Educause Security Discussion mailing list archives

Re: Access to Porn sites?


From: John McCabe <john.mccabe01 () MANHATTAN EDU>
Date: Thu, 15 Aug 2019 10:55:46 -0400

Regarding US Code 2258A, I'd like to believe that people would report child
pornography to the FBI directly using
https://www.ic3.gov/complaint/default.aspx. I have no clue where I would
begin to grab https traffic and make sense of if it is or is not child
pornography. The few times HR has asked me to track down who has accessed
regular, legal porn, it has made me sick because it is always some weird
fetish porn that I don't want to even know exists.

Many porn sites do NOT follow US Code 2257, which requires for record
keeping of ages and other information of individuals shown in videos, pics,
streams, etc. The most popular porn sites are very highly ranked sites
according to Alexa and the FBI et al do nothing publicly. I'm not sure how
to filter this content because even twitch.tv, youtube.com, etc. have users
that stream content from the most popular porn tube sites. Who blocks
twitter.com, snapchat, instagram.com and other social media services that
I'm too old to know about that allow for sending of nude pics & videos
through direct/private means? None of these social media services provide
the necessary records that US Code 2257 requires.




On Thu, Aug 15, 2019 at 10:14 AM Babak Oskouian <boskouia () mills edu> wrote:

Thank you all for your responses and suggestions. While discussing this
subject, I want to bring up liability issues as well. One of the concerns
we had was the fact that children on our campus can easily get on our Guest
network (via a self-registration process) and thus have access to anything
Internet offers. What are the implications of that? How likely is a law
suit filed by a disgruntled parent, for example?
Another concern is 18 U.S. Code  2258A.  As you know 18 U.S. Code  2258A
explicitly requires all Internet providers to report any and all digital
viewing, downloading and possession of child pornography to the National
Center for Missing and Exploited Children. Very stiff penalties ($150,000
first incidence, and $300,000 second incidence) are imposed on any provider
for failure to report.  Do you think (or has your legal counsel explicitly
assured you) that your institute is exempt form this law?

Babak



On Wed, Aug 14, 2019 at 4:07 PM Babak Oskouian <boskouia () mills edu> wrote:

Hi All,

We at Mills College have been kicking around the idea of blocking access
to porn sites on our network. Needless to say, we have gotten some push
back. Our plan (if it is green-lighted) is to use the built-in "adult"
filters that our Palo Alto firewall provides.
I am curious as to how many of you block porn sites, and if you do and
especially if you use a Palo Alto device, have you had to do a lot of
fine-tuning of your filters to eliminate false-positives?

Thanks.

Babak


*Babak Oskouian, Ph.D. | Campus Network Engineer | Information Security
Officer*

*Mills College | 5000 MacArthur Blvd | Oakland, CA 94613-1301*

*Office: Stern Hall 007; Phone: 510-430-2224 <510-430-2224>*

**********
Replies to EDUCAUSE Community Group emails are sent to the entire
community list. If you want to reply only to the person who sent the
message, copy and paste their email address and forward the email reply.
Additional participation and subscription information can be found at
https://www.educause.edu/community



-- 
*John McCabe *

*Senior Information Security Manager & Data Protection OfficerInformation
Technology Services*
[image: Manhattan College Logo/Shield]
Riverdale, NY 10471
Phone: 718-862-6217
john.mccabe01 () manhattan edu
www.manhattan.edu

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

Current thread: