Blogs

How to build a "great firewall of China" -- do it poorly

I'm not in the business of helping countries be repressive, but I started thinking what I would do if I were the Chinese internet censor. I don't think I'm giving them any secrets, but these thoughts may affect our own plans on how to fight such censors.

The most important realization was that I wouldn't want to make my great firewall really strong. That it was not only easier, but possibly better, to make it possible to bypass it with a moderate amount of determination. Not trivial, as in "hold down the shift key" but not requiring cypherpunk level skills.

The reason is that if I allow such holes, I can watch who uses them, and watching them is more valuable to the secret police than plugging them. And if the holes don't require fancy data encryption and hiding techniques, most people seeking to bypass the firewall will do so unencrypted, making it far easier to watch what is done. But even if people encrypt, they do reveal who they are. So long as there are not immense numbers, that's enough to give me a good dissident watchlist.

My goal as censor would be to tune the filtering so that the true dissidents can all bypass it, but make it hard enough that I don't get so many people on my watchlist that I can't handle the size of it. The censors know they can't keep information from the truly determined, even in the most repressive regimes. They just need to keep it from the masses. (Even the masses will hear rumours in any society, but they will always just be rumours.)

This explains why many of the proxies people have put up to let people bypass the firewall remain themselves unblocked. This also can be explained by inefficiency of maintaining the block-list, but this time I am prepared to attribute something to malice rather than incompetence. Especially if the proxies are unencrypted I would not want to block them -- unless they go so popular that I could no longer track the users.

This is one of the problems with the Google China decision. In the past, use of the firewall-blocked google.com was not suspicious, though typing certain phrases into it may have been. Now, with censored google.cn, use of google.com suggests you are trying to get past the censorship at least. A big win for surveillance. Google is, wisely, not keeping logs in China, but that doesn't stop the international gateways from keeping the logs.

(Read on for some anti-censor techniques.)

Topic: 

Laundromat machine / locker

I haven't been to a laundromat in ages, but we're fixing up a house that has no washer/dryer yet and has a laundromat 200' away. Long ago, when I lived in an appartment tower, I would go to the basement laundry room, and leave my clothes there. Worst case was they ran out of machines and somebody tossed them in a basket. And even though the odds of somebody stealing your clothes are low, most people are not as willing to leave their stuff unattended in a city street laundromat.

So how about combining the machines with a timed airport style locker system. You would insert the coins and pull out a key which you could use to open the washer or dryer. The lock would auto-reset about 10 minutes after the cycle ends, so in addition, you could put in more coins, which would act as insurance. If you didn't get to the machine in time, these coins would be taken, and give you more time on the lock. If you did get to the machine shortly after the cycle ended, you could get back your extra coins in the coin return...

Topic: 

HDTV to SDTV cropping in the camera, and NBC SD widescreens

Note 1: NBC doesn't have nearly enough HD cameras for the Olympics, and I can't really blame them for not having one for every section of luge track to show us something for half a second.

But it seems in many areas they are showing us a widescreen image from an SD camera, and it looks more blurry than the pillarboxed SD footage they show of past scenes. I wonder, are they taking a cropped widescreen section out of their 4:3 SDTV camera? If so, that's not what I want. Or are there a lot of 16:9 SD cameras out there?

Topic: 
Tags: 

Why Google took the wrong course over China

Google's decision to operate a search service in China, implementing Chinese censorship rules into the service, has been a controversial issue. Inside Google itself, it is reported there was much debate, with many staff supporting and many staff opposing the final decision, as as been the case in the public. So it's not a simple issue.

Nonetheless, in spite of being friends with many in the company, I have to say they made the wrong decision, for the wrong reason.

Wanted: A google/yahoo/etc. ad optimizer

Yahoo is now entering the context-driven ad field to compete with Adsense, and that's good for publishers and web authors. I have had great luck with adsense, and it provides serious money for this blog and my other web sites, which is why I have the affiliate link on the right bar encouraging you to join adsense -- though I won't mind the affiliate fee as well, of course.

Teach history recycling old calendars

There are 14 different calendars possible -- With Jan 1 on each different weekday, in both regular and leap-year form.

An interesting idea for schools (and other places) would be to put up a calendar for a year from the past which has the same form as the current year. For example, an old 1995 Calendar would work mostly fine for 2006.

One could use real calendars, or specially made calendars which would talk about the history of the year in question, showing events which took place on the days those years ago.

Topic: 

Newspaper recycling slot at the base of a kitchen cabinet

In thinking about a Kitchen remodel, in a house which sits on top of a garage/basement where the recycling and garbage bins are, I thought it would be nice to have a chute in the Kitchen to drop stuff into the bins down below. But you don't want to waste a lot of space in the kitchen on those.

One idea is to put the chute under a regular cabinet/countertop. It would look like a large mail slot at the base of the cabinet, under the door (or behind the door so you have to open it up to see it.)

Topic: 

Experimenting with Yahoo Publisher for RSS

While I have been using Google ads on the blog for some time (and they do quite well), they don't yet do RSS ads outside of a more limited beta program. So I'm trying Yahoo's ads, also in beta but I'm on the list.

They just went live, and all that's showing right now is a generic ad, presumably until they spider the site and figure out what ads to run. Ideally it will be ads as relevant as Google Adsense does.

Competition between Google and Yahoo will be good for publishers. Just on basic click-rates, one will tend to do better than the other, presumably. If one is consistently doing not as well, they will lose all the partners, who will flock to the other. The only way to fix that will be to increase the percentage of the money they pay out, until they get to a real efficient market percentage they can't go above.

Read on for examination of the economics of RSS ads.

Hybrid Languages

There are a lot of popular programming languages out there, each popular for being good at a particular thing. The C family languages are fastest and have a giant legacy. Perl is a favoured choice for text manipulations. Today's darling is Ruby, leader of the agile movement. Python is a cleaner, high-level language. PHP aims at the quick web/HTML scripter language and has a simpler access to SQL databases than most. Java's a common choice for large projects, with lots of class libraries, slower than C but faster than interpreted languages.

Topic: 

Commercial I would like to see

Tom Selleck narrates:

Have you ever arranged a wiretap in Las Vegas without leaving your office in Fort Meade?

Or listened in on a mother tucking in her baby from a phone booth, all without the bother of a warrant?

Or data mined the call records of millions of Americans with no oversight?

You will.

And the company that will bring it to you... AT&T

EFF sues AT&T for giving access to your data without warrants

A big announcement today from those of us at the EFF regarding the NSA illegal wiretap scandal. We have filed a class-action lawsuit against AT&T because we have reason to believe they have provided the NSA and possibly other agencies with access to not only their lines but also their "Daytona" database, which contains the call and internet records of AT&T customers, and probably the customers of other carriers who outsource database services to Daytona.

MP3 Podcast of my talk at Emerging Telephony on how to love CALEA

Last week I spoke at O'Reilly's Emerging Telephony (ETEL) conference about CALEA and other telecom regulations that are coming to VoIP. CALEA is a law requiring telecom equipment to have digital wiretap hooks, so police (with a warrant, in theory) can come and request a user's audio streams. It's their attempt to bring alligator clips into the digital world.

Panoptopia and the Pushbutton Panopticon

With too many people defending the new levels of surveillance, I thought I would introduce a new word: Panoptopia -- a world made wonderful by having so much surveillance that we can catch all the bad guys.

David Brin introduced the concept to many in The Transparent Society, though he doesn't claim it's a utopia, just better than the alternative as he sees it.

It used to be that "If you are innocent you have nothing to hide" was supposed to be a statement whose irony was obvious to all. Today, I see people saying it seriously.

Topic: 

What's the default on 4th amendment questions?

We're always coming up with new technologies that affect privacy and surveillance. We've seen court cases over infrared heat detectors seeing people move inside a house. We've seen parabolic microphones and lasers that can measure the vibration of the windows from the sound in a room. We've seen massive computers that can scan a billion emails in a short time, and estimates of speech recognition tools that can listen to millions of phone calls.

Topic: 

Scroogle -- Scrabble played with Google

Here's an idea to try -- Scrabble played with Google as the base, rather than the dictionary. Ie. you can play any word you can find in Google (sort of.)

This obviously vastly expands the set of words, perhaps too vastly, and it brings in all foreign languages to boot. It includes vast numbers of joinedwords, and zillions of other things. As such you would want to consider the following limits:

Topic: 

Google Subpoena is the tip of the iceberg

Google is currently fighting a subpoena from the DoJ for their search logs. The DoJ experts in the COPA online porn case want to mine Google's logs, not for anybody's data in particular, but because they are such a great repository of statistics on internet activity. Google is fighting hard as they should. Apparently several Google competitors caved in.

Topic: 

Pages