Download the
Tom's Guide App from the AppsStore
News and trends on internet
/ mobile / "sound & picture" / IT
Yes No

Telex Software Circumvents Internet Censorship

- By - Source : usenix

A group of students and professors at the University of Michigan have developed Telex, a software that could allow users to break through a government-level censorship of websites.

According to the researchers, "many anticensorship systems work by making an encrypted connection (called a “tunnel”) from the user's computer to a trusted proxy server located outside the censor's network." The result is a cat-and-mouse game between the censor and proxy servers that need to be blocked to enforce censorship. There is virtually no way for users to generally know the IP address and login information of proxy servers, while the same information path is kept secret from the censoring authority.

Telex, on the other hand, creates a proxy server without an IP address. The user simply needs the Telex app to access censored websites: "When the user wants to visit a blacklisted site, the client establishes an encrypted HTTPS connection to a non-blacklisted web server outside the censor’s network, which could be a normal site that the user regularly visits. Since the connection looks normal, the censor allows it, but this connection is only a decoy."

The client request is registered as a Telex request by using a cryptographic tag in the connection headers - and only Telex is able to recognize a tagged connection. "As the connection travels over the Internet en route to the non-blacklisted site, it passes through routers at various ISPs in the core of the network." The technology would require ISPs to deploy devices that hold a private key to decipher tagged HTTPS connections from Telex clients. The stations will then direct the connections to anti­censorship services, such as proxy servers or Tor entry points, which clients can use to access blocked sites: "This creates an encrypted tunnel between the Telex user and Telex station at the ISP, redirecting connections to any site on the Internet," the researchers said.

The technology is very clever and we will learn more details about it at the upcoming Usenix Security Symposium in San Francisco. What makes it interesting is the fact that it focuses on a strategy of not being detected by the censor, which could potentially end the chase for proxy servers.

Share:
17
Comments
X

Comments

dogofwars 08/04/2011 9:32 PM
Hide
-2+

I hope they would help those people that require it. It's really stupid that gouvernment do that, it does not really prevent anything.

hoofhearted 08/04/2011 9:47 PM
Hide
-8+

[citation]and only Telex is able to recognize a tagged connection[/citation]

... until the censor gets hold of the Telex infrastructure

christop 08/04/2011 9:52 PM
Hide
-1+

Can they not just use tor.

supertrek32 08/04/2011 10:14 PM
Hide
-0+

All the censor would have to do is block any content with the telex flag. Unless the flag is being encrypted in HTTPS, which would mean your traffic is being decrypted by the ISP - not exactly a good thing either.

Silmarunya 08/04/2011 10:43 PM
Hide
-0+

christop :
Can they not just use tor.



TOR doesn't guarantee immunity. China for example has tracked users that hid their tracks with TOR. The problem is not so much TOR itself - that protocol is VERY difficult to break - but rather the possibility of intercepting a connection before it enters or after it leaves the onion thingy.

argur 08/04/2011 10:51 PM
Hide
-0+

@Silmarunya You mean like knowing data is being transferred, but not being able to see what it is? I dont know how TOR works, but is this the equiv of spotting and ending a TCP handshake?

bustapr 08/04/2011 11:03 PM
Hide
-0+

though it looks like a clever idea, its a fact that if pedos find this, they will use it for crap, so im not really happy about this.

argur 08/04/2011 11:09 PM
Hide
--1+

No more so than they abuse everything else though.

nekoangel 08/04/2011 11:32 PM
Hide
-2+

So essentially this requires the ISPs to go against the government in the case of government censorship. All comes down to how far out a user is allowed, sure it could work if say a person in China is allowed to go to websites based outside of China and ISPs outside have setup the system. If things hit the fan like they did in Lybia than its no go.

For the US right now such a system would not mean much. Besides viewing content on websites like youtube and BBC with content that are region blocked in the US.

K-zon 08/05/2011 12:08 PM
Hide
-0+

Still says they need to uncrypt to connect cause to connect you are going through uncrypted points of use.

not many places have encypts much anyways, but some do though, even say on some "normal" website use. Mainly if you sign-up for them, yes?

May not make some sense, but think even then is partial for the time being, yes? Just in it is the content which is say relevent of the place of such use, otherwise most content isn't.

Think the "arguement" ads to updates and patches, many websites start to have alot of encypt for normal use even when most the site isn't, yes? Or partial encypt of use. Without say loggin in, right?

Most pages will say, if you continue to say, that the page is encypted or not. Places of downloads at times have this, for many reasons i think. Malware, Viruses, Spyware, Spam.

Sounds like, they are trying to change these things the most, doesnt sometimes? When this is in mind, otherwise it sounds like they are trying to access things normal accessed but now encpyted and in lack of use due to it. Which one i wonder the most, right?

Region blocking seems debatable with or without the issue/argument.

Cause say then if content is placed within say just regional access, then of what that isnt, what is the issue? All things are not set to say regional restrictions which would make sense, to many points.

But regions would probably vary for access to say of use at times, rather ISPs, or server providors. Yes?

mister g 08/05/2011 4:06 AM
Hide
-0+

If you're going to show how your tech works at a conference than wouldn't some foreign governemnt officials just listen in and implement a way to intercept this system?

darkguset 08/05/2011 9:29 AM
Hide
-0+

... and there goes another Government $90M investment down the drain that the tax payers will coff up...

blubbey 08/05/2011 10:33 AM
Hide
-5+

bustapr :
though it looks like a clever idea, its a fact that if pedos (paedophiles*) find this, they will use it for crap, so im not really happy about this.



Zzzzz not this argument. IF used incorrectly and falling into the wrong hands, cars can kill, fertiliser can make bombs and people can go on a killing spree with guns. Things are only dangerous when used by people. They aren't dangerous on their own. It's like saying 'Oh noes faster internet connection means paedophiles can molest and groom more kids, we should all go back to dial up!'

It's a BS argument.

ojas 08/05/2011 3:36 PM
Hide
-0+

My college has banned fb on most nets...this could be useful :P

gm0n3y 08/05/2011 7:52 PM
Hide
-0+

This requires that ISPs install software to circumvent government censorship. This would only really work if your ISP was located outside of the country or the ISP of the website that you pretending to go to has Telex installed and reroutes the traffic. There is really no incentive for an ISP to that though.