Slashdot Mirror


Australian Censorship Bypassed Before Live Trials

newt writes "The Australian Government is planning to conduct live trials of as-yet-unspecified censorship technology. But as every geek already knows, these systems can't possibly work in the presence of VPNs and proxy servers. PC Authority clues the punters in." Maybe the ISPs secretly like encouraging SSH tunneling — and making everyone pay for the extra bandwidth used. Not really; Australia's major ISPs, as mentioned a few days ago, think it's a bad idea.

52 of 184 comments (clear)

  1. Uh. by Anonymous Coward · · Score: 2, Interesting

    Ssh typically does compression and then encryption, so we might very well end up with a net savings in bandwidth.

    1. Re:Uh. by Ethanol-fueled · · Score: 4, Insightful

      ...Until the Aussie government considers SSH, VPN's, and anonymizing proxies to be "hacking"(illegally circumventing a la DMCA) and takes steps to outlaw them.

    2. Re:Uh. by Hatta · · Score: 2, Insightful

      On the other hand SSH tunnels aren't amenable to caching. And no matter what, you're adding another hop.

      --
      Give me Classic Slashdot or give me death!
    3. Re:Uh. by heretic108 · · Score: 3, Insightful

      I'm an Australian myself, and it saddens me to say that you might have a point there. Australia's legendary convict streak has always been counterbalanced by a lurking streak of repressive authoritarianism of a kind which, if permitted to fully express itself, would make the UK's big brother state look tame.

      --
      -- In the beginning was the WORD, and the WORD was UNSIGNED, and the main(){} was without form and void...
    4. Re:Uh. by mlwmohawk · · Score: 2, Insightful

      .Until the Aussie government considers SSH, VPN's, and anonymizing proxies to be "hacking"(illegally circumventing a la DMCA) and takes steps to outlaw them.

      While one can never account for the cluelessness and stupidity of so called "conservative" government, tools like SSH and general encryption are foundations of a lot of necessary infrastructure.

    5. Re:Uh. by drsparkly · · Score: 5, Insightful

      How many businesses rely on VPNs to connect their remote offices? How many sysadmins use SSH to remotely connect to their unix systems? If the government moved to outlaw VPNs and SSH, there is no point having an internet any more. If the government did this there would be a major backlash from the business community. It would be political suicide, if the current plan isn't already.

      My internet connection is paid for by my current employer so I can (a) telecommute (VPN) (b) remote administer systems in case of problems (VPN, SSH). Its a home internet plan, so they could not simply limit this block to home internet users.

      I repeat my point... if the Aussie government starts blocking every protocol that can be used to bypass their stupid filter, there is no point having an internet. Australia will be back to the stone age.

    6. Re:Uh. by drsparkly · · Score: 2, Interesting

      I currently work for an unamed large geotechnical company with HQ in Holland. Their bonehead corporate ICT network routes all traffic through a global gateway in either Holland or the US. I work in Perth, Australia. To access a server on the floor below, the packets are going 1/2 way around the world and back. And its fscking slow.

      Thank god for our hosting networks ;)

    7. Re:Uh. by stephanruby · · Score: 2, Insightful

      I currently work for an unamed large geotechnical company with HQ in Holland. Their bonehead corporate ICT network routes all traffic through a global gateway in either Holland or the US. I work in Perth, Australia. To access a server on the floor below, the packets are going 1/2 way around the world and back. And its fscking slow. Thank god for our hosting networks ;)

      I was going to say. It's nothing that a diamond head cement drill wouldn't solve. I'm just sorry you went for the easy invisible solution instead.

      Nothing says "Fuck you HQ" like a bunch of cat wires dangling randomly from the ceiling.

    8. Re:Uh. by Starayo · · Score: 2, Informative

      Heh, the only sites located in Australia I visit are the occasional TV network / job site / council site. Everything else, including a large amount of sites operated by Australians, are located outside the US, because:

      a) You need a registered business to have a .com.au address
      b) Hosting within Australia costs a ridiculous amount of money, like anything to do with the internet in Australia

      Now of course this is only speaking for myself, but the average internet user I know doesn't use many Australian sites at all, rather they use their facebook / myspace / other crappy social networking site, youtube, stuff like that.

      --
      Ezekiel 23:20
    9. Re:Uh. by Gideon+Fubar · · Score: 2, Insightful

      You're probably correct, but only because of local mirroring. Anecdotally, most Australians don't even consider 'Australia' when using the internet, instead they consider it a global resource.

      --
      http://www.xkcd.com/354/
    10. Re:Uh. by limaxray · · Score: 2, Insightful

      They could get around that by only outlawing encryption systems that didn't have a government approved back door. Then the companies could be safe from the hackers while the government kept the population safe from the child porn. It wouldn't be the first country to pass such requirements...

    11. Re:Uh. by mcbridematt · · Score: 2, Interesting

      Most internet traffic in Australia is to the US. AFAIK the amount of local traffic is 30% at best. This would be including Akamai and other CDN's. (BTW One ISP recently cited BitTorrent as being 60% of traffic carried) Our bandwidth caps are dictated by the price of transit to the US, which will fall once competition heats up next year.

    12. Re:Uh. by 6th+time+lucky · · Score: 2, Insightful

      Discussing open network initiatives with members of '%' government? Inconceivable!

    13. Re:Uh. by tabrisnet · · Score: 3, Informative

      On any kind of WAN link, it's a savings. It only costs you something on a 100mbit LAN link. The basic problem is that if you hit the CPU limit before you hit the bandwidth limit, compression (or encryption) will suck. But if you can hit the bandwidth limit first, then you will get a reasonable savings.

      I've so far found that on a reasonably modern CPU, you need to be pushing in excess of a 10mbit ethernet, but less than a 100mbit ethernet, for it to hit the CPU limit first.

      Reasonably modern CPU being defined as, approximately, a 1GHz Athlon or higher. My Thinkpad R51 (1.6GHz Pentium-M) caps out at ~2Mbyte/sec if compression or aes128-cbc is used (arcfour & no compression lets it hit 4-6Mbyte/sec [very very slow hard-drive]).

      On a much more modern system, with compression disabled and arcfour encryption (and the MAC cranked down to the hmac-md5), I cap at approximately 40Mbyte/sec.

    14. Re:Uh. by knutkracker · · Score: 2, Funny

      I currently work for an unamed large geotechnical company

      Given that they can't even think of a name yet, their boneheadedness with the network doesn't surprise me.

  2. The old saying still holds by Smidge204 · · Score: 5, Insightful

    A wise man once said: "The Internet interprets censorship as damage and routes around it."

    (And if you don't know who, turn in your Slashdot account by tomorrow morning.)
    =Smidge=

    1. Re:The old saying still holds by Geoffrey.landis · · Score: 4, Insightful

      A wise man once said: "The Internet interprets censorship as damage and routes around it."

      In fact, the original quote was that "Usenet interprets censorship as damage and routes around it," although the saying is widely misquoted.

      (Note how incredibly useful the uncensored usenet has become.)

      --
      http://www.geoffreylandis.com
    2. Re:The old saying still holds by jandrese · · Score: 4, Insightful

      To be fair, the Usenet was killed by the old truth that if you give the people a cheap broadcast mechanism, the first thing they'll do is try to put advertisements on it.

      It has been said that prostitution is the oldest profession, but before they could be prostitutes they had to advertise their services.

      --

      I read the internet for the articles.
    3. Re:The old saying still holds by Speare · · Score: 4, Funny

      (And if you don't know who, turn in your Slashdot account by tomorrow morning.)

      Translation:

      (And if you don't know who, I'm too lazy to google it for you as it has slipped my mind also.)

      --
      [ .sig file not found ]
    4. Re:The old saying still holds by YrWrstNtmr · · Score: 2, Funny

      A wise man once said: "The Internet interprets censorship as damage and routes around it."

      Routing around Australia as a whole is probably not the intended nor desired outcome. The rest of the Internet will be fine. Just nothing in or out of Oz.

  3. Positive aspect by khellendros1984 · · Score: 3, Insightful

    I can see a positive possibility here. Find a work-around, and when you're caught visiting "illegal sites", claim that you thought your actions were legal since there's a "foolproof" filtering system that should've properly protected you.

    --
    It is pitch black. You are likely to be eaten by a grue.
  4. China! by vik · · Score: 4, Funny

    Won't it be embarrassing when people start routing their traffic through China to get around American and Australian internet legislation?

    Vik :v)

    1. Re:China! by ink · · Score: 2, Insightful

      What American legislation? It seems that France, China, Australia, and the UK are the ones spearheading big-brother Internet censorship.

      --
      The wheel is turning, but the hamster is dead.
  5. Advantages to Censorship by Sasayaki · · Score: 4, Funny

    As an Australian who fervently opposes Chairman Rudd's censorship bill...

    There is one advantage I can see to all of this. Big Brother will block anything illegal and offensive to me, right? So I can download absolutely anything I DO find since it MUST be legal. After all, the censorship is perfect!

    Pirate bay here I come!

    --
    Check out my sci-fi book "Lacuna" at http://goo.gl/MVxX8
    1. Re:Advantages to Censorship by renegadesx · · Score: 2, Funny

      As an Australian who fervently opposes Fuer Rudd's censorship bill...

      There, fixed that for you ;)

      --
      Make SELinux enforcing again!
    2. Re:Advantages to Censorship by syousef · · Score: 2, Insightful

      As an Australian who fervently opposes Chairman Rudd's censorship bill...

      I'm Australian too and I'm getting increasingly annoyed with Rudd. I find the man to be less than genuine, and it doesn't stop with his pandering to China or fearlessly taking on a dictatorial line. He seems to remind me of that every time he's in the news. Like yesterday saying that Obama had fulfilled Martin Luther King's dream. Tell that to almost all the southern states - they all voted for McCain. I can't even think how I'd be feeling if I were a US secret service officer tasked with protecting the president (or family of one of these guys). How much did their life insurance just go up? That is NOT the dream MLK had. He was speaking about true equality and predjudice being a thing of the past. Way to go hijacking that dream to suck up to the president elect of the US. Idiot.

      --
      These posts express my own personal views, not those of my employer
    3. Re:Advantages to Censorship by deniable · · Score: 2, Interesting

      Given that this whole thing looks to be a pander to Steve Fielding and Family First, I think the better solution will be to start blocking things they care about. That and downloading porn and asking them to grade it for me.

      I've had just about enough of FF. Rigging Australian Idol didn't bother me, but now they're trying to shut down the web.

  6. Not very good blocking software by elrous0 · · Score: 4, Interesting

    Any decent blocking software also blocks all the popular proxy lists and proxies too (and it constantly updated). Software that does this (like Websense) may not be impossible to get around, but it makes it damn hard (and I know, this is what my school uses and even with my knowledge it's still hard to find a proxy).

    --
    SJW: Someone who has run out of real oppression, and has to fake it.
    1. Re:Not very good blocking software by compro01 · · Score: 3, Informative

      My college uses websense, but Tor goes right through it, and with ready-packaged stuff like xB Browser and OperaTor, it's readily available for practically anyone as long as you can grab the program once (long live the sneakernet).

      --
      upon the advice of my lawyer, i have no sig at this time
    2. Re:Not very good blocking software by morgan_greywolf · · Score: 4, Informative

      Any decent blocking software also blocks all the popular proxy lists and proxies too (and it constantly updated). Software that does this (like Websense [wikipedia.org]) may not be impossible to get around, but it makes it damn hard (and I know, this is what my school uses and even with my knowledge it's still hard to find a proxy).

      Bypassing Websense:

      1. Have a PC running on a high-speed Internet connection on the other side of the Websense proxy.
      2. On that PC, you need to run OpenSSH and an HTTP proxy server, say at mypc.example.com. In this example, I my proxy server will be using port 8080. Run SSH on Port 443 (works every time) on this box.
      3. Using PuTTY or Plink or one of the front-ends for plink, forward 8080 through an SSH connection to this PC from the inside of the Websense firewall. Putty and Plink can tunnel right through the proxy connecting to port 443 just like an HTTPS connection would do.
      4. Set your browser to use the proxy on localhost at port 8080
      5. Done. All Web accesses will go through the SSH proxy and all of this data will be encrypted as a result.

      I will leave the details as an exercise to the reader.

      Doesn't seem 'damn hard' to me at all.

    3. Re:Not very good blocking software by elrous0 · · Score: 2, Insightful

      If I had "a PC running on a high-speed Internet connection on the other side of the Websense proxy" I suppose it wouldn't be.

      --
      SJW: Someone who has run out of real oppression, and has to fake it.
    4. Re:Not very good blocking software by elrous0 · · Score: 2, Insightful

      Great. Now how do I get a remote host? Let me guess, I go to a proxy list that Websense blocks?

      --
      SJW: Someone who has run out of real oppression, and has to fake it.
    5. Re:Not very good blocking software by 0100010001010011 · · Score: 2, Informative

      I use my dreamhost shell at work to get around work's s filter. Especially since in the last week they really tightened down the firewall.

      I suppose if you had the extra cash $10 a month for no filtering might be worth it. There are plenty of other ssh enabled hosts out there.

    6. Re:Not very good blocking software by 0100010001010011 · · Score: 3, Insightful

      It's becoming painfully obvious you're a highschooler trying to get around some stupid proxy. You don't "go find" hosts outside the firewall. You know what they are. They're your home computer, your home router (if you run ddwrt/tomato), your shell account provider (dreamhost for me). This isn't a proxy list, this isn't a list of proxies. It's a computer with OpenSSH running on it.

      Everyone HAS told you how to do it, you're just so anxious about showing your l33t skills of haxoring to the Homecoming queen you aren't listening.

    7. Re:Not very good blocking software by Anonymous Coward · · Score: 2, Insightful

      Which is the point being made by the EFA. As soon as they decide to make themselves the middle man, there will be no security integrity.

  7. Follow up by Sasayaki · · Score: 3, Funny

    So far it's working out great! Haven't had my net cut off y

    --
    Check out my sci-fi book "Lacuna" at http://goo.gl/MVxX8
  8. First, We Take the Guns. by bill_mcgonigle · · Score: 2, Insightful

    Hrm, so 11 years after their Federal powergrab to start banning arms. Not as fast as some regimes, but fitting the pattern pretty well.

    Remember what Paul Hogan says, "That's not a knife, this is a knife... that'll get you locked up for two years if you try carrying it in my country."

    Australians used to be such bad-asses.

    --
    My God, it's Full of Source!
    OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
  9. Disobedient by bill_mcgonigle · · Score: 2, Insightful

    you thought your actions were legal since there's a "foolproof" filtering system that should've properly protected you.

    It's fool-proof, not criminal proof. Since you're reading material that's critical of the Australian government you've proven yourself a criminal.

    Please come with us. *click-clack*

    --
    My God, it's Full of Source!
    OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
  10. Google 'Nolan Chart' by bill_mcgonigle · · Score: 4, Insightful

    The US voted out the religious right yesterday. Pitty our religious right goverment isn't due for re-election for another couple of years...

    It has little to do with being religious or right. The problem is statists, no matter their views on God, Gods, no Gods, or economics.

    --
    My God, it's Full of Source!
    OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
  11. Re:Even though geeks and tech savy people can bypa by SpiderClan · · Score: 2, Insightful

    1. http://www.google.com.au/

    2. 'Australia internet filter bypass'

    3. 95% of the population can bypass the filter.

  12. Re:It can "work" by compro01 · · Score: 2, Interesting

    He mentioned adding it to the root certs to get around that. Just persuade Microsoft to add it as a "critical automatic update" and the majority of people won't notice a thing.

    --
    upon the advice of my lawyer, i have no sig at this time
  13. Misunderstanding by QuantumG · · Score: 4, Interesting

    The filter is there for people who don't want to bypass it.

    The only reason there is no opt out planned for the "illegal material" filter is because a "reasonable person" should not want to opt out of it.

    In other words: it's not malice, it's stupidity.

    --
    How we know is more important than what we know.
  14. Re:It can "work" by Psychotria · · Score: 2, Funny

    Microsoft is not high on my list of companies that I regard in good stead. But the Australian Government "persuad[ing] Microsoft to add it [forged certs] as a "critical automatic update" targetted at AU users only seems a bit far-fetched--even to me.

  15. Re:The painful thing is by ink · · Score: 2, Insightful

    Yep, and the DMCA was a bi-partisan effort here in the States. Neither side cares much for digital rights.

    --
    The wheel is turning, but the hamster is dead.
  16. Re:Even though geeks and tech savy people can bypa by Sloppy · · Score: 3, Insightful

    The US voted out the religious right yesterday.

    Really? You might want to read up on California's newest constitutional amendment.

    --
    As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.
  17. Re:Even though geeks and tech savy people can bypa by maglor_83 · · Score: 3, Insightful

    Not if they block google.

  18. Or use OpenVPN! by toby · · Score: 4, Interesting

    It's LZO compressed by default - not to mention encrypted and X509 authenticated - which probably means a net reduction in bandwidth. Go visit their site. It's truly excellent open source software.

    But seriously. As a practical matter, anyone stuck behind state censorship can use a friend's OpenVPN and proxy in another country.

    --
    you had me at #!
  19. Somewhat relative: by Anonymous Coward · · Score: 2, Interesting

    "The state must declare the child to be the most precious treasure of the people. As long as the government is perceived as working for the benefit of the children, the people will happily endure almost any curtailment of liberty and almost any deprivation."
    -- Adolf Hitler

    Sorry for Godwin'ing this article but it is quite relative. Senator Conroy is trying to argue this like a Christian, any time someone speaks against him about the filter he just puts his fingers in his ears and says "la la la can't hear you, you're a pedophile because you oppose my filter"

  20. Re:Even though geeks and tech savy people can bypa by deniable · · Score: 2, Insightful

    Hopefully, they will. Google is mainstream enough that killing it will be one of the quickest ways to piss off the public and get this whole plan scrapped. There's an old rule that 'the best way to fight a stupid law is to enforce it to the letter.' This explains why Australia has a tonne of boneheaded laws that are never enforced.

  21. Geeks are missing the point by speedlaw · · Score: 2, Insightful

    It's not about whether you can read by flashlight under the covers. I realize as a 'murican that the First Amendment freedoms of speech are a "local ordinance" in cyberspace, but Australia is copying China...Communist China. I am of the understanding that a printing press can reproduce odious child porn...so we should register and monitor ALL the presses. Does not this small bit offend, concern or otherwise motivate those "down under" ? I'm not very familiar with Aussie politix, but I would think that in a nominal democracy something this huge would trigger backlash. Censoring the internet in a free country ? Who cares if you can work around....that's SO not the point.

  22. Re:Not convicts ... sheep. by cammoblammo · · Score: 2, Interesting

    When deciding whether to allow them to have access to my first kid I bought their course materials. I have no problem at all with kids learning bible stories (I'm a amateur wannabe bible scholar myself), or being taught to be kind to one and other (in fact if the catholics we here I might let him go). But that is not what is being taught. The course has been cleverly designed to inculcate the kids with fear and an unshakeble belief in God as the evangelists see him (complete with creationism).

    Hmm, I know the problem. I fixed that in my kids' school---I teach the Scripture lessons. Few of the kids in the classes I teach (11-12 year olds) had heard of evolution until I taught it to them last week.

    It wasn't strictly in the curriculum, but it's nothing that's not (officially) in the school curriculum anyway, so I think I'll keep my job. If I stop posting on /. in the next week or two, though, send out a search party...

    --

    Cogito, ergo sig.

  23. We should have seen this coming by Dracophile · · Score: 2, Informative

    The ALP's position on this before last year's federal election was that the proposed filtering system was optional; you could opt out of it. However, on 2 November, just weeks before election day, ALP candidate for the seat of Kingsford Smith, Peter Garret, told 2UE journalist Steve Price, "once we get in we'll just change it all". Now that comment was in the context of climate policy, but I guess now we know that it has a somewhat broader application, because the ALP's position has changed post-election to a mandatory filtering system.

    Given that there are ISP plans that offer the sort of filtering that the ALP wishes to force on everyone in the country, and that the government already offers client-side filtering packages, free of charge, this post-election flip-flop is nothing sort of treacherous, and if they go ahead with it I suspect that a lot of Australians will be waiting for the ALP at the next poll with metaphorical baseball bats. I, for one, talk to my friends and family about this issue. It's a vote-changer for me, and I take time to make sure that my friends and family understand how this affects them.

    Memo any ALP apparatchiks that might have found their way to Slashdot: This is a vote-changing issue. There are many of us who are extremely displeased with the pig-headed way in which the Minister has pursued this matter. The ALP stands to lose many votes over it. There are few votes to be won because nearly all of those you hope to gain over this filtering proposal already go to religious candidates and you have stuff-all chance of changing that. Summary dismissal and form letters that don't even address the issues are no longer good enough. Ignore the users of the internet at your electoral peril.

    --
    Athy, athier, athiest.