Slashdot Mirror
Pennsylvania Refuses to Disclose Banned Website List
koehn writes "In an interesting turn of events, the Attorney General of Pennsylvania has ordered all PA ISPs to block sites that have child porn. If that's not bad enough, they won't tell you which sites those are because - so the excuse goes - that could be construed as 'disseminating pornography.' So much for public review, huh?" See the previous story.
the Attorney General of Pennsylvania has ordered all PA ISPs to block sites that have child porn. If that's not bad enough...
Waa... Hunh... I had to read this a few times to realize it's not supposed be a joke.
Bad enough for who?
You'd think they could just publish the list on the net, so every s. kiddie could try to take it down with their mad skills...
/. - I bet the sites would never be back up.
Alternately, just publish the list on
-Maher-
It seems likely to me that they simply don't have a list, and they want to make it the ISP's problems. The best law enforcement agencies in the country can't stop kiddy-porn rings, so let's see if overworked sysadmins can! If it fails, at least we'll be able to pass the blame...
I think ISPs should simply declare that, to the best of their knowledge, there is no kiddy porn on the web, and only block things if they get complaints (then report the complainant as having viewed kiddy-porn.)
Sig:Why copyright isn't a fundamental human right
If all of these sites actually contain child porn why not focus all efforts on getting them shut down completely .. having a few ISP's block these websites accomplishes nothing ..
The CDT report - entitled "The Pennsylvania ISP Liability Law: An Unconstitutional Prior Restraint and a Threat to the Stability of the Internet" - analyzes a 2002 Pennsylvania law that forces ISPs to block access to any web site deemed "child pornography" without notice to the site's publisher and without any opportunity to challenge the determination. ISPs are required to block the sites even if they do not host the content and have no relationship whatsoever with the publishers of the content. The Pennsylvania Attorney General has since gone even further, bypassing the law's inadequate court procedures to simply demand by letter that sites be blocked.
CDT.org
More News
Fisher has so far instructed Internet providers with customers in the state to block subscribers from at least 423 Web sites around the world.
First, I find it hard to believe that there are only 423 web sites that offer kiddie porn, based soley on the amount of spam I get advertizing it. And in what way is this list updated? Porn sites move around constantly, and use any number of tricks to fool browsers (fake.site.com@real.site.com tricks, IP addresses instead of host names, etc.) so I think this list must be changing every few minutes. Do they reall y have someone sitting and watching as the porn sites get a new IP address?
I'm not saying anything for or against the block itself, I'm just saying this must be one hell of a headache to manange.
...if you don't get to look at the list, how do you know it's not being abused? How do you know that they are all child porn sites, and not, for example, pro-choice advocate sites, or whatever the reviewer decides is against his personal beliefs?
If I was in charge of the list, and I knew that it would never be seen by anyone but me and my cronies, then I've got a really big stick to wave around the heads of those people I don't agree with. Child porn is bad, but the potential to lose some bit of freedom is worse. Eventually those kids grow up and either adjust or they don't, but lost freedoms are usually gone forever and they affect everybody in the country. There is no bigger superpower than us that can come and bail us out if our govt becomes a totolitarian regime, so we have to defend our liberty at all cost while we have the chance.
Why do laws like this, which are completely impossible to force and redundant (possession of child porn is ALREADY illegal, why force ISPs to filter it?) manage to get passed?
Because who the hell expects to get any votes after voting against a child-porn law?
They only get away with stupid laws like this because most people don't look past the title, so we get things like "The Patriot Act"...
Child porn is illegal everywhere I am aware of. Why block the websites when they can be taken down like they should be? That's like when your mother told you to clean your room and so you just shoved it all under the bed, didn't make your room clean and this wont make the internet better. A band-aid won't stop the bleeding.
The thing someone has to learn is that when government does anything that is a bit unusual or secretive, no matter how small, it's usually a test. Parents with kids understand it. Kids test you to see how much shit you're willing to take. Similarly, government likes to see how much shit you're willing to take. Once they see most people are cool with keeping something secret as long as they attach child porn to it, they'll start doing other things.
Yeah, sure, you'll say again, no slippery slope. And of course, to make that position, you'll ignore all of U.S. History from the late 1700's to today.
Only in slashdot are posts of solidarity modded at -1 Redundant, while posts of antagonism are modded as -1 Flamebait.
The public seems to have something of a love-hate relationship with child porn. On one hand, child porn in the classical sense is bad. On the other hand, child porn in the form of Britney and Christina is just fine? I remember reading an article on Britney before the music industry pimped her out. Cute kid. I just say LeAnn Rimes the other day on a Blender cover, topless. Even country music has gotten into it. Sigh... Maybe just another reason to hate the RIAA?
A deep unwavering belief is a sure sign you're missing something...
Even if the program were honest and verifiable, it would still be a bad idea. This essentially closes off sites that alow user posts, such as Slashdot. All you have to do to kill Slashdot in Pensylvania now is persistenlty place kiddie porn links into your posts. But it is not honest and it is not verifiable so the state could just block Slashdot as it pleases. If people noticed and complained that they can't find Slashdot anymore, the State can claim it was an honest mistake. The damage would have been done as the people would have been kept from knowledge in a timely manner. Other sites that few no about can be blocked with impunity.
Friends don't help friends install M$ junk.
It's going to be interesting when they try to prosecute somebody.
Prosecutor: This guy looked at child porn.
Defendant: It isn't child porn!
Judge: OK, let's show the jury this alleged porn.
Prosecutor: No, we can't do that! It's illegal for the jurors to look at child porn!
Judge: Well, then let me look at it.
Prosecutor: But, Your Honor, it's illegal for you to look at child porn, too!
Judge: Well, dammit, what if it's not porn?
Prosecutor: Well, then you could look at it. But you realize that if you deem it porn, we can charge you with having viewed it.
Judge: Well, then, I don't want to risk it. Ladies and gentlemen of the jury, you're just going to have to take his word for it.
[Jury deliberates.]
Jury: Not guilty due to lack of evidence.
Sunlit World Scheme. Weird and different.
How the hell are ISPs supposed to be able to implement and deploy this blocking according to the official list if they are not given a copy of the list? And doesn't that law at least claim it applies to any ISP, even out of state, as long as it serves customers in Pennsylvania ... at least for the Pennsylvania customers? I'd like to know if the list consists of IP addresses, domain names, or complete URLs (or some mix of these).
If the list has IP addresses only, then it would be theoretically possible to deploy this in a router access list. But many routers don't scale well with large lists because of sequential implementation. And what if the web site in question changes IP address periodically? Does the IP address list get updated equally as often?
If the list has domain names, perhaps those can be remapped to IP addresses regularly, and put in the access list.
In either case, using IP addresses has "collateral damage" effects on other web sites sharing the same server, and maybe even other services if not deployed to specific ports (e.g. other connections like SMTP won't work). I'm sure that Mike Fisher, who is so full of himself that he tries to make people think he is the only attorney general around by registering attorneygeneral.com and attorneygeneral.gov, won't care (using the same theory spam fighters use that if the ISP hosts bad customers, then everyone should suffer until the ISP stops hosting them or goes out of business).
Or perhaps the list consists of URLs, including path names to specific site areas or user pages. The problem is most routers can't deal with that at all. You need a web proxy. That means ISPs now have to pay out more money to run web proxies, with all their associated problems, such as DNS lookup failures for users accessing web sites in different DNS realms (e.g. DNS name spaces NOT rooted at the normal ICANN root servers) or with add-on TLDs (e.g. pseudo-realms that take normal TLDs and combine with special TLDs like ... uh ... the ".xxx" and ".sex" TLDs). And what about accessing HTTPS sites via the proxy? The certificates won't match up unless the browser is configured to "trust" the proxy (e.g. accept the proxy's certificate for that half the end-to-end path, or just connect to the proxy unencrypted and ask for an HTTPS URL). If the ISPs don't filter on HTTPS, then the porn sites that are intended to be blocked can just make HTTPS work. OTOH, if the ISPs force proxying HTTPS, that becomes a major privacy violation.
So one way or the other, porn sites can evade the blocking. If blocked by IP address, they just move around ... maybe as often as every 5 minutes with very dynamic DNS or other very highly distributed methods. And if blocked by URL, they can use HTTPS to bypass proxies or force the ISPs to invade secure web privacy. And if blocked by domain name in the DNS server (using local authoritative zones) users can get around that by not using the ISP DNS servers, running their own DNS servers, or the porn site can register more domain names (they're cheap for porn operators).
And with tens of thousands of open proxies around the world (check today's load of spam for more addresses), there's going to be plenty of ways for perverts to get their fix once they learn these methods. Is the PA AG going to track all the open proxies out there, too?
But in either of these cases, there isn't much the ISP can do without the list. And I didn't see anything in the text of the law that says the list has to be held in strict confidence by the ISP (as if that would apply to an out of state ISP anyway).
now we need to go OSS in diesel cars
Or maybe the music industry is selling what people want but are ashamed to admit they want. Heck, it wouldn't be the first time.
I think people over-react to child porn. Just look at the replies in this topic. Everybody seems to have to put "I don't like kiddie-porn but..." in every message. It's almost like "I'm not a communist but..." Does anybody really think that someone who doesn't include that disclaimer goes out and rapes kids?
Exploitation of anybody, including children is bad. No question. I fully support going after anybody who makes, sells or buys child porn, but I'm not 100% sold on going after people who possess it. If it is simply found "in their possession", which could possibly even mean that it showed up in their browser cache. Should you be in trouble because you mistype a URL and get one of the many porn typo sites?
Maybe intentionally seeking out child porn online should be illegal, but the penalty should reflect the crime. Someone who doesn't buy, sell, or make kiddie porn hasn't hurt any kids. Now the the argument is of course that viewing child porn leads to other crimes against kids. But isn't that the kind of thing that Slashdotters hate when it comes to other things? Just because someone loves playing violent video games and perhaps even makes a level that reflects their school or office doesn't necessarily mean they're going to go shooting up their school or office. Perhaps the punishment for seeking out child porn should be giving up all their privacy in case they can't control their urges.
This isn't intended to be flamebait. I'm sure there's many a libertarian who would agree with me that any action that doesn't actually hurt somebody else shouldn't be illegal. If you're going to moderate it down because you don't like what I'm saying, consider posting a reply instead. And it's not offtopic, the topic is child-porn and law, isn't it?
This is far from an original idea. The Pope and Roman Inquisition did the same thing back in the 1700's and 1800's. The Church published the "Index librorum prohibitorum" or "List of Prohibited Books".
Once the list got out, nearly every book on it became a best seller and eventually the list itself was put on the "Index librorum prohibitorum". So the Catholics arrived at the same point. The Catholics maintained a secret list of prohibited books but wouldn't disclose what was on the list for fear of promoting that which was prohibited.
Either this guy knows his history or it's a clear case of "There is nothing new under the Sun." I wonder if he also knows that in 1966 the Index was abolished. I suspect the list was abolished because the Catholics could no longer keep up with the volume of books being released and they had probably had their fill of p0rn too. So, if history does repeat itself, this list will fade away too. I just hope he doesn't start making claims that "heavy bodies fall faster than lighter bodies."
No one expects the Spanish Inquisition!
It's not quite enforcing the law. Enforcing the law would be putting down those sites rather than blocking the access to the sites.
The problem with this situation is that no one but the isp and the attorney general knows which sites are being blocked. There was a story in theregister.com a few weeks ago about a site that the city of Chesterfield wanted blocked by google. Seems that Chester the Molester was supposedly a child porn site. Google blocked them. The site had no idea they were being blocked.
Turns out that the site was actually a site with tasteless jokes. No child porn involved. But the city of Chesterfield didn't care or couldn't tell.
So what happens when PA decides that slashdot should be blocked? Or sites that critisize the PA attorney general? No one will know it because PA won't allow the list of sites be be known.
What happens when one of the sites being blocked goes out of business or gets a new IP? Some innocent site gets that IP, and no one in PA will know. Is the attorney general going to keep that list up to date? Is he going to let the ISP's know when to stop blocking address blocks? How can he? If the isp is blocked the address, he can never check that address again either, so he won't know it's clean.
The whole thing is just a mess.
This is a moronic law, because it hides rather than addressing an issue. And the AG needs a beating with the dumbass stick for refusing to release the list, for which there is NO valid argument.
This has not one thing in common with immigration, so I'm not sure where you got that from.
This law, and support of it, belies a fundamental misunderstanding of what law is for. It's not the job of the state to protect you. If the state wants to stop kiddy porn, it has to seek out purveyors of it and arrest them. Blocking it at the ISP level won't do a damn thing.
Some other problems, which I'm sure the AG is aware of but doesn't care about:
a) No oversight. Since there's no way to confirm that a site is actually listed, there's no way to tell whether or not a site is listed incorrectly.
b) Related to a). No evaluation. If a site is listed incorrectly, or if the domain is bought by someone else (for example) and is no longer a porn site, there's no way to unlist it. There's not even any way to evaluate if it should be unlisted, since access to it from within PA is supposedly impossible and illegal.
c) Prevents law enforcement from prosecuting kiddy porn, for the same reason. Law enforcement officers can't access kiddy porn sites from within PA, and therefore can't investigate them.
This is exactly the sort of law that should be under immediate suspicion of abuse, because it fails to addess the problem it purpots to solve, it's overly broad and allows broad leway on behalf of legislature and law enforcement, and because there's no oversight. If it's not being abused right now, it certainly will be in the future.