Archive

Posts Tagged ‘uk’

Daily Mail, Daily Fail

December 14th, 2009 No comments

If you google for “daily mail rubbish”, you are guaranteed to find quite a lot of hits.

The Daily Mail is a peculiar UK tabloid; it either has a dirty hidden agenda, or the journalists they employ do not have any journalistic qualifications, or both.

In SPECIAL INVESTIGATION: Climate change emails row deepens as Russians admit they DID come from their Siberian server, the Daily Mail journalist David Rose messes up big time with the headline, and grossly misleads the audience. The word they (what came from their Siberian server?) in the headline, where does it refer to?

  1. the Russians?
  2. the climate change emails row?

One has to assume they probably refer to “climate change e-mails”. If it is the “climate change e-mails” that the Russians admit they came from their Siberian server, then this is something that was known from the first day the computer crime incident was made known. The files were first made publicly available on a server at a Russian University.

The fact that the first publicly known source of the stolen e-mails was a Russian University server does not necessarily mean that the perpetrator was either Russian or a student at the specific University.  What is known is that those people that committed the computer crime against the East Anglia University used that specific Russian University to disseminate the e-mails. Anything else is conjecture, and it is up to the Russians to provide more information (if they can obtain) as to who placed those e-mails at the university server.

In the side column “CRU ‘can’t be trusted’ says MP” we read about an MP (whose father founded the Climate Research Unit (CRU) at East Anglia University) and his comments on the e-mail computer crime incident. The Daily Mail journalist quotes the MP as saying the CRU “can’t be trusted”. There is no reference to the quote “can’t be trusted” in the side column. Reading the side column, we see that the MP does not say that the CRU “can’t be trusted”. Let’s read it,

The MP whose father founded the Climatic Research Unit at the University of East Anglia says it is important that trust in the unit’s work is restored.
Liberal Democrat frontbencher Norman Lamb is the son of Professor Hubert Lamb, who was the first director of the CRU in 1971.
Under his leadership, it gained an international reputation for authoritative and ground-breaking research.http://i.dailymail.co.uk/i/pix/2009/12/13/article-1235395-03D819AA0000044D-106_87x84.jpg
Last night, Norman Lamb, MP for North Norfolk, said: ‘My father was always very concerned that the highest possible standards were met.
‘The university has done the right thing in calling for an independent investigation.
‘It is of critical importance that trust is re-established. We want truth and accuracy, both in small detail and the bigger picture.’
Prof Lamb died in 1997, aged 84.

Apart from the headlines, the article content follows the same pattern of deception. We do not analyse in the blog post. For a better update on what exactly is happening, see Greenfyre’s Youtube videos on debunking the myths on climate change.

UK censors websites, blocks access

December 7th, 2008 No comments

The blocking access to websites due to their content is something common in developing countries. However, we now see examples in the UK.

Apparently, the Internet Watch Foundation maintains a list of over 1000 URLs with content that it deems is not suitable. They distribute this list to the British Internet Service providers, which (apparently independently) implement blocking techniques to the access of those web resources. For more, see this article or this AP article.

In some cases, the ISP would show an informative page that the web resources is blocked, while in other cases, the page shows misleading content. If you are in the UK, the page that is blocked is this (Wikipedia page on a 1976 Scorpions music album), a page of the Wikipedia online encyclopaedia.

In one example, with the VirginMedia ISP, the blocking facility returns a fake error page,

<!DOCTYPE HTML PUBLIC “-//IETF//DTD HTML 2.0//EN”>
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /wiki/Virgin_Killer was not found on this server.</p>
<p>Additionally, a 404 Not Found
error was encountered while trying to use an ErrorDocument to handle the request.</p>
</body></html>

VirginMedia uses what is called a transparent proxy for those IP addresses that host the questionable URLs. What this means is that when you visit any page that belongs to the affected webserver, all access information goes through a special server that has the ability to keep logs and also make changes in-place. In this specific case of blocking, we know that the transparent proxy server at least fakes the reply of the web server.

The blocking of access often has technical side-effects. The side-effects of the British blocking is that when you access any other page of the affected website, that webserver sees that the computer accessing appears to have the identity of the transparent proxy server. For VirginMedia, the transparent proxy server IP address is 62.30.249.131, so what Wikipedia sees is that the majority of UK visitors appear behind the specific single IP address.

Wikipedia sees vast majority of UK visitors to come from a selected few IP addresses.

Wikipedia sees vast majority of UK visitors to come from a selected few IP addresses.

It is possible to figure out which other websites are blocked. For example, we can search the Web for occurrences of the IP address 62.30.249.131.

After some investigation, we verified that the IP address 68.180.151.74 is also in the blocking list. When someone visits any web server that is hosted on that IP address, the web server registers that any user from Britain comes from a handful IP addresses.

If the web server offers Internet advertising, then the ad provider will register a huge increase of clicks from a single IP address which may trigger by accident the fraud protection. It is possible to come up with a big range of such scenarions. However, for the IP address 68.180.151.74, is it a big issue? Well, if we read carefully at 68.180.151.74, we notice that the address belongs to Yahoo, and it hosts over 320,000 web servers! Obviously, I have not been able to figure out which URL from 68.180.151.74 is the one that was blocked.

One can find more technical information about the blocked IP addresses. Using the tracert (traceroute) command, we notice difference in the route that our packets take to reach the affected destinations.

Here is a normal packet route when accessing www.google.com,

  Host
  ...........
 5. so-1-1-0.0.mcr-cor-001.bddsl.net
 6. popl-t3core-1a-ge-410-0.network.virginmedia.net
 7. man-bb-a-as0-0.network.virginmedia.net
    pop-bb-a-as2-0.network.virginmedia.net
 8. pop-bb-b-ae0-0.network.virginmedia.net
 9. tele-ic-2-as0-0.network.virginmedia.net
10. 212.250.14.138
11. 209.85.252.76
12. 216.239.43.123
13. 72.14.233.77
    72.14.233.79
14. 209.85.249.129
    209.85.249.133
    216.239.43.30
    216.239.43.34
15. nf-in-f99.google.com

On stage 11, the route changes to a Google server. Up to stage 10, the route goes through VirginMedia servers.

How does this look for Wikipedia?

 Host
 ...........................................................
 5. so-1-1-0.0.mcr-cor-001.bddsl.net
 6. popl-t3core-1a-ge-410-0.network.virginmedia.net
 7. 213.105.175.1
    pop-bb-a-as2-0.network.virginmedia.net
 8. man-bb-b-ae0-0.network.virginmedia.net
    win-bb-b-so-010-0.network.virginmedia.net
 9. bir-bb-a-so-010-0.network.virginmedia.net
    bir-bb-a-so-100-0.network.virginmedia.net
10. florence-pos20.network.virginmedia.net            
11. cancun-pos50.network.virginmedia.net              
12. puebla-pos90.network.virginmedia.net             
13. rabat-pos90.network.virginmedia.net               
14. osr02know-tenge73.network.virginmedia.net         
15. wb7301a.network.virginmedia.net                   
16. osr-hsd-gw3-ge147.network.virginmedia.net        
17. osr-hsd-gw4-tenge82.network.virginmedia.net       
18. XSR03.Asd002A.surf.net
19. AE1.500.JNR01.Asd001A.surf.net
20. KNCSW001-router.Customer.surf.net
21. 4ge-1-16.csw1-knams.wikimedia.org
22. rr.knams.wikimedia.org

The other blocked IP address shows

 Host                                               
.......
 5. so-1-1-0.0.mcr-cor-001.bddsl.net                
 6. popl-t3core-1a-ge-410-0.network.virginmedia.net 
 7. pop-bb-a-as2-0.network.virginmedia.net          
    man-bb-a-as0-0.network.virginmedia.net
 8. win-bb-b-so-010-0.network.virginmedia.net       
    man-bb-b-ae0-0.network.virginmedia.net
 9. bir-bb-a-so-100-0.network.virginmedia.net       
    bir-bb-a-so-010-0.network.virginmedia.net
10. florence-pos20.network.virginmedia.net          
11. cancun-pos50.network.virginmedia.net            
12. puebla-pos90.network.virginmedia.net            
13. rabat-pos90.network.virginmedia.net             
14. osr02know-tenge73.network.virginmedia.net       
15. wb7301a.network.virginmedia.net                 
16. osr-hsd-gw3-ge147.network.virginmedia.net       
17. gsr-hsd-gw1-ge10.network.virginmedia.net        
18. 213.228.222.10                                  
19. ae1-p141.msr1.sp1.yahoo.com                     
20. ge-1-43.bas-b1.sp1.yahoo.com                    
21. p2p.geo.vip.sp1.yahoo.com

In the case of both the blocked IP addresses, we see a set of additional routers.

When trying any other IP address, we do not see those highlighted routers appearing.

The problem with blocking the access to websites is that such measures, apart from causing a series of technical problems, they do not have the desired positive effect. The botched attempt by VirginMedia to show a misleading error page for those blocked addresses is an example of knee-jerk reaction.

Any attempt towards blocking access to webpages or websites should get feedback first from the community. The current incident against Wikipedia puts the IWF in a bad light, and shows limited confidence that they can fulfil their goals.

Update #1: Wikipedia page censored in the UK for ‘child pornography’ (The Guardian)

Update #2: Great Firewall of Britain (The Nock Blog)

Update #3: Interview on BBC Radio with representatives from the IWF and the Open Rights Group.

Update #4: Amazon US under threat as internet watchdog reconsiders Scorpions censorship (The Guardian)

Update #5: Cory Doctorow: How to make child-porn blocks safe for the internet