Slashdot Mirror
Congress May Require ISPs To Block Certain Fraud Sites
FutureDomain writes "A bill which just passed the House Financial Services Committee would require Internet Service Providers to block access to sites hosting financial scams that pose as members of the government-backed Securities Investor Protection Corporation (SIPC). The bill, called the Investor Protection Act and sponsored by Paul Kanjorski (D-PA), is broad enough to block not only websites, but email and any other 'electronic material.' 'Internet providers are also worried that Kanjorski's requirement — and the accompanying civil penalties and injunctions — would apply even if the blocking is not technically feasible.'"
on the surface i see this as good, nobody likes being scammed, but things always get out of hand and this i fear may start down a slippery slope of censorship.
and i'd really miss all the Nigerian prince jokes.
i wage a holy war against the apostrophe.
http://www.opendns.com/
This is how European-style web-blocking will come to the US?... I give it
Why don't they just arrest the scammers? Are they in Nigeria and Nigeria won't turn them over? Why don't we send agents abroad to bring them here? Didn't stop us from doing it in Italy to a guy suspected of being a member of Al Qaeda...
Well, all the requirements are there ... let's vote. Any opposed? [gavel] Excellent.
/sarcasm
I am all for stopping fraud, but scammers are far more nimble and inventive than our government, particularly Congress. This ain't gonna stop them.
I prefer rogues to imbeciles because they sometimes take a rest.
Things like SPF, and Domain Keys, and signed DNS would all prevent this. They would all help ensure that emails are coming from who they say they are coming from.
Instead of "blocking" things, why not force all government agencies to setup SPF and Domain keys, and maybe start signing the .GOV domain?
What are we going to do tonight Brain?
This, which is clearly a waste of time if it is technically possible, at all,
is legislative masturbation,
it isnt that the Congress has nothing to, re-enact Glass-Steagall, stop naked shorts and credit default swaps
properly regulate the Fed, SEC and the exchanges;
Deal with those Too-Big-To-Fail
Sounds like Kanjorski is going full retard.
"He's lost in a 'floyd hole"
Will the bailed out banks get an exemption?
The AACS key is NOT 0xF606EEFD628B1CA427BEA93A9CA9773F
First it will be fraud sites. Then alleged copyright infringers. Then alleged porn peddlers. Then alleged left wing/right wing propagandists. Then any site deemed to be detrimental to the well-being of the Homeland.
And before you know it, the commercialization of the World Wide Web (a least from the viewpoint of a US citizen) will be complete.
Here's a message to Congress: Just stay the fuck out of my life.
Just pass a law saying the ISPs must block all spam, problem solved. Next, they should make them block all viruses as well. Wow, I never thought it would be this easy. Block any discussion of terrorist acts as well, and all pictures of ugly women.
It's been clear for some time now that it was only a matter of time before the feds began forcing ISP's to block controversial sites (probably with about as much "proof" of wrongdoing as we see in the infamous DMCA takedown notices). It's sad that the days of simply typing in www.thepiratebay.org or even a lot of legitimate sites' URL's and having the site just pop up are coming to an end. From now on out, it's going to be a constant fight between users and their ISP's, with the RIAA/MPAA exclusively deciding which sites we can see or not see. Of course, we /. clever types can find ways around it, but again, it will be a constant fight from now on (like homebrew on a console or jailbreaking an iPhone, it will be a constant state of we-figure-out-a-new-workaround-they-find-a-way-to-block-it). What a shame.
SJW: Someone who has run out of real oppression, and has to fake it.
Are you high? The DMCA started with the best of intentions. Now it is used to stifle people criticism and control content. i can only assume you are some kind of troll, because you surely realize that as soon as you start blanketing one corner of the internet with "fraud protection", you move to "counterfeit assurance" and then "piracy control" until you finally get to "free speech countermeasures". if this is the internet you want, please, setup your own intranet and leave the rest of us out of it. i'll take the scammers any day over oppression.
they say it is often more relevant then the comment above, all we know is its called the Sig!
Looking at the wording of the law, I think the idea was to make the scammer's own ISP liable, not every ISP in the country. But that's not what it says; the law ends up covering every ISP from the scammer to the customer, including transit providers. Hopefully this thing will get killed.
that I see coming from Congress the more worried I get. They seldom do what they say and seem to only enforce someone's right to do what they are doing to me.
Like being told they have X hours to hold my laptop during a border crossing, or codifying the ability of an airline to hold me hostage on a plane for X hours.
When they tell you they are defining you rights be very afraid.
* Winners compare their achievements to their goals, losers compare theirs to that of others.
Now I don't suggest we have a domain for everything, but ".bank" sounds like a good idea and something useful for that particular industry. Much like you need to be an educational institution to use .EDU or a government entity for .GOV, why not allow only properly registered banks to use a .bank domain, with some checks to ensure they're not scammy duplicates.
After a year or two, anything not using the ".bank" domain should hopefully raise enough suspicion to become fairly obvious as a scam.
I think we should be more concerned about politicians who earmark millions of dollars for their family. http://www.politico.com/news/stories/0907/5667.html
Congressman Kanjorski advocates a
( ) technical (X) legislative ( ) market-based ( ) vigilante
approach to fighting phishing. His idea will not work. Here is why it won't work. (One or more of the following may apply to your particular idea, and it may have other flaws which used to vary from state to state before a bad federal law was passed.)
( ) Phishers can easily use it to harvest email addresses
(X) Mailing lists and other legitimate Internet uses would be affected
(X) No one will be able to find the guy or collect the money
( ) It is defenseless against brute force attacks
( ) It will stop phishing for two weeks and then we'll be stuck with it
( ) Users of the Internet will not put up with it
( ) Microsoft will not put up with it
( ) The police will not put up with it
( ) Requires too much cooperation from spammers
( ) Requires immediate total cooperation from everybody at once
( ) Many Internet users cannot afford to lose business or alienate potential employers
( ) Phishers don't care about invalid addresses in their lists
(X) Anyone could anonymously destroy anyone else's career or business
Specifically, your plan fails to account for
( ) Laws expressly prohibiting it
( ) Lack of centrally controlling authority for email
(X) Open relays in foreign countries
( ) Ease of searching tiny alphanumeric address space of all email addresses
(X) Asshats
(X) Jurisdictional problems
( ) Unpopularity of weird new taxes
( ) Public reluctance to accept weird new forms of money
( ) Huge existing software investment in SMTP
( ) Susceptibility of protocols other than SMTP to attack
(X) Willingness of users to install OS patches received by email
(X) Armies of worm riddled broadband-connected Windows boxes
( ) Eternal arms race involved in all filtering approaches
(X) Extreme profitability of phishing
(X) Joe jobs and/or identity theft
(X) Technically illiterate politicians
( ) Extreme stupidity on the part of people who do business with phishers
( ) Dishonesty on the part of phishers themselves
( ) Bandwidth costs that are unaffected by client filtering
( ) Outlook
and the following philosophical objections may also apply:
( ) Ideas similar to yours are easy to come up with, yet none have ever been shown practical
( ) Any scheme based on opt-out is unacceptable
( ) SMTP headers should not be the subject of legislation
(X) Blacklists suck
( ) Whitelists suck
(X) We should be able to talk about Viagra without being censored
( ) Countermeasures should not involve wire fraud or credit card fraud
( ) Countermeasures should not involve sabotage of public networks
( ) Countermeasures must work if phased in gradually
( ) Sending email should be free
(X) Why should we have to trust you and your servers?
( ) Incompatiblity with open source or open source licenses
(X) Feel-good measures do nothing to solve the problem
( ) Temporary/one-time email addresses are cumbersome
(X) I don't want the government reading my email
(X) Killing them that way is not slow and painful enough
Furthermore, this is what I think about you:
(X) Sorry dude, but I don't think it would work.
( ) This is a stupid idea, and you're a stupid person for suggesting it.
( ) Nice try, assh0le! I'm going to find out where you live and burn your
house down!
I am officially gone from
I've heard of not RTFA before posting, but wow, you didn't even read the headline?
Not even the very first word?
How many times did you vote Tuesday?
In insulting the parent poster, you just proved his point correct and your own flame as false.
Yes, read TFA, and the summary, and the very first word, all as you point out.
Now, with that, prove to us that this won't be used to block anything congress critters don't like. Just try.
I can prove they will. It's called history, and 100% of the laws that could be abused in this way, HAVE BEEN. 0% of them have not been abused.
With that type of track record, you are insane if you think this won't be used to block Joe Random blogger who is critical of something the government is doing.
The DMCA started with the best of intentions.
Sorry, you lost me there.
Freedom isn't free; its price is the well-being of others.
They shouldn't be worried. The government almost never passes laws which cannot be enforced. They've got a pretty good grasp on technology.
This law can be enforced easily. Enforcement =/= blocking sites. Enforcement == fining/shutting down ISPs who don't block sites. It's almost a "Don't breathe" law, and enforcement is simple.
Why doesn't the federal Government use the URDP to just seize the domains? If they're posing at the government, that should be a quick slam-dunk court case, and then the government just takes it to ICANN who forces their registrar to transfer to ownership:
http://www.icann.org/en/udrp/udrp.htm
I know it's not as simple as that, but once the ball is rolling it should stop them as appealing method of scamming. Plus, it's "the right way" to get it done without passing any new law that can be abused. Enabling any sort of China-like-firewall-filter is a *bad idea*.