Risk
7/18/2011
04:41 PM
Connect Directly
LinkedIn
Twitter
Google+
RSS
E-Mail
50%
50%

Telex Promises Path Around State-Sponsored Net Censorship

Tech researchers have developed a way that ISPs can help Internet users avoid censorship roadblocks.

Strategic Security Survey: Global Threat, LocalPain
Strategic Security Survey: Global Threat, Local Pain
(click image for larger view and for full slideshow)
A team of computer researchers from the University of Waterloo in Canada and the University of Michigan has developed an anticensorship system by which ISPs can provide ways around network censorship.

J. Alex Halderman, assistant professor of computer science and engineering at the University of Michigan, in a blog post claims that the technology "has the potential to shift the balance of power in the censorship arms race."

The project, called Telex, exists right now only as a single server in a laboratory. The researchers--a group that also includes Ian Goldberg, associate professor of computer science at the University of Waterloo, and University of Michigan Ph.D. students Eric Wustrow and Scott Wolchok--have not offered specific deployment goals. They say that they hope the project inspires further discussion and research of censorship circumvention.

"[W]e have been using Telex for our daily Web browsing for the past four months, and we're pleased with the performance and stability," wrote Halderman. "We've even tested it using a client in Beijing and streamed HD YouTube videos, in spite of YouTube being censored there."

One way around traditional online censorship is the use of a proxy server, a server that acts as an intermediary to connect network traffic when the more direct path is blocked. The problem with proxy servers is that they too can be blocked, requiring new proxy servers to be established. This cat-and-mouse game is quite common in countries that censor the net.

Telex avoids this problem by creating what the researchers describe as a proxy without an IP address. After installing downloadable client software, a user wishing to access a blocked website can connect to a non-blocked site outside the censor's network. To the censor, this would appear to be a permitted connection; but the user would be redirected via Telex software installed at the ISP level and connected to the blocked site.

The researchers describe Telex as a way to counter state-level censorship. They note that ISPs would likely require some incentives from governments to deploy Telex.

The U.S. government might be ready to contribute. Secretary of State Hillary Clinton has championed efforts to develop tools to fight Internet repression. In an address in February, she noted that grants worth $20 million have been awarded to further Internet openness over the past three years and that this year the grant total will reach $25 million. Internet freedom, she said, "is one of the grand challenges of our time."

Telex sounds promising but has a lot to prove. Using insecure anticensorship software in contravention of local laws can lead to imprisonment, torture, or death in some countries. This is why there was so much controversy last year when questions about the security of an anticensorship software project known as Haystack led to the effort's collapse.

InformationWeek Analytics is conducting a survey on mobile device management and security. Respond to the survey and be eligible to win an iPod Touch. Take the survey now. Survey ends July 22.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Flash Poll
Current Issue
Cartoon
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2013-6117
Published: 2014-07-11
Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user credentials, change user passwords, clear log files, and perform other actions via a request to TCP port 37777.

CVE-2014-0174
Published: 2014-07-11
Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.

CVE-2014-3485
Published: 2014-07-11
The REST API in the ovirt-engine in oVirt, as used in Red Hat Enterprise Virtualization (rhevm) 3.4, allows remote authenticated users to read arbitrary files and have other unspecified impact via unknown vectors, related to an XML External Entity (XXE) issue.

CVE-2014-3499
Published: 2014-07-11
Docker 1.0.0 uses world-readable and world-writable permissions on the management socket, which allows local users to gain privileges via unspecified vectors.

CVE-2014-3503
Published: 2014-07-11
Apache Syncope 1.1.x before 1.1.8 uses weak random values to generate passwords, which makes it easier for remote attackers to guess the password via a brute force attack.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Marilyn Cohodas and her guests look at the evolving nature of the relationship between CIO and CSO.