Earlier quoted context omitted.
They can't and don't do it with just a DNS, it'll have to be DNS + HTTP URL. Otherwise porn hosted on one large shared hosting would block everything. (e.g. imagine if the Amazon EC2 DNS got blocked). The current UK ISP filter (the one that already filtered Wikipedia), used DNS & HTTP. IP addresses that needed filtering were redirected to their HTTP server by sending back their IP address, and then a HTTP proxy was u…
They CANNOT use HTTP filtering as that would break on HTTPS.
Dont Worry Government, I Got This Porn Filter Sorted
31–40 of 45 posts
Re: Dont Worry Government, I Got This Porn Filter Sorted
#32Pretty comical video, one quick tip. If you typed a command on the terminal and you get the "Operation not permitted." You can run the last command prepending sudo like this: sudo !!
eg. Check what you're about to delete
$ ls *.backup
a.backup b.backup c.backup
$ ^ls^rm
rm *.backup
Something else that saves a lot of time is to incremental-search backwards through your command history using ctrl-r instead of arrow keys. eg. cycle through every "grep". Press ctrl-r, type grep, and it jumps to to most recent command that contains "grep". Each time you press ctrl-r it will jump further back in time. If it's something you expect to search for a lot, you can even tag commands with # comments then search for the comment. (There's a fine line there though... if you reuse a command really often you should probably alias or script it)Command history uses the 'readline' library so all(?) the other editing-related emacs chords will work on it ctrl-a/ctrl-e to jump to the start/end of the line, ctrl-r/ctrl-s to search, alt-f/alt-b to jump words, etc. Oh, and an emacs kill-ring too, that's pretty useful.
Enjoy.
...
...
But there's one more thing.
This is a feature of GNU Readline, not a feature of bash. Other apps that use readline will also accept these chords.
Things like the ruby and python shells, mysql, etc.
You think you can do a lot in those tools now? Learning to leverage everything that readline gives you will take you to a whole new level.
Have fun exploring :)
Re: Dont Worry Government, I Got This Porn Filter Sorted
#33Re: Dont Worry Government, I Got This Porn Filter Sorted
#34Earlier quoted context omitted.
> Bonus points if someone builds a way to crowd source the data so that it gets logged from multiple DNS servers round the world. What you want is a website that answers: Does Country-C block Website-W? A user gives it a URL and it has VPNs surfacing in lots of different countries and it tries them all, and displays in which countries the URL is blocked. The website also stores and records all blocked/unblocked websi…
There is something like that for the great wall of china: http://www.greatfirewallofchina.org/
And it bizarrely replaces its headers with Flash.
Re: Dont Worry Government, I Got This Porn Filter Sorted
#35> Any request that is denied by OpenDNS is then allowed by our DNS server, and any request allowed by OpenDNS is blocked by us. The most interesting part of this to me is using multiple DNS providers to determine which category the site is in. It's both simple and effective. If they actually go ahead with this plan in the UK and it's implemented similarly (eg. via DNS rather than IP blocking), somebody should make a…
Cleanfeed (the UKs child porn filter) is supposed to be IP blocking/NAT based, coupled with web proxies. Given the scope of the filtering this time around though, it may be done by DNS. Let's hope so.
Re: Dont Worry Government, I Got This Porn Filter Sorted
#36Re: Dont Worry Government, I Got This Porn Filter Sorted
#37Pretty comical video, one quick tip. If you typed a command on the terminal and you get the "Operation not permitted." You can run the last command prepending sudo like this: sudo !!
fucking !!
Re: Dont Worry Government, I Got This Porn Filter Sorted
#38Earlier quoted context omitted.
Nope, the domain is always visible on HTTPS, due to SNI. They can just block it.
Older Win XP machines doesn't support SNI, so you could get around it with an older machine. Of cause that's a problem that will go away over time.
Re: Dont Worry Government, I Got This Porn Filter Sorted
#39Earlier quoted context omitted.
Older Win XP machines doesn't support SNI, so you could get around it with an older machine. Of cause that's a problem that will go away over time.
To connect to an HTTPS site without SNI, the IP can only host a single domain, so they can just block the whole (IP:443) combination without affecting any other site.
Re: Dont Worry Government, I Got This Porn Filter Sorted
#40Earlier quoted context omitted.
To connect to an HTTPS site without SNI, the IP can only host a single domain, so they can just block the whole (IP:443) combination without affecting any other site.
What if the IP is dynamic? Say an Azure Cloud Service.