Slashdot Mirror
University Professor Chastised For Using Tor
Irongeek_ADC writes with a first-person account from the The Chronicle of Higher Education by a university professor who was asked to stop using Tor. University IT and campus security staffers came knocking on Paul Cesarini's door asking why he was using the anonymizing network. They requested that he stop and also that he not teach his students about it. The visitors said it was likely against university policy (a policy they probably were not aware that Cesarini had helped to draft). The professor seems genuinely to appreciate the problems that a campus IT department faces; but in the end he took a stand for academic freedom.
Good to see some university professors still have integrity.
How we know is more important than what we know.
Could they not be bothered with actually checking the policy since they were there to enforce it?
I think the issue was not with his use of it but being told that he couldn't talk about it in his classes.
How does Tor enable those things, and how would more people using Tor make those things worse than they already are?
Asking the professor not to use Tor on the university-owned network is reasonable.
Attempting to censure what he can say to his students is clearly not reasonable.
it might also be noted the BGSU, along with other state universities in ohio force graduate students on assistantships to sign forms saying that they are not members, or have not supported terrorist groups.
Since these are stored in university archives, and not checked, new graduate studies are (more or less) required by the state to sign loyalty oaths.
Mikey
I've always been the kinda guy to fall for the girl dressed like an eskimo.
What are you talking about?
The use of tor on "someone else's network" is implicit, because you are connecting to someone on the other side of the network as a whole.
You say you use tor at home, but that's not "your" network either. I think your ISP would say that you are connecting to *their* network. I think the Hosting Provider of the web server you're connecting to would say it is *their* network. I think AT&T, (or whoever owns the backbone your data is traveling across) would say it is *their* network too.
If any of these network owners told you to stop using tor at home, what would you say to that? I'm guessing it would be pretty close to what this professor said to the IT goons trying to intimidate him into stopping.
The only time it's "your" network is when you have two of your own computers on your own LAN, and a tor router between them.
I attended said university, I know Paul very well. I still run into him in town occasionally, and I will be sure to shake his hand for this.
I could say a lot of BAD things about *university* ITS, but I'd probably get me in far more trouble than it is worth to say them out loud. I am not there anymore, they don't effect me. I will just be happy that Paul is still the fine individual I have always looked up to.
--Nuintari
slashdot : where an opinion can be wrong.
Common sense would dictate that the detectives, doing their jobs and trying to investigate an online scam, ask the professor some questions to determine if he was involved. But instead they asked him to stop doing something legal, tried to get him to NOT share something with his students, and used some vague provisions of an IT policy to back it up. This is a direct attack on academic freedom - 'Thou shalt not tell your students about this' and even worse, telling him not to use Tor himself - obviously because they couldn't track what he was doing.
Overblown? Hardly - we are losing our rights bit by bit by bit and people who think something like this is 'overblown' are part of the reason. By the time you all realize you've lost most of your rights it'll be too late.
Top Most Bizarre/Disturbing Error Messages
Oil, farming, auto (roads), space (NASA), rail (AMTRAK), the defense industry, telecom, utilities,
What if I replace the word TOR with the word "internet". Do you see why your post doesn't make sense?
Bit torrent gets throttled because it is a bandwidth hog, not because its often used for copyright infringement. If that was the issue, it would be blocked totally in the places where it is throttled instead.
What exactly is your point? Shit gets abused all the time.
Lord High Crapflooder The Right Honourable Vlad Craig Esther McDavenpherson III
Destroyer of Mercatur.Net
I was a university IT director a few years ago. The university told me outright when they hired me that they expected to pay me 25% less than an identical job would pay in industry, because they're a not-for-profit organization, and that I should desire to accept this because of the benefits of working in an academic environment (which they listed as long term job security and minimum of four weeks of vacation per year). Okay, fine. They weren't happy when I came back with documentation showing that my industry value was about twice what they thought, but they coughed up the 75% of my industry value that they said they would.
Then when I wanted to hire anyone, however, they dictated to me what I could offer, and refused to accept any input regarding what industry norms were. So, when I needed a DBA (and frankly needed a really good one), they told me I should get someone Oracle certified, and that I should pay no more than $50k. Skilled, experienced, product certified DBAs, as you may know, tended to go for over twice that (usually more like three times that) a few years back in Boston, and our database wasn't Oracle anyway. I ended up hiring a junior-level person (when I really needed a senior level person) because that was the best I could get for the money they were offering (in fact the only applicant we had received who had any experience with the database products we actually used), and told HR they could forget about certification. Their response was to complain a lot that I hadn't hired a good enough person, despite that they hadn't actually asked me (his manager) about his performance, and he was actually doing unusually well for someone of his level. They also nagged me extensively to replace him with a woman who had applied who was oracle certified (which was still useless because we still didn't have oracle), but didn't actually speak English. (Presumably that's why she was willing to take the lousy pay rate.)
10 months after I was hired the university outsourced my job, proving that their claim of long term job security was a lie in the first place. (I hear they had to hire three consultants to replace me, each one at a cost of two to three times my salary.)
I've seen this pattern repeatedly in university IT groups; they won't pay what it really costs to get someone who can really do the job, but they insist on unreasonable qualifications given the pay level they're offering, so instead of either shelling out what it costs to get what they want or accepting the best qualified person who would normally be in the pay range they're offering, they instead hire the loser who is willing to both take the low pay rate AND inflate their qualifications (either by exaggeration or outright lies) to meet the university's unreasonable demands. So, when they most need a skilled, experienced person, they're most likely to get a lying fraud who can't get the job done and will give everyone else a hard time to try to make it look like nothing is their fault.
Actually, he says "could be a huge headache for network-security administrators" and "could approach technological anarchy". Notice the use of the work "could" as opposed to the more definite "will".
Furthermore, just because something "could be a huge headache" for IT doesn't, necessarily, mean it isn't, still, part of their job responsibilities. Giving students/faculty at a university access to the Internet in the first place will, inevitably, produce headaches for IT. That said, it's also the only reason they have a job. It would be just as absurd for the IT department to attempt to strong-arm all the students/faculty into not using the Internet at all as a method of decreasing the IT workload.
The fact is, there are ways to deal with it in the event it ever, actually, became a problem such as announcing a ban on the software for student PCs and banning systems from the network as soon as Tor use is detected. It's not difficult to do and means that Tor would only cause the network to dissolve into "technological anarchy" if the IT people sat around and did nothing. If they were even more reasonable and even handed about it, they could ban or traffic shape Tor users that were found to be using an obscene amount of bandwidth (most likely to have had their system injected). This, probably, wouldn't even require a re-write of their network use policies.
"He has the RIGHT to use it, of course, nobody else should. It's a tool only for the gifted."
While I'm assuming you meant this to be sarcastic, YES HE DOES HAVE THAT RIGHT! Its called academic freedom and was, clearly, mentioned in the article. It allows him and other professors to do their job. There are plenty of times that professors research/teach about controversial topics or topics that could cause problems if they were abused. He was teaching a class directly related to Tor and was using it as a way to become more familiar with the software. He never suggests that the general student body, or even the rest of the university employees should, necessarily, be allowed to use the software. You and I may not have the right to use Tor on out employer's networks but, then again, we aren't college professors (unless you happen to be). They represent a, very specific, special case when it comes to thing like this.
As an example, I went to school for computer science. In one of my classes, on how operating systems work, our professor explained how a programmer could, very easily, take down almost any flavor of Unix system no matter how well secured the system was (thus causing headaches for anyone else using that system at the same time as was common in our CS computer labs). This was a fundamental flaw in the design of operating systems that, for Unix systems at least, was pretty universal. He also informed us, very clearly, that we were, in no uncertain terms, banned from using this technique on any of the lab systems (which ran Sun Unix). Furthermore, he informed us that, should we decide to try, they would, very easily, find out who did it and deal with them accordingly. This was an issue directly related to the subject of the class. Knowing it meant that we, as students, could avoid it in our own future software. There is a good chance that, at least one time, my professor had to write a program like this himself (or one of his colleagues did) and test it on one of the lab systems just to prove that it did, in fact, work that way.
The story is that an IT guy and two Campus Security goons came to his door and tried to strong-arm him into not using the software or teaching about it. It's like a bad scene from a melodramatic police drama. They tried to feed him some nebulous garbage about it being against "policy" (a policy he actually helped edit and probably knows better than they do) and use it to threaten his job. The story is about a professor having his job threatened for researching a topic they don't like which flys against the very essence of acade
Rules of Conduct:
#1 - The DM is always right.
#2 - If the DM is wrong, see rule #1
Admins should be more concerned about Tor's Hidden Service feature. It's handy to avoid censorship and all, but it allows you to connect to hosts behind a NAT or firewall (the node keeps a circuit open). Not only that, the person using the service remotely is unrelated to the host that shows up in the logs... It's a drop-in backdoor tool. Instant access to the internal network.
"Strangers have the best candy" -Me
While the government's response to Katrina was slow and poorly executed, it was not contingent upon ability to pay. If there was a pandemic illness sweeping the nation, a national emergency would be declared, and people would get the immediate attention they required. If I can count on my government for anything, I can count on it to blow through money in a panic.
Here's a legit situation I can see coming up - if a faculty person was somehow using 90% of our internet bandwidth, we'd have to have a chat. Sure, it might be for their research, but that doesn't matter in that case. It's a shared resource, there's a limited (by the University) budget, and it's not an academic freedom issue. It might be convenient for one of the physics faculty to have a supercollider as well, but it's not in the University's budget. You have to partner with someone outside, or get grants, etc. Every instituation has limits and priorities.
But this? This is bizarre. The only awkward situation I can think of in some states is that state schools can fall under open records laws that require that the public can check on certain information (in some states, browser histories have come up in the past). In that case, as a state employee, they might be violating the open records law by going out of their way to hide their activity. Hell, even under a Patriot Act search, we'd have to give them whatever information we had about a user, but we're not obligated to keep information to track back every outbound internet connection - even under CALEA. We probably can't link a PAT assignment on the outside of our firewall to an inside machine for more than a couple of days, at best We just don't have the space to keep the logs.
I can't stand how the word "majority" has in recent years disappeared from our language and been replaced by the phrase " vast majority" (at least in any context that's even remotely political).
This may sound like mere linguistic pedantry, but it really isn't -- this usage both feeds, and is part of, the trend toward polarization and "extremification" (yes, afaik, I just made up that word) of political discourse. When you claim not just a majority but a vast majority, you're doing more than just adding emphasis: you're actively marginalizing the other side (by implying that they're not just a minority but a tiny, insignificant minority).
And it's self-escalating: it creates a sort of "linguistic arms race", where "everyone else does it", so people feel compelled to tack on the "vast", lest it sound like their side is only a mere "majority". But that just leads to linguistic inflation: when (almost) everyone says "vast", it loses its meaning, sending everyone scrambling to find ever-more-emphatic (and more insulting) modifiers, like "overwhelming".
It may seem to make your argument sound a bit stronger, but the constant minor insults don't help us get anywhere closer to building true consenus. After all, wouldn't the overwhelming majority prefer to see a political arena with more true communication and less poo-flinging?
David Gould
main(i){putchar(340056100>>(i-1)*5&31|!!(i<6)<< 6)&&main(++i);}
'If there was a pandemic illness sweeping the nation, a national emergency would be declared, and people would get the immediate attention they required.'
Most illnesses of this sort, including the black plague; could have been stopped if appropriate care were provided BEFORE the pandemic was a pandemic. Bum A slips off a ship carrying the new plague. He feels sick but can't afford healthcare and doubts he'll receive the treatment he needs if he shows up at the ER claiming a heart attack again. So he hangs out with other bums on the street. They in turn ask you for change outside the subway. 48hrs later thousands of people are infected and starting to feel sick. But they don't go to the doctor either. After all, you only go to the doctor if you are really sick in this country because it is expensive. So they wait and thousands more contract the illness. Some of the first were on their way to the airport so they spread it from city to city. And so on and so forth it goes from there. With free healthcare you go to the doctor when you feel sick and everytime you feel sick. The doctor doesn't prescribe anti-biotics if you have a cold because he no longer feels like he has to do something to justify your $75. Anti-biotics remain effective and plagues have a much higher probability of being caught in the first place.
Oh yeah. Plus nobody dies sick, alone, and unable to chew their food because you are rich, cheap, and have principles. Healthcare (including the sub-aspects like Dental, Vision, etc) is a basic fundemental human need. This is the wealthiest nation in the world; this nation is so wealthy that our definition of lower income bracket has a lifestyle that exceeds the wealthy of other nations in many respects. It is just fucking pathetic that a wealthy nation like this can't afford to provide the essentials to its citizens.
It might hurt your work ethic but the secret is that working hard does NOT bring success or a guarantee of making your way in life. The only ones who claim that are the ones that worked hard and succeeded.
http://www.bgsu.edu/downloads/cio/file9602.pdf
12. Attempting to circumvent computer system or computer network security systems. Attempting to circumvent University computer system or computer network security systems, or using University computer systems or computer networks in attempting to circumvent security systems elsewhere.
and
22. Anonymous use, or use of pseudonyms on a computer system or computer network to escape responsibility. No person shall use a computer system or computer network anonymously or use pseudonyms to attempt to escape from prosecution of laws or regulations, or otherwise to escape responsibility for their actions.
Now, the first one seems like it is worded vaguely and may or may not apply in this situation, but the second one is pretty clear: as long as you are using anonymity services "to escape responsibility". Clearly, the professor was not trying to skirt the law or detection for any shady behaviour. of course, in the eyes of admins, allowing any use of such anonymizers could be dangerous to their network, and make their jobs harder.
I take most issue to the detectives' request that the professor refrain from discussing Tor in his classes. It would be academically unethical for the prof to bend to this pressure because a little pressure was put on him by the rent-a-cops. The detectives can ask the professor to do whatever they want, but dictating what he can and cannot teach in his classroom is inappropriate.
Shriver
And a thousand thousand slimy things
Lived on; and so did I.