Slashdot Mirror


Canadians To Douse Chinese Firewall

FrenchyinOntario writes "Researchers at a University of Toronto lab are getting ready to release a computer program called Psiphon, which will allow Internet users in free countries to help users in more restrictive countries (like China, North Korea, Saudi Arabia, etc.) to access the Internet by getting past the firewalls and getting around "rubber hose cryptoanalysis" which is a drawback of other anti-firewall programs as it reveals a user's tracks if discovered by authorities. Operating through port 443, Psiphon will allow users in monitoring countries the ability to send an encrypted request for certain information, and for users in secure countries to send it back to them. The UofT's Citizen Lab hopes to debut Psiphon at the international congress of the free speech group PEN in May."

28 of 342 comments (clear)

  1. A HTTP Proxy with SSL? by Leknor · · Score: 4, Insightful

    How is this better than Tor: http://tor.eff.org/ or just an HTTP Proxy that supports CONNECT for SSL traffic?

    1. Re:A HTTP Proxy with SSL? by Phleg · · Score: 5, Interesting

      I could be wrong, but in a case like this, the Tor system might actually be worse; normal Tor operation says that you only have to trust that most of the nodes are legit onion routers. However, in the case of China, I believe that you need to trust that the first node is legit. Why? Because if that first node is the Chinese embassy or another node owned by China, and your IP is coming from a Chinese netblock, then your secrecy is blown.

      At least with this system, you're encouraged to form a relationship of trust with the node you're communicating with.

      --
      No comment.
    2. Re:A HTTP Proxy with SSL? by ozmanjusri · · Score: 5, Insightful

      There is no need to fragment support for these projects when excellent ones are already in place.

      The more there are, the better. No single point of failure, no single point for governments to attack. Fragment away.

      --
      "I've got more toys than Teruhisa Kitahara."
    3. Re:A HTTP Proxy with SSL? by chato · · Score: 4, Informative
      ... in the case of China, I believe that you need to trust that the first node is legit
      It doesn't matter if the first node is not legit. First, you can deny that you originated the traffic, as you can be relying packets for other Tor nodes. Second, the route changes every 10 minutes.

      China's internet censorship works at several levels. It includes content-based filtering (banned terms in the text of what you are sending, including "human rights", "democracy" and "Dalai Lama"), so any attempt to bypass the filtering has to be encrypted. It also includes DNS-based filtering so some DNS lookups return the wrong IP addresses, and of course it also includes IP-based filtering that prevent Chinese users from accessing the BBC or Wikipedia, for instance.

      Tor can be very effective at bypassing most of these protections, and you can choose to run it on port 443 (https) to avoid port-based filtering. Also, you can limit the amount of bandwidth you want to donate to other nodes, and the default outgoing policy prevents connections to port 25 so you can't use a Tor node for sending spam.

      On the client side, using SwitchProxy for FireFox is helpful to maintain a list of proxies, including a local Tor instance, that works as a SOCKS proxy, and a list of open proxies (SwitchProxy can automatically change proxy every X seconds).
  2. Reaction? by Sneetch · · Score: 5, Insightful

    While it makes me feel good to hear about this... won't the censoring nations have something to say about an organized and publicised effort to help their citizens break the law?

    1. Re:Reaction? by fishmonkey · · Score: 5, Funny

      While it makes me feel good to hear about this... won't the censoring nations have something to say about an organized and publicised effort to help their citizens break the law?

      fuck them

      --
      generic
    2. Re:Reaction? by ihatewinXP · · Score: 4, Insightful

      I am actually reading this froim China right now - and im kind of surprised.

      The censors are always shutting things down. /. hasnt been blocked totally but discussions and linked articles have.

      I agree with the sentiments that publishing these ideas are a double edged sword. Its good to inform and have things coming from enough sources to get to the people and bypass the censors but it does give the gov. a heads up.

      We will see. Or maybe yuou guys will and I wont ;)

      --
      ---- The real Slashdot is still here. You just have to browse at -1 to read the comments.
  3. Six/Four? by slavemowgli · · Score: 4, Informative

    This has already been done: Six/Four

    --
    quidquid latine dictum sit altum videtur.
  4. Censorship by Mark_MF-WN · · Score: 4, Insightful
    Wasn't there talk sometime back about the US government directly providing means for people living in censorship-ridden nations to bypass their national firewalls? Whatever became of that?

    Private initiatives like this are cool and all (and have proven very effective in the past), but it would be nice to see our governments taking a much stronger stand regarding free-speech. Free speech is the absolute foundation of democracy and freedom.

    1. Re:Censorship by 0-9a-f · · Score: 4, Insightful

      An interesting op-ed piece I read today suggested that this is a war between Freedom and Fundamentalism. As we are seeing with the current Congressional Hearing involving Google, Yahoo, MSN, etc, Capitalism doesn't much care either way for Freedom or Fundamentalism, but is calculated solely on risk and reward - even if you purport to "do no evil". To look at Western politics around the world, and more topically the effects of those Danish cartoons which are not being published, most people don't have much of an opinion here either.

      As has been said here previously, free speech only continues to exist when people exercise it. There is much uninformed opinion in the world, and even our leaders are increasingly elected on the basis of limited amounts of tightly controlled information. Does this lead us closer to Freedom and Democracy?

      The Fundamentalist has a narrow agenda, is easily inflamed, readily invokes fear to reinforce their message, and has little respect for all who disagree. Those who favour Freedom will always suffer at the hands of Fundamentalists - Freedom is Fundamentalism's single worst enemy, and the uninformed Free will happily trade minor freedoms for any illusion of security against perceived threats. Against this slow but steady onslaught, Freedom's only weapon is exercising available freedoms - even to risk one's own life if necessary.

      While it is the duty of the Free to selflessly attempt to liberate the oppressed, Capitalism guides us to minimise risk now and build short-term rewards. In the face of rising global Fundamentalism (whether Christian or Muslim, Capitalist or Socialist), Freedom dies by a thousand cuts.

      It will do us all good to see more fearless initiatives like this one from Canada.

      --
      With each breath in, a flower somewhere opens; with each breath out, a flower withers away. In between lies beauty.
  5. Re:Canada... by i_should_be_working · · Score: 4, Informative

    Except that the CRTC has nothing to do with what I can and can't view on the 'net.

  6. Unlikely to have much impact in practice by JakartaDean · · Score: 4, Insightful

    Let's see. While the Chinese are unlikely to block port 443, they could monitor sites for which the percentage of 443 vs. port 80 https requests exceeds a reasonable threshhold.

    But, it seems that I need to communicate with someone in China first, and offer my computer up to them, and then we both need to install something on our computers, and I give him a userid and password.

    Isn't this just too clunky to work?

    --
    The subject who is truly loyal to the Chief Magistrate will neither advise nor submit to arbitrary measures (Junius)
    1. Re:Unlikely to have much impact in practice by Cruciform · · Score: 4, Funny


      But, it seems that I need to communicate with someone in China first,


      First you log into World of Warcraft...

  7. neat tech, but... by Anonymous Coward · · Score: 5, Interesting

    There will always be ways for dedicated and savy people to get through firewalls for purposes such as this. However, on the large scale, it does little to affect the access to censored information by the public in general.

  8. Young whipper snappers. by coopaq · · Score: 5, Funny
    All your wires and doohickies!

    Back in my day if we wanted freedom we had to shoot someone in the face. Twice.

    Now sometimes we do it for fun. -DC

  9. Re:Opressive Country to-do list by scenestar · · Score: 5, Informative

    An elegant wrinkle is that the data will enter users' machines through computer port 443. Relied on for the secure transfer of data, this port is the one through whichreams of financial data stream constantly around the world.

    "Unless a country wanted to cut off all connections for any financial transactions they wouldn't be able to cut off these transmissions," said Professor Ronald Deibert, the director of Citizen Lab.


    rtfa kthnx

    --
    perpetually dwelling in the -1 pits
  10. Re:Opressive Country to-do list by Nataku564 · · Score: 4, Funny

    3. Never surrender.

  11. Serious Responsibility by Comatose51 · · Score: 4, Interesting
    A drawback to Psiphon is that the person behind the firewall has to be given a user name and password by the person offering up the computer. With this kind of setup, Mr. Villeneuve said, activists may end up working with specific dissidents and people in repressive countries may rely on relatives abroad to help them get connected. Canadians, with ties to every country in the world, are in a particularly good position to use such a system.

    So what happens if the person who you gave access to does something illegal (child porn for example)? Does the host become responsible, legally and/or morally? Unlike a general, open, free for all access, this individual approach appears to shift more of the responsibility onto the host, who may not be in a good position to make such a judgment. The program apparently has some facilities for doing forensics on the traffic, which then shift even more of the responsibility onto the host. I guess when you're trying to fight a repressive regime, you should be prepared to take on some heavy responsibilities. Kudos to those who are willing to do so.

    --
    EvilCON - Made Famous by /.
  12. Can you say "open Proxy"? by jmorris42 · · Score: 4, Informative

    My complaint with this scheme, and Tor, is that they are essentially open proxies. Anyone who has ever had the misfortune to pooch the acl lines on a Squid and leave it running a bit will know what happens next. One day you notice your bandwidth pegged at max and you scramble to fix it.

    --
    Democrat delenda est
  13. international meddling, eh? by DeveloperAdvantage · · Score: 4, Insightful

    As a Canadian, although I do sympathize with those in China trying to get around their censorship, I am concerned with one country developing a tool with the explicit stated goal of trying to undermine an internal regulation of another country. In effect, it provides the user with information which is not allowed in their own country.

    What would the Canadian government think if people in countries with different drug laws started intentionally mailing their drugs, which they consider legal, into Canada? Better yet, what would Canada think if such an action was sponsored by the government of the offending country (Psiphon is coming out of a publicly funded university in Canada).

    As another example, currently a hot topic up here is gun violence. Many of the guns get into Canada from the US, where the gun laws are not as strict. Certainly, and rightfully so, the Canadian government would be offended if the US government funded a program with the goal of getting more guns into Canada.

    I agree both drugs and guns *can* be much more harmful than information, but if the consequence of having that information is jail sentence in a Chinese prison, then enabling them to access it is something that should not be taken lightly.

    --
    FREE - Java, J2EE and Ajax Audiobooks for Software Developers - www.DeveloperAdvantage.com
    1. Re:international meddling, eh? by DanielJosphXhan · · Score: 5, Insightful

      As a Canadian myself, I would like to note that the parent poster is patent product of our paternal sociopolitical society.

      So much so, in fact, that he can't tell the difference between free speech and free drugs (that is to say, basic rights and freebasing). Which worries me.

      It's not enough simply to excercise your own increasingly limited rights in such a beautifully softspoken manner, while being careful not to tread on the feet of oppressive regimes around the world.

      If you stand for freedom--not the flag-waving, foaming-at-the-mouth Americanised version, but actual speech-in-the-wind freedom--you stand for it everywhere, and you aid it everywhere, governments and institutions be damned.

      --
      [ think ]
  14. China spammer crackdown by Animats · · Score: 4, Interesting
    Unclear if this is related, but some of the biggest "bulletproof hosting" services just dropped off the net. "blackboxhosting.com", the high profiile spammer hosting service located in China, just disappeared. A few other notorious names are gone, too. "specialham.com" and "spamforum.biz", discussion boards for spammers, are gone. "cheapbulletproof.com", also in China, is gone. You can find all of these sites in Google's cache, but they're all offline today.

    There's definitely been some kind of purge since February 5th, when many of these were up.

  15. This is different from a public anonymizing proxy by ikioi · · Score: 4, Informative

    Many people are asking, "How is this any better than somesite.com, a normal anonymizing proxy?"
    The difference is that this is a piece of software which runs on an individual person's computer.
    This is more like peer-to-peer than it is like 50,000 people using a well know proxy.

    The Chinese government can easily go to google and search for well known anonymizing proxies
    and block access to them. What the govt can't do, is find out every IP address on the internet
    running this software and block it. The downside of this software is that Chinese users must have
    a friend on the outside to run the software, but the upside is that it's vastly less likely that the
    Chinese government will be capable of blocking access to it.

  16. Everyone toast the Canadians! by SeaFox · · Score: 4, Funny

    They are truly defenders of truth, justice, and the Ameri...

    Oh, wait. we might have to revise this.

  17. Moral absolutism by pomo+monster · · Score: 4, Insightful

    The following anonymous comment currently sits at -1, Troll: "Have you ever considered that it's a bit ethnocentric to try to 'save' Chinese from their own conservative culture? ... The fact is that most Chinese support censorship."

    I didn't write the above (though feel free to disbelieve me), but I know I've struggled with the same question. It's quite true that the CCP's efforts to protect China's conservative values, through censorship, enjoy wide support among the population--just as a majority of French and German citizens support their governments' suppression of Nazi propaganda and Holocaust denial, and arguably rightly so.

    Certainly I personally wouldn't want to live under such a government, but then, apparently a majority of Chinese wouldn't want to live under ours. Who are we to say they're wrong in their desire to be so nannied?

    Thoughts?

  18. Obligatory definition by Baloo+Ursidae · · Score: 4, Informative
    --
    Help us build a better map!
  19. Free Speech Fanatism ? by Tom · · Score: 4, Insightful

    As much as I am a friend of free speech, I don't forget that we live in countries that had a few centuries to adapt to the concept, and it was far from painless. From the french revolution to the american independence war, and a hundred smaller clashes.

    We forget so often that the chinese government isn't stupid, and maybe not even evil. They have reasons for why they do what they do. You may disagree with the reasons, of course. But let's not forget that preventing large-scale civil unrest is among them. Maybe they are right, maybe they are wrong. But are you ready to gamble a few million lives on that?

    The french revolution took maybe 100,000 lives (40k alone went to the guillotine), in a country of about 40 mio. people. Now imagine the body count in a 1200 mio. people country. Add modern firearms and tanks. 3 mio.? 4 mio.? maybe 5 mio. people could die during an all-china civil unrest.

    If the chinese leaders are wrong, they are oppressive tyrants who've killed thousands. But if the free speech advocates are wrong, they are rebellion initiators with millions of dead on their consciousness.

    China is moving towards more freedom, though at glacial speeds. That is probably too slow. But the demands of the western world for essentially immediate total freedom are very certainly too much, too fast. Change needs time, and a look into our own history books would tell us what the stakes are.

    --
    Assorted stuff I do sometimes: Lemuria.org
  20. I have to ask myself the question... by PinkyDead · · Score: 4, Interesting

    ...do we think the Chinese Government are stupid?

    Over the past number of years we have seen a liberalisation of trade and a continuing move towards a free market economy - China style.

    We have seen with the fall of the Soviet Union, democracy and free market economics overnight is extremely painful and possible dangerous - at times it was touch and go there (maybe still is).

    China is a really big place with lots of people, a similar shift would probably be catastrophic for China and for the world at large. It takes a long time to turn a big ship.

    Same must be true for the application of democratic principles.

    Tiananmen Square etc was a wake-up call for the Chinese government. Yes, it was 15 years ago, but that's a blink of an eye in geopolitics.

    The writing is sort of on the wall - 'democracy' is really inevitable. And slowly the ship will turn. It will probably turn to its own course, and Chinese style democracy will be the very interesting outcome (if you think the democracy you live in is the only kind then you are well wrong).

    To the /. folks: You and I know that systems can be hacked, and you can be sure that there are fair few Chinese doing that right now - breaking through the censorship and reading what the rest of the world is at; and you can be damn sure that the Chinese Government is fully aware of this - they're not stupid.

    This kind of access might only be available to a small few - but it will be available. It's like a dam with a small leak - a huge crack would be disasterous, and the dam would crumble. But a small leak - that works.

    Watch this space...

    --
    Genesis 1:32 And God typed :wq!