Slashdot Mirror


IPhones Flooding Wireless LAN At Duke

coondoggie sends us to a Network World story, as is his wont, about network problems at Duke University in Durham, N.C. that seem to be related to the iPhone. "The Wi-Fi connection on Apple's recently released iPhone seems to be the source of a big headache for network administrators at Duke. The built-in 802.11b/g adapters on several iPhones periodically flood sections of the school's wireless LAN with MAC address requests, temporarily knocking out anywhere from a dozen to 30 wireless access points at a time. Campus network staff are talking with Cisco, the main WLAN provider, and have opened a help-desk ticket with Apple. But so far, the precise cause of the problem remains unknown. 'Because of the time of year for us, it's not a severe problem,' says Kevin Miller, assistant director, communications infrastructure, with Duke's Office of Information Technology. 'But from late August through May, our wireless net is critical. My concern is how many students will be coming back in August with iPhones? It's a pretty big annoyance, right now, with 20-30 access points signaling they're down, and then coming back up a few minutes later. But in late August, this would be devastating.'" So far, the communication with Apple has been "one-way."

316 of 441 comments (clear)

  1. sigh by bucky0 · · Score: 2, Insightful

    coondoggie sends us to a Network World story, as is his wont,

    At least the editors admit that coondoggie is filling the queue up with network world stories. Maybe they'll do something about it at some point

    --

    -Bucky
    1. Re:sigh by Icarus1919 · · Score: 3, Funny

      Hey guys, no breaking the fourth wall!

    2. Re:sigh by slamb · · Score: 2, Funny

      coondoggie sends us to a Network World story, as is his wont,
      At least the editors admit that coondoggie is filling the queue up with network world stories. Maybe they'll do something about it at some point

      You're setting the bar too high. I'm impressed that they correctly used the word "wont".

    3. Re:sigh by PhrostyMcByte · · Score: 1

      If it's not good and still getting accepted, that is a problem with the editors. But so long as the article provides something interesting, what does it matter if the person who submits it gets a profit off the site?

    4. Re:sigh by HTTP+Error+403+403.9 · · Score: 5, Funny

      "18,000 address requests per second"

      It's like me at the discotheque on Saturday night.

      --
      I'm not a Troll, it's reverse psychology.
    5. Re:sigh by bane2571 · · Score: 1

      http://dictionary.reference.com/browse/wont
      Had to say it, wasn't sure if you were just being a troll or legitimately didn't hear the whoosh

    6. Re:sigh by Gary+W.+Longsine · · Score: 1

      Ooooh! I soooo totally wish you hadn't posted Anonymous Coward, as is your wont.

      --
      If you mod me down, I shall become more powerful than you could possibly imagine.
    7. Re:sigh by jon_joy_1999 · · Score: 1

      Yeah, after they (editor) used wikipedia.irg, thefreedictionary.org, ask.com, thefreethesaurus.com wikidictionary.com, with the latter two giving confused and *shrugs*, "I dunno" looks around the table, they figured out what wont means
      (actually, they means I'm on my medication, have no more cookies, and am siezing [not the big thing as most people think]

      --
      there are 10 types of people in this world; those who get this joke, and those who don't
    8. Re:sigh by ls671 · · Score: 3, Funny

      common, never ask for addresses, it's eitheir tonight (preferably right away) or never. Be proud ;-)

      --
      Everything I write is lies, read between the lines.
    9. Re:sigh by Unique2 · · Score: 1

      Oh! Gigidy, gigidy, alright.

      --
      No trees were harmed in the posting of this message. However, a great number of electrons were terribly inconvenienced.
    10. Re:sigh by TheWingThing · · Score: 1

      You must have taken that protease enzyme they discovered at MIT recently.

    11. Re:sigh by Blakey+Rat · · Score: 1

      The whole point of the site is that people send in tech stories. Are you saying that they shouldn't publish submissions? Or is this some kind of crack at the level of reporting at Network World?

      Seriously, what's the complaint here? ("Those damned editors, publishing stories submitted from users! The bastards!")

    12. Re:sigh by bigredradio · · Score: 1

      And just as in the article - No Connection Available.

    13. Re:sigh by Impy+the+Impiuos+Imp · · Score: 1

      Great. Only on Slashdot would you see arguments about the first derivative of a story.

      --
      (-1: Post disagrees with my already-settled worldview) is not a valid mod option.
  2. Interesting problem by jshriverWVU · · Score: 2, Interesting

    He states now it's not a big problem, (guessing because it's summer and not as many students there). Then expecting it to be a BIG problem once students arrive. So to me this says that the iPhones using their service aren't students at all. If this is the case, buckle down the AP settings so they're not open or easily accessible via iPhone and require students to anti up their MAC addresses to connect to the wireless network.

    1. Re:Interesting problem by bucky0 · · Score: 2, Informative

      Summer school students?

      --

      -Bucky
    2. Re:Interesting problem by Icarus1919 · · Score: 5, Funny

      That's preposterous. Summer is when teachers return to their coffins to rest. Who would the students learn from?

    3. Re:Interesting problem by Osty · · Score: 1, Interesting

      If this is the case, buckle down the AP settings so they're not open or easily accessible via iPhone and require students to anti up their MAC addresses to connect to the wireless network.

      While not mentioned explicitly in the article, I assumed that's what they were already doing. Then the problem would be that the iPhone doesn't know when to shut up when the AP denies its MAC (I mean really, who would deny an iPhone? They're so cool!). I'm not sure what more they can do about it if there's no forthcoming patch from Apple. Ignoring the packets at the AP would still require some bandwidth, because you'd have to look to see the MAC address prior to dropping it.

    4. Re:Interesting problem by Osty · · Score: 1

      Ugh, nevermind. Should've read on to page two, where they talk about the iPhones already being on the network, so my theory doesn't work.

    5. Re:Interesting problem by z-j-y · · Score: 1

      but several phones can bring down the network? seems very vulnerable. Is there anything AP can do to just ignore the rogue requests?

    6. Re:Interesting problem by MoOsEb0y · · Score: 5, Informative

      Zombie graduate students.

    7. Re:Interesting problem by beheaderaswp · · Score: 5, Insightful

      What I want to know is what is a "MAC address request". I've never seen one. I've seen DHCP requests, ARP requests, even AARP requests- but not a MAC address request.

      I didn't know MAC addresses were assigned dynamically.

      But I'm over 40- what do I know?

      --
      Another consultant who stuck it out.

      "We are the Priests, of the Temples of Syrinx..."
    8. Re:Interesting problem by sokoban · · Score: 1

      Duke runs a lot of summer camps. I know second session of TIP should be running right now, and probably several other camps as well.

      They generally use a good chunk of the dorm space, and probably more than a few of them have iPhones.

      --
      09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0 is the magic number.
    9. Re:Interesting problem by caffeinemessiah · · Score: 1
      He states now it's not a big problem, (guessing because it's summer and not as many students there). Then expecting it to be a BIG problem once students arrive. So to me this says that the iPhones using their service aren't students at all.

      Little leap of logic there. Most campuses have a decent number of students on campus during summer for any of the following reasons:

      (i) summer classes
      (ii) research (i.e. most grad students who don't even realize its summer)
      (iii) friggin professors

      Most unis give out net access to students, faculty AND staff. overwhelmed access points don't necessarily point to lack of AP security.

      --
      An old-timer with old-timey ideas.
    10. Re:Interesting problem by popejeremy · · Score: 1

      Maybe it means a request for a router to masquerade as the device's own MAC address?

      I dunno. I got nothin'

    11. Re:Interesting problem by TubeSteak · · Score: 1

      MAC addresses request != MAC addresses assigned dynamically

      The nodes need to know the MAC address associated with an IP address, so they ask for it... or something like that. It's part of the dynamic DHCP process.

      I'm sure someone else will give a much better answer.

      --
      [Fuck Beta]
      o0t!
    12. Re:Interesting problem by Helios1182 · · Score: 1

      The first people I can think of that would be on campus: professors, grad students, summer classes, visiting students, administrative staff, and summer camps & programs. I'm sure there are more, but the point is that a University of that size never completely shuts down.

    13. Re:Interesting problem by soapthgr8 · · Score: 1

      For some parts of the campus you have to have registered your MAC address before they let you connect to an access point. It's just a matter of rolling it out to the entire network. Like TFA said, it isn't a big problem now because the problems are coming from parts of campus that don't have the restrictions in place.

    14. Re:Interesting problem by Matey-O · · Score: 1

      That would be an ARP request...and if they knew what they were talking about, would have been CALLED an ARP request. Sounds like we're not getting the full story here.

      --
      "Draco dormiens nunquam titillandus."
    15. Re:Interesting problem by Architect_sasyr · · Score: 4, Informative

      I don't know if this is a "better" answer, but I haven't liked the one's given yet: Initial DHCP request goes to ARP broadcast (which should NEVER make it past the AP/Authenticator depending on setup - much less into another subnet), a response is returned containing an IP address. Most units hold the IP address in temporary information and do another ARP request to see if anyone has that address in use (again to ARP broadcast). If it is in use then they try again, if not the unit assigns itself the IP address and joins the network. It then tries to find the ARP address of the DNS servers (look at it in wireshark or tcpdump - "who has x.x.x.x tell y.y.y.y"), the Gateway and whatever else your standard unit would be looking for (Domain Controller for a PC, Samba shares if you have auto-search enabled etc.).

      My guess is that either there is no DHCP and the iPhones just try like crazy, or some other misconfiguration of the network is causing these. Couple this with potential interference from all the other iPhone devices in the area, which could (and probably does) cause dropped packets, and one has a veritable storm of ARP requests which could easily take out subnets. 8 wireless cards is enough to DoS a high end wireless access point (Yellow Laptop anyone) so it doesn't stretch the imagination to think that some iPhone's could do it.

      My $0.02 AU

      --
      Me failed English...
      FreeBSD over Linux. If my comments seem odd, this may explain...
    16. Re:Interesting problem by beheaderaswp · · Score: 1, Troll

      God I hate to reply to my own comment.

      My fellow geeks, Systems Engineers, Network Admins, and Sys Admins- Hear Ye Hear Ye:

      I know what a Media Access Control address is.

      Please stop defining it before my head explodes.

      --
      Another consultant who stuck it out.

      "We are the Priests, of the Temples of Syrinx..."
    17. Re:Interesting problem by Anonymous Coward · · Score: 1, Informative

      From TFA:

      The requests are for what is, at least for Duke's network, an invalid router address. Devices use the Address Resolution Protocol (ARP) to request the MAC address of the destination node, for which it already has the IP address. When it doesn't get an answer, the iPhone just keeps asking.

    18. Re:Interesting problem by beheaderaswp · · Score: 1

      For the love of god it's:

      "Media Access Control"

      In case any of your braniacs didn't get it:

      AARP = "Apple Address Resolution Protocol"

      I hope to God some of you are never allowed near Cat 5e- let alone fiber. The world would end.

      --
      Another consultant who stuck it out.

      "We are the Priests, of the Temples of Syrinx..."
    19. Re:Interesting problem by Anonymous Coward · · Score: 1, Informative

      Read the article, it is sending an arp request for the mac of a specific router or gateway, I guess you could call that a "mac address request". When it does not receive a response, it does it again, apparently about 18K times a second. Why does it not receive a response for what it is looking for? Because the mac of the router or machine it is requesting is not on that subnet and no one is really sure what router or MAC the iPhone is looking for it and why.

      This is just a guess but it is probably looking to connect to the previous router or some router it knew about at one time in the recent past. The only thing a device needs the MAC for is its router and other devices in its subnet. I've seen Windows laptops do this on occasion when they switch to a different access point in a mesh that has a different gateway. Example, you are attached to AP1 with a 192.168.0/24 network and a gateway of .1, you walk 20 feet down the hall and your wireless decides to switch to the now closer AP2 which is in a different vlan with a network of 192.168.1/24 and a gateway of .1. Your device attaches to the different AP but your IP stack does not fully reconfigure itself, your device while attempting to send packets can't find the MAC of 192.168.0.1 which was the old gateway and starts asking with ARP where the hell it is (looking for the MAC). It may even be looking for 192.168.0.10 which was some other network device it was communicating with when it was on the old subnet and may be flooding ARP requests for that as well. This is just speculation but maybe there were open connections when it switched networks and the stack can not free that up and allow the switch to happen cleanly.

      Should a Cisco AP crash because of this? No, you never trust the client for security or for stability. Put some adjustable rate limiting per client setting in there. Should the iPhone be flooding ARP requests? No as well.

      What makes this even more interesting is Cisco and Apple are generally slow to publicly acknowledge "issues" with in their hardware and software.

    20. Re:Interesting problem by dgatwood · · Score: 2, Informative

      I suspect what the GP meant is that it's part of the Rendezvous/zeroconf dynamic IP process, which is often built into dhcpcd/pump/dhclient or equivalent. The very first thing most modern computers do when they see a network is to pick a random address and ARP for it, then assign themselves that IP if it isn't used.

      Also, it is part of the DHCP process, I think. The last step in the process is to ARP for your assigned IP to make sure it hasn't been doubly assigned. I'm not sure if that's actually part of the spec or not, but every OS I've ever studied under tcpdump did it, so I would assume that it is.

      --

      Check out my sci-fi/humor trilogy at PatriotsBooks.

    21. Re:Interesting problem by dgatwood · · Score: 1

      Re #3: The profs are usually on vacation. It would be a little hard for students to do that over the summer.

      :-D

      --

      Check out my sci-fi/humor trilogy at PatriotsBooks.

    22. Re:Interesting problem by StikyPad · · Score: 2, Funny
    23. Re:Interesting problem by ccollao · · Score: 2, Interesting

      But I guess it's not only the iPhone. Last night I set up mac address restriction in my home wlan, and I put uncorrectly the Ibook's Mac address.

      So after I rebooted the base, My Ibook started to try on and on repeatedly (heavily repeatedly) to connect to my wireless base.
      Just now, when I read this thread I realized that the iBook got my wireless network bombarded by requests.
      Nothing really happened into my base, since I only had 2 computers at that time, but I can see what happens when an avalanche of those requests gets into a base.

    24. Re:Interesting problem by kayditty · · Score: 5, Informative

      I have no idea why no one on the entirety of slashdot knows anything about networks. If I were to reply to every wrong post in this thread alone, I'd be here all fucking morning, so I'm just going to deal with this one.

      DHCP is not implicit in any network topology. It may be modern and 'expected,' but, jesus christ, every time there's a network discussion on this site, DHCP is strewn all over it like shit on a truck stop toilet. Just because you were born in 1995 and have an "ADSL" connection that uses DHCP (well, it probably uses PPPoE now) doesn't mean you're qualified to say anything, and it certainly doesn't mean there aren't real networks that have never even heard of the silly little protocol.

      That said, the initial DHCP request does go to a broadcast address, but it certainly has nothing to do with ARP. It goes to the global broadcast address (MAC: FF:FF:FF:FF:FF:FF). There's no such thing as an ARP address. ARP is a network layer protocol lying atop Ethernet (primarily; it isn't limited to Ethernet, of course). It is a MAC address you are thinking of.

      Your use of commas is worse than your knowledge of low-level network protocols, really. I don't even know why I bother. Whoever mods this shit up, go fuck yourself. And whoever's out there that actually does know what they're talking about (surely there's someone else out of two million users), like I do, fuck you for not replying and setting these morons straight. It's a ridiculous place to read for technological discussion, anymore.

    25. Re:Interesting problem by kaizokuace · · Score: 1

      I dont think its a MAC addy they are requesting but a Mac address! Apple made up their own protocol and didnt tell ANYONE! New from apple the iMac Address.

      --
      Balderdash!
    26. Re:Interesting problem by winomonkey · · Score: 5, Funny

      Isn't the term "zombie" a little bit redundant?

    27. Re:Interesting problem by itwerx · · Score: 2, Informative

      but several phones can bring down the network? seems very vulnerable. Is there anything AP can do to just ignore the rogue requests?

      It's probably related to Cisco's built in defense mechanisms. By default if a Cisco AP detects what it thinks is an attack it will go offline for awhile. The problem is that in the real world there are buggy chipsets and drivers that will trigger this so one usually ends up disabling them in self-defense. As a specific example there is an Intel WLAN chipset present in many older laptops that will randomly resend packets. An AP configured with default settings will shut off for exactly 60 seconds after it sees a couple of those as it thinks a replay attack is being used against it.
            There are several different attack vectors detected and timers associated. But I would think a university would already know all about this and have them configured correctly but if not then yeah, a couple of rogue devices can bring the whole shootin' match down. (To be fair Cisco isn't the only AP vendor that this can happen to).

    28. Re:Interesting problem by janrinok · · Score: 1

      Whoosh.....?

      --
      Have a look at soylentnews.org for a different view
    29. Re:Interesting problem by empaler · · Score: 1

      They did tell everyone. It's just that noone wanted to play with them, and with the iPhones popularity, they're aiming at domination through...
      Er, I'm sick and tired. Figure out the rest for yourself.

    30. Re:Interesting problem by Anonymous Coward · · Score: 1, Informative

      I suspect what the GP meant is that it's part of the Rendezvous/zeroconf dynamic IP process, which is often built into dhcpcd/pump/dhclient or equivalent. The very first thing most modern computers do when they see a network is to pick a random address and ARP for it, then assign themselves that IP if it isn't used.

      If that's what the GP meant then that's what they should have said! You're talking about this:

      So no, the IP address is not "random" but yes, ARP does get involved - but not specifically as part of DHCP per se.

      Also, it is part of the DHCP process, I think. The last step in the process is to ARP for your assigned IP to make sure it hasn't been doubly assigned.

      Technically it is not required, but many clients will double-check just in case (section 2.2, IETF RFC 2131).

      I'm not sure if that's actually part of the spec or not, but every OS I've ever studied under tcpdump did it, so I would assume that it is.

      Never trust various vendors as your source of how things are "supposed" to work! :-)

    31. Re:Interesting problem by that+IT+girl · · Score: 2, Informative

      Zombie graduate students

      I just love that this post is, as of the moment, modded as Informative.
      --
      10 FILL MUG WITH COFFEE
      20 DRINK COFFEE
      30 GOTO 10
    32. Re:Interesting problem by 19thNervousBreakdown · · Score: 1

      Dynamic DHCP! Wow! Now that's dynamic!

      --
      <xml><I><am><so><damn>Web 2.0</damn></so></am></I></xml>
    33. Re:Interesting problem by Tony+Hoyle · · Score: 1

      ISC DHCP does it I believe. Windows DHCP doesn't (it's quite possible on a windows network to have the dhcp server assign an existing address.. much fun ensues as you run all over the office trying to find the other machine with that address).

    34. Re:Interesting problem by elcid73 · · Score: 1

      Also important to note that the MAC is now known as the AMC (Air Mobility Command)

    35. Re:Interesting problem by Random832 · · Score: 2, Funny

      Don't you mean the Dynamic DHCP Protocol?

      --
      We've secretly replaced Slashdot with new Folgers Crystals - let's see if it notices.
    36. Re:Interesting problem by T.E.D. · · Score: 1

      What I want to know is what is a "MAC address request". I've never seen one. I've seen DHCP requests, ARP requests, even AARP requests- but not a MAC address request.


      An ARP request is a request for the MAC address associated with the given IP address. Presumably that's what he meant.

      Yes, its true that if some machine (for some bizzare reason) were to be requesting a MAC address, that's probably how you would phrase it. However, if you don't start with the assumption that he's a clueless, its fairly obvious what he's talking about.
    37. Re:Interesting problem by weicco · · Score: 2

      I suggest everyone to read Douglas E Comer's Internetworking with TCP/IP Vol 1 - Principles, Protocols and Architecture. It's a little old book but amazingly good one, allthought new editions comes with yellow cover, I liked the red one better (we used to call it Comer's Red Book :) Anyway, it came really handy when I was dealing with NDIS intermediate network drivers (Windows stuff) and Ethernet & TCPIP protocols.

      --
      You don't know what you don't know.
    38. Re:Interesting problem by dgatwood · · Score: 1

      When a host wishes to configure an IPv4 Link-Local address, it selects an address using a pseudo-random number generator with a uniform distribution in the range from 169.254.1.0 to 169.254.254.255 inclusive.

      Yes, it is random... or at least as nearly as is possible in computing. The spec suggests using something like the MAC address as a seed to the PRNG to avoid all the devices generating the same sequence, but a good PRNG like the one built into OpenSSL is more than sufficient to meet the requirements, I think.

      --

      Check out my sci-fi/humor trilogy at PatriotsBooks.

    39. Re:Interesting problem by Rakarra · · Score: 1
      AARP = American Association of Retired Persons.

      Note: they don't necessarily need to be retired, or even close to retired either. I'm 30, a long way from being retired, and for some reason AARP keeps sending me letters offering me their services..

    40. Re:Interesting problem by TClevenger · · Score: 1
      ...even AARP requests...

      I hear those have a short TTL.

    41. Re:Interesting problem by iluvcapra · · Score: 1

      And enhanced QoS (primarily 10-20% discounts) at many businesses throughout the United States. However, they poll out of proportion for their total share of the medium.

      --
      Don't blame me, I voted for Baltar.
    42. Re:Interesting problem by digitldlnkwnt · · Score: 1

      LOL...Thats great. Honestly I hope i NEVER have to work with most of these peopel in the field. I may just be fired for abuse/harassment/murder. The really funny part? bet some of these folks make 90+ K a year and couldn't setup a Linksys rouetr without calling tech support. Sad. Very sad.

  3. Critical? by DogDude · · Score: 4, Insightful

    But from late August through May, our wireless net is critical.

    Wireless? Critical? Dumb.

    --
    I don't respond to AC's.
    1. Re:Critical? by gravos · · Score: 4, Insightful

      Mod parent up. My university has gone to all-wireless too, and it's completely retarded because it's so unreliable. **A MICROWAVE OVEN IN THE KITCHEN KNOCKS EVERYONE OFF THE NETWORK**, for christ's sake, and that's to say nothing of intentional disruption.

    2. Re:Critical? by Tuoqui · · Score: 2, Insightful

      Yes it is dumb. Run some cable and leave the wireless for students with laptops and shit. Cables are the best method for mission critical things anyways.

      Ofcourse, if they are using it for everything even desktop computers in labs... It could very easily be that a few iPhones can bring down APs but that would be a colossally stupid idea to begin with and any network designer approving such a plan should be shot.

      --
      09F911029D74E35BD84156C5635688C0
      +2 Troll is Slashdot's way of saying groupthink is confused
    3. Re:Critical? by Citius · · Score: 5, Interesting

      The number of students who use a wireless network for basic needs is rapidly growing at Duke. As a recent Duke graduate, I've been in a number of classes where tests are administered over the WLAN using Blackboard (burn BB to hell!). If a WLAN AP goes down, and that's during a test, you've got the grades - and unhappiness - of 40+ people/class on your head. Given that we're a rather nitpicky bunch over our grades, grade unhappiness doesn't end well for those who cause it... So yes. Wireless is critical at Duke.

    4. Re:Critical? by snowraver1 · · Score: 2, Insightful

      Pretty sure the point was that one should have a wired network that is critical, and a wireless network just for fun.

      I agree 100% Wireless is nowhere near as reliable as wired.

      --
      Copyright 2010. All rights reserved. This comment may not be copied in any way including, but not limited to caching.
    5. Re:Critical? by PCM2 · · Score: 5, Insightful

      Yes it is dumb. Run some cable and leave the wireless for students with laptops and shit. Cables are the best method for mission critical things anyways.

      Yeah. Unless you're a university, and your "mission critical things" (remember the definition of "mission"?) include things like ... ohhh, I dunno ... students with laptops and shit?

      --
      Breakfast served all day!
    6. Re:Critical? by ResidntGeek · · Score: 1

      They were thinking "wow, there's a lot of students demanding wireless... too bad they're too drunk to understand why it's unreliable! Oh well, they're the bosses..."

      I go there. I know this to be true.

      --
      ResidntGeek
    7. Re:Critical? by Lost+Engineer · · Score: 1

      Don't forget piracy and online shopping.

      Oh yeah and Wikipedia -- for "research."

    8. Re:Critical? by EvanED · · Score: 1

      As a recent Duke graduate, I've been in a number of classes where tests are administered over the WLAN using Blackboard (burn BB to hell!).

      Just out of curiosity, but what were the logistics of this? Is everyone required to have a laptop?

    9. Re:Critical? by Citius · · Score: 2, Informative

      No, not technically, but most students at Duke do have laptops. What we do have, however, is this: Our libraries have a small cadre of laptops that can be borrowed from the library for at most 3 hours. Since 3 hours is about the maximum length of any final exam, we all can get away with just borrowing one if the need arises.

    10. Re:Critical? by mrchaotica · · Score: 1

      As a recent Duke graduate, I've been in a number of classes where tests are administered over the WLAN using Blackboard (burn BB to hell!).

      WTF?! Open-note tests are one thing, but open-Internet?!

      --

      "[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz

    11. Re:Critical? by originalTMAN · · Score: 1

      University of Pennsylvania is going all wireless as well. Wireless is increasingly becoming the only method of access especially in the really old and really new buildings. The reason? Upgradeability and cost. It's simply easier and cheaper to increase your bandwidth and available points of access when you don't have to pull wire, lay wire, add jacks, etc. The idea is that it is possible to create a reliable wireless network given improved hardware and software. Whether it's true or not...

    12. Re:Critical? by Nasarius · · Score: 2, Insightful

      Why not? The most difficult exams I've had were of the take-home variety.

      --
      LOAD "SIG",8,1
    13. Re:Critical? by gallwapa · · Score: 1

      Funny, I work for a school district and thats the exact train of thought that happened here: Us: "Wireless...not good...unreliable, slow, susceptible to interference..." Them: "We want wireless, byah!" (--- Sad attempt at typing the Howard Dean scream as reenacted by Dave Chapelle)

    14. Re:Critical? by mac.man25 · · Score: 1

      Oh my yes does BB suck! It sucks hairy man balls! I how I want to burn my schools BB server down! *SEETHING HATRED*

    15. Re:Critical? by bane2571 · · Score: 1

      Heh, yeah, my university did the same thing, always nice to have a test based entirely off the course notes linked out of exactly the same web page as the course notes themselves. Everyone wants the computers at the back of the room for some reason.

    16. Re:Critical? by AvitarX · · Score: 1

      How long is it going to take to upgrade the bandwidth of a 100mbps switch with wireless? I would guess 5+ years at least.

      How about a 1000mps switch?

      And with enough device density even a 10 mbps switch is going to outperform wireless.

      And how hard was upgrading from 10 to 100?

      With the correct hardware (and short enough runs) even 10 to 1000 does not mean pulling cords ect.

      --
      Wow, sent an e-mail as suggested when clicking on "use classic" banner, and got a fast response that addressed my msg
    17. Re:Critical? by Anonymous Coward · · Score: 2, Insightful

      I've been in a number of classes where tests are administered over the WLAN using Blackboard (burn BB to hell!). If a WLAN AP goes down, and that's during a test, you've got the grades - and unhappiness - of 40+ people/class on your head. I'm sorry but that's completely unacceptable. This entire idea is completely stupid. Perhaps it might be a function of the subject matter but honestly, I would find this to waste my time. Engineering (my background) should not be administered on a laptop. Like you said: if a WAP tanks during a test, all of you are borked. What happened to good old pencil and paper? Is that not practical anymore?

      So yes. Wireless is critical at Duke. It never should be. Ever. If I choose to take a test on my laptop, that's one thing. But if I'm paying to be there, it better be my choice. It doesn't matter if it's easier on the graders to use technology. I'm paying them to administer exams. The least they could do is put in some effort.
    18. Re:Critical? by jfmiller · · Score: 1

      I'll Grab my pitchfork and torch. Just let me know what we're going to burn! Black Board is a Horrible user interface and deserves to die a slow death. Please folk let the academic community know that BlackBoard is not there one stop solution for that "Internet thing."

      --
      Strive to make your client happy, not necessarly give them what they ask for
    19. Re:Critical? by ls671 · · Score: 1

      I just ordered my IPhone. I had to pay extra to have the wireless capability taken out and have them fit an RJ45 jack on the Iphone instead. I am sure I will have the best network connectivity possible. Screw them with their wireless crap ;-)

      --
      Everything I write is lies, read between the lines.
    20. Re:Critical? by AndresCP · · Score: 1

      As a student at Duke (undergrad in computer engineering) let me say that the campus *isn't* all wireless. All the dorms have wired connections; only one has all-dorm wireless and it sucks. It's critical in the sense that I won't be able to sit outside McDonald's or in my lectures dicking around on slashdot, but the campus won't really come to a halt because iPhones are screwing up the WLAN.

      --
      "Just because you're eloquent doesn't mean you aren't a fucking crackpot." -Wavebreak
    21. Re:Critical? by Joe+Tie. · · Score: 1

      It's critical in the sense that I won't be able to sit outside McDonald's or in my lectures dicking around on slashdot,

      Don't all western McDonald's offer free WiFi?

      --
      Everything will be taken away from you.
    22. Re:Critical? by kramulous · · Score: 1

      Interesting but:
      s/Duke/$UNIVERSITY/g

      --
      .
    23. Re:Critical? by pafrusurewa · · Score: 1

      ...in the US. Don't generalize. There are lots of places where students are an expense, not a source of revenue.

    24. Re:Critical? by Ex-MislTech · · Score: 1

      All network devices have a MAC address, the first part of it is the OUI, Org. Unique ID.

      Just pick out the MAC related to the range for the phones and block them til a firmware update
      can come out and resolve the issue.

      Not too hard to implement.

      Ex-MislTech

      --
      google "32 trillion offshore needs IRS attention"
    25. Re:Critical? by wallyhall · · Score: 1

      Or you're working for NASA with a probe up and on Mars... jipers, run some CAT5E up there...

      --
      I think therefore I am... a Linux geek.
    26. Re:Critical? by petermgreen · · Score: 1

      With the correct hardware (and short enough runs) even 10 to 1000 does not mean pulling cords ect.
      I think that depends on why the link is running at 10 mbps in the first place.

      If its just running at that speed because it is connected to old switches and the wiring is to modern standards then sure. OTOH if its run with 2 pair cat 3 or worse you are going to have trouble getting 100 Mbps let alone 1000 Mbps.

      but I agree with the general point, in situations with a high density of high bandwidth using devices (say university of manchester public cluster machines) wireless just isn't going to be feasible.

      --
      note: i'm known as plugwash most places but i screwd up registering that here somehow in the past and now can't register
    27. Re:Critical? by elrous0 · · Score: 3, Funny
      I'd love to hear that help desk phone call at Apple:

      Student: I'm at Duke and my iPhone's wifi just stopped working.
      Apple rep: I'm sorry sir, but Apples just work
      Student: Yeah, well mine isn't just working right now!
      Apple rep: Sir, do you BELIEVE in the power of Steve?
      Student: The what?
      Apple Rep: Sir, maybe if you had more faith in Steve, you wouldn't be having problems...
      Student: Look, I just want my damn phone to work.
      Apple Rep: Then I think you need to attend our Apple Reaffirmation Camp
      Student: Will it help get my wifi signal back?
      Apple Rep: No, but it will help you get your FAITH back, and stop questioning the infallability of Apple products
      Student: Um, okay. Anything to get my smug sense of superiority back.

      --
      SJW: Someone who has run out of real oppression, and has to fake it.
    28. Re:Critical? by Tony+Hoyle · · Score: 1

      Just pick out the MAC related to the range for the phones and block them til a firmware update
      can come out and resolve the issue.


      Two potential problems:

      1. There's probably an 'apple' range of MAC addresses not a separate 'iphone' one. All the profs. with ibooks are gonna be pissed.
      2. It'll take about an hour before the students figure out what's going on and reassign the MAC addresses on their iphones to something different.

    29. Re:Critical? by NeoTerra · · Score: 1

      So, I'm at a 2 year college, not a university (grain of salt, and all that), that has wireless across campus. It's used as a convenience for faculty and students, but is by no means a primary connection point. You also cannot connect directly to campus servers, since it's on a separate VLAN. Every dorm room has Ethernet access, which only goes out when lightning hits nearby, and fries a switch (which happens to APs, Servers, PCs.). I could see wireless being "critical" for students and portable internet access, and it would be inconvenient if it went out, but it's not the end of the world. Keep in mind that we have survived before without wireless, it is possible to live without it.

      Anyway, whatever problem DOES need to be fixed. It's not that hard to keep traffic for wireless separated on a network, so at least the problem is isolated from the "really critical" stuff, like actual business operation of a university. Is it just me, or would a version of (insert favorite WLAN packet sniffer here) be really useful. Check out what it's actually looking for. It's not like wireless signals are hard to sniff.

    30. Re:Critical? by Com2Kid · · Score: 1

      ...

      Wireless networks are insanely awesome. My University had them, and the convinenece is incredible. To the best of my knowledge, my University's network never had a problem with microwave ovens knocking people off. Well, if your laptop is sitting on top of the microwave while it is going, then maybe, but that is your problem. :-D

      Get enough APs setup, and don't try to browse the network next to an old crusty minimally shielded microwave oven, and things should go just fine.

    31. Re:Critical? by FenderGeek · · Score: 1

      Well, considering the number of universities now requiring incoming students to have a computer (and, more specifically, a laptop), I'd say it's pretty mission critical that they're able to support that requirement.

      --
      One only needs two tools in life: WD-40 to make things go, and duck tape to make them stop. ~G.M. Weilacher
    32. Re:Critical? by Ex-MislTech · · Score: 1

      Most MAC addresses are set, some devices like routers are allowing for MAC cloning.

      I don't think the MAC address on a Iphone is programmable by the user,
      perhaps a Iphone owner could illuminate us on this ?

      --
      google "32 trillion offshore needs IRS attention"
    33. Re:Critical? by burnunit0 · · Score: 1

      Yes, and I think that's what the parent post is saying: relying on what is effectively a consumer-grade WLAN for critical infrastructure is expecting too much. It's not a question of the reality of wireless being critical--we get that, it's a question of "how did Duke let it get this far this fast?" And that's why it's dumb.

      --
      yes. that's all I'm going to say in all comments from now on.
    34. Re:Critical? by firedeveloper · · Score: 1

      You are correct, the iPhone MAC address is not programmable by the end user...

      --
      I LOVE my iPhone... (Yes I'm an iPhone fanboy and if you aren't, just ask yourself if it is jealousy or anti-Apple-bigotry which pushes you to hate it)

  4. No wonder by marcosdumay · · Score: 4, Funny

    "So far, the communication with Apple has been "one-way."

    No wonder there is no answer... Apple people weren't able to receive any network package with all those iPhones around.

    1. Re:No wonder by User+956 · · Score: 4, Funny

      "So far, the communication with Apple has been "one-way." No wonder there is no answer... Apple people weren't able to receive any network package with all those iPhones around.

      Communication with Apple is always "one way". Or the highway.

      --
      The theory of relativity doesn't work right in Arkansas.
  5. and have opened a help-desk ticket with Apple. by Presto+Vivace · · Score: 1

    that is a polite way of saying that Apple has not been responsive. Any other network having this problem?

  6. Cisco by zymano · · Score: 3, Interesting

    "I don't believe it's a Cisco problem in any way, shape, or form," he says firmly"

    How do they know that?

    1. Re:Cisco by prisoner-of-enigma · · Score: 3, Informative

      Probably because he knows that a wireless network -- no matter how robust -- will always be at the mercy of a misbehaving device. Air is a shared medium. You can't force a device to shut up no matter what you try, assuming the device is engineered badly enough. That seems to be the case here. Even attempting something basic like blocking a wildcard MAC for all iPhones wouldn't work if the device just persistently floods the airwaves with spurious requests. It's essentially a DoS attack similar to a ping flood, but with no way to "cut it off" at an upstream router. Even better, the "attacking" device isn't fixed to a landline somewhere, it could be roving around in somebody's pocket or purse making neutralization a huge headache. Fun!

      I've done consulting in the wireless market for a while now. One of my key markets is the healthcare market, and I make sure I tell any hospital using wireless that there is absolutely, positively, unequivocally no way they can stop a determined DoS WLAN attack. Set up a noise source at 2.4GHz (or 5.8GHz for 802.11a), crank up the wattage well above the FCC limit for the ISM bands, and aim the antenna at the building. It *will* shut down *any* WLAN you've got unless the building is built like a Faraday cage.

      There is nothing you can do about it short of rooting out the source of the noise and shutting it down. Granted, such an attack is highly illegal (violates FCC radiated power limits, which might be a felony, I'm not sure), but I doubt that's on the mind of the prankster (or terrorist) who's shutting you down.

      --
      In the end they will lay their freedom at our feet and say to us, Make us your slaves, but feed us. - Fyodor Dostoyevsky
    2. Re:Cisco by lukesky321 · · Score: 1

      I am taking a cisco internetworking class and I do not think that it is similar to a DoS attack because a DoS attack involves changing the source address in the packets that are sent to a server. I do not think any students at Duke have found a way to hack the iphone
      to allow modified packets to be sent out.

    3. Re:Cisco by PCM2 · · Score: 1

      Sure. And when some script kiddies launch a DoS attack that takes out your router, leaving you completely without connectivity, that's not a Cisco problem either. It's obviously a script kiddie problem.

      --
      Breakfast served all day!
    4. Re:Cisco by Timothy+Brownawell · · Score: 1

      I am taking a cisco internetworking class and I do not think that it is similar to a DoS attack because a DoS attack involves changing the source address in the packets that are sent to a server. I do not think any students at Duke have found a way to hack the iphone
      to allow modified packets to be sent out.

      Dude, WTF? A DoS ("Denial of Service") attack is any attack that makes things stop working (or is intended to do that). Nothing to do with changing the source address, that's just to make it easier to not get caught.

    5. Re:Cisco by X0563511 · · Score: 1

      Congratulations - you are well on your way to winning the exploded-ego-award!

      First strike: assuming you know more than someone because of a class that you haven't even finished.
      Second strike: assuming the students at Duke cannot hack a device. ... one more strike and it's yours!

      --
      For large sets, this will be our guide even unto death, for the LORD will work for each type of data it is applied to...
    6. Re:Cisco by prisoner-of-enigma · · Score: 4, Informative

      I am taking a cisco internetworking class and I do not think that it is similar to a DoS attack because a DoS attack involves changing the source address in the packets that are sent to a server. I do not think any students at Duke have found a way to hack the iphone to allow modified packets to be sent out.

      Not to seem unkind, but it sounds like you need to finish your classes before weighing in on this subject. You do not seem to understand the nature of a DoS attack enough to comment properly on it.

      To clarify, it has nothing to do with altering the source address. While some hardwired DoS attacks involve the spoofing of source addresses, it is not required. Any kind of action that prevents the target from functioning as designed constitutes a DoS attack, and flooding an AP with spurious MAC requests fits that description. Since the iPhone is doing this as part of its (probably flawed) design, no hacking of the iPhone is required.

      The Cisco AP's and WLAN controller have little choice but to listen to whatever traffic the iPhone spews out. Sure, they can discard or ignore the traffic, but it doesn't change the fact that a rampant iPhone "attack" will consume shared air time even if such action is taken. With enough iPhones, any single AP can be completely overwhelmed even if it's ignoring everything the iPhone is throwing at it.

      As I said before, you can't switch, route, or firewall air. You're always at the mercy of the person transmitting with the least control or scruples.

      --
      In the end they will lay their freedom at our feet and say to us, Make us your slaves, but feed us. - Fyodor Dostoyevsky
    7. Re:Cisco by discord5 · · Score: 1

      I am taking a cisco internetworking class

      Please pay more attention in class, it will prevent you from making a fool out of yourself in the future.

      I do not think that it is similar to a DoS attack because a DoS attack involves changing the source address in the packets that are sent to a server.

      Please read up on Denial of Service, and please do some googling on your own. You will find that with a little effort you can find lots of information on this subject. Read up on why such things are possible, how people do this, and what you can do against it.

      I do not think any students at Duke have found a way to hack the iphone

      Irrelevant... Why would you need to hack an iphone when you can do equally as much damage with a laptop? Badly configured networks are just that: badly configured.

    8. Re:Cisco by bblboy54 · · Score: 1

      "I don't believe it's a Cisco problem in any way, shape, or form," he says firmly"
      How do they know that?


      Simple: The invested a lot of money in cisco and nothing in Apple. Thankfully companies that sell the most expensive equipment never make any mistakes so we can safely assume that it is not a Cisco problem.... in any way, shape, or form.

    9. Re:Cisco by jred · · Score: 1

      He was killed by a car. It had nothing to do with Toyota. While some cars are Toyotas, the one that killed him was not.

      --

      jred
      I'm not a mechanic but I play one in my garage...
    10. Re:Cisco by that+IT+girl · · Score: 1

      Forgive me if I'm missing something, but as far as I can gather, they didn't have the issue until the iPhone came on the scene. So there's most likely a flaw with the new device rather than the network that was fine with all the other devices using it.

      --
      10 FILL MUG WITH COFFEE
      20 DRINK COFFEE
      30 GOTO 10
    11. Re:Cisco by TooMuchToDo · · Score: 1

      With regards to the FCC, I don't believe it to be a felony. Damages can be assessed in the high 5 figures though if you're a licensed broadcaster violating radiated RF guidelines.

    12. Re:Cisco by prisoner-of-enigma · · Score: 1

      Well, fucktard, perhaps you misunderstand the use of common English. Let me school you a bit since you seem in dire need of it.

      The use of the phrase "some hardwired DoS attacks involve..." [emphasis mine] denotes that some attacks involve a spoofed source. This does not mean it is required, just as the fact that you can type obviously does not require you to have any intelligence whatsoever as you've so ably demonstrated. Spoofing a source address can allow an attacker to camouflage their attack, but you can launch a DoS just as easily (moreso, actually) without. It just increases the likelihood that you're going to be found and prosecuted, that's all.

      Now, will you please go back to your Lair of Stupid and leave the intelligent discussion to those of us who know what the fuck we're talking about?

      --
      In the end they will lay their freedom at our feet and say to us, Make us your slaves, but feed us. - Fyodor Dostoyevsky
  7. Bet you 10 to 1... by g-san · · Score: 5, Insightful

    ...it's their network. Why are we only hearing about it here? They probably have a loop in their network or some kind of ARP forwarding active they don't understand. You would think something like this would get caught early on in testing with the iPhone, this kind of problem tends to stand out. I also doubt the iPhone has enough horsepower to pump out 10Mbps of ARP requests, sounds like a networking device is sourcing these packets.

    1. Re:Bet you 10 to 1... by blindbat · · Score: 5, Interesting

      Actually I was in an Apple store last Thursday and they were having the same problem. I was trying to connect to their network with another non apple device and finally connected on third attempt. The store employees were all aware that their phones were having trouble connecting and staying connected to the wireless. Many of the phones were having to connect through ATT.

    2. Re:Bet you 10 to 1... by rm999 · · Score: 1

      "Why are we only hearing about it [at Duke]?"

      The same reasoning could be used to ask why this problem only began after the iPhone came out.

    3. Re:Bet you 10 to 1... by Funk_dat69 · · Score: 1

      The 'Domain' shopping center in north Austin also seems to have this problem. They have free wireless access that used to work decent, but once they got the iphones in the Apple store there, it's gone to shit. Damn access points reset themselves every other minute.

      More anecdotal evidence, I suppose, but it's fishy.

      --
      FUNK!
  8. Re:Nothing new here by Anonymous Coward · · Score: 5, Interesting

    Sounds like they are having some issues with arp-whois being propagated across the subnets. Knowing Apple, each time these iPhones try to 'rendezvous' with all the Macs or iTuned PCs they refresh their ARP tables off the entire campus. Something is fucked up with their network machines if the arp boroadcasts are seen by the entire campus (hence the 30 access points going at once).

    What they need is an AP isolation: the connected client should not (easily) see other subnets and should definitely not be able to spam ARP broadcasts across subnets.

    Some BOFH admin really screwed up his net config.

  9. MAC address REQUEST? by Anonymous Coward · · Score: 5, Insightful

    I'm sorry, but there's something a little OFF here. No wireless hardware requests a MAC address. It may use MAC to authenticate to a table, but it goes for a DHCP lease.

    Slashdot...sigh...

    1. Re:MAC address REQUEST? by Vulturejoe · · Score: 1, Informative

      They're requesting the MAC addresses of other devices, using ARP. The problem seems to be at least partially the fault of Duke's network. From TFA:

      "The requests are for what is, at least for Duke's network, an invalid router address. Devices use the Address Resolution Protocol (ARP) to request the MAC address of the destination node, for which it already has the IP address. When it doesn't get an answer, the iPhone just keeps asking."

      --

      Out of Cheese Error:
      Please reboot universe
    2. Re:MAC address REQUEST? by afidel · · Score: 4, Interesting

      Actually, it's probably really an ARP request. They probably have a very large, flat network and when the iPhones does an ARP broadcast request the AP gets overloaded by the results. This was a known problem with the old Aironet AP's, one of the senior software guys at Cisco/Aironet produced a one off patch for a large university client for the old VxWorks based AP's when I supported them back around the 2001 timeframe. It was actually one of the best examples of object oriented code I had ever seen, he changed the definition of the ARP buffer in one place, recompiled and everywhere that ARP was used the code was updated, very slick.

      --
      There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
    3. Re:MAC address REQUEST? by itwerx · · Score: 5, Funny

      No wireless hardware requests a MAC address.

      But the iPhone is from Apple, of course it would ask for a Mac address! Heck, they should be glad it didn't ask for a Mac-II address, things would be twice as bad!
      (You can do the math for a Mac-IIcx :)

    4. Re:MAC address REQUEST? by lmfr · · Score: 2, Informative
      From the article:

      The requests are for what is, at least for Duke's network, an invalid router address. Devices use the Address Resolution Protocol (ARP) to request the MAC address of the destination node, for which it already has the IP address. When it doesn't get an answer, the iPhone just keeps asking.

      "I'm not exactly sure where the 'bad' router address is coming from," Miller says. One possibility: each offending iPhone may have been first connected to a home wireless router or gateway, and it may automatically and repeatedly be trying to reconnect to it again when something happens to the iPhone's initial connection on the Duke WLAN.

    5. Re:MAC address REQUEST? by sasdrtx · · Score: 1

      See next story about the death of print media. Tech print media has been advertising filler for years. It's not like actual tech people work for those fish-wrappers.

      --
      Most people don't even think inside the box.
    6. Re:MAC address REQUEST? by Phreakiture · · Score: 3, Informative

      I'm sorry, but there's something a little OFF here. No wireless hardware requests a MAC address. It may use MAC to authenticate to a table, but it goes for a DHCP lease.

      I would suggest that perhaps you didn't RTFA, but that is a given, since this is Slashdot.

      It is, indeed, asking for a MAC address.... it's called ARP and it is how an Ethernet device determines what MAC address to use to reach a destination IP address.

      --
      www.wavefront-av.com
    7. Re:MAC address REQUEST? by mikey! · · Score: 1

      > It was actually one of the best examples of object oriented code I had ever seen, he changed the definition of the ARP buffer in one place, recompiled and everywhere that ARP was used the code was updated, very slick.

      Umm, why would this be "object oriented"?

      #define ARPBUFSZ 1024

    8. Re:MAC address REQUEST? by Impy+the+Impiuos+Imp · · Score: 1

      Perhaps the class overrode certain operators, such as array access []? Although I don't know if overriding operators is technically a feature of an object-oriented programming language. It's really a robust, orthogonality thing, which is tangentially related.

      But one of the features of OO programming is you could, in theory, swap in a completely different class and, as long as it had the same interface, it would be used seamlessly with just a recompile. No changing of any caller's code anywhere. Of course, that could be done with a non-OO language, too, presuming the developer did some reasonable amount of modularization of the feature, so again it's not technically an OO-specific feature. OO does, however, if used properly, enforce development of things like public interfaces vs. private, that are easy to mess up in a non-OO language.

      --
      (-1: Post disagrees with my already-settled worldview) is not a valid mod option.
    9. Re:MAC address REQUEST? by darkonc · · Score: 1

      Obviously they're not fully backwards-compatible, hardware wise, or they'd also be asking for Lisa addresses..

      --
      Sometimes boldness is in fashion. Sometimes only the brave will be bold.
    10. Re:MAC address REQUEST? by itwerx · · Score: 1

      Obviously they're not fully backwards-compatible, hardware wise, or they'd also be asking for Lisa addresses..

      They probably know Lisa's married now and not giving out her address any more. :)

    11. Re:MAC address REQUEST? by Bobfrankly1 · · Score: 1

      I'm sorry, but there's something a little OFF here. No wireless hardware requests a MAC address. You have to remember that this is Apple hardware. The cute little iPhones just want to know where thier Mac friends are!
      -
      Duuuuuuuur....
  10. No problem for us by SuperKendall · · Score: 1, Interesting

    We have a number of WAP's at work. We also have a number of people who have bought iPhones, and we have not seen any wireless nodes go down from iPhone traffic.

    --
    "There is more worth loving than we have strength to love." - Brian Jay Stanley
    1. Re:No problem for us by maztuhblastah · · Score: 1

      Same here -- over 200 APs, site-wide. A ton of iPhones amongst the higher-ups (i.e. the people with money for flashy toys.) Zero problems so far. Then again, we have enough APs and site bandwidth to support about 300% of normal load, so you can take this example with a grain of salt...

    2. Re:No problem for us by kramulous · · Score: 1

      I'd still be having a look at the logs.

      --
      .
    3. Re:No problem for us by spacefight · · Score: 1

      Call me paranoid, but why do you allow the iPhone into the companys WLAN?

    4. Re:No problem for us by gig · · Score: 1

      > Call me paranoid, but why do you allow the iPhone into the companys WLAN?

      Why would you not?

      Why would you let any old Dell/Microsoft notebook computer onto your wireless network but not an iPhone?

    5. Re:No problem for us by Midnight+Thunder · · Score: 1

      Call me paranoid, but why do you allow the iPhone into the companys WLAN?

      If the users include those in charge of the interests of the company, then you allow it.

      --
      Jumpstart the tartan drive.
  11. So you're telling me by caller9 · · Score: 2, Insightful

    I can take out a cisco WLAN controller with thin APs and aironet APs with an arp flood for a non-existent IP. Are they even in the same subnet? Is the whole wifi network from one building to another layer2? Or is the problem arising because it is actually layer3 from building to building and the APN name doesn't change.

    Judging by the statement that they can exhibit the behavior after being handed from one access point to another kind of nullifies the theory that they may be trying to re associate with the users home network. They're trying to get back to the old AP, which arping wont do because it's on a different VLAN.

    Mystery solved, now what can cisco do about it. I don't really care that it's an iPhone bug. I just think its one more DoS vector to patch up. Maybe de-associate the phone and drop traffic until it acts right? Set a threshold or something? You might still have a source of noise, hopefully it would realize it was dropped though. No link layer, no arp right?

  12. Lets focus on the real problem by bhmit1 · · Score: 4, Informative

    Any non-secured network (either where users can plug into the lan or over wireless) where a device is able to bring down the network should be considered defective. I've seen places were the entire lan was flat with users connecting on cisco's management vlan and could bring down the whole company by plugging in a device that advertised a new route to the internet (legit or not). To a similar point, if a device on a wireless network is able to flood the network, then the access points need to be tuned. Sure, they can jam the airwaves, and there's nothing you can do to stop that DoS. But, you don't have to turn 18,000 requests per second into something that broadcasts across the rest of the network. Every firewall app that I've worked with includes throttling and I would hope these APs do as well.

    This doesn't mean that apple released a product without a defect. But if your network crashes because of a defective device, then you should fix your network first.

    1. Re:Lets focus on the real problem by caller9 · · Score: 1

      Well said. Pretty much what I was getting at. Also I meant SSID, not APN name. Got my wireless technologies crossed up.

    2. Re:Lets focus on the real problem by bhmit1 · · Score: 1

      Your network isn't secure because you're not able to bring it down. It's secure if during the processes you are able to avoid information leaks. Any network, no matter how secure, using a wrong implementation of a protocol becomes vulnerable.
      To clarify, I was referring to physical security, which few networks have. A properly configured network should isolate any poorly configured device as close to the source as possible. So a mis-configured wireless devices should optimally only be able to impact things within it's wireless broadcast range. And on a lan, the closer you can get to limiting the problem to the specific port the better. You probably won't get to the optimal level in the real world, but problems resulting from not doing so should be considered a network problem.
    3. Re:Lets focus on the real problem by nahdude812 · · Score: 1

      Well I don't know what Duke's hardware is, and I don't know what the iPhone is doing to bring it down, but I can imagine circumstances where the network going down under excessive load does not represent a fault in the network in any sense other than perhaps capacity planning. If all iPhones perform certain operations at specific times based on the phone's clock (which they will all be synchronized due to being based on the time advertised by the cell network), a network planned for X number of normal devices can suddenly become very very overwhelmed if those devices all simultaneously reauthenticate.

      In such a circumstance, the "fault" in the network is failure to anticipate the unusual nature of a specific device which did not exist at the time the network was planned. Suddenly a network capable of supporting X thousand standard wireless devices can only support X/5 thousand iPhones. Calling this a fault in the network is like calling lack of CSS support in HTML 1.0 a fault. It's just not what it was designed for.

      I'm not saying that is what is necessarily going on here, but it's at least plausible. Where the "fault" lies is an exercise for the reader, but I'd certainly be inclined to look toward the device which behaves differently from all other devices in the same class, whether or not it manages to break specification.

    4. Re:Lets focus on the real problem by Anonymous Coward · · Score: 1, Informative

      How in the world you got moded up for this is I will never know. It is just completely wrong. If you send an AP a packet it has to AT LEAST read the header. You can bring down ANY network just by sending it more headers then it has bandwidth.

    5. Re:Lets focus on the real problem by brunes69 · · Score: 1

      It's wireless. Any device can "bring down" everyone else by flooding it with anything. It's a shared medium.

  13. Re:Economic class and higher education by Mattintosh · · Score: 1

    free universal higher education

    It would probably be prudent to fix the existing "lower" education systems we already have so that they are once again adequate training to hold a normal job. We should be fully trained in "general studies" by the end of our 6th or 7th year of school, and ready to take 4 or 5 years of specialized training for a field. The first 4 or 5 year specialist training course should be paid for by the government, any additional ones, well, ka-ching!

  14. Taking out Cisco Router with ARP Floods? by xRelisH · · Score: 5, Interesting

    Umm, a bunch of ARP Requests by a few mobile devices shouldn't be knocking out a Cisco router. These AP's are supposed to be able to withstand much worse than a few of these things.

    I call bullshit. I say it's their IT/Computing Department is blaming their poor infrastructure on iPhone.

    1. Re:Taking out Cisco Router with ARP Floods? by technormality · · Score: 5, Insightful

      18,000 arp requests a second? Smells like a spanning tree loop to me. Thats where I would start looking. Could be a single AP bridging the same vlan with spanning tree disabled. Anyone roaming into into its range could cause havoc.

    2. Re:Taking out Cisco Router with ARP Floods? by RealGrouchy · · Score: 3, Funny

      Smells like a spanning tree loop to me. Oh, sure. Blame it on Tarzan!

      - RG>
      --
      Hey pal, this isn't a pleasantforest, so don't waste my time with pleasantries!
    3. Re:Taking out Cisco Router with ARP Floods? by Nasarius · · Score: 1

      Exactly. A properly configured and administered network should be highly resistant to a deliberate DoS attack, much less a defective client device. If your wireless network is so damn critical, you sure as hell shouldn't be relying on everyone to play nice.

      --
      LOAD "SIG",8,1
    4. Re:Taking out Cisco Router with ARP Floods? by brunes69 · · Score: 2, Informative

      Are you somehow trying to imply that a campus-wide network that supports THOUSANDS of wireless devices with no issues, is automatically the one to blame when 1-2 iPhones bring it down, without even knowing the details?

      It's amazing the Apple fanboy-ism around here. I have seen MANY devices have flaws like this in my time. Everyone knew the iPhone, as a first gen product, was going to have it's problems. This is likely one of them.

      And no matter what you seem to think you know about WiFi - one device can EASILY flood others off of an AP with a lot of ARP requests, because they will suck up all the available bandwidth for itself. It is a well known fact very easy to DOS a wireless access point in this way. You gotta remember WiFi is a shared medium every client doesn't have dedicated bandwidth by any stretch of the imagination. It is not hard at all to assume that this is a broken WiFi driver in the iPhone.

    5. Re:Taking out Cisco Router with ARP Floods? by swb · · Score: 1

      Do any of the more "enterprise" APs, supposedly designed for large environments like campuses, have multiple ethernet jacks for failover/redundancy?

      It sounds more like a misnegotiation between the iPhone and the AP and the iPhone falling back to some kind of "default" (eg, 169.x.x.x) addressing and doing an arp request to ensure it doesn't get a duplicate.

    6. Re:Taking out Cisco Router with ARP Floods? by GooberToo · · Score: 1

      It is not hard at all to assume that this is a broken WiFi driver in the iPhone.

      Technically, the WiFi driver is probably ok, afer all, it's talking to the AP. The problem appears to be a layer two issue which means it's probably a bug in the IP stack rather than the WiFi driver (layer one).

    7. Re:Taking out Cisco Router with ARP Floods? by jvkjvk · · Score: 1

      No, I don't believe they are your straw man. It is also amazing the anti-apple fanboy-ism here, too.

      Let's look at in the reverse. Are you trying to claim that a network should be able to be brought down by a few rouge devices? Let's not get into EMP generators, or other disruptors, but commercial devices. The facts seem to be that a few devices take down NOT JUST the AP they are in range of but large sections of the local fabric.

      I'm not trying to claim that there's no flaw in Apple's device, BTW. Certainly one device could cause an AP to be useless and with enough power several AP's. But at that point we're talking jamming, not protocol misuse. For a few devices of this type to wreak the kind of havoc talked about means that there are also flaws in the network.

      I may be proven wrong, but is is pretty hard to assume that this is only a broken WiFi driver in the iPhone.

      It is so hard to understand that both are probably happening?

  15. HOWTO please by Nikron · · Score: 3, Funny

    I want to request a mac address from my access point. Anyone want to post a HOW-TO?

    --
    Disclaimer: Disregard the above post.
    1. Re:HOWTO please by Idbar · · Score: 1

      Man! You can imagine how revolutionary the iPhone is, it requests MAC addresses not IP addresses. No wonder why it's messing up that network.

    2. Re:HOWTO please by Technician · · Score: 1

      I want to request a mac address from my access point. Anyone want to post a HOW-TO?

      1 Turn the AP upside down
      2 Read the MAC address off the sticker

      You are welcome. I'll be here all week.

      --
      The truth shall set you free!
    3. Re:HOWTO please by flyingfsck · · Score: 2, Funny

      Well, it is an Apple device - of course it would request a Mac address.

      --
      Excuse me, but please get off my Pennisetum Clandestinum, eh!
  16. Well tested by Anonymous Coward · · Score: 3, Insightful

    Not to mention that there are several hundred wireless access points on the Apple campus, and several hundred (possibly thousands) of iPhones on the same campus. You'd have thought that any inherent problem with the phone and networking would have been caught, isolated, patched, and distributed by now...

    I'd lay odds there's something screwed with their network...

    1. Re:Well tested by statusbar · · Score: 1, Insightful

      Yeah, but the wireless access points at the Apple Campus are probably Airport Extreme base stations. Perhaps that is why it works there...

      jeffk

      --
      ipv6 is my vpn
    2. Re:Well tested by rob1980 · · Score: 3, Insightful

      You would have thought, but what happens on paper and what happens in the real world are often two entirely different things. It all goes back to how many possible different configurations you can test for in a laboratory before you let something go loose in the wild.

    3. Re:Well tested by Anonymous Coward · · Score: 1, Funny

      ...using 802.11g and 802.11n. I don't see how other hardware could cause a problem with such a standard.

    4. Re:Well tested by MidnightBrewer · · Score: 3, Insightful

      If you RTFA, you'll see that the iPhones were activated off-campus and were trying to access a non-existent IP, most likely related to the first IP that the iPhone came into contact with after being activated. Whenever the iPhone lost connectivity on campus, it would try to seek out that original IP upon re-establishing a connection. In the case of Apple testing on their own campus, the phones were most likely activated at Apple and stayed the majority of the time at Apple - thus the problem never had a chance to crop up. Bizarre behavior, but bugs will happen.

      --
      "Give a man fire, and he'll be warm for a day; set a man on fire, and he'll be warm for the rest of his life
    5. Re:Well tested by bberens · · Score: 3, Funny

      Well, obviously the Airport access points will give the iPhones MAC addresses as the summary suggests... unlike most brands of access points. =)

      --
      Check out my lame java blog at www.javachopshop.com
    6. Re:Well tested by Actually,+I+do+RTFA · · Score: 1

      I'd lay odds there's something screwed with their network...

      If there's something that Cisco screws up enough times on many people's networks, maybe it's cheaper for Apple (in terms of reputation and other costs) to just patch the iPhone not to break one malconfigured network. Like many web developers go out of their way to accomidate IE.

      --
      Your ad here. Ask me how!
    7. Re:Well tested by Anonymous Coward · · Score: 1, Insightful

      Since IE is the dominant browser (and has been for the quite a while), I'd say they go out of their way to make it work for Firefox , opera , etc.
      Websites are developed for browser being used to most by their visitors. Unless theres been some change in the laws of common sense..

    8. Re:Well tested by domc · · Score: 3, Insightful

      You might think that is the case, but it is not. Firefox, being standards compliant, is very easy to develop for. Much of the work is in working around IE bugs and general weirdness.

      Dom

    9. Re:Well tested by Lockejaw · · Score: 1

      Here I was thinking code was supposed to be developed based on interface standards, and adapting it for slightly-off implementations was going out of your way.

      --
      (IANAL)
    10. Re:Well tested by Jay+L · · Score: 1

      And you don't think those access points are all made by Apple? That's not much of a test.

    11. Re:Well tested by statusbar · · Score: 1

      The problem is not the wireless standard, it is the other parts like DHCP server and NAT...

      Some wireless router's firmware just plain sucks.

      --jeffk++

      --
      ipv6 is my vpn
    12. Re:Well tested by x2A · · Score: 1

      In theory, 'in theory' and 'in practice' are the same, but in practice they're different...

      --
      The revolution will not be televised... but it will have a page on Wikipedia
  17. Apple's Campus by mandos · · Score: 1

    I would imagine that this problem is either A) a configuration problem on the school's end, or B) will be fixed fairly quickly. I suggest "fixed quickly" because if this is a problem, then all those iPhones Apple is giving to their own employees will crash the Apple campus wireless network too. Plus given all the amazing paid and free press Apple is getting on the iPhone I'm sure they don't want any significant problems arising to generate legitimate bad press about their shiny new product.

    --
    Mike Scanlon
  18. Here's a capture of the packet by robpoe · · Score: 1

    There's no place like 127.0.0.1!!!

    followed by ..

    ET iPhone 127.0.0.1

    --
    = Grow a brain...
    1. Re:Here's a capture of the packet by mkiwi · · Score: 1
      it's:
      There's no place like ~/
      I'm sorry but it just doesn't make sense to say "there's no place like localhost," but then again I do *NIX not windows so maybe home is in documents and settings there?

      I know this has less appeal, but this is more technically correct:
      There's no place like "C:\Documents and Settings\USERNAME"

    2. Re:Here's a capture of the packet by Spikeles · · Score: 1

      Actually it'd probably be more along the lines of

      There's no place like "C:\Documents and Settings\%USERNAME%"
      or
      There's no place like "%USERPROFILE%"

      --
      I don't need to test my programs.. I have an error correcting modem.
  19. Not apple's fault by megaditto · · Score: 1, Informative

    It's the university's, since their network people allow ARP broadcasts to cross subnets.

    --
    Obama likes poor people so much, he wants to make more of them.
    1. Re:Not apple's fault by JFitzsimmons · · Score: 1

      Would you care to explain how that is even possible?

      --
      Beware he who would deny you access to information, for in his heart he dreams himself your master. -Anonymous
    2. Re:Not apple's fault by JFitzsimmons · · Score: 2, Informative

      Wait, I think I know what you're suggesting here: You're saying that more than one IP network is being used within a single broadcast domain, and all of the clients connected to that broadcast domain receive the ARP request since it is a layer 2 broadcast. I think that's irrelevant, but it does makes sense, and you would hope that VLANs would help with this problem. VLANs probably ARE helping considering that only certain segments are going down and not the whole thing. Presumably only VLANs with iPhones connected are being DoSed. I think this is clearly an iPhone problem; It shouldn't be flooding a network asking for information it already has and/or is unable to get. Now that I think about it, what you say is happening is probably true, but is completely unavoidable, by design. The only way to limit layer 2 broadcasts is to split up broadcast domains with VLANs and use layer 3 routing. You can't vlan the clients on a wireless access point because a WAP is effectively a hub. In theory any malicious person would be able to join the wireless lan and spew layer 2 garbage addressed to FF:FF:FF:FF:FF and there's nothing anyone could do.

      --
      Beware he who would deny you access to information, for in his heart he dreams himself your master. -Anonymous
    3. Re:Not apple's fault by Dorkmunder · · Score: 2, Informative

      you actually can separate out traffic into VLAN's from a WAP, you would just have to have an AP that could run a trunk back to a switch and then you could run a RADIUS server or something to do the segmenting (either based on a user login or by MAC address). In fact they could create a separate, dead-end VLAN on all their AP's that all iPhones are "switched" to if the iPhones' MAC addresses have enough in common to sort them out (without dead-ending a bunch of MacBooks or something).

    4. Re:Not apple's fault by JFitzsimmons · · Score: 2, Informative

      Except a WAP is a hub. You can't segment it. Everything gets broadcast over the same medium if it is a broadcast packet or not.

      --
      Beware he who would deny you access to information, for in his heart he dreams himself your master. -Anonymous
    5. Re:Not apple's fault by firedeveloper · · Score: 1

      You mention that this is an iPhone problem, but if the sorry excuse for Wireless Access Points that Cisco sells can be so simply crashed by simple ARP requests, then my friends we have a new - very simple - DoS attack that can easily exploited to bring down any Cisco Wireless network.

      This one clearly lies in Cisco's camp to fix...

    6. Re:Not apple's fault by JFitzsimmons · · Score: 1

      I had assumed that it was simply saturating all the available bandwidth with arp requests. There are plenty of things that can DoS a network and there's very little anyone can do about it. Set your IP address to the same thing as the local gateway, for example. And for extra measure, set your MAC the same too.

      --
      Beware he who would deny you access to information, for in his heart he dreams himself your master. -Anonymous
  20. Re:Economic class and higher education by porcupine8 · · Score: 1

    While I agree that overall, Duke is worse than many top schools as far as being full of rich preppy kids (though they do have need-blind undergrad admissions now, but that doesn't mean they're truly fulfilling everyone's need), the article states there are 150 iPhones there. At a school of over 12,000 students plus well over 30,000 employees and faculty, I'm not sure you can say that 150 fancy phones (one for every 280 people on campus) are a sign of excess.

    --
    Warning: Apple/Nintendo fangirl. Likes her electronics cute & cuddly. May be rabid.
  21. Apple DHCP client by papasui · · Score: 4, Informative

    I'm a net engineer for one of the major US cable isps.. A VERY common issue I see with the Apple Airport Extremes is a problem with them declining offered leases infinitely. When this happens the DHCP server marks the lease as temporarily unavailable, the end result is a single offending Airport extreme can eat all the available addresses. The work around is to configure the dhcp server to ignore declines from the client. Regardless it's very annonying (and I'm typing this post on a Macbook so I'm not anti-Apple).

    1. Re:Apple DHCP client by GizmoToy · · Score: 2, Insightful

      Shouldn't the DHCP server be able to gracefully accept declines? It seems to me that getting a lease declined and then marking it unusable is a very poor implementation in the first place.

    2. Re:Apple DHCP client by Doctor+Memory · · Score: 4, Informative

      Actually, that's just what the server should do. The client is only supposed to send DHCPDECLINE if it detects that the network address is already in use. DHCP servers are encouraged to check any address offered (using an ICMP Echo Request) to make sure it is not in use. However, there's also supposed to be a switch to turn this off. DHCP clients are encouraged to check any offered addresses using an ARP packet. If the ARP packet generates a response (indicating that another machine already has the offered address), then the client should respond with DHCPDECLINE. Therefore, if the server isn't checking addresses before it hands them out, it stands to reason that it would mark them as "unavailable" if a client responds that the address is already in use. Unfortunately, the side effect would seem to be that a misbehaving piece of hardware could indeed eat all available addresses. I'd suggest that the remedy for that is to have the server check any declined address, and only mark it "in use" if it got a response.

      --
      Just junk food for thought...
    3. Re:Apple DHCP client by GizmoToy · · Score: 1

      I see. As you can tell I wasn't intimately familiar with the protocol. Thanks for explaining it.

      The design does make sense, then, and Apple's device is just misbehaving. It seems like a smart idea to check those kind of things, though, especially if trusting that a possibly rogue device follows the protocol can result in the consumption of every available address.

    4. Re:Apple DHCP client by Sycraft-fu · · Score: 1

      You have to remember that LAN protocols are fairly "friendly" as it were. Since all the devices are part of the same local network, there is a presumption that they should place nice to a certain degree. It isn't designed with really high security, nobody trusts nobody, in mind. After all DHCP itself isn't this really secure system. When you turn on a DHCP system is basically shouts "Hey is anyone here a DHCP server?" It then takes the first response it gets and uses the information provided. There's no check for validity or anything like that.

      In fact we had problem related to that with some of the original Airports. For whatever reason, they were designed to run DHCP servers on all ports by default, including the uplink. This is extremely broken behaviour. Now it's not a problem (though not useful) if they are connected to, say, a cable modem, since the provider will filter all that shit on upstream. However if they are on a LAN, it's a big problem. On our campus what would happen is one would get hooked up and a building would stop getting addresses. The Airport would get a response out before the campus DHCP server, and thus the computer would use the Ariport's information, which wasn't what it needed.

      It was a major problem until they changed how Airports worked.

      Now one can argue DHCP should be redesigned better, but it isn't and you do have to understand that a big part of the reason is to make it easy. DHCP is supported to make it zero config on the client's end. They aren't supposed to have to know ANYTHING about the network or input any information at all to make it work. Thus there's no system for authentication or anything like that up front.

    5. Re:Apple DHCP client by Anonymous Coward · · Score: 1, Interesting

      I work for a major university, and one of my projects has a few dozen Macs...I'm not a network engineer just an educator that uses a lot of technology, but I can configure a router and have had to build my own routing tables in the past :-) This may also be considered under NDA even though I've never signed anything and wouldn't work anywhere I needed to do anything but protect my own clients privacy, so I will be posting this anonymously.

      *BUT* on my campus we switched up to Cisco a few years ago from another major manufacturer. The Macs worked perfectly on the other manu, and if there weren't that many on the network, we could get a few running on the Cisco. I bring an entire class in? Nope.

      For months, we worked with Apple and Cisco, with Apple claiming they use the standards as provided, while Cisco claiming WE ARE THE STANDARDS. Without giving too much information (again, NDA) we have some killer network engineers. One of the engineers running some linux based laptops noticed that everytime he hooked up, it took considerable resources away from the Cisco routers. Of course, this was a month or two into the pissing-fest. He used that particular network stack as it was 'clean'...or some other bullshit (this is what he did for a living, he needed his tools to work perfectly). This was the clue that there was something not right and it wasn't on Apple's side.

      From what I understand (and I could be completely wrong), it came out that Cisco was targeting some Windows quirk in their networking and expecting everything that connected to it to contain that same quirk. If it wasn't nonstandard, things were a little wonky. Supposedly, a robust router could deal with it as if it were nothing, but when 'certain manufacturers' tried to optimize speed based around this, it caused problems with the ones that followed the rules. Now, one of the reasons people go with Cisco is that they will offer you custom patches or other services. Thats what they did for my university and things have been perfect since them.

      Again, this is what was reported back to me. It could be complete bullshit. I know as the routers were upgraded, I had no problems getting my Macs to connect wirelessly after that. Entire mobile classrooms were no problem. Most of the conversations were way over my head and maybe they oversimplified things for me. Fuck if I know.

      I wouldn't be surprised if this were the case with the iPhone...but from an ever more mobile perspective.

    6. Re:Apple DHCP client by thomas.galvin · · Score: 1

      Therefore, if the server isn't checking addresses before it hands them out, it stands to reason that it would mark them as "unavailable" if a client responds that the address is already in use. Unfortunately, the side effect would seem to be that a misbehaving piece of hardware could indeed eat all available addresses.


      This is just one more reason you should Never Trust The Client.
    7. Re:Apple DHCP client by GooberToo · · Score: 1

      I'm just adding to what you provided.

      When you turn on a DHCP system is basically shouts "Hey is anyone here a DHCP server?" It then takes the first response it gets and uses the information provided. There's no check for validity or anything like that.

      That's right. If you place another DHCP server on a nework, you can begin handing out DHCP addresses for your network. The client will use the first response it gets. There is no end of associated security implications here. In fact, it would be a great way to penetrate into a network. Why? Because DHCP can provide all sorts of information like DNS, gateways, NTP, so on and so on. This means it opens the door for IP spoofing, man in the middle attacks, and even sniffing of the entire segment; limited only by the number of clients you have snared. And there are ways to force all DHCP traffic to the hostile DHCP server. Hint, hint, the mechanism was mentioned by various posters to this article.

    8. Re:Apple DHCP client by greed · · Score: 1

      Given that Certain Versions of Windows have their default firewall configuration (as of Service Pack 2, anyway) set to drop ICMP ECHO_REQUEST on the floor, I'm pretty sure the DHCP server from that same vendor doesn't bother with them.

      I'm also guessing, though I haven't yet sniffed the traffic on my home LAN to confirm, that the client from that same vendor doesn't bother to ARP WHO_HAS the address it has just been given. (Though it _DOES_ notice IP address conflicts; when the switch at my office crashes and the Windows boxes go to self-assigned addresses, they all pop up with a conflict... because they all self-assigned the same address... because the switch was down and they couldn't talk to each other....)

  22. MAC filtering is not a solution by icydog · · Score: 2, Informative

    For all you saying "It's Duke's fault! Secure the network!" maybe you should consider that Duke provides wireless access to something like 15,000 undergrads, grads, faculty, etc. Duke's network is set up so that you can connect to a pool of internal IPs with no authentication, but before you can actually go to any sites other than the network registration site, you have to type in your Duke ID and password.

    This is an effective solution. Can you imagine if Duke locked down APs with MAC filtering? You'd have 10,000 "authorize my MAC" requests between August 15 and 30 each year on an already-overwhelmed IT staff, and you can spoof MACs anyways. How many people actually know what a MAC is and how to find it? Sure, they could provide a tool that automatically detects your MAC, but how are you going to download it if you can't get on in th first place?

    Also, please don't suggest WEP/WPA, because distributing a password/passkey amoung that number of users is as good as not having one at all. And a more complex solution, like PKI or smartcards, is going to create more headaches than it's worth when deployed to this number of users.

    1. Re:MAC filtering is not a solution by doxology · · Score: 1

      Stanford does MAC filtering. -A Stanford student.

      --
      sigfault. core dumped.
    2. Re:MAC filtering is not a solution by toddestan · · Score: 1

      If it's anything like what my school does, it is MAC filtering. What they do when you type in your user name and password is tie that machine to you by its MAC address. The typical user has no idea what is going on either, as they can get your MAC address from the DHCP request so no special software needed, and works on any computer. If it's like my school too, you only get one MAC address without special authorization. It's still venerable to MAC filtering obviously.

    3. Re:MAC filtering is not a solution by mr_matticus · · Score: 4, Interesting

      Oh come on. MAC registrations are almost wholly automated at any given large university--including Stanford, Berkeley, UBC, UC Davis, and Penn, where I have had personal experience. All you do is login with your staff (or I suppose student) account information and head to a page where you enter the MAC address(es) of your computer(s) along with your employee number and birthday or some other personally identifying information they already have on file. You click submit, and within 30 minutes you get an email saying your computers have been authorized.

      The only downside is that some schools require this must be done from an authorized computer, so you have to head to a computer lab or classroom the first time you do it. Other schools allow you to get into the system from any Internet-connected computer, which is the ideal solution, since it's behind a two-part authentication system anyway.

    4. Re:MAC filtering is not a solution by stealthytaco · · Score: 1

      Yea, I'm a Berkeley student as well and our wireless uses username:password authentication (Kerberos, I believe). MAC address filtering is used for the dorms but not for on-campus wireless.

    5. Re:MAC filtering is not a solution by mr_matticus · · Score: 1

      Wireless networking is username/password only. Wired and campus networking (i.e. staff and student housing) is done by automated MAC registration. Lowly AC students notwithstanding, it is indeed how it's done. I've been in the NOC.

      My comment was regarding MAC filtration systems automation, not which parts of which networks on which campuses use it. Hopefully once you earn your degree you'll learn how to read. But you're on Slashdot, so reading comprehension doesn't seem tremendously likely in your future.

    6. Re:MAC filtering is not a solution by stewbacca · · Score: 1

      Or maybe again, it IS Duke's fault, unless somehow I'm missing all the stories about how one of the leading wireless access campuses in the country (University of Texas, in Austin) is falling apart due to iPhones. UT has a much broader coverage, in terms of geography, and serves something like 50,000 students.

    7. Re:MAC filtering is not a solution by Titoxd · · Score: 1

      You don't have to say that you can't do this, when it is already being done. My university campus has 5x the amount of students Duke has, and for the sake of argument, let's say that 20,000 of them have laptops. If you log in from one of the "shared" sites, anyone who enters the campus can access the Internet via guess access, or by logging into a separate subnet with a 600-minute session. If you are registered to the university, be it as a student or staff, and you want to log in from another "private" wi-fi site, it automatically forwards all HTTP requests to a DHCP registration/authentication site. In this site, you must register your MAC address (and have to re-register every semester) via the automatic detection wizard, and also have to accept a series of security tests to be run, to avoid blatant security holes. If you pass the tests, your MAC is stored in the database, along with your user Id. If you have already registered, you can bypass the tests, and get assigned an IP address automatically.

      Heck, just the security tests makes it a good idea.

    8. Re:MAC filtering is not a solution by mr_matticus · · Score: 3, Interesting

      You make the mistaken assumption that the goal of MAC address restrictions on university campuses is to crack down with an iron fist. It's not. Since the networks are so large and fluid, with tens of thousands of users and machines, it's pointless to expend tremendous funds to lock down the Internet like a Defense Department project.

      MAC address filtering is simply a roadblock to keep the general public off the network. This need must be balanced with the high number of legitimate visitors on campuses (for presentations, symposiums, conferences, guest lectures, and all sorts of other purposes) which need to have a way to access the Internet (simple using preconfigured authentication tokens).

      The students and staff are not the concern at all. Their MAC address spoofing and playing around is simply a matter of course. It's people outside the campus community that they want kept out. A combination of authentication and MAC filtering pretty much takes care of that. Even if they do successfully spoof a valid MAC, they don't have a username/password to get past the login screen. If they've gotten all of that, there's really nothing practical that will stop them from gaining access. It's also irrelevant for that handful of people. There's little point to waste any time or money tracking them down or even trying to find those isolated incidents unless a crime or breach occurred as a result.

    9. Re:MAC filtering is not a solution by TheoMurpse · · Score: 1

      Can you imagine if Duke locked down APs with MAC filtering?
      Sadly, the Japanese university I attended did precisely this. Oh, and only allowed port 80 traffic. I couldn't use POP for SMTP for months (until I got my own bloggotubes connection at my house).
    10. Re:MAC filtering is not a solution by AlXtreme · · Score: 1

      Also, please don't suggest WEP/WPA, because distributing a password/passkey amoung that number of users is as good as not having one at all.

      It's not like there are better protocols with proper authentication servers that could be used together with your ID and password to only allow access after you authenticated. This would stop anything but 802.1X-traffic from being accepted at the AP, and no client is able to flood the internal network.


      Win XP and OS X have 802.1X support built in. Heck, there's even a Linux client (xsupplicant). Handing out IP addresses to unauthenticated clients is silly in such an environment.

      --
      This sig is intentionally left blank
    11. Re:MAC filtering is not a solution by AncientPC · · Score: 1

      UT Austin wireless runs off WPA (TKIP / PEAP) and is significantly larger than Duke. The main reason why this works is because anyone associated with UT has an online account linked to their SSN (disallowed as a form of ID, but UT was grandfathered in) and user role that is used to authenticate them on the network.

  23. What's the big deal? by PCM2 · · Score: 3, Insightful

    So, who cares? So he submits stories from Network World. He probably works for Network World. Does that fact alone make the story less valuable or interesting? If someone else had submitted the same story, it would be OK then? Slashdot has editors and a moderation system. There's nothing inherently deceptive in submitting your company's (or your own) stories.

    --
    Breakfast served all day!
    1. Re:What's the big deal? by bit01 · · Score: 2

      There's nothing inherently deceptive in submitting your company's (or your own) stories.

      If they make clear who they're representing then in general true.

      However, at some point excessive volume equals spam and that crowds out alternative points of view and stories.

      ---

      Free speech is compromised by too much noise as well as too little message. Most advertising is content free noise.

    2. Re:What's the big deal? by Afecks · · Score: 1, Offtopic

      But what if everyone submits every story from every news site at the same time continuously? The resulting force generated by the tubes could tear the universe apart!

    3. Re:What's the big deal? by PCM2 · · Score: 1

      It is funny, but s/he also has a point. I dunno. Maybe something for the principals of Slashdot to think about?

      --
      Breakfast served all day!
    4. Re:What's the big deal? by toadlife · · Score: 1

      The resulting force generated by the tubes could tear the universe apart! Is that similar to crossing the streams?
      --
      I don't always use unix-like operating systems; but when I do, I prefer FreeBSD.
  24. Good reason to move to IPv6! by Doctor+Memory · · Score: 1

    I also doubt the iPhone has enough horsepower to pump out 10Mbps of ARP requests A 486 can swamp a T-1 line, I don't doubt that the ARM processor(s) in the iPhone can max out a 54Mb 802.11/g link. One ARP request is only about 28 bytes, and it's not like there's a lot of computation involved in creating one. I agree, it sounds like there's some kind of misconfiguration, I can't imagine why any device would fire off that many requests unless it was receiving some kind of response that caused it to send a new request. Hmmm, I wonder if it's some kind of timing issue, maybe the phone is receiving multiple responses from multiple APs very closely spaced, and it's triggering some kind of multiple response? IANANE, so I'll stop guessing.
    --
    Just junk food for thought...
  25. Well... by msimm · · Score: 1

    At least 2 of his 20 published submissions were from non-networkworld sources. Of course his only posted comment is a 'correction' to a story linking which he's trying to point to....networkworld. Astro-tuffing should get some kind of modding too. And why are submitters not linked to directly, I had to cut/paste his name in just to see his profile.

    --
    Quack, quack.
  26. Re:Economic class and higher education by arminw · · Score: 2, Insightful

    .........but why should tuition be a barrier for anyone in a society as wealthy as ours?.......

    You are a fountain of ignorance, at least concerning your diatribe against Duke. Instead of being wealthy and pay tuition, you can also simply be smart and hard working. My daughter just graduated from Duke, from which she had gotten a full scholarship. Without that, there would have been no way she could have afforded to study there. Many Colleges and Universities give scholarships to exceptional young people who do NOT come from wealthy homes. Most likely, someone like you wouldn't get such a scholarship, especially in view of your ignorant rant.

    --
    All theory is gray
  27. Re:Economic class and higher education by Citius · · Score: 1

    I must agree that 'free universal higher education' would be wonderful. The question is: where would it come from? Humans naturally complain about their situations and say that 'such and such' must happen. However, when they're called to sacrifice some amount of money - in the form of taxes - to accomplish such a fact, what then? They're stingy, reluctant, and complain even more. Furthermore, look at how many elderly people are disgruntled over paying taxes to the town/state for education when they don't even have children anymore. Look also at taxpayers who complain over paying for things that directly benefit the community and only indirectly benefit themselves. Yes, Duke is extremely fortunate to have a foundation with lots of money to do stuff with. I must admit that it's done very well as a money-making machine - raising rich alumni to add to Duke's coffers - but that's, well, business. In essence, for a 'utopian' society, something like communism or marxism would need to be in place. On the other hand, such practices stifle scientific advancement - and the inequalities drive us to achieve more to reach those levels. It all depends on how you look at it.

  28. Most likely a Cisco bug - firmware upgrade needed. by mveloso · · Score: 1, Informative

    They're not using the right terminology. It sounds like the iPhones are doing an ARP request for an IP address that isn't on the Duke network. Maybe it's trying to update its ARP tables?

    Anyhow, the ARP standard is unclear enough that it's undefined what the response should be for an ARP request to an unknown destination should be (http://www.faqs.org/rfcs/std/std37.html). Theoretically, every packet that you send needs an ARP entry, which means that every packet sent to something that isn't in your machine's ARP table would generate an ARP request. In reality, it seems that your router tends to substitute its own MAC address for non-local ARP entries (since all non-local packets go through the router, you really don't have to know what the real MAC address is)

    It sounds like the Duke Cisco routers are misconfigured somehow, and are generating an ARP storm. Some Cisco routers has a bug where a packet sent to an IP address for which the router doesn't have an ARP entry causes the router to broadcast all subsequent packets across all of the router's ports. It happens in the cable industry when someone swaps out a GigE card and forgets to update the ARP tables on the Ciscos. Solution: use dynamic ARP tables, which can be a security hole.

    FWIW.

  29. So when you by phoebe · · Score: 5, Interesting

    spend thousands of dollars on expensive Cisco AP equipment, a factor above consumer grade systems, and something goes wrong, the extra instrumentation doesn't help and the vendor just blames somebody else? Is this a good reason not to go with expensive equipment, or just colossal incompetence of the administrator who configured everything?

    1. Re:So when you by SatanicPuppy · · Score: 2, Insightful

      Answer: Yes

      Cisco has it's moments, but IMHO they're not remotely worth the premium you pay. Go with HP; they sell the same level of hardware and offer the same level of support, but it costs a hell of a lot less, and since it costs so much less you can get the hardware you actually need rather than just what you have to settle for because your budget doesn't swing more than one 10,000 dollar PIX.

      Add to that the byzantine configurations, and it's easy for a non-gifted engineer to make pretty big mistakes.

      --
      ad logicam Claiming a proposition is false because it was presented as the conclusion of a fallacious argument.
  30. Wrong problem by ChromeAeonium · · Score: 1

    Tuition isn't a barrier for anyone who really wants to attend the school No, getting in is the barrier. A quarter or more are legacies, 5/8 had access to the best education (aka money), and that leaves an eighth (or less, more likely) for people from average/below average economic backgrounds. (Note: statistics made up, but I'd bet they're close.) Of course, there's also a huge sociological aspect. For example, who's going to do better in school, a wealthy child with no worries who gets all of his/her whims and goes to a high quality school, or a lower class one who has to go through all the crap associated with that and goes to McSchool, where teachers teach the test? The answer's obvious.
    1. Re:Wrong problem by gravesb · · Score: 2, Insightful

      I'm going to guess the one who has to work to put himself through school, because he realizes the cost of the education, and is more willing to dedicate himself to it. The rich kid who has his school handed to him generally looks at the education as a given, and doesn't put in the effort. In both my undergraduate and graduate studies, that was often the case. Of course, there are rich, smart, dedicated students, but your assertion that the rich kids who don't have to work do better in school has been very false in my experience.

      --
      http://bgcommonsense.blogspot.com
    2. Re:Wrong problem by ChromeAeonium · · Score: 1

      If you're talking about college, you're probably right on the money on most (and by most, I mean a vast majority of) cases, but I was actually talking about high school, ect. What I meant was, since rich kids usually have better pre-college resources, including a better school/general environment, therefore they do better in their pre-college years (on paper, anyway), allowing them to more easily attend a better college. After that, though, in may cases it does go downhill. (Where I grew up, we all said there was something in the water, because every year there would be a group of wealthy (by the area's standards, not millionaires on anything) males in the honors class in high school who would graduate in the top fifth, go to the local university campus, and party their way out in their second year.) However, by that point, the damage has already been done, they wealthy do average in a good college, those who understand education's value do good in an average college.

  31. Re:Most likely a Cisco bug - firmware upgrade need by Anonymous Coward · · Score: 5, Insightful

    In reality, it seems that your router tends to substitute its own MAC address for non-local ARP entries (since all non-local packets go through the router, you really don't have to know what the real MAC address is)

    Say what? The last time I saw something equally screwy it was a Cisco LightStream 1010 (ATM switch) running LANE (LAN Emulation) that played no part in layer 3 at all, yet it was still building up an ARP table of every IP datagram that flowed through it (and wondered why it kept running out of memory).

    If you send out an ARP for an "unknown address", you'll get no response - it's not up to the router to respond on behalf of "non-local packets", it's up to the client to determine that the destination is non-local (by using the network and mask together) then picking a suitable gateway (usually default) for sending the packet on its way.

    Therefore, the client already knows it needs to send the non-local/unknown-addressed packet through the router so it explicitly ARPs for the router's MAC address (if not already cached) - nothing to do with trying to get the MAC of the remote destination.

  32. PEBKAC by flyingfsck · · Score: 1

    It sounds to me as if the problem is at least partly with the network admins who don't know their ARP from their MAC...

    --
    Excuse me, but please get off my Pennisetum Clandestinum, eh!
  33. Re:The just in by CrazyTalk · · Score: 3, Insightful

    The Real WTF is - wireless at Starbucks isn't free, you have to pay through T-Mobile.

  34. Re:Most likely a Cisco bug - firmware upgrade need by Anonymous Coward · · Score: 1, Insightful

    ...it is most likely ARP traffic. I'd bet some piece of the WLAN infrastructure at Duke is doing UNICAST instead of MULTICAST, and the resultant flood...

    ARP is broadcast (not unicast nor multicast, unlike say, EIGRP which does use multicast); "floods" tend to be caused by broadcast (if from a single source - unicast if from multiple sources).

  35. We had having a similar problem... by rob1980 · · Score: 1

    ... where I work. Zhone changed something in the firmware that ships with their 4200IP DSLAMs that caused the Cisco equipment we put one behind to go down unless we're fast enough in changing a few choice settings first. We never found anything wrong with the Cisco equipment, and we were always able to fix the problem by reconfiguring the DSLAM to knock off the monkey business. The iPhone and a $3,000 DLSAM ought not to be flooding a network with ARP requests like that, but after seeing this I'm wondering if Cisco is completely faultless as Duke's people seem to think they are.

    1. Re:We had having a similar problem... by Tony+Hoyle · · Score: 1

      Cisco IOS is normally full of bugs - you pick the release that works best for you and stick with it.

      example: I was runing an ED version of my router firmware. It worked fine. They eventually produced a GD version, which in a fit of madness I upgraded to. It wrote an invalid config directive in startup-config and wouldn't boot properly.

      Cisco hardware however seems to be rock solid, and their support is pretty good. It's just their software...

  36. Re:Economic class and higher education by ChromeAeonium · · Score: 1

    What you say is only partially correct. While there are opportunities for average incomes, the system vastly favors the wealthy. Just because a non-wealthy minority exists doesn't mean that its really fair. Paying for tuition isn't as bad as actually gaining admission. The fact is that that, while you can simply (not sure where you got that word) be smart and work hard, its much more likely that one who is given admission (assuming they're not a legacy) had the benefits that go along with money to compliment whatever effort they put forth. Its really only fair on paper.

  37. Re:Economic class and higher education by dsanfte · · Score: 1

    Yeah, it's nice that there are full scholarships available for the 4.0 students, how about some for the 3.5s? You can't seriously tell me a 3.5 is so much worse than a 4.0 that it should shut all sorts of doors, and as you said, without a full scholarship there are lots of people who just can't afford places like Duke.

    --
    occultae nullus est respectus musicae - originally a Greek proverb
  38. Re:Economic class and higher education by jrminter · · Score: 2, Insightful

    >> First, it's entirely possible to go to a perfectly respectable in-state school for just a few grand a year.

    Where have you been living? I have financed the education of two children who were good students and went to good state schools (U of Oklahoma, and University of Buffalo.) Both approach $15K per year with tuition, room, board, and books. That is more that "a few thousand."

    Back in the dark ages before the flood when I went to Florida State (B.S. 1977) and UMass (Ph.D. 1982) I could attend a good state school for about $2.5K. I could earn about 1/3 to 1/2 of that in a summer. Today's students can't do that anymore. I would also point out that much financial aid these days is in the form of loans. It is easy for a student at a state university to finish an undergraduate education with $50K in debt. An education at a private U can leave a debt load at least 2X...

  39. Re:Economic class and higher education by Lost+Engineer · · Score: 2, Interesting

    No. I don't care who pays too much for a phone.

    Anybody who is smart and accomplished can go to to a good school, if not Duke in particular. You can always borrow the money. Many, many, if not all good schools now have need-blind admissions. Anyways, everyone knows it's really the middle class that get screwed over on aid anyways, not poor folks.

    *Some* people with connections can get in even if they are not so smart, or really accomplished is the more accurate term, as grades count. You don't have to be rich, mind you, just related to somebody. These people, while deriving much less benefit from the education than the smart kids, also go on to pay for the whole deal for the next generation (along with the qualified students of course.)

    Without wealthy donors, the whole system breaks down, and it's just a matter of how you create them. You can tax the unwilling, maintain a huge alumni base, and bet that students will stay closer to the school, thus more likely to donate. In case you don't get the hint, I'm talking about state schools. (Smaller) private schools need to ensure a larger proportion of wealthy alums, and allowing family connections to count makes that easier, not to mention the good will from the alumni.

    BTW you just proved the point I made here. Thank you for that.

  40. Sounds plausible but what about Laptops? by goombah99 · · Score: 2, Insightful

    Okay if this is really the case, no DHCP network, then why does this same thing not happen when Laptops looking for DHCP addresses come in range of duke? For example, I would imagine that whenever there's a conference or perhaps when the student show up in september that all the laptops on campus are set to hunt for DHCP by default (since that's how one usually sets up wireless networks). Seems like you'd have the same sort of storm.

    --
    Some drink at the fountain of knowledge. Others just gargle.
    1. Re:Sounds plausible but what about Laptops? by ronanbear · · Score: 2, Insightful

      Movement. Laptops are often off when they move and most people carry them very slowly if they're off. An iPhone can move around the campus a lot faster and will try to connect to every access point along the way. In colleges a lot of movement is at exactly the same time i.e. lunch and between classes. During these times a large number of devices could move from one node to another. The network might have trouble keeping up with all the movement of devices into and out of it.

      --
      the more they over-think the plumbing the easier it is to stop up the pipe
  41. Re:Economic class and higher education by Dhalka226 · · Score: 5, Informative

    Instead of being wealthy and pay tuition, you can also simply be smart and hard working.

    He mentioned scholarships, though it was in an offhand way. You're certainly free to disagree with what he's saying, but insulting him twice in six sentences while "refuting" him with a point he already made is absolutely wrong on any level.

    Besides which, your own point is really no gem either. Your advice to get a scholarship is to be smart and hard working? It's half true, sure. Colleges do give scholarships to people with good grades--though often you also need extra-curricular activities to put you ahead even though that really has nothing to do with intelligence or hard work, merely interest in organized activities--but those are limited. If every student in the nation suddenly became smart and hard working, it would still help only an exceptionally small percentage of them receive a scholarship. In fact, since Duke is a good school you can be relatively sure that the vast majority of students who are accepted there are already smart and hard working, so even in your limited example

    I happen to think the way the OP handled himself was flamebait, but the question he raised about free education is a debate worth having. Preferably without insults.

    Congratulations to your daughter for getting in, getting money and getting through--but just because she did doesn't mean everybody else can, even those equally smart and hard working.

  42. Re: ignorant rant by delirium+of+disorder · · Score: 1

    You are a fountain of ignorance, at least concerning your diatribe against Duke. Instead of being wealthy and pay tuition, you can also simply be smart and hard working. My daughter just graduated from Duke, from which she had gotten a full scholarship...Most likely, someone like you wouldn't get such a scholarship, especially in view of your ignorant rant.

    Did you not read what I wrote? I'll post it again:

    . . .only those with wealthy families* *or the obedience necessary to create a squeaky clean scholarship worthy image can get in.

    You're right; I wouldn't get much in the way of scholarships. I'm too willing to piss people off. Also, I'm sure there are selective schools that want people more capable than me. That's OK. I don't have a problem with selection based on genuine differences in intelligence or work ethic. This isn't about me though. Plenty of capable and only slightly deviant people don't go to good colleges, or don't go to college at all, because they can't afford it and just weren't straight-laced enough to get aid/scholarships. Even if some students get in on scholarship, why should ANY of the spots go those who are more economically privileged but less intellectually capable? Maybe your daughter is smart and hard working...maybe she isn't the bland conformist that I picture when I hear "scholarship material" (try to get funds if you've had an expulsion or done significant prison time!) If you really respect her, don't you want her to go to school with other people who are at or above her level? Why should some "fountain of ignorance" be able to buy his way in? Isn't it an insult to her to say that all her hard work and talent is only worth as much as being the son of an executive?

    I know a Duke student who's extremely intelligent and hard working...but he also has a fairly well off family that supported him through prep school and now through University. Most successful people have a number of advantages in their favor. I understand that not everyone fits into the ugly demographics that we see when we think about social groups abstractly. I don't see have any of these nuances take away from my claim that education should be available to all, and access to an elite education should be based entirely upon mental ability, not on how well your parents managed to exploit the working class.

    On a related note, few of the current determining factors for college acceptance should be considered at all. Admissions offices shouldn't look at race, family status as alumni, economic class, or even past academic performance. The last item may strike you as absurd, but think about it! Leadership and project development in hobbies and non-profit work, standardized test scores, work experience, and essays are far better ways of determining ability than grades. You get good grades in K-12 by doing what you're told. If you finish the work each day and turn it in, you get an passing grades whether you understand the concepts involved or not. (In K-12) If you attempt to spend your time learning through practical experience and self study, not matter how intellectually rigorous, you'll probably get expelled. Merely setting foot off the school grounds (without permission) can get you arrested for truancy! Compulsory school is a form on imprisonment or involuntary servitude. If colleges wanted to encourage insight instead of wrote parroting, they would ignore high school grades in their admissions decisions.

    --
    ------ Take away the right to say fuck and you take away the right to say fuck the government.
  43. Re:Economic class and higher education by alan_daniel · · Score: 1

    12,000 students? Sure, if you count every grad student there is, regardless of how often they are on campus/using any wireless network. Duke has maybe 6,000 undergrads, and a much smaller student base than probably 75% of Division 1 schools across the country, and yet every other school seems to be doing fine with iPhones (such as the heaven 9 miles away at UNC)...

  44. Re:Economic class and higher education by Dhalka226 · · Score: 1

    blarg, correction: so even in your limited example... the advice isn't particularly helpful.

  45. Re: ignorant rant by delirium+of+disorder · · Score: 1

    Damnit...it's hard to win a debate in support of alternatives to the education system when you haven't slept for days and can't manage to write a few paragraphs without making so many grammatical mistakes and typos that everyone reading questions your education. I think I'll rest for a bit and resume this discussion later.

    --
    ------ Take away the right to say fuck and you take away the right to say fuck the government.
  46. Cheer up by dedazo · · Score: 1, Flamebait
    Well twitter, I'm sure you'll find a way to blame this on Microsoft as well, or at least bring them into a discussion that has absolutely nothing to do with them. And use words that make you feel cool, like "shit" and "fuck".

    Oh, you already did. Never mind.

    --
    Web2.0: I love when people Flickr my cuil and digg my boingboing until my google is reddit and I start to yahoo
    1. Re:Cheer up by Erris · · Score: 1

      Well twitter, I'm sure you'll find a way to blame this on Microsoft as well

      I'm sure he'll be right again. It only takes a decade or so for M$'s email to spilled in court. You know, the kind of stuff Twitter routinely quotes, that makes you put your fingers in your ears and call people names because you don't have real answers.

      --
      DMCA, Hollings, Palladium. What might have sounded like paranoia is now common sense.
    2. Re:Cheer up by Macthorpe · · Score: 1

      Damn it, Twitter, we really thought you'd lost the password to your sockpuppet account.

      Or did you think we'd forget if you waited long enough?

      --
      "It does not do to leave a live dragon out of your calculations, if you live near him." - Tolkien
    3. Re:Cheer up by dedazo · · Score: 1
      Hey, someone should notify twitter that we've found his long-lost twin brother. It's uncanny - the exact same hillbilly spelling, deficient grammar, hyperbole-filled FUD-laden rants, lies and unsubstantiated bullshit!

      Oh, wait...

      --
      Web2.0: I love when people Flickr my cuil and digg my boingboing until my google is reddit and I start to yahoo
  47. Sounds like spanning tree by diamondsw · · Score: 1

    Spanning Tree Protocol is the root bridge of all evil.

    --
    I don't know what kind of crack I was on, but I suspect it was decaf.
    1. Re:Sounds like spanning tree by Slashcrap · · Score: 1

      Spanning Tree Protocol is the root bridge of all evil.

      "We are the root of the Spanning Tree."

      The most mystical sounding network status message ever devised, in my opinion. I always knew those Cisco IOS developers were a bunch of hippies. There's certainly plenty of evidence that they've been smoking something.

  48. Re: ignorant rant by ChromeAeonium · · Score: 1

    hard to win a debate..making so many grammatical mistakes and typos that everyone reading questions your education Argumentum ad Hominem...people use it when they know you're right, but can't find a rebuttal. Almost like modding an insightful post flamebate/troll/offtopic.
  49. Re:Economic class and higher education by cdrguru · · Score: 2, Interesting

    Do you assume that "higher education" (past high school) is necessary for employment?

    Further, do you assume that everyone is capable of making use of such "higher education"?

    We seem to be pointed down this road in the US today and the truth is the answers to the two questions above are "no" and "oh my". So far, we're pretty far down the road of importing non-outsourceable low-skill jobs and moving everything else somewhere else so all the low-skill jobs don't exist for Americans. This isn't a long-term sustainable model because some people just aren't going to make it as "knowledge workers". Are these folks supposed to sit at home and collect welfare while illegal immigrants do the low-skill work?

  50. You can't blame it all on Apple by rickb928 · · Score: 1

    Well, actually, maybe you can. Someone posted that Airpoerr Extremes have interesting DHCP problems. I would not be surprised if the DHCP client in the iPhone wasn't just impatient, or trying to hog a lease at the expense of any other competitor device. Not the first time Apple has been caught playing 'mine's bigger than yours' in networking code.

    It wouldn't surprise me, either, that the iPhone might even try using the last IP it had. Never know, it might have just moved a few feet, and sheesh, that last AP has some hot packets, dude. Break me off another piece of that eh? Gone? Ah well, in the wireless biz, easy come easy gone.

    And, don't forget, Duke sucks.

    --
    deleting the extra space after periods so i can stay relevant, yeah.
  51. Re:Economic class and higher education by jweller · · Score: 1

    Or you can, with very few exceptions, finance your undergraduate education entirely on credit, even with no credit history, no income, and poor parents. When you're done you'll have $125k in debt, but you'll have the degree you sought.

    Maybe, just maybe, anyone smart enough to get accepted into the nations top universities, is also smart enough to understand that even if your degree says PhD in Everything from the University of God, $125k in the hole is no way to start out life.

    but maybe thats just me.....I only went to some cheap state school.

  52. Re:Economic class and higher education by ChromeAeonium · · Score: 1

    Anybody who is smart and accomplished can go to to a good school, if not Duke in particular. You can always borrow the money. Many, many, if not all good schools now have need-blind admissions. Thats assuming you get in to begin with. They may not discriminate against the lower class, but they certainly favor the upper class. So does education in general. Does anyone really believe that an average/poor kid going to a regular school has anywhere near the odds of going to a high ranking university as a rich kid going to a great high school?

    *Most* people with connections can get in even if they are not so smart Fixed it for you.

    Without wealthy donors, the whole system breaks down, and it's just a matter of how you create them. You can tax the unwilling, maintain a huge alumni base, and bet that students will stay closer to the school, thus more likely to donate. In case you don't get the hint, I'm talking about state schools. (Smaller) private schools need to ensure a larger proportion of wealthy alums, and allowing family connections to count makes that easier, not to mention the good will from the alumni. You're not saying that the legacy policy is a good thing, and that the rest of us peons should be satisfied going wherever we can afford, are you?
  53. Re: ignorant rant by trytoguess · · Score: 1

    Very true, grades aren't the optimal method of determining skill, but they are one of the better methods of measuring a persons masochism (er... how determined you are academically). Knowing a student has the patience to do things he may dislike or outright hate is an important factor, hell may be the most important factor if you want measure someone by their earning potential only.

    While I disgree with abolishing compulsory education in high school, I'd support giving high school students the same freedoms college students enjoy (study what you want to, set your own schedule, etc). Mostly because my experience as a teen makes me think most teenagers are horny and don't like schoolwork. They do however like freedom and the option to not take classes they hate.

  54. Re:iPhoneMania by BillGatesLoveChild · · Score: 1

    Troll? Someone got out of the wrong side of bed today! ;-)

  55. Re:Economic class and higher education by QuantumRiff · · Score: 1

    Screw the Mod points I've been sprinkling on this thread..
        Its nice that Google hires guys with PHD's, and gives them stock options, and fat lives of luxury, but what about those of us that work hard as coders at small mom and pop software companies. They are obviously discriminating, right up there with the Navy Seals, they won't let you even try out if you have asthma! What about those poor guys?

    When you have 50+ applicants for every single opening, you can go ahead and be choosy..

    --

    What are we going to do tonight Brain?
  56. wireless chipset by scolbert · · Score: 1

    i doubt any of this is in software these days. this has got to be an ARP storm taking down the receivers (essentially DOS "attack"). what part of the firmware does ARP requests? is the ethernet stuff built into the wireless chip(s)? does anyone know what wireless chip/chipset is in the iphone?

    Sammy at IT/Personafile

  57. Re:Nothing new here by iluvcapra · · Score: 3, Interesting

    An interesting factoid on this, though a little OT: iPhones do not appear to implement rendezvous/bonjour/zeroconf. I can't connect to any of my Mac zeroconf hosts by connecting through the *.local domain names that bonjour usually sets up, and I've read others are unable to do this as well.

    --
    Don't blame me, I voted for Baltar.
  58. Re:Economic class and higher education by Chris+Kamel · · Score: 1

    you can also simply be smart and hard working.
    And how exactly do you decide to "be smart".

    --
    The following statement is true
    The preceding statement is false
  59. Stop whining and solve the problem. by network23 · · Score: 1


    Stop whining and solve the frickin' problem.

    That's what you are paid for. If you can't solve the problem, resign and let other more competent ppl do it.

  60. I'm sorry, but *WHAT*?!?!?! by schon · · Score: 4, Informative
    Oh. My. God.

    How the hell did you get modded informative with that god-awful collection of misunderstandings and poor comprehension of clearly understood concepts?

    the ARP standard is unclear enough that it's undefined what the response should be for an ARP request to an unknown destination should be Umm, what?!?!?!

    There's nothing unclear about the standard, except when you apply it incorrectly.

    To begin with, there is no such thing as an "unknown destination" - if the address is unknown, how the hell do you send a request for it?!?! (You ever call 411 and say "Hi, I need the phone number for someone, but I don't know who they are, where they live, what they do, or anything about them.")

    Now, if you're clumsily trying to say "there's no way to answer: what is the MAC address of an IP address that is unassigned", then that's simple - there is no answer (nobody responds, so therefore there is no answer - which means that the IP address is unassigned.)

    However, if you're trying to say "what is the MAC address of an IP address that resides on a different network" then the answer is the same - there (again) will only be a reply if
    a machine with that IP address exists on the network. IP networks are virtual - you can have many different IP networks residing on the same wire. If a machine hears an ARP request for an address that is not on it's network, it just doesn't answer (the inherit assumption is that there is another IP network on the same wire, and the request is ignored.)

    ARP doesn't know anything about IP network layout - basically, machines just respond if they hear a request for their IP address.

    Theoretically, every packet that you send needs an ARP entry, which means that every packet sent to something that isn't in your machine's ARP table would generate an ARP request. No - every packet you send needs a DESTINATION (either broadcast, unicast, or multicast). Unicast packets (which is what we're talking about here) require a destination MAC address, but these destinations don't have to be resolved using ARP - it's quite possible to have some or all of them in a static table, if you like. However, it looks like you're just confused, because of...

    In reality, it seems that your router tends to substitute its own MAC address for non-local ARP entries (since all non-local packets go through the router, you really don't have to know what the real MAC address is) You are confusing IP and Ethernet (802.3, 802.11, etc.) networks. To ethernet, there is no such thing as a "non-local" packet - all packets are local.

    When you want to send to an *IP* address that is not on the local link, you look up the IP address for the router(s) to that network, ARP for it (if you don't already know it's MAC address) and send the packet to it - there is no 'substitution' involved. You never ask for the MAC address of the destination IP address, you ask for the MAC address of your router, then send it the packet for forwarding.
  61. Re:Most likely a Cisco bug - firmware upgrade need by tolomea · · Score: 2, Informative

    There is a standard called proxy arp that does essentially this. In essence the router will start responding to arps for IP addresses on it's other interfaces. The valid use cases for it are virtually all bizarre and it can cause all sorts of horrific problems.

  62. Re:Economic class and higher education by afidel · · Score: 1

    There ARE plenty of scholarships for the non 4.0 student, but you have to stand out in SOME way. I personally had a 3.3 weighted GPA in HS. I was accepted to MIT but they weren't able to find enough scholarship to make the cost reasonable. RIT on the other hand found me enough to make it cheaper to attend what at the time was the #7 CS program in the US (according to US News) than to attend an instate public university. It helped that I had a job, two independent studies, attended university part time, and was president and co-founder of two different clubs. As I said you don't always have to have perfect grades, but if you don't then you have to find a way to make yourself stand out from the masses.

    --
    There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
  63. just the beginning by az1324 · · Score: 1

    These are just the birth pangs of SKiNET.

  64. All your base... by Ecuador · · Score: 3, Funny

    But that's exactly the problem. The iPhone handshakes with a "How are you gentlemen." and asks for a MAC address, at which point the WLAN's response is "What you say !!" and it goes downhill from there...

    --
    Violence is the last refuge of the incompetent. Polar Scope Align for iOS
    1. Re:All your base... by Anonymous Coward · · Score: 2, Funny

      All your wireless access points are belong to us!!!11!1

  65. Re:Economic class and higher education by Anonymous Coward · · Score: 1, Interesting

    Are these folks supposed to sit at home and collect welfare while illegal immigrants do the low-skill work?

    You aren't looking at the situation with the right frame of mind. You assume that a business has some inherent sense of right and wrong. They do not. That's not to say they are bad or good, just amoral. A business earns profits. A business does not decide to hire illegal immigrants unless it will positively affect profits in the short run. If illegal aliens are cheaper than Americans, then they're going to hire illegal aliens. A business does not often contemplate the effects of its actions other than the effect on the quarterly earnings report.

    Most illegal aliens, and legal ones, are accustomed to a lower standard of living than are Americans. That's why they are happy to work for less than an equally qualified American will. Just like when you first buy a big screen television and it seems huge at first but over time less and less so, so to do immigrants (legal and illegal) become accustomed to American standards of living. They demand more pay and better working conditions with time. As soon as it costs more to continue employing them than more recent immigrants, it means they've been "Americanized" and there is a need to replace them with "fresh" immigrants who have not been so corrupted. Over time the cumulative effect of this is that the expectations of the American working class slowly trends downward. It's not because we want less, or are more lazy, but because each successive wave of immigrants undercuts the expectations of the previous one in a never-ending spiral. Instead of playing along with the market forces of supply and demand, American companies are choosing to make an end run around the market by importing supply from other markets.

    To answer your question, no business hiring illegals cares what unskilled Americans are supposed to do.

  66. Rendezvous by skinfitz · · Score: 1

    My money is on the issue being related to rendezvous / bonjour / zeroconf / whatever they call multicast DNS these days.

    If iPhone is 'running OSX' (yeah right...) or rather enough of it to duplicate some of the network functionality, then we would expect to see similar network traffic that we see on a network of Macs which is usually made up of a constant stream of ARP requests as OSX constantly looks for other devices on the subnet to interrogate them.

    1. Re:Rendezvous by gig · · Score: 1

      Yeah Bonjour seems to be off in iPhone, either for extra security or it's not done yet. An iPhone doesn't know the names of the machines on its own subnet.

    2. Re:Rendezvous by skinfitz · · Score: 1

      Well just because it doesn't know names doesn't mean bonjour is not working - perhaps it's working but the bit that displays the names is broken.

  67. Re:push by troc · · Score: 1

    Yeah but how will they distribute it?

    I can see it now, the patch trying to fix the iphones and keep the net up as fast as the unpatched iphones are bringing it down until eventually all the phones in the world ring at the same time. :)

    --
    Troc's dubious podcast and blog: http://www.trocnet.net
  68. Re:Economic class and higher education by Lost+Engineer · · Score: 1
    I can't argue with your first point. Education in general favors the rich, or at least those who live close to them. I will say that it is perfectly possible to go to a good private uni having graduated from a decent public high school. This I know from experience. The rest I will leave to statistics.

    You're not saying that the legacy policy is a good thing, and that the rest of us peons should be satisfied going wherever we can afford, are you? Absolutely not. I was just explaining how the current system works. I also believe that legacy admissions are good for the student body in general. Undergraduate education is an anomaly in any case. Go to a professional school, and you will see nearly everyone there borrowing the money for his education.

    I would completely advocate a free, public higher education system that is better than our own. However, at the moment I believe that our hybrid system of public and private higher education is doing a good job. Actually that's an understatement, as it is the best in the world. Our mostly-public primary and secondary education systems, however, are lacking for a first-world country. Why force the over-achieving system to be like the under-achieving one, rather than the other way around?
  69. Packet Collision? I read that last week by SpzToid · · Score: 1

    Sorry folks, this message is incomplete info; I searched heavily to provide a supporting link but failed.

    A few days ago ( > 1 week?) in the comments for an article subject I cannot recall, and engineer explained that the common bottleneck on free ISP hotsopts for VOIP use would max out at 4 client/sip-phones per access point, due to packet collision and *not* bandwidth.

    That's what he stated the average Linksys-type unit can handle with SIP packets, as I recall.

    --
    You can't be ahead of the curve, if you're stuck in a loop.
  70. Re:Most likely a Cisco bug - firmware upgrade need by huge · · Score: 1

    Theoretically, every packet that you send needs an ARP entry, which means that every packet sent to something that isn't in your machine's ARP table would generate an ARP request.
    In real life this is hardly ever needed. If the traffic is destined outside of the subnet, destination mac address will be that of the next-hop router (usually default gateway). In this case there isn't any need to send out ARP requests for those packets. Only packets to local subnet will have to have entry in ARP table.

    In reality, it seems that your router tends to substitute its own MAC address for non-local ARP entries (since all non-local packets go through the router, you really don't have to know what the real MAC address is)
    Cisco calls this functionality proxy arp. It is true that some of the cisco routers and L3 switches have proxy arp enabled by default.

    As long as the client device have their default gateway and routing properly configured it shouldn't matter if the proxy arp is enabled or disabled. On the other hand, if they use proxy arp to find the next-hop router (or default gateway) the amount of ARP traffic is significantly higher. If this is the case, the question is why not to deliver the proper default gateway by using DHCP?
    --
    -- Reality checks don't bounce.
  71. Isn't it true... by tkrotchko · · Score: 1

    Isn't it true that even if magically you didn't need money to attend a University, Duke would still have to limit it's admission?

    And when they did, what would be the basis for those limits? How smart? How good looking? How successful some person thinks you'll be?

    I mean, you've got to limit it somehow, Duke is private, they can make admissions anything they'd like.... hair color, how well you play basketball, family connections, even the ability to pay. Is that awful? Not really. My supermarket will throw out people who can't afford food. That doesn't make them immoral or even terrible.

    --
    You were mistaken. Which is odd, since memory shouldn't be a problem for you
  72. Re:push by gig · · Score: 1

    > Yeah but how will they distribute it?

    Same as iPods. When you plug in to sync your iPhone it is updated.

  73. Just ban the Apple iPhone MAC addresses then by brunes69 · · Score: 3, Interesting

    If Apple can't make hardware that works, and/or won't own up to their problems and fix them, then ban all iPhones from connecting to the university WiFi network via their MAC vendor and device ID portions. After all that is what the structure of a MAC is for - so the network admins know what kind of devices are being used.

    Banning iPhones campus wide because they are faulty would trigger some nice nasty press for Apple and piss off a lot of owners of the device - I imagine they would fix the problem much faster (or at least respond to the ticket!)

  74. Sure, if the test is well designed by Sycraft-fu · · Score: 1

    Tests for almost everything should not be testing memorization sorts of things. The reason is that bears no resambaliance to the actual reality you'll be working in. At work, if I don't know the answer I'm not only allowed but ENCOURAGED to look at Google, ask other people, check the docs, and so on. While it is useful for me to remember things I commonly need to know, I'm not expected to be a little database of information. WE've got computers for that and they are better than any human will ever be.

    The math class that I learned the most ever in was a community college precalc class I took my senior year in high school (since I had a schedule conflict with the high school precalc). All tests were open book, open note, graphics calculators allowed, and you could ask the teacher for help. They were not designed to see if you could memorize shit about math, they were designed to see if you could do math when provided with all the proper resources. At the end of that class, I was an absolute ace at precalc. I've never learned more in a single math class before or since.

    The more that a test relies on restricting your access to information to be hard, the worse of a test it is. I loathe CS departments (and ours is one of them) that insist that tests should be done on a pencil and paper with no reference. That's crap, because that's not how real programming is done. You aren't testing a person's actual knowledge or ability, you are testing how well they do in a contrived situation.

    I realise that not all tests can be perfectly designed, but there's nothing wrong with making your goal to be as open as possible, and that includes the idea of a take home test, where there are literally no restrictions on what can be used as a resource.

  75. you think that's bad? by larry+bagina · · Score: 1

    Just wait until MS releases the zunephone! They ain't seen nothin' yet!

    Also, let's be honest, this is duke. Next week, faculty will be taking out full page ads about the iPhone being a racist symbol of male patriarchy designed to facilitate rape. A 9 month investigation will find that duke network admins made the whole thing up.

    --
    Do you even lift?

    These aren't the 'roids you're looking for.

  76. Its probably not the iPhones fault. by Cyno01 · · Score: 1

    I'm sure those are up to spec, but knowing the cobbled together nature of mose college networks...

    --
    "Sic Semper Tyrannosaurus Rex."
  77. battle of the iphones! by addicted4444 · · Score: 1

    Last man standing gets to keep the name!

  78. Well actually.. by BlackCobra43 · · Score: 2, Funny

    He probably meant "adress request" as in "Your place or mine?"

    Least I hope he did, or he was really missing out!

    --
    I never spellcheck and I freely admit it. Save your karma for more worthwhile "lol erorrs" replies
  79. Cell Tower Loss by shallow+monkey · · Score: 1

    Is it possible that all of the iPhones at Duke are losing their cellular connection at once and/or since they likely all have the same time (ntp) that they have caches that expire simultaneously?

    Isn't this more of an Apple or AT&T issue then than a Cisco issue?

    My current cell phone (Samsung) burns a hole in my pocket as I'm on the fringe of its network at work--it continuously tries to get a good signal from the nearest tower, sleeps briefly, and tries again. Perhaps something similar is going on at Duke's network that triggers the flood.

    I think if I was responsible for Duke's network, I'd outright ban iPhone's on the network until Apple or AT&T has resolved the issue.

  80. Hope this isn't something that will show up big by Swift2001 · · Score: 1

    It could be. On the other hand, maybe it's just Cisco's revenge for the iPhone thing. And it's hardly "one-way" communication, since what has happened is that they've opened a "ticket," and then "escalated" it. That means they've got some of the more pricey brains at Apple working at it. Hey, Apple and Cisco made an agreement to make their Wi-Fi phones compatible. Maybe this is instance #1.

  81. Getting the fix via slashdot by Edgester · · Score: 1

    Perhaps the Duke networking group asked someone to submit this to slashdot in order to solve their problem for them. Why do the legwork when all the geeks on slashdot will do it for you? *ducks*

  82. Re:Most likely a Cisco bug - firmware upgrade need by Tony+Hoyle · · Score: 1

    Not bizarre at all.. it's used for subnetting. eg. your dept. has a /24, and you have 2 sub-departments that you give a /16 each. Proxy arp allows a router sitting on that subnet to respond to the arp request on the /24 block without having to reconfigure all the routers beyond it to 'know' that you're routing those specific IPs not responding to them directly.

    It's more common than you'd think in companies.. especially large ones, where the IT infrastructure is very disjointed and getting any kind of unified address allocation is nearly impossible.

  83. Re:push by TheSHAD0W · · Score: 1

    He was trying to be funny.

    As was I.

  84. Re:Economic class and higher education by profplump · · Score: 1

    I agree, and that is a perfectly reasonable choice that many people without the means to pay for a colledge education outright will (and probably should) make. It's a choice I made too, and I'm pretty happy with it.

    My point was their choice to not attend the expensive school is not evidence that the tuition cost was sufficient to deny them access, just that the additional value of the education from that school as opposed to a cheaper one is not worth the additional tuition.

  85. Here at polimi... by Jisakiel · · Score: 1

    I don't know... here at the Politecnico of Milan, where I've been staying for the last year in an Erasmus exchange, they seem to manage fine. They have a dual wifi, one public called "polimi" and one private with hidden SSID and name "internet", secured with WPA "enterprise", tkip + tls. When you have your laptop on "auto-associate" -bad security policy! I've seen some rogue laptops offering AP's here...-, or just join the "polimi" network, every web request gets redirected to an information page explaining quite well how to set up a proxy. Once you do that, you login with your registration number and password, both of which were given to us at the beginning of the year, together with a smart card which is used to access the labs and the libraries, and you get to download a certificate (or its revocation). With that, just follow the instructions, install it, configure a network with hidden ssid "internet" and manually specify that it needs to use the certificate just installed. All of this, of course, with screenshots of every single step. When done, as the proxy is well setup because you had to do it for the "polimi" connection, it's just resetting the wifi and it joins the "internet" network fine and securely (but through a damned proxy, blessed corkscrew ;). It seemed easy enough that an architecture student could do it on his own... =P And it worked on macs and linux (just converting the certificate with openssl it gets picked by wpa_supplicant). No more open-air traffic as in my home university (sit on the cafeteria, open kismet, begin sniffing passwords!) (btw, to help to manually configure a proprietary wifi interface on a chinese laptop - on a CHINESE gui has had to be the most bizarre computing experience I've had till the date :D).

  86. Re:Economic class and higher education by profplump · · Score: 2, Informative

    I've been living in Iowa, financing my own education -- I just finished ugrad in 2005, and I'm now working and starting my grad degree. I'm not just making this up.

    This fall total tuition and fees for most majors at Iowa State is $3080.66 / semester:
    http://www.iastate.edu/~registrar/fees/tuition0708 .html

    Minnesota: $4705 / semester
    http://admissions.tc.umn.edu/costsaid/tuition.html

    Wisconsin: $3365 / semester
    http://www.admissions.wisc.edu/costs.php

    Those figures don't include "Room & Board" because you need "Room & Board" whether you're in school or not, so it's a little silly to pretend that it's a cost related to your education. Even if you include R&B, which is on the order of $6k/year at those schools, you could make that much working a student-wage job for an annual average of 20 hours/week (or 14 hours/week if you work full-time for 12 weeks in the summer).

  87. Re:Most likely a Cisco bug - firmware upgrade need by tolomea · · Score: 1

    I think perhaps we just have different standards of bizarre.

    And I don't doubt for a minute that bizarre setups are quite common in large companies. Lord only knows I see a lot of proxyarp related bug reports for our routing software.

  88. Re:Economic class and higher education by jrminter · · Score: 1

    Congratulations on your success

    If we take the average of the tuition figures you cited (which I agree are representative) one obtains an average annual cost of tuition and fees of $7450. Adding the $6000 you cited for room and board and an additional $500 for books and other supplies (a conservative estimate for anyone in physical sciences or engineering,) one obtains a total of $13.9K I'd say that is 'approaching $15K' - especially within the 4 years if one started now and the current rate of inflation of educational costs continues.

    The room and board costs are real and I think must be included in the analysis. You are correct about the ability to recover most of this if one can average 20 hrs/wk throughout the year at a student wage job. Given the course load (including labs, problem sets from hell, and any student research) many in the physical sciences and engineering majors find it difficult to maintain that level of work and maintain a GPA that will permit admission to grad school and qualification for a fellowship. These are always intensely personal decisions and require balancing many factors. My main point was that inflation of costs makes this harder.

  89. Thanks by Aqua_boy17 · · Score: 1

    ...for clearing that up. I was wondering why his system was seeing requests from the American Association of Retired Persons.

    --
    What if the Hokey Pokey really is what it's all about?
  90. Umm, Duke is a college, right? by gosand · · Score: 1
    Funny, the first thing I thought was "How the hell do college students afford an iPhone?"

    It must be official - I am an old bastard. I know that times have changed, and college is a different world now. I remember spending $2000 on my first computer (386DX w/2MB RAM, 80MB HDD). It was HUGE deal, and I had to work my ass off to save up for that. But it meant that I didn't have to go into the computer lab to do my programming assignments. No net access (we barely could afford cable), no cell phones w/$100 a month plans, no $400 music players. I worked all through college to pay for it, scrimped and saved, STILL had to take out loans to make it. How the hell are kids doing it today?

    --

    My beliefs do not require that you agree with them.

    1. Re:Umm, Duke is a college, right? by macshome · · Score: 1

      You are wondering this about Duke? That's a bit like wondering how all the kids in Skull and Bones can afford such a nice yacht...

  91. You can fix that dependency, my friend. by Medievalist · · Score: 1

    As soon as the ball team finds out they can wreck their exams with a coat hanger and a microwave, you can count on it happening every finals week.

    See, you have an opportunity to educate here, and isn't that what college is all about?

  92. Re:iPhoneMania by CrazyTalk · · Score: 1

    Redundant? Aww come on, that was funny! And who knows, may one day prove to be insightful.

  93. Re:Economic class and higher education by WaltFrench · · Score: 1

    ...the question he raised about free education is a debate worth having. Preferably without insults.

    Agreed. So Slashdot ("Hardware," even!) is the wrong place for it. Reasonable people don't introduce off-topic issues and expect a reasonable discussion to ensue. Ignoring the "on topic" guidance makes /. less useful for its unique purpose. I can go visit HuffNPuff or The Conservative Voice or lots of other sites if I want to consider politics, society-not-as-touched-by-politics, or whatever.

    So can you, or so can anyone.

    No, I'm not looking for a high level, Social Issues Barely Touched by Computing on Slashdot.

    --
    "Inquiring Minds Want to Know!"
  94. wait one (milli) second by hurfy · · Score: 1

    "When it does not receive a response, it does it again, apparently about 18K times a second."

    Isn't that a bit impatient? Is wireless fast enough to reply in that fraction of a ms ?? Is that not like .06 ms ???

    Even if it got an answer would it know it at that rate? And would it know which request the answer was to if it is sending requests faster than it can get an answer?

  95. Re: ignorant rant by arminw · · Score: 1

    .....Leadership and project development in hobbies and non-profit work, standardized test scores, work experience, and essays are far better ways of determining ability than grades......

    First, I am sorry about the insult.

    My daughter did have top grades and was the valedictorian of her class. However she also had many of the other qualities you mentioned. She earned a good portion of her undergrad expenses by the work-study program, but still had to get some loans. She won the county spelling contest as a junior, beating out her older sister by one word. Teachers and others who were in attendance at the school district headquarters, even now still tell us us that this was the most memorable spelling bee they ever attended. Most /. readers probably have at least some college, yet judging from some of the atrocious spelling and grammar here on /., it appears many are not all that good in handling "The King's English" any more.

    She attended Duke graduate school on a full scholarship, after demonstrating outstanding scholarship and leadership as an undergraduate. In college, grades do reflect hard work and true understanding of the material. In public school, attendance is compulsory and educators have a vested interested to pass non-learners out of the classroom and school as soon as allowed, but they have to deal with them until then. The breakdown of the family unit is the largest contributor, by far, to the destruction of motivation to want to learn.

    Whenever there is a limited resource, such as scholarships, an education or a well paid job, someone has to make choices based on certain criteria. I'm sure there will always be disagreement as to what those should be. All of the ones you mention are usually taken into account by good admissions officers. However, lets be honest, money does talk in this world, especially in the US. As a practicality, money can and does make up for a lack in some of the criteria you rightly held high. This world is not and never has been entirely "fair". There is also considerable disagreement about what constitutes fairness.

    (....if you've had an expulsion or done significant prison time!......)

    In college or job applications or even in getting insurance, past behavior is and must be taken into account. If there are a number otherwise qualified applicants for a single opening, the one whose record is blemished gets eliminated from consideration. Learning to do what you are told is very important in most jobs. Your boss pays you to do what he/she wants done and often how to do it, not when and how you decide. If you are asked to do something unethical or illegal, YOU alone have to decide whether you are willing to put your job on the line by disobeying and not do wrong.

    Is a college education a privilege or a right? The founding fathers of the US recognized that there are certain "inalienable rights" for all and wrote these into the constitution. The right to an education or a job is not listed. Those privileges have to be earned.

    There are many very important jobs that need to be done in our society which do not require a college degree and which generally do not have much prestige and/or pay. In a big city, such as NY, the striking of all the garbage collectors has a much greater effect on life there than when all the doctors or lawyers walk off their jobs. Unfortunately, but realistically, money is generally considered to be the number one sign of "success" in our society.

    --
    All theory is gray
  96. Re:Economic class and higher education by porcupine8 · · Score: 1

    I love that every single reply overlooks the *30,000* employees that I included in my figures. Yes, half the students are off-campus. But I'm betting most of the iPhones belong to medical, business, or law professors, not students. And the rest probably belong to grad students of one flavor or another (especially MBA students) who are taking summer classes. You're all acting like they all must belong to undergrads.

    --
    Warning: Apple/Nintendo fangirl. Likes her electronics cute & cuddly. May be rabid.
  97. Consider yourself proven wrong by brunes69 · · Score: 1

    Any WiFi device can "bring down" a wireless access point. It is a shared medium, therefore it is an intrinsic property of the medium that any poorly-behaved device can knock all others off the network. No flaws int he network at all have to exist for this to happen. ANY wirleess device can be brought down trivially.

    The only way to design it otherwise would be to have every wireless device allocate it's own communications frequency (which was not in interfering range of other used frequencies) at client negotiation time, so that communications didn't interfere with each other and they each had their own available bandwidth.

    Too bad that would be totally unworkable in practice due to the extremely limited number of frequencies available, not to mention illegal since you're monopolizing the public spectrum.

  98. It's a hub not a switch by brunes69 · · Score: 1

    Any router would appear knocked down because all the spectrum is being flooded with ARP requests so every packet is having collisions.

    People gotta remember WiFi is a shared medium - it is not switched. It follows the same principle as an old fashioned hub. Anyone can flood the whole hub knocking everyone else out with collisions if they want.

  99. Re:Economic class and higher education by Mattintosh · · Score: 1

    I think you missed my point. The statement about "universal higher education" is a common one, and is inherently flawed for the reasons you give. I was simply suggesting that instead of making more and more "free" (a.k.a. everybody-pays) education levels, why don't we fix the ones we already have (and already have funding for) so that they're actually useful.

    It's not a problem with businesses... they have requirements and minimum skill-sets that a worker needs in order to do a particular job. The problem is with an education system that is so horribly broken that there are high-school students that can't read or balance their own checkbook. Those people are unhireable, but not through any fault of any commercial entity. It's entirely a function of a failing education system increasingly bureaucratized and mired in its own legal and cultural idiocy.

  100. egg on face ultimately by bwhalen · · Score: 1

    Sooner or later, either bad LAN design or a product flaw will be discovered, and the offending party will have a mack truck sized helping of egg on face to deal with.

    --
    Where do you want to be, What are you doing to get there.
  101. Correct by weierstrass · · Score: 1

    This is in fact the meaning of the word 'code'.

    --
    my password really is 'stinkypants'
  102. YOU SIR by weierstrass · · Score: 1

    ARE BANNED FROM INTERNET

    --
    my password really is 'stinkypants'
  103. Re:Most likely a Cisco bug - firmware upgrade need by ContractualObligatio · · Score: 1

    Ah, good times!

    I once crashed the LAN of a large-and-suddenly-very-angry bank about five years ago. I was just querying the mib-ii interface table of a LightStream via SNMP, nothing fancy. Default behaviour of a basic network performance tool, but for the 1010s it was a real problem. The LightStream had an entry for *every* potential VP.VC connection. Two problems: first, this meant that a bulk-get request was suddenly querying a few thousand interfaces (instead of the four or so channels they actually had configured). Second, it decided to give priority to responding to an SNMP query instead of doing something useful like "don't drop the network!".

    As soon as I set the polling go - complaints could be heard across the office and I was quickly facing an irate operations manager.

    Easy enough to resolve by just running get-requests against "real" virtual channels, rather than "potential" ones. But very daft default behaviour. And just subtle enough to get through testing in the test lab before going live.

    I wouldn't be so quick to conclude as per the article that Cisco simply wouldn't be at fault!

  104. Re:Economic class and higher education by alan_daniel · · Score: 1

    I'm not acting like they must belong to undergrads, but I am acting like the number of undergrads in a school directly influences the overall size of the population of that school, and Duke is one of the smaller schools in the country. There are simply not anywhere near as many people on that campus as there are at other campuses (i.e. Michigan), yet because it's a school that for some reason is always front and center in the media's eyes, this is the school that's reported.

  105. Re:iPhoneMania by BillGatesLoveChild · · Score: 1

    Hey thanks. It was meant to be funny. Guess the grumpy people are the ones who still don't have their iPhones yet? :-)

  106. Cisco Trademark Lawsuit by bill_mcgonigle · · Score: 1

    "I don't believe it's a Cisco problem in any way, shape, or form," he says firmly"

    How do they know that?


    Remember when Cisco sued Apple over the iPhone trademark (after slapping an iPhone Dymo label on one of their Linksys boxes)?

    I'm sure Steve Jobs took that well. And I'm sure this is an innocent mistake in the iPhone firmware that will be corrected in the next release.

    --
    My God, it's Full of Source!
    OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
  107. ARP storm by NateTech · · Score: 1

    Dumbass network engineers create giant flat network, iPhones with shitty antennas connect and disconnect constantly, network devices with too little memory and/or bad implementations of ARP protocol get freakin' confused...

    ARP storms ensue.

    Nothing to see here, move along.

    (And these network admins must have missed the early 90's with lots and lots of hubs.)

    Time to go back to network architecture school and quit relying on the Cisco TAC for brains.

    Who hired the moron who went to the PRESS to fix his network problems, when his vendors let him down, anyway? That's the really interesting question.

    Guy's obviously in over his head and hoping someone from Apple or Cisco will chopper in and rescue him. He probably even hopes, nay expects, that they do it for free.

    Perhaps if they ignore him long enough, he'll figure out how to fix his own problems?

    --
    +++OK ATH
    1. Re:ARP storm by NateTech · · Score: 1

      Please understand I know plenty about wireless networking, and answering an AC is truly retarded, but...

      You have no more evidence of your claims than I have evidence, but you seem to think I was talking about a problem on the wireless segments themselves.

      My assumption, which could be disproven easily by anyone with a clue with a packet sniffer (which is apparently what Duke needs to hire -- someone who knows how to LOOK at the network issues and FIX them, not run crying like a baby to the press), is that their wired LAN underlying the wireless LAN is built on a FUBARed design methodology.

      I give myself better odds than your assumptions, since it's obvious their LAN admins are morons if they're whining to the press and not implementing fixes.

      --
      +++OK ATH
    2. Re:ARP storm by NateTech · · Score: 1

      Misinformation: Welcome to SlashDot! ;-)

      --
      +++OK ATH
    3. Re:ARP storm by spidey07 · · Score: 1

      OK then.... So what other probables are we left with? Looking for a root cause analysis here, with limited information...and suspect information...have to base the analysis on info provided. Could very well be misinformation or misinterpretation. There are bugs. They happen. My point stands, if the iphone is truly sending these requests then it's a bug in the phone. THAT'S THE BIG "IF". IF the trace was interpreted correctly. There are only a few instances that I can think of where this could happen.... 1) client truly is freaking out and sending all these arps 2) duke doesn't know how to read a trace 3) blah Most always it is the client when it comes to wireless. Also known as "it's not a network problem". The root of this analysis is the interpretation of the trace.

  108. Re:Linksys by ArabChat · · Score: 1

    Belkin F5D7633 was much better for me than WAG54G V2, and more stable. So I second this

  109. Re:Economic class and higher education by instarx · · Score: 1

    You are a fountain of ignorance, at least concerning your diatribe against Duke. Instead of being wealthy and pay tuition, you can also simply be smart and hard working. My daughter just graduated from Duke, from which she had gotten a full scholarship. Without that, there would have been no way she could have afforded to study there. Many Colleges and Universities give scholarships to exceptional young people who do NOT come from wealthy homes. Most likely, someone like you wouldn't get such a scholarship, especially in view of your ignorant rant.

    Stop whining that your daughter is one of the poor downtrodden who simply pulled herself up by her bootstraps. Your use of language, your vocabulary ("diatribe"), and your lack of spelling errors indicates that you are likely white, well-educated, and not scrabbling just to pay the rent. Your use of commas and capitalization does need work, however. In your world your daughter's "hard work" meant studying hard - not contributing to the family cash in the sugar bowl. Even then, there is a lot more to "advantaged" than money. You are one of those people who are clearly blind to their own advantages in life, and who don't understand that it simply isn't as easy for others to advance. Your daughter is white, from a middle or upper-middle class family with a history of higher education, has never had to worry where her clothes or shelter came from, and YOU whine that she did it all through her hard work. I'm not criticizing your daughter who may very well be a wonderful person, I'm criticizing you, who have blinded yourself to your own advantages and whine that "anyone can do it". Well, not everyone CAN do it, no matter how hard they work.

  110. Re:Economic class and higher education by Jeremy_Bee · · Score: 1

    Anybody who is smart and accomplished can go to to a good school, ... *Some* people with connections can get in even if they are not so smart, or really accomplished is the more accurate term, as grades count. There are so many posts on this thread with this basic stance I just had to comment on how ridiculous it is. I have worked at a major University for almost 20 years now, and this is total BS.

    Rather, it's more like a classical "popular misconception" in that it's really just what people would like to believe, not what actually is the case. Thousands of students are admitted every year lacking even the most basic skills like critical thinking, or how to write a legible sentence. Most second year University papers (and I have seen tens of thousands over the years), are on a par with what people of my generation were expected to be able to write in grade 8, and that is not hyperbole, it's a fact. The Faculty I currently work in has seen several PhD candidates over the last 5 years or so (successful ones!), that to all outward appearances have "sub-normal" (less than 100) IQ's.

    All of these students when admitted had a high enough GPA to get in (good grades in high school), and the money to do so, yet they are essentially dead weight. They are not smart or accomplished, they merely got good grades in high school and that is a game that's also easy to play, especially with the right parents, the right race and the right connections. In other words, the right socio-economic status or "class." The vast majority of our students are upper middle class twits, with doctors and lawyers for parents and a luxury car to race back and forth to school with. They are not even academically inclined for the most part. They are "doing time" at the University, to get the piece of paper that will get them an upper middle class job through Mom or Dad's connection network. I should note that this is a very respected University, not some backwater college.

    When I was a kid, I lived in one of the poorest neighborhoods in the area but some of the "hoods" were exceedingly bright, as were many of the regular blue-collar worker types. All of those people I grew up with are still back in the slum, working at their blue collar jobs, despite some of them being brilliant. I have never seen *anyone* (except perhaps a newspaper-worthy immigrant), from a genuine "poor background" go to University because they were so smart that it just had to happen. Universities are almost exclusively the purview of the upper or upper-middle class.

    The example given of a man who's daughter "worked her way through Duke on a scholarship" is specious in that the man is not "poor" he is clearly middle or even upper middle class but simply could not afford Duke tuition. If the girl had not got a Duke scholarship, she would not have got a job at 7-11 the next day, she would have gone to a slightly lesser known University or College, or her Dad would have found some extra money somewhere, or both. Seen it a thousand times.

  111. Re:Economic class and higher education by arminw · · Score: 1

    .....are likely white, well-educated, and not scrabbling just to pay the rent.........

    Indeed true, but that was NOT the case for my parents. The came to the US after WW2, with not much more than the clothes on their backs and in debt. Their education was not recognized at all in the US and none of us knew English. By hard work they were able to provide for their children. As a kid, to contribute to the family I delivered about 150 newspapers every day after school. I often walked to school, rather than spend the nickel transit bus fare, saving me all of 50 cents each week.

    The same is true for my wife, whose parents came to Canada at that time. Both of her parents also worked very hard and instilled this work ethic in their children also. She and her brothers had to help run their family farm. Farmers get up early and so did they, working hard, before the school bus came and again after it delivered them home, after school.

    We both have taught our children to stay out of or at least minimize debt and to never use a credit card for anything other than a book keeping convenience. The daughter I wrote about has taken this to heart and practices these admonitions. The other one has been less diligent in this regard and has gotten herself into a credit pit out of which she only recently climbed out.

    Neither the US nor Canada had any kind of governmental welfare system in place back then. Handouts, including rent subsidies, food stamps etc. tend to discourage hard work. The advertising and credit industries encourage people to buy things they don't need, with money they don't have, in order to impress others they don't even like. It's not only the money a person earns, that counts, but even more so, the money one keeps through frugal habits.

    --
    All theory is gray
  112. Re:Please translate from Marketing-speak by instarx · · Score: 1

    I congratulate your families on your success, however I see your success as being based on more than just hard work. There are clues in your reply... your parents' "educations were not recognized". I suspect that means they were professionals (engineers? physicians? educators?) with good educations in Europe. That they could not bring their degrees or European status with them is a shame, but it nevertheless put them in a very different poistion from those whose parents may have never had any success. Starting over is a lot easier than breaking new ground. Your wife's parents owned a farm, well that tells me they too had resources. Sharecroppers work long hard hours too, but it almost never gets them anywhere. No one works as hard as poor people, not even farmers.

    Like you, I used to think that anyone could get ahead with hard work, but I now know that is not always possible. My advantage was so subtle that it was invisible to me - I simply knew it was possible to get ahead. For many people who do not have any family member who gained success through education, college is as alien a concept as supporting a family as a nomadic herder in Mongolia would be for me. I know people do it, I know it CAN be done, but I could never just start doing it no matter how hard I worked at it. I would not have the support mechanism.

    There are many intelligent, hard-working people who are trapped in poverty. It isn't because they don't work hard (remember, working hard for your daughter was studying hard, while working hard for a poor person may be having two jobs to support a family), or because they get rent subsidies, or are lazy - it is because they don't have that subtle background that lets them know what is possible, or even how to advance themselves. Its like riding a bicycle. It seems obvious how to do it once you know how, but you tend to forget how hard it was when you didn't know.

  113. Re:Most likely a Cisco bug - firmware upgrade need by firedeveloper · · Score: 1

    Sorry the iPhone doesn't run AppleTalk (or the underlying DDP) but my Mac SE/30 did...

    - Time to upgrade your knowledge and start using a calculator instead of an abacus.

  114. Re:Please translate from Marketing-speak by arminw · · Score: 1

    ..... I suspect that means they were professionals (engineers? physicians? educators?) with good educations in Europe......

    Your suspicions are not correct. I am an engineer. My father was a chef and baker and got a job at a bakery and my mother was a nurse, but had to take a job as a cleaning woman at minimum wage. My wife's parents managed to save enough money for a down payment and borrow the rest from a friend. Paying off that loan meant doing without even the smallest extras and a very hard and dangerous job for her dad at a local lumber mill.

    We know a young man of hispanic descent, born in LA, who was in prison until a little over a year ago, yet now has a good job with a road construction company. It is not an easy job for him, but we know he is a hard worker. It still is possible to get out of an economic hole by hard work.

    Although there are some employers that needlessly require college for some entry level jobs, it is still possible to get good jobs as a high school graduate. Some employers are willing to train motivated young people. I talked to the owner of a farm machinery dealer about two weeks ago, at a wedding, who spoke very highly of the young groom he recently employed and will train as a mechanic. People who have a good attitude and high integrity level still are able to make it in our society.

    --
    All theory is gray
  115. Re:Economic class and higher education by Lost+Engineer · · Score: 1

    So you're saying that a poor kid who is able to get good grades and game the system can't get into your school? I have no doubt there are such schools. I also know schools that search far and wide students from lower income families with decent SAT scores so that they can demonstrate their "diversity." Of course they also search far and wide for rich, underrepresented minority students who pay tuition and make them look good but I digress...

    With respect to your hoods, I would point out that things have changed a lot in the past say 50 years, so, depending on how old you are, that example may be dated.

    You also ignored the most important part of my argument which was needs-blind admission. At these schools, the people who make admissions decisions don't even talk to the financial aid people. The only possible factor holding back an less-well-off applicant would be his "choice" (a better term escapes me at the moment) of high school. Even this is changing. For instance, when I lived in Houston, I discovered that there were many "magnet" schools, for everything from the arts to hardcore science. These were free and open to bright or talented students. In some areas, school choice has given poor students an out from the feeder-schools-for-prison type places.

    Yes, public primary schools in this country by and large suck, however our private University's are world renowned. At least I proposed a few on-going solutions for the problem of education inequality at the secondary level. What do you propose to do?

  116. Re:Economic class and higher education by Lost+Engineer · · Score: 1

    So glad he got his comeuppance. In China they sometimes execute you for official misconduct. Not such a bad idea if you ask me...

  117. Re:Economic class and higher education by Lost+Engineer · · Score: 1

    Including room and board is fair, if we assume the students would otherwise be living with their parents. Including all of it is not. For instance, 18 year olds or whatever still eat when they live with their parents. They use electricity, water, gas, and all that jazz.

    You might also argue that the parents also no longer need the space the kid took up when he goes to college. Now most people won't sell their house over it, but I know my parents got a nice guest bedroom when I moved, then a home office when my sister did so.

    By the way, she went to school for free, and will be quite employable in a year, although mainly as a teacher (but that was her decision).

  118. Re:Economic class and higher education by Lost+Engineer · · Score: 1

    There are plenty, just not at Duke.

    If you are lucky enough to be black, native American, or any race of Hispanic descent, you might even get in somewhere like Duke -- who knows?

  119. Re:Economic class and higher education by Lost+Engineer · · Score: 1

    You can't, but you can start by reading and doing only sufficiently small quantities of drugs to avoid completely fry your brain. I'd say that would go far for about half of high schoolers...

  120. Re:Economic class and higher education by Jeremy_Bee · · Score: 1

    At least I proposed a few on-going solutions for the problem of education inequality at the secondary level. What do you propose to do?

    I guess I was a bit more forceful in my response than I intended as I seem to have got under your skin a bit, and I did not mean this to be that personal of a debate. I apologise for any personal offense you may have taken at my remarks, but being one of those smart guys that had the bad luck to be born in a slum waste half my life merely to claw my way into respectable society, I guess I might have "issues" about socio-economic status in general and the colossal failure of the educational system in North America. :-) My bad, my bias I guess.

    I am certainly pleased to hear (if true), that some schools in your area actually seem to *actively* seek out poor kids who are smart and take them under their wing, but I would argue that this is far from the norm. I was making a generalised argument about higher education as I have experienced it, not trying to say that "no school anywhere" is any good.

    However I do think that I have the experience and the background to support the comments I made. I have personal experience of the situation from both sides. First, from the point of view of being denied opportunities due to my "class" in my youth, and secondly from working for almost 20 years at an Institution of "higher learning."

    My point was that the old saw about "if you have enough hutzpah and drive you can still get a higher education and succeed, blah, blah, etc...." is simply not true. Historically, this idea (usually related more to a capitalistic or economic success story), is one of the central myths of the American people, so I can understand people's unwillingness to let it go, but that doesn't make it true.

    The occasional person that "pulls themselves up by their bootstraps" does not invalidate the reality of the life-long struggle of those people who don't make it because they had the unfortunate luck to be born poor. Sure, there is the odd "rags to riches" story; there always is. However, this just disguises the fact that the vast majority of people born into the "wrong" socio-economic class *will* have horrible lives and little economic and social success relative to those born into the "right" class. If Universities are about "higher education" (and they all say they are), then the students should be picked on the basis of quality of applicant, not how much money they have or how well they played the "high-school game." They currently are not.

    The fact is, there are huge numbers of "the poor" that are smarter, harder working and better learners than some of the idiots that walk the halls of University nowadays. The fact also is that there *are* large numbers of students already enrolled in University that are (to put it nicely), "dim" by my standards, (which are the standards of the 1960's roughly), that are *poor* learners, and *not* hard working at all (cheating is rampant). I see this every day. The injustice of it bothers me.

    I stand behind my observation that it is significantly hard, bordering on the impossible, for the average truly "poor" person to get into University. The reasons are multitudinous; it's about what kind of life you have to live when you are poor and the whole socio-economic experience. When most people think about this issue, I find they are really thinking about how they can help other middle-class people that don't quite have the tuition, get into University anyway.

    They are not really thinking about "poor" folks, because they don't know any.

    As for what I "propose to do about it," I can propose all kinds of things, but in my position I don't have the power to do much of anything. I would suggest that it will take nothing short of the complete revamping of the Higher education system in North America to solve this problem and I just don't see that happening anytime soon. The major factor that I see contributing to the mess

  121. Re:Economic class and higher education by Lost+Engineer · · Score: 1

    No problem, I'm not easily offended, and I didn't mean to insult you at all.

    Thanks for the thoughtful reply. I'll leave it at that since we're too off topic. Perhaps we can discuss education solutions in another thread sometime.