4 ms·
I just realised that there might be an actual, political need for something as brittle and theatrical as DNS blocking, and probably of other things similar, bec
by yason 7y ago
I just realised that there might be an actual, political need for something as brittle and theatrical as DNS blocking, and probably of other things similar, because there are large masses of untechnical nature for which it really works.
Of course, we know DNS blocking doesn't fix anything. It's like putting the bad thing in storage and switching off the light. We know that nearly anyone can route around a blacklist-employing name server in seconds, but it's all the people but those "anyone" who can't.
And they probably think it's a really good idea. The general masses don't have to worry about accidentally bumping into dubious content, and it also raises, to a conscious level, the bar for those who want to bump into it. I mean, if you have to specifically install or configure things to workaround the DNS block, you've just validated your questionable intents.
For most people, that probably makes sense similarly to a signpost at a closed gate that says "Private yard / No pass through". Yeah, undoubtedly some people will open the gate and try to make the shortcut through the yard but at that point it will be clearly intentional. It's just that the externalities of DNS blocking are infinitely higher than blocking pedestrian traffic through a private yard, and no common people see that.
The rational counter-attack must thus focus on what would be a better alternative rather than how DNS blocking is flawed by design. How to prevent families from accidentally finding themselves looking at child porn, or to make it difficult for uncle Ed to watch naked kids on internet late in the evening while still preventing the ISPs from MITMing the DNS queries for everyone else?
- pas 7y agoThe masses are free to opt-in to babyNet. They can use a SafeDNS provider. It can be zero-touch even. Just push a DNS / DoH resolver through DHCP for the customer. (IETF RFC is coming for DoH provisioning.) But let the default be safe. Of course this is usually a foreign concept to laypeople. But to address the "accidentally CP" argument. How does that happen? You have to "accidentally" type something into Google/Bing/Yahoo and then click through. Or you "accidentally" have to start somewhere. And if you go to any for profit pornsite (camsites, streamsites, blablabla), or even just a porn subreddit, or type porn (or some explicit search terms) into a search engine.... you don't get to anything illegal. Why? Because that's bad for business. So ... it seems like a perfect excuse. It maybe worked for the first closeted gay senator/representative... but never since. So why are we still talking about it as something that "accidentally" happens?
- brokenmachine 7y ago>How to... make it difficult for uncle Ed to watch naked kids on internet late in the evening That's already illegal, so uncle Ed gets prosecuted like any criminal. That is a solved problem which requires no technical or legal changes.