Slashdot Mirror
Triangle Boy Lives
mlinksva writes: "Safeweb cancelled their free service late last year, but their P2P anonymizing proxy, Triangle Boy, has been spotted in the wild (south of Fort Worth, Texas). 'Because of its stealth nature, the P2P software does not show up in reports from many filtering products and the administrator doesn't even know the problem exists and has no way to check it.'(via UniteTheCows)."
Orange, Calif.-based 8e6 Technologies helped conduct the tests.
"The results were startling," said Chad Ingram, network technician at Crowley. "The only filter we tested that stopped Triangle Boy use was the 8e6 Technologies R2000. Then, using the 8e6 Enterprise Reporter, we took a look at the logs to see if we actually had users trying to contact the Triangle Boy network. We found that in the first 48 hours, users had gone to the primary Triangle Boy Website over 30 separate times."
Fucking fancy that! The only way to detect this evil P2P software is to use this peice of software. Of course is just so happens that the people who discovered the shocking truth also sell that product.
It must be the wildest fucking coincedence in the history of computing.
I can understand the concern that people have over Triangle Boy, but one must consider something important (in terms of the school in the article, anyway): Filters in schools are put in place primarily to prevent students from accidentally accessing some content that the parents may sue over. That, and to prevent kids from wasting their schooltime sending emails. However, to make use of the Triangle Boy, one must a) know how to use it, and b) have a specific reason for accessing blocked material. I don't see the liability issue there - its a piece of "stealth" software that the student, of his own free will, has used - despite acceptable measures to prevent he or she from doing so.
*shrug* Just a thought.
Triangle Boy, Triangle Boy,
Triangle Boy hates Filtering Boy,
They have a fight, Triangle wins.
Triangle Boy.
"The school said it is now adjusting its network to detect Triangle Boy and other similar applications." What if anything about this software will keep it from being filtered in the next revisions of filtering software?
The same function as Triangle Boy can easily be duplicated by anyone with a linux box on a permanent Internet connection. Just set up an HTTPS squid proxy.
Clever users will also note that you can tunnel this over just about any port you want. Make this an encrypted tunnel and no filter in the world will detect it. If your school/network allows even a single TCP port out to the Internet you can do this. (Some places allow arbitrary TCP ports to be forwarded via the HTTP proxy. Other places may have a SOCKS or similar proxy available. Those would both work for this in the event all direct connections are blocked.)
I do miss Safeweb. That open proxy was very helpful for casual browsing. The closest non-open substitute I've found is http://www.anonymizer.com.
Opinions on the Twiddler2 hand-held keyboard?
Just a discovery of TB being used in Crowley Independent School District and you called it "spotted in the wild"? How wild could it be? Or you mean this school hosting wild animals?
Sya, which company was it again? This Triangle Boy is surely a threat to my network security! I must go and by the only firewall product that can block this terrorist menace!
Not only do they get their press release on siliconvalley.internet.com, they get a free ad on Slashdot too!
According to this article it works by spoofing the the source address. I know at least my firewall would block that.
And furthermore, it needs to contact a server somewhere (that is, another PC running triangle boy). Now, unless they rely on word-of-mouth to tell people where those servers are, they would have to have one or more (easily blockable) servers to hand out IP-addresses and port numbers to connect to.
I don't know what's the most frightening part. That administrators think they must block users instead of simply having strict but reasonable rules that people will understand and follow? That windows let users install programs like triangle-boy without administrator privileges (or that administrators regularly give users administrator privileges). That most commercial firewalls don't block spoofed addresses? That administrators who for some reason want to lock users in don't know about Triangle boy?
...this one is. It just bounces requests off of other triangle boy users, as opposed to a server you've set up at home.
The same function as Triangle Boy can easily be duplicated by anyone with a linux box on a permanent Internet connection. Just set up an HTTPS squid proxy.
You can do this with SSH too:
ssh -L8080:localhost:8080 yourhomeproxy.org and set http_proxy=http://localhost:8080/I personally have been in a University which performed heavy filtering, and even worked in the IT department of the school. I do not have a problem with blocking or lowering priority for certain p2p apps such as Napster (back in the day), kazaa, etc. I do however have a major problem with filtering web access. While p2p is a major problem in terms of bandwidth and is clearly not for academic purposes (the vast majority of the time), many blocked websites are quite useful for academic purposes. As an example, my school blocked the Google cache and pretty much all translation sites, because they could be "used to access pornographic content" (not neccessarily images). It seems that the possible benefits of said cache (which include pdf -> html and .doc -> html converters) and benefits of all the translation software massively outweigh the possible use for reading pornographic content. I must say, I welcome all such apps as triangle boy and hope to see them spread more widely, as it appears that is the only way we will keep the internet a place where information flows freely, without restrictions from those who would love to brainwash the masses. May Triangle Boy, Peekabooty, and any other similar projects flourish.
How do you think you'll get that non-HTTP data through an HTTP proxy? You can't. You have to use an HTTP tunnel that will pass through the proxy.
I google searched for Triangle Boy... and found articles about it... and some stuff saying that the source code was released...
But I gave up trying to find it.
Anybody wanna post where to get it?
Also looking for it on p2p networks...
haven't found it yet
Great, now Jack Valenti is going to be scouring Texas for an adolescent cowboy jew.
They're using their grammar skills there.
Triangle man, Triangle man Triangle man hates particle man They have a fight, Triangle wins Triangle man
squid support the 'CONNECT' method which allows forwarding of arbitrary tcp connections (that's how it supports https).
A public school system in a country that values democracy and free speech filters its web access, most likely for not only pornography but also for hate speech, breast cancer information, and 2600.com, and is now desperately trying to get rid of a stealthy program that is meant to circumvent the oppression of free speech in repressive dictatorships.
From what I saw in my time in the US school system, this sad, ironic situation pretty well sums up how the school system here works.
I personally have been in a University which performed heavy filtering
Did everybody on campus go to chapel together?
Did they also have lights-out in the dorms at 11pm, after the "Dorm Mother" made sure that all members of the opposite sex had signed out and left?
Did they hold seminars explaining that "self-abuse" could lead to blindness and hairy palms?
Did they ban Elvis for swiveling his hips, and look askance at all the "groovy" kids who went to the campus rally for Adlai Stevenson's presidential campaign?
Policies like your uni's scare me a lot more than the thought that some geek might be pullin' his pud to pictures of Paulina Porizkova.
Opinions on the Twiddler2 hand-held keyboard?
Shouldn't we be able to mod comments down as 'potty mouthed'??
. . .
Boy does this sort of advisory wind me up. FUD about users downloading applications, I've seen this on almost every pitch for expensive firwalls and security consultancy recently.
This ought to be so simple - do not allow users to have sufficient priviledges to install software!
Problem solved.
Okay, before I get flamed, this won't work for developer teams or your admins - for whom I merely suggest you can implement a draconian contract - i.e. fire anyone using any software not explicitly authorised (a minimum policy imo) and have a regular *external* audit.
Neither will this work for networks of Win9x clients, because you can't set appropriate secuirity policies. However you could always get SMS from M$$$$ or write your own scripts to call registry entries and check them against a permitted template so as to flag suspicious installations. At the end of the day it may even be worth upgrading your clients. Or just installing Linux and StarOffice, if you can, he he :). But with respect to upgrading even say from Win9x to Win2k, which ain't cheap, it's still probably less expensive than all the FUD claims - even the reality - of lost security and lost productivity from unauthorised use of your network resources and manpower.
Oh yeah, and you *do* only open ports explicitly at your firewall, not close off ports in response to the latest "advisory" don't you :-)
My current company has this policy.
It is a very stable NT network, it works well.
The only real issue is that you have to jump through hoops to get anything non standard installed.
Most users do not need to install applications on their computer.
Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
"Dave Salch, CTO of 8e6 Technologies, said because of its stealth nature, the P2P software does not show up in reports from many filtering products and the administrator doesn't even know the problem exists and has no way to check it."
." I seem to have gone off on a rant....
It seems to me that if the Administrator isn't even aware that it's happening, it must not be too much of "a problem", at least not yet. It's obviously not bringing the network down. Of course as the P2P network grows it might become a problem if users do not act responsibly.
Of course network usage is only part of the equation. Using the network to steal intellectual property is already being used as justification by the entertainment industries to ram digital rights management enabled hardware down out throats.
Yeah, we all know it is really about profits, being able to prevent people from exercising their fair use rights and thus artificially create a market where the music and video industries can charge us for every piece of music we listen to or video that we watch. Eventually we'll all have to pay EVERYTIME we listen to music or view video because it will all be a service. We will pay each month a little for this service and a little for that service.
We won't own CDs and DVDs any more. In their infinite corporate wisdom, the remaining few largest corporations that haven't been gobbled up by other mega-corporations, will simplify our lives by removing the burden of actually owning anything. Won't that be wonderful! Just like John Lennon said "no possestions. .
I think my original point was that the
The race isn't always to the swift... but that's the way to bet!
The last part of my rant:
I think my original point was that the bandwidth usage apparently isn't a real problem yet. Sharing information is what the internet is all about. P2P computing IS a big part of the future however don't steal IP because there are people out there that will use any excuse they can to try to take away our right. Let's not give them any extra ammunition.
The race isn't always to the swift... but that's the way to bet!
Where can I get a Doze binary for this software, I need to reduce my bandwidth immediately...
Unless the filter just blocks all encrypted connections to unknown sites.
Unless the proxy steganographically hides its encrypted data inside what appears to be normal text.
Will I retire or break 10K?
That is until someone in Taiwan spammed a whole bunch of people with my IP address advertising it as a way to get around Chinese Internet censorship (my friend translated the Simplified Chinese in the e-mail). My ISP found out that my IP address was in the e-mail and was pissed and suspended my account (Ironically not because I was running Triangle Boy, but because my IP address was in the e-mail. They though *I* sent out the spam!) I just shut down the program, but lesson learned I guess.
That windows let users install programs like triangle-boy without administrator privileges (or that administrators regularly give users administrator privileges).
The Microsoft Windows 2000 operating system allows unprivileged users to install programs that don't 1. write to the registry outside of HKEY_CURRENT_USER, or 2. write to the filesystem outside of /home (called "/Documents and Settings" in English versions). So do most UNIX systems.
Will I retire or break 10K?
do not allow users to have sufficient priviledges to install software!
write your own scripts to call registry entries
Some programs' installers do NOT write to the registry and do NOT write outside of the user's home directory. How will the Windows operating system detect such an installation?
fire anyone using any software not explicitly authorised
So somebody who in the course of his or her employment happens upon a site with a Java applet (applets are programs) should be fired?
Will I retire or break 10K?
Paulina Porizkova
:)
You're showing your age, bud.
Is this a problem? I've never thought I'd read that free speach and access to it is a "problem". We live in a pretty fucked up time!
Creationists are a lot like zombies. Slow, but powerful and numerous. And they all want to eat our brains.
The only thing that can stop triangle boy is the mighty junior mint :0
I was looking for alliteration. ;)
It's the Adlai Stevenson part that shows age.
Opinions on the Twiddler2 hand-held keyboard?
What university was this? Vatican City U? Pontiff Technical Institute?
Why is this post considered a troll? Just because it links to goatse?
Opinions on the Twiddler2 hand-held keyboard?
I have a big problem with filtering. Especially in public schools and universities. First of all, what do you want to filter? Porn? Hate sites? Please, give me a break. If somebody wants to find porn, they will find it anyway. My high school spend a lot of money on filtering software only to find out that I could simply look up a free proxy put the it in my preferences and browse what ever I wanted. With filtering software I found out that I could not do any reseach on the topics of breast cancer, sex education and related stuff. All because they had words like "sex", "breast" and "vagina" in them. I really think that our public schools and universities should not implement cheesy filtering systems that waste our taxpayer's money. Afterall, kids will learn about sex from different sources that are widely available. Just take a look at Cosmopolitan or Maxim these magazines can be seen at any grocery store and anybody who can read can pick it up and read an article on sex and orgasms.
I was actually one of those HP employees who was fired for emailing pr0n. It seems that goombah bitch Carly Fiorina doesn't appreciate good goatsex pics like the rest of us. Not to mention all my naked RMS pics.
See Subject.
Swearing doesn't make me any less respectful, or any more rude. Why should I be the one to change my standards, when you clearly do not intend to yourself?
By the way, it turns out that not only does Ozzy Ozbourne swear; the Royal Family do too. Does that make the British Royal Family rude and disrepectful?
Fucking does not deal with scatology. Shit is a potty mouthed word. But the word fuck can convey an unmistakable domineering attitude as that poster has illustrated. This often abused word is often used to describe arrogance to pinpoint a tyrannical view. Unfortunately, some cultures and religions especially feel there should be a subset of words that have offensive qualities in themselves. You are taught to feel repressed when you hear this word. George Carlin once described this and six other words in a famous amusing skit that got him in trouble with the FCC.
(craws back underneath bridge)
http://www.der-keiler.de/Mailing-Lists/securityfoc us/security-basics/2001-11/0344.html
If your speech or desired access is offensive to the Chinese government only, you will be safe, but if it is offensive to the US, think again.
Apache can do this all by itself, using mod_ssl and mod_proxy you can setup your own personal tboy-like service. Add basic autorization to it and you can even keep the scr1pt k1dd13 spammers out, something tboy won't do!
this is probably a case of an obvious mismoderation. goatse links won't get much replies anymore so it cannot be a troll. how about redundant?
When the subject is Spam, I see lots of people insisting that they have the right to control what is on their computers. (True)
When the subject changes to filters, suddenly the people who own the computer suddenly lose the right to control the content? The Company you work or or the school that you attend owns that computer that they installed the internet filtering software on, and they have as much right to "censor" internet access on their computer as you have to "censor" email from spammers on your computer.
I'll admit that the commerical filtering software is garbage that often blocks the wrong sites and allows access to some sites that they should have picked up, but that dosen't change the fact that the owners of the computers have the right to install the software.
Don't like the poor software availble? Then start developing an open source filtering software that works better and offer that as an alternitive to the junk that is currently used.
Want full unrestricted access? Use your computer instead of one that was provided to you to do a job or for educational access.
Quemadmodum gladius neminem occidit, occidentis telum est
wtf?
many of us oss programmers like our natural odor. you see, it's you (and taco it seems.. sigh) who try to artificially hide it under some funny smelling liquids. this is mostly because of corporate brainwash. once you get used to it in 20 years or so you just cannot understand why those poor little bastards keep buying all that shit. free your mind - burn all clothes!
Jesus! Sorry to have rattled your cage / bridge dude!
Some words are dirty! My mum told me so!
I guess the biggest objection some people will have is that when you make political rights dependent on ownership of property, a lot of people who don't own property lose their rights.
A lot of people say that mass ownership of property guarantees political rights, since the control of ownership limits the power base of the government or other property owners.
I think our world is turning in a scary world of property being concentrated into the hands of a few who tout the rights granted by their property ownership, which is really is an end run around the implied political rights of others.
Hmpf.
/require/ the user to have administrator rights to be useable.
I can think of ten common business applications that
I am not even taking into account the untold piles of in-house applications (and other B-programmer work).
"Software that promises users anonymity on the Web has caught the eye of the U.S. Central Intelligence Agency's nonprofit venture capital company, In-Q-Tel, which says the technology can help the spy agency fulfill its mission."
From http://www.pcworld.com/news/article/0,aid,41462,00 .asp Feb 13, 2001.
If you are wondering what 'mission' they are referring to:
"Internet May Threaten National Security:
Wars of the future may be fought with viruses and hack attacks, not with guns and bombs, studies say. During the next 15 years, the U.S. will face a new breed of Internet-enabled terrorists, criminals, and nation/state adversaries that will launch attacks not with planes and tanks, but with computer viruses and logic bombs, according to two reports released last month."
That from http://www.pcworld.com/news/article/0,aid,37483,00 .asp. January 4, 2001.
Open source or not, I wouldn't choose to use this software...
Good grief. If there's any group of people in the world that don't consume pr0n, it's uni students at any co-educational university (which is pretty much all of them in the civilized world now). All those young horny students are going to bars and frat parties to hook up, not wanking on the net!
If anything, students are net PRODUCERS of pr0n. Perhaps your uni is trying to block all the OUTGOING "dorm sluts live!" feeds?
It wouldn't hurt to be socially acceptable.
I know you prolly take pride in smelling like ass, but I work with 100 something college kids, all CS, EE, or math majors. They aren't exactly the clean bunch, but when your odor is offensive, for god sake... spare us your lack of embarrassment, it is fucking gross.
and brush your teeth, damn!
It's all good.
Free speech doesnt apply in the work place on company owned equipment / bandwidth.
On a side note, the quarantee is only that you are allowed free speech, not that somone must give you the means to speak beyond what your voice can do on its own. ( or for us to listen )
But again, that only in a PUBLIC arena..
---- Booth was a patriot ----
...so 8e6 tested and found that 8e6 apps [two specifically named in the story] found Triangle Boy, when other filters didn't? Wow.
Nothing to see here folks, move along.
Who put this thing together? Me, that's who.
The second any responsible administrator attempts to put controls on their network we get cries of censorship.
Let's put things in perspective: About 80 years ago, the boarding school I work at STOPPED censoring SNAIL MAIL! The headmaster or headmistress prior to this, would censor handwritten mail for inappropriate content. This fact wasn't hidden from the students, it was written policy. It may sound totally horrifying today, but back then, it was standard practice at many girls' schools.
In my organization, there simply has to be a balance between free use, bandwidth, and site rights. While some many here are concerned about free speech and online rights, you have to consider special circumstances.
Free speech doesn't mean one of our 6th graders should be able to view pr0n or learn bombmaking skills - at least not with our stamp of approval. Legally and morally, for us NOT to filter is reprehensible and can make us liable. NOTE: This doesn't mean that we expect our filtering system to be perfect; but it's perfect enough for 99% of the student body here.
And last time I checked, underage children still can't buy a pack of cigarettes or pick up a pr0n magazine at the 7-11. Isn't that a reasonable control? Why is this any different than that?
Make it impossible to execute software for your home dir
Is this straightforward under FreeBSD, GNU/Linux, or Microsoft Windows? If so, how does one go about it?
Will I retire or break 10K?
as well as woefully out of touch, and fairly well inbred as well. They gotta stop sleeping with cousins there.
errr....umm...*whooosh* *whoosh* Is this thing on ?
How long before those who use this are labelled "terrorist" in the new USA?
I suggest everyone chips in and runs a copy on a dedicated server with broadband internet access.
Just grabbed it. Go to this site and get it.
Why yes I am paranoid! Thanks for asking!
Is Triangle Boy a proven method to breach the Chinese internet censorship? Are there other techniques that work aside from running a proxy computer in north american that allows me to access stuff like CNN.com while i am in China?
Dude, Paulina Porizkova was FINE. I still have happy memories... : )
Why yes, I AM a rocket scientist!
Thought you'd like to know that I've added you to my shitlist. Why? Well, I don't get along with people who think that certain words should be left unspoken, and you even went so far as to suggest that you would suppress "potty mouths" even in the case of the parent post where it's used tastefully and correctly.
Fucking-A man... Grow up. (In this case, 'Fucking-A' is colorful but neutral, and "Grow up" is the actual insult.)
--
Power to the Peaceful
On a side note for paranoid sysadmins: if you want to block Triangle Boy, just filter requests that look like:
http(s)://URL/_u(http://...):{query strings}
ie: https://10.0.0.42/_u(http://www.yahoo.com)
Slashdot: rejecting tech news in favor of rubber band guns since 1997.
Thanks to some comment links I finally downloaded the tarball.
I hope someone in CHINA is knowledgeable about this and can tell me though... Since I'll be moving to China in about 30 days, what is the best way to smuggle this software into the country ?? Will customs likely search my laptop harddrive, or my CD-R labeled 'Metallica' that actually has TriangleBoy burned on it ?? Or is that dangerous ground, and I should instead have my friend e-mail it to my pop3 once I arrive ??
Furthermore, does the program still work good -- and since I don't want to install it now, lest I leave traces on my machine, do I need any special ips to actually get it up and running ? Anything that I can take with me, written down in a secret code language so I can get it up and running ? I'll go crazy if I spend a year in China and can't read www.capitalismmagazine.com or the like!
Thanks
Fuck Me! Who took YOUR funny bone!
Did everybody on campus go to chapel together?
yes
Did they also have lights-out in the dorms at 11pm, after the "Dorm Mother" made sure that all members of the opposite sex had signed out and left?
no
Did they hold seminars explaining that "self-abuse" could lead to blindness and hairy palms?
no
Did they ban Elvis for swiveling his hips, and look askance at all the "groovy" kids who went to the campus rally for Adlai Stevenson's presidential campaign?
no
Policies like your uni's scare me a lot more than the thought that some geek might be pullin' his pud to pictures of Paulina Porizkova.
Interesting that you say that without knowing which university I attended (note the past tense) or what their policies were. Instead you are making wild assumptions. There are many, many universities which do heavy internet filtering of many different types of materials. That in itself bothers me a lot. However, people such as yourself who make such wild unfounded assumptions also bother me quite a lot. You may wish to work on that.
Remember that in https, the URL path (i.e. the part after the hostname) is sent through the SSL channel, i.e. it's encrypted by the browser. The firewall can't read it.