Live data from Hacker News

Internet blacklist bill COICA one step closer to becoming law

news.cnet.com

21–30 of 33 posts

Re: Internet blacklist bill COICA one step closer to becoming law

#21
One thing I was wondering was whether or not, for instance, Google would be prohibited from returning a direct IP address link to (say) the Pirate Bay in response to a search for "pirate bay".

The text in the bill says:

`(i) a service provider, as that term is defined in section 512(k)(1) of title 17, United States Code, or other operator of a domain name system server shall take reasonable steps that will prevent a domain name from resolving to that domain name's Internet protocol address;

...and the definition of "service provider" as referenced is:

(1) Service provider. — (A) As used in subsection (a), the term “service provider” means an entity offering the transmission, routing, or providing of connections for digital online communications, between or among points specified by a user, of material of the user's choosing, without modification to the content of the material as sent or received.

(B) As used in this section, other than subsection (a), the term “service provider” means a provider of online services or network access, or the operator of facilities therefor, and includes an entity described in subparagraph (A).

It looks like Google would probably fall under (B) there, so if they received a court order, they couldn't specifically do DNS routing; it's probably questionable whether returning a link as the first result to the IP address that the domain name would resolve to if it wasn't blocked counts as resolving a domain name, I'd imagine the government would make an argument that it does.

But there's still a gaping loophole here: the bill says that a service provider must "prevent a domain name from resolving to that domain name's Internet protocol address", so fine, maybe Google couldn't return a link to 194.71.107.15 in response to "thepiratebay.org", but there's absolutely nothing in the bill that says they couldn't return a link to 194.71.107.15 in response to "Pirate Bay", "piratebay", "thepiratebay", etc. There's also nothing in the bill that prohibits them from responding to a "thepiratebay.org" query with a message telling the user that the link they were looking for was filtered out, and suggesting that they strip the suffix off of the search term to get around the domain name resolution restriction.

I realize this doesn't solve the problems of broken links on the net or anything like that, but it's an indication of the fact that this bill, horrible as it is, will likely just be routed around like many other problems on the Internet, with a lot of effort wasted in order to do so.

Re: Internet blacklist bill COICA one step closer to becoming law

#22
post #2

What if bit.ly and other shorteners supplant DNS for affected sites, e.g. http://bit.ly/xAwIp redirects to thepiratebay.org's address, 194.71.107.15. Will bit.ly have to start breaking every previously shortened URL that redirects to the IP address of an offending site? Or more likely, any shortened URL that redirects to an IP address directly at all?

What if there was a new service that simply takes the blacklist and "fixes" the DNS. You could type something like http://blacklis.tr/piratebay.org and get forwarded to the correct IP. They could monitise the same way OpenDNS does by providing a DNS service as well.

Even better would be if Google started supplying links to the IP address directly. Most of the populace uses Google to browse the internet anyway. Remember the chaos that resulted from when that news article reached the first result for a facebook search query?

Re: Internet blacklist bill COICA one step closer to becoming law

#23

One thing I was wondering was whether or not, for instance, Google would be prohibited from returning a direct IP address link to (say) the Pirate Bay in response to a search for "pirate bay". The text in the bill says: `(i) a service provider, as that term is defined in section 512(k)(1) of title 17, United States Code, or other operator of a domain name system server shall take reasonable steps that will prevent a…

I suppose this mean anybody interesting in piracy will just run their own dns servers.

Dead easy and I suppose somebody will put out a simple copy of bind for windows that you can run locally.

Re: Internet blacklist bill COICA one step closer to becoming law

#24
post #18
post #17

(posted this in related thread) Contact your senators and tell them to just say no to S. 3804: http://www.govtrack.us/congress/bill.xpd?bill=s111-3804 http://www.senate.gov/reference/common/faq/How_to_contact_se... No good can come of the gov't trying to control what domains can be accessed, and it won't stop those that wish to do us harm or take advantage of us, because they'll just use another domain.

That's the wrong response though. It distinguishes between this bill and other internet-monitoring-and-censoring bills, when in reality none exists: all of them are equally silly due to technological reasons. Instead of saying that nothing good can come from the government controlling what domains are accessed (which is true), point out that it's technically impossible and makes us look like idiots.

What I wrote them was a little more in depth and more general, but I think it is important to mention the specific bill each time in addition to the overall sentiment, so the secretary reading the mail puts an X mark in the tally next to the bill number on her notepad. :)

Basically, I pointed out that things have been just fine with the free uncensored net we've had so far, that this would limit that freedom by attempting to restrict what we could visit, and that those with malicious intent could easily thwart such attempts.

I think that part of the reason they are doing this is to attempt to have access to block off our country's network in case of "cyberwar", etc., so it is probably a defensive measure, rather than what they claim it to be. They probably can't just do this type of blocking at the periphery, since satellite, etc. connections within the U.S. could just as easily be a danger, not just the big trunks coming out of the ocean.

I don't want our country to be at risk, but I think that a simple blacklist is not the way to do it. Now, if they installed devices at each ISP that all traffic had to run through- then you might have a greater defense. But, basically, in cyberwar, we're all screwed. Things like this are chump change compared to EMPs, viruses, state-controlled botnets, etc. Cyberwar would be almost purely offensive, similar to nuclear war.

Re: Internet blacklist bill COICA one step closer to becoming law

#25
post #11

Once again Americans are or should be embarrassed by their legislators. This puts us in the same boat as China in that we are attempting to block bad knowledge by fiat rather than with education. How can we decry repressive censorship regimes in other countries when we reserve the right to blackhole sites that we disapprove of on whatever grounds?

It's easy, it's similar to how they decry human rights abuses while abusing human rights at Gitmo.

You just need one guy committing the abuses, another guy talking down to other nations about doing the same thing, and a lawyer to invent complicated explanations as to why whatever you're doing is slightly different than whatever their doing, or how it's not torture until it feels like organ failure. And if the abuse gets too egregious just find some low ranking grunt and blame her for the whole thing, and now it won't happen again. wink wink nudge nudge

Oh, and it helps if you get to appoint the people who will be judging you, like maybe one of the lawyers who helped you out of a sticky hypocritical situation 20 years ago. It's kind of like explaining the differences between mob protection money and income tax. Most people are on board with the gov't reasoning on that one, and the rest don't matter.

Re: Internet blacklist bill COICA one step closer to becoming law

#26
post #11

Once again Americans are or should be embarrassed by their legislators. This puts us in the same boat as China in that we are attempting to block bad knowledge by fiat rather than with education. How can we decry repressive censorship regimes in other countries when we reserve the right to blackhole sites that we disapprove of on whatever grounds?

No, not really. Unlike China, our government is too dumb to even do it correctly. I run my own DNS resolver. Guess what the config will be when this law passes? Step 1, try real DNS. Step 2, try open DNS. Anyone behind my firewall will have no idea that this law even exists. Also, how does DNS affect bittorrent? I'll tell you how -- not at all. You can't censor the Internet. Any attempt to try is just hilarious. (Rem…

No, not really. Unlike China, our government is too dumb to even do it correctly.

You can easily bypass the Great Chinese Firewall with iptables:

http://www.schneier.com/blog/archives/2006/06/ignoring_the_g...

tl;dr: iptables -A INPUT -p tcp --tcp-flags RST RST -j DROP

Re: Internet blacklist bill COICA one step closer to becoming law

#27
post #2

What if bit.ly and other shorteners supplant DNS for affected sites, e.g. http://bit.ly/xAwIp redirects to thepiratebay.org's address, 194.71.107.15. Will bit.ly have to start breaking every previously shortened URL that redirects to the IP address of an offending site? Or more likely, any shortened URL that redirects to an IP address directly at all?

What if there was a new service that simply takes the blacklist and "fixes" the DNS. You could type something like http://blacklis.tr/piratebay.org and get forwarded to the correct IP. They could monitise the same way OpenDNS does by providing a DNS service as well.

Name-based virtual hosting would break this. But I'll bet DNS "alternatives" will spring up, quickly.

Re: Internet blacklist bill COICA one step closer to becoming law

#28
Illicit material will always exist, it may just be less visible to the average joe/public (who, honestly, are dumb enough anyway that it's a pointless battle to educate them) and the legislators are simply making it more difficult to track people by forcing them to use innovative and private measures. VPN? Check. Self hosted DNS? Check. GNUnet/Freenet? Check.

Dinosaur politicians and corporate lobbying will always be behind the times, nothing we can do about that except do what we do best: hack. Do the "illicit" stuff under the radar and keep your shit to yourself.

Re: Internet blacklist bill COICA one step closer to becoming law

#29

One thing I was wondering was whether or not, for instance, Google would be prohibited from returning a direct IP address link to (say) the Pirate Bay in response to a search for "pirate bay". The text in the bill says: `(i) a service provider, as that term is defined in section 512(k)(1) of title 17, United States Code, or other operator of a domain name system server shall take reasonable steps that will prevent a…

I suppose this mean anybody interesting in piracy will just run their own dns servers. Dead easy and I suppose somebody will put out a simple copy of bind for windows that you can run locally.

A simple hosts file will work for windows

Re: Internet blacklist bill COICA one step closer to becoming law

#30
So if this gets passed there will be a numerous ways of circumventing this as people will organise around it. Also once this starts happening it will provide huge promotion for the sites that are inflicted with this legislation.

Can we volunteer to go first? I'm sure I can find a snippet of a Disney movie to post under the grounds of fair use.

Post reply on HN