The Gaping Holes In the UAE's Net Firewall
Barence writes "The United Arab Emirates has its own Chinese-style firewall to weed out pornography and other 'unsavory' content. But as PC Pro's correspondent has found out, the firewall has more than a few holes in it. ISP helplines routinely suggest proxy server software that circumvents the filters. Access to Flickr is blocked, in case citizens' eyes should fall upon a naked buttock, but The Pirate Bay, which 'offers a range of bottoms to suit every need, including midget and donkey bottoms for anybody having a really slow afternoon – remains blissfully undisturbed.' 'Ultimately, I'm quite glad the UAE's authorities block websites, and thrilled that they're so inept at it,' concludes PC Pro's writer. 'Just like everybody in Dubai, all they've done is made me a master of internet chicanery.'" Guess that depends how closely they're watching the evaders.
Yes! Penetrate all their firewall holes!
PC Pro obviously needs to be blocked to prevent people from finding out the firewall doesn't work!
They say a little knowledge is a dangerous thing, but it's not one half so bad as a lot of ignorance. - Terry Pratchett
I doubt the firewall is there to block access to porn. What they really want is enforcement (harsh).
Without the firewall, you might get away with the excuse that you happened upon the site by mistake, or via those corrupt western popup blockers.
If you go through the trouble of setting up a proxy or some other means of circumvention, then they could probably use that information to show your willful intent to kill kittens or something.
Having been to a few church weddings recently, it's apparent from the talk that marriage is just a way for religion to maintain control over something. And what better way than to control people than through the nookie supply? You get your nookie assigned to you through church or not at all. So it sort of stands to reason than religious groups are against prostitution or promiscuity or even just loose women... it pretty much cuts into their turf.
'Just like everybody in Dubai, all they've done is made me a master of internet chicanery.'
I'd be willing to bet there are very few misconfigured wireless networks in Dubai.
Give me Classic Slashdot or give me death!
Before posting something like this, this genius should make sure he is out of the country and is never going back. They'll kill him or send him to jail for "encouraging indecency" -- or maybe a stoning?
http://www.huffingtonpost.com/2010/04/04/dubai-kissing-couple-jail_n_524736.html
These whack jobs in Dubai and other Tyrant controlled governments have SLAVE labor. Like they are going to respect "freedom of the press".
http://blogs.abcnews.com/theblotter/2006/11/dark_side_of_du.html
Dollars to doughnuts nobody in the U.A.E. is surfing thepiratebay right now. I'll eat my hat.
[hello.jpg]
Whenever people try to block something, they only succeed in making the users smarter, and those in charge look less competent. High-school filter proxy blocking Slashdot and Wikipedia? Install firefox, set it to autodetect proxy settings, and it picked up the unfiltered teacher proxy, not the student. When they changed it around so the student proxy was preferred, we figured out the IP and configured it directly. College filter blocking Facebook? Use the VMWare helpfully installed by the admins, boot up Firefox in Linux, and it uses a direct connection. Heck, I discovered that one by accident. I'm actually starting to suspect that the real purpose behind school filters is education, not censorship.
A somewhat amusing juxtaposition of a line from this story:
The Pirate Bay, which 'offers a range of bottoms to suit every need, including midget and donkey bottoms for anybody having a really slow afternoon – remains blissfully undisturbed.'
against the other just a couple of slots down on the front page article
"Torrent-tracking site The Pirate Bay is currently unavailable as reports come in of co-ordinated police raids against file sharers across Europe.
So when I connect up my internet for the first time, I won't run into any naked people by accident. Good.
If I want to look at naked people, the ISP itself will give me what I need to see naked people. Also Good.
The UAE governmant is happy, horny teenagers are happy, concerned (protective) parents are happy. Where is the problem?
By setting up a law that everyone is expected to disobey, what they have done is supplied an easy reason to detain and question anyone "of interest". It's a calculated move.
Just because I can hook a shark from a boat, I do no offer to wrestle it in the water.
I mean, short of publishing it right on the front page of the UAE Times (or whatever newspapers, news media they may have), what bigger ways are there to let the authorities KNOW that there is a hole in their censorship software...
I wonder, how long pirate bay or similar sites may still be accessed from there; and how long it will be, before mentioning a filter-free proxy becomes a severe flogging-worthy offence in the country?
As great as it is letting the people know how to circumvent censorship, you should think of finding a way to 'spread the news' of those 'holes' in a way that bypasses the authorities in charge of said filters...
Heh. There are more then five posts with a "gaping hole" headline and no one has made the obvious reference. What is /. coming to?
"I'm not a quack, I'm a mad scientist! There's a difference." - Dr. Cockroach
bypasses such firewalls to watch videos?
Seriously it's not like they can't log traffic and throw you in prison never to be seen again as an example to the rest of the idiots.
If you live in such a country, then sure there are reasons (you can't go all your life without watching donkey porn for some reason, or there's a political statement to make, or whatever), but if you are there temporarily why would you take such a risk?
10 years ago, i was flying from london to sri lanka via jordan airport.
I had a DJ magazine with me for a DJ friend in sri lanka, and lacking anything to read on the flight, i had it in my hand.
the guy at immigration saw the magazine in my bag and wanted to take a look. i knew what was going on, and i also knew that hte magazine didn't have anything they could even REMOTELY consider "lascivious" so i let him have it.
he leafed through a few pages and asked me (with great disappointment) "no mwah mwah mwah?" while kissing his hand.
i had a hard time NOT telling him that i was an IT geek, and we can get our "mwah mwah mwah" from the internet.
the point i am trying to make is that when you try to suppress a biological impulse, nay NECESSITY, people will find a way to get access to it.
they are trying to implement a pornwall in sri lanka as well. a year ago the government blocked ELEVEN sites. now they want to block a hundred. I know the guys in charge of the pornwall. I know their abilities. i know at least two of them are in a porn mailing list that has been in existence in one form or the other since 1998
i would REALLY doubt it was incompetence on the part of the people running the firewall. that is created to make the politicians and the religious extremists feel better.
if the IT guys wanted to take down a site, they would, but most of them really don't want to, and really don't care. as far as they are concerned, they are doing their jobs, but when it comes to things like this "their job" is the bare minimum they are forced to do.
learn from yesterday, plan for tomorrow, party tonight
or one out of three ain't bad
'unsavoury' content.
I have always been a bit confused about this - savoury bisciuts are the ones that are sort of dry and a bit salty, so the sweet ones are called unsavoury, am I right?
'Ultimately, I'm quite glad the UAE's authorities block websites, and thrilled that they're so inept at it,' concludes PC Pro's writer. 'Just like everybody in Dubai, all they've done is made me a master of internet chicanery.'
This sort of flippant attitude can come back to bite - when something is illegal, then it is illegal even if they don't enforce it very well, and if they one day decides to do it, then they will have a field day sweeping up fools like this one.
HTTPS was unfiltered (not sure if its still true), any website that had a secure part could be easily got to.
Had friends who liked to gamble, they couldn't access the front page of their favourite gambling site, but could go the login page and access their accounts.
"Gaping Holes in the UAE's Net Firewall"
I like how the title describes both the problem with the UAE's firewall as well as the content that is likely passing through due to the problem...
I find it odd that they even bother with filtering in the first place, as the vast majority of pepole living in the UAE are expatriates.
But one thing for sure is that they're getting stricter with firewalls in this middle east where censorship is practices. Oman for instance, through the TRA (telecom regulatory authority) announced a draft law that would forbid individuals from using VPN software, mostly used to circumvent state censorship. You'll be fined $1200 if you're caught doing.
It's impossible now in Oman to use PPTP, L2TP or IPSEC VPN connections. The only one that really works is OpenVPN, and only if you use a TLS-AUTH key.
Apparently, regionally, Dubai blocks all mention of The Flintstones because people there don't like it, but the people in Abu Dhabi do.
Well, if the everyday rube can't access it, what's the point?
Also, it sounds like a known problem, what with the ISPs telling customers how to bypass it.
Don't underestimate the degree of blatant hypocrisy in play here. Drinking and extramarital sex are absolutely forbidden in middle-eastern culture, which just makes them all the more attractive. Repress something, and all you do is drive it underground. Since the middle-east tries to repress everything, well...
Take Bahrain as an example. While Bahrain is pleasant enough, they are connected by a bridge to Saudia Arabia. When the weekend (Thursday) rolls around, the bridge is jammed with Saudi Arabians coming to to party - getting smashed and getting laid - which they can't get away with at home.
Of course there are holes in the firewall - how else can the upper classes get their porn?
Enjoy life! This is not a dress rehearsal.
... they can even get to Craigs List personal services there. [Sigh]
Have gnu, will travel.
I am writing this from the UAE. I do feel that if the government here is not trying hard to block all except for VOIP which is a threat to their income. There are two big telecommunications companies that control all Internet access, and I found it very easy to access any site I wanted by using proxies but I faced more difficulties in trying to use Skype or other VOIP softwares so I really belive that it all comes down to money.
and by the way the population of the UAE is overwhelmingly expats. I have lived in Dubai for around five years. I have yet to live anywhere near a local person. I dont see them in any neighborhood that I lived in, I dont see them when I go shopping and I dont see them at my work in a large private company. they are less than 5% of the population and they live in certain areas and largely work in goverment jobs.
Guys, using an Amiga as your firewall might seem to give you some "good"(?) security-through-obscurity advantages, but if you're running it on UAE then it's all going through your host's TCP/IP stack anyway before it ever hits the emulator, so any vulnerabilities are additive. You might as well just stick with iptables alone.
...in your MOM!
Come-on, shuddup already, I live in UAE dammit. The last thing I want is for Etisalat to clue in...
So what if UAE is trying to protect its youngsters from easily seeing smut content! I know some guys in the agency that controls web access in the UAE. They know about pirate pay, emule and all the other ways a moderately savvy adult can use to access "unsavory" content. Their logic is that "as long as it is not easy for kids to access that kind of content, we are doing our jobs". I am extremely OK with this. Stop trying to impose your moral code on the rest of the world. The mature thing to do is to try to see thing from their perspective, not yours.
The UAE authorities know very well that they cannot block everyone. Even with the "gaping holes" in their firewalls, I won't be surprised if they block more that 90% of the local population from accessing restricted sites. That's probably good enough for them. The effort required to block the remaining 10% would be too high and not worth it.
It never pays to really block all pornography. Then people has too much time in their hands (no puns, please, it's too easy), and might start thinking. You want to have them with all the porno they want, but scared of having it. That way you can use porno as a way of pressuring people to do whatever the state machinery wants (drug possession is used in other countries with the same end).
Rome taught me patience and assiduous application to detail. Virtues which temper the boldness of great, general views.
I lived in Dubai for four years (2001-2005) and just used a HTTP proxy. Everyone knew about them. I've gone back since then and Etisalat (the telecoms monopoly, they now have 'competitors' but they're all state owned too through a bunch of holding companies, so it amounts to the same thing) seems to have blocked them but when I was there last summer I managed to use Tor to get around it.
"Impartiality is a pompous name for indifference, which is an elegant name for ignorance." - G.K. Chesterton