How do I get around Block Script?

[SaraKC]

I don't have Internet at home, so the only chance I get is at work through a proxy. But now one of the sites I visit has installed Block Script, and it blocks the proxy. Does anyone have any suggestions how I could get around this. Thanks. http://www.blockscript.com/

[Steven_Lake]

Well, the first and easiest way is simply to use a different proxy. The second method, which is one I've used for ages, is to create an SSH tunnel. But first you need to find out what ports are open and what aren't. To do this, you need to be able to do port scanning. Nmap from Insecure.org works well for this. Be aware though, depending on the sysadmin you have, it might get you in trouble, so be forewarned. Sysadmins (of which I used to be) tend to frown on its use, because to them it means you're either trying to do something shady (ie, against the rules), or you have a virus in your machine and it needs to be dealt with quickly.

Next, find a friend who will loan you their internet connection, and maybe the space required for a server. If they're geeky enough and have a server of their own, have them open a specific port and then let you ssh to it. The idea here is that you're creating an SSH tunnel. The advantages are, 1) it can't be monitored, so short of your sysadmin/boss/evil overlord catching you surfing sites you shouldn't, they'll never know what you're doing. They might however not like the idea you're using SSH and shut you down anyways, so that's still a possibility.

The primary reasons for being so draconian on what sites you can and can't surf at work are two fold. 1) you're on the clock, ie company time, and thus you should be working and being productive, and not web surfing. If you're surfing, many employers consider that as "stealing" company time, and typically frown on that. Not me obviously, as I always believed that, if you have all your work done, I don't care if you're on the clock or not, as you can surf/game/chat/etc all you want within company rules. Most bosses though aren't that benevolent, a tragedy in my opinion, but that's another topic. Reason 2) is because the proxy settings help prevent A) potential viruses from infecting your machine, and B) help put a damper on the potential spread of any that do succeed in getting through your PC's defenses.

Anyhow, this tutorial (http://www.revsys.com/writings/quicktips/ssh-tunnel.html) will walk you through the basics of ssh tunneling if you're using Linux. For Windows or Mac using Putty, you'll need to break down the sections of the command into the individual fields required by the program. You may need to do some more google diving for other tutorials on ssh tunneling if this one doesn't help you, but that's more or less what you need to do.

[Stacia Kane]

I don't mean to sound rude here, but have you considered just getting the internet at home?

You can even buy pay-as-you-go internet dongles pretty inexpensively, and you just plug them into your computer at home and use them, so you don't have to mess about with setting up monthly billing, getting things installed, and having the phone or cable or whatever hooked up and all of that. I'm not sure where in the world you are, but I recently had to do that--buy a dongle--and it was 120 hours of internet time for £45, and I had ninety days in which to use those hours. I was pretty impressed with the speed/service as well. So that's an option, if for some reason you don't want to get an actual provider yourself. :)

Like I said I don't mean to sound insulting and I hope I don't; I'm genuinely offering what I hope is helpful advice re the dongle thing. But while I'm sure Steven_Lake's advice is good and he knows what he's talking about, I personally would be very leery of doing something outside-the-lines with a company computer.

[Medievalist]

But while I'm sure Steven_Lake's advice is good and he knows what he's talking about, I personally would be very leery of doing something outside-the-lines with a company computer.

You mean like not pissing off an employer by violating company policies and being fired without a reference?

[kuwisdelu]

or Mac using Putty

This is completely off-topic, but there's no need for that. OS X is also *nix. Just open a Terminal window.

[Williebee]

And, depending upon where the individual works, violating a state or federal law or three?

[Steven_Lake]

You mean like not pissing off an employer by violating company policies and being fired without a reference?
I fully agree that you shouldn't do anything outside of company policy, hence my reason for giving my disclaimer, and then the answer to how they could do it. So if it's against company policy or somehow illegal, I don't recommend they do it. If it's neither of these, then they have a working solution for getting around the problem.
And, depending upon where the individual works, violating a state or federal law or three?
I'm guessing you're referring to the "anti-circumvention" laws? Hmm, I can see your point, but if I remember the laws correctly, it only applies if you "break" the protection, not go around it. SSH tunneling doesn't actually break the security, and thus it's not considered illegal. At least I haven't seen anyone at the Fed say so yet. But then again, I haven't been a sysop in a few years, so that could have changed. I'm just commenting on my last and best available knowledge.

Now, back to the OP. I didn't happen to think about this before, but SaraKC (http://absolutewrite.com/forums/member.php?u=53546), can you tell us what this site or sites are that you can't get to anymore? Also, is there a company policy that tells why said sites are blocked from work? If the sites are rather harmless (like this one for example), they may be blocked simply on the grounds of a list recommended by a security company because said site(s) fell under a specific criteria which the admin and/or bosses wanted blocked, and thus it got blanket banned with a variety of offending sites.

Case in point. Back at the company I worked for, sysops, tech support, and operations all had access to AOL Instant Messanger (AIM), ICQ, and most other instant messaging clients. Partially because we used them for communication between desks and departments (and states), and partially because we needed them for customer interaction from time to time. We also had almost complete, unhindered web access in order to do our jobs. Customer Service however had ZERO access to IM, only 1% access to the web (ie, they only had access to a few public sites they needed to do their job, plus any corporately hosted sites) and our central database because if they didn't, the CS reps would goof off or ignore customers while they IM chatted or surfed the web. They also tended to naively go to sites that introduced viruses into their machines, and ultimately the network as a whole.

So I would probably first start by getting internet access at your home. If that's not possible, discuss your reasons for using company computers and internet for personal surfing with your boss and/or sysadmin. If they allow you to do that, use the SSH tunneling I showed you. (friend with net connection and server required) But if they don't allow you to do anything like that, consider using either the library or an internet cafe. You could also use the free internet connection at a local restaurant or store. Just be sure to do it by their rules, which usually involves a purchase prior to use.

There's lots of different ways you could go about surfing the web for personal reasons. Just be sure you use the legal methods. :)

PS to Mods: Sorry if my first post sounded like I was condoning the OP to do something illegal. That wasn't my aim. It was my assumption that they would or had done what was right and checked all the proper and legal avenues first before proceeding. I will endeavor not to make such assumptions in the future.

[Williebee]

No worries, Steven. We're an odd corner of the web with thousands of active members from all over the world -- China, Japan, Portugal, Mexico, Venezuela, US, Canada, Australia (one law does not fit all, in other words) and writers and industry professionals covering the gamut of genres, fiction and nonfiction.

As a result, we are both very cautious about advice given in respects to real world activities, in order to avoid adding to the legal correspondence in Mac's inbox; and always willing to explore the possibilities of "how to" in terms of what might be possible in a fictional world. Like I said, an odd corner of the world.

Welcome to it, by the way!

[SaraKC]

The problem isn't at work. We always managed to surf which sites we wanted to with just about any proxy. It's one of the sites we like to visit that has installed Block Script that is causing the grief. The proxies can't get past it.

[Williebee]

If I understand this correctly, what Miss SaraKC is running into at work is Block Script (http://www.blockscript.com/)


It is designed to keep unwanted traffic from viewing or accessing the contents of your website/webserver. In effect, and perhaps with the best of intentions, Miss SaraKC is asking us to tell her how to hack a website.

For all of the previously stated reasons, we won't be doing that. No offense taken, SaraKC, and none intended.

ETA: I'm going to close this for now. A room mod may choose to reopen it, at their discretion.

MORE ETA: I want to be clear that I don't think SaraKC is up to anything nefarious here. She may have had no idea that was, in fact, what she was asking for (much as folks who hotlink (http://www.free-webhosts.com/definition/hotlinking.php) a photo into a post or avatar often have no idea that it may be an act of bandwidth theft, theft of content and possibly dangerous.)