connect, or merge, and not just by the solar wind's electric field. The merging occurs way out in space, at a spot between the Earth and Sun, roughly 40,000 miles above our planet's surface. Researchers have now developed a formula that describes the merging rate of the magnetic field lines and accurately predicts 10 different types of near-Earth space weather activity, such as the aurora and magnetic disturbances.""

eldavojohn writes "Recently, a new discovery has been made explaining how & predicting when space weather occurs. Hopefully this will allow us to predict when and where these extreme forces of magnetic flux occur so that we can prepare to repair satellites or shut them down for safety reasons. Recent activities on the sun have surprised scientists including the explosive "solar tsunami" that happened last week. From the article, "The new study shows that the Northern Lights, also called aurora, and other space weather near Earth are driven by the rate at which the Earth's and Sun's magnetic fields connect, or merge, and not just by the solar wind's electric field. The merging occurs way out in space, at a spot between the Earth and Sun, roughly 40,000 miles above our planet's surface. Researchers have now developed a formula that describes the merging rate of the magnetic field lines and accurately predicts 10 different types of near-Earth space weather activity, such as the aurora and magnetic disturbances.""