Slashdot Mirror


Telstra Starts Implementing Australian Censorship Scheme

daria42 writes "After four long years of debate about whether Australia will receive a mandatory Internet filter, finally some action has been taken. Yesterday the country's largest ISP, Telstra, started filtering all customers' connections for child pornography. The filter is DNS-based, meaning it's easy to circumvent, but you can't opt out of it — if you sign up to a plan with Telstra, your connection will be filtered for certain web addresses whether you like it or not. "

29 of 212 comments (clear)

  1. Opt-out by Fwipp · · Score: 2, Interesting

    Even if you could opt out of this, the Australian government would just know who to put on their watch list.

    1. Re:Opt-out by Dyinobal · · Score: 3, Insightful

      How's this stopping child porn. The hard core predators will simply go out and find a kid, or change their DNS settings. Maybe this impresses the think of the children demographic but it doesn't do anything.

    2. Re:Opt-out by The+Qube · · Score: 3, Informative

      Nice try, but this has nothing to do with the Australian Government.

      Telstra and other ISPs are implementing a blacklist that is managed by Interpol.

      The same system is in use by some ISPs in the UK and other European countries.

      And as far as the list goes, it is actually very conservative in its definition of child pornography, only classifying sites depicting minors under 13, not under 18.

      --

      "First they ignore you, then they laugh at you, then they fight you, then you win."

    3. Re:Opt-out by ChunderDownunder · · Score: 2

      Conroy's legislation can't get thru parliament. Instead they reward a telstra a fat contract to rollout the NBN, conditional on implementing his scheme.
      Democracy in action. :-(

    4. Re:Opt-out by jamesh · · Score: 4, Insightful

      How's this stopping child porn. The hard core predators will simply go out and find a kid, or change their DNS settings. Maybe this impresses the think of the children demographic but it doesn't do anything.

      A bunch of cases recently have seen some people let off because it can't be proven that they didn't stumble across the child porn accidentally. Now apart from pictures of girls that looked like they might not have been quite 18 i've never stumbled across anything like child porn by accident so I find that a bit hard to believe, but if there is evidence that the person took steps to circumvent the filter it is harder for them to argue that they stumbled across it by accident.

      But you're right, there was child porn before the internet and there will be child porn after the filter is implemented. And while it might stop a few brainless idiots obtaining pictures, it won't stop anyone who is seriously motivated to find them and it definitely won't stop the images being produced in the first place, which is the real crime.

    5. Re:Opt-out by dgatwood · · Score: 3, Insightful

      ... but if there is evidence that the person took steps to circumvent the filter it is harder for them to argue that they stumbled across it by accident.

      Yeah, if there is evidence that they took those steps to circumvent the filter. Is there anybody on Slashdot who isn't already running his/her own DNS server at home? Didn't think so. I have two authoritative public DNS servers on my home network that also provide caching DNS for my intranet and DMZ, and I doubt I'm alone in that regard.

      The bigger concern here, at least in my mind, is that this might turn into a witch hunt. Let's say that Telstra suddenly decides to see which clients are using their DNS server, then reports the ones that aren't to the authorities because after all, they're probably doing it to download child porn, pirated movies, warez, or whatever else that Telstra is blocking this week. That could turn into a whole lot of hassle for a whole lot of people. And particularly when it comes to child porn, once accused, forever shunned, making it triply important that folks in Australia ensure that such witch hunts do not occur....

      Maybe I'm just being too paranoid.... Nah.

      --

      Check out my sci-fi/humor trilogy at PatriotsBooks.

    6. Re:Opt-out by dgatwood · · Score: 2

      A lot of folks on slashdot host their own domains, which usually means running your own DNS servers.

      Also, a lot of folks run Linux, and the default configuration on a lot of Linux distros provides a caching-only DNS server on the box, unless this has changed recently.

      --

      Check out my sci-fi/humor trilogy at PatriotsBooks.

    7. Re:Opt-out by Bert64 · · Score: 2

      I have always run my own DNS server...
      Couple of years ago i found my internet access was much faster than usual one weekend, and then the following week i received an email from the ISP apologising for the "outage" that had occurred during the weekend, apparently their DNS servers had failed which meant that 99% of their customers couldn't do anything.

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
    8. Re:Opt-out by DarkOx · · Score: 2

      What makes you think they don't just redirect any tcp/udp 53 traffic to the DNS server they want you to use? Are you verifying your DNS is really talking to the roots or your desired upstream server?

      --
      Repeal the 17th Amendment TODAY! Also Please Read http://www.gnu.org/philosophy/right-to-read.html
    9. Re:Opt-out by xnpu · · Score: 3, Interesting

      Using OpenDNS or Google DNS messes with content distribution networks. I don't recommend using them.

      There's many reasons to run your own DNS:
      * Improved performance, even if small.
      * Avoid ISP incompetence (plenty ISP's don't honor refresh/expiry times or otherwise deliver a sub-optimal DNS service.)
      * Ability to include alternative TLD's.
      * To apply your own filtering (for everyone in the home).
      * Use DNSSEC if your ISP doesn't.
      * Run your own internal domain (e.g. for development purposes.)
      * Hosting your own DNS and website from your home server.

      etc. I'm sure others could come up with much more.

    10. Re:Opt-out by The+Archon+V2.0 · · Score: 2

      Since when is it an ISP mandate to deal with real life criminal?

      Since the government couldn't figure out a way to build a censorship framework without getting into trouble because of their eagerness to use it to block opposing political agendas or groups they disagree with, and the occasional dentist.

      So they decided to sneak it in the backdoor by having the ISPs build something to "stop pedophiles" who mostly don't use the blocked communications channels anyway. That way they could claim they have nothing to do with it, despite the list of banned sites coming from the Australian Communications and Media Authority, a government organization. (Didn't you know? Apparently if you murder someone with a gun, it's not your fault unless you built the gun yourself. The guy who's firing it into the crowd isn't to blame!)

  2. Use a real DNS server by gavron · · Score: 4, Insightful

    Domain Name System servers must conform to the standards. If Telstra is unable or unwilling to comply, they can be removed. Sure, they're popular in Australia... but you want to be ON the Internet, you have to work WITH the Internet.

    DNS is specified in RFC 1034, RFC 1035, covered further in the Hosts Requirements RFCs (1122, 1123).

    Telstra, if you can't be standards compliant, you will be worked around.

    Australian users: use any public DNS server that is standards compliant. You'll avoid the censorship, and you won't lose connectivity.

    Telstra -- Australian for "Censorship"

    E

    1. Re:Use a real DNS server by mtaht · · Score: 3, Informative

      Nearly every Linux machine ships with named (bind9) available and often, even turned on, in a caching-only configuration. To use it by default you just disable /etc/dhcp/dhclient's domain-name-servers request and point your resolv.conf to localhost. By doing this you get NXdomain back, too... and your local cache of dns entries is likely to be more performant than an ISPs 10s of ms away for cached entries. You can also run dnssec, if you so choose. Latest versions of bind can do dnssec, you can enable it with one line in the conf file. Ever since multiple services started messing with DNS a decade ago... returning broken queries, pointing to ad sites, not doing ipv6, not returning mx records, etc... I've run my own dns server. Now that dns is being mis-used for censorship, perhaps more will rebell. As servers go, in memory it's rather small...

    2. Re:Use a real DNS server by gavron · · Score: 3, Interesting

      It's unusual that you haven't been exposed to that much bullshit or that "DNS", "browser", and "redirects" seem to you be the same thing.

      No worries. DNS is the fundamental name to number translation. Any host on the Internet must not screw with this (I posted the RFCs but I understand you didn't read them).

      Browser is one choice of application type, and not relevant to any discussion.

      Redirect is a function of a browser and even less redirect.

      Have a beautiful day, and look up why "it's" and "its" are not the same word, sweetie.

      DNS should not be messed with. It's a foundation of the network. The host-RFC says so.

      Best regards.

      E

    3. Re:Use a real DNS server by jamesh · · Score: 2

      It's unusual that you haven't been exposed to that much bullshit or that "DNS", "browser", and "redirects" seem to you be the same thing.

      No worries. DNS is the fundamental name to number translation. Any host on the Internet must not screw with this (I posted the RFCs but I understand you didn't read them).

      Read them. Implemented them. Understand why a caching resolver (which is what we're talking about here, not DNS servers) might sometimes need to tinker with the records. If you wanted to block access to facebook on a network then creating bogus facebook.com and related entries is the fastest and cleanest way to do that, assuming the people on your network don't know enough to circumvent it and/or you block port 53 from IP's that aren't your resolvers.

      Browser is one choice of application type, and not relevant to any discussion.

      Redirect is a function of a browser and even less redirect.

      having trouble parsing that last sentence.

      Have a beautiful day, and look up why "it's" and "its" are not the same word, sweetie.

      Oops. Typo, not a general lack of understanding about when to use "it's" and "its". Sorry if it offended you though.

      DNS should not be messed with. It's a foundation of the network. The host-RFC says so.

      Best regards.

      E

      I appreciate the sentiment behind your black and white thinking, but if Telstra must block access to Interpol listed child porn sites (eg the worst of the worst), then inserting some replacement DNS entries is the fastest, cheapest, and least intrusive way to do this. I think you'll agree that Telstra doing anything at all to the traffic is a different discussion altogether, and I suspect that we probably agree on that one so I won't make any comment on that.

  3. Re:Blacklist? by thr13z3 · · Score: 4, Informative

    Servers are hosted in countries who lack laws to deal with those.

  4. OpenDNS by MischaNix · · Score: 4, Informative

    As a gentle reminder to anyone who doesn't already have these IPs on a sticky note, the OpenDNS IPs are:
    208.67.222.222
    208.67.220.220

    1. Re:OpenDNS by thr13z3 · · Score: 2

      But those are located in the US so you have to be willing to sacrifice some speed in exchange for their services and I wouldn't be surprised if someday we were to find out that Google is monitoring/recording/using everything going through their DNS.

    2. Re:OpenDNS by moj0joj0 · · Score: 3, Informative

      Google's are even easier to remember: 8.8.8.8 and 4.4.4.4.

      UltraDNS also offers an OpenDNS-like service with the IPs of 156.154.70.1 and 156.154.71.1 .

      Quick correction, Google's are: 8.8.8.8 and 8.8.4.4
      http://code.google.com/speed/public-dns/

  5. Re:Blacklist? by Frosty+Piss · · Score: 3, Informative

    They have the addresses, why can't they track down the servers and their owners?

    Many are located in Russia or the 'Stans. These are places where organized crime runs deep in the circles of power, and thus are difficult or impossible to snuff out.

    --
    If you want news from today, you have to come back tomorrow.
  6. Child Porn First... by andrew3 · · Score: 3, Interesting

    Child porn will be blocked first. However, the problem with internet censorship is that other material (such as political material, eg. WikiLeaks) could also be blocked eventually. The first rule of censorship is to not talk about it; it's ironic that we don't know what websites are going to be blocked. Bad stuff has already been done because of the filter anyway. Look at Bulletproof Networks - they were threatened fines of $11,000 per day for linking to a leak of the blacklist.

  7. The Australian Government did do this, read on... by definate · · Score: 5, Informative

    Nice try, but you obviously haven't been keeping up with the local news.

    The current government (The Australian Labor Party) has been trying to push through this form of censorship, to gain support from the religious zealots in the country. They need the religious zealots support, because they do not have a large enough majority to ram through what they want. This censorship plan was developed by minister Stephen Conroy, and at the previous election they had to ditch this plan, because it was so amazingly un-popular.

    At the same time the Australian Labor Party has decided to "nationalize" (debatable as to whether the National Broadband Network is really nationalized or not) the internal internet infrastructure of Australia, by laying down billions of dollars, buying up a fuck load of fiber, and handing out a lot of contracts to roll out more fiber. This plan is being setup and run by minister Stephen Conroy, the exact same man who came up with the original legislative censorship plans, has now been given a fuck load of money, and authority. Telstra owns MOST of the infrastructure the government is looking to buy, as it was Australia's first (I think it was the first) telephony provider, which used to be nationalized, but was privatized in the late 90s.

    At the same time Telstra started to censor the internet, they were awarded a very large favourable contract, from the government, to purchase this infrastructure from them. Both of these were announced in THE SAME WEEK. This is a mighty fine coincidence.

    Now, you might say, but that's just a coincidence and doesn't mean anything. The company is just voluntarily deciding to censor the internet.

    Well, in the same week another company, Optus, which is Australia's second largest telephony provider, was awarded a very large favourable contract for the purchase of their infrastructure handed to them, and in the same week, that company also decided to announce that they would voluntarily censor the internet with this same list, under a similar time frame.

    So...
    There are 2 companies, selling a large amount of equipment to the government, for very large amounts of money, with very favourable terms, and they both decided to announce, in the same week that these contracts were handed out, that they will voluntarily censor the internet.

    That is FAR too great a coincidence.

    Additionally, ISPs like Internode, which are the nerds choice of ISP, who also own a significant amount of infrastructure, and were active in dissenting against the prior censorship plans, have been told flat out that they will not be offered such favourable contracts for their infrastructure, in the same week these were awarded.

    So yes, "technically", you're correct, but we all know that the government would have had a hand in this, especially because these plans were so wildly unpopular with the public, that any ISP that implements censorship of any kind, knows they will get backlash over it. In fact, Telstra knows it was going to get this backlash, and actually put off implementing it specifically because they were afraid of reprisals from LulzSec, AnonSec, Anonymous, and similar.

    What ISP do you know, that voluntarily does things like this, which don't improve its profitability, which expose it to reprisal, and targeted attacks, without being forced to by government?

    Not to mention, two of them at the same time.

    The Australian Government, and their currently "unlimited" spending account, has EVERYTHING to do with this.

    I have links for all the above, but there's too many, and I'm too lazy. Instead, just read Delimiter which has some of the best coverage on this.

    --
    This is my footer. There are many like it, but this one is mine.
  8. Mixed up priorities by phantomfive · · Score: 4, Insightful

    I understand being opposed to child porn, hey, I'm opposed to it to. But if I knew of a child porn website, the first thing on my mind would be, "whose website is that, and how can we stop them?" and secondly, "who is hosting that website, and how can we get through them to the ones who are actually hurting the children?"

    Censoring websites does absolutely nothing for the victims of child porn, and does absolutely nothing to stop the ones who are participating in it. This is true even if the censorship mechanism worked. What are you Australians thinking? How do you let your politicians get this kind of power?

    --
    "First they came for the slanderers and i said nothing."
    1. Re:Mixed up priorities by thegarbz · · Score: 3, Insightful

      and how can we get through them to the ones who are actually hurting the children?"

      This has never been the goal in Australia. Most of the laws exist to punish the viewers of material not the people who produce it. Frequently people get dealt with larger jail sentences if they have child porn on their computers than they do if they are caught actually propositioning or grooming children for sex. The backwards nature of this is absurd in todays society and this has nothing to do with Australia.

      In the USA teenagers got prosecuted for girlfriend sending nude picture to boyfriend taken with a mobile phone. No one got hurt, and no children were "saved" due to the prosecution. You surfing a porn website and you accidentally end up with child porn? Well you can be held liable since your browser cache is counted as "downloading".

      I guess that would really fuck the entire 4chan readership of Australia then. How many times have there been the occasional sicko posting child pornography on that site only for the thread to be deleted a few minutes later. Didn't read it? Tough the picture was in your browser cache.

      By the way any Telstra user here confirm if 4chan still works?

  9. Re:Blacklist? by hjf · · Score: 3, Insightful

    Then have the upstream ISPs (which are located in other countries, hopefully with laws that protect human rights) cut access to ISPs that host that kind of content. Block their ASNs and IP ranges. You will notice how quick they clean up their networks from that kind of crap. If they weren't answering before, they will be answering when they suddenly find themselves offline.

  10. Please mod parent up.. by AftanGustur · · Score: 3, Informative
    This is the database in question.

    The Database is maintained by Interpol, and is available to any ISP upon request, not just in Australia.

    All Interpol member countries have given this project a green light and like "The Cube" is saying above, it is very strict in what constitutes a "Child Porn", i.e. age of 13, and the images have to show abuse.

    The ICPO database in already implemented in a lot of countries, they have just done it without telling anyone, so only those that are actively seeking Child porn on the Internet are aware of the blocking.

    --
    echo '[q]sa[ln0=aln80~Psnlbx]16isb572CCB9AE9DB03273snlbxq' |dc
    1. Re:Please mod parent up.. by toriver · · Score: 2

      But some countries seem to go beyond that: Apparently, sites that show over-18 models who sport ponytails or braces ("young" features) have sometimes been blocked, and also fictional child porn (comics, text), i.e. look at the case of the American stopped on the Canadian border for possessing a Japanese manga.

    2. Re:Please mod parent up.. by Everything+Else+Was · · Score: 2

      Did you actually read the page you linked to? This database is a collection of images used to help identify and rescue victims of (kiddy-porn related) sexual abuse, NOT a website blacklist.

      --
      My other account has mod points!
  11. Now it's time for reading comprehension. by definate · · Score: 3, Informative

    Ahh, I see you're not good at reading, let me help you out.

    You mean Conroy, not the Labor party.

    Completely wrong. The beginnings of these policies started with Kim Beazley. Additionally, if it's not a Labor party policy, then you need to tell the Prime Minister that, and you might ask them to update their pages. While you can say the most recent ones are crafted and pushed by Conroy, it does have the support of "the party", where its leader and strategists speak for what the party supports.

    Deputy comms minister Kate Lundy has been an outspoken critic of filtering

    Partially wrong. She's been an outspoken critic of... THIS type of filter. She wants it to be an opt-out filter. She was however an outspoken critic of ISP level filtering... when LIBERAL was in power.

    The contract was to buy that.

    This is where the reading comprehension comes in. Even with the single line you quoted, in no way, can it be taken to mean 'they were paid to censor the internet'. Please re-read it. What it says is 'They censored the internet, at the same time as they were awarded a contract', not a contract for censoring the internet, but a contract for buying the infrastructure.

    Please, keep up.

    This is because they own 0% of the pits and ducts (or copper) that make up the last mile which is where the NBN is operating.

    Now this is reasonably true, except that Agile (Internodes infrastructure company) does supply last mile connections for many rural communities. On top of this, they own a significant amount of interstate fiber, which is something the NBN also had in its deal, though to a lesser extent at this stage.

    You dont actually understand what's going on here and should never have been modded up.

    The thing I like about your post, is the arrogance it has, while being exceptionally wrong. It's almost like you're trolling me. Not sure if you're retarded, or trolling. I'm erring on the former.

    --
    This is my footer. There are many like it, but this one is mine.