{"id":1054,"date":"2009-06-14T12:07:48","date_gmt":"2009-06-14T20:07:48","guid":{"rendered":"\/?p=1054"},"modified":"2009-06-14T12:07:48","modified_gmt":"2009-06-14T20:07:48","slug":"green-dam-goes-in-all-the-wrong-directions","status":"publish","type":"post","link":"https:\/\/www.identityblog.com\/?p=1054","title":{"rendered":"Green Dam goes in all the wrong directions"},"content":{"rendered":"

The Chinese Government's Green Dam sets an important precedent:\u00a0\u00a0government\u00a0trying to achieve its purposes by taking control over\u00a0the technology\u00a0installed on\u00a0peoples’ personal computers.\u00a0\u00a0Here's how\u00a0the Chinese Government's explained\u00a0its initiative<\/a>:<\/p>\n

‘In order to create a green, healthy, and harmonious internet environment, to avoid exposing youth to the harmful effects of bad information, The Ministry of Information Industry, The Central Spiritual Civilization Office, and The Commerce Ministry, in accordance with the requirements of \u201cThe Government Purchasing Law,\u201d are using central funds to purchase rights to \u201cGreen Dam Flower Season Escort\u201d(Henceforth \u201cGreen Dam\u201d) \u2026 for one year along with associated services, which will be freely provided to the public.<\/p>\n

‘The software is for general use and testing. The software can effectively filter improper language and images and is prepared for use by computer factories.<\/p>\n

‘In order to improve the government\u2019s ability to deal with Web content of low moral character, and preserve the healthy development of children, the regulation and demands pertaining to the software are as follows:\u00a0<\/p>\n

    \n
  1. Computers produced and sold in China must have the latest version of \u201cGreen Dam\u201d pre-installed, imported computers should have the latest version of the software installed prior to sale.<\/li>\n
  2. The software should be installed on computer hard drives and available discs for subsequent restoration<\/li>\n
  3. The providers of \u201cGreen Dam\u201d have to provide support to computer manufacturers to facilitate installation<\/li>\n
  4. Computer manufacturers must complete installation and testing prior to the end of June. As of July 1, all computers should have \u201cGreen Dam\u201d pre-installed.<\/li>\n
  5. Every month computer manufacturers and the provider of Green Dam should give MII data on monthly sales and the pre-installation of the software. By February 2010, an annual report should be submitted.’<\/li>\n<\/ol>\n

    What does the software do? \u00a0According to OpenNet Initiative<\/a>:<\/p>\n

    Green Dam exerts unprecedented control over users\u2019 computing experience:\u00a0 <\/em>The version of the Green Dam software that we tested, when operating under its default settings, is far more intrusive than any other content control software we have reviewed. Not only does it block access to a wide range of web sites based on keywords and image processing, including porn, gaming, gay content, religious sites and political themes, it actively monitors individual computer behavior, such that a wide range of programs including word processing and email can be suddenly terminated if content algorithm detects inappropriate speech <\/em>[my emphasis – Kim]. The program installs components deep into the kernel of the computer operating system in order to enable this application layer monitoring. The operation of the software is highly unpredictable and disrupts computer activity far beyond the blocking of websites.<\/p>\n

    The functionality of Green Dam goes far beyond that which is needed to protect children online and subjects users to security risks:\u00a0\u00a0 <\/em>The deeply intrusive nature of the software opens up several possibilities for use other than filtering material harmful to minors. With minor changes introduced through the auto-update feature, the architecture could be used for monitoring personal communications and Internet browsing behavior. Log files are currently recorded locally on the machine, including events and keywords that trigger filtering. The auto-update feature can used to change the scope and targeting of filtering without any notification to users.<\/p>\n

    How is it being received?\u00a0 Wikipedia<\/a>\u00a0says:<\/p>\n

    Online polls conducted by leading Chinese web portals revealed poor acceptance of the software by netizens<\/a>. On Sina<\/a> and Netease<\/a>, over 80% of poll participants said they would not consider or were not interested in using the software; on Tencent<\/a>, over 70% of poll participants said it was unnecessary for new computers to be preloaded with filtering software; on Sohu<\/a>, over 70% of poll participants said filtering software would not effectively prevent minors from browsing inappropriate websites. <\/sup>\u00a0A poll conducted by the Southern Metropolis Daily<\/em> showed similar results. <\/sup><\/p>\n

    In addition, the software is a virus transmission system.\u00a0\u00a0\u00a0Researchers from the University of Michigan\u00a0concluded<\/a>:<\/p>\n

    We have discovered remotely-exploitable vulnerabilities in Green Dam, the censorship software reportedly mandated by the Chinese government. Any web site a Green Dam user visits can take control of the PC <\/strong>[my emphasis – Kim]<\/em>.<\/p>\n

    We examined the Green Dam software and found that it contains serious security vulnerabilities due to programming errors. Once Green Dam is installed, any web site the user visits can exploit these problems to take control of the computer. This could allow malicious sites to steal private data, send spam, or enlist the computer in a botnet. In addition, we found vulnerabilities in the way Green Dam processes blacklist updates that could allow the software makers or others to install malicious code during the update process.<\/p>\n

    We found these problems with less than 12 hours of testing, and we believe they may be only the tip of the iceberg. Green Dam makes frequent use of unsafe and outdated programming practices that likely introduce numerous other vulnerabilities. Correcting these problems will require extensive changes to the software and careful retesting. In the meantime, we recommend that users protect themselves by uninstalling Green Dam immediately.<\/p>\n

    There is no doubt that government has a legitimate interest in the safety of the Internet, and in the safety of our children.\u00a0 But neither goal can be achieved with any of the unfortunate methods being used here.\u00a0<\/p>\n

    Rather than so-called “blacklisting”, the alternative is to\u00a0construct virtual networks that are dramatically safer for children than the Internet as a whole<\/em>.\u00a0\u00a0As\u00a0such virtual networks emerge,\u00a0technology\u00a0can be created allowing\u00a0parents to limit the access of their young children to\u00a0those networks.<\/p>\n

    It's a big job to build such\u00a0“green zones”.\u00a0 But government is the strong force that could serve as a catalyst in bringing this about.\u00a0\u00a0 The key\u00a0would be\u00a0to organize virtual districts and environments that would be fun and safe for children, so children want to play in them.<\/p>\n

    This kind of virtual world doesn't require the generalized banning of sites or ideas or prurient thoughts – or\u00a0require government\u00a0to “improve” the nature of human beings.<\/p>\n","protected":false},"excerpt":{"rendered":"

    The alternative is to construct virtual networks that are dramatically safer for children than the Internet as a whole<\/p>\n","protected":false},"author":68,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[21,11,5],"tags":[],"_links":{"self":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts\/1054"}],"collection":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/users\/68"}],"replies":[{"embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1054"}],"version-history":[{"count":0,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts\/1054\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1054"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1054"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1054"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}