An information security expert claims the government has the wrong approach to Internet filtering, and should focus on protecting Australians from technical risks rather than content.
IBRS information security advisor, James Turner, has setup the Web site nothingbutnet.net.au to lobby Australian ISPs to provide a safer Internet feed cleansed of known malicious content, like spam and viruses.
Turner claims the government, which has invited telcos to test the filtering technology over Christmas, should follow the lead of security vendors who are largely giving up on blacklisting viruses.
“The problem with using blacklists is that you always have to go back to your supposedly omniscient database and compare every instance of a new site to the entire database of all that you know to be bad,” he said.
“This is just bad engineering because there are two massive problems with this architecture: Firstly, you can never keep the database current; and secondly it will only ever grow because that is how a blacklist works.
“In the IT security world even the software vendors are now realising that we cannot just keep on building a blacklist of all the viruses, because the list cannot ever shrink, it will only ever grow, and it will always be out of date,” he said.
Anti-virus products have for years been known to incorrectly block legitimate programs because the anti-virus tool thought it was behaving maliciously.
“But if we extrapolate to the idea of content, where so much is subjective, then what hope do we have of ever having a blacklist which works?” he asked.
With ICANN’s proposal to add thousands of new top level domains (TLDs), NetChoice executive director, Steve Delbianco, said it would create a monster headache for the Australian Communications and Media Authority (ACMA), charged with maintaining the “illegal” blacklist and so-called “inappropriate” greylists of content to be blocked.
“With thousands of TLDs, it only makes the maintenance of that list that much more difficult to keep up with. You can imagine the department in Canberra scouring the Internet everyday for pages that have just come up which fit into the greylists or even the blacklist,” he said.
Technically, Delbianco said a single blacklist of illegal content should and could be implemented without impacting performance. His concern is the proposal for additional "grey" lists of “inappropriate” content that could be unique to each and every household in Australia.
“The ISP has to first verify which household it’s coming from, then go and check their database to see which lists this house has selected, then check the page against those lists. This is for every page retrieval, every link, for every household,” he explained. “That is going to impact performance.”
Delbianco said this will create a technical nightmare, but the more frightening prospect is the litigation and controversy surrounding whether something belongs on the list or doesn’t.
As a parent of two young boys, he feared other parents would not take an active enough role in managing their children online and would use the lists as an easy replacement to vigilant monitoring of their children's activities.
“NetChoice works so hard to protect kids from bad content and bad people, and patently illegal content ought to be blocked,” he said.
“What concerns us is the slippery slope to multiple shades of optional greylists, each customised and with vested interests. I would say it’s a slippery slope, but it feels more like a cliff. You have categorised and stigmatised content, and made it trivial for a parent or an employer to check the box and block all of it.”
Turner said filtering technology should only be filtering for technical problems, like spam and viruses, and that using technology to block content is a mismanagement of government resources.
“The Electronic Frontiers Association have rightly pointed out that it’s simply impractical to review, classify and then block every site which contains illegal content. A much smarter way of going about things is to let people surf the Internet, but keep an eye on the known sites of concern and monitor who goes there and what they do,” he said.
“The best way to combat serious problems like child pornography is to get the Australian Federal Police (AFP) to infiltrate paedophile rings that share their content and run sting operations. Content filtering will be a waste of money because it’s trying to use technology to fix a people problem. This is why the AFP has its Online Child Sex Exploitation Team. If the government was truly interested in protecting our children it would boost the funding of this initiative by several orders of magnitude.”