Slashdot Mirror
Symantec Tries to Censor Criticism
Let's first get the facts straight. Peacefire has not posted copyrighted material. It has posted code to decrypt I-Gear's encrypted blacklist. This is exactly like the DeCSS case, except the goal is criticizing a product instead of space-shifting movies.
The criticism here is that 76% of the .edu-domain blocks are wrong. This is a huge number. This suggests that, for every time the product blocks you from offensive material at an .edu Web site, there are three other times it blocked you from perfectly ordinary material.
While there are some people (like Bruce Taylor of the National Law Center for Children and Families) who would like to deny it, nobody's making this stuff up. Censorware really does suck. In fact, Peacefire did the same thing to X-Stop, another blocking package, two weeks earlier, and found a 68% .edu error rate. (But its maker hasn't threatened to sue. Yet.)
So what did Peacefire learn about I-Gear? A description of a milking machine system written in Spanish - blocked. Tricks for a flight sim game - blocked. A page entirely in Latin - blocked. Volumes 4 and 6 of "Decline and Fall of the Roman Empire" - blocked (but you can still read Volumes 1, 2, 3, and 5, go figure).
Furthermore, Peacefire revealed that Symantec is apparently violating its privacy policy by sending information to its servers without telling the user. Your Windows-registered "real name" and "company name" secretly get sent back to Symantec.
You may recall Haselton's Slashdot story "Keep it Legal to Embarrass Big Companies," from two weeks ago. He wondered if these kinds of pressure tactics would be the response to his efforts. It's already started.
The legal issue appears to be whether Symantec's End-User License Agreement (EULA) can contain a clause prohibiting reverse-engineering - and whether that clause can be enforced. UCITA will be the thousand-pound gorilla here, providing real legal muscle behind onerous EULAs. Fortunately, the current legal situation is more iffy, and cnet's story talks about that a little.
Symantec wants to distribute I-Gear only on the condition that nobody looks under the hood or says anything bad about it. And UCITA would back that up - by sending people like Haselton to jail for revealing products' flaws.
And then there's the question of why Symantec is using lousy crypto in the first place. As KnobDicker concludes: "Rather than being thankful that Haselton has conducted testing and work that they should have done themselves in the first place (for *free*), Symantec is crying in their beer and threatening to break out the lawyers to quash the bad press. Chalk up another one for the Open Source model's system of thorough peer review instead of development in a proprietary vacuum."
I urge everyone who supports anti-censorship causes like this one go to the PeaceFire site and buy a t-shirt and give a donation. The last time PeaceFire was featured in an article a number of people bought shirts, but nobody made a donation. Bennett is not making money off the t-shirt sales. Giving a little, even just $US5-10 would be helpful, and would bring the price of the t-shirt up to what you'd normally see.
----------
"And I thought 'Reverend Billy
Remember when Sony filed suit against Connectix for essentially the same thing? End result was Sonly lost because the court of appeals stated that Connectix was in compliance with the DMCA and that this use of reverse engineering is protected under fair use.
More race stuff in one place,
than any one place on the net.
At least, I'm not suprised. Symantec has lots of money and lawyers, and they are the average petulant company, pissed that someone isn't playing exactly by their rules.
Some of you may recall that Solid Oak Software has threatened Peacefire in the past. Hell, Solid Oak has even mail-bombed detractors and has recompiled their CYBERSitter software to generate a fake error message if it finds peacefire.org in your browser cache on install. Don't be suprised if Symantec does equally vile things to their consumers. After all, censorship is vile business. Certainly, there is no reason for this attack on Peacefire other than to "get even" for questioning their "moral" authority.
The only thing we can hope for is that this will result in a win for Peacefire. Otherwise, get ready for Big Brother in full effect...
-- Count Spatula: The Culinary Vampire "...because my cooking sucks."
One large arguement I see from many of you is that censor proxies have too many valid sites blocked. Well, how about taking the Open Source/distributed.net approach? I know there are some for squid. How about a system where each morning/once a week/whatever a group of moderators are sent URLs to check up on. They do so, trying to determine if it's some directory, or the whole domain that gets listed. If there is porn (a set of standards would have to be established), they report back and it's added to the blacklist. I know I would be willing to take a few minutes every once in a while to do so. You could have a whole system of checks on the web site, if someone doesn't agree with a blacklisting, it's sent to two or three moderators and if they don't agree it's removed. If someone finds a new porn page, they can submit it and it's added to the queue. If there were hundreds of moderators, like Debian does with it's packs, each individual has only a small workload.
Then every week or so the HQ web site puts out a new blacklist. We can have all kinds of easy update utils to help those not squid-knowledgable, and some folks could make a Windows application to do it for those folks as well. Heck, if the existing censorware's methods are decrypted like this one, we could write utils to encrypt it again and drop it in to their directory.
I'm not going into whether you like blacklists or not, so let's keep these to ways of doing it correctly, since these other prorgams don't seem to do it very well. Using an open source list, and appropriate means of rectifying errors, we can do it properly.
There is no implication that a similar number of .com sites are blocked. The only way to determine that is to do what Peacefire did with .coms.
.edu is a good target for Peacefire are: .edu sites must be relatively good-- .com has too many sites, and too many lousy/ trivial sites, to be a good test subject. Sure, there are lots of pointless student homepages, but most students don't have time to completely fill up their 5 MB with pictures of their friends. Moreso, .edus must have very strict rules governing what students can put up-- most student-run porn sites on a Uni server will go down really quickly. Finally, .edu sites tend to be well-indexed by search engines, including their own internal engines (meta-crawlers get a lot of .edu hits). .edu blocked.
.edu. That's what Internet 2 is supposed to be-- returning the bandwidth to .edu and .gov. So, it seems reasonable to plant the battle flag on .edu
The reasons
1) k12.edu sites often have pages made for group projects by kids under 18, the ones who are supposedly being protected.
2) These same kids will probably end up looking at university sites (or the Smithsonian, if their project is on George Lucas's use of mythology...blah) for those same projects. Doing a report on Diocletian? Go to that Calvin College site and grep (or "find" in Netscape) for his name. Unless, that is, the pages are blocked.
3) The signal/noise ratio on
4) If you are out to Prove Something, like Peacefire, Greek and Roman histories/ literature translated into English SGML are valuable statistics-boosters. I haven't gotten to Vol. IV of Gibbon yet, but I would venture that any good translations of Sophocles's plays have frequent use of words like "bitch." Despite this, who's going to argue that high schoolers shouldn't read Sophocles? (Thomas Bowlder would, but he's dead.) It's very convincing to point a figure at the percentage of
Remember that, at least according to the Al Gore types, the Big Use for the Internet is
--Kevin T.
Even if you had 95% accuracy (which is far, far better than anything on the market actually achieves), there would still be an unacceptable number of unblocked sites and mistakenly blocked sites. Let's assume there are 10,000,000 web sites; under a given rating system, 1,000,000 are blockable, and 9,000,000 are permissable. With 95% accuracy you would have 50,000 sites that should be blocked that are not, and 450,000 sites blocked that shouldn't be.
What really makes me scratch my head is why adult-oriented sites provide links to the various censorware sites. Webmasters, particuarly adult webmasters, should be the LAST people on the planet to lend legitimacy to these snake-oil salesmen and wanna-be thought police.
The internet is an amazing resource. Like the real world, cyberspace has much to offer; some of it appropriate for children, some of it not. Parents need to be educated that they need to supervise their children in cyberspace just as much as they do in meatspace. If people spent half as much money and effort promoting parent education as they did promoting ineffectual censorware, they might actually achive their stated goal of protecting the children. Unfortunatly, for most of these people "protecting the children" is a merely convienient cover for their real agenda of forcing their religious beliefs down everyone else's throats.
"The axiom 'An honest man has nothing to fear from the police'
Why is it that the proponents of "one nation under God" are so eager to get rid of "liberty and justice for all"?
(I know, it's miles off-topic, but still a good story.)
Much Love,
"S"HM
*****
(I refuse to spellcheck out of contempt for your belief system)
Maybe they do have something to hide?
Did you read Peacefire's site? According to them:
And the pro-censorship response?
Oh, God, what an idiot. There are so many things wrong with that statement, I don't know where to begin!
"Prejudice is wrong; you should hate everyone the same."
OK, I now I'm really begining to wonder. One of the pages that was censored was 75k of latin (at least according to the description). Well, being a latin major I was intrigued and decided to check this out. It turns out that this is part of the Confessions of St. Augustine, perhaps one of the most famous theologans in christianity!!! The rest of the corpus is located in the same directory, but apparently not blocked either, but I still find it quite humorous that Symantech thinks St. Augustine to be worthy of censorship. Must be Calvanists and Lutherans, only plausible explanation. :-)