Mailing List Archive

and what if...
I can not help reflect further on the whole Virgin Killer story.

Whilst I am very happy of the final outcome, and thank David Gerard and
WMF for having handled that very well, I feel also a big disatisfied by
the way we acknowledged what happen and discuss future steps.

We all perfectly know that if this particular image was borderline,
there are images or texts that are illegal in certain countries. I am
not even speaking of China here, but good old westernish countries.
In some countries, it may be sexually-oriented picts. In others, it may
be violence. In others yet, some texts we host are forbidden. I am not
going to cite any examples publicly ;-)

Until now, we have blinded ourselves in claiming that
* we do not really need to respect local countries law. We respect by
default the law of the country where projects are hosted (USA)
* if a country is not happy with some of the content, they can bring the
affair in front of a local tribunal. Then it will have to go in front of
an international tribunal. This will last 5 years at least. Good for us.
* if a legal decision forbid us to show a certain article or a certain
image, we'll implement a system to block showing the images or text in a
certain country.

And that was it !

Now, the fact is that we see that other mecanisms can work much better
than the legal route. It is sufficient that a Foundation, privately
funded by ISP, establish a black list, for the image/text to be not
accessible. And on top of that, in a few hours, for most of the citizens
of this country to be blocked from editing.

Now, seriously, what is more important right now ?
That citizens can not read one article ?
Or that all the citizens of a country can not edit all articles any more ?

I would argue that the content of Wikipedia can be copied and
distributed by anyone, so preventing reading our site is not such a bid
deal.
However, editing can only be done on our site, so the impact of blocking
in editing is quite dramatic.

My point is not to bend on local laws at all.
But I'd like to see people change their minds about the traditional
route we used to think we could be blocked in "democratic" countries
(legal route, with local then international tribunal).
And I'd like to see people think about the "worst cases", and then work
on how to decrease the impact (or prevent entirely) these worst cases.
Scenario planning in short.

If tomorrow, a really illegal-in-UK image is reported to the IWF, they
will block it for real. And they will block again editing. Is that a
concern ? Can it happen again ? What's the risk of it happening again ?
If it does, what do we do ? Which discussions should we start to avoid
the entire edit-blocking again ?

And... beyond UK, what do we know about the censorship-systems the
countries are setting into place ? I understood that Australia was
setting up the same system than UK, but that France was rather thinking
of other system. Should not we get to know and understand better what
governments are planning ? Should we try to lobby them to adopt certains
choices or not ? Should we help them adopt wise practices ?

Or should we just wait to see what's next ?

Ant


_______________________________________________
foundation-l mailing list
foundation-l@lists.wikimedia.org
Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/foundation-l
Re: and what if... [ In reply to ]
2008/12/12 Florence Devouard <Anthere9@yahoo.com>:

> We all perfectly know that if this particular image was borderline,
> there are images or texts that are illegal in certain countries. I am
> not even speaking of China here, but good old westernish countries.
> In some countries, it may be sexually-oriented picts. In others, it may
> be violence. In others yet, some texts we host are forbidden. I am not
> going to cite any examples publicly ;-)

Well in fact the picture blocked by IWF was not illegal. I think we
should complain that such the organisation like IWF should follow the
freedom of speach rules of their countries, which means that they
cannot legally block the content which has not been found illegal. We
should also join and actively participate in campaings attempting to
control IWF and similar organisations. This is not only Wikimedia
issue - but generally an issue of freedom of speach, which might
affect not only us but also many others.

> Now, seriously, what is more important right now ?
> That citizens can not read one article ?
> Or that all the citizens of a country can not edit all articles any more ?

Well, the story with IWF have shown that the current system of
blocking vandals by their IP has to be changed ASAP. In fact it is
causing a lot of problems even without action of IWF and other similar
wachdogs. There are more and more ISPs which uses single IP for all
their customers. Do you rember the story of blocking Quatar? Actually,
vast majority of ISPs use dynamic IP numbers, which also causes
serious problems with effective blocking vandals.My current ISP is
using dynamic IP. In my office there are around 200 people using
single IP. I guess all OTRS volunteers and checkusers knows the issue
very well. The IP blocking is terribly old fashioned - it has been
implemented at the time where most of the IP's represented single
PC's. Actually very few IP numbers are "personal".


> However, editing can only be done on our site, so the impact of blocking
> in editing is quite dramatic.

Yes.. but it is at least in 50% our own fault - by using mechanism of
IP blocking.

> And... beyond UK, what do we know about the censorship-systems the
> countries are setting into place ? I understood that Australia was
> setting up the same system than UK, but that France was rather thinking
> of other system. Should not we get to know and understand better what
> governments are planning ? Should we try to lobby them to adopt certains
> choices or not ? Should we help them adopt wise practices ?
>

Yes.. for sure we had to monitor the situation and give a laud voice
demanding formal control of the bodies similar to IWF and support
local groups which are demanding the same.

--
Tomek "Polimerek" Ganicz
http://pl.wikimedia.org/wiki/User:Polimerek
http://www.ganicz.pl/poli/
http://www.ptchem.lodz.pl/en/TomaszGanicz.html

_______________________________________________
foundation-l mailing list
foundation-l@lists.wikimedia.org
Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/foundation-l
Re: and what if... [ In reply to ]
2008/12/12 Florence Devouard <Anthere9@yahoo.com>:
> Now, seriously, what is more important right now ?
> That citizens can not read one article ?
> Or that all the citizens of a country can not edit all articles any more ?

It isn't an either or.


> I would argue that the content of Wikipedia can be copied and
> distributed by anyone, so preventing reading our site is not such a bid
> deal.
> However, editing can only be done on our site, so the impact of blocking
> in editing is quite dramatic.
>
> My point is not to bend on local laws at all.
> But I'd like to see people change their minds about the traditional
> route we used to think we could be blocked in "democratic" countries
> (legal route, with local then international tribunal).
> And I'd like to see people think about the "worst cases", and then work
> on how to decrease the impact (or prevent entirely) these worst cases.
> Scenario planning in short.
>
> If tomorrow, a really illegal-in-UK image is reported to the IWF, they
> will block it for real. And they will block again editing. Is that a
> concern ? Can it happen again ? What's the risk of it happening again ?
> If it does, what do we do ? Which discussions should we start to avoid
> the entire edit-blocking again ?

The risk is limited until the new year. Then it will depend on exactly
how the Extreme pornography law is interpreted.

The damage to editing will be more limited since at least some
companies now have XFF headers in place and we recognize them. Just a
matter of getting the rest on board.

> And... beyond UK, what do we know about the censorship-systems the
> countries are setting into place ? I understood that Australia was
> setting up the same system than UK,

The Australian system is almost certainly wider in its approach than
the UK. Technical details are limited however. For the time being the
ISPs are not cooperating however so hard to predict the outcome.

>Should not we get to know and understand better what
> governments are planning ?

Ideally yes but there is the language barrier and of course a lot of
the details are non public. We probably now know more about the
operation of the IWF/cleanfeed system than was publicly available at
the beginning of the week.

> Should we try to lobby them to adopt certains
> choices or not ? Should we help them adopt wise practices ?

If they are going to use proxies we want them to tell us and to use
XFF headers. Beyond that I'm not sure if we actually want to become a
free speech campaigning organisation.

> Or should we just wait to see what's next ?

In the end there is always going to be an element of that.

--
geni

_______________________________________________
foundation-l mailing list
foundation-l@lists.wikimedia.org
Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/foundation-l
Re: and what if... [ In reply to ]
On Fri, Dec 12, 2008 at 6:33 AM, Tomasz Ganicz <polimerek@gmail.com> wrote:
> Well, the story with IWF have shown that the current system of
> blocking vandals by their IP has to be changed ASAP. In fact it is
> causing a lot of problems even without action of IWF and other similar
> wachdogs. There are more and more ISPs which uses single IP for all
> their customers. Do you rember the story of blocking Quatar? Actually,
> vast majority of ISPs use dynamic IP numbers, which also causes
> serious problems with effective blocking vandals.My current ISP is
> using dynamic IP. In my office there are around 200 people using
> single IP. I guess all OTRS volunteers and checkusers knows the issue
> very well. The IP blocking is terribly old fashioned - it has been
> implemented at the time where most of the IP's represented single
> PC's. Actually very few IP numbers are "personal".

Do you have a suggestion? Not everyone uses XFF, certainly not ISPs
with dynamic IPs, how would you suggest we block anonymous users?

--
DCollins/ST47
Administrator, en.wikipedia.org
Channel Operator, irc.freenode.net/#wikipedia
Maintainer, Perlwikipedia module

_______________________________________________
foundation-l mailing list
foundation-l@lists.wikimedia.org
Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/foundation-l
Re: and what if... [ In reply to ]
2008/12/12 Dan Collins <en.wp.st47@gmail.com>:
> On Fri, Dec 12, 2008 at 6:33 AM, Tomasz Ganicz <polimerek@gmail.com> wrote:
>> Well, the story with IWF have shown that the current system of
>> blocking vandals by their IP has to be changed ASAP. In fact it is
>> causing a lot of problems even without action of IWF and other similar
>> wachdogs. There are more and more ISPs which uses single IP for all
>> their customers. Do you rember the story of blocking Quatar? Actually,
>> vast majority of ISPs use dynamic IP numbers, which also causes
>> serious problems with effective blocking vandals.My current ISP is
>> using dynamic IP. In my office there are around 200 people using
>> single IP. I guess all OTRS volunteers and checkusers knows the issue
>> very well. The IP blocking is terribly old fashioned - it has been
>> implemented at the time where most of the IP's represented single
>> PC's. Actually very few IP numbers are "personal".
>
> Do you have a suggestion? Not everyone uses XFF, certainly not ISPs
> with dynamic IPs, how would you suggest we block anonymous users?

Indeed, I don't see any alternative way to block anonymous users. Even
forcing people to register wouldn't help since, without IP addresses,
we can't block account creation by people creating new accounts every
time one gets block. What we need to do is put pressure on ISPs to use
XFF whenever they are using proxies. The fact that people couldn't
edit during the block has nothing to do with censorship, it's just a
technical issue that can and must be fixed by ISPs.

The censorship issue isn't really an issue - if an image (or content
or whatever) is genuinely illegal in a given country then of course
that country has every right to block it. If countries block legal
images (as in this case), or block more than just the infringing image
(again, as in this case) then we can appeal by whatever means are
appropriate (the court of public opinion works pretty well as an
appeals court if there isn't a more formal method). We can also
campaign to have laws changed if we want to, but that's a decision to
be taken with great care - getting into political lobbying is a big
deal and maybe not something we want to get involved with (if we do,
it should be something done by the local chapter, I expect).

_______________________________________________
foundation-l mailing list
foundation-l@lists.wikimedia.org
Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/foundation-l
Re: and what if... [ In reply to ]
On Fri, Dec 12, 2008 at 6:26 AM, Thomas Dalton <thomas.dalton@gmail.com> wrote:

> The censorship issue isn't really an issue - if an image (or content
> or whatever) is genuinely illegal in a given country then of course
> that country has every right to block it. If countries block legal
> images (as in this case), or block more than just the infringing image
> (again, as in this case) then we can appeal by whatever means are
> appropriate (the court of public opinion works pretty well as an
> appeals court if there isn't a more formal method). We can also
> campaign to have laws changed if we want to, but that's a decision to
> be taken with great care - getting into political lobbying is a big
> deal and maybe not something we want to get involved with (if we do,
> it should be something done by the local chapter, I expect).
>


I agree, I would be very opposed to the Foundation using its resources
to openly plan for censorship in a technological way. Obviously it
doesn't hurt to plan from a PR and legal point of view.

I would not want a new group to think, while they are deciding to
censor, that Wikimedia has made this easy, and has ensured that their
censorship will effect the least amount of people and result in the
least political backlash.

I understand that some countries may decide to censor content. That is
regrettable. I don't however want any of the money I donate to the
Foundation to go to making these blocks easier for the people
implementing them, or less prone to error. It is very likely that each
censorship implementation will be different, researching each one, and
deciding how to cause the least impact preemptively I don't think is a
good use of resources for the technical team.

Not a response to your email, but the reaction in general strikes me
as very inconsistent. With China they have been censored, they try and
use TOR, and we block them, and say for years that there is
regrettably nothing we can do about this situation. UK gets blocked
for a day and we are talking about changing our IP based block
systems? I know the technical details of the block are a little
different, but not *that* different. Maybe the people that are saying
this though have always opposed this system, and this is just more
reason in their minds. I hope that's the case. :)

Judson
http://en.wikipedia.org/wiki/User:Cohesion

_______________________________________________
foundation-l mailing list
foundation-l@lists.wikimedia.org
Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/foundation-l
Re: and what if... [ In reply to ]
> Not a response to your email, but the reaction in general strikes me
> as very inconsistent. With China they have been censored, they try and
> use TOR, and we block them, and say for years that there is
> regrettably nothing we can do about this situation. UK gets blocked
> for a day and we are talking about changing our IP based block
> systems? I know the technical details of the block are a little
> different, but not *that* different. Maybe the people that are saying
> this though have always opposed this system, and this is just more
> reason in their minds. I hope that's the case. :)

There is a big difference between an intentional block of the whole
site and a block of one page with unintended consequences affecting
the whole site.

_______________________________________________
foundation-l mailing list
foundation-l@lists.wikimedia.org
Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/foundation-l
Re: and what if... [ In reply to ]
On Fri, Dec 12, 2008 at 9:01 AM, Judson Dunn <cohesion@sleepyhead.org> wrote:
> Not a response to your email, but the reaction in general strikes me
> as very inconsistent. With China they have been censored, they try and
> use TOR, and we block them, and say for years that there is
> regrettably nothing we can do about this situation. UK gets blocked
> for a day and we are talking about changing our IP based block
> systems? I know the technical details of the block are a little
> different, but not *that* different. Maybe the people that are saying
> this though have always opposed this system, and this is just more
> reason in their minds. I hope that's the case. :)

I agree that there is a certain incongruity here, but the UK is not a
focused source of spam and vandalism in the same way that anonymized
TOR nodes are. It's very unfortunate that the majority of Chinese
citizens are blocked from editing Wikipedia, but opening up a few back
channels for them to use at the expense of increasing our flow of spam
and vandalism is really not a great solution to any problems.

--Andrew Whitworth

_______________________________________________
foundation-l mailing list
foundation-l@lists.wikimedia.org
Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/foundation-l
Re: and what if... [ In reply to ]
2008/12/12 Thomas Dalton <thomas.dalton@gmail.com>:
> 2008/12/12 Dan Collins <en.wp.st47@gmail.com>:
>> On Fri, Dec 12, 2008 at 6:33 AM, Tomasz Ganicz <polimerek@gmail.com> wrote:
>>> Well, the story with IWF have shown that the current system of
>>> blocking vandals by their IP has to be changed ASAP. In fact it is
>>> causing a lot of problems even without action of IWF and other similar
>>> wachdogs. There are more and more ISPs which uses single IP for all
>>> their customers. Do you rember the story of blocking Quatar? Actually,
>>> vast majority of ISPs use dynamic IP numbers, which also causes
>>> serious problems with effective blocking vandals.My current ISP is
>>> using dynamic IP. In my office there are around 200 people using
>>> single IP. I guess all OTRS volunteers and checkusers knows the issue
>>> very well. The IP blocking is terribly old fashioned - it has been
>>> implemented at the time where most of the IP's represented single
>>> PC's. Actually very few IP numbers are "personal".
>>
>> Do you have a suggestion? Not everyone uses XFF, certainly not ISPs
>> with dynamic IPs, how would you suggest we block anonymous users?
>
> Indeed, I don't see any alternative way to block anonymous users. Even
> forcing people to register wouldn't help since, without IP addresses,
> we can't block account creation by people creating new accounts every
> time one gets block. What we need to do is put pressure on ISPs to use
> XFF whenever they are using proxies. The fact that people couldn't
> edit during the block has nothing to do with censorship, it's just a
> technical issue that can and must be fixed by ISPs.

This is probably off-topic for this list, but IP blocking is actually
inefective in exactly the same way as it would be just blocking
accounts. When you block a dynamic IP a vandal can reboot and he/she
usually get new dynamic IP from his/her ISP. So you have to block
another IP number. If the vandal is very determined, you have to
finally block entire IP range, cutting off at least several hundreds
other people, and even if you do this vandal can still go to internet
caffe nearby which uses IP's from another ISP, so if you spot him/her
you have to block IP of the caffe. In some extreme cases you finally
end-up blocking IP ranges of all major ISP's from the area where
vandal operates...

Honestly saying I have no ready to use receipe how to replace IP
blocking. But IWF case have just shown that in the future it has to be
replaced by something smarter or we end up in blocking all major ISP's
customers all over the world.

--
Tomek "Polimerek" Ganicz
http://pl.wikimedia.org/wiki/User:Polimerek
http://www.ganicz.pl/poli/
http://www.ptchem.lodz.pl/en/TomaszGanicz.html

_______________________________________________
foundation-l mailing list
foundation-l@lists.wikimedia.org
Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/foundation-l
Re: and what if... [ In reply to ]
>> Indeed, I don't see any alternative way to block anonymous users. Even
>> forcing people to register wouldn't help since, without IP addresses,
>> we can't block account creation by people creating new accounts every
>> time one gets block. What we need to do is put pressure on ISPs to use
>> XFF whenever they are using proxies. The fact that people couldn't
>> edit during the block has nothing to do with censorship, it's just a
>> technical issue that can and must be fixed by ISPs.
>
> This is probably off-topic for this list, but IP blocking is actually
> inefective in exactly the same way as it would be just blocking
> accounts. When you block a dynamic IP a vandal can reboot and he/she
> usually get new dynamic IP from his/her ISP. So you have to block
> another IP number. If the vandal is very determined, you have to
> finally block entire IP range, cutting off at least several hundreds
> other people, and even if you do this vandal can still go to internet
> caffe nearby which uses IP's from another ISP, so if you spot him/her
> you have to block IP of the caffe. In some extreme cases you finally
> end-up blocking IP ranges of all major ISP's from the area where
> vandal operates...
>
> Honestly saying I have no ready to use receipe how to replace IP
> blocking. But IWF case have just shown that in the future it has to be
> replaced by something smarter or we end up in blocking all major ISP's
> customers all over the world.

I see no evidence that anything smarter exists. The only thing we know
about anonymous users are their IP addresses, so that's all we can use
to block them. It is theoretically impossible to do anything else, as
far as I can see.

_______________________________________________
foundation-l mailing list
foundation-l@lists.wikimedia.org
Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/foundation-l
Re: and what if... [ In reply to ]
On Fri, Dec 12, 2008 at 6:43 AM, Thomas Dalton <thomas.dalton@gmail.com> wrote:
>>> Indeed, I don't see any alternative way to block anonymous users. Even
>>> forcing people to register wouldn't help since, without IP addresses,
>>> we can't block account creation by people creating new accounts every
>>> time one gets block. What we need to do is put pressure on ISPs to use
>>> XFF whenever they are using proxies. The fact that people couldn't
>>> edit during the block has nothing to do with censorship, it's just a
>>> technical issue that can and must be fixed by ISPs.
>>
>> This is probably off-topic for this list, but IP blocking is actually
>> inefective in exactly the same way as it would be just blocking
>> accounts. When you block a dynamic IP a vandal can reboot and he/she
>> usually get new dynamic IP from his/her ISP. So you have to block
>> another IP number. If the vandal is very determined, you have to
>> finally block entire IP range, cutting off at least several hundreds
>> other people, and even if you do this vandal can still go to internet
>> caffe nearby which uses IP's from another ISP, so if you spot him/her
>> you have to block IP of the caffe. In some extreme cases you finally
>> end-up blocking IP ranges of all major ISP's from the area where
>> vandal operates...
>>
>> Honestly saying I have no ready to use receipe how to replace IP
>> blocking. But IWF case have just shown that in the future it has to be
>> replaced by something smarter or we end up in blocking all major ISP's
>> customers all over the world.
>
> I see no evidence that anything smarter exists. The only thing we know
> about anonymous users are their IP addresses, so that's all we can use
> to block them. It is theoretically impossible to do anything else, as
> far as I can see.

Long-time ago, I suggested adding a short-duration cookie whenever a
block was triggered that would allow the software to detect the most
obvious IP jumping vandals (asumming they used the same browser on the
same machine each time). It doesn't get at the bulk of Tomek's
criticism, but it does fall in the other-things-we-could-do category.

-Robert Rohde

_______________________________________________
foundation-l mailing list
foundation-l@lists.wikimedia.org
Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/foundation-l
Re: and what if... [ In reply to ]
> Long-time ago, I suggested adding a short-duration cookie whenever a
> block was triggered that would allow the software to detect the most
> obvious IP jumping vandals (asumming they used the same browser on the
> same machine each time). It doesn't get at the bulk of Tomek's
> criticism, but it does fall in the other-things-we-could-do category.

Deleting cookies is far easier than changing IP addresses.

_______________________________________________
foundation-l mailing list
foundation-l@lists.wikimedia.org
Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/foundation-l
Re: and what if... [ In reply to ]
I absolutely agree with Judson that we should be devoting exactly zero of
our material and mental resources to thinking of ways to assist in the work
of censors. The problems presented in this example are almost entirely
those of a national legislature comfortable with allowing private bodies to
modify free speech for 95% of their citizens.

FMF



On 12/12/08, Robert Rohde <rarohde@gmail.com> wrote:
>
> On Fri, Dec 12, 2008 at 6:43 AM, Thomas Dalton <thomas.dalton@gmail.com>
> wrote:
> >>> Indeed, I don't see any alternative way to block anonymous users. Even
> >>> forcing people to register wouldn't help since, without IP addresses,
> >>> we can't block account creation by people creating new accounts every
> >>> time one gets block. What we need to do is put pressure on ISPs to use
> >>> XFF whenever they are using proxies. The fact that people couldn't
> >>> edit during the block has nothing to do with censorship, it's just a
> >>> technical issue that can and must be fixed by ISPs.
> >>
> >> This is probably off-topic for this list, but IP blocking is actually
> >> inefective in exactly the same way as it would be just blocking
> >> accounts. When you block a dynamic IP a vandal can reboot and he/she
> >> usually get new dynamic IP from his/her ISP. So you have to block
> >> another IP number. If the vandal is very determined, you have to
> >> finally block entire IP range, cutting off at least several hundreds
> >> other people, and even if you do this vandal can still go to internet
> >> caffe nearby which uses IP's from another ISP, so if you spot him/her
> >> you have to block IP of the caffe. In some extreme cases you finally
> >> end-up blocking IP ranges of all major ISP's from the area where
> >> vandal operates...
> >>
> >> Honestly saying I have no ready to use receipe how to replace IP
> >> blocking. But IWF case have just shown that in the future it has to be
> >> replaced by something smarter or we end up in blocking all major ISP's
> >> customers all over the world.
> >
> > I see no evidence that anything smarter exists. The only thing we know
> > about anonymous users are their IP addresses, so that's all we can use
> > to block them. It is theoretically impossible to do anything else, as
> > far as I can see.
>
> Long-time ago, I suggested adding a short-duration cookie whenever a
> block was triggered that would allow the software to detect the most
> obvious IP jumping vandals (asumming they used the same browser on the
> same machine each time). It doesn't get at the bulk of Tomek's
> criticism, but it does fall in the other-things-we-could-do category.
>
> -Robert Rohde
>
> _______________________________________________
> foundation-l mailing list
> foundation-l@lists.wikimedia.org
> Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/foundation-l
>
_______________________________________________
foundation-l mailing list
foundation-l@lists.wikimedia.org
Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/foundation-l
Re: and what if... [ In reply to ]
On Fri, Dec 12, 2008 at 7:50 AM, Thomas Dalton <thomas.dalton@gmail.com> wrote:
>> Long-time ago, I suggested adding a short-duration cookie whenever a
>> block was triggered that would allow the software to detect the most
>> obvious IP jumping vandals (asumming they used the same browser on the
>> same machine each time). It doesn't get at the bulk of Tomek's
>> criticism, but it does fall in the other-things-we-could-do category.
>
> Deleting cookies is far easier than changing IP addresses.

I generally operate on the assumption that 90% of vandals of dumb.
Yes, one can clear cookies, but one has to figure it out and think to
do that, which I would assume most wouldn't.

-Robert Rohde

_______________________________________________
foundation-l mailing list
foundation-l@lists.wikimedia.org
Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/foundation-l
Re: and what if... [ In reply to ]
2008/12/12 Robert Rohde <rarohde@gmail.com>:
> On Fri, Dec 12, 2008 at 7:50 AM, Thomas Dalton <thomas.dalton@gmail.com> wrote:
>>> Long-time ago, I suggested adding a short-duration cookie whenever a
>>> block was triggered that would allow the software to detect the most
>>> obvious IP jumping vandals (asumming they used the same browser on the
>>> same machine each time). It doesn't get at the bulk of Tomek's
>>> criticism, but it does fall in the other-things-we-could-do category.
>>
>> Deleting cookies is far easier than changing IP addresses.
>
> I generally operate on the assumption that 90% of vandals of dumb.
> Yes, one can clear cookies, but one has to figure it out and think to
> do that, which I would assume most wouldn't.

If they're smart enough to change IP addresses (especially in these
days of broadband connections) they can wipe cookies, especially as
browsers get more and more "privacy" features designed to help with
such things.

_______________________________________________
foundation-l mailing list
foundation-l@lists.wikimedia.org
Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/foundation-l
Re: and what if... [ In reply to ]
On Fri, Dec 12, 2008 at 10:50 AM, Thomas Dalton <thomas.dalton@gmail.com> wrote:
>> Long-time ago, I suggested adding a short-duration cookie whenever a
>> block was triggered that would allow the software to detect the most
>> obvious IP jumping vandals (asumming they used the same browser on the
>> same machine each time). It doesn't get at the bulk of Tomek's
>> criticism, but it does fall in the other-things-we-could-do category.
>
> Deleting cookies is far easier than changing IP addresses.

I think we're all overestimating the problem here. If a vandal is
absolutely determined and has enough technical savvy, no measures that
we take are going to keep them out indefinitely. We can take
reasonable measures to combat the most common types of vandalism, but
we need to realize that no measures we take will be perfect and the
more we do to try to combat individual determined vandals the more
collateral damage we are going to sustain. If vandals aim to disrupt
the project, then sweeping range blocks on IPs is victory for them.

No solution is perfect, and the best we can do is to eliminate the
most common cases in a reasonable way.

--Andrew Whitworth

_______________________________________________
foundation-l mailing list
foundation-l@lists.wikimedia.org
Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/foundation-l
Re: and what if... [ In reply to ]
Andrew Whitworth wrote:
> On Fri, Dec 12, 2008 at 10:50 AM, Thomas Dalton <thomas.dalton@gmail.com> wrote:
>
>>> Long-time ago, I suggested adding a short-duration cookie whenever a
>>> block was triggered that would allow the software to detect the most
>>> obvious IP jumping vandals (asumming they used the same browser on the
>>> same machine each time). It doesn't get at the bulk of Tomek's
>>> criticism, but it does fall in the other-things-we-could-do category.
>>>
>> Deleting cookies is far easier than changing IP addresses.
>>
>
> I think we're all overestimating the problem here. If a vandal is
> absolutely determined and has enough technical savvy, no measures that
> we take are going to keep them out indefinitely. We can take
> reasonable measures to combat the most common types of vandalism, but
> we need to realize that no measures we take will be perfect and the
> more we do to try to combat individual determined vandals the more
> collateral damage we are going to sustain. If vandals aim to disrupt
> the project, then sweeping range blocks on IPs is victory for them.
>
> No solution is perfect, and the best we can do is to eliminate the
> most common cases in a reasonable way.
>
Exactly. The question is not whether the suggested cookie will catch all
or even most would-be vandals. The objective is to build in protections
that are as fully-automatic as possible for us, while requiring extra
steps to circumvent so that vandalism has a higher cost to the vandal.
And the real issue to consider is how likely such a measure is to catch
innocent fish in its net. Because the potential problem is not that
everything can be circumvented, it's that most people shouldn't be put
to the trouble of circumventing.

--Michael Snow

_______________________________________________
foundation-l mailing list
foundation-l@lists.wikimedia.org
Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/foundation-l
Re: and what if... [ In reply to ]
"David Moran" <fordmadoxfraud@gmail.com> wrote:

> I absolutely agree with Judson that we should be devoting exactly zero of
> our material and mental resources to thinking of ways to assist in the work
> of censors. The problems presented in this example are almost entirely
> those of a national legislature comfortable with allowing private bodies to
> modify free speech for 95% of their citizens.
> [...]

You probably meant comfortable with allowing citizens to
allow private bodies to modify their free speech as I assume
there is a "We reserve the right to not deliver child porn to
you." paragraph or two in the terms and conditions of the
affected ISPs.

Tim

_______________________________________________
foundation-l mailing list
foundation-l@lists.wikimedia.org
Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/foundation-l
Re: and what if... [ In reply to ]
2008/12/12 David Moran <fordmadoxfraud@gmail.com>:
> I absolutely agree with Judson that we should be devoting exactly zero of
> our material and mental resources to thinking of ways to assist in the work
> of censors. The problems presented in this example are almost entirely
> those of a national legislature comfortable with allowing private bodies to
> modify free speech for 95% of their citizens.
>
> FMF

They are not entirely comfortable with it. That is rather the problem.
The IWF exists because in 1996 Chief inspector Stephen French made it
clear that if ISPs didn't do something about certain usenet groups he
would do something about those ISPs.

What we saw in action appears to be a derivative of the cleanfeed
system developed by BT a couple of years back at least partly because
the government was making noises about getting involved.

The government would probably go for a rather stricter filtering
system but is prepared to accept the IWF because it saves money and
means that negative PR is not directly pointed at the government.
Problem is that I'm not aware of anyone on the IWF committee who can
really be termed a free speech advocate.

--
geni

_______________________________________________
foundation-l mailing list
foundation-l@lists.wikimedia.org
Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/foundation-l
Re: and what if... [ In reply to ]
--- On Fri, 12/12/08, Florence Devouard <Anthere9@yahoo.com> wrote:

> From: Florence Devouard <Anthere9@yahoo.com>
> Subject: [Foundation-l] and what if...
> To: foundation-l@lists.wikimedia.org
> Date: Friday, December 12, 2008, 4:52 AM
> I can not help reflect further on the whole Virgin Killer
> story.
>
> Whilst I am very happy of the final outcome, and thank
> David Gerard and
> WMF for having handled that very well, I feel also a big
> disatisfied by
> the way we acknowledged what happen and discuss future
> steps.
>
> We all perfectly know that if this particular image was
> borderline,
> there are images or texts that are illegal in certain
> countries. I am
> not even speaking of China here, but good old westernish
> countries.
> In some countries, it may be sexually-oriented picts. In
> others, it may
> be violence. In others yet, some texts we host are
> forbidden. I am not
> going to cite any examples publicly ;-)
>
> Until now, we have blinded ourselves in claiming that
> * we do not really need to respect local countries law. We
> respect by
> default the law of the country where projects are hosted
> (USA)
> * if a country is not happy with some of the content, they
> can bring the
> affair in front of a local tribunal. Then it will have to
> go in front of
> an international tribunal. This will last 5 years at least.
> Good for us.
> * if a legal decision forbid us to show a certain article
> or a certain
> image, we'll implement a system to block showing the
> images or text in a
> certain country.
>
> And that was it !
>
> Now, the fact is that we see that other mecanisms can work
> much better
> than the legal route. It is sufficient that a Foundation,
> privately
> funded by ISP, establish a black list, for the image/text
> to be not
> accessible. And on top of that, in a few hours, for most of
> the citizens
> of this country to be blocked from editing.
>
> Now, seriously, what is more important right now ?
> That citizens can not read one article ?
> Or that all the citizens of a country can not edit all
> articles any more ?
>
> I would argue that the content of Wikipedia can be copied
> and
> distributed by anyone, so preventing reading our site is
> not such a bid
> deal.
> However, editing can only be done on our site, so the
> impact of blocking
> in editing is quite dramatic.
>
> My point is not to bend on local laws at all.
> But I'd like to see people change their minds about the
> traditional
> route we used to think we could be blocked in
> "democratic" countries
> (legal route, with local then international tribunal).
> And I'd like to see people think about the "worst
> cases", and then work
> on how to decrease the impact (or prevent entirely) these
> worst cases.
> Scenario planning in short.
>
> If tomorrow, a really illegal-in-UK image is reported to
> the IWF, they
> will block it for real. And they will block again editing.
> Is that a
> concern ? Can it happen again ? What's the risk of it
> happening again ?
> If it does, what do we do ? Which discussions should we
> start to avoid
> the entire edit-blocking again ?
>
> And... beyond UK, what do we know about the
> censorship-systems the
> countries are setting into place ? I understood that
> Australia was
> setting up the same system than UK, but that France was
> rather thinking
> of other system. Should not we get to know and understand
> better what
> governments are planning ? Should we try to lobby them to
> adopt certains
> choices or not ? Should we help them adopt wise practices ?
>
> Or should we just wait to see what's next ?
>
> Ant


I am strongly against collaborating with Westernish governments to help make their censorship more effective. I personally don't think we should help anyone make their censorship more effective. But if we are to decide we would rather have citizens under censorship able to participate with censorship rather than not participate at all, we should not discriminate with which governments we are willing to help.

Personally I don't get censorship, nor the complacency Europeans generally have about living under it. I don't get it but I can recognize that many other people see it differently and may want to support censorship. But we can't pick and choose which government's censorship we will support. This is an international organization and nothing in mission expresses support for western mores over others. Selectively helping some governments censor would be a disastrous move for WMF to make.

Birgitte SB




_______________________________________________
foundation-l mailing list
foundation-l@lists.wikimedia.org
Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/foundation-l
Re: and what if... [ In reply to ]
On 12 Dec 2008, at 10:52, Florence Devouard wrote:

> Now, seriously, what is more important right now ?
> That citizens can not read one article ?
> Or that all the citizens of a country can not edit all articles any
> more ?
>
> I would argue that the content of Wikipedia can be copied and
> distributed by anyone, so preventing reading our site is not such a
> bid
> deal.
> However, editing can only be done on our site, so the impact of
> blocking
> in editing is quite dramatic.

If you can't read the article on Wikipedia, then you can't edit it.
If an article doesn't exist on Wikipedia, then it can't be
distributed by other people.

IMO, the best approach would be to have a channel (a phone number, an
email address, etc...) where governments can contact the WMF to
request that certain pages are blocked in certain countries. These
entries can then be publicly listed, so that people know that they
are censored, and when a censored page is requested a notice should
be displayed instead saying that the page is censored.

I don't like the idea of censoring at all, but it seems to be
required in today's world. We can't do much about that, but we can
deal with it in such a way that people know that it is being
censored, rather than just hiding it behind error 404 messages. It
also lets the rest of the world continue editing those pages, so that
they are there when they no longer need to be censored (and/or other
sites can distribute them to). Think of it as the digital version of
a black marker over text.

Mike

_______________________________________________
foundation-l mailing list
foundation-l@lists.wikimedia.org
Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/foundation-l
Re: and what if... [ In reply to ]
2008/12/12 Michael Peel <email@mikepeel.net>:

> IMO, the best approach would be to have a channel (a phone number, an
> email address, etc...) where governments can contact the WMF to
> request that certain pages are blocked in certain countries. These
> entries can then be publicly listed, so that people know that they
> are censored, and when a censored page is requested a notice should
> be displayed instead saying that the page is censored.


I really can't see this one flying.


> I don't like the idea of censoring at all, but it seems to be
> required in today's world. We can't do much about that, but we can
> deal with it in such a way that people know that it is being
> censored, rather than just hiding it behind error 404 messages. It
> also lets the rest of the world continue editing those pages, so that
> they are there when they no longer need to be censored (and/or other
> sites can distribute them to). Think of it as the digital version of
> a black marker over text.


So far we've spotted it pretty readily. We could do this job by
maintaining a list of known blocked pages in given countries. This
page will of course be blocked by all the countries listed, but the
list will spread readily once it exists.


- d.

_______________________________________________
foundation-l mailing list
foundation-l@lists.wikimedia.org
Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/foundation-l
Re: and what if... [ In reply to ]
On Fri, Dec 12, 2008 at 5:52 AM, Florence Devouard <Anthere9@yahoo.com>wrote:

> If tomorrow, a really illegal-in-UK image is reported to the IWF, they
> will block it for real. And they will block again editing.


"They" didn't block editing. "You" did.

On Fri, Dec 12, 2008 at 6:44 AM, Dan Collins <en.wp.st47@gmail.com> wrote:
>
> Do you have a suggestion? Not everyone uses XFF, certainly not ISPs
> with dynamic IPs, how would you suggest we block anonymous users?


If you want to block anonymous users, block anonymous users. If you want to
allow anonymous users to edit, then understand that you can't block anyone.

If someone is anonymous, then you don't know who they are, so you don't know
whether or not they're blocked.
_______________________________________________
foundation-l mailing list
foundation-l@lists.wikimedia.org
Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/foundation-l
Re: and what if... [ In reply to ]
2008/12/12 Anthony <wikimail@inbox.org>:
> On Fri, Dec 12, 2008 at 5:52 AM, Florence Devouard <Anthere9@yahoo.com>wrote:

>> If tomorrow, a really illegal-in-UK image is reported to the IWF, they
>> will block it for real. And they will block again editing.

> "They" didn't block editing. "You" did.


Actually, Virgin Media, with whom (as NTL) we had carefully talked
into giving usable XFF headers, decided to switch off said XFF headers
when running requests through the censoring proxy. That was the
symptom that clued us in that something was up.


- d.

_______________________________________________
foundation-l mailing list
foundation-l@lists.wikimedia.org
Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/foundation-l
Re: and what if... [ In reply to ]
On Fri, Dec 12, 2008 at 6:33 AM, Tomasz Ganicz <polimerek@gmail.com> wrote:

> 2008/12/12 Florence Devouard <Anthere9@yahoo.com>:
>
> > We all perfectly know that if this particular image was borderline,
> > there are images or texts that are illegal in certain countries. I am
> > not even speaking of China here, but good old westernish countries.
> > In some countries, it may be sexually-oriented picts. In others, it may
> > be violence. In others yet, some texts we host are forbidden. I am not
> > going to cite any examples publicly ;-)
>
> Well in fact the picture blocked by IWF was not illegal.


That's quite unclear. I'd say the image *is* illegal, but that it's far too
widespread for the law to be enforced.


> I think we
> should complain that such the organisation like IWF should follow the
> freedom of speach rules of their countries, which means that they
> cannot legally block the content which has not been found illegal.


If that was the rule they might as well not exist. The vast majority of
child pornography hasn't been subject to a legal ruling.

In fact, under the scenario you describe the sexual abuse of minors would
only *increase*, because new child porn would be created whenever old child
porn was "found illegal".
_______________________________________________
foundation-l mailing list
foundation-l@lists.wikimedia.org
Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/foundation-l

1 2 3 4  View All