• Monday, May 28, 2012

Previous

Next

Using Tor and VPN to get around Internet Censorship

March 17, 2011, 11:00 am

Wall of fire

[This post is by Konrad Lawson, a writer so new his account privileges aren't fully hooked up yet! See Konrad's previous ProfHacker posts, or follow him on Twitter.]

Internet censorship can stand in the way of, not only political activism, but in many countries the accomplishment of many basic daily tasks in our personal and professional lives. Though we still have far to go in developing easy and effective ways of getting around a complete shutdown of the Internet such as the ones we saw most recently in Egypt and Libya, there is a growingly sophisticated toolbox for getting around the restrictions put in place by authoritarian governments of countries such as China as well as some democracies such as South Korea, to use two examples from my own experience.

China’s famous “Great Firewall” infamously blocks a whole range of websites, sometimes for only short periods of time and sometimes only certain pages. The result of visiting a banned location varies greatly depending on what internet provider you are using there, from a 404 “not found” message, an unexplained connection failure, a stern government warning about accessing a “dangerous” part of the internet, or a simple announcement that your location had been logged by the authorities. I found the most effective punishment of all was used by my local Internet provider in Shandong which, for example, whenever I accidentally opened any website from Taiwan would, without any warning, completely disable my Internet connection for exactly three minutes. I was left to quietly reflect upon my mistake. However, even living in tech savvy Seoul I was often surprised at the fact that North Korean websites and sometimes those merely hosting video clips from North Korea were blocked.

Just as learning how to protect our own data from prying eyes by methods such as email encryption will become a basic component of full Net literacy, so too I believe it is increasingly important for us to learn some of the ways to circumvent Internet censorship in a world where our access to information is central to everything we do. Here are two ways I found effective for getting around the many friends of Jingjing and Chacha around the world:

Tor

When I first started using the Internet there in 1999, the most common method among my friends in China for getting unfettered access to the web was by the use of proxy servers, though university students also often made extensive use of huge university BBS (bulletin board systems) networks that for some time escaped close scrutiny from the government. The biggest problem with proxy servers, which redirected traffic from blocked sources through a third-party server was that once these servers had themselves been blocked, it was necessary to find another in a constant game of cat and mouse. I have memories of going through long lists of IP addresses given to me in search for a server that was still accessible.

Enter Tor. Tor is a network designed to protect privacy and security by making use of encrypted traffic tunneled through a collection of relays. In practical terms, Tor makes it possible for someone subject to Internet censorship to conceal the ultimate destination of any request for data and any data sent. It is far superior to the earlier method of swapping around lists of proxy servers since the Tor software handles for you the task of connecting to a growing and rapidly changing list of relays that carry traffic in not one but several jumps to its ultimate destination.

To use Tor as a client, download and install the software as well as a browser plug-in such as the Torbutton for Firefox and activate it when you wish to connect through the Tor network. Depending on the number of relays available and your connection, traffic can be significantly slower than what you’re used to so turn it off when you don’t need it.

If you are fortunate to be in a country without significant Internet censorship, consider installing Tor and then adding your own computer as a relay for traffic through its network. The more people run relays, the stronger the network becomes.

VPN

Back in November Brian gave us a wonderful introduction to the use of Virtual Private Servers (VPN). In that posting we learned how it can be used to protect yourself and your data from snooping. For exactly the same reasons, VPN is also a way of getting around internet censorship in many cases. Because universities and large corporations often provide access to VPN servers for their employees and students, if a government decides to block all access to a given VPN they risk incurring the anger of those institutions who may be involved in conducting profitable business or valuable research exchanges with the country. Check with your university and see if they provide VPN access. If they do, connecting to it will route all of your traffic through the University. This is, by the way, also a convenient way for fooling a website into thinking you are connecting from the United States when in fact you are abroad, thus delivering you content that may be restricted to domestic consumption for advertising or licensing reasons.

These are the two methods that I found most useful but I would love to hear what experiences others have had with circumvention techniques. What has worked best for you?

Photo by Flickr user frostnova / Creative Commons licensed

This entry was posted in Profession, Software and tagged , , . Bookmark the permalink.

  • Print
  • Comment
  • homiein

    To complete this useful post, a list of VPN Providers (110+) on this page: http://www.start-vpn.com/category/vpn-providers/?type=1&orderby=meta_value_number&key=hits&order=desc/

  • mbelvadi

    In the context of circumventing oppression, these sound wonderful. But aren’t these tools also used by child porn rings? I would be very happy to join Tor as a relay if I thought it was only going to be used by political freedom-seekers, but I won’t do it because I fear the police knocking down my door with a warrant to seize my computer as a link in a child porn case (or any other illegal activity).

  • http://hiresteve.com/ Steve Foerster

    The only way to stop the use of the Internet for kiddie porn is to shut it down altogether. We cannot allow the possibility of misuse to stop us from providing tools to help those who seek greater freedom.

  • kmlawson

    Wonderful. Thanks for that link. I knew there were a lot of commercial ones out there but didn’t really know any of them well. This will get people started. I have a feeling thought hat these commercial VPNs may be blocked more often than educational/corporate-in-house ones.

  • kmlawson

    I debated delving into the important issue that mbelvadi brought up in the posting. I’m generally sympathetic to the response stevefoerster gave. However, I think mbelvadi could respond as follows:

    “It is one thing for me to support/tolerate the existence of an internet which, among other things, is home to all sorts of reprehensible activities including child pornography and hate speech of various kinds. It is another for me to volunteer my computer’s resources to act as a conduit through which it is possible to funnel such material. I might tolerate the right of people to own firearms, but I don’t need to sell them in my store.”

    This critique goes a long way, but I’m not entirely persuaded (by the words I put in our commenter’s mouth). Instead it might be better to imagine a relay as a large warehouse. Through the warehouse passes 100 hundred unmarked boxes. Perhaps 1-5 of these are from victims of an oppressive state trying to send or receive news from outside. Perhaps 1 or 2 of them are from whistle blowers sending out information from a secretive organization or government. Perhaps between a quarter to a half of the remaining boxes are from those in an oppressive state who merely sending and receiving completely unpolitical material from usually blocked sources (YouTube, etc.). Almost all of the rest is probably run of the mill pornography being send back and forth by someone hiding their traffic from an employer or household. And it is certainly possible that 1 or 2 of those boxes contain child pornography or violent anonymous threats.

    I really don’t know what the real statistics are on this, but at least for me, the possibility of enabling those 1-5 trying to reach the outside world, the 1-2 whistle blowers, and the huge number of others that are simply trying to enjoy the interactive world of the internet on facebook or youtube, outweighs the harm to society caused by the 1-2 boxes of harmful material that passes through.

  • mbelvadi

    I appreciate both your argument and counterargument :-) but I think you missed the main point of my original comment. Maybe I should be first and foremost concerned about the moral aspects of my computer being used as a conduit for child porn, but I admit that my first concern is the legal aspect, not moral: I don’t trust the American legal system not to toss me in jail for the rest of my life if any child porn were to cross my network, even if I knew nothing about it. The system has, despite the theory we were raised with, become “guilty until proven innocent” when it comes to certain crimes, and I have no way to prove a negative (that I didn’t know something was there). That sounds harsh and selfish, but Americans need to face the unintended consequences of their obsession with extreme “law and order” and “zero tolerance” – normal, law-abiding people will find themselves avoiding doing even morally good things (like helping foreign dissidents) to avoid the remotest risk of being accused of anything illegal by their own “freedom-loving” government.

    Pass an electronic “good Samaritan” law that would protect people offering such relays from prosecution for misuse by criminals, and I’ll gladly participate. But I won’t hold my breath waiting to see that happen.

  • http://hiresteve.com/ Steve Foerster

    To me, this is all the more reason to run a relay.

  • nhancock

    At this time I am much more concerned about censorship by ISPs and major telecom companies than I am about censorship by the government. There is clear evidence of them having engaged in politically motivated censorship on the sly (see Nunziato’s _Virtual Freedom_ for many examples). And now Deep Packet Inspection technology makes it possible for these companies to “peek inside all …packets and assemble them into a legible record of your e-mails, web browsing, VoIP calls, and passwords” (See Nate Anderson’s “Deep Packet Inspection Meets ‘Net Neutrality, CALEA” at http://arstechnica.com/hardware/news/2007/07/Deep-packet-inspection-meets-net-neutrality.ars/), and makes it possible for telecomms to implement a tiered Internet access system (blocking VPN for users and companies who don’t pay extra for it, for example).

    So, my question is – How can users get around this sort of censorship by private corporations?

  • jracca

    What makes the university any different than every other place a licensee can carry a handgun?

    It makes more sense to argue about whether people should be carrying handguns than to argue a university is any different. A person with a concealed handgun permit can already carry a handgun to a mall, movie theatre, and just about everywhere else. Why do you suppose that same person is all of a sudden more dangerous because they are headed to class rather than the mall? We are talking about people who already have a concealed weapons permit. Does the university environment cause these people to become mentally unstable? Are they more of a threat in a classroom than a crowded restuarant?

    I think it makes no sense to have some artificial line that says someone can legally carry a handgun everywhere else, but not in this building because it is part of a university.

    I suspect that most people who are against allowing handguns on campus are against allowing others to carry a handgun in general. That is what the argument should be. Trying the frame the debate as one about guns on campus makes little sense to me. Perhaps having lived in the south and growing up with guns everywhere I am lacking some critical life experience that allows me to understand what makes carrying a handgun on a campus different than everywhere else the people with permits can carry a handgun.

  • 11274501

    In response to all those asking why guns on campus are any different from guns carried anywhere else:
    I have the right to a safe and secure workplace. I have a right to freedom from harrassment on campus and having an armed faculty/staff/ student body in essence creates a hostile work environment for me. While carrying a gun to class may not be illegal (although, oddly enough, sexual harrassment is) it does imply a threat- intended or not. I have quite a few transplanted inner city students who WOULD carry just to impress me with the fact that they were carrying and all of the implicit threats that that would imply. I do not want to even imagine some of my transplanted Philadelphia boys armed in class. I have enough trouble with their lack of basic respect and belief that physical attitudes and violence will solve all of their problems as it is. They have been socialized in a different gun culture and when they hit the laid back west they stick out like a sore thumb. Gun culture here is “old west good guys’ not “inner city bad guys” but that is not the belief set that they would have about any weapon that they carried ( if that makes any sense. One’s attitude about a weapon is VERY important. is it protection or is it threat?)

  • AlanCollinge

    Good piece.  I agree with everything except:

    You state that no one understands the consequences of student loan debt more clearly or palpably than the students themselves, but this is sadly very wrong.  For example, most students are unaware prior to their first borrowing that student loans have been stripped of the most fundamental consumer protections such as bankruptcy, statutes of limitations, and state usury laws.  The also are not told that TILA, and FDCP are not applicable, either.  And you, yourself, by claiming that “the default rate is 8.2%”  illustrate the most important area where students are mislead: 

    The default rate isn’t 8.2%, it’s far higher than that.  What you quote is the “cohort” default rate, a misleading metric used again and again by the schools, lenders, and even the Department of Education.  The actual default rate is certainly over 30%, and could be much higher.

    I point this out because it is important, and will hopefully motivate the students to get serious in making constructive demands of their universities.  Recent demands by students for the universities to not raise tuition have been ineffective.  Similar demands to state and other governments to give their schools more money are equally non-starters.

    Demanding the return of the fundamental consumer protections that should never have been taken away, however, cannot be disregarded so easily.  Come to Studentloanjustice.org to understand why this actually helps, bigtime.

  • shakilkhan

    It is obvious that Sally Mae or the organizations who provide the student loan are NOT interested in the welfare of the student and couldn’t careless what happens to the student after he/she graduates or even to the parents who have to co-sign.

    Unfortunately even the colleges do not care because they get paid up-front and larger enrolment means more money,. bigger campus and big name. Unfortunately we measure them by the number of student who are enrolled therein.

    Who then should care?

    Dominican International Institute of Warren, Michigan (www.dominicaninternationalinstitute.org) a newly established 2-year college has the answers. It has introduced no-interest, weekly tuition program. It encourages students to avoid student-loan and is willing to help those who can’t afford even the small weekly payment.

    Or we can export education – like we have done with other manufacturing industries, service industries and health care. Students can earn degrees overseas for less than a quarter of the cost of doing so here in the United States, and they will have fun living & studying overseas.

    Dominican International Institute has partnered with an accredited university in the Dominican Republic where one can become a medical doctor for $40,000 and/or earn other degrees for much less. 

    May be their revolutionary and novel plans will catch-up and others will follow. May be your readers need to pressure colleges & universities to follow the Dominican International Institute’s ideas.

  • fdonoghue

    Thanks.  I think you’re right.  A more accurate way for me to have put it would have been to say that many students understand the consequences of student loan debt, but, as the default rate suggests, a significant portion of the student population does not.  I think the problem is even worse at for-proffit colleges, where recruiters, dealing with students who really don’t know the ropes, have been caught outright lying to prospective students about loans–telling them, for example, that one can default on them without penalty.  Thanks for your thoughts.

  • fdonoghue

    Thanks.  I think you’re right.  A more accurate way for me to have put it would have been to say that many students understand the consequences of student loan debt, but, as the default rate suggests, a significant portion of the student population does not.  I think the problem is even worse at for-proffit colleges, where recruiters, dealing with students who really don’t know the ropes, have been caught outright lying to prospective students about loans–telling them, for example, that one can default on them without penalty.  Thanks for your thoughts.

  • epmeehan

    To say that college is financed primarily through student debt is not correct.  Direct state and local tax payments to subsidize operating losses at public universities run about $75 billion a year.

    I agree student debt is a real issue, but having taxpayers subsidize public universities that on average expend about $46,000 to get a student an associates degree (per the Delta Project) is not the answer.

    The cost of education has gone unchecked, the outcomes are not good and we as a country cannot just make it another 100% entitlement.

  • tiyelaw

    What a a brave and crystal premise, in summary:  If a college education is necessary, it ought to be free, like K-12.  I agree wholeheartedly, not because free is good, but because the current rate of commodity education which costs what a house used to in the 1970s is not sustainable.  Indenturing an entire generation of students from low, middle and upper middle class families is not a progressive American model; it reeks more of the sharecropping, plantation and indentured servitude practices of centuries ago married to Wall Street type greed.  It is a an extremely tough sell to keep our 19-year down on the community college honors track farm for two years where his Dad and I can afford cash tuition when the lights of urban private colleges or Big State U beckon. The teen is so bored with suburban life, living at home and junior college as ‘continuation of high school,’ he is willing to court $25,000 in annual loan debt to cover the ‘same’ general education courses offered locally at one-fifth the cost.   We are holding him down for now, with all kinds of low voice arguments and bribes, while he mulls whether he wants to pursue science, technology, art or business.  While we hold him down, it would be real helpful if policymakers, business, and academia would explain to these young people, what is the nation’s vision for applying STEM to the country’s 21st century development.  Right now, all I hear are education access, affordable health care, infrastructure, climate change refuseniks.  A nation which refuses to invest in upgrading its own bridges, roads, mass transit or energy grid cannot be serious about STEM or any other education. Where is the external vision for the people:  You’ve snatched away the parents’ jobs and home equity, evaporating billions in middle class wealth that could have contributed to tuition payments.  Now the goal is to enslave the children with student loan debt.  What kind of place is this?

  • http://www.facebook.com/caribbeanall Patrick Anderson

    Student loan crisis is a real situation. I’m seeing the results myself right now, and know a lot of people who are almost to the point of regretting ever going to college.  Working on a blog about a guy, Anthony Stephens, who faked his death to start over with a clean slate. Check it out:  http://whoisanthonystephens.wordpress.com/

  • http://twitter.com/JackDuglus Jack D

    being anonymous using tools like VPN from ISPs and VPN providers themselves isn’t possible, though to a certain extent one can achieve its internet freedom from being tracked down and bypass censorship from Govts and other authorities.., VPNs such as hidemyass vyprvpnor  hideip vpn are some services which offer a lot for being anonymous and to get around this sort of censorship by private corporations too… ..: -)

  • The Chronicle of Higher Education
  • 1255 Twenty-Third St, N.W.
  • Washington, D.C. 20037