Slashdot Mirror
China Proposes Foreign Domain Name Censorship (thestack.com)
An anonymous reader writes: A new draft law in China could potentially increase domain name restrictions, limiting domestic access to foreign websites. The measures outlined in the 'Internet Domain Name Management Rules' remain unclear, yet they suggest a marked effort to increase censorship on online content. The proposals, released for public comment by the Ministry of Industry and Information Technology, seek to update existing regulations to censor any domain names not registered within China. Only domain names approved by authorities would be permitted while other names registered outside of China would be blocked automatically.
I was about to say, it might help fend off at least a few of the random scans I get from China...
They would like that just fine. It will save them lots of time and effort.
All these stories about online censorship, and so little on the successes of circumvention. We need to bust down the walls, all of them. If there ever was a "just" war, this is it. And it requires no blood.
“He’s not deformed, he’s just drunk!”
"censor any domain names not registered within China"
So what, only 99% of the internet then?
Unfortunately, just because it requires no blood doesn't meant there wouldn't be any. Or at least long stays in repatriation camps. Big brother doesn't give up without a fight.
they obviously don't want to be part of the world eCommunity, so block all of .cn elsewhere.
if this is supposed to be a new economy, how come they still want my old fashioned money?
if chinese do this, they will do it knowing that whatever and whoever has anything of value in internet of use to china, that does not threaten them, will eagerly start registering themselves within in china, obediently complying with rules chinese have laid down.
all of the western corps who want to survive and make money will do that
that is power.
When everyone wants to tell everyone else what they can and can't say and see on the internet.
Get in line, China.
SJW's don't eliminate discrimination. They just expropriate it for themselves.
The rest of the world would be better off if we would just disconnect China from the internet! They don't like an open internet then we should not have to give them one. This would eliminate a major group of corporate and government hackers.
If there is an Internet Doomsday Clock, I'd say it reads about three 'til midnight.
Everywhere you look, on every continent, freedom and privacy are being hunted down, borne upon the cynical horns of terrorism and pederasty.
The more you tighten your grip, the more websites will slip through your fingers!
BeauHD. Worst editor since kdawson.
I can only imagine that this would greatly increase the usage of VPN's..... also GNAA
So then all someone would need to do is manage a downloadable host file to bypass DNS and continue pointing to the IP addresses of valid servers. Sure it might be a pain in the ass to manage, but there would be no need to rely on "authorized" domains. Your authorization would come from you explicitly allowing it in your own local naming service.
China has a history of building walls to keep foreign people or things out. Old habits die hard.
Table-ized A.I.
That won't work if the firewall drops connections to foreign IPs that have not been returned from a DNS query. When you perform a DNS query, the DNS server would then do three things: check whether the domain is on China's whitelist, return the hostname's IP address if so, and create a whitelist entry on the firewall for the pair of (your IP address, their IP address) if so. It's thus a little bit like carrier-grade NAT, except that DNS lookups are used as the trigger instead of a SYN.
Or perhaps I shouldn't have given the Chinese leadership any ideas...
great answer, to bad I have no mod points to give out
Why is this not permitted?
I helped build your telephone system back in the 90s, China, and I was one of your first IPO investors in many advanced research firms in Hong Kong, but you won't permit that?
What gives?
-- Tigger warning: This post may contain tiggers! --
* Register domain that China government hates
* China-based script-kiddies can't get to me
* ???
* PROFIT by being able to focus my security infrastructure on more serious security threats (like the Chinese-government-trained/sponsored industrial-espionage-hackers???) instead of wasting time swatting the script kiddies that happen to be in China.
Now if only it was that easy to get rid of the script-kiddie problem worldwide.
I know! I'll use a Martian IP address!!!
Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
All the Chinese government will accomplish with this sort of thing is the dumbing down of their citizenry putting them behind the west in the Great Competition they desire so much to excel at. Sad. Go for it.
Of course this is an effort to prevent domain names like freetibet.com appearing to the Chinese population, but the (unintended) consequence of the development is dividing the Chinese values from those of the rest of the world and so preparing them to view the whole world as the enemy for the coming war. They will become just like ISIS.
I expect this is as much about protectionism for domestic Internet sites/businesses as it it about some futile effort at information control
This posting is provided 'AS IS' without warranty of any kind, implied or otherwise.
What is that? A euphemism for the "Ministry of Truth"?
When 1person suffers from a delusion,it is called insanity.When many people suffer from a delusion,it is called religion
Better title for this article:
"China develops more accurate online method of shooting itself in the foot."
Where are we going and why are we in a handbasket?
Though it would be better if Big Brother does give up peaceably, it's not a requirement if we can just work around it. It might be more peaceful, if we let them think they are in control.
“He’s not deformed, he’s just drunk!”
Seriously, this is just like trade right now. China controls carefully what is allowed in to compete. In addition, if it is something that china wants the manufacturing tech to, they put up large import tariffs against your good and then requires you to 'partner' with a chinese owned company.
China continues to set up the situation so that they can sell outside of china, but from outside, can not sell INTO china.
At this point, WTO should step up and say no. BUT, they will not.
I prefer the "u" in honour as it seems to be missing these days.
Define "success." Stopping 95% of the population from casually running across something China doesn't like is probably a success in their books. I mean sure they'd like to stop 100% but 95% is still a hell of a lot better than 0%.
Just like the lock on your door (ooh an analogy on Slashdot!) It won't keep out 100% of people, but nobody's about to be calling for a removal of all locks on all doors just because of the occasional B&E.
Of course that analogy breaks down in the sense that we generally value our personal security and generally consider censorship bad, so the goals of the two systems are kind of opposite (at least in the view of western internet users) but in terms of defining "success," it matches up pretty well.
I mean I'm not defending the practice here.. it would be great if information could be as free as it wants to be.. but unfortunately the vast majority of users are either technically incapable or just don't care circumventing these kinds of blockades and so for all practical intents they work great even if they're not perfectly sound in theory.
This mean I will see less traffic from China to my website? All incoming traffic from China is hack attempts, so it would be nice to see that traffic blocked at the source. Wishful thinking I know.
This is exactly why we are working so hard to get rid of all the butterflies.
Sleep your way to a whiter smile...date a dentist!
I was about to say, it might help fend off at least a few of the random scans I get from China...
Domain names have nothing to do with scans.
blindly antisocialist = antisocial
They will cut themselves off of a large amount of information on business, economy, science and so forth. It will decrease their competitive ability.
Not always. For instance, the server sitting in my floor at home -- looking at the vhosts logs I'll often see the same IP try the same skiddy exploit against several (or even every) domain's website hosted on the box before fail2ban drops them in the firewall rules. Since I don't have reverse DNS set up for any of these domains and some (but not all) of them are just third-level subs from domains I have hosted elsewhere it seems a bit more focused than a random scan at times.
Not always. For instance, the server sitting in my floor at home -- looking at the vhosts logs I'll often see the same IP try the same skiddy exploit against several (or even every) domain's website hosted on the box before fail2ban drops them in the firewall rules. Since I don't have reverse DNS set up for any of these domains and some (but not all) of them are just third-level subs from domains I have hosted elsewhere it seems a bit more focused than a random scan at times.
But those are your domains, not domains related to the source of the scans - no?
blindly antisocialist = antisocial
I'm sorry, where is the car in your analogy. I don't understand non car analogies.
APK likes to ask for responses to the same things over and over. Maybe he just likes the responses?
Ok sorry.
So its like a car analogy. You can create a car analogy and they're like 95% accurate, which makes them a reasonably good success in the view of most car analogists even if they aren't always entirely perfect.