Breaking free: online censorship explored

Bypass online censorship
Using the site IP address can sometimes bypass DNS-style blocks

In a speech at Stanford University in February 2008 Bill Gates said he wasn't worried about online censorship: "I don't see any risk in the world at large that someone will restrict free content flow on the internet," he said. He was wrong.

While the world debates the need for legislation to stop the downloading of illicit copies of commercial digital products, governments are increasingly using censorship as a reason to "protect" us from what they consider undesirable. In some countries, that protection extends to the suppression of basic human rights and news about atrocities.

Even in the UK, the chances of accidentally stumbling upon paedophilic images online are very remote. They're so illegal that they're kept hidden away behind paywalls. Politicians, however, still insist there's a real chance of bumping into such material, and use it as a reason to censor the internet.

We're sensible, law-abiding citizens; given that we will not seek out illicit material, we deserve an uncensored internet. So, how do people go about bypassing online state censorship?

An imprecise art

The main problem with online censorship is that it's a very imprecise art and is usually done on the back of moral panics, or even on the whim of unaccountable individuals. In some cases, censorship is done to look good in front of voters rather than to solve real problems.

The issues are also technological. Unless you know where all the holes are in your censorship scheme, and have the resources to do so, you can never hope to plug them all. Sites may be blocked by the state for a number of reasons. Sometimes, however, those reasons seem arbitrary, or have more to do with the moral compasses of the people making the censorship decisions, rather than any real threat to society.

In some countries, internet censorship is ordered by special state agencies and carried out by individual ISPs. In others, the police simply decide what is to be blocked. In China, for example, the list of banned websites is circulated to ISPs, who are expected to implement it without question. This list changes almost weekly, as the political climate changes.

China also employs a large army of internet enforcement officers whose job it is to monitor forums, blogs and websites and report on what they find. Without question, if the state doesn't like it, no one in China will see it.

Search for the Tiananmen Square massacre of 1989 in China, for example, and you'll find only tourist information, or maybe a warning not to search for such things. In Finland, unaccountable members of the police decide what is to be banned. In the fight against "child pornography" the Finns have banned a disproportionate number of websites, including some in favour of same-sex marriage and even those critical of the bans.

In Saudi Arabia, censorship even extends to online clothing catalogues showing swimsuits. Such actions tell us more about the attitudes and proclivities of the people doing the censoring than the people they're apparently trying to protect.

Ad hoc circumvention

Bit.ly

Some internet censorship systems can be bypassed in an ad hoc fashion. This can be done when such systems simply check the URL you want to access against a banned list. When this is the case, if the URL can be made to seem in any way different, the system can be defeated.

The first thing to try is shortening the URL. You can easily shorten a URL using a service such as Bit.ly. If the filtering product keeping you away from a domain knows this trick, it expands the domain name, checks it against the banned list and blocks it accordingly.

It's time to up the ante by using the raw IP address in the browser's URL bar. The ping command (from the command line: 'ping ') will request and display the IP address of a domain from the local DNS server. However, some filtering systems weed ping traffic out for this reason. If we can't even use the ping command, how do we get at it?

The solution is to use one of the many free online domain IP address lookup services. Unless all these services are also blocked, this should work, thereby also hinting at the problems of trying to censor something as complex and interconnected as the internet.

One lookup service is the aptly named IP-Lookup. Simply enter the name of the domain you want to reach without the 'http://' preamble, and press 'enter'. The IP address appears, but the site also attempts to contact the domain itself and produces a thumbnail of the web page to show that the IP address is good. Copy the IP address into your web browser and press 'enter' to attempt to bypass censorship.

But what if the IP address of the target domains is also blocked? This is where we need to think like hackers and become a little indirect.

Indirect bypassing

Google Page cache

When you use Google Search, many of the results are based on cached versions of the web pages, rather than the live pages themselves. This is useful for getting around web censorship measures, because along with the title of the pages in most Google Search result lines there is a 'cached' link. Click this and you read a version of the page stored and accessed from Google's cache server farm.

However, as new features are added and old ones tweaked, the user interface to Google changes frequently. In some browsers the cached links are not available due to cookie issues.

There is a way around this, however. Search for the website you want, then copy the URL from the search results back into the search input box. Add 'cache:' at the start and press 'Enter' to read the Google cache version of the page.

This technique is great for individual pages, but if you click on any content in the cached version, Google will attempt to load the real thing. You have to load each page by hand.

If you want more freedom to surf, you'll need to use a public online proxy. A proxy is like a fulcrum on a lever. You move one end of the lever so that the other end points to wherever you want it, and all the action pivots around the fulcrum.

Similarly, a proxy server acts as a focal point, relaying your requests for web pages to the sites you want to surf and collecting the results to pass back to your browser. Any web censorship software in place only sees your web connection to the proxy server, not to the sites you request.

Plenty of free public proxy servers exist that will act as such a fulcrum to bypass censorship. A searchable list is maintained here. This list refreshes itself in real time and lists the country, IP address and relevant port, and the speed of proxy servers. If you sort the list by response time and click 'Update Results' you can find a good fast server with plenty of throughput. Note down the IP address and port number.

Proxy

Configuring your browser to channel your surfing activity through a public proxy is easy. In Internet Explorer 9, click 'Tools | Internet Options'. In the window that pops up, click the 'Connections' tab and click the 'LAN Settings' button at the bottom of the window. A sub-window appears.

Click the 'Use a proxy server for your LAN'. This enables the input boxes for the IP address and port details you noted down earlier. Enter these, tick the 'Bypass proxy for local addresses' box, then click 'OK'. Click 'OK' on the mother window and try surfi ng to a site.

In Firefox 12, click the orange Firefox button at the top left of the browser window and click 'Options'. In the resultant window, click the 'Advanced' tab and click the 'Network' sub-tab. Finally, click 'Settings'. A sub-window appears. Select 'Manual proxy confi guration' and the input boxes become enabled. Enter the IP address and port of the proxy server.

In the box marked 'No proxy for' enter the network number of your local network in the form '192.168.1.0/24'. That fourth number is always zero, but substitute the local subnet for the first three numbers if they're different. Click 'OK' to finish and also click 'OK' on the parent window.

The response from any websites you now surf to will seem to be slower and the connections can be flaky. But using a proxy is the go to method of bypassing censorship for millions of people living under regimes who control information.

Getting esoteric

feedburner

Activists have developed esoteric uses for common web services in the search for information about the world. One such service is the translation services offered by Google, Babel Fish (babelfish. yahoo.com).

The idea is to translate a target web page from English into another language and back again. As this is done, the translation engine fetches the page itself; you never have to surf to it directly. The quality of statistical translation is now so good that in many circumstances the nuances of language survive this process.

Be prepared for some hilarious mistranslations, however. If you just want information rather than direct access to web pages, RSS may be the solution. Not all sites carry an RSS feed, but if the filtering system blocking access only deals with web traffic (HTTP and possibly HTTPS) then installing an RSS reader might be the solution.

One such RSS reader is FeedDemon. You can download and install it by accepting the default settings. When it runs the first time, FeedDemon will set up some default feeds and begin populating them. If you see the number of feeds to be read increasing in the left hand pane, then RSS traffic is not being blocked and you can happily read away.

Another way of dodging censorship is provided by Web2Mail. If a URL is banned, send an email to www@web2mail with the URL of the web page you want to access. The service should email you back the web page so that you can read it in your email client.

So, there are ways around even the most repressive regime's online censorship efforts. The problem for governments is that the web developed organically, without any central plan. This makes it incredibly difficult to censor without the world agreeing to it. So information will always get out and how long that continues is up to us.