Slashdot Mirror


TCP/IP Over HTTP

Nick Towers sends news of a nifty new RFC that has just come out - RFC 3093, the Firewall Enhancement Protocol, promises to reduce the hassle of setting up a firewall by tunneling any TCP/IP application over HTTP.

126 comments

  1. Oh sure, I agree by Anonymous Coward · · Score: 1

    Because TCP/IP over HTTP was so fucking subtle I could have beat you over the head with it.

    In fact, theres still time. Open the door when I knock, theres a good chap.

    1. Re:Oh sure, I agree by Stephen+Samuel · · Score: 2
      What's so nasty about the idea of TCP over HTTP? It's been done with the SSH protocol -- sometimes for similar reasons. (though with SSH, it's a little bit more likely to be done legitimately than I would expect with ssh).

      Of course, then I could see encrypting the http stream by encapsulating an ssh stream in it... Then I'd pick up my email via:

      • POP over
      • TCP encoded and encapsulated by
      • SSH under TCP
      • encapsulated within HTTP
      • Transmitted over TCP
      And pray that it's not being done on an appletalk or SNA network.

      Of course, trying to do UDP under these circumstances would be a travesty.
      --

      --
      Free Software: Like love, it grows best when given away.
  2. My dream worthless TCP/IP carrier by Micah · · Score: 2

    Floppy disks!

    I bet it could be done with a module to the Linux kernel.

    Seriously. You have a box with no network card or other connectivity except a floppy drive. You fire up Netscape and try to access Slashdot.org.

    It writes the TCP syn packet to the floppy and beeps. You take the disk and put it into a box with real connectivity. It then reads the packet off the disk and sends the request. Slashdot responds and you have a TCP connection. It writes the confirmation to the disk and you take it back to the other box.

    The unconnected box sees there's a connection and writes a packet containing the HTTP request. Then you take the disk over to the other box and it sends it and gets the responce. Probably the whole page would come without any further disk swaps, except the images.

    So you take the disk, which now has the Slashdot home page, to the unconnected box and it gets read in via the TCP floppy stack. Netscape then requests the immages, so the Syn packets for those TCP connections all get written to the disk.

    Repeat the previous couple steps for all the images. Repeat the whole process every time you access a story or other doc!

    Heck, you could even do telnet connections that way, if you run the disk back and forth between every few words you type. And you wouldn't see what you type until you bring the disk back with the responce. :-)

    Question to kernel gurus: Am I correct in assuming that that would not be terribly difficult to implement? If I didn't have more important things to do, I'd almost be motivated to try it. :-)

    1. Re:My dream worthless TCP/IP carrier by Mulligan · · Score: 1

      Actually, I have a friend who used to teach programming in Turkey back in the early days of the 'net. At that time, the entire _country_ was connected to the rest of the net via a 9600 baud link to Germany. The servers on either end would get so backed up that occasionally (every week or two) they would offload the entire mail spool onto tape and snail mail it to the other end where it would be loaded back onto the network.

    2. Re:My dream worthless TCP/IP carrier by sulli · · Score: 2

      Write an RFC, they'll probably publish it next year. If you have time today, submit it to this thread!

      --

      sulli
      RTFJ.
  3. It's funny cause it's true. by Klaruz · · Score: 1

    I havn't tunneled full tcp/ip, but I often set up services on http/https ports to get past a certain over-restrictive firewall. Gotta wonder what the people at the network center are thinking when they see an ssl connection open for 4 hours.

  4. This would be funny if it weren't basically true by Phaid · · Score: 3

    If you look at the IPP (Internet Printing Protocol, RFC 2567), you'll notice that it's a protocol designed to encapsulate printing in HTTP POST operations. The motivation for this? Ease of administration, since so many firewalls out there already allow HTTP out, it makes remote printing much easier for end users. Of course, the fact that HTTP is basically a client-driven, instantaneous response protocol totally inappropriate to things like delayed spooled printing and reporting of asynchronous printer error conditions hasn't ever stopped the IETF from forging ahead with this.

    All hail the Printer Working Group!

  5. Re:RFC 31337 by talks_to_birds · · Score: 1
    RFC 31337 you better recognize

    Now, *that* was *really* boring...

    t_t_b
    --
    I think not; therefore I ain't®

    --
    I'm on PJ's "enemies" list! Are you?
  6. Re:SOAP parody by mvw · · Score: 2

    Me thinks you're completely right.

  7. enough with the april fools crap already by geek · · Score: 1

    jesus christ, enough man

    1. Re:enough with the april fools crap already by garcia · · Score: 1

      no no, we can't have worthwhile news any other day, why not have completely worthless news today? I mean, hell, let's go back to the past 3 April Fools and see if we can't repeat some of those fucking posts, maybe they were funnier.

    2. Re:enough with the april fools crap already by Royster · · Score: 1

      And the Japanese who also put the year first.

      --
      I have discovered a truly marvelous sig, unfortunately the sig limit is too small to contain i
    3. Re:enough with the april fools crap already by ajakk · · Score: 3

      Its February 4th? Damn, that international date line thingy really isn't working well these days is it? :)

    4. Re:enough with the april fools crap already by gimpboy · · Score: 1

      dont you mean january 4th?

      use LaTeX? want an online reference manager that

      --
      -- john
    5. Re:enough with the april fools crap already by gimpboy · · Score: 1

      hell i was referring to this sentence:

      wasn't there some rule about not making jokes past midday on 01-04?

      use LaTeX? want an online reference manager that

      --
      -- john
    6. Re:enough with the april fools crap already by plague3106 · · Score: 1

      Actually the US system makes more sense to me; the first number tells me exactly which piece of the year i'm dealing with. If i'm putting something on my calendar, i go to the correct month FIRST. Then i find the day. The day being first to me is meaningless, b/c i don't know quite where it goes yet. At least, thats my thought process.

    7. Re:enough with the april fools crap already by pipacs · · Score: 1

      "2001 aprilis 1": that's how the Hungarians say it. "2001/4/1" is the shortened form. Consistent with what they say, and consistent with the direction of time as we feel it. Too bad it's only the Hungarians.

    8. Re:enough with the april fools crap already by stylewagon · · Score: 1

      Yeah - worse still, it's 6:54am 02/04/01 here in Australia... Somebody tell'em it's bad luck to make April Fools jokes when it's no longer April Fools day...

      wasn't there some rule about not making jokes past midday on 01-04?

      --

      *** I am the real stylewagon

    9. Re:enough with the april fools crap already by grammar+nazi · · Score: 3
      It's funny how the rest of the world likes to point out their differences from the United States and make it sound bad that we do things differently. I have a few comments about your post:

      1. . The idea behind it is that the units, days, months, years, go in ascending order of magnitude. The US system, in all its wisdom, uses an apparantly random order.
      Ascending order seems backwards to me. When you name file versions by changing the date and you sort the files by name, then the files end up in some weird order. I name files using the descending order 01-04-01 (I guess today is a bad example).

      The date format I use isn't mm-dd-yy because it's a random order. I use mm-dd-yy because that is what all of my coworkers, family, and clients use. I know that it bothers most people, but i _do_ live in the U.S. so I date things according to the way that the U.S. does it.

      3. As far as your question goes, here's an answer: The US does it the way that they do because of what you said April, 02, 2001 -> 04-02-02. We didn't switch it back so that it would 'make more sense' in the same way that microsoft will never put the 'shut down' command anywhere but within the 'start' menu. People are just used to it.

      By the way, mod me as a troll if you like, but Slashdot April Fool's addition sucks this year.

      --

      Keeping /. free of grammatical errors for ~5 years.
    10. Re:enough with the april fools crap already by Ergo2000 · · Score: 1

      The world should use ISO 8601 and nothing else.

    11. Re:enough with the april fools crap already by terrymah · · Score: 1

      Funny how your nick is grammar nazi.

      Where did #2 go?

      Doesn't "April, 02, 2001" equal 04-02-01?

      Don't you mean "Slashdot April Fool's edition sucks this year"? Last time I checked addition was a mathmatical operation.

      You should be modded as a hypocrite, not a troll. Oh well. At least you spelled grammar correctly.

    12. Re:enough with the april fools crap already by thefallingsickness · · Score: 1

      I believe the point is, why did it happen like that in the first place? It really doesn't make any sense why would reverse the order from the rest of the world. Of course, neither one of them provides that much advantage over the other. It only serves to cause confusion all over the world...hehe.

  8. This isn't an April Fool's joke! by Marc+Slemko · · Score: 2

    Well, ok, the particular protocol is. But the reality is there are a staggering number of (slightly) more specialized protocols designed to do exactly this.

    Very interesting how "well used/abused" (depending on your perspective) HTTP is, and how stupid many firewalling policies are.

  9. SOAP parody by "Zow" · · Score: 4

    I think this RFC is actually a parody of SOAP, as chronicaled in Bruce Schneier's June 2000 Crypto-Gram.

    -"Zow"

    1. Re:SOAP parody by EJB · · Score: 1

      Not really. I've bored my collegues with my complaints about the stupidity of system adminstrators more than once, and these complaints all went exactly along the lines of the fake RFC.

      I've you're a hacker that wanted to continue sending secret information from within a firewall to outside the firewall, they could do exactly what the RFC described (the may save some time by simply sending it to some CGI script, but implementing full IP is certainly an option)

      Firewalls, on outgoing connections, really provide no security at all, but make any kind of efficiency in a new IP-based protocol impossible :-)

      Erwin

  10. Re:A lot more, actually :) by demo · · Score: 2

    Hmm.. Seems I forgot

    RFC748 - Telnet randomly-lose option.

    *sigh*

    --
    ---
  11. A lot more, actually :) by demo · · Score: 5
    Just to sum up most of the April Fools RFCs over the years...
    • RFC3093 - Firewall Enhancement Protocol (FEP).
    • RFC3092 - Etymology of "Foo".
    • RFC3091 - Pi Digit Generation Protocol.
    • RFC2795 - The Infinite Monkey Protocol Suite (IMPS).
    • RFC2551 - The Roman Standards Process -- Revision III.
    • RFC2550 - Y10K and Beyond.
    • RFC2549 - IP over Avian Carriers with Quality of Service.
    • RFC2325 - Definitions of Managed Objects for Drip-Type Heated Beverage Hardware Devices using SMIv2
    • RFC2324 - Hyper Text Coffee Pot Control Protocol (HTCPCP/1.0).
    • RFC2323 - IETF Identification and Security Guidelines.
    • RFC2322 - Management of IP numbers by peg-dhcp.
    • RFC2321 - RITA -- The Reliable Internetwork Troubleshooting Agent.
    • RFC2100 - The Naming of Hosts.
    • RFC1927 - Suggested Additional MIME Types for Associating Documents.
    • RFC1926 - An Experimental Encapsulation of IP Datagrams on Top of ATM.
    • RFC1925 - The Twelve Networking Truths.
    • RFC1924 - A Compact Representation of IPv6 Addresses.
    • RFC1776 - The Address is the Message. S. Crocker.
    • RFC1607 - A VIEW FROM THE 21ST CENTURY. V. Cerf.
    • RFC1606 - A Historical Perspective On The Usage Of IP Version 9.
    • RFC1605 - SONET to Sonnet Translation.
    • RFC1438 - Internet Engineering Task Force Statements Of Boredom (SOBs).
    • RFC1437 - The Extension of MIME Content-Types to a New Medium.
    • RFC1313 - Today's Programming for KRFC AM 1313 Internet Talk Radio.
    • RFC1217 - Memo from the Consortium for Slow Commotion Research (CSCR).
    • RFC1216 - Gigabit network economics and paradigm shifts.
    • RFC1149 - Standard for the transmission of IP datagrams on avian carriers.
    • RFC1097 - Telnet subliminal-message option.
    Did I miss any?
    --
    ---
    1. Re:A lot more, actually :) by Eil · · Score: 2

      Your link to RFC1313 is either slashdotted or broken.

  12. httptunnel by Rozzin · · Score: 1

    What about httptunnel?

    --
    -rozzin.
  13. Benefits only firewall vendors by AIXadmin · · Score: 1

    Great idea guys, right along the spirit of WebDAV. The unfortunate part is, that you efforts will be defeated with a software upgrade for firewalls from vendors. ...... inconvenienced). Firewalls work, and have a place in the Internet. However, Firewalls are built to protect from external threats, not internal ones. Our proposed protocol does not break the security model of the Firewall; it still protects against all external risks that a particular Firewall can protect against. For our protocol to..... I find this statement most troubling. A firewall protects the outside, and the inside. The firewall protects the outside by preventing external intruders from gaining unauthorized access to the internal network. The firewall also protects employees from themselves in many cases by keeping them from using unauthorized services that may 1, bring the network to its knees by crunching the bandwidth available. Or 2, By stopping a sabetour/employee from committing industrial espionage. If you firewall traversal protocol went through. It wouldn't allow more invoations. It would just cause firewall companies to upgrade their software to screen the packets on port 80 for only true web traffic. That is all. Firewall vendors support you because, you will force companies to pay for costly major upgrades to their firewall.
    Cheers,
    Tomas
    ===========

    1. Re:Benefits only firewall vendors by tweek · · Score: 2

      "However, Firewalls are built to protect from external threats, not internal ones."

      Excuse me? I restrict what traffic is allowed outbound and require authentication on port 80 since it restricts most applications that aren't proxy aware.

      Here's the issue. If someone were to get something inside the firewall, I want to make goddamn sure it doesn't make it's way back out. I'd rather deal with a situation where something has tried to get out but couldn't and then clean up the mess rather than wonder if something got out in the process.

      That is all. Feel free to argue back ;)

      --
      "Fighting the underpants gnomes since 1998!" "Bruce Schneier knows the state of schroedinger's cat"
  14. RFC3092 - everything2 by The+Famous+Brett+Wat · · Score: 2

    CmdrTaco et al can take pride in the fact that everything2 was cited as a reference in RFC3092 for its entry on "Prince Foo". I had my personal 15 minutes of fame last year with RFC2795 (reference number one, no less).

    --
    proof, n. A demonstration that a conclusion is implied by certain premises and axioms.
  15. see RFC 1149 (There's nothing new in the world...) by jurgen · · Score: 2

    TCP via HTTP? Hah... see RFC 1149, "Standard for the transmission of IP datagrams on avian carriers", i.e. IP over carrier pidgeons. That one came out 4/1/1990. I also vaguely remember seeing something about TCP via UUCP on around this time of year in the mid-90s... TCP via UUCP would presumably have lower latency than RFC 1149, but still be a bit of a pain for interactive use.

  16. Re:Daylight savings...(OT) by grappler · · Score: 1
    If you live in the pacific time zone, you could choose Pacific Standard or Pacific Daylight in your preferences.

    Guess what the "Daylight" means?

    (actually, you could choose a lot more than those, but I don kno whi yod wa-whallaballa bing bang shleebin gurkin flam, flam, flam, flam,

    gooooooooooooooooone...

    --

    --
    Vidi, Vici, Veni
  17. Re:question by GC · · Score: 1

    I'm laughing.... are you a troll?

  18. Give me Avian Carriers anyday... by GC · · Score: 2

    The AF on avian carriers beats this hands down.

    Not to mention the follow-up RFC update with QoS

  19. jsockets by bmarklein · · Score: 1

    "JSockets® is a general purpose 'firewall tunneling' product used to deliver Java applets and business objects from the application server to the general Internet. It provides full-duplex communication support and allows a client to listen for connections from other JSockets clients. Essentially, we have rewritten TCP/IP to run over HTTP."

  20. Wheeee by Dr.+Sp0ng · · Score: 2

    I didn't read the article, but I'm guessing (based on the rest of the comments here) that this is an April fools' joke. Regardless, this isn't all that interesting - HTTP proxies can already proxy random TCP connections. I don't remember the exact protocol, but you connect to the proxy and send something like this:

    CONNECT some.other.server:theport

    ... and then anything you send through that connection to the proxy will be sent to the other machine, and vice versa. It's kinda neat. I don't know if this is a standard thing, but at least Junkbuster and Squid support it. Helped me out a bit before I had set up NAT and only had one box connected to the internet on my local network - I hacked up BeAIM to go through junkbuster :) Worked great. On a related note, this is why open source software is good. Otherwise I wouldn't have been able to use an AIM client (some might argue that this is a good thing though...)

    Anyway, I don't think it would take a lot of voodoo to get the kernel to handle this transparently.
    --

  21. TCP over HTTP eh? by Shadow_Bwa · · Score: 2

    Great! Now I can tunnel into Internet Explorer!

    Oh wait, that wasn't funny.

  22. Umm... by ryanr · · Score: 3

    I guess they don't realize that some people actually do this? VTCP/Secure from Infoexpress does in fact have a mode that tunnels over HTTP.

    1. Re:Umm... by Fjord · · Score: 2
      I agree. While this is an attept at humour, it would make sense if such a tunnelling RFC existed. Weblogic tunnels their t3 protocol over http so that you can connect to EJBs from applets. There are many uses for tunnelling TCP/IP over HTTP.

      And yes, I know that HTTP runs over TCP/IP. SSH runs over TCP/IP and it does TCP/IP tunnelling. Damn handy as well. Removes a lot of the NAT problems with VNC, while encrypting your connection.

      --
      -no broken link
    2. Re:Umm... by aozilla · · Score: 2

      We wish to thank the many Firewall vendors who have supported our work to re-enable the innovation that made the Internet great, without giving up the cellophane fig leaf of security that a Firewall provides.

      Hmm, I think maybe that is the point. That companies deploying firewalls should just give up on trying to protect against such things?
      --
      ok then your [sic] infringing on my copyright! Could you as [sic] me next time before STEALING my comments for your own?
  23. Re:Fun, Fun, Fun!!! by dead_penguin · · Score: 1

    I do believe I have been inspired... I am going to begin coding immediately and the entire implementation shall be written in.... ash!

    Parrot is obviously the language this should be implemented in!

    --

    It's only software!
  24. Two more by James+Lanfear · · Score: 3

    RFCs 3091 (Pi Digit Generation Protocol) and 3092 (Etymology of "Foo") are also available. Looking over the comments here, they're probably funnier, too.

  25. Re:They must be serving via Win95 by MadAhab · · Score: 3

    It's a bug in Microsoft's development libraries. There was a discussion about it on Bugtraq, with a link to a FAQ . It's not a Y2K bug, so no one will bother tracking the productivity lost as a result, which is too bad, because it could be really big. And yes, changing the clock on your computer at work does count as lost productivity.

    Boss of nothin. Big deal.
    Son, go get daddy's hard plastic eyes.

    --
    Expanding a vast wasteland since 1996.
  26. I want Exceed on my Windows Terminal Server! by xixax · · Score: 1

    So I can run Java VM on NT on Solaris on Linux on NT on Solaris. Then I symlink /dev/random to a cron script that submits stories to /.

    --
    "Everything is adjustable, provided you have the right tools"
  27. Re:This is brilliant by seanw · · Score: 1


    of course you realize that, at this point, depending what media you're transmiting this over, you can't fit anything more than headers into a packet. and maybe not even that.

    sean

  28. Don't forget last year's classic... by GuavaBerry · · Score: 4

    RFC 2795 (Infinite Monkey Control Protocol) is by far the best RFC I've ever read.

  29. Re:yeah this is an april fools joke by QuoteMstr · · Score: 3
    What's more is, and I'm sure somebody could argue this; but HTTP uses UDP connections. The entire TCP/IP Protocol suite requires TCP connections which are more complicated than simple UDP - using HTTP a true TCP connection is impossible.

    You are so wrong. HTTP uses TCP. Therefore, TCP over HTTP would be fine, technically (if senseless)

    As for your assertion that TCP could not be implemented on top of UDP anyway, think about this --- TCP is implemented on top of IP. IP is an _unreliable_ protocol as well. It's perfectly possible to implement a reliabl protocol on top of UDP or any other unrealiable protocol using the types of mechanisms TCP does.

  30. Subtle humor rocks. by invenustus · · Score: 2
    I just want to throw in my $0.02 and say that this year's crop of April Fools stuff is as good as if not better than any other year's, because it's all very subtle and isn't obviously false when you first read it, and because it shows that the entire Slashdot staff have not let success go to their heads and can laugh at themselves. Great job, guys.


    (Although I was hoping for a goatse.cx story....)
    ----
    "Here to discuss how the AOL merger will affect consumers is the CEO of AOL."

    --
    grep -ri 'should work' /usr/src/linux | wc -l
  31. Re:They must be serving via Win95 by Wire+Tap · · Score: 1

    You mean the 31 Sunday in March? I had that problem today on one of my Windows 98 SE boxes, but this is the first time it has happened on here. Really strange.... Any ideas?

    --

    Man is born free; and everywhere he is in chains.

  32. Daylight savings...(OT) by Wire+Tap · · Score: 2

    Has anyone else noticed that /. has not changed their time in accordance with daylight savings?

    --

    Man is born free; and everywhere he is in chains.

    1. Re:Daylight savings...(OT) by Walterk · · Score: 1

      What's daylight? And why are we trying to save it?

    2. Re:Daylight savings...(OT) by Idolatre · · Score: 3

      Daylight saving is an april fool, DON'T DO IT

    3. Re:Daylight savings...(OT) by Another+boring+name · · Score: 1

      They won't. They expect you to change it in your user settings.

  33. Re:question by sparty · · Score: 1

    Wait a minute...let's look at those odds again:

    1 out of 100 tests is inaccurate. No tests give a false negative. That means that, out of every 100 tests, 1 is a false positive.

    Out of every 100,000 tests is a true positive.

    By a, 1,000 out of every 100,000 tests will be a false positive.

    Therefore only 1 out of every 1,000 people who test positive will have the disease.

    So, in other words, I'm going to get the same number of projects done as I was before--none of 'em!

    Wanna see my resume? I'm looking for a summer job.

  34. Re:question by sparty · · Score: 1

    Grrr....remind me to apply a cluestick to FrontPage at the earliest convenience. The problem, quite simply, is that our "wonderful" personalweb server is no longer accessible to post via any method other than FrontPage (so far as I can determine...it certainly isn't SMB-accessible anymore). So I'm limited to posting with FrontPage, which leaves me somewhat at its mercy for links...grrr....this is why I like Emacs much, much better for HTML tasks.

    granted, I am a blooming idiot for not checking that first, but I threw the page up in .5 seconds while I was in a lab (no FP on my personal PC, thank God) and forgot that FrontPage likes to do things like that.

    Why no HTML? It's not a layout language, and all the people I've talked to have preferred either Word or PDF format.

  35. Re: fixed it, at new address by sparty · · Score: 1

    Okay, I now have my resume up on my box, rather than the local "personal page" server. That should work (no FrontPage involved this time).

  36. Re:They must be serving via Win95 by plague3106 · · Score: 1

    I would hope most companies have a program runnign to sync the time with a master server.

  37. SOAP is the real joke by hey · · Score: 1
    SOAP tries to shovel everything through port 80 because it's open to firewalls...

    ...and they are serious!!!

  38. Re:This is brilliant by JoeGee · · Score: 1

    My brain is dribbling out of my ears ...

    Thankfully, desktop supercomputers like the one mentioned here exist to carry us into the brave new world of security by massively recursive recursion. :)

    --

    Get off my virtual lawn, you damned virtual kids!
  39. It doesn't have to be an april fools joke by twivel · · Score: 3
    While this RFC may indeed have been designed as an april fools joke, there is indeed a need for such a thing.

    I have seen firewalls that are overly strict, but they allow HTTP or HTTPS through them. If you have a host on the outside and a client on the inside, you can setup a PPP connection using stunnel between the two machines. Then you can do anything you like (including display a browser from the outside host back, run icq, etc. The cool thing is, if you use stunnel you can encapsulate it over https. This gives you the ability to have a secure, non-monitored, encryted connection to the outside host.

    Goto www.stunnel.org and you'll actually find examples of tunneling ppp (and thus tcp/ip) over HTTPS.

    --
    Twivel

  40. Re:This is brilliant by T-Punkt · · Score: 1

    No, with TCP there doesn't have to be a one to one relation between packets. Actually, with TCP you don't even have much control about wich data will be put in which packet, since the TCP/IP stack will take care of this and splits the stream into packets.

    Oh, and BTW:
    IP has the function to fragment large packets.

  41. Even better! by mindriot · · Score: 1

    Hey, I just found a way to tunnel HTTP over TCP! Oh, wait. Never mind.

  42. Re:A Better April Fools Joke by FunkyChild · · Score: 1

    Compaq Australia had a good one last year too. They took out a big full colour advertisement in the Sydney Morning Herald (one of the more respectable newspapers in Sydney) advertising a new technology for their laptop computers, to charge themselves by dialling up to the internet and using the power from the phone line to charge their batteries. It was really quite clever and had me going for a while. It's great to see that they had the balls to do it on such a grand scale too.

  43. Re:question by MrHat · · Score: 2

    I'd go for a one-week orgy if there were no false positives. Given the circumstances, though, I'd probably just settle for two days worth.


    43rd Law of Computing: Anything that can go wr

  44. Re:This is brilliant by irksome · · Score: 1

    Just remember, in order to truly understand recursion, we must first understand recursion.

    -

  45. Re:Not to be picky but.... by Stephen+Samuel · · Score: 2
    It's daylight saving...no "s".

    They originally called them Standard Time and Savings Time, but the abbreviations were too confusing.
    --

    --
    Free Software: Like love, it grows best when given away.
  46. Re:yeah this is an april fools joke by smcavoy · · Score: 1

    Actually I believe this would be possible, but totally useless. You could possibly develop some sort of queuing system that be able to "qeue" incomming / out going packets. then make it alternate with PUT/GET requests. Again this would serve no real purpose. Anyone else? could this be possible or am I too stoned to relize that it isn't?

  47. April Fools by Walterk · · Score: 1

    I think we've read enough bull for one April Fools. Isn't there any REAL news that's actually true?

    1. Re:April Fools by MwtrV · · Score: 2

      Umm, this doesn't sound entirely out of the question to me.

      They have something that does TCP/IP over e-mail, of all things. Getting into the network stack wouldn't be *that* difficult, unless you lacked root on the box. It seems less viable, though, when taking into consideration often environments in which strict Tcp access controls are implemented very rarely can administrator access be had on the users NT machine.

      While it may just be an RFC, it still could be implemented. It struck me as kind of neat. What seems so outrageous about it?

      --
      mwtr / THIS SIG HAS BEEN PRAYED OVER AND MAY BE USED AS A POINT OF CONTACT (ACTS 19:12)
  48. Other very "insightful" RFCs by Carlos+Laviola · · Score: 1

    I know almost nobody will read this, but don't miss the other RFCs released on April 1st, 2001. True gems like the Pi Digit Generation protocol, that states "One REQUIRED PIgen service is defined as a stateless TCP service. A server listens on TCP port 314159.".

    And also, don't miss this very interesting RFC called the Etimology of foo, with more than useful information about the foobar!

    At least, these are _technical_ April Fools jokes :-)


    You're tired of Slashdot ads? Get junkbuster now!

  49. Re:question by Gorobei · · Score: 2

    Um, your resume is on your j: drive. This is obviously not internet accessible. Also, why not provide a version in HTML or PS? Word is a nasty proprietary format.

  50. Re:Will the madness ever end? by Hellcheese · · Score: 2

    I'd like you to show the audience exactly what TCPv4 is. My bet is you'd find it a bit of a struggle. IPv4 yes, but TCP, probably not.

  51. nice resume by ArchieBunker · · Score: 1

    you dumbass those links just point to a drive letter. I'm sure as hell not hiring you.

    --
    Only the State obtains its revenue by coercion. - Murray Rothbard
    1. Re:nice resume by Anonymous+Slackard · · Score: 1

      I'll hire him. I have a vacancy in our janitorial department.

  52. uh... by yzquxnet · · Score: 1

    generally speaking... wouldn't you send your http information over tcp/ip... soooo... why would you go through all the trouble of trying to get you tcp/ip data into an http data which is going over tcp/ip... to me, this just sounds like a complicated solution to a simple problem. It's probably going to cause more problems in the process as well. And man... how big is the stack going to be when everything is done too?

  53. ok I feel stupid. by yzquxnet · · Score: 1

    OK, now I realize, it was suppose to be funny. Gee, when did I lose my sense of humor?

  54. stateless though? by digitalsushi · · Score: 1

    i dont know enough about either tcp or http, so i have to ask, could you even encapsulate tcp in http when http is stateless?

    --
    slashdot: where everyone yells sarcastic metaphors to themselves to understand the issue
  55. Set up the server then... by oddityfds · · Score: 1
    So someone set up a server (for a fee) for those poor @home users (they're behind really bad firewalls, right?)...

    You can run PPP over GNU httptunnel. The same thing, really, but no joke.

    /abo (10 Mb/s Ethernet internet connection straight to his home, and no freakin' firewalls!)

  56. actualy... by elegant7x · · Score: 2

    You are so wrong. HTTP uses TCP. Therefore, TCP over HTTP would be fine, technically (if

    He's wrong, but, so are you (although in a much more subtle manner). HTTP is supposed to be transport independent. You could do it over a raw teletype if you wanted to. But when you use HTTP on the web, you are making TCP connections

    Rate me on Picture-rate.com

    --

    "and dear god does this website suck now." -- CmdrTaco
  57. another use by startled · · Score: 2

    Many wireless devices don't have TCP/IP, since it's not worth implementing it-- they're just there for HTTP, so they use an easier transfer protocol more suitable to wireless. That means, though, that on a lot of those clients you don't have TCP/IP, which certainly cuts down on hackability. This might be an easy way to implement TCP/IP, without having to hack their proprietary protocol. Yeah, it'd probably be slow as hell on a wireless e-mail client, but....

  58. Written by a real SOB by cacheMan · · Score: 1

    I like that the email address was sob@harvard.edu

  59. Protocol Descriptions ROCK! by cmat · · Score: 1

    hehe I had to laugh when I read this:

    TCP_UP - The 16-bit TCP Urgent Pointer, encoded as the hex representation of the value of the field. The hex string MUST be capitalized since it is urgent.
    Heeehehehe... I can just imagine someone actually reading this and trying to immpl. it hehe.. oh the horror. ;)
    Chris

    --
    -- Humans, because the hardware IS the software.
  60. Maybe... by Rura+Penthe · · Score: 1

    Maybe we should mod up troll posts to +5, haha, that'd be a funny April Fools! Well, at least funny when compared to the Slashdot postings. :)

  61. Re:yeah this is an april fools joke by 3247 · · Score: 1
    "... but HTTP uses UDP connections ..."
    No, it uses TCP. Furhter, there are no "UDP connections" because UDP is a connectionless protocol.

    Still, it would certainly be possible to tunnel TCP over UDP just as it is possible to use IP as the transport for TCP.

    Someone of the German computer magazine c't even experimented with TCP-over-DNS. (The background is that a company provided a toll-free 0800 number for IP access but with firewalls so that you could only access support web servers ... and resolve arbitrary domain names. No, it wasn't an April issue.)

    --
    Claus
  62. Re: This is brilliant by 3247 · · Score: 1

    You can already do this with SECSH and PPP.

    --
    Claus
  63. yeah this is an april fools joke by Ace905 · · Score: 1

    QUiCK, STOP P0STING!!!

    It's an April Fools Joke. The RFC was written 1, APRIL 2001. It is not written well, and it was obviously done in a hurry.

    It mentions many times over that "we respect the right of people to use a firewall"; yet the RFC proposes circumventing a firewall completely at every level. It is a JOKE.

    What's more is, and I'm sure somebody could argue this; but HTTP uses UDP connections. The entire TCP/IP Protocol suite requires TCP connections which are more complicated than simple UDP - using HTTP a true TCP connection is impossible.

    The pranksters are probably network admins themselves, and thought it would be funny to write an RFC that claims employees on an internal network are actually smart enough to decide which of their programs are good - which is why the mention, "Best of all, no need to bother a network admin".

    Just thought I'd mention it so I can start hating every idiot who posts on this one.

    --

    Ace
    1. Re:yeah this is an april fools joke by curious.corn · · Score: 1

      Flame on
      How 'bout ditching TCP/IP in favour of ATM?
      Flame off
      ;-)

      --
      Mi domando chi à il mandante di tutte le cazzate che faccio - Altan
    2. Re:yeah this is an april fools joke by Chakat · · Score: 1

      What? We're now supposed to ditch sending packets and start sending messages via Automated Teller Machines (I guess it's worse, we could be sending messages by automated Penn machines)

      --

      If god had intended you to be naked, you would have been born that way.

  64. Re:question by Ace905 · · Score: 2

    "Wanna see my resume? I'm looking for a summer job."

    Hope you're not looking for a job in computers, but I wouldn't know because the link to your resume points to a file on your hard drive; probably behind an un-firewall enhanced firewalled system.

    Or it could just be you don't have a webserver running on J:\.

    --

    Ace
  65. I've got a new protocol for you... by curious.corn · · Score: 1

    Listen up people this is the next big thing! Although it's still in draft the idea is to print packets on A4 papers and mail them to destination, reassembe and scan... the best thing is that it can switch to a special mode to send emails! I think I should patent it... Edo

    --
    Mi domando chi à il mandante di tutte le cazzate che faccio - Altan
  66. Recursive protocols by Alien54 · · Score: 2
    Either this becomes the ultimate in recursive protocols, or else this the start of a plot to take down by using it to to create a massive series on infinite loops between home computers and the rest of the planet.

    Wait ... Spam does that now with the ask off questions.

    we are doomed

    Check out the Vinny the Vampire comic strip

    --
    "It is a greater offense to steal men's labor, than their clothes"
  67. If this was true... by evilpaul13 · · Score: 1

    It would be a huge security problem to say the least. Virtually uncontrolled outbound traffic.

  68. Not entirely April Fools. by riflemann · · Score: 2

    IP over HTTP implementation:

    http://www.nocrew.org/software/httptunnel.html

  69. April '98 was funnier by Imran+Ghory · · Score: 1

    With the Hyper Text Coffee Pot Control Protocol (HTCPCP/1.0)

    Unfortunatly the way we're going now the protocol may actualy become useful one day....

    Imagine, BeCoffee, All your coffee needs catered for using fully RFC compliant software, order your coffee anytime any where from over the internet. Never have to wait for instant coffee again !

    --
    -- Conexant/Rockwell Modem HOWTO http://linuxdoc.org/HOWTO/Conexant+Rockwell-modem- HOWTO/
  70. Re:XML is a better wrapper by ultrabot · · Score: 1
    XML is a much better place to start because it already tunnels through HTTP (port 80).

    Errr.. What? There ís no connection between xml and http (excluding SOAP), you could as well send any arbitrary ascii-based format.

    --
    Save your wrists today - switch to Dvorak
  71. Re:question by empesey · · Score: 1

    You really have no grasp on basic mathematics do you?

    Stop contaminating the gene pool.

  72. Re:question by empesey · · Score: 2

    You go to the doctor for a test to see whether you have a certain very deadly disease. One in a hundred thousand people have this disease. This test is 99% accurate and NEVER gives a false negative.

    I know I'd spend my time figuring out how a test can be 99% accurate and NEVER give a false negative.

  73. Hmm by Cirvam · · Score: 1

    So with all of the RFC's you could transmit TCP/IP over HTTP which is over TCP which is over IP which is being transmitted by avian carriers!

    1. Re:Hmm by Bobo+the+Space+Chimp · · Score: 1

      Well, it will allow it until firewalls are built to stop it. Then you'll need a mini-HTTP protocol inside that to get around that. Until firewalls are built to stop that.

      Overall, it serves nothing but an evil purpose -- to allow porn surfing at work.

      Full steam ahead!

      --
      I am for the complete Trantorization of Earth.
  74. I am suspecting, by Bender+Unit+22 · · Score: 1

    Hello!
    I would like to comment on this subject.
    Now I have read the RFC and all the posts here and I am beginning to suspect that it is a April fools joke.


    Yours truly,
    Homer Simpson
    --------
    Heh, I just wanted to be another one who made the "discovery", and needed to show everyone that I am clever. :-)
    --------

  75. Ah yes, criminal evolution at its finest. by AFCArchvile · · Score: 1
    ...promises to reduce the hassle of setting up a firewall by tunneling any TCP/IP application over HTTP.

    And to think, only 50 years ago, the same type of people were evading a stone wall by tunneling an escape path under the penitentiary.

    --
    "Ancillary does not mean you get to rule the world." --U.S. Circuit Judge Harry Edwards, speaking to the FCC's lawyer
  76. XML is a better wrapper by KarmaBlackballed · · Score: 2

    XML is a much better place to start because it already tunnels through HTTP (port 80). All that remains to do is establish a parser on the server side and a parser on the client side to convert the traffic back into TCP/IP.

    But no matter what the approach, the overhead would mean this is only useful when all options have been exhausted. (e.g., You have an application that goes straight TCP/IP and cant be changed AND the firewall administrator will not open another port for you.)


    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    ~~ the real world is much simpler ~~

    --

    --- -- - -
    Give me LIBERTY, or give me a check.
  77. heh by jobber-d · · Score: 1

    The one funny thing to come out of all these april fools posts is the amount of people who think theyre smart by discovering that the posts are indeed april fools jokes and must share their discovery with the rest of slashdot

  78. Will the madness ever end? by bertok · · Score: 1

    Ok, let me get this straight: You start with IPv4, run TCPv4 over that, make a standard HTTP connection, and tunnel TCPv4 through that. Why stop there? Why not tunnel IPv6 over the tunnelled TCP connection? Then you can run TCPv6 over the IPv6 connection, and make a HTTP connection through it all!

  79. Re:question by Johnny+Starrock · · Score: 2

    it could give a false positive every now and again.

    or something, just ignore me.. i'm going to go stare at a shiny object now.

    --

    end communication
  80. Not to be picky but.... by SCHecklerX · · Score: 2

    It's daylight saving...no "s".

  81. This is brilliant by NonSequor · · Score: 3
    I can run TCP/IP over HTTP and then run HTTP over that, and then run TCP/IP over that, and then HTTP, and then run TCP/IP over that, and then run HTTP over that, and then run TCP/IP over that, and then run HTTP over that, and then run TCP/IP over that, and then run HTTP over that, and then go into an infinite recursion.

    Er... Well, y'know. You can't make an omelette without um... destroying a forest. Or something.

    --
    My only political goal is to see to it that no political party achieves its goals.
  82. They must be serving via Win95 by MeowMeow+Jones · · Score: 2
    There's a bug in Win95 that doesn't change Daylight Savings this year until next Sunday.

    Trolls throughout history:

    --

    Trolls throughout history:
    Jonathan Swift

  83. Layers reversed! by NineNine · · Score: 1

    Duh! Again, I go away on a honeymoon, and I instantly forget what day it is... Jeez... TCP/IP over HTTP...

  84. Fun, Fun, Fun!!! by Hercynium · · Score: 1

    I do believe I have been inspired... I am going to begin coding immediately and the entire implementation shall be written in.... ash!

    *Chuckles to Doggy_Door_Man*

    --
    I'm done with sigs. Sigs are lame.
  85. April Fools' Crap by samrolken · · Score: 1

    If Rob Malda owned Google, would Google mess with the search results to make life worse? I read slashdot to get news. Not to be entertained by an obviously bored CmdrTaco.

    --
    samrolken
  86. Would this even work? by Anonymous+Slackard · · Score: 1

    How would UDP over HTTP work?, how the heck can you have an unreliable protocol over HTTP? As soon as you try to drop one damn UDP packet, you'd get a 'network unreachable.' Or would it be a 404, page not found? Damn I miss DECNET. (On the plus side, you could have traceroute implemented by hyperlinks.)

  87. Yeah, enough. by geomcbay · · Score: 1
    Most respectable publications, whether they are web based or not, tend to focus on ONE April Fools Day joke. You see, when you have one subtle joke hiding within the regular content, people are taken off guard and the joke works (assuming its funny to begin with).

    When EVERY STORY is an April Fools day joke, it just gets really fucking boring and after the first 'joke' people begin to suspiciously eye all other content assuming its a joke by default. Thus any humor those other jokes may have had is pretty much lost.

    Next year you might want to try having ONE April Fools Day joke that is Slashdot specific and then linking all the other cool jokes people submit from other sites as one big quickie post.

  88. Use SSL instead by Zeinfeld · · Score: 2
    A lower overhead method of achieving the same effect is to use SSL. This has the additional advantage that the encryption protects against countermeasures by the firewall admin.

    There are quite a few commercial products that use this trick.

    --
    Looking for an Information Security student project suggestion?
    Try http://dotcrimeManifesto.com/
  89. RFC 31337 by deran9ed · · Score: 2


    RFC 31337 you better recognize

  90. Introducing AFLP... by JohnnyKnoxville · · Score: 2

    That's The April Fools Limitation Protocol. It can be very handy when implemented around this time of year.

  91. Obviously a prank... by JediTrainer · · Score: 2

    Ok, ok. Don't get all worked up about it - it's obviously a joke. Here's what I found near the bottom:

    3.4 TCP Header Compression

    Compressing TCP headers in the face of a protocol such as this one
    that explodes the size of packets is silly, so we ignore it.

    4.0 Security Considerations

    Since this protocol deals with Firewalls there are no real security
    considerations.

    5.0 Acknowledgements

    We wish to thank the many Firewall vendors who have supported our
    work to re-enable the innovation that made the Internet great,
    without giving up the cellophane fig leaf of security that a Firewall
    provides.

    --

    You can accomplish anything you set your mind to. The impossible just takes a little longer.
  92. You are correct by Sycraft-fu · · Score: 2

    On both counts (HTTP runs on TCP/IP and this is a joke) however he is correct that there are solutions to tunnel TCP/IP through HTTP and through other things. I know it sounds silly at first but there are many uses. I'll point out one of the more common ones, L2TP. Suppose I work at a major instutition and want access to their network from home. Well as it happens both they and I have phatty internet conenctions. Great, I can use those right? Errr, well except that is a security risk, since our data is sensitive. So, what do we do? Setup a virtual private network (using L2TP). Basically, I connect to a server at work using TCP/IP, then I and it establish a L2TP connection. Encapsulated in that encrypted L2TP connection is TCP/IP packets, that it then decrypts and routes tot eh corperate network. The point of the excersie is, of course, that I can use an encrypted stream to access the resources. The point of the encapsulation is that then EVERYTHING I do is encrypted, wether the application supports encryption or not. As far as all my apps know, they are communication via TCP/IP. However those TCP/IP packets are taken, encrypter, encaplulated in other TCP/IP packets, then sent out to the destination where they are reformed. As such I have created a network that is secure and acts like a private point-to-point link, but done it using the public internet and encryption.

  93. question by TrollFeeder · · Score: 1
    Here's a question for a lazy April first:

    You go to the doctor for a test to see whether you have a certain very deadly disease. One in a hundred thousand people have this disease. This test is 99% accurate and NEVER gives a false negative.

    Unfortunately (horrors) you test positive.

    Given these dismal odds, how will you spend your last days on Earth? Put another way, which of your coding projects will you scramble to finish?

    --
    "May the forces of evil become confused on the way to your house"

    --

    --
    "May the forces of evil become confused on the way to your house"
    -George Carlin

  94. TCP/IP over HTTP by Bruha · · Score: 1

    Actually it works pretty good. I mean you jump in the tunnel of HTTP and down you go. And you get switched by ftp to the atm to the rfc to the isd to the isp to the ipx to the spx to the oh my I've gone cross-eyed again.

  95. look at the date by terri+rolle · · Score: 1

    Look at the date on the RFC (Request for Comments) itself. It's April 1. April Fools Day. I have a sneaking suspicion that someone is trying to put one over on us.

    1. Re:look at the date by terri+rolle · · Score: 1


      by Anonymous Coward on Sunday April 01, @06:27PM EDT (#128)
      Please eat a bullet. The worldwide average IQ would probably rise 5 points if you were dead.

      I wouldn't be so quick to make remarks about other people's IQs. After all, you're the only one who bit on this lamest of trolls.

  96. This is getting dull by Another+boring+name · · Score: 1

    Give us goatsex instead.

  97. A Better April Fools Joke by SickKiwi · · Score: 1

    I submitted this but /. wouldn't publish. Try this - only for the lonely...
    The Compaq Personal Gene Analyser"