Slashdot Mirror
Ethics of Proxy Servers?
Mav asks: "I was recently asked to host a website for free in return for a lot of advertising. After querying them about how they knew the site would produce traffic they stated the site was going to be running PHPProxy (an open source web proxy). The traffic was a result of him and his contacts (nearly one thousand of them) using the site to bypass his school's firewall in order to view their MySpace pages and get access to their MSN messengers. Given all the attention social networking sites have recently received and the various laws attempting to block or control access to them I feel guilty and unsure making this available. Are there legal implications that I need to worry about? Could I be held liable if one of the students got in trouble? Most importantly, what's the moral thing to do?"
You need to find out for yourself what the moral thing is. I believe it is moral to help people gain access to information, so I'd do it. Do you?
As far as the legal aspects, I doubt there are any laws in your jurisdiction regarding setting up a proxy to get around a school's filtering software, but then again, you can always be charged for contributing to the delinquency of a minor for anything these days.
I would get a lawyer. The world has gone insane!
Gizmos Gagets For Ninjas
If you're even bothering to ask this question, then i believe you might not want to do it. School filters are annoying; the favor you would be doing is immense. But as to whether or not it is moral or not: is P2P, bittorrent, are pirates and people who share moral? Yes, question with a question. Why are you asking this question. ?.
sometimes, nothing.
I wouldn't do it for two reasons. First, if the school moderately has their act together, they'll be watching their outbound traffic, see a big spike to the proxy site, and you'll end up on the block list inside of a week anyway (which might be less time than it takes you to get everything set up).
Second, I believe that when school kids are on school property using school equipment, the school should get to decide what they're allowed to do. My employer sure has this right, and it's also certainly a firing offense for me to bypass it. I salute schools that don't let kids play on the Internet when they're at school and should instead be learning. Sorry, school time is time that students should be using for, I dunno, learning. MySpace and MSN don't qualify, if this is really what they're looking to get to. So I wouldn't do it on principle (though of course realizing the kids will probably manage to find it somewhere else anyway).
Many people complain about schools, but things which I see as reasonable attempts to keep the kids on target are hollared at as censorship or some other poorly-fitting term which is basically the equivalent of saying, "We think kids should be allowed to do whatever they want, but we also think you should make them learn material they don't want to at the same time."
Slay a dragon... over lunch!
Legally, create an AUP which people must click through that basically says you wont use the site to do anything bad, surf porn, etc. IANAL tho.
Morally though, that only you can answer. You bothered to ask, so that may be your answer right there. Personally I think school filters are annoying and pointless, because everybody assumes that the second you turn 18 you somehow become magically mature enough to handle porn/violence/cigarettes/lotteries, things which you apparently couldn't handle at 17.995. Schools just want to cover their butts and I can't say I blame them. However our society as a whole is increasingly becoming a nanny-state where people must be 'protected' from 'bad things' rather than educated about them and informed on how to protect themselves or make good choices.
Realistically though, whoever runs IT on the school probably isn't stupid. If they see a bazillion hits to the same site they'll probably check it out, and figure out what it is. At that point it gets blocked. And if you don't use HTTPS, they can just traffic sniff it.
What I would do is make the site go HTTPS immediately, and the resulting page looks like a search engine, and function like one with a google API or something. Have your friend encourage everybody to use it as a search engine as much as possible, so the resulting traffic spike doesn't look suspicious. However script it so if you search for a particular string of terms (IE the password of the week) it dumps the facade and takes you to the proxy page. Also have a cookie so if you manually punch in the address to the proxy page w/out first searching for the password, it takes you back to the search page. This should make it last quite a bit longer.
--IronHelix
My advice, don't be a dick, if people need their goddamned myspace they can buy a computer and an internet connection. I get sick and tired of waiting in a queue at uni to use the library catalogue because every 18 year old tool is busy "LOL ASL"ing away on the machines my fees pay for.
Ah, that rant felt gooooood.
While I will not answer to the legal or moral aspects of this question, working as a system/network/security admin in a K-8 school district I do have an opinion.
As with many places these days IT departments (if there even is a department) in k-12 educational facilities are understaffed, under-funded and over worked. This is not a complaint this is just stating the facts. There are several districts that I can think of off the top of my head that do not have a full time technician or administrator. The care of IT systems is left to the librarian, math teacher or whomever is the most "technically inclined" teacher or staff person in the building. They will get paid a couple grand to do this as well as their main job of teaching. The main work is left to consultants who might be good. But nevertheless are only onsite when called for. This is not the description of some poor district in "Middle America" either. (No offense to the poor districts in Middle America) For the districts that or fortunate enough to have an IT department the staff is busy with the maintenance of the districts networks, systems, training users, etc. There is little time left to monitor the browsing habits of a 14 year old. We rely on content filters with updated rule sets and teachers who spot a kid doing something bad in class.
I would humbly request that you do not open yet another proxy. That will eventually end up on my content filters list. But students these days are not looking for free access to information. They are looking to bully the kid next to them. They are looking to surf sites that no 14 year old should be on or play games during class because they are too important to learn.
I am all for students pushing the edge and learning. I applaud the first kid who figured out that a proxy would work on content filters. If they figured out why I would even be happier. Heck I would explain it to them if they asked.
Hopefully someone reads this and figures out that it would be nicer to help out the school district in their area versus work against it. It has a hard enough time educating your children or friends. Why make it work harder than it reasonably needs to?
I work for a HS... We have filters and such because we are REQUIRED by law... Because somewhere along the line, the overwhelming majority of your parents thought it was a great idea to keep you safe from all the CRAP that is 99% of the internet.
It Pisses me off to no end when little snaughts think they are hot just because they can find a proxy and surf myspace or adult sites.
(Yes, after 7 years in HS and 5 yrs before in college support, I've grown cynical of the crap that is turned out as brains...)
MySpace and other social networking sights (yes, this is gonna be a blanket statement) are worthless and BAD for children. I don't care about the age 18 thing.... If you need "faceless" friends that bad, then purchase your own pipe at home and surf from there... but considering that we are ALL paying for the internet in schools (Universal Cost recovery Fee/tax on phone bills) then it is a waste of my time and the money of the tax payers for you to be using it to watch the latest viral video advertisment from coke or pepsi. (Product placement... watch for it...then ask how many of those vids are "REAL") Or looking for boobies on myspace or google images.
I admit that there are some legit uses for a proxy... like if you live in China or some country where access to books and information is banned by the gov, etc.. BUT, using it to bypass a school filter is NOT a legit reason.
The second reason the filter exists is because you should be LEARNING! Not learning how to hack/bypass things, but shit that matters.... This is one of the reasons (IMHO) why we rank so low on the global education scale... The internet should NOT be in cassrooms, Computers SHOULD NOT be in classrooms. Maybe a computer teacher with overhead and possibly smartboard, but nothing else... Have a few labs for the classes teaching computer software @ HS Level and a bank in the library... As it is now, 4/5 computers per room results = teacher that cant watch and guide the kids to use the internet in any responsible manner.
Get a life... Go HOME to get your vids/kicks and actually LEARN in school... When you get to college, you can waste YOUR parents money on MUDS and MOOS and I don't give a crap. (Ok, that gave away what I did in college...)
Most important, RESPECT the schools computers, we are just trying to do our job, and follow the rules that have been laid down by your parents! (And they supposedly care and love you...)
--- Relax, that mass muderer is just trying to reduce our carbon footprint, one fetus at a time...
He's a Slashdotter, why on Earth would he ask someone who knows?
;-)
But he asked what was the *moral* thing to do.
In which case I would have thought a lawyer would be the last person I would ask...