News: 1676881815

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

A tip for content filter evaluators: erase the list of sites you tested, don't share them on 100 PCs

(2023/02/20)


Who, Me? Once again, gentle reader, it is time to dive into the treacherous waters of Who, Me? in which readers tell us tales of days when things did not go quite right.

This week meet a Regizen we'll call "Hugh", who was tasked with installing and testing internet content blocking software on a new fleet of laptops. This was in the early days of the existence of such software, and therefore before browsers could be set to deny access to certain sorts of content. Some degree of manual tuning was therefore required.

In the process of said tuning, Hugh pointed his test machine's browser at [1]Playboy.com – a site that he figured would offer the tamest examples of the kind of content his boss did not want his faithful minions looking at on company kit. Or company time. Or company furniture.

[2]

Hugh reasoned that if his namesake Hugh Hefner's companions and associates couldn't make it past the filter, nothing more explicit would either.

[3]

[4]

The software passed the test, our Hugh finalized the implementation and handed the laptop back to fellow techs who would install the filter onto dozens of laptops and deliver them to the company's denizens.

[5]Learn the art of malicious compliance: doing exactly what you were asked, even when it's wrong

[6]Eager young tearaway almost ruined Christmas with printer paper

[7]Shag pile PC earned techies a carpeting from HR

[8]Dear Stupid, I write with news I did not check the content of the [Name] field before sending this letter

Then – and this is the bad part – the techs imaged the test laptop and used that image on all of the other laptops they distributed to employees. And because Hugh hadn't cleared the browser history before handing it over to the techs, every single laptop in the organization had a link to [9]Playboy.com in its browser history.

Hugh was called in to the boss's office and invited to explain why exactly this had happened. Luckily he had a legitimate reason for having visited the site, so his interrogation went relatively painlessly. Nonetheless, all of the laptops were returned to IT and reimaged.

From then on, Hugh did his internet filter testing using [10]gambling.com .

[11]

Have you made a mistake that was broadcast across your place of work? If so, confess by [12]clicking here to send an email to Who, Me? and we'll tell the whole world about it in a future edition of Who, Me?. In strictest confidence, of course. ®

Get our [13]Tech Resources



[1] https://www.youtube.com/watch?v=dQw4w9WgXcQ

[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Y-NS0HdL8EuGOOy0ytnL8gAAANY&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y-NS0HdL8EuGOOy0ytnL8gAAANY&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Y-NS0HdL8EuGOOy0ytnL8gAAANY&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[5] https://www.theregister.com/2023/02/13/who_me/

[6] https://www.theregister.com/2023/02/06/who_me/

[7] https://www.theregister.com/2023/01/30/who_me/

[8] https://www.theregister.com/2023/01/23/who_me/

[9] https://www.youtube.com/watch?v=dQw4w9WgXcQ

[10] https://youtu.be/yKQ_sQKBASM

[11] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y-NS0HdL8EuGOOy0ytnL8gAAANY&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[12] mailto:whome@theregister.com

[13] https://whitepapers.theregister.com/



Sequin

I once sent a company wide email warning people about accessing inappropriate sites after finding that somebody had been accessing Rubbermaid.com - what you do in your own home is up to you, but don't follw your kink at work!

It turns out that Rubbermaid sells cleaning equipment!

Korev

So how did you sweep that one under the carpet?

Fresh versus hot

Anonymous Coward

Yep, 20 years ago I was doing some research into protocol stacks for a now mostly defunct telecoms company.

Boss says go onto freshmeat.com (which was like an open-source software site which I'd never heard of before) and there are some examples of things to look at... I rock up on a Monday and type in hotmeat.com and a whole parade of goatse like artwork filled the screen. Quite put me off my breakfast. Did own up immediately to IT about that...

Hey, this is ElReg! No kink shaming!

jake

I once sent a rather steamy love letter to my Boss, and a system status report to my girlfriend (now Wife). Thankfully, they both found it hysterical. No harm, no foul. An extra pint that evening helped :-)

Side note: Rubbermaid sells all kinds of things, not just cleaning gear.

Evil Auditor

It still puzzles me that anyone would access any NSFW sites from their work computer (except for mishaps with spelling). I mean, there usually are enough unattended and unlocked computers from colleagues around just waiting to be abused.

dwodmots

Why did all user accounts contain the browser history of his admin account?

Sounds fake.

Korev

Maybe this was long enough a go that there was only one account on each machine ie Windows 9x

Anonymous Coward

Only if you are incompetent and didn't know how to configure Win 95.

But I guess it explains a lot if you worked in an IT department who were dumb enough to image 95 and install it on 100 machines with the same licence key and port sites stashed in the browser history.

Phones Sheridan

With Win 95/98/Me you didn't need 1 licence key, the last 5 digits could be any number you liked. There was no phone home like today.

Customers

Caver_Dave

I worked for a company that made set top boxes to access the Internet before PC's became pervasive.

Occasionally, a customer would send back a box that "would not access a particular site".

They were unvaryingly a site of 'special interest'. 99% of the time the user content filter had not blocked them (it was not turned on!), but there was something dodgy about the sites HTML.

Other sites that the customer was not complaining about were used to stock the content filter that parents could turn on.

We had a lad straight out of University who was employed to test the content filter, but I'm not sure it was the plumb job he made it out to be.

Re: Customers

Korev

Whilst at university, I vaguely knew a graphic designer who got a job working on the layout of these "speciality" publications, which he assumed was the ultimate job. It turns out he got bored of that kind of imagery very quickly...

Re: Customers

jake

"I worked for a company that made set top boxes to access the Internet before PC's became pervasive."

Eh? What country had set-top box Internet access before personal computers were pervasive?

Re: Customers

Cian_

There was a relatively common, 56k modem based STB pushed by a cable TV company in Ireland, a Unison Box, which were about a third or less of the price of a PC at the time. Lots of people got burnt buying those instead thinking it was a good cheaper option.

I've never got my hands on one to figure out what they ran but I'd guess WinCE on SH or ARM.

Re: Customers

Phones Sheridan

NTL provided mine, it was like teletext on steroids, all controlled by the, er, controller. About a year later they provided a proper box with an RJ45 on the back, into which I popped a linksys NAT router that would only work with my PC NIC MAC address cloned into it.

Re: Customers

lostsomehwere

France did, sort of

Luckily he had a legitimate reason for having visited the site

chivo243

Well, DUH!!! It was his assigned task! Get the content filter working. But don't visit any NSFW sites while doing it??? WTF???

lglethal

I thought that the complaint from upper management would be that they could no longer get to Playboy.com...

Other ways to justify access

T. F. M. Reader

I remember the times when Mr. Hefner's flagship publication had a very good computer/gadgetry section. Written by one of the technically-minded bunnies. They (bunnies) were not brainless at all, and I did read the magazine "for the articles" - honest!

The literary section was excellent.

bullshit detected

lvm

"before browsers could be set to deny access to certain sorts of content" - oh really? Which modern desktop browser lets you block adult content on its own - without add-ons and such?

Out o'curiosity ...

jake

... seeing as we all know what content playboy.com has always hosted, what did our hero need from that site to set filters? The individual pictures wouldn't be of any help, nor would the names of the files said pictures were contained in, nor the directory names in the file system. Etc.

All he had to do was block the domain. Which didn't require a visit.

And no, in the days of Win95 there was no "machine learning" that could be trained on pR0n.

Re: Out o'curiosity ...

Giles C

In the article he said he tried to visit the site and it was blocked- so the filters worked however the browser would still have the site in the history as usually most filters replace the content with a stop looking message or similar.

The problem is the machines imaged would still have the name in the history and autocomplete would probably catch you typing pl… and fill in a useful suggestion.

Re: Out o'curiosity ...

jake

I missed that somehow. Mea culpa.

I simply MUST get a new prescription for my reading glasses ...

Not on my watch...

Little Mouse

We occasionally had to temporarily add some "interesting" sites to the whitelist during my time employed at a mental health hospital, to help facilitate treatment. The old adage that "there's a fetish for everything" is pretty close to the mark.

But we did have to tell one beardy doctor exactly where to go when he demanded that one patient have access to some scarily illegal stuff (to help wean them off it, apparently...). Even if he had come back with a court order granting full exemption (he didn't), I'd still have said No way.

Bits and Bobs all over the screen

Notrodney

Many years ago a friend and colleague of mine was setting up a new content filter on the company network. He'd just finished configuring it as I went to grab him for lunch, so he thought he would give me a quick demo to show how it worked. Pasted in a dodgy link and hit go... unfortunately although the filter stopped the first page, it didn't stop the pages that automatically popped up from there, or the pages that popped up from them... and so on and so on. The screen filled up with bits and bobs faster than he could close them. The only way to stop them was to hit the power button.

Your/our computer(s) had suffered a memory leak, and we are waiting for them to be topped up.