Internet Blocking¶
An Internet intervention that prevents a selected user, endpoint, route, protocol, domain, or content object from reaching or acting on a network resource within a declared scope and duration.
Core Idea¶
Internet Blocking is an Internet intervention that prevents a selected user, endpoint, route, protocol, domain, or content object from reaching or acting on a network resource within a declared scope and duration.
A blocking system resolves a target selector at an enforcement point and prevents a specified Internet capability: name resolution, packet delivery, connection establishment, content retrieval, account interaction, or platform visibility. The same target can be blocked at DNS, IP, transport, URL, application, account, or device layers, and each choice has different precision, observability, collateral effects, and circumvention paths.
Scope of Application¶
The abstraction has a bounded but recurring habitat. These are literal applications of the same domain machinery, not cross-domain metaphors.
- Network censorship. states or access providers deny reachability to selected services or content.
- Platform moderation. accounts or objects lose visibility or interaction capabilities under platform rules.
- Security controls. malicious domains, command channels, and compromised endpoints are denied at resolvers, gateways, or clients.
- Parental and institutional filtering. local policy constrains categories of destinations or applications.
- Copyright and gambling enforcement. court or regulator orders are translated into ISP or resolver deny rules.
- Abuse prevention. users block accounts from contacting, viewing, or following them within a platform.
Clarity¶
A complete blocking record names who cannot do what to which resource, where the deny rule is enforced, how the target is matched, and for how long. 'Website X is blocked' is incomplete when DNS returns a synthetic address for some resolvers but direct IP connections or mirrors remain reachable.
Manages Complexity¶
The abstraction separates policy intent from technical realization. It makes precision, collateral damage, transparency, and bypass properties comparable across layers, while preserving the distinction between removing a source and interfering with one access path.
The compression remains accountable because every simplification has a named validity condition. A user can ask which role is missing, which assumption fails, and which neighboring abstraction should replace the candidate instead of treating the label as an unanalyzed bundle.
Abstract Reasoning¶
R1. Name the denied capability rather than saying only 'access'.
R2. Resolve selector granularity and shared dependencies before predicting collateral effects.
R3. Locate the enforcement point and the observer who can verify the block.
R4. Test both over-blocking and under-blocking.
R5. Distinguish bypass of the rule from removal of the underlying restriction or content.
Knowledge Transfer¶
Within Internet infrastructure and online platforms, the selector–enforcement–capability model transfers literally. Generic Access Control is the parent that travels to buildings, files, and organizations; Internet Blocking remains domain-specific because DNS, routing, protocols, platforms, encryption, and circumvention determine its operation.
The transfer boundary follows from the classification test: The denial relation recurs across platforms, networks, and censorship systems, while selector layer, enforcement point, affected capability, jurisdiction, observability, and circumvention remain Internet-specific semantics.
Relationships to Other Abstractions¶
Current abstraction Internet Blocking Domain-specific
Parents (1) — more general patterns this builds on
-
Internet Blocking is a kind of Access Control Prime
Access Control. is the strict generic parent for allow/deny decisions.
Hierarchy paths (3) — routes to 3 parentless roots
- Internet Blocking → Access Control → Authority
- Internet Blocking → Access Control → Boundary
- Internet Blocking → Access Control → Constraint
Neighborhood in Abstraction Space¶
Internet Blocking sits in a sparse region of the domain-specific corpus (69th percentile for distinctiveness): few abstractions share its structure, so a faithful description tends to retrieve it precisely.
Family — Unclustered & Miscellaneous (1565 abstractions)
Nearest neighbors
- Server-Side Request Forgery — 0.86
- Geotargeting — 0.86
- Fallacy of the Secure Network — 0.84
- Source Protection — 0.84
- Context model — 0.83
Computed from structural-signature embeddings · 2026-09-08