Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×
Security Government Politics Your Rights Online

University Professor Chastised For Using Tor 623

Irongeek_ADC writes with a first-person account from the The Chronicle of Higher Education by a university professor who was asked to stop using Tor. University IT and campus security staffers came knocking on Paul Cesarini's door asking why he was using the anonymizing network. They requested that he stop and also that he not teach his students about it. The visitors said it was likely against university policy (a policy they probably were not aware that Cesarini had helped to draft). The professor seems genuinely to appreciate the problems that a campus IT department faces; but in the end he took a stand for academic freedom.
This discussion has been archived. No new comments can be posted.

University Professor Chastised For Using Tor

Comments Filter:
  • Re:Bravo (Score:5, Informative)

    by Anonymous Coward on Thursday February 08, 2007 @06:23PM (#17940276)
    He is an assistant professor. He is unlikely to have tenure.
  • by imaginaryelf ( 862886 ) on Thursday February 08, 2007 @06:26PM (#17940336)
    According to the article, he's in Bowling Green State University [bgsu.edu], which is in Ohio. So DHS will be on this case in no time.
  • Re:Bravo (Score:5, Informative)

    by __aagmrb7289 ( 652113 ) on Thursday February 08, 2007 @06:29PM (#17940372) Journal
    FYI (from TFA): My reason for downloading and installing the Tor plug-in was actually simple: I'd read about it for some time, was planning to discuss it in two courses I teach, and figured I should have some experience using it before I described it to my students. The courses in question both deal with controlling technology, diffusing it throughout society, and freedom and censorship online. When I cover online censorship in countries with no free press, I focus on how those countries rely on hardware, software, and phalanxes of people to make sure citizens can reach only government-approved media. Crackdowns on independent journalists, bloggers, and related dissidents all too often result in their being beaten, incarcerated, or worse. Technologies like Tor represent a beacon of freedom to people in those countries, and I would be doing my students a disservice if I didn't mention it.
  • Re:the ivory tower (Score:4, Informative)

    by __aagmrb7289 ( 652113 ) on Thursday February 08, 2007 @06:32PM (#17940416) Journal
    FYI (from TFA): "My reason for downloading and installing the Tor plug-in was actually simple: I'd read about it for some time, was planning to discuss it in two courses I teach, and figured I should have some experience using it before I described it to my students. The courses in question both deal with controlling technology, diffusing it throughout society, and freedom and censorship online. When I cover online censorship in countries with no free press, I focus on how those countries rely on hardware, software, and phalanxes of people to make sure citizens can reach only government-approved media. Crackdowns on independent journalists, bloggers, and related dissidents all too often result in their being beaten, incarcerated, or worse. Technologies like Tor represent a beacon of freedom to people in those countries, and I would be doing my students a disservice if I didn't mention it."
  • by Anonymous Coward on Thursday February 08, 2007 @06:36PM (#17940484)
    You can never disguise the fact that your computer sends packets accross the intranet. At some level, your node must form a secure connection to another node (which connects to another, and another, etc. Read up on Onion Routing). Network monitoring tools can detect that intranet connection, its source, its destination, and the ports it uses. They can't detect the content sent across that connection.

    In addition, once your secure packets reach that first onion-routing node it acts as a proxy, keeping anyone who can't see your last-mile connection from detecting from where your connection really comes.
  • Re:the ivory tower (Score:5, Informative)

    by wernst ( 536414 ) on Thursday February 08, 2007 @06:37PM (#17940500) Homepage
    I'm not sure what the story is here, the right to use tor on someone elses network? Does he have that right? It's not his network. I've used tor at home, but completely understand I cant use it at work, and if during my university days, had it existed (maybe it did but whatever), and was told I couldnt use it, I'd just deal with that.

    What are you talking about?

    The use of tor on "someone else's network" is implicit, because you are connecting to someone on the other side of the network as a whole.

    You say you use tor at home, but that's not "your" network either. I think your ISP would say that you are connecting to *their* network. I think the Hosting Provider of the web server you're connecting to would say it is *their* network. I think AT&T, (or whoever owns the backbone your data is traveling across) would say it is *their* network too.

    If any of these network owners told you to stop using tor at home, what would you say to that? I'm guessing it would be pretty close to what this professor said to the IT goons trying to intimidate him into stopping.

    The only time it's "your" network is when you have two of your own computers on your own LAN, and a tor router between them.

  • Re:Bravo (Score:2, Informative)

    by Anonymous Coward on Thursday February 08, 2007 @06:45PM (#17940628)
    Nowhere in the article did it say he had tenure. Most professors do not have tenure. Many are adjuncts, which means if they cause problems, they are simply not hired again next semester. Most universities have policies about academic freedom (and tenure) because they don't want to turn into a place with group think. The private sector loves group think and towing the party line is the best way to climb the corporate ladder (until the whole ladder falls).
  • Re:Bravo (Score:1, Informative)

    by Anonymous Coward on Thursday February 08, 2007 @06:48PM (#17940668)
    but how many businesses do you know ... that receive regular funding from the government?

    You're... kidding, right?

    Have you even HEARD the term "Pork"? Bridges to nowhere? Hell, I'd consider the defense industry to be subsidized by the government.

    Besides, with the government lately, it seems like the university by taking federal money would DISALLOW any sort of anonymizing things under the guise of "protecting the children" or some such.
  • Re:question... (Score:4, Informative)

    by Kiaser Wilhelm II ( 902309 ) <slashpanada@gmail.com> on Thursday February 08, 2007 @07:04PM (#17940910) Journal
    Tor keeps you from being detected by the remote end of a connection. Nobody said you can't be detected as a Tor user on the local network itself.
  • Re:question (Score:3, Informative)

    by crush ( 19364 ) on Thursday February 08, 2007 @07:24PM (#17941166)
  • Re:question (Score:2, Informative)

    by Katmando911 ( 1039906 ) on Thursday February 08, 2007 @07:25PM (#17941184) Homepage
    Tor won't keep them from figuring out THAT he was using Tor, but it will keep them from figuring out WHAT he was using Tor for.
  • by TheMCP ( 121589 ) on Thursday February 08, 2007 @07:27PM (#17941216) Homepage
    I was a university IT director a few years ago. The university told me outright when they hired me that they expected to pay me 25% less than an identical job would pay in industry, because they're a not-for-profit organization, and that I should desire to accept this because of the benefits of working in an academic environment (which they listed as long term job security and minimum of four weeks of vacation per year). Okay, fine. They weren't happy when I came back with documentation showing that my industry value was about twice what they thought, but they coughed up the 75% of my industry value that they said they would.

    Then when I wanted to hire anyone, however, they dictated to me what I could offer, and refused to accept any input regarding what industry norms were. So, when I needed a DBA (and frankly needed a really good one), they told me I should get someone Oracle certified, and that I should pay no more than $50k. Skilled, experienced, product certified DBAs, as you may know, tended to go for over twice that (usually more like three times that) a few years back in Boston, and our database wasn't Oracle anyway. I ended up hiring a junior-level person (when I really needed a senior level person) because that was the best I could get for the money they were offering (in fact the only applicant we had received who had any experience with the database products we actually used), and told HR they could forget about certification. Their response was to complain a lot that I hadn't hired a good enough person, despite that they hadn't actually asked me (his manager) about his performance, and he was actually doing unusually well for someone of his level. They also nagged me extensively to replace him with a woman who had applied who was oracle certified (which was still useless because we still didn't have oracle), but didn't actually speak English. (Presumably that's why she was willing to take the lousy pay rate.)

    10 months after I was hired the university outsourced my job, proving that their claim of long term job security was a lie in the first place. (I hear they had to hire three consultants to replace me, each one at a cost of two to three times my salary.)

    I've seen this pattern repeatedly in university IT groups; they won't pay what it really costs to get someone who can really do the job, but they insist on unreasonable qualifications given the pay level they're offering, so instead of either shelling out what it costs to get what they want or accepting the best qualified person who would normally be in the pay range they're offering, they instead hire the loser who is willing to both take the low pay rate AND inflate their qualifications (either by exaggeration or outright lies) to meet the university's unreasonable demands. So, when they most need a skilled, experienced person, they're most likely to get a lying fraud who can't get the job done and will give everyone else a hard time to try to make it look like nothing is their fault.
  • Re:Bravo (Score:3, Informative)

    by terrahertz ( 911030 ) on Thursday February 08, 2007 @07:44PM (#17941514)

    (Maybe they REALLY like the old cartoon Gem and are embarrassed about it)

    It's Jem. And she is outrageous.

    (Oh no -- maybe I should have used Tor to submit this comment?!)
  • Re:Bravo (Score:4, Informative)

    by networkBoy ( 774728 ) on Thursday February 08, 2007 @09:20PM (#17942778) Journal

    Every american should have basic (and I do mean *BASIC*) health care covered socially. This includes random things like broken legs and car wreck injuries and not things like chemo therapy (and I say that as a cancer survivor).
    We already have this in the US, and IIRC it includes chemo if you are sick enough. It's called the emergency room, the USA's secrete socialized healthcare.
    -nB
  • Re:And yet... (Score:3, Informative)

    by russellh ( 547685 ) on Thursday February 08, 2007 @11:46PM (#17944068) Homepage

    Free market means a place where the strong take advantage of the weak. Rich of the poor. Employers of employees. Developed nations of less developed nations. On ever level the story is the same, and the people praising free markets are typically those that are with the strong directly benefiting. Don't believe the hype.
    actually you're describing a laissez-faire or anarcho-capitalist economy which take the .gov out of the picture and allows massive wealth concentration, leading to a kind of feudalism complete with company towns, private armies, etc. We've been there, and it's bad. When the weak are under the thumb of the strong, that's obviously not a free market, hence the need for actual laws and regulation, not to mention transparency. Even Adam Smith wrote about the necessity of a strong central government to regulate the economy, something many seem to have forgotten. But back in the real world, the kinds of things we need to do are not on the level of restructuring the economy from capitalism to something else. No, the kinds of things we need to fix are inbreeding among lobbyists, pundits, politicians, and the media. The famous revolving door from government to private industry. We can't have industry lobbyists writing legislation. We can't have four corporations owning all the newspapers in the country, or one corporation owning most of the radio stations. But these problems aren't the result of "free market principles" ; they're the result of the powerful abusing their influence to protect it and acquire more. And it's not as if people seeking power is unique to capitalism. No theoretical ideas are going to stop the will to power. The system requires constant and vigilant maintenance and at the moment there's a lot of work to do.
  • by compro01 ( 777531 ) on Friday February 09, 2007 @12:34AM (#17944434)
    the purpose of tor is not to hide that you're using tor. the purpose is to hide what you're doing and where you are. a man in the middle (IT in this instance) has no clue where you are going or what you are accessing and the server on the other end has no clue where you actually are.
  • by harpune ( 557684 ) on Friday February 09, 2007 @12:35AM (#17944444) Homepage
    A little digging on BGSU's website comes up with what is likely the actual policies:

    http://www.bgsu.edu/downloads/cio/file9602.pdf [bgsu.edu]

    12. Attempting to circumvent computer system or computer network security systems. Attempting to circumvent University computer system or computer network security systems, or using University computer systems or computer networks in attempting to circumvent security systems elsewhere.

    and

    22. Anonymous use, or use of pseudonyms on a computer system or computer network to escape responsibility. No person shall use a computer system or computer network anonymously or use pseudonyms to attempt to escape from prosecution of laws or regulations, or otherwise to escape responsibility for their actions.


    Now, the first one seems like it is worded vaguely and may or may not apply in this situation, but the second one is pretty clear: as long as you are using anonymity services "to escape responsibility". Clearly, the professor was not trying to skirt the law or detection for any shady behaviour. of course, in the eyes of admins, allowing any use of such anonymizers could be dangerous to their network, and make their jobs harder.

    I take most issue to the detectives' request that the professor refrain from discussing Tor in his classes. It would be academically unethical for the prof to bend to this pressure because a little pressure was put on him by the rent-a-cops. The detectives can ask the professor to do whatever they want, but dictating what he can and cannot teach in his classroom is inappropriate.
  • Re:Bravo (Score:4, Informative)

    by vux984 ( 928602 ) on Friday February 09, 2007 @12:41AM (#17944476)
    "Don't believe everything you hear on tv about waiting lists."

    Agreed!

    " If you need a bypass operation you're not going to die on the waiting list because it's too expensive to do it."

    To be fair, people do sometimes die on the waiting lists. Its tragic when it occurs, and often makes the national news. Its certainly something that a lot of effort is spent on preventing, and that effort is largely successful. In the vast majority of cases people on long waiting lists are generally in pretty stable condition. And that is part of the "problem", deteriorating cases are prioritized over stable cases -- so if you are stable it can take a long time to reach the front of line, leading to the unbelievable long waiting lists you read about.

    For a good analagy consider a combat medic performing triage - patients that are deemed stable may have to wait hours or days to get patched up while people in critical/deteriorating condition are processed immediately. If people are continually coming in off the field, the stable patients just get pushed back further, and are only finally tended to during lulls, or if their condition deteriorates. Its a terrible thing to have to go through, but it is the fairest and most just approach in the situation.

    Thus the main problem with the waiting lists in Canada isn't that you are likely to die while you wait, but rather that you have to deal with the condition (and associated pain and inconvenience) WHILE you wait, and that is admittedly terribly terribly frustrating, especially if its disabling in any manner.

    But despite the waiting lists and issues associated with them, I suspect that Canada's health care is more effective than the US's is, when measured in terms of how many people live vs die due to availability of care. (Whether its waiting "too long" in Canada, or not being able to afford care in the States.) For the simple reason that a national-scale system of triage seems far more effective at saving the largest number of people vs hoping that only people who can afford care will need it. (the only way the US system could reliably care for more patients.)

    Naturally there is pressure from the well-to-do to desire to 'queue-jump' by spending some of that money to avoid time spent in pain. Currently that is disallowed, and that is controversial. I don't have a problem with the rich spending money to get out pain faster; I have a problem with the fact that the more they are allowed to queue jump, the longer the poor have to wait.

    The argument that if they queue jump to a 2nd tier in a two-tier system so the poor actually get served faster if the rich can 'pay to get out of the way' doesn't hold water for the simple reason that supply is relatively inelastic. I.e. the doctors and nurses that will staff that 2nd tier are going to come from the first tier. So the poor will have to wait longer. Worse, the more profitable tier will be more attractive, and will be where you find the 'best and brightest', further disadvantaging the poor.

    Because of our proximity to the US we essentially have the two-tier system NOW, and the problems with it are apparent.

    Wealthy Canadians willing to pay go to the states to "queue jump", and Canada loses doctors and nurses to the states due to the greater earnings potential. I think Canada's socialized medical system suffers overall as a result.
  • Re:Nice Straw Man (Score:3, Informative)

    by Fulcrum of Evil ( 560260 ) on Friday February 09, 2007 @01:50AM (#17944916)

    While the government's response to Katrina was slow and poorly executed, it was not contingent upon ability to pay.

    Yes it was. The government put up matching funds, so the poor areas were doublby fucked.

  • Re:Bravo (Score:3, Informative)

    by Fulcrum of Evil ( 560260 ) on Friday February 09, 2007 @02:14AM (#17945044)
    The last study I saw showed us paying about $10k per year per patient, which is more than the Netherlands (one of the better rated places with public health care) by a wide margin. When Hillary put together her universal health care plan about 10 years back it was about $600B, which was less than we were spending for healthcare at the time - I would expect that public healthcare here could save us about $200B/year.
  • Re:Bravo (Score:4, Informative)

    by Kjella ( 173770 ) on Friday February 09, 2007 @02:51AM (#17945236) Homepage
    1) there are too many diseases that can be cured IF you have unlimited resources... well really about $2,000,000 to $10,000,000 or so. The point is- we can't afford to cure everyone's $350,000 bypass surgery so we let people pay for it themselves or die. You do it in canada too- you just do it via rationing and delays instead of via money. "Sure you can get your surgery-- in 17 months" vs "Sure you can get your surgery- for $350,000".

    Actually, the huge money sink isn't the $350,000 one-time bypass surgery, at least not for people who can get back to work. The biggest money sink is treatments of chronic conditions, things like MS or mental disorders where the patient isn't going to recover but is going to live on and needs medical care for decades on end. I recently read about a girl in my country, 15yo who killed her mother and also got her own child, they have 8 nurses on her 24x7. If we wanted to save money, we'd put her in a padded room and the kid in foster care.

    However, there are priority queues to get otherwise healthy, working (read: tax-paying) citizens back to work. A rather young relative of mine needed a hip surgery - rushed to the head of the line, then retraining. Same with a neighbor in his 50s, if not quite as expendient. That 80yo that's probably going to have a hard time recovering from major surgery? Well, if we get around to it. And in the final stages of life, there are limits to what they'll do. The difference is that we're trying to give everyone a good run - that 30yo isn't going to die while the 90yo millionaire lives on for another year if we can help it. We do have private clinics here too, if you can afford it though.

    2) If we could get the legal $ystem out of it, the costs would be much lower but there would be more malpractice. We currently say "no mistakes and no malpractice" but that decision probably doubles or triples every thing we do medically. Which in some cases means that the procedure that could be done cheaply- is now too expensive.

    I'm not sure I follow you because there's accepted medical protocol and there's not accepted protocol, aka malpractise. While we don't have your multi-million dollar lawsuits (though we of course pay damages to people that have been mistreated) we do have medical review boards which can do everything from give you a mild criticism to having your license revoked, which is basicly the end of your medical career. You certainly see far less unserious fly by night clinics here than you do in the US.

    3) Even in socialist countries- you are paying. Sure- you may rip off the doctors (with a resulting shortage of doctors and hence long wait periods) but the drug company executives are still flying around in jets and vacationing in maui.

    They pretty much hate us. One you don't get to bribe the doctors to prescribe their brand of medicine, second as a matter of public policy doctors must prescribe cheaper knock-off drugs if they work on the patient without any ill effects. If they're flying around in jets and vacationing in Maui, it's not because of us. As for shortage of doctors - not really. The biggest issue with doctors is that they're educated in big cities, while they're needed way out in the countryside where well - most of these urban doctors don't want to live. We're not above laws of supply and demand when it comes to getting people to educate themselves to doctors.

    Yes to vaccinations for everyone and broken limbs (tho perhaps a limit on the number of times to reign in the reckless types).

    And then you'll bring back the courts who'll decide on reckless etc., we cover everyone even if you're a mountain climber, basejumper or whatever else stupid thing you were doing. Turns out that those kind of people go absolutely crazy from limping around on crutches a few weeks, not to mention the pain and aches so there's actually no problem at all. People don't just set off down a double black diamond slope thinking "who cares if I beat myself half to death, the healthcare will cover it".
  • Re:Bravo (Score:1, Informative)

    by ourcraft ( 874165 ) on Friday February 09, 2007 @10:47AM (#17947736)
    Sorry the whole post is pretty wrong.

    "Here's the deal-- you cannot have unlimited medical coverage."

    Real coverage, all things covered, heart surgery, bone marrow transplants, pancreous transplants its all there, you're wrong. Are there things that aren't covered in Canada? Yes, almost all because they are unproven uses of unscrupulously priced new treatments. Do people leave Canada to get treatment in other countries? Yes and those costs are covered too. The philosophiocal stuff about "everything" being covered is a red herring and dosen't contribute to the discussion.

    1) there are too many diseases that can be cured IF you have unlimited resources... well really about $2,000,000 to $10,000,000 or so. The point is- we can't afford to cure everyone's $350,000 bypass surgery so we let people pay for it themselves or die. You do it in canada too- you just do it via rationing and delays instead of via money. "Sure you can get your surgery-- in 17 months" vs "Sure you can get your surgery- for $350,000".

    You're wrong -everyone gets by-pass surgery, and there's no rationing. And there's no wait. Annoying even painful waits for Hip replacement? There can be waits, even months, but for life threatening crises? Nope, doesn't happen. You cannot pay for services in Canada to jump the line, get services not paid for, or to end wait times, nope doesn't happen, ever, against the law.

    2) If we could get the legal $ystem out of it, the costs would be much lower but there would be more malpractice. We currently say "no mistakes and no malpractice" but that decision probably doubles or triples every thing we do medically. Which in some cases means that the procedure that could be done cheaply- is now too expensive.

    The real costs of American health care is billing. The billing systems are bigger than than the treatment buildings. There are so many insurance companies, government agencies, poor people, volunteer organizations and charities to deal with that hospitals, and health organizations, have billing and payment departments that have to employ more people, (who are often better paid) than care-providing staff. They spend more money trying to find ways to collect from working people that can't pay than they do on their treatments. The reason litigation is so expensive is because there are so many unscruplous people trying to make a killing off a money machine called healthcare, start to change that, and you massively lower the court costs.

    3) Even in socialist countries- you are paying. Sure- you may rip off the doctors (with a resulting shortage of doctors and hence long wait periods) but the drug company executives are still flying around in jets and vacationing in maui.

    Doctors in Canada get paid the same way as the U.S., buy the insurance company, and they set their own rates. Many make hundreds of thousands of dollars, many make in the realm of a million dollars, (though it is Canadian money). Canada has approximately the same number of Doctors per household as the reat of the OECD, and from I can tell more than the U.S. Yes, drug companies and their execs get far too much money, it's theft. But that has more to do with the same kind of copywrite legislation, and intellectuall property laws that are hurting society everywhere else, like technology, movies and software. The whole world is coming to the conclusion that this whole set of issues has run it's course. New laws need to be enacted to solve these problems.

    So the point is not curing every illness known regardless of price- but setting a reasonable amount of tax dollars aside to cover a reasonable amount of medical expenses for the most people possible. No open heart surgery for 98 year olds on the tax dollar but if they want to pay for it themselves- okay. Yes to vaccinations for everyone and broken limbs (tho perhaps a limit on the number of times to reign in the reckless types).

  • by twitter ( 104583 ) on Friday February 09, 2007 @07:02PM (#17956300) Homepage Journal

    the statistics used also seem to show that 24% of Linux machines are also part of botnets?

    No, they show that 0.092% of Linux machines are in a botnet, if we can trust the poster. His link to marketshare did not work but his numbers were:

    OS Market Share(Percent) Botnet(Percent)
    Windows 93.87 23.47
    Mac 5.67 1.42
    Linux 0.37 0.09
    Other 0.09 0.02

    The way you want to look at it, the botnet numbers should add to 100%. They don't, so the numbers don't mean what you want them to.

    If you want to be usefull you could find a working link, preferably from a site that shows Linux market penetration at something more realistic than 0.37%.

Living on Earth may be expensive, but it includes an annual free trip around the Sun.

Working...