16 December 2009

A word on the Australian Internet censorship scandal


I've had a quick scan over Senator Stephen Conroy's infamous, long-awaited report on the efficacy of current Internet filtering technology and find it to be nothing short of scandalous. Without getting into the nitty gritty details (for example, how a filtering solution can achieve the impossible by improving rather than degrading the performance of encrypted, random transfers), it reads like it's a whitepaper for one of the various purveyors of censorship technology.

The cynic in me insisted I take a quick look at who these Enex Pty Ltd jabbers are anyway - who knows, they could be an industry lobby group for all we know. Sure enough, a quick look at their corporate client list reveals (based on some quick Google searching) over a dozen companies who make a living selling commercial censorship technology:
  • Anthology Solutions
  • Content Keeper Technologies
  • Content Watch
  • F-Secure Corporation
  • Internet Sheriff Technology
  • Manaccom
  • MessageLabs
  • NetBox Blue
  • Netgear
  • Netsweeper
  • PC Tools Software
  • Raritan (?)
  • Secure Computing Corporation (McAfee)
  • Symantec
  • Trend Micro
To put things in perspective, this represents around a quarter of their published client list, and that's not including half a dozen or so service providers that could arguably be thrown in with this bunch. Who in their right mind would risk upsetting one in four of their paying customers by writing a report critical of their products? And does anyone really believe that these vendors resisted the urge to apply pressure? Or that there were not personal relationships involved? I don't, not for a second. In my opinion this report was rigged from the outset to succeed, and in doing so deprive Australians of essential civil liberties.

The report itself is fatally flawed; the error margins are significant (e.g. "a conservative
+/-10 percent"), critical controls were missing (e.g. "as much as 40 percent of an internet service performance could be lost [due to factors outside of our control]"), outrageous assumptions were used (e.g. "performance impact is considered minimal if between 10 and 20 percent") and perhaps most importantly of all, it's creator has an obvious conflict of interest. I don't consider it to be worth the paper it's [not] printed on.

Another deeply concerning development is government grants that would encourage ISPs to go beyond the mandatory filters, despite all censorship systems tested reporting 2.5-3.5% false positive rates (that is, where innocuous/legitimate content is filtered). To put that in perspective, the best part of a billion legitimate pages would be improperly filtered (according to Wikipedia stats), or around 1 page in 30.

Speaking of Wikipedia, many of the systems are hybrid which means that hosts known to be clean would be ignored by IP (which is much more efficient). If, however, even a single page were problematic then the entire site (and all others sharing its' IPs) would be forced through a filtering proxy. This would affect some of the most popular sites on the Internet (such as Wikipedia and YouTube), not to mention other increasingly useful services like WikiLeaks (no doubt silencing such services is seen as a fringe benefit to our self-appointed censors). Need I remind you that similar filters in Britain caused severe problems for Wikipedia over a single CD cover only last year.

Another consideration that has not been covered anywhere near enough is the performance impact on cloud computing services. Web interfaces like Facebook, Twitter and Gmail are extremely sensitive to latency introduced by proxies and raw computing services like Amazon's S3 are sensitive to bandwidth limitations. Then you have the problem of platforms like Google App Engine, Google Sites & Microsoft Web Office which are both difficult to identify (they have many IPs which are not disclosed and difficult if not impossible to enumerate) and which host content for a massive number of customers. If even one person shares a document deemed obnoxious to their sensibilities then the performance will be reduced to unacceptable levels for everyone until it is removed (and then some).

It is my contention that censorship is completely incompatible with cloud computing, and that this alone is reason enough to scuttle it. In the mean time Electronic Frontiers Australia (EFA) has just landed themselves a new life member and I encourage anyone who cares about their future and that of their children to join as well (my friends in the USA may want to take a look at the EFF and Europeans the FFII).

Thanks to Gizmodo Australia for the image above, used without permission but with thanks. No thanks to Gizmodo for breaking the link.

7 comments:

  1. It's refreshing when it's not my country, for once, that is embarrassing itself. Thanks Australia.

    Jokes aside, check out mnot's blog for a technical perspective: http://bit.ly/8aemj8
    ReplyDelete
  2. Thanks good points made, I feel it is all a big waste of Gov funds.

    Jack Andrys
    CEO WebSpy
    ReplyDelete
  3. I like that you trying to make sure the truth is out there so I am sure you would like to make sure that people don't misunderstand when you say "Another deeply concering development is government grants that would encourage ISPs to go beyond the mandatory filters..." that encouragement from the Government isn't to make that madatory filters more broad/strick but in fact is meant to encourage the ISPs to offer OptIn more broad/strick filters to customers that may want it.

    Also, technically its not that hard to believe that the filter schemes would work 100% in blocking URLs that were on the list if they came in as pure URLs and not with any other technological wrapper (so to speak) like VPN or proxing. What they should clearer on is that the 100% isn't saying its blocking any and all access to those sites in any method.
    The government is stating in there release that they understand nothing is perfect and the fight has to be fought on different fronts with sharing info with world authorities, extra policing and more education, all things they say they will provide extra funding for. I am not sure that just throwing our hands in the air saying its just too hard is the answer any more then the filter is the only answer either.

    My personal belief is that the area to concerntrate the fight is at the list and the way it is created and maintained. Most peoples objectives (apart from the "internet should be open, full stop" crowded) is that somethings on the list shouldn't be and that they don't trust what the government would put on there. I say, the gov has opened the process to discussion, if you have concerns, file your thoughts and try to make sure the government can't say that no one gave any ideas!

    JMTC
    ReplyDelete
  4. Not only all this but also, they are going to spend something like 125 million dollars to put it in place, that is to say, 1/8 of a billion dollars.

    Conroy must be a complete idiot.
    ReplyDelete
  5. Mollyfud...

    "Also, technically its not that hard to believe that the filter schemes would work 100% in blocking URLs that were on the list if they came in as pure URLs and not with any other technological wrapper (so to speak)"

    Yes it is. Here's how: the (overly positive and biased) report which was released in support of the filter, stated there would be degradation of service of around 10-20%.

    Secondly, take a look at the sort of speeds you get when connected to the web through the DET filter - this is an already established national firewall. Try and use the net for general exploration for about an hour through a DET connection, then try and imagine that kind of agony on a national scale.

    Lastly, I can tell from your use of technical terms like 'strick' and 'technological wrapper' that you are obviously a retired telecoms expert. As such, you'll know that checking a requested URL against a list of a few thousand, *for every single request made by every single client of a million+ user network* is a bit more complex than just looking up a text file and checking if what the user typed into their address bar is in there or not - even doing *that* 50million times a second is a little difficult, as you're aware.

    As such, even checking requests against a set list of domains (which the Australian filter will absolutely not just be) is going to make things considerably complex, slow, and logically sticky.

    "I am not sure that just throwing our hands in the air saying its just too hard is the answer any more then the filter is the only answer either."

    I don't think that's what everyone's been doing, I think that mostly they've been saying it isn't too hard to answer the question of 'how do we protect 7yo's from viewing pornography or something or other', and in turn offering intelligent alternatives to a filtering idea - which is in itself is the government throwing it's hands in the air and saying it's just too hard to try and figure out how to tackle the problem effectively, let's just block everybody in the whole country from 'offensive material' they've been freely accessing since 1992 without any major psychological damage.

    "My personal belief is that the area to concerntrate the fight is at the list and the way it is created and maintained.[...]"

    That's what everyone's been doing since the inception of the filter, and those concerns are the ones the government's been ignoring. Major evidence for this: the filter is being implemented.
    People will not be able to control this list of banned URL's any more than people can suggest which films or books should or shouldn't be banned - unless they happened to write the legislation for the film, TV and literature censorship board.

    What most people object to, as far as I can see, is that the filter is being put in place at all, and that the government has decided that it has the right to decide what we are mature enough to see and read and think about.

    The 'the internet should be open, full stop' crowd would be anyone who thinks the internet is alright in it's *current* form, which would just every technically minded person on Earth, any and all web developers, Google, and the majority of internet users afaics.
    ReplyDelete
  6. Thanks for your comprehensive rebuttal - I couldn't agree more.
    ReplyDelete
  7. good article...picture sums it up perfectly!
    ReplyDelete