Magazine

GayCalgary® Magazine

http://www.gaycalgary.com/a3593 [copy]

Was 'Censorship' debacle Daily Xtra’s own fault?

IT expert believes Tim Hortons may not be to blame

News by Rob Diaz-Marino (From July 2013 Online)
DailyXtra.com blocked as "SPAM"
DailyXtra.com blocked as "SPAM"
QueerClick.com blocked as "Pornography/Sex"
QueerClick.com blocked as "Pornography/Sex"
Squirt.org blocked as "Pornography/Sex"
Squirt.org blocked as "Pornography/Sex"
Advertisement:

After receiving an apology themselves, Daily Xtra may owe Canadian coffee giant Tim Hortons a much bigger apology in return after launching public accusations of ‘Censorship’ that spread to mainstream media.

Dailyxtra.com, which launched mid-July to replace Xtra.ca, received reports that readers were unable to reach their LGBT news website when using the free wireless service provided at Tim Hortons coffee shops across Canada.  This WIFI service has been available for close to a year.

On July 19th (10:41am), Daily Xtra posted an article on their website that explained they had contacted the Tim Hortons WIFI system administrator, requesting to be unblocked, and the system administrator refused, saying, "While there is no way to change this decision, we can assure you that it was not an easy decision to make."

But according to an IT expert, the situation is much more complicated than that, and in fact there may have been no decision at all on the part of Tim Hortons.

"Sometimes it’s not as simple as removing a website from a block list," says Steve Polyak, who aside from publishing GayCalgary Magazine, has over 20 years of IT background and has administered the hosting solution for the GayCalgary.com website and numerous other websites.  Polyak says that keeping the GayCalgary.com website off of blacklists is tricky due to the nature of automated safety measures in place across the internet to prevent Email abuse and the spread of viruses.

"Spammers are relentless," he explains.  "A lot of times they will exploit security vulnerabilities in other people’s servers and networks to send out bulk messages.  They will monitor internet traffic and systematically try to break into each Email account to try to use their mail server as a relay.  They do this because it’s harder to block them when their Emails come from legitimate sources.  So any web or mail server that doesn’t take sufficient measures to prevent this, becomes as much of a threat as the spammers themselves."

A few hours prior to Tim Hortons unblocking the Dailyxtra.com website, I pulled into the parking lot of the Tim Hortons coffee shop nearest to me.  I logged onto their free wireless service and, after accepting their terms of use disclaimer, I tested the availability of a number of websites.  Websites of other LGBT media outlets, like GayCalgary.com, OUTtv.ca, and Fugues.com were not blocked; adult sites like Squirt.org, Gay411.com, Bear411.com, and even Playboy.com were blocked – as expected from their terms of use - with the message: "Access Denied / Access to (website) is not permitted as it is classified as: Pornography/Sex".  But as for Dailyxtra.ca, they had a similar message except instead of Pornography/Sex, they were classified as "SPAM".  (Manhunt.net and apps like SCRUFF were still fully accessible.)

"Many legitimate websites get added to SPAM blacklists because their web or mail servers are not configured correctly, or they have inconsistencies in their identifying information.  This sets off flags that they might be spammers, or might have been hacked and used as a SPAM relay," explains Polyak.  "I’ve found our mail server for GayCalgary.com added to SPAM blacklists in the past, and tried to contact them to remove us, but they would either refuse until we fixed our servers to meet their criteria, or they would remove us and we’d end up back on their lists a few months later.  Some even wanted money to expedite the removal process."

Polyak says some of these third-party blacklists, which include sites like www.spamhaus.org, www.backscatterer.org, and www.barracudacentral.org, are used around the world by mail servers and internet service providers to filter incoming Emails as SPAM, or altogether block potentially dangerous sources from reaching internet users.

Several years ago when Polyak discovered that Emails sent from the GayCalgary.com mail server were suddenly not getting through to users on Email services like Hotmail or Gmail, he took the time to research why this was happening, and discovered the blacklists.

"Blacklists count on spammers doing a quick and dirty hack job, so they look for inconsistencies, such as the originating IP address of an Email not matching that of the mail server it is supposedly coming from.  Some of the corrections I had to make to our server configuration were really picky - a server could run fine without them, but to the Blacklists they made a difference.  It took a bit of trial and error, and a few months of waiting before the Blacklist providers returned to review our server configuration, but eventually they removed us.  I rarely dealt with a human; nearly all of this process was automated."

Polyak says that on July 20th when he tried a reverse DNS lookup (a type of diagnostic that can be performed on any site) on the Dailyxtra.com domain, it revealed some inconsistencies in their server configuration that may be getting them flagged as potential spammers.  "The IP address for Dailyxtra.com is identifying itself as mail.xtra.ca.  That inconsistency right there is potentially a red flag, it should be identifying itself as www.Dailyxtra.com."  He cites a number of other examples which are not included here for brevity and due to technical complexity.

Polyak says that before he knew about the blacklists, he himself suspected that online services like Hotmail.com might be discriminating against gay content when Emails from GayCalgary.com, Priape.com, and various other LGBT sites were consistently ending up in his Junk mail folder.  However, it confused him that so too did Email from Xbox.com, a Microsoft product just like Hotmail itself.  He says that consumers of these third party blacklists like Hotmail are often helpless to control which sites end up blocked.  Additionally, staying off the blacklists is a constant battle, as methods for identifying spammers are frequently changing to combat the spammers’ latest tricks.

But on the other hand, not having this form of protection would be catastrophic.  "The internet would be unusable if it weren’t for safety measures like these to slow spammers down," Polyak says.  "It’s not perfect, but it’s necessary."

While the average internet user is free to access potentially harmful websites, Tim Hortons WIFI service goes through a company called DataValet.com, which among other things does filtering to ensure their WIFI users are protected.  DataValet.com is the party responsible for the "Blocked" messages due to Pornography or SPAM that were mentioned earlier in this article.

"Most likely Dailyxtra.com got onto a blacklist that DataValet uses to block pornography and potentially harmful sites from being accessed on their WIFI," Polyak suggests.  He adds that he doubts the person from Tim Hortons who wrote the letter to Dailyxtra.com quoted in their article, truly understood why their site was blocked, or why they believed Dailyxtra.com could not be removed from the blacklist.  "But Dailyxtra.com did not do the same research that I did, if they are concluding that this is ‘censorship’ and blaming Tim Hortons for it."

Although Tim Hortons issued an apology and "unblocked" Dailyxtra.com, Polyak says the news outlet is in for a rough ride ahead.

"Until they clean up their server configuration, this will keep happening to Dailyxtra.com.  It is probably already happening elsewhere."

Indeed, DataValet.com, who provide the WIFI service, boasts "over 5000 customer locations", and "15,000 customer network devices monitored and supported" (as of 2012).  It is unclear whether Dailyxtra.com was unblocked strictly on Tim Hortons’ WIFI service, or across the entire DataValet.com customer base.

"Tim Hortons was unlucky enough to be the first instance that they noticed," says Polyak.  Furthermore, by Dailyxtra.com forcing Tim Hortons hand to unblock the website, Tim’s could be exposing their customers to harm if the website is hacked due to its configuration flaws, defeating the whole purpose of having their safety filter.  "Ultimately, only Dailyxtra.com can fix the root cause on their servers to get off the blacklists.  That is the right way to fix this."

When we contacted tech support for DataValet.com, they weren’t able to confirm Dailyxtra.com had been blocked due to a blacklist in time for this article, but they concurred that Polyak’s theory was highly likely.

Polyak is further appalled by the public outcry that the article caused against Tim Hortons, and how far the story spread in the mainstream media: CBC, The Globe and Mail, Huffington Post, The Edmonton Journal, and MSN.com have all picked up the story, among others.

"It is obvious that nobody consulted an IT expert in this field before continuing to relay the finger-pointing at Tim Hortons – otherwise this would have stopped," Polyak continues. "There is a whole layer of complexity to this story that is being left out, and it makes all the difference in the question of who is really responsible for this happening.  I think Tim Horton’s doesn’t even realize they may not be at fault, I think they are just taking Dailyxtra.com’s word that they have done something wrong.  Dailyxtra.com may not realize it either."

But Tim Hortons may be paying the price for a ‘crime’ they didn’t commit.

"I’ve seen hundreds of people from the LGBT community saying they’re going to boycott [Tim Hortons] over this.  That is not fair at all.  Even after Dailyxtra.com published that Tim Hortons apologized and corrected the situation, I still saw people in the LGBT community in attack mode."

Michelle Robichaud, a spokesperson for Tim Hortons who responded to Daily Xtra earlier this week, says, "I can assure you we are looking into all of this internally.  If [Polyak’s theory] is indeed the case, then I have no problem contacting Daily Xtra and bringing that to their attention because that's obviously going to be detrimental to them as a publication.  We certainly want to get to the bottom of it, no fingers pointing at anybody, and make sure that it's resolved."

In the meantime, Dailyxtra.com has little to be unhappy about.  Not only is their site unblocked, but the buzz in mainstream media and social networking gained their newly launched website a huge amount of exposure.

And yet, only half an hour after Daily Xtra released the article containing Tim Hortons’ apology (posted Fri, Jul 19, 2013 6:35 pm EDT), the news website released another article containing uncensored, full frontal nude pictures of an Australian rugby player (posted Fri, Jul 19, 2013 7:00 pm EDT).  A number of other LGBT and mainstream news websites carried the same story, but censored versions of the photos were used.

While it’s not our call whether this violates Tim Hortons’ WIFI guidelines of "appropriate for all ages viewing in a public environment", like it or not, this uncensored content it is now fully accessible courtesy of Tim’s on Dailyxtra.com.(GC)

Proof of connection to Tim Hortons WIFI

Comments on this Article