China Proposes Foreign Domain Name Censorship (thestack.com) 60
An anonymous reader writes: A new draft law in China could potentially increase domain name restrictions, limiting domestic access to foreign websites. The measures outlined in the 'Internet Domain Name Management Rules' remain unclear, yet they suggest a marked effort to increase censorship on online content. The proposals, released for public comment by the Ministry of Industry and Information Technology, seek to update existing regulations to censor any domain names not registered within China. Only domain names approved by authorities would be permitted while other names registered outside of China would be blocked automatically.
Re: (Score:2)
Re: (Score:1)
This is exactly why we are working so hard to get rid of all the butterflies.
Re:Fair's Fair (Score:4, Interesting)
Re: (Score:2)
I was about to say, it might help fend off at least a few of the random scans I get from China...
Domain names have nothing to do with scans.
Re: (Score:2)
Re: (Score:2)
Not always. For instance, the server sitting in my floor at home -- looking at the vhosts logs I'll often see the same IP try the same skiddy exploit against several (or even every) domain's website hosted on the box before fail2ban drops them in the firewall rules. Since I don't have reverse DNS set up for any of these domains and some (but not all) of them are just third-level subs from domains I have hosted elsewhere it seems a bit more focused than a random scan at times.
But those are your domains, not domains related to the source of the scans - no?
Re: (Score:1)
They would like that just fine. It will save them lots of time and effort.
All these stories about online censorship, and so little on the successes of circumvention. We need to bust down the walls, all of them. If there ever was a "just" war, this is it. And it requires no blood.
Re: (Score:1)
Unfortunately, just because it requires no blood doesn't meant there wouldn't be any. Or at least long stays in repatriation camps. Big brother doesn't give up without a fight.
Re: (Score:1)
Though it would be better if Big Brother does give up peaceably, it's not a requirement if we can just work around it. It might be more peaceful, if we let them think they are in control.
Re: (Score:3)
Define "success." Stopping 95% of the population from casually running across something China doesn't like is probably a success in their books. I mean sure they'd like to stop 100% but 95% is still a hell of a lot better than 0%.
Just like the lock on your door (ooh an analogy on Slashdot!) It won't keep out 100% of people, but nobody's about to be calling for a removal of all locks on all doors just because of the occasional B&E.
Of course that analogy breaks down in the sense that we generally value
Re: (Score:2)
I'm sorry, where is the car in your analogy. I don't understand non car analogies.
Re: (Score:2)
Ok sorry.
So its like a car analogy. You can create a car analogy and they're like 95% accurate, which makes them a reasonably good success in the view of most car analogists even if they aren't always entirely perfect.
I can see that (Score:2)
they obviously don't want to be part of the world eCommunity, so block all of .cn elsewhere.
Re: (Score:2)
Except, of course, government agencies and selected large corporations will continue to be allowed worldwide access, so they can break into foreign systems and advance their own technologies with what they can steal.
Then, somebody will figure out how those government-sanctioned breaches of their "Chinese Wall" are accomplished, then the crackdowns start anew.
Good luck with that (Score:3, Insightful)
"censor any domain names not registered within China"
So what, only 99% of the internet then?
The Great Firewall [Re:Good luck with that] (Score:1)
China has a history of building walls to keep foreign people or things out. Old habits die hard.
Re: (Score:3)
President Trump, ftw.
Re: (Score:2)
Um, do you make fun of every other country that tries to defend its border from people just walking into their country?
Re: (Score:2)
Re: (Score:2)
All you need to do is register the site in China? That's no big deal! I'm going to register tiananmensquareandindependentpollutionlevelreadings.com today!
Re:Good luck with that (Score:4, Interesting)
They might allow you to register (intentionally-provocative domain name notwithstanding), but you'd probably have to comply with a laundry list of additional regulatory requirements if you did... like requiring validated government-issued IDs from any user who's allowed to post public content (possibly including users who weren't even Chinese or in China), and removing "objectionable" (to Chinese censors) content on demand (think DMCA, but a hundred times worse). And you'd probably have to pay some Akamai-like Chinese CDN to shepherd your site's content through the Great Firewall regardless.
And if you WERE willing to meet China's regulatory requirements for the sake of market share, you'd probably have to block access to most users in Europe, because the very things you'd have to do to officially get your site's content into China would probably get you fined by the EU for violating its privacy laws.
Self-Foot Shooting now more accurate (Score:2)
Better title for this article:
"China develops more accurate online method of shooting itself in the foot."
Re: (Score:2)
"censor any domain names not registered within China"
So what, only 99% of the internet then?
Well even the most generous estimates is that 75% don't speak English and that includes learners, the more conservative estimate is around 90%. And the Chinese government's attitude to western values varies from lukewarm to frozen solid, they probably don't mind if the Chinese stick to local sites that are under Chinese jurisdiction. They have a billion users, they're big enough to do pretty much anything on their own. The rest of the world is trending heavily towards English as the de facto global language
Re: (Score:2)
... of your side of the Internet that you can actually use right now.
Services there will cater to China first, but spread by demanding concessions from greedy western companies. We'll grow more dependent on these services, which will be tied into the Chinese all-encompassing credit system, be monitored and controlled by Chinese minders, and anyone actually wanting to use their services will have to opt-in to the same "Authoritarian Government at a Distance" model that only Western companies opt-in to so f
Re: (Score:2)
With the obvious exception of slashdot, would you really miss 99% of the internet?
Re: (Score:2)
"censor any domain names not registered within China"
So what, only 99% of the internet then?
To censor, not necessarily to block.
Personally I'm sure that my domain chinagovtsucksballs.cn will be fine because it's registered in China.
western corps to obediently register within china (Score:2)
if chinese do this, they will do it knowing that whatever and whoever has anything of value in internet of use to china, that does not threaten them, will eagerly start registering themselves within in china, obediently complying with rules chinese have laid down.
all of the western corps who want to survive and make money will do that
that is power.
Welcome to 2016 (Score:3)
When everyone wants to tell everyone else what they can and can't say and see on the internet.
Get in line, China.
Disconnect China from the rest of the world! (Score:1, Interesting)
The rest of the world would be better off if we would just disconnect China from the internet! They don't like an open internet then we should not have to give them one. This would eliminate a major group of corporate and government hackers.
Doomsday Online (Score:5, Insightful)
Everywhere you look, on every continent, freedom and privacy are being hunted down, borne upon the cynical horns of terrorism and pederasty.
China hasn't learned anything from the Empire (Score:2)
The more you tighten your grip, the more websites will slip through your fingers!
Re: (Score:3)
Re: (Score:2)
Pfft, we ALL know anytime you build something that big it's got a thermal exhaust port.
Re: (Score:2)
Sometimes it's called a thermal oscillator. Basically, you just look for some kind of thermal thing on the surface, and if you don't see one it means you either need to go inside and blow up its reactor, or kamikaze-attack the bridge so it will crash into something.
VPN (Score:2)
Use HOST file (Score:1)
DNS to build an IP whitelist (Score:3)
That won't work if the firewall drops connections to foreign IPs that have not been returned from a DNS query. When you perform a DNS query, the DNS server would then do three things: check whether the domain is on China's whitelist, return the hostname's IP address if so, and create a whitelist entry on the firewall for the pair of (your IP address, their IP address) if so. It's thus a little bit like carrier-grade NAT, except that DNS lookups are used as the trigger instead of a SYN.
Or perhaps I shouldn't
Why can't I have freedom dot china dot com? (Score:1)
Why is this not permitted?
I helped build your telephone system back in the 90s, China, and I was one of your first IPO investors in many advanced research firms in Hong Kong, but you won't permit that?
What gives?
Sounds like a feature! (Score:2)
* Register domain that China government hates
* China-based script-kiddies can't get to me
* ???
* PROFIT by being able to focus my security infrastructure on more serious security threats (like the Chinese-government-trained/sponsored industrial-espionage-hackers???) instead of wasting time swatting the script kiddies that happen to be in China.
Now if only it was that easy to get rid of the script-kiddie problem worldwide.
I know! I'll use a Martian IP address!!!
Dumbing Down (Score:2)
All the Chinese government will accomplish with this sort of thing is the dumbing down of their citizenry putting them behind the west in the Great Competition they desire so much to excel at. Sad. Go for it.
Re: (Score:2)
This is why China will never be in the top tier of nations. Sure, it is large and moderately developed, but its trajectory has reached its apogee.
Preparing for the Future (Score:1)
Of course this is an effort to prevent domain names like freetibet.com appearing to the Chinese population, but the (unintended) consequence of the development is dividing the Chinese values from those of the rest of the world and so preparing them to view the whole world as the enemy for the coming war. They will become just like ISIS.
Not just political (Score:2)
"Ministry of Industry and Information Technology" (Score:4, Informative)
What is that? A euphemism for the "Ministry of Truth"?
Not much different with trade, currently (Score:5, Insightful)
China continues to set up the situation so that they can sell outside of china, but from outside, can not sell INTO china.
At this point, WTO should step up and say no. BUT, they will not.
Re: (Score:1)
This is pure trade protectionism, under the guise of something else. In case you haven't figured it out, the Chinese government is crooked and lies all the time. WTO is useless all these years also.
Less Traffic (Score:1)
This mean I will see less traffic from China to my website? All incoming traffic from China is hack attempts, so it would be nice to see that traffic blocked at the source. Wishful thinking I know.
Re: (Score:2)
Same thought - Just wasted bandwidth from China - they don't buy ANYTHING. I've thought of blocking all their IPs - so the China firewall is going to do if for me.???
It will put them in disadvantage (Score:1)