Comcast Forging Packets To Filter Torrents

An anonymous reader writes "It's been widely reported by now that Comcast is throttling BitTorrent traffic. What has escaped attention is the fact that Comcast, like the Great Firewall of China uses forged TCP Reset (RST) packets to do the job. While the Chinese government can do what they want, it turns out that Comcast may actually be violating criminal impersonation statutes in states around the country. Simply put, while it's legal to block traffic on your network, forging data to and from customers is a big no-no."

Comments

Can you say "class action" ?

[unity100]

say it ! and add a "lawsuit" to the end. Such "companies" deserve it.

Re:Can you say "class action" ?

[unity100]

and you should have told them they should have invested while they were overselling their lines. it doesnt matter what percentage of p2p is legal or not, the fact is they are not able to provide what they promised. the debate should be on that, not p2p's legality.

Re:Can you say "class action" ?

[Fujisawa Sensei]

Major ISP's in the US have told me in meetings that P2P makes up 70-80% of their total traffic. Do you really believe that the majority of this is legal content?

That's not for the ISP to decide.

Re:Can you say "class action" ?

[jafiwam]

"Legitimate" content and "Trusted" sources will get priority. The ISO of your favorite Linux distro is in. The unknown and likely pirated DiVX rip is out. This doesn't have to be BT as you know it. It could be an ISP administered P2P net. This statement leads me to believe you don't even know how bit torrent works. You are aware, it downloads from peers that have also downloaded from their peers from an original source right? And that aside from a small few bits at the beginning, ALL of the downloads come from (what is going to be essentially from the ISP's point of view) random locations right?

How is it you think they are going to "source" the download? Download it first, then put it on a list?

As someone who has downloaded lots of music illegally, I have NEVER had to resort to bittorrent to get it. It's always some person I know sharing an entire hard drive full or whatever. (Not public sources.) Heck, you can put certain phrases in Google and get the default "directory listing allowed" for common web server software and find TONS of music shared on web servers.

Since it came out, I have probably downloaded 150 gigs of various game patchs, game mods, Linux versions, etc. all of which the users I got them from had a right to distribute and I for which I had a right to download. ZERO percent of my torrent use has been illegal downloading.

Limiting traffic is one thing (just throttle ALL of the heavy users traffic, email, web, games, etc.), saying all torrent downloads are illegal is plain flat out incorrect.

Re:Can you say "class action" ?

[Fujisawa Sensei]

There is no legitimate use of BitTorrent. Anything BitTorrent can do, FTP can do better.

There is not legitimate use of FTP. Anything FTP can do rsync can do better.

Re:Can you say "class action" ?

[zippthorne]

While technically true, perhaps the best kind of true, if the companies cannot deliver their advertised rates, which are quite often !!10 mbps, unlimited*!!! (with all those extra exclamation points, even) then they either advertised falsely or planned poorly.

*Some restrictions apply, but you'll never know about them unless you have a high def TV, and happen to be watching a high def channel when the company's advertisement airs, assuming they bothered to film it in high definition itself.

Re:Can you say "class action" ?

[InvalidError]

This is slashdot, believe it!

Oversubscription is what makes it possible for ISPs to offer 10Mbps service under $80. Without it, the same service would cost closer to $200, with $50 of both amounts being the ISP's operating income for the service class. Many ISPs have "reasonable use" clauses in their otherwise "unlimited" service plans and this cap appears to be around 250GB in many cases, which would theoretically allow ISPs to fit roughly 3000 high-bandwidth 250GB/month customers per ~$30k/month OC48. The same OC48 can accommodate little more than 250 wire-burning, non-oversubscribed 10Mbps customers... that would be more than $100/month uplink cost per customer.

Because the top ~5% of customers (ab)uses ~90% of the bandwidth, over-subscription reduces the ISPs' infrastructure costs for typical users by >90%. The recent stories about heavy users getting either kicked off or pushed onto higher-margin business/special service shows that ISPs are starting to push the extra operating costs down to the relevant customers. I have calculated that a fair price for true unlimited access would be ~$150/month: rent for ~1/300th of an OC48 + other operating/service costs and profit.

But none of that quite excuses ISPs from interfering with their customers' traffic unless the customer has specifically requested it.

Re:Can you say "class action" ?

[ubuwalker31]

Oversubscription is what makes it possible for ISPs to offer 10Mbps service under $80

Bullshit. The problem is that the US taxpayers have pumped Billions upon Billions of dollars into the internet/telephone/fiber optic infrastructure, and the telephone companies, cable companies and other large companies have wasted that money over the past 30 years, by not using the money as it was intended. Which is why it is cheaper overseas to have faster broadband than in the US.

Forged RST packets

[ACMENEWSLLC]

We use a popular web content filter. The way it works is by doing the same thing. So when we are blocking traffic, we block it by issuing a forged RST. It's either do this, or place the content filter inline ACTIVE. Right now it is passive It does packet capturing and RST to block. If it's down, then traffic still flows. If it were active, we could simply drop the traffic and not forge the RST. But performance and uptime are horrible on many products when these are inline.

Initially this sounded a lot worse to me.

Re:Forged RST packets

[Opportunist]

The difference is most likely that you're the endpoint of the traffic. When traffic comes to me, it's my business what I send in reply. A RST, nothing or a "thanks for sexual services".

Comcast is the carrier. They have no business sending RST packages. Their business is to transfer packets to and from you. If you allow them to manipulate your packets (which this essentially is, injection of packets is by no means different from altering them, it changes the data stream and the information transmitted), you can never be sure that what you sent is what arrived on the other end.

Re:Suure... legal action is possible...

[Spy der Mann]

do you think you even have a chance in Hell?

Then again, Rosa Parks had no legal right to keep her bus seat from a white guy. And yet, she did.

If you don't stand up and fight for your rights, who else will?

Re:But, this is awsome

[QCompson]

I'm so glad I live in Canada.

Why, because of the weather? It can't be because of your traffic-throttling happy ISPs:
http://torrentfreak.com/rogers-fighting-bittorrent -by-throttling-all-encrypted-transfers/

Why do you say that?

[WindBourne]

First, Spyder was not saying that he was Rosa, but even ignoring that, why do you say with certainty that this is not the same? This is standing up to a MUCH bigger bulley who is trying to take what is not theirs. It was no different than when the geek stood up to a circuit city store and then the police. That is a case that may make a difference, as might this (keeping our rights from those that would gladly steal them). You can bet that at the time of Rosa, the locals just thought it was a silly disturbance.