Slashdot Mirror


ISP Inserting Content Into Users' Webpages

geekmansworld, among other readers, lets us know that the Canadian ISP Rogers is inserting data into the HTTP streams returned by the Web sites requested by its customers. According to a CBC article, Rogers admits to modifying customers' HTTP data, but says they are merely "trying different things" and testing the customer response.

396 comments

  1. Read between the lines by timmarhy · · Score: 5, Informative

    replace "trying different things" with "seeing what we can get away with" and your closer to the truth

    --
    If you mod me down, I will become more powerful than you can imagine....
    1. Re:Read between the lines by Anonymous Coward · · Score: 5, Funny

      And if after hours, a man puts his wii-wii in the mayonaise jar at the restaurant where he works, that's just experimenting too, to see how the customer will react.

    2. Re:Read between the lines by BIGjuevos · · Score: 1

      But seeing what we can get away with will quickly lead to sexual experimentation with random tcp packets. Then it goes from a civil rights case to sexual harassment. Trully think about it, wouldn't it be neat to sue a corporation based on sexual harassment charges?

    3. Re:Read between the lines by alx5000 · · Score: 5, Funny

      In other, unrelated news, alx5000 has been reported to have blown up a dozen Government buildings in the last 24 hours. When inquired about these events, alx5000 said to admit to modifying governmental property, but remarked he is merely "trying different things" and testing the Government response.

      --
      My 0.02 cents
    4. Re:Read between the lines by thegrassyknowl · · Score: 3, Interesting

      This could open up a whole bunch of "but I didn't download that" claims when users are caught with dubious material. They could claim that their ISP modified their download streams and point (at least some of) the blame toward the ISP.

      It's all a little dubious if you ask me. I always knew it was possible to fiddle with the stream, but I didn't think anyone would bother because it could possibly break a lot of pages that are held together with fragile HTML-fu.

      --
      I drink to make other people interesting!
    5. Re:Read between the lines by Anonymous Coward · · Score: 5, Funny

      Dude, I served my sentence and paid my debt to society ... it's not fair for you to keep bringing this up.

    6. Re:Read between the lines by Anonymous Coward · · Score: 0

      replace "trying different things" with "seeing what we can get away with"

      Hmmmph. They already did on my connection.

    7. Re:Read between the lines by PayPaI · · Score: 4, Funny
    8. Re:Read between the lines by Anonymous Coward · · Score: 0

      That may be fine for what you canucks call "government", but, trust me, don't try that down here in the states. No, I actually like your "government" better too. Pity about the weather, though.

    9. Re:Read between the lines by thinkertdm · · Score: 3, Insightful

      Now this is only the beginning. It is only a matter of time before other ISP's start doing the same thing, and you can't stop them. Here's why: 1. Comcast and other ISP's have more money they you do. Loads more. Sure, you may have a case on legal grounds, but they have the money. What are you going to do, stand in front of the CEO of comcast and say "pwease mr, don't do this!" Good luck with that. 2. Think you are going to drop whatever ISP is doing it and jump to the other one? Most places only have 2. It's not like tuna fish, where there are five different brands to choose from. 3. Why should any ISP listen to you, the consumer? See #2 above. 4. While this activity is wrong, no one is doing anything about it. The majority of the population thinks people with high speed are criminals anyway, so we deserve what we get. This isn't even news- if it comes up at all, it's buried after sports and the weather. Look at Comcast blocking bittorrent. Look at the RIAA lobbying in congress. We are screwed. 5. The only right way for an ISP to do things is the best way to make more money. Right or wrong has nothing to do with it. I think the only answer is for a strong net neutrality bill. The ISP's are supposed to answer to the consumer, not the other way around.

    10. Re:Read between the lines by Anonymous Coward · · Score: 0

      Rogers is a disgraceful company. Recent CBC (Canada's BBC, essentially) surveys showed their customer service to be considered utter shit, for instance. Basically everyone I know who has had to deal with them has hated the service they have received. Their services are usually way overpriced (due to Rogers basically having a monopoly in some areas), low-quality, and generally a hassle. If there is a company that the Canadian government should look into more heavily regulating, it's Rogers (and the other telcos, like Bell and Telus).

    11. Re:Read between the lines by Sillygates · · Score: 1

      Hmm, my ISP (Charter Communications, in the US) already hijacks DNS for unknown hosts.

      Not only does this break the RFC2308 specification, but they attempt to make a bit of extra profit from it, by employing a malware/spam like search page.

      --
      I fear the Y2038 bug
    12. Re:Read between the lines by Sillygates · · Score: 1

      For anyone else with this problem, this is why I use Level3's dns servers:
      4.2.2.2
      4.2.2.3
      4.2.2.4
      :)

      --
      I fear the Y2038 bug
    13. Re:Read between the lines by mcrbids · · Score: 1

      It's all a little dubious if you ask me. I always knew it was possible to fiddle with the stream, but I didn't think anyone would bother because it could possibly break a lot of pages that are held together with fragile HTML-fu.

      If you want a complete, nearly 100% guarantee of clean, unmodified sessions, demand SSL. It's really, REALLY hard to beat SSL. But if you want a "poor-man's solution" better for everyday websites, demand DNSSEC - pay particular note to RFC 4398. We have the solutions to dirtbags like this, ahttp://en.wikipedia.org/wiki/DNSSECnd if it becomes widespread, I have every confidence that solutions (such as DNSSEC) will be implemented quickly.

      --
      I have no problem with your religion until you decide it's reason to deprive others of the truth.
    14. Re:Read between the lines by Divebus · · Score: 1

      The customers should figure out what Einstein thought that up and insert a large object into him!

      --

      Most of the stuff on /. won't survive first contact with facts.
    15. Re:Read between the lines by Anonymous Coward · · Score: 0

      "'trying different things' and testing the customer response."

      i tried this technique. it doesn't work. my girlfriend got furious at me for even suggesting a threesome.

    16. Re:Read between the lines by ottothecow · · Score: 2
      If enough ISPs "try new things" (see also, comcast + bittorent), people will finally pull their heads out of their asses and realize the importance of net neutrality.

      --
      Bottles.
    17. Re:Read between the lines by Anonymous Coward · · Score: 0

      Amen brother, I deal with their business department all the time and all I can say is what a bunch of half witted tight arsed clowns.
      It takes two days to resolve problems we could have fixed in a minute if we had access to their networking devices. But no, we end up waiting two days while they put their engineers on ridiculous projects like this and our customers scream themselves hoarse.
      Oh shit, you got me started. Better stop before I pop a clog

    18. Re:Read between the lines by Atario · · Score: 1

      Helps to have some context. "Trying different things" was originally followed by "Was that wrong? Should I not have done that?"

      --
      "A great democracy must be progressive or it will soon cease to be a great democracy." --Theodore Roosevelt
    19. Re:Read between the lines by S.O.B. · · Score: 2, Funny

      So that's what's in the special sauce.

      --
      Some of what I say is fact, some is conjecture, the rest I'm just blowing out my ass...you guess.
    20. Re:Read between the lines by Anonymous Coward · · Score: 0

      That wasn't mayonnaise.

    21. Re:Read between the lines by wikinerd · · Score: 1

      there are many things you can do as consumers: You can set up a community WiFi network and then agree with all fellow users to buy a dedicated fat pipe to the Internet and share it on your WiFi (and since you will buy business dedicated line, nobody can stop you from sharing it). Everything is possible if all people know exactly what they want and they are determined to stick to their principles.

    22. Re:Read between the lines by Anonymous Coward · · Score: 0

      You fucking idiot.

      http://dictionary.reference.com/search?q=fair

      free from bias, dishonesty, or injustice

    23. Re:Read between the lines by packeteer · · Score: 1

      I buy internet access from a small ISP. A guy provides DSL to a few hundred people. I dont think hes going to do this any time soon. When i lived with my mom she had Speakeasy DSL, i also dont think they would try something like this. I would expect comcast to try to pull this on its customers but thats why its worth paying a small premium to not support a heartless corporation who will make you pay in the end.

      --
      unzip; strip; touch; finger; mount; fsck; more; yes; unmount; sleep
    24. Re:Read between the lines by Brett+Glass · · Score: 0
      I buy internet access from a small ISP. A guy provides DSL to a few hundred people. I dont think hes going to do this any time soon. When i lived with my mom she had Speakeasy DSL, i also dont think they would try something like this. I would expect comcast to try to pull this on its customers but thats why its worth paying a small premium to not support a heartless corporation who will make you pay in the end.

      Actually, this is the kind of innovative idea you'd expect from a small ISP rather than a big one. It's user-friendly, unobtrusive, and effective, and it vanishes with a click as soon as you acknowledge it. It's refreshing to see a large ISP doing it. What's scary is to see Weinstein's overblown claims that it's abusive or is a harbinger of something horrible. It seems as if Weinstein and his "net neutrality" group are really an "anti-ISP" group that's attacking the very things which a small provider can do to make its service better than that of a big provider. They may not understand that they're promoting a duopoly... or maybe they do. Some of them work for very large cable and telephone providers.

    25. Re:Read between the lines by fosterNutrition · · Score: 3, Informative

      Actually, I think he's referring to a line whose origin I can't recall, which states something like that you will understand life much better when the only meaning of "fair/fare" you know is something you pay to ride a bus.

    26. Re:Read between the lines by gnasher719 · · Score: 4, Interesting

      It's all a little dubious if you ask me. I always knew it was possible to fiddle with the stream, but I didn't think anyone would bother because it could possibly break a lot of pages that are held together with fragile HTML-fu. This is not just a bit dubious, it is plain and simple copyright infringement on a massive scale.

      The owner of the web site is creating a data stream, which will 99.99% of the time be copyrighted. Even if the web site owner doesn't own the copyright or has permission to use some copyrighted work, it is still copyrighted by someone else. Modifying the page creates a new derived work. If you create a derived work without permission of the copyright owner, you commit copyright infringement.

    27. Re:Read between the lines by Anonymous Coward · · Score: 0

      It's the JEWS, stupid...
      They need to censor what you see on the internet, because they currently don't control it. They only control 99% of the media that you watch, read, and hear...
      Now they're after the internet...

      Nazigassings.com

    28. Re:Read between the lines by jacquesm · · Score: 1

      exactly. This ISP should lose common carrier status immediately. They can no longer claim that they are just 'passing on the data', as of today they are 100% liable for the effects of *any* traffic on their networks.

    29. Re:Read between the lines by secondhand_Buddah · · Score: 1

      Have you not heard of https:/// ?

      --
      Participatory Governance : The only feasible option for a real democracy, where everyone really does have a say.
    30. Re:Read between the lines by gallen1234 · · Score: 4, Interesting

      I may not have a lot of money but Google has plenty. I suspect that they'll take exception to Rogers fiddling with their carefully designed home page - a page where simplicity and a clean layout are defining characteristics.

      I also suspect that there's a copyright claim here somewhere. If Rogers took Google's home page and modified it then that's a derived work which they would have to have Google's permission to distribute.

    31. Re:Read between the lines by Phisbut · · Score: 1

      Have you not heard of https:/// ?

      Have you tried going to https://www.google.com lately? Does it work? How about https://slashdot.org?

      HTTPS only works if the server supports it. The client can't force it.

      --
      After 3 days without programming, life becomes meaningless
      - The Tao of Programming
    32. Re:Read between the lines by Shakrai · · Score: 1

      How about https://slashdot.org?

      Actually /. does support https, but only subscribers and the admins/editors can use it. I recall them saying it goes to a dedicated server reserved for the above group during the 10th anniversary stuff.

      I browse /. though https too.

      --
      I want peace on earth and goodwill toward man.
      We are the United States Government! We don't do that sort of thing.
    33. Re:Read between the lines by Ilgaz · · Score: 1

      I wonder if there is anything worse than they did to their customers? Is it the USA cable monopoly situation in Canada too? Can't people switch to other ISP right away?

      If I heard something like that, first thing I would do is switching to SSL in every occasion, even on webmail sign in. Of course, one wonders whether he/she should pay for such paranoia.

      You know what? There is a software vendor which has a dark history and they got busted by Mac nerds (which they didn't expect) when they tried to bundle first ever Mac spyware with their (unfortunately) successful application. After they got busted and forums started to get heated up, they removed the junk control panel and they explained: "We were TESTING things".

      That is why I couldn't stand not saying these.

    34. Re:Read between the lines by Shakrai · · Score: 1

      You can set up a community WiFi network and then agree with all fellow users to buy a dedicated fat pipe to the Internet and share it on your WiFi

      Yes, because I'll be able to convince my neighbors (average age: 50) of the need to abandon [INSERT SHITTY ISP HERE] and pay for all the required wi-fi equipment (cables and high-gain antennas) required to deploy a neighborhood wide wi-fi network.

      Oh and that "fat pipe". Around here it's at least $500/mo for a T-1. That's a lousy 1.5/1.5Mbit of bandwidth. Contrast to Verizon DSL for $34.95/mo for 3.0/768. I'd have to hook up 15 people at $34.95 to pay for that T-1. 15 people paying $34.95/mo to share a 1.5/1.5 connection instead of paying $34.95/mo for their own 3.0/768 connection. Plus somebody gets to pay for all the antennas, cables, APs, etc, etc, etc.

      --
      I want peace on earth and goodwill toward man.
      We are the United States Government! We don't do that sort of thing.
    35. Re:Read between the lines by jollyreaper · · Score: 1

      And if after hours, a man puts his wii-wii in the mayonaise jar at the restaurant where he works, that's just experimenting too, to see how the customer will react. But Nintendo would probably void the warranty.
      --
      Kwisatz Haderach
      Sell the spice to CHOAM
      This Mahdi took Shaddam's Throne
    36. Re:Read between the lines by myvirtualid · · Score: 1

      Verizon DSL for $34.95/mo for 3.0/768

      In parts of Ontario, Alberta, BC, and Quebec, we have this little independent, $29.95 for 5M/800K, $4 for a static IP.

      Oh, and they're cool with servers.

      Gotta love the little guys. Glad I dropped Rogers....

      --
      I'm here EdgeKeep Inc.
    37. Re:Read between the lines by NeilTheStupidHead · · Score: 1

      As a Rogers customer, I haven't seen this... yet.

      The first time I do, the folks at Rogers will get a firm but polite phone call telling them to discontinue, the second time, they will get another phone call cancelling my account with them. I originally went with Rogers because I had a good experience with another cable internet provider in my old home, but if they choose to try this, I'll be switching to the teleco's DSL service, even if it is a few dollars more per month... but then again, I can bundle my phone and television service in with my DSL and save (compared to what I'm paying now for the same three services spread across two providers).

      --
      Lose: misplace or fail || Loose: not bound together
    38. Re:Read between the lines by wkk2 · · Score: 1

      I suspect that this rotten practice won't stop until everyone uses ssl or a major corporation finds a competitor's ad on their web page. It might be called tortious interference.

    39. Re:Read between the lines by yuna49 · · Score: 1

      I wish I had mod points for you today.

      This was my immediate reaction to reading this story. I don't what the law is in Canada, but in the US this seems a clear infringement based on the creation of an unauthorized derived work.

    40. Re:Read between the lines by Anonymous Coward · · Score: 0

      1. Make website.
      2. View website one thousand times.
      3. Sue Rogers for $2k per each 'infringement'
      4. PROFIT!!!

    41. Re:Read between the lines by TheLinuxSRC · · Score: 2, Informative

      "I suspect that they'll (Google) take exception to Rogers fiddling with their carefully designed home page - a page where simplicity and a clean layout are defining characteristics."

      You appear to be correct sir.

    42. Re:Read between the lines by Holmwood · · Score: 1

      It's a shame that a giant ad urging me to upgrade my ISP service with Rogers is obscuring most of this thread, or I'd be able to make a cogent and intelligent comment.

      - Holmwood

    43. Re:Read between the lines by McDutchie · · Score: 1

      This is not just a bit dubious, it is plain and simple copyright infringement on a massive scale.

      Of course, Google itself does the exact same thing when you view a "cached copy" of any page. So how is Google's cache not a case of massive copyright infringement then?

    44. Re:Read between the lines by secondhand_Buddah · · Score: 1

      Sorry. My point was extremely badly made. What I wanted to say was: Content providers have an interest that conflicts with the ISP's. Content Providers want to deliver content in the form that they have designed, because that design is the template that the use to sell their advertising space. If the ISP's start to tamper with their content (as has been demonstrated)they effect they value of the Content Providers end product (read possible lawsuites in the making). However to combat this, they can easily turn on an encrypted content stream using HTTPS:// which will foil this irritating attempt by ISP's to hijack content.

      --
      Participatory Governance : The only feasible option for a real democracy, where everyone really does have a say.
    45. Re:Read between the lines by Casualposter · · Score: 3, Interesting

      This is interesting, because the telecommunications companies long ago ran with the "I can't control what goes over my wires" defense when the governments of various nations wanted to punish them as an accessory to crimes committed via the wires. The phone made it easier for V. and L. to conspire to murder T. The phone company claimed that it could not monitor and control every call and so the common carrier defense arose.

      Now, however, there is the demonstrated ability to monitor and control and perhaps the common carrier denotation is what is being tossed aside in the pursuit of the last nickel. What is an ISP to argue when faced with copyright allegations? They can monitor the traffic to sell targeted ads but can't tell the when an illegal MP3 is being downloaded? That might not fly in a courtroom. Wouldn't the temptation to try to sell the user a similar song be too tempting to pass up? Or maybe the judge or jury doesn't get that there is a technology barrier and figures if the ISP can monitor one they can monitor them all.

      How about a political move like enforcing a completely non-encrypted internet to monitor for kiddie porn? All encrypted packets could be criminalized - except to "authorized sites" like your bank.

      What about the copyright on the page being mangled? I liken this type of technology as a form of vandalism, or perhaps and unauthorized derivative work. How would this be different than Amazon reprinting a Harry Potter book on demand and inserting hundreds of ads? Maybe those ads would be targeted to text on a facing page so that you'd get an advertisement for cleaning supplies every time the Nimbus 2000 flying broom was mentioned, or pet supplies every time one of the owls was mentioned. How about the death scene with Dumbledor opposite some funeral home ad?

      What about anticompetitive actions? The ISP could redirect or replace traffic with that of a competitor's product. I'm sure some companies would be delighted to ensure that no one every hears of Brand-X again. How could this type of control and monitoring be used to prevent the accurate discussion of topics? AT&T is a backbone ISP and has been shown to be a good bit lax when it comes to protecting the data it carries. Could a large company or government change the internet by use of this technology to stop dissent?

      The abuse potential is huge.

      Then what about the privacy issues with reading every packet? Gee, Mr. Smith, why were you searching for pipes, fertilizer, and biodiesel last month?

      --
      Creative Spelling Copyright (2002). May use without Persimmons
    46. Re:Read between the lines by Anonymous Coward · · Score: 0

      DNSSEC doesn't help with this problem. This isn't done by redirecting people to bogus websites but by modifying the packets. You need to use something that prevents or at least detects tampering. SSL and IPSEC are some technologies that are useful for this.

    47. Re:Read between the lines by Lijemo · · Score: 2, Informative

      I would argue that the differences are:

      1. the person doing the surfing has requested the alteration ("show me the cache of this page, with the words I searched hilighted") and thus knows they are getting an altered page
      2. It's very clear which parts were added/altered by google (the top frame, and the highlights) and which parts are the original content (everything else)
      3. They will remove a page from their cache, or refrain from caching a site in the future, if asked to do so by the copyright holder

      So, in my opinion, very different than the IP creating a new data stream that uses the original content, pretends to be true to it, but stealthily creates a derived work out of it.

    48. Re:Read between the lines by HiThere · · Score: 1

      That would require that people understand what is happening. This will be a minority even among the technically inclined, who are themselves a small minority.

      In other words: That isn't going to happen. (Copyright lawsuits might. Possibly other legal claims.)

      --

      I think we've pushed this "anyone can grow up to be president" thing too far.
    49. Re:Read between the lines by Phisbut · · Score: 1

      Sorry. My point was extremely badly made. What I wanted to say was: Content providers have an interest that conflicts with the ISP's. Content Providers want to deliver content in the form that they have designed, because that design is the template that the use to sell their advertising space. If the ISP's start to tamper with their content (as has been demonstrated)they effect they value of the Content Providers end product (read possible lawsuites in the making). However to combat this, they can easily turn on an encrypted content stream using HTTPS:// which will foil this irritating attempt by ISP's to hijack content.

      Unfortunately, some content providers are already having a hard time surviving a slashdotting on a regular unencrypted connection. If those servers had to suffer the CPU cycles required to encrypt everything they serve, they would melt.

      --
      After 3 days without programming, life becomes meaningless
      - The Tao of Programming
  2. What's the problem? by squidinkcalligraphy · · Score: 3, Insightful

    Let's get rational for a second here; the ISP is trying to inform you you're reaching your limit, so you don't overshoot it and start having to pay extra. Lets put arguments about limits aside (after all, you've agreed to a contract involving limits). It's in their interests _not_ to inform you, as you'd have to start paying them extra. But they're trying to find a more pervasive way of letting you know. How else can they do it? Via email? They'd just send it to the email address they provide you with. Who really uses isp-provided email these days? it's all webmail, so they need some window to get through to you, and maybe http is that window.

    --
    "I think it would be a good idea" Gandhi, on Western Civilisation
    1. Re:What's the problem? by patternmatch · · Score: 5, Insightful

      How else can they do it? Via email? They'd just send it to the email address they provide you with. Who really uses isp-provided email these days? it's all webmail, so they need some window to get through to you, and maybe http is that window.

      Or maybe, just maybe, they could ask you for your regular email when you sign up. This is not rocket science. There is no excuse for an ISP to be arbitrarily modifying the content of a subscriber's traffic.

    2. Re:What's the problem? by Brian+Gordon · · Score: 2, Insightful

      Because they're using software made for inserting ads into or rewriting the HTTP stream, and that software is very evil. I think it's a very neat idea that's also very scary.

    3. Re:What's the problem? by Anonymous Coward · · Score: 1, Insightful

      What about a phone call, an IM, or a letter

      You know something that has proven to be both legal and moral.

    4. Re:What's the problem? by timmarhy · · Score: 4, Insightful
      the problem is going to be that modifying the http stream will break web applications and some secure sessions. it'll become even more of a problem as time progresses.

      imho they are creating a solution to a problem that doesn't exist. there's 1000's of widgets out there they could tune to give you an almost real time view of your quota, building their own an interfering with your http traffic is not a good solution.

      --
      If you mod me down, I will become more powerful than you can imagine....
    5. Re:What's the problem? by cayenne8 · · Score: 1
      Well, the article mentioned they said "they are merely "trying different things" and testing the customer response."

      Typical Response: Fuckin' Stop It!!!

      --
      Light travels faster than sound. This is why some people appear bright until you hear them speak.........
    6. Re:What's the problem? by owlnation · · Score: 2, Insightful

      The problem...?

      The obvious one... consensus, agreement, privacy, respect, customer focus, precedent... etc...

      That all seems pretty rational to me.

    7. Re:What's the problem? by taniwha · · Score: 1

      what's the problem? it's like you make a phone call and every minute some third party chimes in and starts telling you how much you've spent ... besides you just know that next year they will start telling you about McDonald's latest burger

    8. Re:What's the problem? by weorthe · · Score: 5, Insightful

      that software is very evil

      Yes. Imagine a world in which China/Bush's America/Hillary's America no longer censors the web but subtly modifies it instead. Maybe with the cooperation of Yahoo et al. All power inevitably becomes abused. What good is freedom of expression if you can't be sure your expression is your own?

      --
      cat * >> sig
    9. Re:What's the problem? by Anonymous Coward · · Score: 0

      The only responses that matter are ones involving $$$, as in cancellations of service. Afterall, if someone is whining about service, yet they still are paying money into it, what incentive does the said company have to fix said shit?

    10. Re:What's the problem? by stevenvi · · Score: 1

      And maybe, just maybe, they'll sell that address while they're at it.

      The local telephone company sold my telephone number to advertisers, so I wouldn't put it past 'em.

    11. Re:What's the problem? by SocratesJedi · · Score: 1

      What good is freedom of expression if you can't be sure your expression is your own? Isn't this already solved through public key cryptography (i.e. message signing in PGP/GPG)? Such mechanisms enable it to be demonstrated that the message hasn't been tampered with. Instead, what it might pose a threat to is anonymous free speech. Admittedly, though, that is just as bad.
    12. Re:What's the problem? by AccUser · · Score: 2, Insightful

      the ISP is trying to inform you you're reaching your limit

      The ISP is inserting data into the page. Suppose they add a logo, a hit the mosquito advert, and a movie trailer - will they 'charge you for that bandwidth?

      --

      Any fool can talk, but it takes a wise man to listen.

    13. Re:What's the problem? by zakezuke · · Score: 3, Informative

      Let's get rational for a second here; the ISP is trying to inform you you're reaching your limit, so you don't overshoot it and start having to pay extra If that was the case... then the ISP can simply redirect all external requests to an internal page informing you as such... if for some odd reason they didn't want to use e-mail. In fact... some a local wi-max provider does just that in the event your account is overdue... a simple "you own us money" in between browsing session and poof gone.

      My data on Rogers and Shaw is dated the last I checked they didn't meter. Even if they did meter odds are you're not going to go over your limit surfing the web so any injected web based waring isn't going to be that useful.

      Redirection on the other hand... not so bad.

      --
      There is no sanctuary. There is no sanctuary. SHUT UP! There is no shut up. There is no shut up.
    14. Re:What's the problem? by palegray.net · · Score: 1

      Actually, the problem would be solved for on a per-site basis by using SSL to communite with the browser. Trouble is, SSL certificates cost money (unless you're willing to go with a self-signed cert, which causes user issues), and requires an IP address dedicated solely to that site. Both factors significantly reduce the likelihood of SSL implementation by the majority of web sites on the Internet today. Would you suffer the cost and inconvenience of making your site ran over SSL, and only SSL?

      With regard to message signing, yes, it's entirely possible to encrypt a web page with a PGP cert, but in reality that's just not practical. Are you going to digitally sign every page in your blog and rely on users to verify the signature? The bottom line is that ISP modification of content in-transit is unethical, underhanded, and undermines the very core of the values that the Internet was built on. I don't give two damns about Rogers Cable's "experimental" approach to customers; if I were a customer of theirs, I'd be taking my (Canadian) dollar elsewhere in a hurry.

    15. Re:What's the problem? by Nikker · · Score: 4, Interesting

      I am a Rogers customer right now because I am slightly out of the range of a DSL provider. My connection was erratic especially on torrents didn't matter what kind and where from. Suspicious I got a copy of Wireshark and monitored the traffic, all the packets going out appeared to be ok but all the returning packets on my torrent port were corrupted (CRC error), I brought this to their attention and they said the problem didn't exist. I told them to let their NOC know about this and they refused, they told me to send it to the general email box on their help page.

      They say they are testing the waters and they are. Are they testing a way to notify people of their account or are they trying to get people comfortable with them throwing up messages on your screen while you surf? As far as I'm concerned I will cancel and go without rather than putting up with this garbage. As far as I'm concerned the only right they have is to give me the service I'm paying for. As you can probably tell I really just don't trust this company, they don't do their job very well and expect me to put up with it, as far as I'm concerned I will fight this every inch.

      --
      A loop, by its nature, continues. If that didn't make sense, start reading this sentence again.
    16. Re:What's the problem? by Zeinfeld · · Score: 1
      Isn't this already solved through public key cryptography (i.e. message signing in PGP/GPG)?

      Its what SSL is for.

      Now we could have done message level security like some people proposed, but we didn't. SSL will defeat this type of attack fine, even with a domain validated cert. A self signed cert could be intercepted and replaced by this type of scheme - unless an SSH like scheme was used to check to see if the cert was the same as seen last time or a DKIM like domain key was used.

      If Rogers really wants to contact the user in this way they should redirect the Web page to their own Web server just like WiFi connections do. Mixing their content into other people's pages sounds like a good way to provoke lawsuits.

      --
      Looking for an Information Security student project suggestion?
      Try http://dotcrimeManifesto.com/
    17. Re:What's the problem? by __aaqvdr516 · · Score: 1

      I have a limit on my Satellite ISP. In my case they really do send an email to my real email address. But in my case I don't pay more if I go over my "limit". In my case before I even reach the "limit" my speed is drastically reduced. There are different ways to skin a cat.

    18. Re:What's the problem? by schon · · Score: 3, Interesting

      Let's get rational for a second here; the ISP is trying to inform you you're reaching your limit ... as well as taking the opportunity to inject advertising in the page.

      Don't believe it? Take a look a the screenshot. When was the last time you saw the Yahoo! logo on Google's homepage?
    19. Re:What's the problem? by palantir0 · · Score: 1

      Yeah, there isn't any way for them to tell you. Nothing like IM, text msg, or hell, make a pre-recorded phone call. No, you must put crap in your web pages. Now, what happens if i'm using a program that doesn't display anything and I hit some limit? Gee, maybe that http modification thing isn't a good way unless they are really trying to do something else.

      Cheers

    20. Re:What's the problem? by MightyYar · · Score: 1

      How else can they do it? Well, off the top of my head:
      • Ask you for an email to send notices to when you sign up.
      • Ditto for instant message
      • SMS your phone
      • Automatic phone call
      • Offer a little icon for your taskbar/dock/etc
      • RSS feed
      • Screensaver with your current stats
      • Send a midget in an "Alf" costume to your door with flowers and candy
      --
      W..w..W - Willy Waterloo washes Warren Wiggins who is washing Waldo Woo.
    21. Re:What's the problem? by PWill · · Score: 0

      I dunno, maybe I'm weird, but I would prefer an automated phone call or something.

      --
      A black cat crossing your path signifies that the animal is going somewhere.
    22. Re:What's the problem? by thePowerOfGrayskull · · Score: 0

      How else can they do it? Via email? They'd just send it to the email address they provide you with. Who really uses isp-provided email these days? it's all webmail, so they need some window to get through to you, and maybe http is that window.

      Or maybe, just maybe, they could ask you for your regular email when you sign up. This is not rocket science. There is no excuse for an ISP to be arbitrarily modifying the content of a subscriber's traffic.

      You trust your ISP enough to give them your actual email address? You, sir or madam, are a braver soul than I.
    23. Re:What's the problem? by wombiroller · · Score: 1

      The issue as I see it has little to do with the initial application, and more to do with the precedent and _potential_ applications.

      I hardly think Rogers would have invested the effort just to find a new way to notify you of your usage status. It's what ELSE they can or will use it for in the future (if no protections are put in place) that would be of concern.

    24. Re:What's the problem? by mcrbids · · Score: 1

      What good is freedom of expression if you can't be sure your expression is your own?

      Problem solved, circa 1994. It's called "SSL", and it's amazing technology that provides very strong protection against spoofing, stream-slicing, man-in-the-middle attacks, and a host of other problems.

      Using SSL means it's far more likely that the computers at either end of the connection will be compromised than the stream of data itself. Read up on it... it's pretty special!

      --
      I have no problem with your religion until you decide it's reason to deprive others of the truth.
    25. Re:What's the problem? by CastrTroy · · Score: 1

      Couldn't they just sniff it out of the TCP stream anyway?

      --

      Anthropic principle: We see the universe the way it is because if it were different we would not be here to see it.
    26. Re:What's the problem? by cgenman · · Score: 1

      Why is it suddenly technology becomes the big evil because it can be used for bad things? Inserting system-related warnings into the HTTP stream seems totally reasonable, although I'd rather they'd replace whole pages rather than insert.

      But that doesn't mean the technology is evil any more than the perl which powers the engine is evil.

    27. Re:What's the problem? by ortholattice · · Score: 1

      You trust your ISP enough to give them your actual email address? You, sir or madam, are a braver soul than I.

      This was modded "insightful"? If you don't trust them with your email address, why would you trust them as your ISP at all, with the theoretical ability to monitor 100% of your personal and business Internet activity (including, I'm sure, your email address passing somewhere in the data stream if it really interested them that much)? Well, unless you encrypt EVERYTHING I guess.

      But even the effort of creating a one-time email address just for them (forwarded to your real one), if your are this paranoid, would seem preferable to allowing them to inject their data into your TCP streams.

      And the injection wouldn't work anyway if, being as paranoid as you are, you only allow anonymized proxied https pages onto your browser. So just how, exactly, would you expect them to communicate with you?

    28. Re:What's the problem? by jerw134 · · Score: 4, Insightful

      The ISP is clearly partnered with Yahoo, just like AT&T is in the US. So the service is called Rogers Yahoo High Speed Internet. It's not an ad, it's their logo.

    29. Re:What's the problem? by Workaphobia · · Score: 1

      Many times when I connect to a public access point or hotel ethernet port, I get a page describing the service (even if it's free) that I must acknowledge before I get normal internet service. If it were a choice between that confirmation page and embedding that same information in a clearly delimited header on top of my normal request until it was acknowledged in the same manner, would one option be clearly more insidious than the other? In either case, if it is acceptable for internet service that I only temporarily subscribe to, why not for more permanent services like a home ISP?

      Yeah, I know, you want a reliable pipe between yourself and a server, that has not been tampered with by the network. But since this is just an information system over an exceedingly common protocol, and can be opted-out of, is it really that odious? ...
      Ok, enough of Devil's Advocate; let them burn.

      --
      Evidently, the key to understanding recursion is to begin by understanding recursion. The rest is easy.
    30. Re:What's the problem? by ceoyoyo · · Score: 1

      You'd rather they have the ability, and the moral conviction that it's okay, to modify your web traffic?

    31. Re:What's the problem? by saltydogdesign · · Score: 1

      It's a short path from "informing you" to "spamming the shit out of you."

      --
      // This is not a sig.
    32. Re:What's the problem? by Propaganda13 · · Score: 1

      I only use SSL webmail. While this wouldn't stop someone if they really wanted to find out, it would stop a generic scan for addresses.

    33. Re:What's the problem? by thePowerOfGrayskull · · Score: 1

      Whooooah Nelly. Erm, ortho. I'm not saying I think they're going to start spying on all of my communications -- I meant only that I don't trust them to not sell it to the first bidder. Or give it away to a 'partner or affiliate' who sells it to another 'partner or affiliate'.

    34. Re:What's the problem? by Anonymous+Brave+Guy · · Score: 1

      I'm sure Google's lawyers will see it the same way. <evil grin>

      Does anyone know what the situation is with ISPs, common carrier status, etc. in Canada? This sort of abuse seems so vulnerable to legal action on so many different bases that I'm surprised they'd even try it, but maybe their lawyers are more careful about testing the water than their PR people.

      --
      If you disagree, post your argument. (-1, Overrated) isn't your personal censorship tool for views you don't like.
    35. Re:What's the problem? by epiphani · · Score: 1

      You're talking to the wrong people, obviously. Rogers has been futzing with torrent traffic, using heuristics of connection patterns (the swarming effect of torrents, etc) to mess with torrent content - usually to QOS it down. The heuristics handles encrypted torrents as well.

      They've been doing this for YEARS. One of the anonymous network admins I knew over there said they went from 12% congestion to 1% congestion after implementing these systems. Of course they're going to continue to mess with stuff, its saving them massive amounts of money. Both Jack Kapica of the Globe and Mail as well as good ol' Michael Giest have talked about this one - I cant seem to find the articles though...

      Rogers is probably near the top of my hated Canadian companies out there. Bell isn't much better either. And don't even get me talking about the cell phone crap we get up here.

      --
      .
    36. Re:What's the problem? by Brett+Glass · · Score: 1

      If you think that the potential applications of a technology are sufficient cause to ban it, you've got an airtight case for banning all P2P.

    37. Re:What's the problem? by LuxMaker · · Score: 2, Funny

      That is nothing. My ISP embeds "Nothing to see here. Move along." into every slashdot post I make.

      --
      I regret that I only have one mod point to give per post.
    38. Re:What's the problem? by flyatcheerful · · Score: 1

      Clearly , you have never tried to cancel anything with Rogers. Mere offerings of your firstborn are normally not sufficient to escape one of their contracts a day before expiry date.

    39. Re:What's the problem? by LoraxLorax · · Score: 1

      Do you remember making long distance phone calls on a pay phone? That's exactly what they did, and I don't remember the operation every saying, "Please insert 25 cents to continue, or save that quarter and buy a Snickers bar."

    40. Re:What's the problem? by boneshintai · · Score: 1

      There's a difference?

    41. Re:What's the problem? by gmack · · Score: 1

      Indeed.. those jackasses sold me a service that didn't work from my office in the centre of Montreal, sold me a defective phone that rebooted constantly despite being sent back for repairs twice. Couldn't be bothered to send me a bill (they demanded my credit card number) harassed me every two months for the money they didn't bill me for and then when that call failed thanks to a system error on their side disconnected my service.

      After all that they not only refused to replace the phone but they demanded an "early termination fee" of $5 for each month left in the contract. Needless to say the fee was the lesser of the two evils.

    42. Re:What's the problem? by n3r0.m4dski11z · · Score: 0

      "Who really uses isp-provided email these days? it's all webmail,"
      Why did your parents take the only email address provided to your "household"? You like having 3rd party american companies in charge of all your sensitive documents and correspondences?

      --
      -
    43. Re:What's the problem? by Anonymous Coward · · Score: 0

      Reducing speed is a good strategy but it makes more sense for a satellite company than for a cable company. Why? Because the satellite company is controlling usage of a scarce resource and they need to ensure their users don't use all of their capacity, whereas the cable company is mostly just being cheap and setting limits for profit, so they stand to gain more by charging you for overages than by making sure you don't go over.

    44. Re:What's the problem? by wombiroller · · Score: 1

      Yes but we already have laws in place to protect against the potential abuse of P2P (say what you will Copyright law and/or its effectiveness)...

      The point being - we don't have net neutrality laws that prevent ISPs abusing this one or many others like it. I am not arguing for banning the technology - but I would argue we should regulate the industry.

      Unless you're advocating ISPs should be able to set the terms here, we are probably not even in disagreement...

    45. Re:What's the problem? by Anonymous Coward · · Score: 0

      You understand that putting your logo on someone else's page is advertising, right?

    46. Re:What's the problem? by thePowerOfGrayskull · · Score: 1

      Nope, but my comment isn't in the context of an either/or situation. Frankly I don't trust them to not sell or give away my email address. My ISP address is /filled/ with spam -- and yet I have never given it out to a single person, or posted it on a single site. Now it could be that people are getting lucky and guessing my address - though it's far from a common sequence of letters and numbers; or that they spam millions of random addresses and hope a few squeak through. However, most ISPs can catch such simple ploys these days -- so the question remains, how did my email address get out there when there is only /one/ party besides me that knows it?

      And based on this experience, I believe that anyone giving their ISP a private, necessary email address may be just a little bit daft.

    47. Re:What's the problem? by ceoyoyo · · Score: 1

      I figure if my ISP wants to contact me they have a phone number and they've shown that they're not at all shy about using it (the ISP is also the phone company). I'd much rather they spam my inbox (I wouldn't give them my main e-mail address either) than spam my connection though.

    48. Re:What's the problem? by Valdrax · · Score: 3, Insightful

      You trust your ISP enough to give them your actual email address? You, sir or madam, are a braver soul than I.

      You also give them your physical street address to have the service hooked up, and every month a small piece of paper containing your checking account's account number and bank routing number. In America, they probably got your social security number too.

      I'm really not afraid of what they're going to do with email compared to all of that.

      --
      If it's for-profit but free, you're not the customer -- you're the product (e.g., the Slashdot Beta's "audience").
    49. Re:What's the problem? by cheater512 · · Score: 1

      My ISP will hijack the first page request if they really need to tell you about something to do with your net.
      I mean 'read this or in a couple of months your net wont work' sort of thing.

      Its rather neat I think. Its only ever happened twice to me in ~6 years with the ISP and both refered to the same thing.
      It was Telstra's fault naturally (in Australia). :)

    50. Re:What's the problem? by wikinerd · · Score: 1

      users pay to see webpages, not the ISP's logo.

    51. Re:What's the problem? by Anneco · · Score: 1

      That logo IS an ad

    52. Re:What's the problem? by Eivind · · Score: 1

      I do. My ISP sees a single, AES-encrypted stream to the PPTP-server at my university. That's it. And yes, I -do- truse the University more than the ISP.

    53. Re:What's the problem? by Anonymous Coward · · Score: 0

      God I love nerds. Your paranoia is impressively retarded. No one cares about your secret furry fetish.

    54. Re:What's the problem? by Tim+C · · Score: 1

      Strictly speaking it's corporate branding at the top of the message that's been inserted at the top of the page. It's no more an advert than putting it at the top of a letter.

      However, that's not to say that I agree with the insertion of the message at all. If they really want to get the message to the user in that fashion, redirect HTTP requests to a different page until the user has clicked one of the "yes, all right, I've read it now stop bothering me" links. For preference, check the user-agent header to try to make sure you're not displaying it to a script; not fool-proof, but better than nothing...

    55. Re:What's the problem? by Eivind · · Score: 1

      Actually, I use that pptp-connection as my default gateway for much more mundane reasons, laziness and convenience.

      Using it means I end up surfing using a university-ip. The university has site-subscriptions for a large number of otherwise very expensive resources, ranging from technical journals to law and case-databases.

      All of which are freely available to me when I surf trough the university ip, but wouldn't otherwise be.

      Sorry to disapoint you.

    56. Re:What's the problem? by schon · · Score: 1

      It's not an ad, it's their logo. Because advertisements never contain comany logos?

      It's an ad.
    57. Re:What's the problem? by Anonymous Coward · · Score: 0

      My ISP is a cell service provider here in South Africa - they send an SMS when I am over 80% of limit and when limit is exceeded.

    58. Re:What's the problem? by thePowerOfGrayskull · · Score: 1

      Again, I wasn't making my comment in context of receiving injected data into received html...

    59. Re:What's the problem? by jahudabudy · · Score: 1

      There is a large difference in degree of abuse between abusing my checking account and abusing my email. Someone that would never think of stealing from you very well might consider sending you spam, selling your email address, etc.

      It's similar to how I would trust my friend with my car keys, but not the key to my liquor cabinet. If I actually had a liquor cabinet, that is.

      --
      ...sometimes, in order to hurt someone very badly, you have to tell that person terrible lies. - PA
    60. Re:What's the problem? by Sloppy · · Score: 1

      Who really uses isp-provided email these days?
      People who want to communicate with their ISP.
      --
      As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.
    61. Re:What's the problem? by HiThere · · Score: 1

      But the people who understand what is going on will be a minority within a small minority. And only a minority of those will care enough to act.

      Therefore customer flight isn't a problem. It's at best a temporary lifeboat...but you can't live for too long in a lifeboat.

      The solutions that I see are:
      1) flee: Very temporary. This is only to find time to implement something else.
      2) go back to mail based transactions.
      3) build up an alternative internet infrastructure based on WiFi and line-of-sign laser connections.
      4) some kind of mesh network that independent of ISPs
      5) legal regulation of ISPs.
      6) establish a new communication protocol, with a new stack of applications to handle it. (This could be based around HTML, or XML, or whatever...but it needs to be different from HTTP and probably to use a different port.) This would run over standard ISP connections, but wouldn't have the same protocol, so an ISP that modified it would need a different toolchain.) RSS is sort of this kind of thing already. Have the protocol include a license in each transmission, such that modification and transmission is allowed only if the resultant page would display the same way in all toolsets of the original tool chain, and include a text editor among the original tool chain. Have comment tags, but restrict what they can contain without violating the license. Specify a simple compression/encryption in the protocol as an "access control measure".

      Note that this is a combined technical-legal approach, making use of copyright laws. Might as well get *some* use our of them. (OK, the GPL already does so. This is just a bit more use.)

      A problem with this approach is that it will only work with web pages that support it. Perhaps

      These all have defects, but customer flight is an extremely short-range solution. The flight of customers who care will have such a minor impact that it probably won't even be noticed.

      --

      I think we've pushed this "anyone can grow up to be president" thing too far.
    62. Re:What's the problem? by jamie(really) · · Score: 1

      They could do it like every WiFi hotspot provider out there: any attempt to go to any http site brings up the message page, and then once accepted provides the real page. The key difference is that this would process would be about blocking content until contractual obligations were met, instead of modifying content provided by someone else. "Creating an unauthorized derived work of copyrighted content" is a thought that pops into my head.

    63. Re:What's the problem? by jamie(really) · · Score: 1

      would one option be clearly more insidious than the other?

      Because one is about you agreeing to a service before said service is offered, while the other is about modifying someone else's intellectual property (in fact creating an unauthorized derived work of copyrighted material). Simple really.

    64. Re:What's the problem? by Workaphobia · · Score: 1

      You had me going for the first half of the sentence, but copyright is profoundly irrelevant to this topic. Sure, you can try to mold a legal interpretation out of the outdated piece of crap that is IP law in the digital age, but you can do the same for almost every aspect of modern life. Is it an unauthorized derived work to splash a DOG (digital onscreen graphic) over broadcast television (assuming that this right wasn't granted along with the broadcast rights themselves)? And why does the derivative work matter at all? Isn't copying verbatim also illegal? By the way, I never gave you permission to reproduce the contents of this message in RAM.

      Seriously though, the proper counter argument would be something like "Because one is informative and precedes access to the service, while the other modifies what is supposed to be traffic between you and one other party," but I'm not sure even that holds up to scrutiny.

      --
      Evidently, the key to understanding recursion is to begin by understanding recursion. The rest is easy.
    65. Re:What's the problem? by zakezuke · · Score: 1

      Who really uses isp-provided email these days?


      People who want to communicate with their ISP. This is one of those comments that should be moderated up. I made a trivial comment about WiMax providers who in the event you bill is late they redirect you to a page and let you continue. Someone else spoke of WiFi providers doing something similar to access.

      Most ISPs I've used with the exception of the super large ones, they prefer billing via e-mail and often charge a small fee if you must have paper billing. I personally accept an ISP e-mail account for this purpose and this purpose alone.

      --
      There is no sanctuary. There is no sanctuary. SHUT UP! There is no shut up. There is no shut up.
    66. Re:What's the problem? by palegray.net · · Score: 1

      This reminds me of an old quote:

      "Democracy is a system of government under which the people are governed no better than they deserve."

    67. Re:What's the problem? by jerw134 · · Score: 1

      Because advertisements never contain comany logos? This is a strawman argument, I'm not even going to bother refuting it.

      It's an ad. So I guess you consider it an ad when your ISP puts their logo on the bill they send you?

      Listen, I am not trying to say that I agree with this practice of inserting content into web pages. I am saying that the content is not an ad. It does not have to be an ad for it to be bad.
    68. Re:What's the problem? by jamie(really) · · Score: 1

      I chose the copyright angle because in this day and age I thought it would have the most traction (use their arguments against them and all that), but equally your traffic modification would be another. I think we agree that no matter how you look at it, its wrong!

    69. Re:What's the problem? by Brian+Gordon · · Score: 1

      The problem with SSL certs is that they only establish that you're connected to a particular domain. DNS is still vulnerable. --~~~~

    70. Re:What's the problem? by zakezuke · · Score: 1

      Do you remember making long distance phone calls on a pay phone? Or hell, even local call on a payphone post deregulation, where a quarter/2quarters would only buy you three min or so. The thing I found annoying were the operators that phoned back and asked for more money.

      These days "The line is busy. For only (so many) cents, we will continue to call)". I have to say that's annoying for data/fax calls.

      --
      There is no sanctuary. There is no sanctuary. SHUT UP! There is no shut up. There is no shut up.
    71. Re:What's the problem? by palegray.net · · Score: 1

      I understand the premise of what you're saying, but you're not quite right on this. DNS poisoning is only a problem if the client software (web browser) has a vulnerable implementation of SSL validation (modern browsers do not suffer from such a problem). To quote an excerpt from a securtiy bulletin detailing a weakness in Netscape 4.7 series SSL validation routines (source: http://www.ciac.org/ciac/bulletins/k-040.shtml):

      ------- BEGIN QUOTED SECTION ----------

      A simple attack (called web-spoofing) on this system is to attack the DNS server and "poison" its entry for www.e-bank.com with attacker's IP address 99.99.99.99. Attacker sets up a web server at 99.99.99.99 that web-wise looks exactly like the original www.e-bank.com server. User trying to connect to www.e-bank.com will now instead connect to the attacker's server and provide it with his one-time password. Attacker's server will use this password to connect to the real server at 100.100.100.100 and transfer all of the user's money to his secret Swiss bank account ;-).

      This attack is successfully disabled by using SSL protocol. In that case, when browser falsely connects to www.e-bank.com at 99.99.99.99 rather than to 100.100.100.100, attacker's server must provide a valid certificate for www.e-bank.com, which it can't unless the attacker has stolen the secret key and the certificate from the real server. Let's look at three possibilities:

      1) Attacker could issue a certificate for www.e-bank.com himself (on his own CA). That wouldn't work since his CA is not trusted by user's browser.
      2) Attacker could use a stolen expired key and certificate (those are often not protected as strongly as valid ones since one could think they can't be used any more). That wouldn't work since browser will notice that certificate is expired.
      3) Attacker could use a valid key and certificate for some other site (e.g. www.something.org). That wouldn't work since browser will accept only valid certificates for www.e-bank.com.
      It would seem that this problem of web-spoofing is successfully solved with SSL certificates.

      ------- END QUOTED SECTION ----------

      Again, SSL effectively blocks against the majority of reasonably effected spoofing problems these days, as long as (1) large primes remain hard to factor, and (2) client SSL client libraries are well written.

  3. Yawn by TopSpin · · Score: 1

    I saw Orange doing this on their wireless network in Lyon about 3 years ago. Have also seen it on various hotel networks.

    Still get my personal uplink from a small, privately owned ISP that doesn't have anything like enough on-staff talent to wiggle into every aspect of my traffic. About 1/2 has fast as any given nearby Comcast cable uplink. Costs about $20 more a month too. For all that you can take your trafficshaped, mutiliated $29.95/month interweb pipe and <censored>

    If you're going to line up at the troth with the other sheep, lower your expectations.

    --
    Lurking at the bottom of the gravity well, getting old
    1. Re:Yawn by Anonymous Coward · · Score: 0

      Trough, not troth.

      1. troth - a mutual promise to marry
      2. troth - a solemn pledge of fidelity

      1. trough a. A long, narrow, generally shallow receptacle for holding water or feed for animals.

  4. Re:Dupe by A+beautiful+mind · · Score: 5, Funny

    This is not a dupe, it's merely your isp inserting outdated data in to your webpage because Slashdot didn't pay your ISP the brand new anti-crapification fee.

    --
    It takes a man to suffer ignorance and smile
    Be yourself no matter what they say
  5. Trying different things... by Z80xxc! · · Score: 5, Funny

    In other news, a mad internet subscriber broke into the headquarters of a Canadian ISP called Rogers. Upon entering, he hit shot two techs, broke 3 servers with a sledgehammer and then proceeded to start a fire in the CEO's office. Upon being apprehended by police, he was let go after informing them that he meant no harm and was just trying some different things to see how the company would react.

    1. Re:Trying different things... by basic0 · · Score: 2, Insightful

      Good luck. I listen to Prime Time Sports with Bob McCown every day, and apparently even well-known, award-winning air talent doesn't have any level of access to Uncle Ted or the 10th floor of the Rogers building. McCown claims he's never met Ted Rogers in the ~10 years he's been working for him. I imagine his office is like something out of the movie "Sneakers".

    2. Re:Trying different things... by Anonymous Coward · · Score: 1, Funny

      Well, instead of shooting them, being Canadian he'd whack them across the skull with a hockey stick, then beat the crap out of the with a snow shove, start the fire in the CEO's office to stay warm and politely ask Ted Rogers, the owner, for permission to use the washroom.

      Then he'd explain it all to the police, as you said, before being tazered. :-)

      ttfn

    3. Re:Trying different things... by Coraon · · Score: 1

      I work in the cell phone department on the tenth floor and I havnt met Ted either, though after reading this I think I want to.

      --
      -Ours is the wisdom of Solomon, the magic of Merlyn, the fall of Icaris.
    4. Re:Trying different things... by abb3w · · Score: 1

      I would have suggested a more traditional response involving a mob carrying torches and pitchforks, accompanied by a less-traditional mob of press invited for a slow news day outing.

      --
      //Information does not want to be free; it wants to breed.
  6. please by warrior_s · · Score: 1

    kdawson... you have to start reading slashdot ... man you are an editor.. atleast add an rss feed and read only story headlines.... it was posted yesterday on slashdot

    1. Re:please by SpaceLifeForm · · Score: 1

      This story was probably posted again on the theory
      that Rogers costumers may have missed it.

      --
      You are being MICROattacked, from various angles, in a SOFT manner.
  7. Misuse of content? by donovansmith · · Score: 1

    Saw this story a day or two ago here. I don't think they have any right to be modifying content that does not belong to them. They are modifying content for purposes that the site owner's did not intend and many site owners would consider that misuse of their site content. The fact that they are modifying that content also clearly shows their systems are taking a look at every single web page viewed by a subscriber and the privacy implications are beyond creepy. Seems like protocols like Tor to protect privacy are becoming increasingly justified.

    1. Re:Misuse of content? by iamacat · · Score: 1

      So DVD players violate content owner's rights by displaying menus on top of the video? This would fall well within fair use. More so than numerous adblocking plug ins for various web browsers anyway.

    2. Re:Misuse of content? by ScrewMaster · · Score: 1

      Not quite the same thing, and you know it, particularly because the DVDCCA maintains strict control of what players can do and explicitly authorizes that behavior. And Ad-block plugins are a choice to modify content made by the consumer of that content. That's hugely different from the data transport mechanism modifying said content on the fly to suit its own needs ... it is not what we pay for when we send our Internet bills every month. You might also want to check on where fair use applies (and where it doesn't) before making any such claim that ISPs could hide behind it. Companies have gotten in hot water for editing DVD movies and redistributing them: that's probably a more apropos comparison to this situation than a simple application of fair use.

      In any event, I expect my DVD player to (ahem) "modify" the content of a DVD in specific, expected ways that are strictly to my benefit. I don't expect it to change the plot, reorder scenes, or start presenting advertising while I'm watching the movie.

      --
      The higher the technology, the sharper that two-edged sword.
    3. Re:Misuse of content? by The+Master+Control+P · · Score: 1

      Bullshit. After you hit "play," there is exactly one non-error condition where the player will overlay a menu on your video stream: You hit a menu button, which means you requested it. This is equivalent to having a cochlear implant whose audio processor inserts "obey your corporate masters" underneath everything your hear: Data you don't want, being forced on you by someone between the data source and you.

    4. Re:Misuse of content? by Anonymous Coward · · Score: 0

      So DVD players violate content owner's rights by displaying menus on top of the video?

      You're having trouble reading, so I'll quote the relevant line again for you:

      "They are modifying content for purposes that the site owner's did not intend and many site owners would consider that misuse of their site content."

      DVD content owners know about (and are fine with) DVD players which temporarily add menus when playing back DVDs. Miramax does not consider it "misuse" if your Toshiba DVD player puts a menu on the screen while you're watching Pulp Fiction.

      This would fall well within fair use.

      No, it would not. Fair use is "a doctrine in United States copyright law that allows limited use of copyrighted material without requiring permission from the rights holders, such as use for scholarship or review". I don't think Rogers is doing this for "scholarship or review".

      Also, the first (of four) pieces of the balancing test for fair use is the "purpose and character of the use, including whether such use is of a commercial nature or is for nonprofit educational purposes". It's pretty clear that Rogers is commercial.

      Part three is "the amount and substantiality of the portion used in relation to the copyrighted work as a whole". In this case, Rogers is including 100% of the copyrighted portion along with their content.

      This is quite obviously not fair use by any stretch of the imagination.

    5. Re:Misuse of content? by Belial6 · · Score: 1

      You have it a little wrong. I expect your DVD player to (ahem) "modify" the contact of the DVD I sold you in specific, expected ways. In fact, most (All?) of those modification can be blocked from my end when I master the DVD. So, no, DVD players do not modify the movies. They just let you use the interactivity that I put into the product I sold you.

      Basically, the receiver of media does not technically have the right to make derivative works, and they certainly don't have the right to redistribute those derivative works without the copyright holders express permission.

  8. When people "experiment" by grilled-cheese · · Score: 2, Funny

    Babies come from people "experimenting" too.

    1. Re:When people "experiment" by ScrewMaster · · Score: 1

      Yeah, but we pretty much know what the "customer response" is going to be in that case.

      --
      The higher the technology, the sharper that two-edged sword.
    2. Re:When people "experiment" by Anonymous Coward · · Score: 0

      Babies come from people "experimenting" too.

      In many cases, there are legitimate reasons for babies. But, as in some of the aforementioned cases, I think these guys just need their tubes tied off.

  9. Semi-dupe by Bogtha · · Score: 1
    --
    Bogtha Bogtha Bogtha
  10. Ahhh The Internets - Those Crazy Tubes... by NeverVotedBush · · Score: 1

    Are like the wild west.

    I wonder if advertisers will start talking about blacklisting ISPs that modify content? Or maybe try to find some way to charge them extra?

    1. Re:Ahhh The Internets - Those Crazy Tubes... by gknoy · · Score: 2, Funny

      If advertisers blacklisted ISPs, wouldn't that make those ISPs users have a better experience? Sounds like a win-win. ;)

  11. No problem as used in this case by iamacat · · Score: 5, Interesting

    It seems that the customer would be less unhappy about a warning that he is about to reach a bandwidth cap, page modifications and all, than just get a thousand dollar bill out of the blue. There is no set mechanism for the ISP to communicate with the customer over Internet, so creating one might be justifiable in this case. Write again when a (non-free) ISP injects ads or blocks competitor's websites.

    1. Re:No problem as used in this case by Bellum+Aeternus · · Score: 1

      Automated phone calls would probably work too.

      --
      - I voted for Nintendo and against Bush
    2. Re:No problem as used in this case by iamacat · · Score: 1

      When was the last time you picked up a call with unknown Caller ID?

    3. Re:No problem as used in this case by deftones_325 · · Score: 0

      Never. Matter of fact, those calls cause me to turn off the lights, turn on the police scanner and nervously pace back and forth for a few minutes.

      --
      "A gentleman never strikes a lady with his hat on." - Fred Allen
    4. Re:No problem as used in this case by arkhan_jg · · Score: 2, Insightful

      Thing is, now you know they have the ability, equipment and willingness to modify your datastream...

      Write again when a (non-free) ISP injects ads or blocks competitor's websites.

      How would you know whether they are, or not?

      --
      Remember kids, it's all fun and games until someone commits wholesale galactic genocide.
    5. Re:No problem as used in this case by Anonymous Coward · · Score: 0

      e-mail?

    6. Re:No problem as used in this case by Anonymous Coward · · Score: 1, Informative

      There is no set mechanism for the ISP to communicate with the customer over Internet, so creating one might be justifiable in this case.

      email...

    7. Re:No problem as used in this case by iamacat · · Score: 1

      You have an interesting life. Personally, I am just annoyed by listening to personal bankers and insurance agents who profess inordinate interest in my finances or financial security of my family.

    8. Re:No problem as used in this case by deftones_325 · · Score: 0

      Wow. I'm so sorry. I can think of nothing worse than a bunch of over-persistant financial advisors trying to get thier hands on a portion of the money YOU have earned.

      --
      "A gentleman never strikes a lady with his hat on." - Fred Allen
    9. Re:No problem as used in this case by RedWizzard · · Score: 5, Interesting

      It seems that the customer would be less unhappy about a warning that he is about to reach a bandwidth cap, page modifications and all, than just get a thousand dollar bill out of the blue. There is no set mechanism for the ISP to communicate with the customer over Internet, so creating one might be justifiable in this case. There is a set mechanism: email. And if that's not sufficient they could easily write a little app to provided notification that could be run by users who are worried about exceeding their limit. There is no need for what they are doing. In fact what they are doing is probably copyright infringement: they are creating and distributing a derived work (the modified page) without the author's permission.
    10. Re:No problem as used in this case by qzulla · · Score: 1

      TFA mentioned a $50.00 cap on the charges.

      qz

    11. Re:No problem as used in this case by CastrTroy · · Score: 1

      Couldn't it just leave a message though? How hard would it be to design an automated calling system the recognized it was an answering machine (by detecting the double ring, and waiting for the beep), and then leave a message on the machine?

      --

      Anthropic principle: We see the universe the way it is because if it were different we would not be here to see it.
    12. Re:No problem as used in this case by Anonymous Coward · · Score: 0

      Why do you assume that there's a customer browsing the web on the other end? Maybe you're using wget to get some pages and republish them as an zip archive, or you're running a script that interacts with a server through html. What Rogers is doing could add your bandwidth info to your archive for everyone to see, or could break your script that has been running fine for 3 years.

      What you get down the pipe MUST be byte-for-byte identical to what the server sent. No ifs and buts.

    13. Re:No problem as used in this case by xaxa · · Score: 1

      Why can't they show a caller ID? (Sorry, non-USAer here, I don't know exactly what your caller ID does. I don't know what the one here does either, since I only use a mobile, which doesn't help. Maybe the ISP could send a text!)

    14. Re:No problem as used in this case by Brett+Glass · · Score: 1
      There is a set mechanism: email. And if that's not sufficient they could easily write a little app to provided notification that could be run by users who are worried about exceeding their limit. There is no need for what they are doing.

      As an ISP, I can tell you that there is no "set" or sure way of contacting a customer quickly. Customers frequently change their e-mail addresses due to spam. You can call, but this is expensive and intrusive. Users often change their numbers (especially cell phone numbers). And what if the user is about to exceed his or her download limit at 3 AM? Should you call and risk waking the household? Should you wait until the next morning and tell the user after the fact (which might cause him or her to claim that more notice should have been given)? We've tried a custom application, but people didn't load it because they feared viruses. Or were running a platform that couldn't run it. Or deleted it by mistake. We even tried the Windows Message Service; it worked only until pop-up spammers started abusing it. Frankly, putting a banner at the top of Web pages is a really good, customer-friendly idea.

    15. Re:No problem as used in this case by Anonymous Coward · · Score: 0

      The phone system has survived for decades in a similar situation without phone companies having to resort to such idiocy in order to warn their customers. Yes, people do occasionally get fat telephone bills that they weren't expecting, but that's why you have to monitor your usage when you're using a metered service.

    16. Re:No problem as used in this case by g0rAngA · · Score: 1

      Well, given that I have to pay an extra $5 per month to have access to caller ID...yeah, I do it all the time.

    17. Re:No problem as used in this case by iamacat · · Score: 1

      If cable ISPs charged by time online like dialup providers and computers came with a cradle to "hang up" network access, this would be a much more reasonable request for users. As it is, web pages and other applications do not always report just how much bandwidth they have used so far. Even then, you have to remember that back when international phone rates were around $2/minute most people would have to call customer support at least around once per year to dispute charges when the connection was not clear or both phones were accidentally left off hook.

    18. Re:No problem as used in this case by wikinerd · · Score: 1

      There is no set mechanism for the ISP to communicate with the customer over Internet

      Companies request your email address (and phone) for a reason, you know.

    19. Re:No problem as used in this case by J0nne · · Score: 1

      There is no set mechanism for the ISP to communicate with the customer over Internet It's called e-mail.
    20. Re:No problem as used in this case by RedWizzard · · Score: 1

      There is a set mechanism: email. And if that's not sufficient they could easily write a little app to provided notification that could be run by users who are worried about exceeding their limit. There is no need for what they are doing.

      As an ISP, I can tell you that there is no "set" or sure way of contacting a customer quickly. Customers frequently change their e-mail addresses due to spam. You can call, but this is expensive and intrusive. Users often change their numbers (especially cell phone numbers). And what if the user is about to exceed his or her download limit at 3 AM? Should you call and risk waking the household? Should you wait until the next morning and tell the user after the fact (which might cause him or her to claim that more notice should have been given)?

      Many ISP's provide email. This in the obvious way to contact your customers. You don't need care about what email addresses your customers are currently using because you can always use the one you gave them. My ISP sends me an email when I hit 80% and again when I hit 100%. If I choose to ignore those emails (or the whole account) that's my business and problem. I certainly wouldn't want a call from my ISP over an exceeded limit at any time of the day or night.

      We've tried a custom application, but people didn't load it because they feared viruses. Or were running a platform that couldn't run it. Or deleted it by mistake. We even tried the Windows Message Service; it worked only until pop-up spammers started abusing it. If customers don't want to run tools to tell them when they are about to exceed their limit that's their problem. You don't need to go to heroic lengths to make sure people are notified, you only need to give them reasonable options they can choose from: an app, an email, a webpage they can monitor, an RSS feed, a phone line they can call.

      Frankly, putting a banner at the top of Web pages is a really good, customer-friendly idea. No, it's intrusive, it's a slippery slope to really unethical behavior, and it's possibly illegal (for the copyright infringement reason). If you want to notify your customers via web pages then use your own page, don't hijack other peoples' pages. If you absolutely must do this page hijacking then at make it clear that you're doing it and give people a way of switching it off. But even then I don't think it's a good idea because it's only a matter of time before some marketing manager will decide it's a really good idea to use the same mechanism for advertising.
    21. Re:No problem as used in this case by Brett+Glass · · Score: 1
      Methinks someone had better walk a mile in his ISP's moccasins before trying to tell that ISP how to do business.

      Many ISP's provide email. This in the obvious way to contact your customers. You don't need care about what email addresses your customers are currently using because you can always use the one you gave them.

      This statement is the first sign that you have no experience as an ISP. The fact is that users often do not check the mailbox the ISP gives them, and sometimes do not check any mailbox regularly. E-mail is not a reliable way to reach a customer.

      If customers don't want to run tools to tell them when they are about to exceed their limit that's their problem.

      No. It's our problem (and our job) to provide good customer service with no effort or technical knowledge on the part of the user. That means being proactive even if the customer has changed computers; even if the customer has an incompatible computer; even if the customer has a broken computer. Remember, the ISP gets blamed for everything. This entire topic is a great example; it condemns an ISP for doing the right thing!

      it's intrusive, it's a slippery slope to really unethical behavior, and it's possibly illegal (for the copyright infringement reason).

      All alarmist and false claims. It's the best way I've seen to get the job done. Rogers deserves credit for implementing it.

      But even then I don't think it's a good idea because it's only a matter of time before some marketing manager will decide it's a really good idea to use the same mechanism for advertising.

      Hey, I guess that ISPs should block all P2P then. After all, some thief will decide it's a really good idea to use it to pirate music and movies, and start using the same mechanism for stealing.

    22. Re:No problem as used in this case by RedWizzard · · Score: 1

      Methinks someone had better walk a mile in his ISP's moccasins before trying to tell that ISP how to do business. What? Every other ISP in the world manages to solve this issue without hijacking web pages they don't own. You think no one has thought of this before? Of course they have, and they've discounted it as the stupid idea that it is.

      No. It's our problem (and our job) to provide good customer service with no effort or technical knowledge on the part of the user. That means being proactive even if the customer has changed computers; even if the customer has an incompatible computer; even if the customer has a broken computer. Remember, the ISP gets blamed for everything. This entire topic is a great example; it condemns an ISP for doing the right thing! This entire topic is great evidence that ISP customers do not want this.

      But even then I don't think it's a good idea because it's only a matter of time before some marketing manager will decide it's a really good idea to use the same mechanism for advertising.

      Hey, I guess that ISPs should block all P2P then. After all, some thief will decide it's a really good idea to use it to pirate music and movies, and start using the same mechanism for stealing.

      That doesn't follow at all.
    23. Re:No problem as used in this case by Brett+Glass · · Score: 1
      No Web pages were "hijacked" (an inflammatory term). Rogers merely put a message at the top of the user's browser window. If the user had been diverted to a different page, that would have been "hijacking." Doing it this way is a great idea.

      This topic seems to be an example of a sensationalist (In this case, Lauren Weinstein, who seems to get a rush from causing a fuss) making inflammatory claim and then having it posted on Slashdot to produce a knee-jerk overreaction. Highly manipulative. And you've taken the bait! Fortunately, many of the other people posting here have actually looked at the screen shot, seen what was going on, and have recognized that the article and the page to which it refers are inflammatory and misleading.

    24. Re:No problem as used in this case by Reece400 · · Score: 1

      Or they could try competing with DSL providers in the area and not have a bandwidth cap?

    25. Re:No problem as used in this case by Anonymous Coward · · Score: 0
      There is a set mechanism: email


      Um, no... my ISP doesn't host my email, I may have gotten an email account when I signed up, but I've never provided a username or anything so they have noway of knowing how to contact me (except by watching my HTTP sessions to gmail, of course)

    26. Re:No problem as used in this case by cybermage · · Score: 1

      There is no set mechanism for the ISP to communicate with the customer over Internet, so creating one might be justifiable in this case.

      There may not be a standard mechanism, but there are many ways for ISPs to contact their clients: Phone, Email, Snail Mail, etc. If they want to communicate through the browser, they could do what many hotel chains do: Intercept the http request and return their message instead. This is usually done on their free wi-fi to make you accept their terms of use before you can use their network. This is different than inserting stuff into someone else's content. What Roger's is doing could set themselves up to lawsuits from the sites who's content their modifying.

    27. Re:No problem as used in this case by Ephemeriis · · Score: 1

      It seems that the customer would be less unhappy about a warning that he is about to reach a bandwidth cap, page modifications and all, than just get a thousand dollar bill out of the blue. There is no set mechanism for the ISP to communicate with the customer over Internet, so creating one might be justifiable in this case. Write again when a (non-free) ISP injects ads or blocks competitor's websites.
      There's plenty of ways for the ISP to communicate with the customer - both over the Internet and other means. They could send out an email to the customer when they get near their limit. They could provide bandwidth details and limits on some customer-accessible website. They could release a small application that monitors the customer's bandwidth usage. They could give the customer a call, or automate a call system. All of which would let the customer know that they're nearing or exceeding their bandwidth cap without having to modify anyone's HTTP.

      I don't care how good the intention is, they're modifying someone else's HTTP. It's only a matter of time before their injected code messes up a website somewhere. I'm sure banks just love the idea of ISPs attempting to inject code into their on-line banking systems. I wonder how the various anti-fraud/anti-phishing utilities respond to this? How long until somebody clicks a link and installs something horrible because the injected banner across the top said "Rogers" and they thought it was safe?
      --
      "Work is the curse of the drinking classes." -Oscar Wilde
    28. Re:No problem as used in this case by jez9999 · · Score: 1

      My ISP sends me an email when I hit 80% and again when I hit 100%.

      My ISP doesn't have retarded bandwidth caps. We should be fighting this shit.

    29. Re:No problem as used in this case by Anonymous Coward · · Score: 0

      "There is no set mechanism for the ISP to communicate with the customer over Internet"

      Hey you know your right, I wish there was a way to communicate from one person to the other over the internet. Kinda like sending an envelope but with out the paper....

      I'm gonna call it EMAIL!! I'm gonna be rich!

    30. Re:No problem as used in this case by hauntingthunder · · Score: 1

      well no it isn't if you piss of one of the biggest players with pockets so deep they can tie you up in legal suits for eaver hell they could just buy rogers and sack the senior managment "Pour encourjay lays ortras"

      --
      You will never get to heaven with an Ak 47... But A Zu 30 is good for Low Flying Cherubim
    31. Re:No problem as used in this case by Sloppy · · Score: 1

      Doing it this way is a great idea.

      Part of the overall problem of "dealing" with the Internet, is finding what you want, filtering it to separate the wheat from the chaff, and categorizing things. This general problem is why people object to spam, why we have search engines, why our browsers filter out ads, etc.

      Email would be the perfect way to deliver a message, resulting in a message that is already pre-sorted and categorized: "This email is a message from my ISP."

      Instead, Rogers has added noise. Now the users have to deal with the possibility of their scripts having to apply an additional filter to pages after curling or wgeting them. Now they have to write greasemonkey scripts to filter out distracting noise potentially added to every page they look at in their browser. The information Rogers added, is almost never topically relevant to whatever the user desired to look at, unless they just happened to be looking at Rogers' own site (which isn't the case here).

      The error is in thinking that if a message is deemed to be "important" enough, by somebody, then it should be forced and interrupt other content. Imagine if everyone did that. You are trying to read about something, and the page has an important commercial announcement (the sale ends tomorrow!), an announcement that your traffic with the ISP is approaching a certain limit, an announcement that some child in a nearby city is missing so please call the cops if you know anything, an announcement that the first freeze of the season is about to happen so you should bring some of your plants indoors, and an important message that Craig Shergold is about to die and his last wish is to get a postcard from everyone in the world.

      If users want a feed of announcements about certain types of events, the user should be the one to choose what events they want to see, and should be able to easily categorize and prioritize them. Modifying unrelated web pages is totally fucked up, and just makes the Internet worse.

      Yes, if you do it right, some people will not opt to check for messages about certain topics. "But my message is important, and should be thrust upon people whether they're interested or not." That arrogant attitude is why we have spam.

      --
      As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.
    32. Re:No problem as used in this case by Anonymous Coward · · Score: 0

      I'm leaving Roger's over this issue and their very poor VPN speeds.

      Please let us know the name of your ISP. If you think modifying (changing, deleting, or adding) data exchanged between me and a third party is okay, then I don't want to be your customer.

    33. Re:No problem as used in this case by drafalski · · Score: 1

      First they might want to identify what those limits are. Then why not just redirect web pages to their server with an "nearing/over limit" message, instead of sliding it into a third party's content?

    34. Re:No problem as used in this case by Anonymous Coward · · Score: 0

      Unfortunatly the parent is mostly right. All my ISPs appears unable to communicate with me true any other e-mail than "theirs". That is the user name I chose or they gave me "@ThatIsp.com". Now I never use it, I have 2 googles account, an old Yahoo! Account, and 3 domains I can create as many mail accounts I want (and use SpamGourmet).

      Yet, my ISPs always send e-mails true "their" stupid account! At least my current ISP (when announcing a stop do "non-limit download" sent me by snail mail the new policy with an http addres where I can check my usage at any time (accessed using "their" user name and password!).

      If you ask me it's their fault for not accepting an alternate e-mail.
      If you ask them, I am responsible to regularly check my 'client user name' e-mail on their server (probably sais so in the terms too).

    35. Re:No problem as used in this case by RedWizzard · · Score: 1

      All my ISPs appears unable to communicate with me true any other e-mail than "theirs". That is the user name I chose or they gave me "@ThatIsp.com". Now I never use it, I have 2 googles account, an old Yahoo! Account, and 3 domains I can create as many mail accounts I want (and use SpamGourmet). If you're using Gmail then get it to pick up email from your ISPs address via POP. That's what I do. Most of it is spam and is filtered as such, but if the ISP emails me I'll see it. Or just pick up yourself and spam filter it.

      If you ask me it's their fault for not accepting an alternate e-mail. Well yes. There are plenty of options the ISPs could offer. The fact that they don't certainly does justify this page hijacking thing.
    36. Re:No problem as used in this case by Brett+Glass · · Score: 1

      As an ISP, I find it very hard to believe that any ISP wouldn't be willing to e-mail a user at the address of his or her choice. And, no, we certainly have no reason to spam them. (I have never heard of, and can't imagine, an ISP that is not vehemently anti-spam.) The problem we do see, though, is that people frequently change their addresses without telling us. What Rogers is doing is a very elegant way to ensure that we're reaching the right user and that the message gets through.

  12. Re:Dupe by Brian+Gordon · · Score: 1

    You're going to get modded funny and I'm going to groan :/
    update: modded funny 1 minute into my 2 minute posting timeout for the GP post! grooan

  13. Neveryoumind... by Bonewalker · · Score: 2, Funny

    According to a CBC article, Rogers admits to modifying customers' HTTP data, but says they are merely "trying different things" and testing the customer response.

    Oh, well, that's ok then, if you are only trying different...HEY! Wait a minute! You can't do that. Why, I oughta....

  14. Re:Dupe by Anonymous Coward · · Score: 0

    Yep. I don't use Rogers and I don't see this article. Er, wait...

  15. Oblig xkcd by RuBLed · · Score: 5, Funny

    Are they doing that with Oven Mitts? No?! Lame....

    1. Re:Oblig xkcd by Azarael · · Score: 1
  16. Hey Rogers! by ScrewMaster · · Score: 4, Insightful

    I got your "customer response" right here.

    Seriously, when it becomes acceptable for the phone company to break into my conversation with "Did you know that Geico can save you ton of money on car insurance?" then my ISP can screw around with my Web pages. Otherwise, get your sticky paws OFF me, you damn dirty apes.

    --
    The higher the technology, the sharper that two-edged sword.
    1. Re:Hey Rogers! by Zspdude · · Score: 2, Funny

      Seriously, when it becomes acceptable for the phone company to break into my conversation with "Did you know that Geico can save you ton of money on car insurance?" then my ISP can screw around with my Web pages. Shut up, shut up SHUT UP! They'll do it, you know.
      --
      What's in a Sig?
    2. Re:Hey Rogers! by ScrewMaster · · Score: 1

      Yeah you're right ... don't give them any ideas. Especially bad ideas.

      --
      The higher the technology, the sharper that two-edged sword.
    3. Re:Hey Rogers! by Anonymous Coward · · Score: 0

      Lets please get our quotes correct... Charlton Heston screams, "Get your stinking paws off me, you damn dirty ape!"

    4. Re:Hey Rogers! by ScrewMaster · · Score: 1

      Here you go, from the horse's mouth to yours ... "Get your stinking paws off me, you damn dirty ape!". And if you expect me to apologize for that, you little know your man. I haven't seen that movie in damn near thirty years.

      --
      The higher the technology, the sharper that two-edged sword.
  17. Might not be your ISP by QuantumG · · Score: 3, Interesting

    That is to say, this is a case of your ISP using packet modification to insert code into your HTTP stream, but it doesn't have to be so innocuous. It's quite possible that someone who has hacked into your ISP could do the same thing.. and not just to HTTP streams, but any TCP stream. Downloaded any executables lately? Its quite possible that a hacker could have intercepted any packet that begins with "MZ", has a non-zero value at offset 0x3c which contains a 4 byte offset into the packet that has "PE" at it. There's a windows binary, let's change the bytes at the entrypoint to do something malicious.

    SSL is your friend.

    If only we could get IPSEC happening.

    --
    How we know is more important than what we know.
    1. Re:Might not be your ISP by Slashcrap · · Score: 1

      If only we could get IPSEC happening.

      Great idea! It would certainly put our current problems into perspective.

      As somebody who has almost certainly implemented more IPSEC based VPNs than you have, can I modify that to "If only we could get something better and simpler than IPSEC happening"?

      I'm not casting aspersions on the security of IPSEC. I'm more concerned about the shit-wreck that would result from trying to get all the different half assed implementations of IPSEC to talk to each other, which is what you are proposing.

      Here's some information from the real world. If you give the IPSEC RFCs to two different teams and tell them to develop products from them, those finished products will not talk to each other properly, if at all. After several rounds of interop testing and bug fixes, they probably will talk to each other as long as you don't do anything scary like NAT traversal, Xauth, certificate based authentication or expecting the fucking things to work properly for more than 24 hours without someone watching them constantly.

  18. Didn't we just talk about this? by statemachine · · Score: 2, Funny

    It seems we just had a story that talked about Rogers.
    Will ISP Web Content Filtering Continue To Grow?

    (No, this one words it differently. -- Inserted by your friends at the NSA)

  19. I'm not punching you in the nose... by erroneus · · Score: 1

    ...I'm merely trying different things to see what sort of response I would get from people.

    I'm sorry, but in the US, the ISP needs to be brought up on Federal Criminal charges of interfering with commerce on a local, state, federal and international level.

  20. You've been rogered. by Seor+Jojoba · · Score: 5, Funny

    I propose turning their company name into a verb, "roger", which means to manipulate internet data without the receiver's permission. Everytime you exclaim, "I've been rogered!" or "They rogered my data!" the Rogers company name will hold on to its well-earned place in history. And yes, "roger" already means something else quite similar. With either definition, something is being inserted where it probably shouldn't go.

    1. Re:You've been rogered. by reidconti · · Score: 3, Funny

      As in, "you've just been Rogered arseways by your ISP?"

    2. Re:You've been rogered. by MightyMartian · · Score: 1

      Or "Man, did you see that guy taking it up the roger?"

      --
      The world's burning. Moped Jesus spotted on I50. Details at 11.
    3. Re:You've been rogered. by The+Master+Control+P · · Score: 2, Funny

      "Hey, man, is something wrong with your server?"

      "Roger, roger!"

    4. Re:You've been rogered. by p0tat03 · · Score: 4, Informative

      You may not know this, but "Rogers" is already synonymous with "taking it up the arse" up here in Canada. After all, who else charges $210/month for 500MB of wireless data transfer? Or creates a 3G broadband network but refuses to allow actual 3G phones to access it (restricting you to this huge BRICK of a wireless "modem" they provide you)? Or raising their prices almost 30% in the last 2 years?

      I just wish someone like Google or Microsoft sues Rogers into oblivion for this crap. I'm pretty sure impersonating another corporation's official communications (loading the Google homepage, for example) is fraud.

    5. Re:You've been rogered. by Telepathetic+Man · · Score: 1

      Roger, Roger's server had been rogered.

      --
      Just because you can, does not mean you should.
    6. Re:You've been rogered. by RealGrouchy · · Score: 1

      For all the terrible shit that Rogers does, being "rogered" would be as versatile and ambiguous a term as being "smurfed".

      - RG>

      --
      Hey pal, this isn't a pleasantforest, so don't waste my time with pleasantries!
    7. Re:You've been rogered. by larjon · · Score: 1

      Roger that!

      --
      $> cd /pub
      $> more beer
    8. Re:You've been rogered. by Shakrai · · Score: 1

      Or creates a 3G broadband network but refuses to allow actual 3G phones to access it (restricting you to this huge BRICK of a wireless "modem" they provide you)?

      Isn't Rogers a GSM carrier? I seem to recall my T-Mobile USA (gsm) phone roaming on them the last time I was on Canada. If they are a GSM carrier just buy whatever phone you want and move your sim card.

      --
      I want peace on earth and goodwill toward man.
      We are the United States Government! We don't do that sort of thing.
    9. Re:You've been rogered. by smellsofbikes · · Score: 1

      I'm told, by books, that this usage was common in the 1600's, as a cruel joke about pirate treatment of captured prisoners: "a jolly rogering." I don't know if it's true but I've read it in a couple of different places.

      --
      Nostalgia's not what it used to be.
    10. Re:You've been rogered. by Z00L00K · · Score: 1

      Roger Wilco to that!

      --
      If builders built buildings the way programmers wrote programs, then the first woodpecker would destroy civilization.
    11. Re:You've been rogered. by HiThere · · Score: 1

      I thought "to rodger" aleady was a verb. Brittish dialect.
      Thought it meant something from the days of sailing ships, and was a sexual reference.
      Here we go http://en.wiktionary.org/wiki/roger :
      Verb
          Infinitive
              to roger
          Third person singular
              rogers
      Simple past
              rogered
      Past participle
              rogered
      Present participle
              rogering
      to roger (third-person singular simple present rogers, present participle rogering, simple past rogered, past participle rogered)
            1. (transitive, coarse slang) Of a man, to have sexual intercourse with (someone), specially in a rough manner.
            2. (intransitive, coarse slang) To have sexual intercourse.
      Synonyms
            * See WikiSaurus:sexual intercourse

      --

      I think we've pushed this "anyone can grow up to be president" thing too far.
    12. Re:You've been rogered. by Anonymous Coward · · Score: 0

      Roger that Over and Out ;o)

  21. If Rogers is trying different things.... by 8127972 · · Score: 1

    .... Then I think I will try a different ISP. After all, what is good for the goose is good for the gander right?

    --
    This is my opinion. To make sure you don't steal it, it's covered by the DMCA.
  22. I have not experienced this by eap · · Score: 5, Funny

    I am a Rogers [V1AGR4] customer, and I [MORTGAGE RATES FALL AGAIN!] think you're all just overreacting [VISTA - THE BEST WINDOWS YET!].

    Now let's have no more talk about this bizarre coverup.

    1. Re:I have not experienced this by dlanod · · Score: 2, Funny

      Unfortunately the parent's original text was "I am a Rogers customer, and I can't stand this BS."

    2. Re:I have not experienced this by Anonymous Coward · · Score: 0

      Time Warner must be replacing text too! As far as I can tell, you spelled "you're" correctly, and this is Slashdot!!

    3. Re:I have not experienced this by Anonymous Coward · · Score: 0

      Your wrong about that.

  23. Getting away with murder by javacowboy · · Score: 5, Insightful

    So.... why aren't there any high profile lawsuits against Rogers yet?

    First they throttle BitTorrent traffic. Then, when BitTorrent users encrypted their connections, all encrypted traffic was throttled, making VPN connections unbearably slow.

    The only reason I can think of that they're getting away with this is that...uh...people in Ontario don't telecommute at all?

    Why is everybody letting Rogers get away with these shenanigans? Rogers' practises must be costing some business users serious money. I simply don't understand.

    --
    This space left intentionally blank.
    1. Re:Getting away with murder by Froster · · Score: 2, Informative

      I experienced these problems. Torrents becoming unusable (one week I could download an Ubuntu ISO at 550K, the next week it dropped to 0.6 and continued to drop from there, making my one hour download a 62 day download had I kept using bittorrent). I started to use an encrypted proxy, but within weeks, that ceased to work, and my work VPN went with it.

      After that, I switched to a local ISP, and never looked back.

    2. Re:Getting away with murder by shiningdays · · Score: 0

      Why is everybody letting Rogers get away with these shenanigans? Rogers' practises must be costing some business users serious money. I simply don't understand. Because Canada isn't the United States when it comes to internet - yes, the entire country is connected, but there's often little to no competition; so companies CAN get away with murder. I live out in Vancouver so i don't have to deal with Rogers (just it's evil twin brother, Shaw) but even out here there's only two real choices for high-speed internet; 1 cable company and one DSL; and there are some neighborhoods that are DSL-only & some cable-only. I won't even go into how patchy service can get away from the cities. For alot of people, it's high-speed with Rogers or back to the dialup line. Rogers knows this, and uses this monopoly to pull pranks like this one.

    3. Re:Getting away with murder by p0tat03 · · Score: 1

      Why is everybody letting Rogers get away with these shenanigans? Rogers' practises must be costing some business users serious money. I simply don't understand.

      Rogers is one of the dirtiest businesses I have ever seen in my life, far exceeding even the worst excesses of Microsoft when they were truly untouchable.

      I have no idea why they keep their internet customers... it's probably due to marketing. In Ontario both Bell and Rogers both bite the big one, and since they are the only two choices most people are aware of, there's no incentive to switch to an equally crappy service.

      I too use TekSavvy and cannot be happier. Customer service is prompt, there are no touch-tone menus to surf through to get some help, and the prices are LESS THAN HALF of what Rogers charges for roughly equivalent service. (fyi it's 5Mbps, 200GB/month for $25 vs. 6Mbps, 75MB/month for $50.)

      I really do wish that company did more marketing, if only so they can really stick it to Rogers. These guys are robbers in every way imaginable. They use their domination of Canada's GSM market to extort ridiculous charges from their users, and force unbelievably expensive cable bundles down your throat for daring to want to watch TV. It's ridiculous, and IMHO ought to be illegal.

    4. Re:Getting away with murder by NFN_NLN · · Score: 1

      This isn't ISP related but I remember when Fido (GSM) use to be a great alternative. As soon as they were bought by Roger's they started to merge the networks... ever since then I've had crap cell service. The worst is when I have messages in my voicemail but no missed calls appear. I leave my phone on 24/7/365! I canceled out of spite and went with a pre-paid PC phone. Sure the phone is lame but I'm voting with my dollars. Smoke a phat one, I'm not getting "Roger'd" anymore.

    5. Re:Getting away with murder by vistic · · Score: 1

      Huh wait... $50 for 75... MEGA bytes? A month?

      So you could burn up your month's worth of data in 100 seconds at full throttle at 6Mbps? That would be $0.50/second.

      What crap. 200 GB is waaaaaaay more reasonable. Just think of how many major and popular software downloads come in well over 75MB. Maybe they came up with that limit a decade ago and just haven't updated it since then to keep up with technology?

    6. Re:Getting away with murder by p0tat03 · · Score: 1

      My bad, that's 75GB/month, not MB :P But nonetheless, they are dinosaurs living in a market where people are offering 3x the usage for HALF the price.

    7. Re:Getting away with murder by Kayamon · · Score: 2, Interesting

      I'm not sure what you're describing is actually possible.

      There shouldn't be any observable difference between encrypted traffic and, say, a ZIP file. They're both high entropy data streams with no apparent structure to analyze. I don't see how they could distinguish your VPN from any other binary file.

      --
      Kayamon
    8. Re:Getting away with murder by kailoran · · Score: 1

      Zip files have headers with predictable patterns ("PK" anyone?). Ditto for pretty much any file format. Also, it's not about what file you transfer -- it's about the how. They can selectively cut down ssh and common vpn ports, or they might be just throttling anything non-HTTP.

    9. Re:Getting away with murder by Anonymous Coward · · Score: 0

      Getting away with murder


      I would not be in the least surprised if they have. Seriously. There's probably a long list of mysterious deaths surrounding those crooks.

      Rogers is above the law in Canada. They are "untouchables". Rogers has been using criminal business practices for ages. They sell product that they do not have (wireless). They use false advertising regularly. Extortion, racketeering and the like are standard operating procedure for Rogers.

      The one that really offends me is sale of a non-existent product, and the Government ("law") totally ignores it. You see, the law in Canada (or in any democracy) can be bought with ease.

      Be warned. Stay well away from Rogers, they will screw you. Rogers sucks. Boycott these criminals! Write your MP and ask why Rogers' criminal business practices have been allowed to continue for so long! (for what a letter to an MP worth... the best protest is total boycott)

    10. Re:Getting away with murder by Yankel · · Score: 1

      Why?

      - Because services are bundled for a contract period (two years) to receive a discount.
      - Discontinuing a service results in discounts being charged back to the client.
      - Because the other choice is Bell (who does the same thing).

      It's really a matter of six of one... there's no real competition in broadband here. Even the Toronto Hydro wireless network (www.onezone.ca) charges $30/month for who knows what network speed (access in downtown Torotno only) and it throws you off after 15 minutes of inactivity (requiring a username/password to get back on).

      --
      --- Dan
    11. Re:Getting away with murder by QuebecNerd · · Score: 1

      I hear you... I was with Fido a few years back. They had good plans but poor coverage out of the big cities. To make up for that they would let you activate an analog phone @ .20$/minute for the minutes used outside their network. They were renting network access from Bell and Telus. The big joke is that they went from accommodating their clients @ .20$/minutes with someone else's network to screwing their clients @ .30$/minutes from their OWN network when Teddy Boy took over and with reduced coverage on top of it all. They didn't really merge the networks; they sold the extended Roger network to Fido users as an option.

      The long distances minutes went from .10$ to .30$ citing increasing costs...

      All the good plans disappeared.

      I'm now with virgin mobile but it seems to no nonsense, no catch network of Sir Richard Branson was after all only Bell's puppet and they too became greedy.

      They're all on life support anyways, in 10 years they'll be gone

  24. Re:Misuse of content? Next Step: by davidsyes · · Score: 1

    government honey nets....

    Imagine being given wrong directions, misleading or misinforming.

    This could be merely the first step in domestic warfare upon civilians. In the case of the US, bitching about China conducting IT warfare against the US... sheesh, the US ADMITTED (IIRC) that it would seek out technical capabilities in this area. Doesn't matter anymore who started it. The whiny bitching in the papers is pathetic. All governments do this, so the US is not the only nor the last target.

    But, Rogers is probably just sleuthing along a la AT&T, on the Canadian side of the border.

    Could be that real, bona fide Terrorists set up shop in comfy (to them?) Canada and Canada, fearful of becoming a haven for springboard attacks to the good ole U.S. of A, wants to show washington it can get tough with technical prowess.

    OTOH, could be the US is encouraging Canada to do this, knowing the fallout will be terrorists might have to clam up and reduce their activity.

    As for crackers, they will have to also go further underground, or risk being caught.

    So, what we have is stupid criminals and less sophisticated Ts getting caught, marketing teams manipulating consumer privacy information, and government saying it's all for the common good.

    Somewhere in there lies the truth, the dark truth, and worse.

    --
    Previously: "Linux... Toward the Sunrise..." Now: "Linux... Toward the-- No, now, part of Every Sunrise"
  25. Read between the lines by Anonymous Coward · · Score: 0

    Canadian ISP RogCOCKSUCKERSers

    I'm just trying different things, too... inserting content into the http stream. Oh, does that offend you? Well guess what? YOUR CUSTOMERS DON'T CARE FOR IT EITHER! /rhethorical_questions

  26. What, again? by zonky · · Score: 1

    Those naughty Canadians.

  27. Shouldn't be too hard... by OptionalMayhem · · Score: 1

    ...to guess that the "customer response" would be overwhelmingly negative.

  28. uk equivalent by Anonymous Coward · · Score: 0

    here in the uk we have the truly contemptible carphone warehouse that plies a similarly intrusive practice

  29. Okay, I know... by gillbates · · Score: 5, Insightful

    This is a dupe, but it's worth commenting on.

    The fundamental problem I see with this is that the ISP is changing the content of webpages to suit their own interests. There are a myriad of problems here, regardless of whether or not the customer accepts it:

    1. Copyright law: technically, the modified web page is a derived work. The ISP can now be held liable for copyright infringement if, say, Google, or the New York Times objects. The potential revenues sinkhole from copyright litigators is far greater than what any ISP could bear.
    2. There are ethical problems with an ISP artificially inflating the size of webpages, especially if they charge for the bandwidth.
    3. This smacks of 1984-esque censorship. Once it becomes commonplace for an ISP to change a web page, how long before government uses this for nefarious purposes.
    4. Consider how the above may be abused: a political rival logs onto Google, and the ISP replaces the normal content with child porn. Enter the police and 10 to 20 years in prison...
    5. If I can't trust my ISP to deliver an unmodified webpage, the only alternative is to use https for everything. While I'm personally favorable to such a thing, I realize it will disenfranchize a lot of part time and small time web operators who don't have the sophistication to setup an https server properly. Thus, one of the great egalitarian aspects of the web dies.

    In light of the fact that a certain ISP blocked access to union websites, this is an alarming event indeed. Democracy depends on the free flow of information, and I'm thinking that it might be appropriate to make such a practice illegal, if only for the sake of preserving democracy. It will first be used for commercial gain, and later, leveraged as a political tool.

    --
    The society for a thought-free internet welcomes you.
    1. Re:Okay, I know... by BeBoxer · · Score: 1

      Copyright law: technically, the modified web page is a derived work. The ISP can now be held liable for copyright infringement if, say, Google, or the New York Times objects. The potential revenues sinkhole from copyright litigators is far greater than what any ISP could bear.

      Yeah, I'm kind of surprised that the ISP's even consider changing the content of web pages in flight. It's not just 'technically' copyright infringement. It's blatantly so. And fails every single test which might qualify it as 'fair use'. Rogers must not actually employ any actual lawyers at all to do something this clearly illegal. Even the folks who play lawyers on TV know that if you rip off somebody else's content and put your own ad's into it's a copyright violation.

    2. Re:Okay, I know... by RealGrouchy · · Score: 1

      Very good points, but ironic sig you've got for the same post: That wasn't his sig. That was something Rogers added in for an extra touch.

      - RG>
      --
      Hey pal, this isn't a pleasantforest, so don't waste my time with pleasantries!
    3. Re:Okay, I know... by MobyDisk · · Score: 1

      Is there a reason that HTTPS cannot work over a multi-homed web site? Ex: Serve multiple https servers on one IP address? That is one of the big barriers toward universal HTTPS adoption,

    4. Re:Okay, I know... by Anonymous Coward · · Score: 0

      Yes.

      From http://httpd.apache.org/docs/2.0/ssl/ssl_faq.html#vhosts

      Why can't I use SSL with name-based/non-IP-based virtual hosts?

      The reason is very technical, and a somewhat "chicken and egg" problem. The SSL protocol layer stays below the HTTP protocol layer and encapsulates HTTP. When an SSL connection (HTTPS) is established Apache/mod_ssl has to negotiate the SSL protocol parameters with the client. For this, mod_ssl has to consult the configuration of the virtual server (for instance it has to look for the cipher suite, the server certificate, etc.). But in order to go to the correct virtual server Apache has to know the Host HTTP header field. To do this, the HTTP request header has to be read. This cannot be done before the SSL handshake is finished, but the information is needed in order to complete the SSL handshake phase. Bingo!

    5. Re:Okay, I know... by Anonymous Coward · · Score: 0

      If I can't trust my ISP to deliver an unmodified webpage, the only alternative is to use https for everything. While I'm personally favorable to such a thing, I realize it will disenfranchize a lot of part time and small time web operators who don't have the sophistication to setup an https server properly. Thus, one of the great egalitarian aspects of the web dies.

      I've never set up HTTPS by myself, but it can't be that hard. We paid some ops consultants to do it for us. Sure, it costs a couple hundred dollars for the certs, but when you consider that a decade ago it required thousands of dollars of hardware/software just to set up a web server, it's not bad at all. College kids can afford it. They're not disenfranchising the poor here.

      Look at Google. They obviously know about HTTPS, and yet most of the Google services are not available over HTTPS -- which is precisely where Rogers is inserting their crap!

      As with most things, it's not about the money, or even the knowledge; it's about the will. If you want to set up HTTPS for your users, you do. You just have to recognize that this is important, and then go do it. (That's life, in a nutshell, BTW.)

      Of the "general search engines" listed on Wikipedia, only Alexa seems to offer HTTPS. Of course, nobody cares; everybody is going to keep using the dominant one despite not taking privacy as seriously as they could. It's a familiar story.

    6. Re:Okay, I know... by Brett+Glass · · Score: 1

      Rogers didn't change the content of the Web page one bit. It merely put a banner at the top. Juno and other services have been doing this for years (a technique called "framing") and it's never been considered to be copyright infringement; it's not in this case either. And it's sure less obtrusive than a pop-up!

    7. Re:Okay, I know... by JavaRob · · Score: 1

      NoOoO! Poopy-heads!!1! I asked my mom, and she said that Rogers didn't change the content of the Web page one bit. It merely put a banner at the top. Juno and other services have been doing this for years (a technique called "framing") and it's never been considered to be copyright infringement; it's not in this case either. And it's sure less obtrusive than a pop-up! I didn't change your content one bit -- I merely added a small bit at the top.

      "Less obtrusive than a pop-up" isn't much of an argument either. It's also less intrusive than a salesperson knocking at your door, but that doesn't mean it's okay.

      Yes, I'm exaggerating, but the general populace's grasp on technology is already a tenuous thing. Once they understand that they can type in a website address, and the browser will show them content from that website they're already ahead of the game. What will they assume when the ISP is sneaking in extra content?

      More importantly, the websites themselves put a hell of a lot of work into layout on the screen, even returning different content depending on the resolution, pixels available, and/or device the user has (notice that "framing" and custom browsers that show ads in the margins simply shrink the page size, so the page display will adjust just as if the window were simply smaller. Ninjaed extra content DOES NOT). Advertisers often pay different amounts for ads that are "beyond the fold", where the user will have to scroll to see it. Some websites are designed to fit entirely above the fold, and navigation is designed based on that. Some websites are flash-only, some pop a new window and resize it based on their content size... There's a $#!#load of money and time that's gone into developing this stuff, and if ISPs suddenly start inserting their own content, it's all shot to hell.

      I'm not sure of how copyright laws, etc. apply, but I imagine Rogers will soon know *all* laws that can possibly apply if they proceed.
    8. Re:Okay, I know... by Hatta · · Score: 1

      If I wget a .html file, its checksum had better be exactly the same when I retrieve it as it is on the server. If it's not, then they ARE changing the content. That is unacceptable.

      --
      Give me Classic Slashdot or give me death!
  30. In other words by dynomitejj · · Score: 0

    They are trying to figure out how to make money because they are selling broadband internet so cheap that the profit margin is thin as ****

  31. Well by goingforaslash · · Score: 1

    I suppose if they have informed the customers that content may/will be modified from the Internet in a sign up agreement than ok, but if they have not, would not this be illegal?

    Throwing the legal mumbo jumbo away, why would they want to do this, what is the intent?

    Sounds dodgy to me!

    Cheers

    1. Re:Well by CastrTroy · · Score: 1

      They want to do this so they can inform customers that they are going over their allotted limit. They probably figure that this will create less problems then users calling up after they receive the bill, claiming that they should have been warned that they were approaching their limit.

      --

      Anthropic principle: We see the universe the way it is because if it were different we would not be here to see it.
    2. Re:Well by goingforaslash · · Score: 1

      If that is the case, they are actually adding to traffic. There are better ways to monitor traffic!

  32. I just want internet access by flar2 · · Score: 1

    I just want my ISP to give me access to and from the internet. No inserting content, no filtering ports, no filtering content, no monitoring. Just connect me to the damn network allot me some bandwidth and leave me be! Surely there must be demand for plain and simple, no strings attached internet access.

    1. Re:I just want internet access by jlarocco · · Score: 1

      That's all most customers want. Which is the problem. Delivering exactly what customers want is no way to stay in business these days.

      So it seems, anyway.

    2. Re:I just want internet access by Anonymous Coward · · Score: 0

      Sure it is. The fact that companies fail is because they're not doing that.

    3. Re:I just want internet access by John+Hasler · · Score: 1

      How much extra are you willing to pay for that?

      --
      Warning: this article may contain humor, sarcasm, parody, and perhaps even irony. Read at your own risk.
  33. I don't think so. by Frosty+Piss · · Score: 2, Insightful

    This could open up a whole bunch of "but I didn't download that" claims when users are caught with dubious material. They could claim that their ISP modified their download streams and point (at least some of) the blame toward the ISP.
    Of course this is a disturbing trend, and from what I read about Rogers Cable, I'm not surprised. But I have to seriously question if your scenario would come to pass. I really don't think that ISPs are going to "insert" kiddie porn, "illegal" music or movies, or "terrorist" content in your Web page requests. Pirate Bay will not be buying banner ads on Rogers. The thing that *might* open them to liability are these stupid pop-ups that look like Windows dialog boxes advertising spyware removal or similar shit.
    --
    If you want news from today, you have to come back tomorrow.
    1. Re:I don't think so. by gmagill · · Score: 2, Funny

      I think he means that *I* could claim that all that goat porn I downloaded was 'inserted' by my ISP, that I am not a pervert.

    2. Re:I don't think so. by Frosty+Piss · · Score: 0

      I think he means that *I* could claim that all that goat porn I downloaded was 'inserted' by my ISP, that I am not a pervert.
      Yes, obviously. I'm saying that's a stretch. Extremely unlikely. Why would an ISP "insert" porn into your Web page? They wouldn't.
      --
      If you want news from today, you have to come back tomorrow.
    3. Re:I don't think so. by Anonymous Coward · · Score: 0

      Because maybe your ISP is run by perverts

    4. Re:I don't think so. by Anonymous Coward · · Score: 0

      Because maybe your ISP is run by perverts
      Idiot.
    5. Re:I don't think so. by Storlek · · Score: 1

      What about ads that hijack the computer with malicious ActiveX controls that hook the computer to a botnet? Adbrite had to deal with that not too long ago; an advertiser was hacking their ad scripting code to insert some fairly unpleasant stuff onto pages.

      --
      Bears don't normally eat things that talk and move backwards.
    6. Re:I don't think so. by mattmatt · · Score: 1

      Disgruntled employee at the ISP perhaps?

    7. Re:I don't think so. by thegrassyknowl · · Score: 2, Insightful

      I didn't imply kiddie porn or anything of the like. I said "dubious". Dubious depends on locality and context.

      What you find acceptable I might find dubious.

      are a lot of corrupt people working all over the place. There are a lot of funky rules in regard to what people are and aren't allowed to look in various countries.

      There is nothing to say that a disillusioned worker at an ISP couldn't have himself a little fun by somehow hiding an iframe or something into the extra data that displays the contents of an external site that may cause you to be examined a little more closely by the authorities. It's unlikely, I know, but once the facilities are in place it becomes much easier to manipulate if someone ever wanted to.

      Your stupid popup ad thing is one more plausible example. Again, that is dubious content. You might not get in trouble for it but it could cause you trouble if it links to spyware.

      --
      I drink to make other people interesting!
    8. Re:I don't think so. by ScrappyLaptop · · Score: 5, Funny
      1. ISP inserts banner ads.

      2. Said banner ad space is sold to an company that sells it to the highest bidder.

      3. Highest bidder is a malware filled porn site.

      4. Banner ad fills your IE cache with goat porn that you've never viewed. Then it seduces your goat.

      5. Do not pass Go, do not collect $200.

    9. Re:I don't think so. by Frosty+Piss · · Score: 1

      What you find acceptable I might find dubious.
      But while such garbage might be annoying, it's unlikely it would be illegal content.
      --
      If you want news from today, you have to come back tomorrow.
    10. Re:I don't think so. by FatdogHaiku · · Score: 5, Interesting

      First, IANAL. I was raised in a law enforcement home and one of my best buddies is a lawyer, so I like to think about this stuff. What I find interesting is the legal defence issue. Evidence requires a chain of custody or it is just "some stuff we found somewhere". When the ISP tampers with the stream, they provide any defendant with proof positive that it is possible that the defendant had nothing to do with whatever it is that has the prosecutor's panties in a knot. The "tree" (internet connection) is tainted and thus it is NOT possible to prove anything except that the defendants connection was compromised. You could wear a jury out questioning every person that worked for the ISP, regardless of their position... when you have no proof you go fishing for doubt. Does someone at the ISP know someone at the prosecutor's office? That's doubt. Was the customer ever rude or mean to an ISP employee? Sounds like revenge... On and on you could go.

      --
      You have the right to remain sentient. If you give up the right to remain sentient, you will be elected to public office
    11. Re:I don't think so. by mr_walrus · · Score: 1

      a disgruntled employee at an isp could very well insert porn/whatever into streams if the insertion
      process is already actively taking place.
      can the ISP *prove* an employee did NOT do it?
      (hey, reverse-onus is popular now days, use it to your advantage, THE MAN will...)

    12. Re:I don't think so. by lena_10326 · · Score: 3, Insightful

      But while such garbage might be annoying, it's unlikely it would be illegal content.
      You're surfing on a public computer in Iran.... a popup displays showing hardcore gay sex and red blinking text says CLICK FOR FREE GAY PORN!

      --
      Camping on quad since 1996.
    13. Re:I don't think so. by Frosty+Piss · · Score: 0

      You're surfing on a public computer in Iran.... a popup displays showing hardcore gay sex and red blinking text says CLICK FOR FREE GAY PORN!
      We're *not* talking about surfing in Iran. That's a completely different subject. The story this thread is a part of has nothing at all to do with surfing in Iran.
      --
      If you want news from today, you have to come back tomorrow.
    14. Re:I don't think so. by Mr.+Roadkill · · Score: 1

      4. Banner ad fills your IE cache with goat porn that you've never viewed. Then it seduces your goat.
      Oooh... I don't like that, not one little bit. Everyone knows that the defiled ones are no good as sacrifices to your SCSI bus, and I have more than enough trouble keeping track of which ones are and are not as it is.
    15. Re:I don't think so. by prockcore · · Score: 1

      I really don't think that ISPs are going to "insert" kiddie porn, "illegal" music or movies, or "terrorist" content in your Web page requests


      True.. but they are fucking with the DOM.. causing the highly dynamic pages I'm serving to not work correctly.
    16. Re:I don't think so. by afidel · · Score: 2, Insightful

      It doesn't have to be illegal to cause you legal headaches. Example: You're surfing a perfectly normal site with no expectations of adult banner ads, but your session is hijacked by your ISP with a less than reputable ad provider. Up pops a banner ad with a risque model just as your female coworker pops into your cube to ask a question. Now you and your company are potentially facing a lawsuit for a hostile work environment. I wonder is Websense et al can detect this type of manipulation in order to protect the corporate networks.

      --
      There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
    17. Re:I don't think so. by Darby · · Score: 3, Insightful

      I really don't think that ISPs are going to "insert" kiddie porn, "illegal" music or movies, or "terrorist" content in your Web page requests

      You're almost certainly correct, if by "ISPs" you mean the decision makers of the ISPs, and therefore the official policies thereof.

      However, what this does is fundamentally change the way they run their network thereby opening up massive vulnerabilities.

      Before they decided to make it their official policy to engage in the mass of unethical behaviors this exhibits, in order to insert goat porn, or the like, into a client's browser a disgruntled employee would haver to jump through a mass of hoops (assuming they ever had any working network monitoring tools).

      Now, though, since this fraudulent activity is part of their official corporate policy and therefore necessarily of their infrastructure, all it takes is changing some text which is designed to be easily modified.

      That's the fundamental problem with this policy. Creating a method for potentially malicious people to insert unwanted content into the browsers of their own customers *is* the entirety of the policy.
      I doubt many people think that "goat porn for the masses" is the goal of Rogers, but they are going way out of their way to make sure that doing exactly that is trivial.

      I absolutely hope somebody pulls that argument and wins though, because this absolutely creates more than enough reasonable doubt.

      "But we didn't put that pic of two year olds fucking on his computer"...

      "Oh yeah? You created a process designed for the purpose of manipulating content and creating forgeries of web sites with deliberately falsified content in violation of every standard practice, every commonly sensible idea and every relevant ethical principle. Prove absolutely that each and every one of your employees was entirely uninvolved with this particular case, when you've spent so much time and effort ensuring that it would not only be possible, but trivial."

      It's not that Rogers has a plan for gross porn distribution, it's that they've created a means, a method and a process for doing exactly that with few if any possible legitimate uses.

    18. Re:I don't think so. by rucs_hack · · Score: 1

      sooo

      if they insert something, like say adverts, into a data stream while someone is viewing the pirate bay, would that mean they were befitting from piracy?

    19. Re:I don't think so. by JonathanR · · Score: 1

      That's a pretty shithouse business model. However's a fella gonna make enough question-marks with that.

    20. Re:I don't think so. by Jah-Wren+Ryel · · Score: 3, Funny

      Was the customer ever rude or mean to an ISP employee? Sounds like revenge... On and on you could go. Excellent, a new reason to bite the head off of the customer service reps!
      --
      When information is power, privacy is freedom.
    21. Re:I don't think so. by IngramJames · · Score: 1

      in order to insert goat porn.. all it takes is changing some text which is designed to be easily modified.

      Call me conservative and traditionalist if you will, but what is wrong with good old goatse itself?

      The youth of today clearly have no respect for the values and history of the interweb. For shame.

      --
      'No rational religion claims "supernatural" exists, that's an atheist slander.' - seen on slashdot.
    22. Re:I don't think so. by splutty · · Score: 3, Funny

      5. Do not pass Go, do not collect $200.

      6. Do not drop the soap.
      --
      Coz eternity my friend, is a long *ing time.
    23. Re:I don't think so. by DataSpring · · Score: 1

      Oops - redundant mod set by accident. Posting to the thread to try and negate my mod points in this discussion - stupid, laggy computer combined with dropdowns that do instant modding...oiy.

    24. Re:I don't think so. by operagost · · Score: 1

      That's a bah-ah-ah-ah-ahd joke.

      --

      Gamingmuseum.com: Give your 3D accelerator a rest.
    25. Re:I don't think so. by lena_10326 · · Score: 1

      You're surfing on a public computer in Iran.... a popup displays showing hardcore gay sex and red blinking text says CLICK FOR FREE GAY PORN!
      We're *not* talking about surfing in Iran. That's a completely different subject. The story this thread is a part of has nothing at all to do with surfing in Iran.
      Then you missed my point entirely, which obviously wasn't about surfing in Iran. What's legal in your jurisdiction is not always legal in other's jurisdictions.

      --
      Camping on quad since 1996.
    26. Re:I don't think so. by HiThere · · Score: 1

      No goats.

      --

      I think we've pushed this "anyone can grow up to be president" thing too far.
  34. common carrier by Richard_J_N · · Score: 4, Interesting

    What a really stupid thing to do. Never mind that it's unethical, they just lost their common-carrier status. Now the RIAA can sue them for contributory infringement ;-)

    At least, that's my understanding of it - ISPs and postal services are legally "common carriers", i.e. they just deliver stuff; they aren't responsible for any legal ramifications of what they deliver. Eg the post service isn't liable if someone mails a forged cheque. BUT...if they demonstrate that they control, inspect, and modify what they are delivering, they might just be liable when someone uses their network to commit fraud.

    1. Re:common carrier by Jeff+DeMaagd · · Score: 1

      I don't think ISPs have common carrier status for that service.

  35. Re:Dupe by Anonymous Coward · · Score: 0

    Begin groaning in three, two, one...

  36. Web Servers can detect this... by nweaver · · Score: 5, Interesting

    See this old Slashdot article on how servers can detect such modifications when they happen by using a bit of Javascript as an integrity checker.

    (Disclaimer, I'm one of the authors of the work)

    --
    Test your net with Netalyzr
    1. Re:Web Servers can detect this... by FranklinDelanoBluth · · Score: 1

      What, do an md5 of the source? Seriously, this isn't rocket science, especially for the /. crowd. No need to hawk your own shit.

    2. Re:Web Servers can detect this... by Anonymous Coward · · Score: 0

      See, that's why I have JavaScript disabled, so that miscreants can't tell that I've altered the original page to remove certain images displaying products I'm not interested in.

      I'll bet most Slashdotters have done the same.

    3. Re:Web Servers can detect this... by Tim+C · · Score: 1

      That relies not only on the client supporting JavaScript and having it switched on, but also on the ISP not stripping it out. Doing so may be non-trivial, but on a targeted, per-site basis (eg for heavily-visited sites) it's certainly feasible.

    4. Re:Web Servers can detect this... by Sloppy · · Score: 1

      Why bother trying to detect, when you can reliably prevent? Use SSL.

      --
      As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.
  37. 1997 called... by Spy+der+Mann · · Score: 1

    They want their geocities ads back.

  38. Oblig Ghostbusters quote by devnullkac · · Score: 1

    The effect? I'll tell you what the effect is, it's pissing me off!

    --
    What do you mean they cut the power? How can they cut the power, man? They're animals!
    1. Re:Oblig Ghostbusters quote by rob1980 · · Score: 1

      That's correct your honor... this ISP has no dick.

    2. Re:Oblig Ghostbusters quote by geminidomino · · Score: 1

      But an impressive pair of brass balls

  39. Meanwhile in court ... by Anonymous Coward · · Score: 0

    Lawyer: We were merely "trying different things" and testing the customer response.

    Judge: Touche...

  40. Yep. by Black+Parrot · · Score: 5, Funny

    And I wonder how many times they're going to insert this story into Slashdot.

    --
    Sheesh, evil *and* a jerk. -- Jade
  41. Web sites need to enable HTTPS properly by Skapare · · Score: 3, Informative

    Web sites need to enable HTTPS properly over their entire site. Then your ISP can do nothing more than just prevent the secure connection from being established. And if they do that, they break all kinds of stuff like shopping checkout and access to bank accounts.

    Right now, Slashdot's own HTTPS URL just redirects to the HTTP URL. This needs to be changed to just leave things in the HTTPS mode. Eventually this should be changed so that HTTP redirects to HTTPS. Google does the same boneheaded redirection.

    --
    now we need to go OSS in diesel cars
    1. Re:Web sites need to enable HTTPS properly by shish · · Score: 1

      IIRC slashdot's HTTPS works fine, but is subscriber-only~

      --
      I mod down anyone who says "I will be modded down for this", regardless of the rest of their comment
    2. Re:Web sites need to enable HTTPS properly by hwstar · · Score: 1

      Yes, that would [mostly] put a stop to it, but it will never happen because the amount of processing required to handle 1000's of https sessions would be staggering indeed.

      I suppose if they were desperate enough, the ISP's could require MITM http://en.wikipedia.org/wiki/Man-in-the-middle_attack on all HTTPS connections so they could bugger those as well. (They would also get access to juicy tidbits like SSN's and credit card numbers).

      Some corporate firewalls are already doing MITM on HTTPS, so I would be careful of certificate prompts, and certificates installed in your browser at work by the IT department.

    3. Re:Web sites need to enable HTTPS properly by Just+Some+Guy · · Score: 1

      Web sites need to enable HTTPS properly over their entire site. Then your ISP can do nothing more than just prevent the secure connection from being established.

      ...and all forms of proxying.

      Right now, many ISPs use transparent Squid proxies or the like to cache incoming pages. This is enormously beneficial because if someone requests the non-authenticated front page of CNN.com that says it's cacheable for 30 minutes, for example, then there's no reason to make 10,000 other customers to fetch an identical copy from CNN's servers. Note: HTTP headers can include rules like "don't cache this page", or "only give this copy of this page to the customer who presents a certain session cookie" so that even authenticated users can benefit from the caching.

      Anyway, HTTPS breaks that. Now you have to let those 10,000 customers request their own identical copy from CNN. This means you have to pay for much more bandwidth and that site will "feel" slower to your customers who will blame you for it. I use HTTPS lots for my own site (I never check my webmail without it), but there are definite technical advantages to good ol' cleartext port 80.

      --
      Dewey, what part of this looks like authorities should be involved?
    4. Re:Web sites need to enable HTTPS properly by Anonymous Coward · · Score: 0

      The best solution might be to define a protocol for digital signatures of HTTP content without requiring all of the overhead of HTTPS. This would allow others to read the traffic but not modify it.

      This could be done in a transparent way by, for example, having the server put the digital signature in the header. You could even embed it in an HTML comment at the very end of the document.

      Measures would have to be taken to ensure that the signature couldn't be stripped. One way to do this would be to have the initial connection go through HTTPS which securely informs the browser about which sections of the site will be signed. Then if the browser gets no signature, or gets a signature which doesn't verify against the content, it knows that something has altered the traffic. This would all play well with caching proxies since the initial callup would be cheap and could be good for a long period of time, and all of the signed pages could be cached without destroying the signature, and indeed without the cache even having to know about the signature protocol at all.

      Anyone feel like writing a Firefox extension?

    5. Re:Web sites need to enable HTTPS properly by Anonymous Coward · · Score: 0

      You have to be able to issue arbitrary CA certificates in order to MiM SSL without creating a certificate failure. In a corporate environment that's easy enough, as you can install new, trusted certificate authorities (there are many non-snooping uses for such a feature, such as securing access to your internal servers without buying from public CAs, or even the common case for snooping -- compliance monitoring/enforcement) in the managed environment.

      But your ISP probably isn't in a position to install a new CA on your system. Even if they did it would be trivial to disable it (it would require knowledge of the problem, but it's easy to do, even without being a computer wizard). Otherwise every site you visit would have a bad certificate, because it would be signed by some unknown CA -- the one your ISP is using to snoop. People might click through anyway, but IE 7 has an outright hissy fit when you certificate is invalid; I think this would be harder to pull off than you suspect.

      If it is happening though, there are other worrying consequences. For one thing, you've taken control and knowledge of the remote host's certificate away from the client. The MiM can either issue every secure site a "valid" certificate from the client standpoint, or deny access to any sites that the MiM itself cannot verify -- there is no way to install a CA certificate on a single host inside the snooped network. If it does the former you've lost all protection against other MiM attacks. If it does the later you can no longer connect to hosts with self-signed certificates, or even to alternate host names for hosts with otherwise valid certificates (which I know is bad practice, but is not entirely uncommon).

    6. Re:Web sites need to enable HTTPS properly by Skapare · · Score: 1

      You still have to do the key exchange and authentication, though, so all you save is the low level encryption of the content stream beyond the checksum. For large content, that might be a big gain. For small content, though, it's not that much of a gain.

      --
      now we need to go OSS in diesel cars
    7. Re:Web sites need to enable HTTPS properly by Anonymous Coward · · Score: 0

      No you don't, not in the quantities you seem to assume. The first time you connect to the site, you get its public key along with signing information from the certificate authority which tells you that the key is legitimate and wasn't subject to a man-in-the-middle attack, and then you can use that public key to verify as many pages as you wish until it expires. So in the normal case you would have to do this maybe once a year, hardly a big deal.

  42. Well I have a thing or two to say about that by CrazyJim1 · · Score: 4, Funny

    As much as I don't like Canada, the totally awesome Rogers ISP is not doing something wrong here. Thats all I have to say. PS, buy a Playstation 3 at 20% off by mentioning the code ROGERS ISP ROCKS at your local S-mart

    1. Re:Well I have a thing or two to say about that by Anonymous Coward · · Score: 0

      Just a moment. I need to get my boomstick.

  43. ISPs are no longer common carriers by kungfujesus · · Score: 1

    Supreme court ruled that broadband ISPs are "Information Services" and can selectively block traffic as they please. However, wouldn't altering the contents of data flowing over their networks, or forging RST packets ala Comcast leave rogers/comcast liable for committing fraud?

  44. If there is anything this should show is..... by 3seas · · Score: 1

    that this isp is not very concerned with privacy of its clients.

    Say you have a friend over or someone you don't know using your open wireless, now all of the sudden there is this message they see giving them information about you.
    I honestly cannot believe they haven't considered this possibility. If they haven I highly recommend that if you are a customer you need to change isps right away.

    This also should show that ISPs can indeed spy on you and your web surfing and sell that information about you or leak it out or have it stolen, etc...

    I found out that bellsouth/at&t can even see my passwords that should by default have been encrypted to where they cannot see it.

    at any rate, all of this rises the question of how much traffic would you really get if all this ability to manipulate, censor, inject, extract, etc... your web site data?

    1. Re:If there is anything this should show is..... by rmerry72 · · Score: 1

      I honestly cannot believe they haven't considered this possibility.

      They did consider this possibility. They considered it unimportant and not their problem. They considered their bottom line more important. They considered their customers are too ignorant to care or too impotent to be able to do anything about it. They considered right.

      --
      We do not inherit the Earth from our parents. We borrow it from our children.
  45. hi-speed internet by z-j-y · · Score: 1


    Important Information about your Rogers Yahoo! Hi-Speed Internet account!

    Our records show that you\'ve reached at least 75% of the 75 gigabytes (GB) per month limit provided with your Rogers Yahoo! Hi-Speed Extreme service.

    Additional usage above this limit is charged at $1.50 per GB, to a maximum of $50.00 per month.

    To learn how to monitor and manage your online usage visit www.rogers.com

    You can upgrade to another level of service which provides higher usage limits and speeds by visiting rogers.com.

    Click here to acknowledge receipt of this message.
    lick here if you don\'t want to receive this message in the future.

  46. Re:SLASHDOT SUX0RZ by compro01 · · Score: 1

    i wouldn't put it past them to do that.

    --
    upon the advice of my lawyer, i have no sig at this time
  47. An idea that Google should consider by kauos · · Score: 1, Interesting

    I know everybody's getting mad about how Roger's dare modify their sacred html :) But lets face it, the Google homepage is a fantastic place to put such notices. It wouldn't be a terrible idea for Google to create Google ISP, an API that allows ISP's to communicate with their customer's more effectively about the current status of their internet accounts. Maybe making it a plugin to iGoogle would make it less offensive to people.

  48. I thought Rogers didn't have a limit? by crivens · · Score: 1

    I thought Rogers didn't have a limit? Maybe they could just send you an email rather than hijacking your data.

  49. RIAA experiment by xixax · · Score: 1

    Not at all, Rogers is showcasing the RIAA approved Newspeak compliant Web 3.0.

    If the Interweb detects that you are doing anything that contravenes rules in their massive filtering database that pulls rule feeds from all the *AAs, your content is progressively re-written as your packet traverses the rule set. Your elected officials can use "Putin" statements to apply regexes to any controversial issues where you may be in danger of being mis-informed.

    By 2010, all Interweb traffic will be filtered by these rulesets so all content looks like a cross between MySpace and I Can Have Cheeseburger.

    --
    "Everything is adjustable, provided you have the right tools"
  50. How do they make it look so nice? by IL-CSIXTY4 · · Score: 1

    I wonder how they're styling that fancy little box up there. As a web developer, I worry they might introduce an element with the same ID as something I'm trying to access with Javascript, or maybe they're introducing CSS classes into the page.

    Of course, I also wonder if I could add #rogersbox { display: none; } to my own CSS.

    1. Re:How do they make it look so nice? by shiningdays · · Score: 0
      there was a link to the javascript & associated CSS in the weblog entry: http://lauren.vortex.com/isns-code.txt

      it appears they're inserting it into the page.

      My question is: what happens when you insert this happy little 'message' and its CSS into a page with more intensive style-sheeting? php? Google's a fine example because it's so blank, but somehwere along the line, this is going to break some webdesigner's coding.

    2. Re:How do they make it look so nice? by IL-CSIXTY4 · · Score: 1

      It looks like they're loading the page you wanted to visit inside an iframe, so CSS & Javascript probably aren't going to be issues.

  51. trying new things by erbbysam · · Score: 1

    but says they are merely "trying different things [to see what we can get away with]" and testing customer response.
  52. The Future Rogers Experience by sugarbyte · · Score: 1

    I suppose it's only a matter of time before my Internet browsing is viewed through a ad littered Rogers web-portal. I can't say I'm impressed. If this "feature" is rolled out in Q2 as planned, I will very quickly be canceling all of my Rogers services.

  53. What if... by webax · · Score: 1

    A lot of people are complaining that it's misuse of a service that they're paying for. Aside from the ethical question of editing someone else's incoming data, how many people would be ok with ISP inserted adds it if it meant FREE high speed internet? What if it went even further and ISPs competed to PAY you to use their service and view their adds? This goes back to the 'free pc' days when companies would give you a free PC with adds always displayed around the edge of the monitor. Providing hardware is a little too easy to hack, inserting into html is much more reliable. I don't personally agree with any of it, but it might be the way things are heading.

    1. Re:What if... by myz24 · · Score: 1

      Depends on if you mean even more ads or replacing ads on the page. Even more ads is fine by me, adblock plus to the rescue, but if I were an advertiser and I knew and ISP was replacing my ads with theirs, that's just wrong.

  54. Ideal versus Real by scott_karana · · Score: 1

    Ideally, I suppose, there would be a network of trust, using encryption and signature algorithms to guaranee delivery, and users would simply boycott ISPs who did subversive shit.
    Realistically, ad insertion will become completely commonplace, only nominally regulated, and internally endorsed by various US governmental functions.

  55. Wait, what??!? by Duncan+Blackthorne · · Score: 1

    Bastards. I hope they get the crap sued out of them by ALL the owners of the web pages they're (in essence) altering the content of.

  56. pcapdiff is your new friend by schwaang · · Score: 3, Informative

    After the Comcast bittorrent interference, the Electronic Freedom Foundation released a tool called pcapdiff. The idea is you capture what your ISP sends you for a given website using wireshark/tcpdump and compare it to what your friend gets for the same site. Pcapdiff diffs the two pcap files and reports discrepencies.

    On Fedora you can do "yum install pcapdiff".

    It's an early release, but there's bound to be a lot more uses for pcapdiff ahead...

    1. Re:pcapdiff is your new friend by Seumas · · Score: 1

      It'd be cool if there was some online web database you could submit your captures to so you could compare them to other people.

      You know . . . for those of us without any friends. :D

  57. Copyright infringement by starfishsystems · · Score: 4, Informative
    Copyright infringement, I like it.

    Even better, the CBC article concludes with a reference to the Telecommunications Act, which states that "a Canadian carrier shall not control the content or influence the meaning or purpose of telecommunications carried by it for the public."

    Rogers has a long history of playing as dirty as it can get away with. If the old pattern repeats as before, Canadian regulators will respond and Rogers will be forced to back down, leaving everyone -- regulators, investors, competitors, consumers -- slightly more pissed off with it than before.

    --
    Parity: What to do when the weekend comes.
    1. Re:Copyright infringement by Actually,+I+do+RTFA · · Score: 1

      Regulators will respond and Rogers will be forced to back down, leaving everyone -- regulators, investors, competitors, consumers -- slightly more pissed off with it than before.

      No, that's not the way it works. Rogers will make a large donation to the Republican and the Democratic party, thus insuring it access to whomever wins, and the politicians will put pressure on the regulators...

      ... oh, Candian. Sorry, carry on.

      --
      Your ad here. Ask me how!
    2. Re:Copyright infringement by hauntingthunder · · Score: 1

      interesting so they are puting thier licence at risk not exctly in the shareholders intererest is that :-)

      --
      You will never get to heaven with an Ak 47... But A Zu 30 is good for Low Flying Cherubim
  58. I for one by Anonymous Coward · · Score: 1, Funny

    I for one, wel[Click here for low cost meds]come our conte[Is your member too small? Click here]nt injecting overlords!

  59. hmmm. https://whereveryougo. by CFD339 · · Score: 1

    Seems to me they're just opening the market for secure proxy server services. https to your proxy, and out from there.

    --
    The problem with quotes on the internet, is that nobody bothers to check their veracity. -- Abraham Lincoln
  60. history repeats itself... by computerchimp · · Score: 1

    1) For many years Canadian Cable companies were picking up American TV stations, without payment or permission (stolen content), and inserted their own commercials. This did tick off the Americans. It was a big money maker for Rogers.

    2) Ever watch a televised American or other sporting event on Canadian television? Global TV inserts/superimposes local ads over stadium banners and big tv displays. It really takes away from the feeling of being there; there is no Canadian Tire in Miami people!

    Rogers has poor record when it comes to ethics (I did do 3rd party work for them and I had to repair significant damage their butcher crews did to my driveway), they will do anything for the almighty dollar if they can get away with it. Is there some sort of law for intercepting Internet communications in Canada? Maybe there should be. Whats next? Rogers opens your email and inserts advertisements? Wispering of subliminal messages over their VOIP service?

    Note to Rogers: don't alter the content of the web page that I am broadcasting on the Internet. I do not want to be associated with you in anyway; don't pervert my broadcast!

    CC
    PS: just in case you had not guessed it yet; Rogers communications does not gotten a red cent from me for 5 years and won't for at least another 5. If they keep it up they never will.

    1. Re:history repeats itself... by stefancaunter · · Score: 1

      This is an excellent point. Anyone who sends Ted Rogers $50 a month is getting 'simulcast' where it is legal for them to add their own valuable advertising over certain HBO/A&E US programming. As well, all Canadian channels that own the rights to US stuff get to put their own (same 12) ads over the US feed. But the fact is, that Canadian cable providers think this is acceptable and normal, and they will just extend the practice to web pages. Most of the web is so totally commercialized that I have no doubt that this will become an effective revenue stream for them. They have been doing this for decades with TV. Look at what they have done to the Blue Jays; the poor team is basically a continuous Rogers Cable advertisement. If you want a Jay game, well pay for their Sport Channel. Screw that, I'll listen to the radio; oh, they own that too... Business as usual for Rogers is to promote until you are basically bludgeoned into a stupor. Watch them do this to the web for any chance to promote themselves. They'll get it into their Terms of Service (which is modifiable, and basically a moving target). They'll price in levels of intrusiveness. Just like you can get "The NFL Network" if you really want American advertising, but it costs you extra. The NFL is still unwatchably polluted with ads, but it's the real US feed, for extra money, per month. You want pure internet in a fat pipe? Pay up. Otherwise, internet-lite, with tons of Rogers messages. Who is going to sue them. They are untouchable in Canada. All the major content providers are the major advertisers. They all deal with each other, and don't sue each other for fear of losing accounts. Newspaper websites won't sue Rogers, because they advertise in the paper. The paper writes about the Blue Jays. The Blue Jays have a deal with the paper. Same all over. Probably won't affect users of clever browsers like lynx ;) Probably an opportunity for clever browser designers to detect diffs.

    2. Re:history repeats itself... by hughk · · Score: 1

      Um, someone is paying $$$ for the right to overlay ads to the NFL. Overlay technologyt is very clever now so advertisements may only be inserted where the content provider agrees.

      --
      See my journal, I write things there
    3. Re:history repeats itself... by computerchimp · · Score: 1

      Not sure what the "um" is about:

      No one ever said that Rogers did not pay for permission and got revenue from an advertiser (I don't know the details....maybe they did not pay the provider of the feed). Its just an example of them taking content and replacing it with their own; just like they did with the Google webpage.

      History repeating itself

      cc

  61. Does HTML 5 have a provision for checksums? by ceoyoyo · · Score: 2, Insightful

    Looks like it should. We probably also need a new standard for lightly encrypted pages. Light enough to not put undue strain on the server but heavy enough to make it impractical to modify pages on the fly.

    1. Re:Does HTML 5 have a provision for checksums? by Nasarius · · Score: 1

      The TCP packets have checksums too. It's trivial to recalculate them.

      Something like a PGP signature would work, and would only need to be generated once for a static page. But you'd need a reliable way of transferring public keys.

      --
      LOAD "SIG",8,1
  62. Correct Title... by Belial6 · · Score: 2, Interesting

    ISPs commit copyright violation by delivering unauthorized derivative works.

  63. Redundant story by Brett+Glass · · Score: 0, Redundant

    This story was posted yesterday as "Will ISP Web Content Filtering Continue To Grow?", so this one is redundant and should be removed. It's also a misleading tempest in a teapot. Rogers Cable isn't changing the content of the page; it's inserting a notice above it. A useful and informative one. It should be praised for coming up with an unobtrusive yet reliable way of communicating with users. I'd sure rather get a banner on a page than find my service cut off due to a check that got lost in the mail!

  64. Windows Messenger service by osssmkatz · · Score: 1

    No mechanism for an ISP (read: network provider) to communicate with its clients? There is one. Windows Messenger.. the service, not the program. Admittedly, its only for one operating system, but the idea is to provide an alert that the network admin can send when certain conditions (like bandwidth limits) are reached.

  65. If my ISP did this... by jonwil · · Score: 1

    If my ISP (TPG Internet) did this, I would drop them so fast even if it meant paying more to get the same service with someone else. But my ISP (unlike Rogers) doesn't do this kind of crap.

  66. What really disturbs me.... by jbarr · · Score: 1

    ...is the "Yahoo" ad placed at the top Since when does Yahoo get a free presence on Google pages? I wonder if Google will go after Rogers for doing this.

    --
    My mom always said, "Jim, you're 1 in a million." Given the current population, there are 7000 of me. God help us all!
  67. Extending this paradigm... by Foerstner · · Score: 1

    How would you like it if your cellular carrier did things this way?

    "Hi Bob! Hi, Christine! It's me, Sameer, with AT&T. I hate to drop in like this, but Bob's about to run out of minutes for this month. So you two love birds had better wrap it up, or Bob'll be paying our standard $0.45-per-minute rate!"

    --
    The US free market: two halves of a government-granted duopoly are free to set the market price.
    1. Re:Extending this paradigm... by zakezuke · · Score: 1

      How would you like it if your cellular carrier did things this way? It use to be that way on payphones. The operator would break in and ask for more money. Later this process was automated, I think in the 1980s. You could even ask for operator assistance and break in on someone conversation on a land line.

      --
      There is no sanctuary. There is no sanctuary. SHUT UP! There is no shut up. There is no shut up.
  68. Join the Rogers Fan Club... by chortick · · Score: 2, Informative

    For those outside of Rogers' service area, who have not had the pleasure of experiencing their so-called Customer Service directly, you can do so vicariously at http://www.ihaterogers.ca/.

  69. Use a proxy by skeftomai · · Score: 1

    If you're computer savvy and have a gateway computer or a UNIX-based OS on your router, you could run a proxy like Privoxy and filter this stuff out.

  70. huh by Dr_SimonCPU · · Score: 1

    What the fuck? Won't this disrupt the functionality of existing sites? What if an application needs to parse the data returned, such as a REST-based Flash app? Trying different things my ass.

  71. Making money of other peoples content by Dan541 · · Score: 1

    I Dont put adverts on my site because I dont want them on my site I like the fact that my users dont have to see ads when they visit.

    So the customer pays for their connection/bandwith the website owner pays for their server/bandwith and the isp makes money of the site owners content without consent.

    Is this legal? sounds like a grey area to me.

    What if my users/customers pay me for premium access that has "No ads" what then do I look like to the user when ads are displayed after I tell them ads wont be displayed?

    Isnt this deframation?

    ~Dan

    --
    An SQL query goes to a bar, walks up to a table and asks, "Mind if I join you?"
  72. Title is wrong; what else is wrong? by gvc · · Score: 2, Insightful

    Rogers are clearly not inserting content into users' web pages, as the title claims. They are inserting content into pages viewed by users.

    So I have little faith in the claim that they are "intercepting http." What is more likely is that the default proxy server they provide is inserting the content. While it may make little difference to the average user, as the "normal" setup uses the proxy, it seems to me that there's a huge difference between supplying a proxy and intercepting and manipulating http traffic; that is, hijacking TCP port 80. The proxy I can easily avoid by using a direct connection to the internet; TCP hijacking, I can't.

    1. Re:Title is wrong; what else is wrong? by yuna49 · · Score: 2, Insightful

      Many ISPs "hijack" outbound port 80 connections and transparently proxy them. I'm not sure how you think you'd avoid this proxy unless you yourself are using a proxy that listens on some port other than 80 and is located on a network outside your ISP's.

      I routinely configure office networks to do this with iptables+squid. It gives their administrators a log of requests in case they need to check up on what sites their employees have visited. It also enables us to add some security features to the network that apply automatically to all users, for instance, blocking downloads of .exe files.

  73. I'm not a rodger's customer, but... by DragonTHC · · Score: 1

    stay the fuck off my http stream. Injecting something else is Illegal in the U.S. It's a violation of the computer fraud and abuse act.

    --
    They're using their grammar skills there.
  74. I'd like to try something different... by okmijnuhb · · Score: 1

    ...and punch them in the face...
    Or maybe better, try a different ISP.

  75. Packet errors are checksum offloading by ZeekWatson · · Score: 1
    Wireshark will report checksum errors with any NIC that does checksum offloading.

    Read up on it here: http://www.wireshark.org/docs/wsug_html_chunked/ChAdvChecksums.html

    Checksum offloading often causes confusion as the network packets to be transmitted are handed over to Wireshark before the checksums are actually calculated. Wireshark gets these "empty" checksums and displays them as invalid, even though the packets will contain valid checksums when they leave the network hardware later.
  76. Rogers has a history, and I have unresolved anger. by Fantastic+Lad · · Score: 3, Informative
    Ted Rogers is like a mini-Gates of the Toronto region.

    "The little cable company that could." They practically invented negative billing, starting their reign of aggravating barely-legal business practice as far back as the early 80's with the stupid bundling of the new pay-channels. They successfully lobbied to crack open the Bell monopoly so that they could compete on the phone market. Everybody believed their bullshit campaign and as a result, everybody pays many times more for phone service which has fallen from one which was affordable and which worked hard-core in favor of the consumer, (if Bell tried to screw you around, a quick call to the CRTC, and they'd be nodding yes-sir to you. Monopolies are great in this way because the public can very easily punish them through government pressure to do the right thing if they start getting greedy and evil), --phone service through bell and all the competitors has since devolved into a system which is now expensive, punitive, crappy and generally mean-spirited, (all contrary to the whole 'competition breeds excellence' meme which should be obvious for the falsehood that it is to anybody with a brain but which somehow remains an elusive truth; I blame the same American ideological propaganda which has landed us in Iraq and which is responsible for rolling black-outs and for people whose lives suck because they can't afford medical insurance. Thanks, guys! Keep on championing the lie while you take it in the rear.) (Ahem. Did I say all of that out loud? DO pardon me.)

    Anyway. . .

    Rogers argued that it had the right to use Bell's cable system because it had been built in part with public money, and then they turned around and refused to share its own cable system because they claim to have made it with private money. --All claims which are so riddled with lawyer-logic as to make anybody aware of the situation hopping mad, especially when one considers the huge tax-breaks and government hand-outs Rogers managed to weasel away with; they use the publicly-funded telephone pole system, on public land, to hang its infrastructure, over-charge for their rotten service, don't share and don't pay their taxes. Nice job! --The whole thing reeks, but they got away with it because the public was asleep and easily fooled by promises that, "With competition, your phone bills will go down!" Stupid, stupid Torontonians! Even as a teenager I could see the way the wind was blowing, and yet today few even grasp that they've been screwed. Sigh.

    Rogers is one of those companies which has been sneaky and crafty and generally foul from the get-go. This latest move is entire par for their course. I don't own a television and I don't use a cell phone partly because of players like Rogers. Anybody ignorant enough to sign up with Rogers deserves exactly what they get.


    -FL

  77. anybody got any word on Shaw? by big_paul76 · · Score: 1

    Because I recently started using uTorrent instead of just the straight-up bt client.

    Now I notice that I see a dramatic drop in my connection speed (speedtest.net) when it's running. Without uTorrent (or any other BT client) my connection speed drops from 6000k down/500 up to more like 900k down and 300k up.

    I have yet to get a straight answer out of tech support.

    --
    The plural form of "anecdote" is "anecdotes", not "evidence".
    1. Re:anybody got any word on Shaw? by snowraver1 · · Score: 1

      I think that what you are experencing is directly related to your torrent traffic. Both byself, and a buddy of mine, who are avid downloaders, have this same issue. I am 99.9% sure that the issue with slugish performance is no fault of Shaw's.

      There are some things that you may be able to do to improve your performance while downloading torrents.

      1. Download at night, when you are not using the connection actively
      2. Make sure that your router has the latest firmware version
      3. If you router supports QoS, configure it so that your BT has low QoS and your important apps have high (VoIP, Games, ETC)
      4. Limit the max upload speed to something smaller then your theroetical max for your connection. (A good setting for a 1Mbps upload with shaw is 110K when internet is not being used for anything else, and 35-65K when it is).

      Whith the above config, my internet runs smoothly while downloading, VoIP has good quality, and games have little latency. As a side note, my buddy has a linksys 4 port wireless router/AP (WRT54G?) which seems to need resetting quite often with bittorrent. My router (4 port linksys with no wireless and VPN tunnel capibility, works better. I haven't rebooted the router since configruing it 1 year ago, after the previous router blew a cap.

      --
      Copyright 2010. All rights reserved. This comment may not be copied in any way including, but not limited to caching.
    2. Re:anybody got any word on Shaw? by big_paul76 · · Score: 1

      I think you're right, a little googling took me to some forums, I changed some settings, made a huge difference, and it doesn't appear to have slowed down the speed my torrents download at.

      Shaw tech support claims that they don't do any sort of throttling, maybe I should ask them if they'll put it in writing...

      --
      The plural form of "anecdote" is "anecdotes", not "evidence".
    3. Re:anybody got any word on Shaw? by snowraver1 · · Score: 1

      Shaw tech support claims that they don't do any sort of throttling, maybe I should ask them if they'll put it in writing...

      Don't bother, they won't.
      --
      Copyright 2010. All rights reserved. This comment may not be copied in any way including, but not limited to caching.
    4. Re:anybody got any word on Shaw? by big_paul76 · · Score: 1

      Yeah, of course not. If they put it in writing, then they wouldn't be able to change their mind whenever they like in the future.

      Yeesh... Maybe it's time to regulate these weasels. In the spirit of "the market for lemons"
      http://en.wikipedia.org/wiki/The_Market_for_Lemons

      If you have a situation where potential buyers can't tell the difference between crap and good stuff, eventually the only thing left for sale is crap. For example, pharmaceuticals. Before the FDA and it's equivalent in other countries, you had no end of snake-oil salesmen with patent medicines etc. Seems like a lot of stuff in IT looks very similar.

      --
      The plural form of "anecdote" is "anecdotes", not "evidence".
  78. This would have been a lot better... by Minwee · · Score: 1

    ...if only they had a little bit more class with how they modified the HTTP data.

  79. If you can stick two Wiis in your mayo jar... by patio11 · · Score: 2, Funny

    ... your jar is probably a little too big. And you're a vicious bastard -- do you have any idea how hard I'm looking to find one for retail price right now, to say nothing of two?

    1. Re:If you can stick two Wiis in your mayo jar... by Anonymous Coward · · Score: 0

      Try Costco to find one that'll fit a Wii. Or, in your case, the local gas station convenience store.

  80. Oh good... by MrGHemp · · Score: 1

    Oh good... I hate it when I visit a website that doesn't have banner ads and popups. Maybe this ISP will fix that, after all it's what the customers what!

  81. Re:Rogers has a history, and I have unresolved ang by Fantastic+Lad · · Score: 1
    I was pondering my previous post and realized that it went against my recent decision examine issues more thoroughly rather than fall into the trap of dirty snowball fights which do nothing but divide. When this settled into my head, I stumbled upon an insight. Maybe this is old news to people, but it struck me as useful so I thought I'd update my previous post. It's about the whole oft-argued competition thing which I've seen beaten to death but never fully resolved to anybody's satisfaction. . .

    The argument is that competition is a good thing because it breeds excellence. My knee-jerk reaction is that, Passion breeds excellence, whereas Competition breeds fear.

    --And that Fear can certainly be a great motivator if you happen to be Darth Vader. (yadda yadda yadda)

    But of course, that's only half the story; it's a little more complicated than that. . .

    Companies like Google and Mozilla didn't come from a desire to grab everybody's money. They came from a desire to do something cool because that was the exciting thing to do. And they did so in the competitive spirit; the question being asked was, "Can we do something better than the last thing which was done?" --There is competition against existing standards. Healthy competition arguably led to NASA putting men on the Moon. That's human drive at its most positive, and it's exciting. It's passion. Competing against the blank page to create something, or competing against others to see who can make the coolest advances; it's a form of measurement.

    But competition, like most ideas, also has a dark side; the dark side of competition is greed and the desire to make others fail. --The seductive belief is that it is cheaper to make your competitor fail than it is to achieve great heights yourself. --Or to ride roughshod over people's perceptions to the point where they simply accept poor standards and high prices as normal. Greed-based competition is hopelessly linked to all other greed-based behaviors which ultimately to slavery and total control over the entire world, to make everything serve your ends to feed your greed. --To get as much as you possibly can for as little effort as possible. This is the end goal of greed, and it is a highly destructive competition against everything which isn't you. Make it pay. Make it bleed. Only give something back until you don't have to. In the dark-side mind, this is 'Winning'.

    A healthy competition is a completely different thing; it should see tennis players shaking hands at the end of a match. --Or the seasoned figure skater rushing to help the two younger ones who collided on the ice during training.

    There rarely seems to be any attempt to distinguish between the two approaches in the business world, and therein lies the problem. As they say, the Devil lies in the details. --It usually does when it comes to culture-shaping concepts. So when politicians sell off public properties because they support 'competition' I think it's a good idea to ask, "Yeah, but what kind of competition? Is it serving them or us?

    I should mention that I do draw a distinction between those two groups. Humans v.s. Psychopaths.


    -FL

  82. RIP by Anonymous Coward · · Score: 0

    If the big wigs can make a buck off of something, even if it causes an inconvenience to their customers, they're going to do it.

    RIP Internet Tubularski (????-2007)

  83. Old news by sgunhouse · · Score: 1

    They've been inserting ads in Google and Yahoo search pages for years. Yes, I mean their own ads. At the My Opera forums we've had users telling us about it for 3-4 years now.

  84. Don't worry. by Anonymous Coward · · Score: 0

    Babies aren't a problem with the hole that Rogers is "experimenting" with.

  85. UMTS by Arancaytar · · Score: 3, Interesting

    O2 in Germany has been doing this for UMTS connections for a long time. They've figured that stripping whitespace and artificially compressing images before transmission will save bandwidth.

    Unfortunately, their white-space stripper breaks XML-wellformedness, which makes me unable to view any of my own sites with Firefox (unless I disable application/xhtml+xml as an Accepted content type).

    1. Re:UMTS by dkf · · Score: 1

      Unfortunately, [O2 Deutschland's UMTS] white-space stripper breaks XML-wellformedness, which makes me unable to view any of my own sites with Firefox (unless I disable application/xhtml+xml as an Accepted content type). How the heck did they manage to break well-formedness? The only thing I can think of offhand is if they were somehow removing separator spaces between attributes, but that'd break normal HTML too (I hope...)
      --
      "Little does he know, but there is no 'I' in 'Idiot'!"
    2. Re:UMTS by Arancaytar · · Score: 1

      Easy: \n and \t are recognized as whitespace in XML documents, but stripped out as superfluous by the filter. If your document contains a tag whose attributes are only separated by linebreaks, but not by trailing spaces, the filter will remove essential separator space and break well-formedness.

      I have since realized that this can be fixed by adding normal spaces to my document, which I will get around to eventually. Still, it's a goof by the filter, as the characters it removes can be essential for the XML document.

  86. Mobile ISPs do this all the time by cardpuncher · · Score: 1

    Most of the mobile (phone) ISPs do this routinely in the UK - they proxy HTTP connections, compress images and insert Javascript into the web pages which detect some key combination to restore the original page contents. You could perhaps understand this for GPRS, but the same applies to 3G and HSDPA: the ISP's caching proxy diligently compresses a bunch of JPEGs and modifies your web pages just so you can have a worse user experience on your 3.6MBit/sec connection...

  87. Which Supreme Court? by SpeedyDX · · Score: 1

    The only case I could find with a quick Google search in Canada was Society of Composers, Authors and Music Publishers of Canada v. Canadian Assn. of Internet Providers, [2004] 2 S.C.R. 427, 2004 SCC 45 .

    Glancing over the case briefly, the Supreme Court of Canada reached a conclusion that ISPs act merely as a "conduit" (which is the word specifically used in the decision), and should therefore not be liable for anything that happens over their networks (unless the content is hosted on their networks, and they explicitly reject to do anything about the contested content). They can only act as a "conduit" and enjoy a "don't shoot the messenger" protection if the "participation is content neutral", meaning it doesn't do anything with the content other than communicating it. ISPs can only claim exemption from liability if they act merely as conduits. The moment they tamper with the content, they stop being a "conduit". Once they have some control over the content, it COULD be argued that whenever copyright infringement occurs over their networks, they should be able to stop it.

    Which is what makes this move by Rogers TOTALLY bizarre. Since Rogers is now modifying the content of web sites, they can no longer, it can be implied from this case, claim exemption from liability of copyright infringement. I don't think they consulted with their legal department before rolling these "features" out. The CRIA should jump on this opportunity to quickly sue Rogers and cite this case.

    1. Re:Which Supreme Court? by Brett+Glass · · Score: 1

      Rogers didn't edit the content. In fact, no sapient being was involved -- which would be a prerequisite for that. The proxy merely put a banner above the unaltered content. That's not editing, and so it falls outside the scope of Compuserve and similar cases.

  88. Re:hmmm. https://whereveryougo. by Fizzl · · Score: 1

    Damn man.
    Your sig is disturbing and so wrong on so many levels, it makes the holy matrimony of goatseman and tubgirlgirl look sacred.

  89. THIS IS NOT COPYRIGHT INFRINGEMENT !!! by Anonymous Coward · · Score: 0

    In fact what they are doing is probably copyright infringement: they are creating and distributing a derived work the modified page without the author s permission.
    They serve a page which contains the original page embedded in a frame, unchanged. If using frames is copyright infringement, the whole internet is guilty. They may change some HTTP headers but I doubt that can be copyrighted.

    http://www.perftech.com/Press/PT_position.html

    So you're saying that this Google search results page is copyright infringement?

    http://video.google.com/videoplay?docid=672990256941061139&q=site%3Amyspace.com

    Stupid kneejerk slashbot paranoia.
    1. Re:THIS IS NOT COPYRIGHT INFRINGEMENT !!! by toriver · · Score: 1

      Since frames is a fucked-up technology that breaks navigation, breaks bookmarking, breaks printing - basically, it ruins the page - the page IS changed!

    2. Re:THIS IS NOT COPYRIGHT INFRINGEMENT !!! by RedWizzard · · Score: 1

      They serve a page which contains the original page embedded in a frame, unchanged. If using frames is copyright infringement, the whole internet is guilty. They may change some HTTP headers but I doubt that can be copyrighted. If it's done with frames then I agree it's unlikely to be considered copyright infringement. I didn't RTFA, but this is Slashdot - what did you expect?
  90. Strictly speaking, copyright infringement by Anonymous Coward · · Score: 0

    They've made a derivative work of what Google sent (with their agreements, they can do this and, as shown with directories, databases and maps, the collection of facts can be copyrighted separately from the facts themselves).

    This is copyright infringement.

    And this could see the corporation spending time behind bars.

  91. Rogers Is One Of the Worst. by Anonymous Coward · · Score: 0

    In case you are not Canadian and therefore you have no idea, !@#$%^&* Rogers is one of the worst ISPs in Canada. I used to use them for about a year until I can't stand them anymore (many reasons such as outage, service, congestion etc.).

  92. Like TV. First the logo, now all sorts of ads of by Anonymous Coward · · Score: 0

    Like TV. First the logo, barely noticeable as in dim and small (still annoying when you see it), now very noticeable and often with all sorts of ads of shows you just gotta watch.

  93. Ugh! by jav1231 · · Score: 1

    This is what happens when there's little choice in providers. Can we all agree Rogers is inherently evil? Between traffic monitoring and now this!?

    1. Re:Ugh! by lluBdeR · · Score: 1

      Seriously? Are you in the same Canada I am?
      These days it seems I can't open my mailbox, read a paper or walk down a street without seeing an ad for a DSL provider.
      Granted DSL is generally slower than cable, but I quite enjoy my unlimited transfers and next-to-nothing-per-year static IP.

  94. user permission and alternatives by Midnight+Thunder · · Score: 1

    Let's get rational for a second here; the ISP is trying to inform you you're reaching your limit, so you don't overshoot it and start having to pay extra.

    This I don't object to. What I object to is that they are doing it without the permission of the user. In fact some companies already do this by putting the content within an inner frame, to indicate they are surfing an external site - annoying as heck, but they do it, and no it does not make it any more right. Alternative options would be:
        - A widget that the user can put on their desktop (think Yahoo Widgets or Dashboard)
        - A pop-up indicator - using something like Growl on the Mac
        - An e-mail
        - A Firefox or IE add-on

    Whichever way the user should decide how they want to get notified when they exceed their limit.

    --
    Jumpstart the tartan drive.
  95. Sue them by dindi · · Score: 1

    1. Make a page with google ads, overture (yahoo) ads, and who knows what
    -make the page for topics that have the highest paying keywords

    2. BUY ads from google. A lot of it, and other sources (sources with invoice. not link farms and spam).
    Target the audience of this ISP's

    3. set up proper monitoring : awstats and multiple counters.

    4. Wait and see.

    5. Look at your losses from google, compare clicks from given ISP.

    6. Sue ISP for damages to your business and stealing your revenue

    These things just make me mad. What the hell do you think they are doing inserting content into someone's pages?

  96. Phone company already does this by brunes69 · · Score: 1

    If you RTFA, you will see the notice they're sticking up there is that the user is approaching his monthly bandwidth limit and if he reaches it he will be billed additionally.

    Phone companies have already done this for years with long distance calls from payphones. "".

    1. Re:Phone company already does this by ScrewMaster · · Score: 1

      True ... but how long do you think it will before other things, things much less useful to the customer, begin showing up there instead?

      Personally, I'd say that if the information they need to present is so damned important, it would be better to just do a redirect to another page (like Comcast does if you don't pay your bill) as opposed to modifying content on the fly. That would be more akin to a television show being interrupted for an important public service announcement. Modifying the HTML is like a TV show where the local station overlays graphics and text over the program you're watching in order to advertise products or other shows. That irritates the hell out of me, especially when it's on a cable channel that I happen to be paying for.

      --
      The higher the technology, the sharper that two-edged sword.
    2. Re:Phone company already does this by Brett+Glass · · Score: 1
      how long do you think it will before other things, things much less useful to the customer, begin showing up there instead?

      Never. No ISP in its right mind would overuse this feature. It would annoy and drive away users, or they'd just dismiss the message without looking at it. Our ISP would use it only for billing matters or notices informing users when we'd be taking portions of the network down for maintenance.

    3. Re:Phone company already does this by ScrewMaster · · Score: 1

      Then you don't have Comcast or SBC ... believe me, they will not be able to resist the advertising dollars (which can more than offset the loss of some customers), and because such ads would be ISP-generated and pretty much unavoidable for most people, they'd be worth a hell of a lot more money than just another click-through. Annoying and driving away users has no meaning in a situation where users need the service (lame as it might be), and have few if any alternatives. Hell, if annoying users was such a big deal why hasn't cable TV cleaned up its act? The answer is: they don't have to care because we have little choice in the matter, and they make plenty of money from advertisers. That should be considered some kind of a conflict of interest, really.

      --
      The higher the technology, the sharper that two-edged sword.
    4. Re:Phone company already does this by Brett+Glass · · Score: 1

      Hey -- if our competition wants to go overboard and slather Web pages with ads, I say that's great! Please, let them do it! It'd be promoting us as competition. Our ISP will get their customers in a heartbeat. And we'll only use this technique to send occasional messages that are of interest to our users.

    5. Re:Phone company already does this by ScrewMaster · · Score: 1

      Who decides what's of interest? Unless you give me a Web page where I can select the specific messages I'm interested in, there will be problems.

      Anyway, you'd be right, in a truly competitive environment ... but there are millions upon millions of users subject to a single drain-bamaged ISP with no hope of ever switching. Those are the people that will get shafted by techniques like this. It's power, and it means more money, and it's just too tempting. People like me who are fortunate enough to live in a broadband-competitive area could jump to another provider (unless they all start doing it, that's what worries me about this sort of abuse.)

      Remember how cable TV was advertised as the commercial free alternative to broadcast television? Well, it was ... but that didn't last long once advertisers started waving big money under cable programmers collective noses. You have to understand, these guys want revenue, and they'll run the numbers and decide how many customers they can afford to lose and still make a profit by shoving ads down our throats.

      --
      The higher the technology, the sharper that two-edged sword.
    6. Re:Phone company already does this by Brett+Glass · · Score: 1
      Who decides what's of interest?

      We do. There's no way to enumerate everything. But in general, we'd only use it for billing matters, notices of downtime, and similar administrative issues. If users didn't like it, I'm sure we'd hear about it.

      Anyway, you'd be right, in a truly competitive environment ... but there are millions upon millions of users subject to a single drain-bamaged ISP with no hope of ever switching.

      We are in a very rural area, and even here we have competition. Even users who are in an area reached by nothing but satellites have multiple satellite providers to choose from. Methinks you're being needlessly excited by Lauren's alarmist, one-sided propaganda.

  97. ISP now liable for any content problem by peter303 · · Score: 1

    ISP will lose its "fair trade" carrier immunity if its becomes responsible for any content. This could include sexual or ecopnomic crimes, which are big InterNet issues of police lists.

  98. Standard Canadian TV procedure, why not web? by falstaff · · Score: 1

    What Rogers is attempting with web traffic is standard procedure with their television traffic. They pick up US network feeds, strip out the commercials, substitute their own commercials for a fee, and forward the new stream to Canadian consumers. This is all normal and sanctioned by the CRTC, Canada's broadcast police, and Canadian Law. Go figure.
    So they must think, "Why not do the same with Web traffic?"

  99. This has nothing to do with "network neutrality." by Brett+Glass · · Score: 1
    Network neutrality means not using one's control of the pipe to disadvantage competitive content or service providers. For example, if you're a cable company that offers VoIP, network neutrality means not blocking customers' use of other VoIP providers.

    Network neutrality does not mean that a provider can't "frame" pages (as do many providers -- especially those like Juno which provide inexpensive or free service) or send them informative messages via their browser.

    Let's step back and take a dispassionate look at what Rogers is really doing here. They need to get a message to a customer. Like any experienced ISP, they know that there's a good chance that e-mail won't be read in a timely way, if at all. (We, as an ISP, find that our customers constantly change their addresses -- often after revealing them online and exposing them to spammers -- without any notice, and often let the mailboxes that we give them fill up, unread, until they exceed their quotas and no more can be received.) The Windows Message Service once worked to send users messages, but only ran on Windows and is now routinely blocked because it's become an avenue for pop-up spam. Snail mail? Expensive and slow... and the whole point of the Internet is to do things faster and more efficiently than that. Display a different page than the user requested? Perhaps, but that certainly comes much closer to "hijacking" than what Rogers is doing. Display a message in the user's browser window (where we know he or she is looking) along with the Web page, and let the user "dismiss" it as soon as it's noticed? Excellent idea. A wonderful, simple, unobtrusive, and (IMHO) elegant solution to the problem.

    Now comes Lauren Weinstein -- known for drawing attention to himself by sensationalizing tempests in a teapot -- who has never run an ISP but seems to like to dictate what they do. Lauren claims that the sky will fall if ISPs use this nearly ideal way of communicating with their customers.

    Contrary to the claims of Mr. Weinstein's "network neutrality squad" (who have expanded the definition of "network neutrality" to mean "ISPs not doing any thing which we, as unappointed regulators, do not approve"), this means of communication does not violate copyrights. Why? First of all, the message from the ISP appears entirely above, and separate from, the content of the page in the browser window. It's not much different that displaying it in a different pane (which, by the way, the browser might also be able to do -- but this is better because it's less obtrusive and unlikely to fail for the lack of Javascript or distort the page below). The display can't be considered a derivative work, because no human is adding his own creative expression to someone else's creation. A machine -- which can't create copyrighted works or derivative ones -- is simply putting a message above the page in the same browser window.

    It isn't defacement, because the original page appears exactly as it was intended -- just farther down in the window. And it isn't "hijacking," because the user is still getting the page he or she requested.

    What's more, there's no way that it can be said to be "non-neutral." The proxy which inserts the message into the window doesn't know or care what content lies below. The screen capture in Weinstein's blog showed Google, but it just as easily could have been Yahoo!, or Myspace, or Slashdot.

    In short, to complain that this practice is somehow injurious to the author of the original page is akin to an author complaining that his book has been injured by being displayed in a store window along with another book by someone he didn't like. Sorry, sir, but the merchant is allowed to do that unless he's signed a contract with you that forces him not to.

    Nor is what Rogers is doing a violation of an ISP's "common carrier" obligations (even if they were considered to be common carriers, which under US law, at any rate, they are not). Common carriers have been injecting notices in

  100. Re:Dupe by thegrassyknowl · · Score: 1

    I wish I had mod points left and hadn't posted in this thread (erm no matter) because your post is humorous and insightful.

    What is to stop ISPs charging an anti-crapification fee to websites? A big ISP would likely be able to extort the fee out of a number of large companies (microsoft/msn, google, etc) and leave the rest of the smaller sites with their data defaced en-route to their customer.

    --
    I drink to make other people interesting!
  101. Mobile data cards have been doing this for years by cybaea · · Score: 1

    In both the UK and Netherlands at least, if you browse the web using a Vodafone 3G data card or an O2 GPRS connection, the images will be changed to lower-resolution copies (at the original URL!), the full-resolution images will be in a different place, and your web page will have inserted a whole load of JavaScript code that in principle allows you to get from the corrupted -- sorry: optimized -- version to the original. Assuming JavaScript works on your browser and with your settings, and assuming that the hot-keys they are using have not been used for something else on the web page you are browsing.

    Of course the JavaScript code could also sniff out all your credit card numbers and send them to the company, but I had a look and this version does not appear to do that....

    --
    Hi!
  102. Rogers by sonsonifty · · Score: 1

    I am going to call and give them my feedback.

    I am an angry Canadian! Rar!

    "Eh Rogers eh? You hosers hosed my internet connection eh? You guys are real sucks. Puke-breaths. Take off! Gimmie a toasted back bacon, hold the toast."

  103. Re:Dupe by Brian+Gordon · · Score: 1

    Wow, you sir are a genius and I can't belive nobody has thought of that threat before. Hm.

  104. Don't mess with MY stream! by flajann · · Score: 1
    While I can understand and appreciate an ISP's "need" to corrupt and tamper with the stream of data -- whether it be HTML or voice or video or what have you --, I want MY streams of data to be pristene and untampered with as I get them from the Internet.

    The tampering itself can introduce all kinds of problems -- especially since no ISP can possibly account for every variety of HTML sources on the Internet. Different browsers are finicky about how they respond to HTML, so you could wind up breaking some browsers on some content depending on how the injection is done.

    And, of course, I want to know that the data I received is as it really is and was intended from the source. Do they also do "man in the middle attacks" with the https: protocol? This would be especially *bad*.

    If I knew my ISP was dickering around with my streams, I'd set up a proxy/tunnel to bypass it. And I would also hope my ISP would be conscientious enough to inform me in LARGE FRIENDLY LETTERS that he's tampering with my incoming data!!