At a time when Google is promising to end search censorship in China, a new report has now revealed that Microsoft censors its Bing search engine returns in Arab countries even more heavily than the countries themselves do using national Internet filters. The study covered the United Arab Emirates, Syria, Algeria, and Jordan, and found heavy censorship of anything relating to sex.

"It is interesting that Microsoft's implementation of this type of wholesale social content censorship for the entire "Arabian countries" region is in fact not being practiced by many of the Arab government censors themselves," reads a new report from the Open Net Initiative (ONI), a partnership of the Citizen Lab at the University of Toronto, the Berkman Center for Internet & Society at Harvard, and the SecDev Group, a company in Ottawa. It adds: "It is unclear, however, whether Bing's keyword filtering in the Arab countries is an initiative from Microsoft, or whether any or all of the Arab states have asked Microsoft to comply with local censorship practices or laws."

ONI performed the study by testing the search terms inside the countries. Banned words include "sex," " "intercourse," "breast," "nude," and many more in both the English and Arabic language. The investigators also made a curious discovery: Bing engineers remembered to bar ordinary Arabs from searching for the word "penis" but not for the word "vagina." But they left no stone unturned when it came to blocking words that might lead to sites having to do with homosexuality.

When someone attempts to search most sex-related terms, Bing informs searchers: "Your country or region requires a strict Bing SafeSearch setting, which filters out results that might contain adult content."

The report comes just two days after a U.S. Sen. Richard Durbin, D-Ill, said during a hearing on Capitol Hill that he'd soon propose legislation imposing civil or even criminal sanctions against Internet companies that don't do enough to support freedom of expression and human rights abroad. The legislation has not yet been filed.

Most people leave a trail when surfing the Web. Information such as a computer's IP address can be traced back to users, or used to reconstruct a profile of browsing habits. Search engines amass large quantities of data on individuals. Though they don't store this along with usernames, researchers have previously shown that individuals can still be identified using this data.

People who want to avoid leaving this trail can turn to services such as Tor, an open-source system designed to muddy the path a user's data travels over the Internet (see "Dissent Made Safer"). But Tor struggles with slow network performance, and the service might be overwhelmed if too many users adopted it without also contributing resources.

Last week, at the 9th annual Privacy Enhancing Technologies Symposium, researchers described some more robust protections. They wondered if privacy protection could come from the ISPs responsible for the backbone of the Internet.

One project, anon.next, presented by Matthew Wright, who co-directs the iSec research lab at the University of Texas at Arlington, looks ahead to next-generation deployments of the Internet itself. In the event of a redesign of Internet architecture, Wright argues, proxies that help preserve anonymity could be built in. He envisions working with ISPs to determine points in the network where the proxies would be effective both in terms of protection and performance.

Other researchers are looking for solutions that could work on the Web as it is today. Barath Raghavan, a visiting assistant professor at Williams College in Massachusetts, along with researchers from the University of California, San Diego, and the University of Washington, suggest a protocol that could effectively hide a user's IP address within the rest of an Internet service provider's traffic. The researchers say that adding their system wouldn't hurt performance, and would work in conjunction with Tor and other privacy-protection services. They suggest that ISPs might be willing to add the protocol as a benefit to attract customers, similar to services offered by telephone companies that prevent users from being identified by called ID.

While ISPs are a logical place to turn for privacy help, events such as the passage of the Patriot Act in the United States, which made it possible for the authorities to demand information without a subpoena, make ISPs uncertain allies. The bottom line is, they're only likely to help if there's a large customer demand for privacy.

Most people think of online privacy as something most important for citizen journalists in countries with oppressive regimes. However, the number of business models that rely on the collection and sale of user data may for some people in this country to reconsider taking steps to protect it.