Slashdot Mirror


Censorware Blocking Methods Using Akamai

Snatch Freedom writes "Peacefire has discovered a way to block censorware using Akamai's servers. For example you can see Yahoo! using http://a1.g.akamaitech.net/6/6/6/6/www.yahoo.com/. C|Net had a story about. Censorware cannot block akamai; that will piss off all the advertising people. Akamai says (in the cnet story) that they are not in the filtering business and they won't block anything. The makers of ``Bess'' wan't Akamai to filter it but Akamai says no. "

22 of 233 comments (clear)

  1. Broken link by scrutty · · Score: 4
    The block censorware link is mistakenly a link to the forbes "computer of the future" lamefest.

    --
    -- Oh Well
  2. "Akamai says no" by laborit · · Score: 4

    I'm not sure Akamai's refusal to implement blocking is so much "saying no" as "lauging their asses off." As far as I can tell, any solution to this problem would require Akamai to 1) engage in performance-degrading communications to ensure there's no blocking software on the computer making a request or 2) set up blocking software itself. And even with 1) there's always proxying...

    So I'm pretty sure N2H2 goes on the clueless buffoon list for this one. This makes about as much sense as a parent going to congress and telling them the networks can't show sexual content because he's afraid his kid might see it. And it has about as much chance of... oh.

    Well, as long as the government doesn't get involved, it's still stupid.

    - Michael Cohn

    --

    -----
    Go ahead, blame me... I voted for Nader!
  3. Its the devils work :-) by MacRonin · · Score: 3
    It must be the devils work, look at all those sixes. The mark of the beast is on "Free Speech"

    I hope it works with other address, or the religious zealots are going to have a field day.

    BTW For the humor impaired. This is a joke :-)

  4. Far better way by GavK · · Score: 3
    Try using babelfish...

    Translate from Polish to english, or some other permutation...

    Gets mildly mangled, but beats the censorship remarkably well...

    --

    Gav

    "There's no such thing as data that can't be manipulated"

  5. Update: Later article say Akamai WILL fix by Seth+Finkelstein · · Score: 5
    Akamai acknowledged today that the technique is effective but said it would be short-lived.

    "Akamai has a lot of mechanisms in our system that would render this approach ineffective immediately," said company representative Jeff Young. "Akamai will shut down the delivery of content that is accessed in this way, so users that would follow these instructions would very quickly be served broken images and downed sites."

    http://dailynews.yahoo.com/h/cn/20000822/tc/akamai _caught_in_net_filtering_cross-fire_1.ht ml
    1. Re:Update: Later article say Akamai WILL fix by Anonymous Coward · · Score: 5
      This has been going on forever. Akamai has known about this hole since they started. I can tell you for a fact that their "fix" will be to block sites that people complain about being able to reach via Akamai. You will still be able to Akamaize other sites that have not been blocked.

      Another interesting note: You can charge your free Akamaization to whichever customer you want. For example, visit CNN and get an Akamaized URL: http://a388.g.akamai.net/7/388/21/866499aaf3f4c0/w ww.cnn.com/images/hub2000/main/cnn.com.l ogo.gif . Strip out everything after the first 4 numbers, and replace with your site of choice.

      You now have http://a388.g.akamai.net/7/388/21/866499aaf3f4c0/s lashdot.org/ . Congratulations, you just viewed Slashdot and placed it on CNN's bill! Play around with the numbers. I've found that the long number can be safely changed to 0; the other numbers control which customer is charged, and perhaps some other variables.

    2. Re:Update: Later article say Akamai WILL fix by Anonymous Coward · · Score: 3
      Note that Slashdot uses a lot of absolute links. So the images and links will not be Akamaized. But for any site out there that uses relative images, you can Akamaize the whole thing for free!

      Imagine what would happen if there was a rogue version of Gnutella that prepended an Akamai URL to every advertised local file URL. None of the normal Gnutella clients would need to be changed, they'd all access the content fine I think. But the whole network would be sped up because lots of content would get cached for free by Akamai!

  6. The real solution to protect children online (OT) by b0z · · Score: 5
    Parents, teachers, etc need to get off their fat lazy asses and pay attention to what their kids are doing.

    The internet should not be censored to "protect" anyone. If you don't like your kids seeing porn online, then you should stop them. Teachers should do the same. Review the history files afterwards also just in case, and let them know ahead of time you are going to check what sites the kids visited. I know that won't work against everyone but nothing is fullproof. Especially censorware.

    It all goes down to our society not wanting to be responsible for anything. Parents want to blame video games, tv, the internet, music, etc. for how they fail to keep their own children in line. Smokers commit slow suicide by putting fire into their lungs, then sue tobacco companies because these people are too stupid to know better.

    Sometimes I wish that some people would help us all out by killing themselves. If you feel that you can't be live up to any of your responsibilities and just want to cry how the world has done you wrong, jump off of a tall building...it should be great! You will leave your impression on the Earth, and we will all be thankful to have one less semi-hairless monkey jumping around and screaming about everyone offending and hurting them.

    Ok, back on topic a bit more. I wonder how many other sites like this will prevent censorware from working. I was shown something yesterday that triggers censorware that is completely innocent:
    This tip is sure to not work.
    Various censoreware programs don't like it. Let's look at it again through their eyes:
    This tiP IS Sure to not work.

    It's pretty interesting...but shows how ineffective this type of software is.

    --
    Mas vale cholo, que mal acompañado.
  7. Somehow I don't feel sorry for Bess... by Tyriphobe · · Score: 4
    given the incredibly high-tech, complex programming they had to do to work around this problem. From the article:

    Fink said N2H2 had devised its own fix to the problem. That patch would detect Web addresses included in Akamai URLs and filter based on those nested addresses. It will ship with the next version of Bess.

    Woah... you mean, like, parse the rest of the URL? Dude, no wonder you're CTO.

    1. Re:Somehow I don't feel sorry for Bess... by jesser · · Score: 3

      Wonder whether they'll remember to also check for %-encoded URL's...

      lol

      i got kicked out of my school library for finding that hole and reporting it. funny thing is, i later found out i had signed something saying something to the effect of "if you find a security hole in our internet software, you are to report it asap" in order to be allowed to use the school library's computers.

      --
      The shareholder is always right.
  8. Caveat by Stavr0 · · Score: 3

    Works nice, but it doesn't translate the links. Therefore all pictures are broken, and any link clicked will take you to the nice "access denied" screen of your favorite censorware.
    ---

  9. Filter Content, not Sites by dingbat_hp · · Score: 4

    OK, so this is an egg-sucking lesson for all you Slashdot grannies out there....

    Site-based filtering is broken . This is just yet another instance of it. Proxying the content through another unblocked site (like this Akamai example) will blow holes in it. Blocking Yahoo (and anything else sufficiently generic) because they also link to Scunthorpe.gov.uk, as well as to the Baptist Church Choir, will shut out large valuable parts of the Net -- you might as well burn your modem.

    If you don't like the content on the web, then filter on the web content by all means. Let's see PICS rating more commonly used. If you really have an issue with wanting a government imposed central filtering scheme, then pass yourself a law in your country that makes rating schemes mandatory (or you'll be defaulted to XXX). The problem of "keeping the kiddies safe" then defers to browser operators (those who put browsers in the hands of the kids). Set your home browser however you like (they're your kids) and let local communities set the standards for locally-funded institutions like schools and libraries. If you don't like the library filters, because you live in a straight-laced town, then don't complain to the democratic group who paid for it and chose the settings, just buy your own web time.

    Don't forget that PICS is a framework for rating systems, not a rating scheme itself. I'd like to see a PICS Hippy-Lovechild rating scheme where free-love and pot sites were rated OK, but accountancy was a major no-no. Build a Tennessee rating scheme if you want, where sex outside a married family is forbidden, but it's OK with your sister (or even yer dawg). Custom rating systems are a fine way to build an "Islamist web", where followers of one set of moral values are perfectly at liberty to define their own standards, implement them on their own set of relevant sites, and neither I nor they will offend each other with moral conflicts.

    This might even be a way for eBay to get round the "not selling Nazi relics in France" problem.

    Confusing content with location is just never going to work right.

    1. Re:Filter Content, not Sites by DrgnDancer · · Score: 3

      You should put them in the hands of everyone who grants access to the web (I buy my kids a web browser, the local community funds a library, a mosque provides a "safe" browsing environment for those who share their moral outlook).

      Sorry. Gotta disagree. There should absolutely not be filters installed in local libraries. The Mosque example is fine, that is a religious establishment and should therefore be under the control of religious authorities. I may disagree with those authorities, but it's their Mosque. If I don't like it I can leave. Libraries are a differnt matter. They are publicly funded and serve one purpose. Research. A filtered net access is contrary to this goal in several ways:

      1. Formost is the fact that "Community standards" are pretty broad things. Some parents object to their children being able to access information on Wicca. Should that be blocked? (if answer=="Yes" println "Irate Wiccan: You are blocking information that I and my children use for our religion"; elseif answer=="No" println "Irate right wing Christian: You are exposing my children to cults and Satanism";) While we could probably all agree that besiality sites should be blocked, human nature is such that once blocking begins, it will quickly become standard to add other "Offenesive" topics to the list. "Well we already block porn, and most of the community feel that sex education does not belong on the web either. Let's just add that."

      2. Filtering software, as has often been pointed out in this forum, sucks. It is unacceptable, in a place dedicated to reserch, that I might be unable to reach information on breast cancer or AIDs because it contains "bad" words. What may be an acceptable crippling for home use ("Mom, the filter is blocking an article I need for school, can you turn it off?") is unreasonable in a publicly funded store house for knowledge ("Excuse Mr. Overworked Buerocrat, but if it's not to much trouble, and when you are done helping all these other people, could you modify the filtering software to allow the folllowing list of benign sites, which I understand you will have to veiw and check out before making any changes? I'll just sit here and wait a few hours, thank you.")

      3. The question of what level of filtering is appropriate is unanswerable. Should we treat the computers like young children will be using them? Like teenagers will be? Obviously some things approriate to teenagers are not appropriate to ten year olds. Who should we cater to? If we cater to teenagers, then you are limiting adults and not really protecting small children. If you cater to small children then you are limiting your web access to a fraction of the sites on the net, and dooming library employees to a Hell of making exceptions to the rules for special cases.

      The simple way to monitor library internet access is to simply put the computers where the librarian can see them. If someone does something truely offensive, they can be ejected. Filtering software should not be placed in libraries. They are publicly fund (hence covered by the first amendment) and their primary purpose (the pursuit of knowledge) would be critically hampered by the crap most of these companies are peddling.

      --
      I don't need a million points of light, just two points of multi-mode fiber and a 10 Gig-E router.
  10. isn't it a parenting issue..... by bdavenport · · Score: 5

    This makes about as much sense as a parent going to congress and telling them the networks can't show sexual content because he's afraid his kid might see it.

    this was the exact issue that popped in my mind as i read these articles. i don't want to sound like jon katz or get on a stump, but...

    is it only me who recognizes that PARENTS today want to use technology to cover the gaps in their role as a parent? ultimately, any control placed to hamper web sites loading can be over come - save one: how about the parents take some responsiblity and turn off the PC?

    yeah, yeah. i've heard it before. "we work." "we can't police our children 24/7." "society should set some acceptable norms for all to live by." etc. etc. etc.

    look, if you have children, you made a CHOICE to propigate your family linage (and don't give me that bullshit about 'accidents.' there are no accidental births - what did you think the act of sex might result in? free beer?) it is your responsiblity to raise your child. if work gets in the way - well maybe you need to quit your job.

    QUIT MY JOB! yeah, wtf do you think is more important - work or family (god, i hate asking that question to some people....)

    and before you ask me my wherewithall to rant on this subject - my wife and i chose NOT to have children b/c we have other things we want to accomplish. we made that decsion based on NOT wanting to be part-time parents and full time employees. and also, my 13 year old sis recently got into some adult level chats with some questionable people. the result? no unsupervised PC usage (yeah, my mom actually sits there as she does homework research) and some stearn talk about the world, people, and growing up.

    look, sorrry for the rant, but i am sooooo tired of people thinking technology has morals. people have morals. technology is just a means to an end.

    --
    /* Half alive and half dead too, work is for suckers and the sucker is you. - "Half-life" by Local H*/
  11. Re:Recipe for an unblockable proxy by QuoteMstr · · Score: 3

    Wouldn't this be covered under libel? They are claiming a site is obscene, contains hate speech, etc. when it does not!

  12. It is a parenting issue, but... by Rupert · · Score: 4

    Two points.

    1: the world is a complicated place, the internet even more so. If there is a tool that will help me do my job of parenting, I will consider using it. My children are too young yet to surf the web. When they get older, I lean more towards the "show them the squid logs" method than the censorware, but censorware is more appropriate for some parents.

    2. Communities have a responsibilty to their collective children, too. By all means, have a porn store, I'd just rather it wasn't next to the ice cream stand. Rather more strongly, I don't have a problem with people selling crack, but I definitely don't want them doing it outside the school gates (or in the classroom).

    I don't want to childproof the world, or TV, or the internet. My children are only allowed to watch TV channels that we have approved (this means PBS, in practice). Not that we don''t get other channels, the children are just told what they can watch. I want tools to do the same with the internet, and so do many other parents.

    --

    --

    --
    E_NOSIG
  13. Damn Hackers... by ScottBrady · · Score: 3

    "Although it is a challenge to keep up with hackers who attempt to undermine filtering software, the result in the long run is a better product," SurfControl vice president Kelly Haggerty said in a statement. "We will investigate this and other hacking claims as they arise."

    Those damn Hackers just won't stop Hacking and Pirating Copyright Protected Intellectual Property that Endangers the Safety of America's Children(tm). For God sake, you could poke your eye out!

    I swear these PR people carry around a Buzzword Bible.

    --

    --
    Scott Brady

  14. Corporate Affirmation of Benefit of Hackers? by GeekLife.com · · Score: 5
    "Although it is a challenge to keep up with hackers who attempt to undermine filtering software, the result in the long run is a better product," SurfControl vice president Kelly Haggerty said in a statement.

    Which is to say "Hackers help us improve our product."
    -----

  15. Hey stupid, this is akami's screwup. by Greg@RageNet · · Score: 3

    I dislike proposed censorware laws as much as the next guy, but I also believe they have every right to sell their product to people who wish to filter their own PC's (parents). I also find 'stupid filter tricks' as amusing as the next guy, but in this case it's Akamai's problem and not the filtering companies.

    I must point out that this is no deliberate desicion by Akamai to stop those 'evil censors'. The truth of the matter is that they never wrote any security into their network to prevent any website from being 'akamized'. I also have it on good authority that it's alot of work to purge content from an akamai server. Thus in reality, akamai's service is the web-equivalent of an open email relay!

    This time you all laugh because it's the filtering companies getting the short end of the stick. Next time this bug will affect you. How long do you think it'll take spammers to use this bug to put their 'get rich quick' webpages into akamai and use those links when they send out spam? ISP's right now can eliminate websites near-realtime when they are used to sell products advertised in spam, which discourages spammers from even trying as their page is taken down almost immediately. If the spammers can be relatively sure their pages would be up for days on end (as they could with akamai) then it encourages them to send more spam, that ends up in your inbox.

    So what they are really saying when they say 'we will not commit to filtering' is 'we do not see fixing this security hole as enhancing profits and therefore cannot justify commiting programmers to close it'. I'll repeat for emphasis: This is an akamai security hole. This is the web-equivalent of an open email relay.

    -- Greg

    PS: I've reported this bug in the past, and they claimed it was a non-issue. Does someone have to write a 2600 howto article on getting service from akamai before it's fixed?

    --
    Slashdot, would a spell-checker for posting be too much to ask? It's not rocket science!
  16. Re:Babelfish? by Sloppy · · Score: 4

    Hmm.. maybe some day a newer version of Babelfish will translate the pictures into German too.

    Go to an American pr0n page and there's a nude woman with big tits. Access the same page through babelfish, translated into German, and it's the same nude woman, but one of her tits is covered up by the big mug of beer that she's holding out in front of her, seductively offering it to the viewer. It's cold and frosty, and real dark tasty beer, not CoorsLightPisswaterBeer. Oh yeah, baby, come to Sloppy...

    People would have to type one-handed while visiting such sites. (The other hand is holding a beverage, of course.)


    ---
    --
    As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.
  17. All porn is not created equal by KahunaBurger · · Score: 3
    I plan to show my kids the internet, to show them where the porn is and say "If you want it, it's here. There's nothing wrong with it and nothing to be ashamed of."

    Really? Are you going to show them the picture of a man shitting in a woman's mouth and say "There's nothing to be ashamed of"? Are you going to point out the ads for underaged asian girls and say "There's nothing wrong with it"? How old will your children be when you point them out the pictures of bondage and S&M with no context or explinations of consensual ways to do those things in real life and say "don't be ashamed of looking at this, why add worry to an overstressed world?"

    Could we please stop pretending that there is one porn site on the internet and it contains artistic nudes, loving sexual scenes and some content slightly raunchier than PlayBoy? Its a long way from saying "we shouldn't hide sex" to giving kids access to representations of sexual violence, degradation and coercion and no ethical guidance on what real people are like.

    As a mature, sexually active adult, I have come across things on line (yes, you can find porn accidentally) that made me feel mildly sick, or confused, or in some cases threatened. For a child that does not yet have any healthy sexual expereince to draw on, who may not be able to understand the levels of consensuality and pleasure in, say, BDSM, I could see such images being damaging to their development of a healthy sexuality. And even in the most perfect family, no child is going to be able to come to a parent and say "I saw a picture of a pretty woman being whipped and then I dreamed last night about whipping someone and got a woody, and it makes me feel gross that I liked that thought." They will bottle it up, and if they're lucky, sort it all out when they get older.

    There is a emotionally healthy rate at which children learn about sexuality. Don't call people names because they want to preserve that learning curve instead of throwing truely adult sexual content at their 8 year old.

    -Kahuna Burger

    --
    ...will work for Chick tracts...
    1. Re:All porn is not created equal by Cid+Highwind · · Score: 4

      ...throwing truely adult sexual content at their 8 year old

      IMHO, an 8-year-old child has no more business being on the internet without supervision than he/she has walking through downtown NYC alone. The internet is not a babysitter, nor is it a sanitized playground made for the enjoyment of little kids. It's a medium by which people exchange information.

      If you don't want your precious little darling downloading goatsex pictures, unplug the modem. Using filtering software to keep kids from downloading pr0n is like using a shotgun against mosquitos; you'll never kill them all, and a lot of innocent bystanders are going to get shot. There is no substitute for supervision, and there never will be.

      --
      0 1 - just my two bits