Slashdot Mirror


Encrypted Traffic No Longer Safe From Throttling

coderrr writes "New research could allow ISPs to selectively block or slow down your encrypted traffic even if they cannot snoop on your transmitted data. Italian researchers have found a way to categorize the type of traffic that is hidden inside an encrypted SSH session to around 90% accuracy. They are achieving this by analyzing packet sizes and inter-packet intervals instead of looking at the content itself. Challenges remain for ISPs to implement this technology, but it's clear that encrypting your traffic inside an SSH session or VPN connection is not a solution to protect net neutrality."

268 comments

  1. Why bother? by Threni · · Score: 2, Insightful

    They could just throttle all encrypted packets for free.

    1. Re:Why bother? by TheLink · · Score: 5, Insightful

      That'll mess up corporate vpn users with clout, and https connections to banks etc.

      Anyway it doesn't take a genius to detect p2p.

      See the user. See the user after 1 hour. See how many bytes up and down. Check how many different IP destinations the user is connected with.

      If they are downloading a lot up and down, and connected to lots of host, chances are they are using P2P. Put them on a watch list. If they are still doing it much later, you put them on a black list where from then on if they are doing something similar you throttle them immediately (you can do it in a way that would in most cases still allow that user's web surfing to work reasonably - since most users don't websurf 20 different sites at the same time AND read those pages at the same time - it doesn't matter if pages come in one by one ).

      If they aren't downloading or uploading much, why throttle? :)

      No need for fancy math. No need for "deep packet inspection" or fancy "Dumb Investors Hand Over Your Money" phrases.

      Then again maybe I should write a "research" paper, mmm $$$$ ;).

      --
    2. Re:Why bother? by NerdyLove · · Score: 1

      Some plugins fetch data from lots of hyperlinks at the same time in order to speed up browsing, IIRC. Odds are it'd be mostly http, but if https was involved, this could throttle them, too.

      It's a really bad idea when the 'innocent' get throttled too. They should err on the side of caution and avoid this.

    3. Re:Why bother? by aplusjimages · · Score: 5, Interesting

      how would this work for gaming online? 16 different IP destinations and I play for hours on in. My understanding of Xbox Live is that it is P2P and if they throttle my Halo 3 game, I'm gonna get pwned even more than normal.

      --
      Can I bum a sig?
    4. Re:Why bother? by Jonny_eh · · Score: 1

      "Check how many different IP destinations the user is connected with."

      Won't help if the user is connected through a VPN tunnel. They'll be talking to one IP.

    5. Re:Why bother? by kabocox · · Score: 1

      (you can do it in a way that would in most cases still allow that user's web surfing to work reasonably - since most users don't websurf 20 different sites at the same time AND read those pages at the same time - it doesn't matter if pages come in one by one ).

      So you must be the one that got my webcomics loading slower in the morning! I use that "open all in tabs" to open up like 20 sites in the morning. This used to take 10-20 seconds for all of them to load. Now it'll take 5 minutes or so.

      Come on sluggy, megatokyo, schlockmercenary, and dominic-deegan should all load instantly! Normally those sites load as fast as google unless their site is down for some reason. Sites on Comic Genesis usually load very quickly as well unless they have site issues. (That'd take half my web comics down right there.)

    6. Re:Why bother? by thePowerOfGrayskull · · Score: 2, Informative

      That'll mess up corporate vpn users with clout, and https connections to banks etc.

      Probably not. In normal circumstances, these connections don't use anywhere near the same raw data transfer volume as one bittorrent with a few dozen connections.

    7. Re:Why bother? by fast+turtle · · Score: 4, Interesting

      My ISP already throttles my connection by price. I've currently got 256/768 as that suits my needs. If they were to start throttling any more of my net access (I'm paying for unlimited at 256/768) I'd have their asses in court in a hurry for false advertising and violation of contract, which I have kept the hard copy of from the day I signed up for service.

      I was one of the first adopters to get broadband when it became available 6 years ago in my area and according to the original contract (have hardcopy on file) they planned offering tierred service with it being a simple change in minimum speeds and thus not requiring a new contract. I also informed them that I'm worse then a squeaky wheel, I'm like a brake that's gone metal to metal since I'm semi-retired and disabled with plenty of time on my hands to pursue things every time they try to change my contract without consent.

      --
      Mod me up/Mod me down: I wont frown as I've no crown
    8. Re:Why bother? by TheLink · · Score: 2, Informative

      So far with most multiplayer online games, one machine is the server and the rest are the clients.

      Go look at the traffic if you don't believe me. I've monitored the traffic on my connection as I play various online games - but not Xbox Live though.

      In theory the server might get throttled affecting the game BUT online game traffic seldom adds up to gigabytes a day - all you are usually sending is "changes in state". In some cases yes game assets do get downloaded - but the clients seldom upload that much back to the server ;). So it'll look like http traffic.

      This is because in practice it is rather hard to have all the game clients as equal peers in deciding on "What is Reality" in the game. It is simpler to have one machine being the final decider on what is reality, and the rest of the machines can only request changes to reality (and be denied - "Sorry you can't shoot - you ran out of bullets 2 seconds ago".

      Having all the machines vote to decide reality will take too much time - imagine the latency and chaos that will occur.

      --
    9. Re:Why bother? by TheLink · · Score: 1

      Well the way I'd do it is you'd get full speed on connections to the first X sites, then when they're done loading you get the next sites and so on. So it shouldn't affect most people's websurfing. My assumption is most people would just read the sites that ge loaded first, rather than wait for all sites to be loaded before starting to read.

      What's happening to you is probably a blanket "throttle all connections of anyone with lots of connections".

      Which of course is easier to implement :).

      --
    10. Re:Why bother? by TheLink · · Score: 1

      Such users will just take longer to put on the blacklist by the heuristics I suggest.

      But basically the ISPs want to reduce traffic, so whether you're talking to one IP or not, if you've uploaded at > 3Mbps and also downloaded at > 3Mbps for hours and you do that sort of thing everyday, it doesn't take any fancy technology or math to decide you belong on the list of "Those To Be Throttled and sent to competitors".

      The sweet smell of unbridled Capitalism.

      --
    11. Re:Why bother? by kenj0418 · · Score: 1

      Great Ideas! Now can you patent these and sue the pants of my ISP if they try any of them? Thanks!

    12. Re:Why bother? by Fweeky · · Score: 1

      So far with most multiplayer online games, one machine is the server and the rest are the clients.

      Go look at the traffic if you don't believe me. I've monitored the traffic on my connection as I play various online games - but not Xbox Live though.

      Sure, FPS's typically keep the game world state in a single server, but RTS games commonly use peer to peer network topology; e.g. Supreme Commander and Sins of a Solar Empire.

    13. Re:Why bother? by DeadCatX2 · · Score: 1

      since most users don't websurf 20 different sites at the same time AND read those pages at the same time

      No, but users visit web pages with images from a variety of hosts (such as advertising banners, etc).

      Just because you're reading one web page at a time doesn't mean your PC isn't communicating with several IP addresses in order to gather the data necessary to render the web page.

      --
      :(){ :|:& };:
    14. Re:Why bother? by TheLink · · Score: 5, Interesting

      1) Those plugins don't do very much uploading whereas bittorrent users do.
      2) Those plugins that do "fetch ahead" tend to stick to fetching from the same few sites - they may make lots of connections but they are to the same few sites (ad webserver, content webserver, icon/widget server etc), and they stop at some point - otherwise your browser would be downloading the entire internet (and AFAIK they don't do that). And really they definitely don't upload much.

      Personally I think the US ISPs are scumbags not because they throttle, but because it seems they took USD 200 billion and promised to deliver 45Mbps up/down.

      But after taking that 200 billion, more than ten years later their users have still only got DSL and cable, and they're getting throttled.

      Too bad most of the users don't appear to know how screwed they really got. They should ask for the ISPs to build the infrastructure NOW.

      But I suppose given a big enough crime, you are more likely to get away with it :).

      Cheat one person of money and it's jail time. Cheat 10 people and it's longer jail time. Cheat 100000 people, and you become a rich CEO and the board gives you a big fat bonus.

      Kill one person you get a life sentence or death row. Kill 20 people, people start asking for you to be executed. Get thousands of people killed, who knows you might get elected president :).

      --
    15. Re:Why bother? by TheLink · · Score: 3, Insightful

      I doubt those games even hit 1Mbps up and down sustained for more than even 1 minute :).

      If bittorrent users looked like RTS game players there won't be much traffic to throttle.

      For example it seems like it's 24kbps per opponent for Supreme Commander. So 20 opponents won't even saturate a 512kbps upstream.

      Do many people play Supreme Commander with 40 opponents at a time and expect good performance?

      --
    16. Re:Why bother? by NeutronCowboy · · Score: 1

      Probably, actually. Anybody who works with software installs downloads the latest versions/patches via VPN connections to the corporate network. That's several gigs worth of downloads for one connection. That's size though, not number of IPs. If they check for numbers of IPs, they can filter out corporate users.

      That said, watch P2P protocols evolve to account for this.

      --
      Those who can, do. Those who can't, sue.
    17. Re:Why bother? by Anonymous Coward · · Score: 0

      The whole concept of throttling p2p is ridiculus. P2P is used by universities, research facilites, game companies and other providers of data to get their data out as fast as possible (nothing spreads files faster than p2p) What they want to be throttling is people downloading files they don't have access to. Even so, I still don't get why this is the ISPs battle? All about finding an excuse to stuff more customers into their overflowing landlines I guess.

    18. Re:Why bother? by Fweeky · · Score: 3, Funny

      I doubt those games even hit 1Mbps up and down sustained for more than even 1 minute :).

      So, just like normal peer to peer services then? ;)

      I think the most opponents SupCom supports are 8; those 8 can be on a very large map, with thousands of units each, and each round from each unit tracked, though.

    19. Re:Why bother? by cryptodan · · Score: 5, Informative

      how would this work for gaming online? 16 different IP destinations and I play for hours on in. My understanding of Xbox Live is that it is P2P and if they throttle my Halo 3 game, I'm gonna get pwned even more than normal.

      I totally agree. Steam creates a lot of connections to various content servers to bring down content faster for the Steam Client. It also creates a shitload of traffic when you refresh the server list via Steam Clinet > Servers Tab. The Steam Client is also P2P by definition.

      Now this type of throttling would piss me off greatly.

    20. Re:Why bother? by MobyDisk · · Score: 1

      With a VPN, the ISP can't tell the IP addresses you are connecting to. Nice try though.

    21. Re:Why bother? by Anonymous Coward · · Score: 0

      Won't affect online gaming on PC. Online gaming on a PC is server-based, so the users connect to that one server and that one IP to play.

    22. Re:Why bother? by Anonymous Coward · · Score: 0

      No! You're giving the ISPs ideas! Bad! *wristslap*

    23. Re:Why bother? by Anonymous Coward · · Score: 0

      In my opinion, ISPs cannot decently throttle users which traffic has not been clearly identified as P2P.
      There are various other uses of an internet connection that "looks like" p2p. Take for instance a VPN server: lots of up, lots of down, lots of peer connected to it or, if udp, exchanging packet with it. I'm running ultravpn.fr and clearly, the ISP cannot throttle me on the assumption that the traffic is P2P, because it's not.
      I agree however that statistical machine learning is not necessary to classify internet traffic, and looking at packet length and timing, along with the IP header information, is a dead end to me: too much computing intensive, too easy to break (as the previous posts said, just send fixed length encrypted packets with random-looks-like ports and random timing). But one thing that will never change in p2p application is that a peer needs to exchange packets with a multitude of other peers, and some of them can be referred univocally to belong to a given "p2p swarm".
      This approach has been taken in a country like France to detect piracy: inserting "witnesses" peers inside bittorrent or emule swarms. I would expect a country like china to quickly adopt a similar approach.
      To sum up, if i agree that this "research paper" is of doubtful use, it should not be assumed that the p2p traffic could always avoid the detectors/censors. There are radical approaches that always work, as shown above.

    24. Re:Why bother? by Threni · · Score: 1

      > That'll mess up corporate vpn users with clout, and https connections to banks etc.

      The odd postback over https is easy to detect, and neither here nor there.

      > See the user. See the user after 1 hour. See how many bytes up and down. Check how many different IP destinations the user is connected
      > with.
      > If they are downloading a lot up and down, and connected to lots of host, chances are they are using P2P

      Either that or it's a company doing a lot of Voice/video over IP.

    25. Re:Why bother? by TheLink · · Score: 1

      They don't upload as much though. Sure those corp types send out huge emails every now and then but it's nothing like P2P - a short burst of upload, then it's done, few minutes later, a short burst and so on.

      If P2P clients are all leechers the P2P stuff breaks down. I don't see how you can evolve P2P to have all clients just download and only upload once in a while - where are they going to download from?

      So like I said it's trivial to detect P2P.

      If ISPs were allowed to automatically fetch and cache P2P and be "super peers" without trouble from the **AA, things could be different.

      Or if ISPs had just used the USD 200 billion bucks properly. Oh well...

      --
    26. Re:Why bother? by rabbit994 · · Score: 1

      However, in most cases, this traffic is burst. I think real problem ISPs have BitTorrent and such are long sustained downloads that never stop. Gamers and such create large amount of traffic but they are bursts. I play Call of Duty 4 for 2 hours and that's it for the night. I send very little after I go to bed.

    27. Re:Why bother? by TheLink · · Score: 1

      Don't need to. Most nonP2P users don't do much uploading while downloading.

      The multiple destination stuff is only for quicker detection. Otherwise you'll have to wait a bit longer to see if it's just some corp guy sending a huge bunch of uncompressed xls and ppt files whilst surfing a porn site over the corporate VPN. If they're still sending at a high rate > 20 minutes later it's probably P2P or he's infected with spam malware or DoS malware.

      Hiding P2P in a VPN works for naive detection methods (that require "Deep Inspection" and other bullshit), but not for what I suggested. Nice try though.

      --
    28. Re:Why bother? by cryptodan · · Score: 1
      However, with Steam each time you hit that Refresh Server List you send a shitload of packets. Download and install Steam buy a few games and attempt to refresh the server list. And it varies depending on your filters.


      Steam Client has been known to cause routers and modems to stop responding during a server refresh, and unlike P2P you cannot disconnect those as there is no option.

    29. Re:Why bother? by rabbit994 · · Score: 1

      I have a few games in steam. In fact, I played COD4 and TF2 last night. I know, but the flood of packets in terms of bandwidth is very small. It's just alot of little packets that overwhelm NATing tables of most home based routers. My DD-WRT doesn't have problem with it though and Valve is better about throttling it then they used to. If you have a problem, turn down your connection from cable to DSL 1M.

    30. Re:Why bother? by hairyfeet · · Score: 4, Insightful
      I personally wouldn't mind if they throttled down the speed to manage congestion,but of course congestion isn't what this is about.It is about giving you a really lousy cap and going tiered so they can make money off the same customer multiple times.I had a choice of 20Gb for $35(WISP) or 36Gb for $33(cable). I of course went cable. Now there is no way that Vonage will ever have me as a customer,since any VoIP other than the cableco's counts against my cap. And from what I understand Windows updates don't count against the cap which gives me and my customers one more reason not to use Linux.


      Mark my words,they are talking about congestion now,but if they kill off P2P and turn the country into a tiered network,you'll see us end up back with the walled gardens of AOL and Compuserve. Any videos except those hosted(and generating revenue for) your ISP will count against your cap. Any VoIP or other service that isn't run by(and generating money for) your ISP will count against your cap. And they will make the cap so low that unless all you do is surf websites(and you probably want to think about blocking those flash ads while you are at it) then you are going to smack into the cap,and get to pay $1 per Gb. Unless of course you stick with what the ISP offers you,which will of course not count against your cap. Instant lock in,just add congress critters to block that nasty net neutrality. But as always this is my 02c,YMMV

      --
      ACs don't waste your time replying, your posts are never seen by me.
    31. Re:Why bother? by Khyber · · Score: 1

      The steam client does not do it in bursts - I saturate my connection every time I download a game, and I still haven't finished downloading the full Valve pack yet.

      --
      Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
    32. Re:Why bother? by IdeaMan · · Score: 1

      Awesome. Thank-you for doing what we all would love to but don't have time for.

      --
      They ARE out to get you simply because They are in it for themselves and they don't care about you.
    33. Re:Why bother? by amRadioHed · · Score: 2, Insightful

      Get thousands of people killed, who knows you might get elected president

      More likely that should be re-elected. It's hard to get that many deaths under your belt before being President.

      --
      We hope your rules and wisdom choke you / Now we are one in everlasting peace
    34. Re:Why bother? by WaXHeLL · · Score: 1

      Anyway it doesn't take a genius to detect p2p. See the user. See the user after 1 hour. See how many bytes up and down. Check how many different IP destinations the user is connected with. If they are downloading a lot up and down, and connected to lots of host, chances are they are using P2P. Put them on a watch list. If they are still doing it much later, you put them on a black list where from then on if they are doing something similar you throttle them immediately (you can do it in a way that would in most cases still allow that user's web surfing to work reasonably - since most users don't websurf 20 different sites at the same time AND read those pages at the same time - it doesn't matter if pages come in one by one ).

      You're entirely ignoring the point of a SSH tunnel. The tunnel will mask all of the traffic where you won't be connected to lots of hosts, but rather only one host (your tunnel. You may see a lot of upload and download data, but it may be harder to identify if it is P2P traffic or not. This article cites that even through a SSH tunnel, they can detect P2P traffic with a high degree of certainty by examining the length and quantity of packets.

      --
      The troll with karma.
    35. Re:Why bother? by Anonymous Coward · · Score: 0

      most users don't websurf 20 different sites at the same time AND read those pages at the same time

      It seems clear you don't know how most sites work. Let's say you visit ebay.com. Now you're getting data from www.ebay.com, cgi.ebay.com, playground.ebay.com, survey.ebay.com, signin.ebay.com, pages.ebay.com, hub.ebay.com, search.ebay.com, listings.ebay.com, stores.ebay.com, etc. Oh, and don't forget pics.ebaystatic.com and all of the banner ad companies' servers. That's before you click on any auctions and end up with all of those plus the pics on the seller's private server, plus all the links your browser downloads if you have predictive fetching turned on, plus paypal.com when you go to pay for something, etc.

      If you don't think the typical web browsing session will have 20+ simultaneous open connections, you're wrong.

    36. Re:Why bother? by Anonymous Coward · · Score: 0

      The only thing your "method" does is throttle people who upload a lot. Sure, P2P users upload a lot, so do a lot of people. People use internet backup services, send multi-GB scientific data sets to colleagues on a regular basis, send feature length (and soon to be HD) home movies to dozens of family members, etc. How to differentiate that sort of traffic from P2P over VPN? Or is any sort of user-generated information just collateral damage in the war on whatever it is we're supposed to be fighting this week?

    37. Re:Why bother? by CycoChuck · · Score: 1
      I'm already being throttled, I don't need more. I'm paying for DSL that is suppose to be unlimited use at the speed I'm paying for. What I do with such bandwidth is for me to do with what I want as long as it is legal. The whole idea that my account could be throttled every time I use bit torrent to download a Linux ISO is going against the whole premise of "unlimited."

      since most users don't websurf 20 different sites at the same time AND read those pages at the same time - it doesn't matter if pages come in one by one ).


      If you that way may I suggest going back to dial up. I have multiple users on multiple computers in my house and all the ISP can see is the 1 IP address that my router has. With your system, the ISP could be seeing my one IP that my router has go to 20 different IPs and think I'm using P2P and throttle my connection, when in fact its 5 computers surfing and getting 5 different rss feeds/ podcasts.

      The bottom line is that the ISP has no right to throttle my bandwidth for any reason. If they are running out of bandwidth, then GET MORE. There are miles and miles of dark fiber, thats fiber optic cable not in use for those who didn't know, that they could easily hook up and get (gasp) more bandwidth. But instead the ISPs out there want you to believe that they are running out of bandwidth in a scheme to be able to do things such as charge users by the bit or force users to pay more for a business account. And even if they get a mass amount of users to fall for this scam, its only a matter of time before they start charging business users by the bit or by the protocol.

      Insert ad: Com-scam now has a special rate for new business subscribers. Pay $20 a month for 1 Gigabyte of HTTP traffic at 1 Megabit speed, and get 10 Megabytes of FTP traffic free a month for the first year. 5 year contract required.

      --
      Windows is as solid as quicksand.
    38. Re:Why bother? by kdemetter · · Score: 1

      If they aren't downloading or uploading much, why throttle? :)

      And if they are , they are paying for a high bandwidth connection , so why bother ? If it's a bandwith problem , yes , P2P use lots of bandwith , but they also pay for it ( as there are limits to how much you download/up).

      If it's about piracy , then it's not for to target P2P , as nearly any Linux distro is shared on bittorent (for the same bandwith reasons).

      Apparently , some ISP's are obsessed into believing than P2P will hurt them , while in reality , it's making them rich.

    39. Re:Why bother? by equinx · · Score: 1

      The World of Warcraft downloader too.
      P2P is a great technology and not only used for piracy.

  2. Er, no. by Cave+Dweller · · Score: 5, Informative

    First, encrypted traffic was never safe from throttling anyway. Second, FTA:

    "So it seems the use of a tool like this would be limited to an extremely controlled environment where users are limited to a white-list set of network protocols (so that they can't use a different tunneling mechanism, stunnel for example) and only allowed to ssh to servers under the control of the censoring party. In which case you would wonder why the admin wouldn't just set the ssh server's AllowTcpForwarding option to false."

    Kinda useless.

    1. Re:Er, no. by Anonymous Coward · · Score: 0

      In soviet russia: encryption reveals you

    2. Re:Er, no. by jonaskoelker · · Score: 1

      Kinda useless. Also, kinda not new: go to http://www.shmoocon.org/2007/presentations.html and look for "Rob King and Rohlt Dhamankar - Encrypted Protocol Identification via Statistical Methods".

      Upon observing a flow (as it is going on), they can identify which encrypted protocol is being used. I imagine tunneling things through ssh would only change the entropy (it's a different encryption), not how big the packets are or when they're being sent; at least not by much.

      Whether King and Dhamankar generate training data for ssh+$PROTO is a different question, but I think it should be fairly easy to do.

    3. Re:Er, no. by Ryvar · · Score: 1

      Moreover, isn't there a simple workaround in padding your ssh/scp packets and adding a random 10% chance of +1-25ms delay between packets?

    4. Re:Er, no. by UnderCoverPenguin · · Score: 2, Insightful

      Moreover, isn't there a simple workaround in padding your ssh/scp packets and adding a random 10% chance of +1-25ms delay between packets?

      The extra random delay might help a little, but adding padding would just make it more likely to get flagged for throttling.

      --
      Don't try to out wierd me, three-eyes. I get stranger things than you, free with my breakfast cereal. --Zaphod Beeblebr
  3. Non-timing critical? by jaminJay · · Score: 3, Interesting

    If the application is not time-critical, introducing random jitter would go some way to subverting this, no?

    --
    Leela: "Is all the work done by children?" Alien: "No, not the whipping."
    1. Re:Non-timing critical? by omnirealm · · Score: 5, Interesting

      > introducing random jitter would go some way to subverting this, no?

      Exactly. I took a few minutes to glance over the paper. Their feature
      extraction stage consists of two predictable attributes: packet size
      and time between packets. Modifying the traffic sent at the
      application layer (SSH itself does not even need to be touched) can
      trivially ambiguate the extracted features so as to throw off the
      classification attempt. This is simply a road bump; as soon as it gets
      into use, application-layer proxies will pop up to circumvent it.

      They also seemed to have inventented their own home-brew statistical
      analysis. I was disappointed that they did not go into detail as to
      why they largely ignored the entire field of Machine Learning
      (NaiveBayes? Perceptron? kNN? Why not try using these?) when coming up
      with their classification model.

      --
      An unjust law is no law at all. - St. Augustine
    2. Re:Non-timing critical? by Piranhaa · · Score: 1

      What about if someone's running an encrypted VOIP server?

    3. Re:Non-timing critical? by Tubal-Cain · · Score: 2, Funny

      Then they are obviously terrorists.

    4. Re:Non-timing critical? by amRadioHed · · Score: 1

      Shouldn't ssh be doing this anyway considering that similar timing methods can be used to guess passwords?

      --
      We hope your rules and wisdom choke you / Now we are one in everlasting peace
  4. Why would they do it? by cephah · · Score: 5, Insightful

    Can anyone explain to me why any ISP would use this technique? If they start looking at packet sizes to determine different kinds of encrypted traffic then the packets will just be padded, causing their network to be further overloaded...

    1. Re:Why would they do it? by Sigma+7 · · Score: 1

      If they start looking at packet sizes to determine different kinds of encrypted traffic then the packets will just be padded, causing their network to be further overloaded...

      Packets involved in a P2P transfer or any other form of data stream are designed to maximize throughput - they send a full packet whenever possible. Padding or adding extra data is in direct contravention to this because it sends useless data that will be discarded. You can identify them because the local to remote packet size is typically large and continuous, which is not normal for an SSH connection.

    2. Re:Why would they do it? by Shakrai · · Score: 1

      You can identify them because the local to remote packet size is typically large and continuous, which is not normal for an SSH connection

      I take it you've never used scp or sftp before?

      --
      I want peace on earth and goodwill toward man.
      We are the United States Government! We don't do that sort of thing.
    3. Re:Why would they do it? by The+Warlock · · Score: 1

      Please. Maybe one percent of your average ISP's customer base has ever used sftp. They don't give a shit if they throttle a tiny but legitimate chunk of the userbase while hitting P2P users.

      --
      I've upped my standards, so up yours.
    4. Re:Why would they do it? by Shakrai · · Score: 1

      Well, if that's your attitude I'd be surprised if 1% of the customer base has ever used ssh altogether -- never mind sftp.

      My point was in response to the GPs "which is not normal for an SSH connection" remark.

      --
      I want peace on earth and goodwill toward man.
      We are the United States Government! We don't do that sort of thing.
    5. Re:Why would they do it? by The+Warlock · · Score: 1

      SSH generally doesn't look too different from, say, an https connection to an online banking website, though. SFTP does, that's all.

      All I'm saying is "but this would cut off [legitimate uses with small userbase]" is not a defense to these people.

      --
      I've upped my standards, so up yours.
    6. Re:Why would they do it? by Shakrai · · Score: 3, Interesting

      No, it's not. But it could be a defense with the FCC/Congress or other regulatory agencies. Just wait until some Congresscritter can't VPN back into his office because of a policy like this -- that's when attention will start being paid to these issues.

      Kind of like how nobody in power gave a shit about the Gestapo^WTSA until some Congressman/Senator had to take HIS shoes off or found HIMSELF on the no fly list.

      --
      I want peace on earth and goodwill toward man.
      We are the United States Government! We don't do that sort of thing.
    7. Re:Why would they do it? by The+Warlock · · Score: 1

      Like some other poster said, they will undoubtedly not throttle their hilariously overpriced "business class" accounts, and direct home VPN users to sign up for them.

      --
      I've upped my standards, so up yours.
    8. Re:Why would they do it? by Shakrai · · Score: 1

      Wow, you have zero optimism. I'm not yet that cynical.

      --
      I want peace on earth and goodwill toward man.
      We are the United States Government! We don't do that sort of thing.
    9. Re:Why would they do it? by The+Warlock · · Score: 1

      Oh, there's a way out: the network itself needs to be upgraded to make bandwidth cheaper. With internet streaming video at 1920x1080 it's going to have to happen sooner or later anyway. If bandwidth is cheap enough that P2P doesn't cost significant money to the ISPs anymore, they won't bother to throttle. Some countries are already there; we aren't.

      --
      I've upped my standards, so up yours.
    10. Re:Why would they do it? by cparker15 · · Score: 1

      So then we'll just change what's normal for an SSH connection, or we'll break up the P2P packets, or we'll pad everything, to make all communications indistinguishable.

      --
      Have you driven a fnord... lately?

      You must wait a little bit before using this resource; please try again later.

    11. Re:Why would they do it? by statemachine · · Score: 1

      I don't know what you mean by hilariously overpriced. It's cheaper than DSL in '99. And it's magnitudes cheaper than '99 if you compare price/speed ratios. For me, anyway, it's only a few dollars more than regular service.

      Business class allows me to run servers. I get static IP addresses, my own tech support if needed, and an SLA. The ISP leaves me alone since I basically told them I'll be running servers. I'm pretty sure I'm in the last group to be throttled. With regular service, you can't run a server, don't have static IPs, no SLA, and have normal (shiver) tech support.

      There are some ISPs that offer regular service that also allow servers and provide static IPs, but don't have an SLA. However, those charge more than what I'm paying now. So if you put "business class" on top of that, maybe that's what you mean by "hilariously overpriced"?

      If ISPs would just come out and say "You'll get this low price, BUT you'll be oversubbed 100:1, so expect to be throttled to that during peak," maybe you'd be happier about going to a higher tier, and everyone would win.

    12. Re:Why would they do it? by Anonymous Coward · · Score: 0

      If you're using VPN, you should be on business class anyway. VPN is used by businesses to allow telecommuters to access their network remotely: it's a business use.

      If you're using your connection for business uses, you MUST use the business package.

      Check your TOS. Using VPN is almost certainly disallowed on residential connections. Residential connections are intended for residential use: email and web. If you want to use business class connections, expect to pay for them.

      And if you're telecommuting, your employer really should be paying for your connection anyway.

    13. Re:Why would they do it? by stinerman · · Score: 1

      Yeah, it's zero optimism, but it also happens to be the truth.

    14. Re:Why would they do it? by amRadioHed · · Score: 1

      And if you're telecommuting, your employer really should be paying for your connection anyway.

      Why is that? It sounds nice but seems a little unrealistic. That's like saying if you're not telecommuting then your company should pay for your car.

      --
      We hope your rules and wisdom choke you / Now we are one in everlasting peace
    15. Re:Why would they do it? by amRadioHed · · Score: 1

      If you change SSH to always send a full packets worth of data it will be unusable or ridiculously inefficient. I don't want "ls" to be padded with a meg of useless data.

      Breaking up P2P packets is more plausible, but it would seriously degrade the performance.

      --
      We hope your rules and wisdom choke you / Now we are one in everlasting peace
  5. Re:Correction... by KDR_11k · · Score: 5, Insightful

    Not really, they're providers of the medium and have no business limiting or snooping the datat that goes through their network especially since they were often granted a monopoly over building infrastructure in their area.

    --
    Justice is the sheep getting arrested while an impartial judge declares the vote void.
  6. Would have happened anyway. by zwei2stein · · Score: 4, Insightful

    Even without this analysis it was kinda obvious that throttle-happy ISPs would simply throttle all encrypted data once encrypting became mainstream in P2P.

    --
    -- Technology for the sake of technology is as pathetic as eschewing technology because it's technology.
    1. Re:Would have happened anyway. by CharlieHedlin · · Score: 4, Insightful

      What about VPN tunnels? People working from home are a core customer group they don't want to piss off.

    2. Re:Would have happened anyway. by thegnu · · Score: 5, Insightful

      those people will be more obliged to pay the ridiculously jacked up business internet prices, then, i suppose.

      --
      Please stop stalking me, bro.
    3. Re:Would have happened anyway. by Shadow7789 · · Score: 1

      Technically, if you are in that situation, you already have to get a business package. But then again, if you are in that situation, chances are you can get your employer to pay for you connection or at least help pay for it.

    4. Re:Would have happened anyway. by Andy+Dodd · · Score: 4, Interesting

      Actually, encrypted or not, the way the Sandvine (I think that was the name?) system used by Comcast worked was it just did a traffic analysis - If your upload connection was more than X% saturated for N seconds, the Sandvine appliance would start spoofed RST injection to kill off connections. The only way around this would be a full blown VPN that used an encrypted transport layer. (Encrypted BitTorrent, SSH, and nearly all encrypted protocols except the various VPN systems are an encrypted application stream over an unencrypted TCP session. Even some VPNs use an unencrypted TCP session to tunnel through, making them vulnerable to RST injection.)

      --
      retrorocket.o not found, launch anyway?
    5. Re:Would have happened anyway. by thegnu · · Score: 2, Insightful

      I'm just saying that restricting the majority of encrypted traffic will have no effect on the people who actually need the traffic for their job. The ISP will probably consider it a perk that they've manufactured a new "feature" for their business internet package: We don't renege on our contract.

      --
      Please stop stalking me, bro.
    6. Re:Would have happened anyway. by Manitcor · · Score: 3, Interesting

      1. Not always true, depends on your provider. Having had various consumer and business packages in the past, most ISPs only push you to a business package if you:

      a. Want a static IP
      b. Want to run any kind of server

      2. In the age of 20mbps consumer connections there is no need for someone who just needs legitimate heavier usage of the connection to not use it. I transfer 100's of gigs a month to and from datacenters around the country for my job. Granted I can get my company to help subsidize that but if I found out my ISP was throttling me I would more than likely take my business elsewhere. I would rather have my company pay for an expensive business package with another provider than give more money to a provider that actively wants to screw me over.

      Contractors have an even bigger problem as they don't get their connections subsidized (trust me the tax refund isn't much).

      So far my ISP has been pretty good, I called about bandwidth issues once or twice and when asked if I was downloading movies I explained to them what I do. When the rep realizes your just another guy trying to do his job you get all sorts of help.

      --
      "Don't mess with him, he taunts the happy fun ball."
    7. Re:Would have happened anyway. by hesaigo999ca · · Score: 1

      I would have to say use unencrypted data that has stenography encrypted data in its stream....
      using stenography, you can embed encrypted data into the picture or file which itself is not encrypted , thereby giving the false sense that the data is not encrypted, on the other end you would use a decryptor and also have a slight advantage that most people looking at the picture would only see a dog or cat, and not know there is info hidden inside the image.

    8. Re:Would have happened anyway. by Anonymous Coward · · Score: 0

      Even without this analysis it was kinda obvious that throttle-happy ISPs would simply throttle all data once encrypting became mainstream in P2P.

      There, fixed that for you.

    9. Re:Would have happened anyway. by antdude · · Score: 1

      From most residential AUPs, working from home is not allowed. :( That's what business packages are for.

      --
      Ant(Dude) @ Quality Foraged Links (AQFL.net) & The Ant Farm (antfarm.ma.cx / antfarm.home.dhs.org).
    10. Re:Would have happened anyway. by Anonymous Coward · · Score: 0

      They don't want you to VPN. They want you to suck provided content down and watch the pretty ads. They want you to do things so they can see what you're doing and what you want to do and sell you something related.

      Personally I think half the schemes they use for network transport are intended to mess up the MTU to make IPSEC performance poor. They do not want alternate networks running over "their" network, whether for P2P or for work.

    11. Re:Would have happened anyway. by Sapphon · · Score: 1

      Hmmm. Well, judging by the phrase "researchers have found a way to categorize the type of traffic that is hidden inside an encrypted SSH session to around 90% accuracy" I would venture a guess that the researches can, in fact, separate the P2P traffic from the regular (incl. business traffic). With 90% accuracy, no less.

      Honestly, I'd be a little surprised if there were even 10% of businesses whose internet usage through VPN tunnels mirrored that of P2P users.

      --
      Antiquis temporibus, nati tibi similes in rupibus ventosissimis exponebantur ad necem.
    12. Re:Would have happened anyway. by Raenex · · Score: 1

      Granted I can get my company to help subsidize that but if I found out my ISP was throttling me I would more than likely take my business elsewhere.

      Many people only have 1 choice for broadband, so they can't shop around. Even if you have 2 choices, you have to hope that the alternative doesn't have the same policies. Sounds like you have competition in your area, which is nice for you, but lots of people do not.

    13. Re:Would have happened anyway. by UnderCoverPenguin · · Score: 1

      In the age of 20mbps consumer connections....

      Where I live, 20mbps is business class service.

      My residential service is nominally 8mbps. According to my ISP's "Summary of Service Features" that means that I get 10mbps for 5 seconds to "enhance my web browsing experience", then it reverts to 8mbps. From actual observation, at non-peak hours, I do get that 5 seconds of 10mbps - after at least 10 seconds of near idle usage. After that 5 seconds, the connection is first throttled back to 8mbps, then continues to throttle lower.

      Granted I can get my company to help subsidize that

      No one I know (in person), who works from home, has their connection subsidized by their employers - though thrier employers are all to happy to take advantage of the fact they have home connections. Heck, my own employer only has a "Low Bandwidth Business Account". It is only 4mbps, but is never throttled. It also costs 5 times as much as my home connection (10 times (or more) when I switched providers and had a 6 month promotional rate (I have switched provides 5 times, now)).

      --
      Don't try to out wierd me, three-eyes. I get stranger things than you, free with my breakfast cereal. --Zaphod Beeblebr
    14. Re:Would have happened anyway. by Tubal-Cain · · Score: 1

      ...and also have a slight advantage that most people looking at the picture would only see a dog or cat, and not know there is info hidden inside the image.

      If someone is going to snoop on my connection, I want them seeing goatse.

    15. Re:Would have happened anyway. by Anonymous Coward · · Score: 0

      Especially those who work through a VPN that is operated by the federal government, and transmitting sensitive data, such as myself.

    16. Re:Would have happened anyway. by Tweenk · · Score: 1

      Stenography = shorthand (a collection of systems designed for very quick handwriting)
      Steganography = information hiding
      I think you meant the latter.

      --
      Those who would give up liberty to obtain working drivers, deserve neither liberty nor working drivers.
    17. Re:Would have happened anyway. by whoever57 · · Score: 1

      So the solution would seem to be to use UDP and tunnel the actual traffic within the UDP packets (and have the tunneled traffic determine if the necesary data has arrived properly). Much like OpenVPN. Since it is UDP, there is no TCP connection to kill.

      --
      The real "Libtards" are the Libertarians!
    18. Re:Would have happened anyway. by Anonymous Coward · · Score: 0

      Apparently this is already happening to Seattle Comcast customers. Reductions in speed of 10X are not uncommon since June 1. And yes, we're pissed off.

    19. Re:Would have happened anyway. by Andy+Dodd · · Score: 1

      Yup, that's what many VPNs use. IPSEC uses either tunneling through UDP or a completely different protocol that is neither TCP nor UDP (but is layered over IP). I forget what it is called.

      The problem with an application like BT using UDP at the application level (effectively developing their own transport protocol) is that it is likely to be more aggressive and less network-friendly than the existing TCP-based schemes. The end result is that by throttling TCP connections, network providers are shooting themselves in a foot - the only possible end result is that they will create a monster. (With that "monster" being an encrypted transport protocol that is far less "nice" in terms of congestion control than TCP.)

      --
      retrorocket.o not found, launch anyway?
    20. Re:Would have happened anyway. by hesaigo999ca · · Score: 1

      Yes I did, thank you!
            : )

  7. Analyzing packet sizes? by Anonymous Coward · · Score: 0, Redundant

    Well, what about if they padded the packets with random amount of data?

    1. Re:Analyzing packet sizes? by popo · · Score: 1

      Exactly. These kinds of workarounds are temporary at best. Data could be padded (increasing the overall data throughput) which would defeat the overall goal of the ISP's anyway.

      Ultimately traffic shaping -- like copy protection -- is a losing battle. Ultimately the cost of throttling, in bandwidth and CPU time will make the practice ineffective.

      --
      ------ The best brain training is now totally free : )
  8. Look, this is a dead end. by Anonymous Coward · · Score: 5, Insightful

    You can identify the type of traffic, because we're not trying very hard to hide it. If you keep going down this road, we'll just send all the time, the same constant packet size, the same rate, regardless of actually required service. It's the same to us, really, because we pay a flat price. It is not the same to you, though, because when we have to make every traffic look the same, we'll use much more of your precious bandwidth, so cut out the crap.

    1. Re:Look, this is a dead end. by Anonymous Coward · · Score: 2, Insightful

      Right. It's not like they would just throttle your entire connection if you did that.

    2. Re:Look, this is a dead end. by shird · · Score: 1

      Why would anyone do this if such traffic is detected as p2p traffic and therefore throttled? You are depending on everyone doing this, then complaining about their throttled legitimate traffic - the solution is stop sending legitimate traffic like this, not get the ISP to lift the throttle.

      "Dear ISP, I am deliberately making my legitimate traffic look like p2p traffic, and its getting throttled. I don't want to change my legimate traffic back to looking like legimate traffic because I also have p2p traffic and I'm hoping you will lift the throttling due to this complaint".

      Basically, your proposal for a workaround is backwards.

      --
      I.O.U One Sig.
    3. Re:Look, this is a dead end. by Anonymous Coward · · Score: 0

      And they'll just throttle everything. Game over. There's your dead end.

    4. Re:Look, this is a dead end. by dyfet · · Score: 4, Interesting

      Actually, strange you should suggest this, I was working on a small and rather generic package to tunnel data between hosts in this very way, constant rate/constant packet size tunneling, with empty data filled with random noise, and with non-packet-aligned encrypted data overlayed when there is data to actually send. I was going to call it tstunnel. Yes, it is somewhat of an extreme response to an extreme problem.

    5. Re:Look, this is a dead end. by MrNougat · · Score: 1

      And they'll just throttle everything. Game over. There's your dead end.

      Which is frankly what they should be doing to begin with. They've oversaturated their equipment, but they're still selling 'blazing fast speed.' If their network can't support the speeds they're selling, they should be selling and enforcing lower speeds.

      --
      Web 2.0 == Giant Blogspam Circle Jerk
    6. Re:Look, this is a dead end. by aussie_a · · Score: 1

      The next step will be for the monopolies to simply be to inform customers they're no longer desired and to stop offering them the service completely. Now they won't do it to everyone, they'll do it to a certain percentage (probably between 1 and 5 percent) and advertise this fact well known through the media.

      That should have a chilling effect on p2p users.

    7. Re:Look, this is a dead end. by malkavian · · Score: 1

      Methinks the point is that the originally chosen packet size would relate to definite non-P2P packet sizes and general metrics (not making everything look like P2P, which would, as you say, be self defeating). When all P2P traffic becomes obfuscated to the point that it looks to any statistical analysis exactly the same as all the non p2p traffic, then throttling of that stream becomes rather more difficult, as you have to wave your fingers in the air and guess what you're throttling, which will likely upset a large number of your non-p2p using customers who will complain that "the internet is running slowly", and likely have it explained by a friend of a friend somewhere along the way that the slowness is a deliberate move by the provider. At which point a large section of the customer base become actively hostile to the provider. Which in generally considered "Bad PR". In corporate viewpoints, this is a Bad Thing.

      The problem with making encrypted P2P traffic look like encrypted other traffic is that it increases the amount of traffic you need to send (padding packets, more frequent transmission, and in general introducing "noise" into the stream to break the fingerprint of a P2P signature in network analysis). To an individual user, this doesn't make too much difference (perhaps a little slower on the download, perhaps not). To an ISP that has to deal with all new versions of P2P apps having this introduced, and subsequently increasing the used bandwidth, the effect is significant in cost. Whatever metric they use will eventually be obfuscated. And if it catches on, it'll eventually be introduced into the clients. And once it comes as the default option, so that the "average joe" doesn't have to worry about knowing how to flick the switches to get the proper download/upload speeds, they'll end up losing that bandwidth, whether or not they stop the throttling (as it'll no longer have any effect). Net result, wasted ISP bandwidth (huge inefficiencies) for the long term because of an attempt to gain selective benefit in the short term. Typical corporate thinking these days. How do we get the fast buck today, and who cares that this may break the company long term.

    8. Re:Look, this is a dead end. by Anonymous Coward · · Score: 0

      The major issue is the ISP believing that the bandwidth is theirs, it isn't. As long as I am paying for it, that bandwidth is mine. If they don't want me using it, they can kindly refund my money and tell me they don't want me as a customer.

      What they are doing is analogous to a cable company saying "We're sorry but you watch too much television so we are going to reduce the number of channels you have available."

    9. Re:Look, this is a dead end. by Anonymous+Brave+Guy · · Score: 4, Funny

      Dear customer,

      Thank you for your comments. We regret that because it makes no business sense to continue providing an unlimited bandwidth service, we will be discontinuing this offering from next month. Current subscribers may transfer to our metered service with no disruption. This service is commercially viable and we expect it to remain so, and most users will find the metered service significantly cheaper as they will no longer be subsidising a small minority of heavy users.

      At your current usage rates, we estimate that your own monthly bill on the metered service would be approximately:

      $1,764.38

      Please note that this figure is an estimate based on your current usage level, and may go down or up depending on your future usage patterns.

      Best wishes,
      Your ISP

      --
      If you disagree, post your argument. (-1, Overrated) isn't your personal censorship tool for views you don't like.
    10. Re:Look, this is a dead end. by Anonymous Coward · · Score: 0

      Look, there are legitimate uses for encrypted connections passing large packets. I use scp/sftp/rsync extensively. A lot of people I know use VPN. Just because "P2P is evil and must be stopped!!!" doesn't mean they can start disrupting other services without repercussions.

    11. Re:Look, this is a dead end. by Anonymous Coward · · Score: 0

      Is that really the smartest decision you can make? Your escalating against an opponent that controls your resource.

      It's the same to us, really, because we pay a flat price

      And what happens when they introduce a tiered plan, or introduce caps (oh wait - that's happened).

    12. Re:Look, this is a dead end. by Anonymous Coward · · Score: 0

      A monopoly can do that anyway and need not try elaborate packet classification schemes first. The attempt to identify the type of traffic is an attempt to get away with throttling without harming the majority of the customers, because otherwise they would switch to the competition. If you don't have that worry, you can just throttle everything (or nothing for that matter).

    13. Re:Look, this is a dead end. by Anonymous Coward · · Score: 0

      "looking like legimate traffic"
      "like legimate traffic"
      "legimate"
      You think like ISP.
      You are saying that all p2p traffic = non legit traffic. This is BS!

    14. Re:Look, this is a dead end. by The+Master+Control+P · · Score: 1

      That'll go over like a lead balloon as soon as the first worm comes out that looks for other infected boxes and begins exchanging the contents of /dev/urandom with them.

      Although I'd also note that cheap unlimited connections can never make business sense with underbuilt networks - it's only been exposed since traffic became majority continuous rather than majority burst thanks to bittorrent/p2p/streaming video. It's probably been known since Usenet that there are a subset of users who have an obsessive-compulsive need to collect every file ever; They will never go away and not accounting for them is simply negligent.

    15. Re:Look, this is a dead end. by Koiu+Lpoi · · Score: 4, Interesting

      Huh, that's funny. My understanding, from talking with many people who work for a certain (unnamed) ISP, the biggest problem is streaming media, not bittorrent, and as such most users would NOT find metered internet to be cheaper at all.

    16. Re:Look, this is a dead end. by Anonymous+Brave+Guy · · Score: 1

      That only works mathematically if there are a few really low bandwidth users and a lot of users who are each cruising only modestly above the average mark. This strikes me as unlikely, though not completely implausible: I find it difficult to believe that the majority of subscribers to a typical unmetered ISP are hardcore P2Pers, and only a small minority just use basic e-mail and surfing, with the occasional streaming download.

      --
      If you disagree, post your argument. (-1, Overrated) isn't your personal censorship tool for views you don't like.
    17. Re:Look, this is a dead end. by celle · · Score: 1

      Customer to ISP: I'm rich. I'm sueing to remove your monopoly and common carrier status. And I'm not alone. Maybe we'll just form a new ISP and drive you into the ground.

    18. Re:Look, this is a dead end. by stinerman · · Score: 1

      That's rich.

      First, no ISP has common carrier status. They never did. The confusion is due to the fact that AT&T the phone company is a common carrier while AT&T the ISP is not.

      Second, a good many (most?) ISPs are not statutory monopolies, but natural ones. It simply isn't profitable to have more than one cable company in most areas. Which brings us to your vision of forming a new ISP to compete with the monopolists. Yeah right. The barriers to entry are about as high as they get in telecommunications.

      I know it's not the popular opinion around here but telcos and cable companies need to be regulated as public utilities or (and this is my favorite option) the government needs to buy up the last mile infrastructure and allow non-discriminatory access to everyone who wants to provide services over the infrastructure. There isn't and never was a free market in cable television or internet services (well there was when dial-up was popular, but i digress).

      ISPs can hold you over a barrel because you're lucky if you have two choices for access -- either the cable monopoly or the phone monopoly. The same anti-consumer BS would occur at your local power/water company without regulation. They could easily say "Well, water is $10/gal; don't like it? Have fun hauling water from the river."

    19. Re:Look, this is a dead end. by Anonymous Coward · · Score: 0

      That is exactly how military systems avoid traffic analysis. Military command and control radio links transmit non stop random data, 24/7/365.

    20. Re:Look, this is a dead end. by Anonymous Coward · · Score: 2, Insightful

      Actually - this isn't that extreme. Back about 100 years ago when I took an undergraduate Security/Encryption class - one of the issues we discussed at length was that of "Inference Control". Basically, one could *infer* certain characteristics of a communications stream just by looking at it.

      Ex: A military line normally has X amount of encrypted traffic on it. We can't crack it, but we know something is going across it...

      We pull some shit on our side of the pond, and notice that the military line now has X^2 amount of encrypted traffic on it. What are the chances that they're talking about us? Since we theorize that they're talking about us, we start looking for patterns that might decode into stuff about us... and from there, we go on to crack more and more until the code is broken...

      Even if we don't crack it, we know that this particular line is used to monitor some stuff we're doing, so we can pull some more shit and if the traffic doesn't increase on this line, then chances are we haven't been detected...

      The solution was to always keep the line filled and transmitting at a constant rate. Whenever regular traffic wasn't being transmitted, some randomized stuff was. Thus, the line was always operating at the same constant rate, and no one could infer things from the utilization of the line.

      That said - the solution to the current P2P problem is to encrypt everything, but also transmit constant amounts of traffic across the line at all times - if you're not sending real packets, send some randomized, encrypted shit instead. Just make certain that the random source is truly pseudorandom (but that's a whole different discussion)...

      Basically, this is an arms race - and we need to win it. The solutions are going to be rather interesting, and I predict will have more application than just this current P2P nonsense which the ISP's are battling against...

    21. Re:Look, this is a dead end. by Anonymous Coward · · Score: 0

      Yep welcome back to the dial up ages... Or pray to GOD Verizon and their FIOS absorb every other smaller company like the duopoly phone/cable providers and bring back competition to all markets. Then maybe Canada and the USA can start catching up... Or we can just keep limit and charging per gig even tho they cost pennys to send.

      Everything is faster yet ISP's can't keep up? Or is it they just do not want to?

    22. Re:Look, this is a dead end. by rootooftheworld · · Score: 1

      Let them try. Muhu-ah-ah-aha-hahahah!

      --
      I know full well that tobacco is bad for you, so I smoke weed with crack
  9. second by Anonymous Coward · · Score: 2, Funny

    I would have been first but my ISP throttled my SSH tunnel

  10. Ongoing by Tribbin · · Score: 1

    Next step? Encrypted packages that are arbitrarily sized to be like any other encrypted package.

    --
    If you mod this up, your slashdot background will turn into a beautiful sunset!
  11. This will backfire by DarkOx · · Score: 5, Insightful

    All its going to do is encourage P2P developers to try (and they will likely succeed) to make P2P traffic look more like other traffic. Want your bittorent to look more like encrypted telnet? Easy send tons of tiny packets and take a short break every few seconds. All this is going to do is increase the packet overhead the ISPs see. That same overhead will also hurt P2P end users but unless its more then the throttle does they will do it anyone. Its a loose loose situation really. They ISPs should realize they gain nothing going down this path.

    --
    Repeal the 17th Amendment TODAY! Also Please Read http://www.gnu.org/philosophy/right-to-read.html
    1. Re:This will backfire by Anonymous Coward · · Score: 5, Funny

      Its a loose loose situation really

      That sounds very loose. How loose can you get?

    2. Re:This will backfire by Brainix · · Score: 4, Insightful

      The ISPs will continue down this path until it is no longer economically feasible to do so. And that day *is* coming. One day, it'll be more expensive to play these cat-and-mouse games than to just give away cheap bandwidth, disk space, etc.

      --
      Raj Against the Machine! http://social-butterfly.appspot.com/
    3. Re:This will backfire by Anonymous Coward · · Score: 0

      Loose is relative. It can always get looser.

    4. Re:This will backfire by Anonymous Coward · · Score: 0

      Its a loose loose situation really.

      If it's loose, you had better tighten it up then!

    5. Re:This will backfire by thegnu · · Score: 4, Funny

      Its a loose loose situation really

      That sounds very loose. How loose can you get?

      i dunno. ask goatse.

      --
      Please stop stalking me, bro.
    6. Re:This will backfire by Anonymous Coward · · Score: 0

      Tor already sends data embedded in nop, rst, acks and so on.
      Enciphering data streams has always protected the data, not the metadata, so shaping could take place by analizing sub channel informations as timing, payload sizes and so on. Cloaking this sub channels inside nonstandard stream will become a nightmare to monitor and shape. Cloaking on the Internet is already ages ahead this shaping techniques, only at the current Internet filtering state those are inconvenient.

    7. Re:This will backfire by weetabeex · · Score: 0

      i dunno. ask goatse.

      I was enjoying my lunch...

    8. Re:This will backfire by BForrester · · Score: 1

      Agreed. There have already been some concerted efforts to make P2P traffic mimic VOIP, for instance. The only reason that tactics like this aren't already in place is that existing (simpler) methods are still generally effective enough.

    9. Re:This will backfire by Anonymous Coward · · Score: 0

      Exactly... Or why not make encrypted files look like normal text? All this does is cause technology to be built to make traffic flow increase as a countermeasure

    10. Re:This will backfire by Anonymous Coward · · Score: 0

      "Its a loose loose situation really"

      No. Sounds more like whine whine.

    11. Re:This will backfire by Anonymous Coward · · Score: 0

      I disagree. They'll just charge their customers more and more. They'll always make a profit in the end.

    12. Re:This will backfire by Anonymous Coward · · Score: 0

      One day, it'll be more expensive to play these cat-and-mouse games than to just give away cheap bandwidth, disk space, etc.

      This day will be last day of economic downturn, plain and simple. But when new recession comes, it starts all over. Etc., etc.

    13. Re:This will backfire by Anonymous Coward · · Score: 0

      Easy send tons of tiny packets and take a short break every few seconds. All this is going to do is increase the packet overhead the ISPs see.

      Really? That's all it'll do? All this will really do is drastically decrease your throughput. Let's do the math, shall we.

      New throughput = (length of transmission / length of transmission + length of break) * old throughput

      So taking a 6 MBps connection, and a typical SSH session (i.e. 2 second break per second of transmission), we know have a maximum throughput of:
      1 / 3 * 6 = 2 MBps.

      Furthermore, if you're limiting your packet size (i.e. down to half), your further decreasing your throughput. The ISPs will be perfectly happy to sell you 6 MBps connections and have you use only 1 or 2 of those MBps at any one time (not to mention that your transfers are also not a continous stream, but rather series of bursts with no transfers in between).

    14. Re:This will backfire by grahamd0 · · Score: 2, Insightful

      It will always be economically feasible to provide lousy service. Prices can always be raised if reducing the quality of service becomes more expensive.

    15. Re:This will backfire by whoever57 · · Score: 1

      The ISPs will continue down this path until it is no longer economically feasible to do so. And that day *is* coming. One day, it'll be more expensive to play these cat-and-mouse games than to just give away cheap bandwidth, disk space, etc.

      In my recent posting on /. I addressed this issue. I believe that the purpose is to establish throttling and destroy network neutrality, after which stage 2 of the plan will be enacted which is to hold large websites to ransom --- "You want your packets to actually reach your customers this year? Well you have to pay the toll first."

      --
      The real "Libtards" are the Libertarians!
    16. Re:This will backfire by Anonymous Coward · · Score: 0

      This is beginning to become a cycle, reasearchers come up with bigger and more costly solutions, ISPs starts to throttle p2p traffic, but there is still a high demand from people who download tons of stuff that they don't use, but just like the feeling of downloading stuff. So now there is a community for P2P developers where the time it takes to game the system doesn't matter because they're motivated by the fun of it. Media execs believe that everyone who downloaded their crap would have actually paid for it, so they go on camera huffing and puffing that they're losing money with each person that downloads their stuff. Taking the cue, reasearchers who were funded by ISPs call them up again with the same message said in a different way, they've got the perfect solution, noone would be able to game it this time, it'll just cost them twice as much as their last solution.

    17. Re:This will backfire by clone53421 · · Score: 1

      You fail to take into account that, given a choice between a 6 MBps connection only 33% utilized and a 6 MBps connection throttled to <1 Mbps, users will prefer the former. No, it isn't optimal, but it's better than the alternative.

      --
      Alexander Peter Kristopeit bought his basement from his mommy for one dollar.
    18. Re:This will backfire by westlake · · Score: 1
      All this is going to do is increase the packet overhead the ISPs see.

      All this id going to do is to move the customer into metered billing or a higher tier of service.

  12. Or they can just be lazy and save money by Zerth · · Score: 2, Insightful

    And throttle all encrypted traffic over whatever an IP phone or VPN connection would use on assumption of file-sharing. They don't give a rat's ass what you are doing, really, they just want a reason to throttle you and this company just makes money by giving them one.

    1. Re:Or they can just be lazy and save money by John+Hasler · · Score: 1

      > ...this company...

      What company?

      --
      Warning: this article may contain humor, sarcasm, parody, and perhaps even irony. Read at your own risk.
    2. Re:Or they can just be lazy and save money by Anonymous Coward · · Score: 0

      >> ...this company...
      >
      > What Company?

      Any company!

  13. what about ssl vpn? by fsiefken · · Score: 1

    Would the same problem exist with ssl vpn's like openvpn?

  14. Really?! by Anonymous Coward · · Score: 0, Flamebait

    And here I thought this was how we did throttling before we did start examining the content.

    But as usually the summary is probably balantly wrong and on principal I will not RTFA, so mod me as flamebait already.

  15. Another Correction... by JustinOpinion · · Score: 5, Insightful

    How about:

    Not a solution to defeat ISPs attempts to control what's going through the government-funded, monopoly-protected, public-land-using network.

    You're right, facts do change the interpretation.

  16. Next move... by PhotoGuy · · Score: 3, Insightful

    Well, the next move would simply be some tool, or modification to bittorrent, that makes the traffic patterns look like that of other protocols. While I'm sure it would have some impact upon performance, surely torrent packets can be make to look pretty damn similar to a bunch of HTTPS images being loaded on a web page (or something along those lines). Just like DRM, each move like this isn't solving any problem, just slowing things down, while a counter-move is made. (Or, another provider is chosen who doesn't throttle traffic, competition permitting.)

    --
    Love many, trust a few, do harm to none.
    1. Re:Next move... by noidentity · · Score: 1

      Or make it look like unencrypted HTTP traffic. Yes, that would greatly expand the data, so it could be made to look like a typical MySpace page or bloated CSS file.

  17. They can already throttle encrypted traffic. by Digital_Quartz · · Score: 5, Informative

    Could be worse. Rogers and Bell, here in Canada, just throttle ALL encrypted traffic.

    1. Re:They can already throttle encrypted traffic. by Fryth · · Score: 5, Interesting

      You'd think that's how they're doing it, but it doesn't seem to be the case. Rogers customer here, and my SFTP (FTP over SSH) connections go at full-tilt, while BitTorrent has slowed down to a crawl (0-1 KB/sec) on my connection in the past (yes, using the latest uTorrent/Azureus Vuze client, with standard BT MSE/PE encryption enabled).

      I don't know what's going on, but I suspect they've already figured out something that these Italian guys are researching now, and they've been able to identify BitTorrent from other encrypted traffic.

    2. Re:They can already throttle encrypted traffic. by nurb432 · · Score: 1

      If they throttle all traffic equally and advertise as such when you sign up, that would be cool with me.

      --
      ---- Booth was a patriot ----
    3. Re:They can already throttle encrypted traffic. by Klaus_1250 · · Score: 4, Insightful

      There is another weakness in BT which allows ISP's to throttle traffic. Client to tracker communications. Unless your tracker uses SSL, all peers inside a swarm are send over in the clear. So your ISP knows which IPs are likely to send and receive BT-traffic. They don't have to look at the traffic, they just use the same information the tracker provided to you. IP in BT-swarm? Throttle.

      --
      It only takes one man to change the Wisdom of the Crowd to Tyranny of the Masses.
    4. Re:They can already throttle encrypted traffic. by Firehed · · Score: 1

      You mean when you don't sign up, right?

      --
      How are sites slashdotted when nobody reads TFAs?
    5. Re:They can already throttle encrypted traffic. by Fryth · · Score: 2, Interesting

      That's interesting, that might be how they're doing it. I heard from some folk who claim success by encrypting the tracker communications only, by sending them over a VPN.

    6. Re:They can already throttle encrypted traffic. by Hi-Nu · · Score: 1

      Rogers customer here. My SSH connection to work frequently got throttled to the point of usable (Try typing a character in vim, and it showed up 5 seconds later), while BT traffic is getting a passable speed around 30-40 KB/sec minimum (using uTorrent with encryption enabled).

      Rogers still have a lot of work to do, but I guess they are too busy injecting message to web sites "informing" their customer they have exceed their monthly bandwidth cap and it's time to pay up... Yes, just got one of those this morning

    7. Re:They can already throttle encrypted traffic. by nurb432 · · Score: 1

      Donno about you, but i had to sign up to get service.

      Sure it was an online form, but i still had to agree to the terms of use.

      --
      ---- Booth was a patriot ----
    8. Re:They can already throttle encrypted traffic. by Koiu+Lpoi · · Score: 1

      So why aren't packets to and from the tracker encrypted? I would think that would be one of the first things to happen, long before peer-peer encryption.

    9. Re:They can already throttle encrypted traffic. by Hyppy · · Score: 1

      whoooooosh

    10. Re:They can already throttle encrypted traffic. by Anonymous Coward · · Score: 0

      No, Bell does not throttle encrypted traffic. They also don't throttle any traffic on common ports such as 80 and 21, so if you have a P2P client running on those, the packet filtering is not triggered. If however, you do trigger the packet filtering, (regardless of what Bell claims) your other connections including VOIP will be affected.

  18. Re:Correction... by DrJokepu · · Score: 4, Insightful

    Not a solution to defeat ISPs attempts to control, what's going through their network.

    Do you understand that ISPs are not exactly charity organizations, don't you? I am paying for their service and I expect it to work as it was advertised in their offer.

  19. Meh... by BlueStrat · · Score: 1

    So the ISPs now have another way to detect types of communication for throttling that they shouldn't normally have a problem with if they had actually kept to their agreements with the US Gov./the people to use the massive tax breaks they were given to build out their infrastructure so that..sort of like that whole deal was intended to do...we could've avoided this kind of problem where throttling would be necessary or desirable to begin with.

    What next? You sign up for internet service and pay your money and they hand you a nice glossy screenshot of what your browser would be seeing if your computer was actually connected, because, you know, if they actually had to *transmit* packets, then the tubes would be congested and the pirates/terrists/hackers/crackers would win? What good is a connection to the internet if there's no "inter" in your net connection?

    Cheers!

    Strat

    --
    Progressivism (aka US 'Liberalism'): Ideas so good they need a police/surveillance-state to enforce.
  20. Italian researchers have also found a way to... by assemblerex · · Score: 4, Funny

    detect if one of the mario brothers is inside the packet, 89.9% of the time

  21. Re:Never! by JustOK · · Score: 2, Funny

    no, but they can add some latency

    --
    rewriting history since 2109
  22. Why bother decrypting? by gatkinso · · Score: 1

    Just throttle ALL traffic from ip adresses that you consider "excessive."

    --
    I am very small, utmostly microscopic.
  23. Never was safe from throttling by nurb432 · · Score: 0

    Its fairly easy to ID standard encrypted traffic and throttle or just outright block. This is something iv'e been talking about all along that people claimed wasn't possible. Once they ban non government 'blessed' encryption, it will just be blocked.

    But at least in the meantime, while they can do packet shaping, they still cant snoop on content.

    Once that happens we have to come up with practical 'transparent' encryption techniques.

    Its always nice to be vindicated, again. Go me!

    --
    ---- Booth was a patriot ----
  24. DNS Lookup? by beaverbrother · · Score: 1

    A reverse DNS lookup will tell you a lot about whether an IP you are sending to is a home user or a corporation. I wouldn't be surprised if they use this also (though Net Neutrality legislation might stop it).

  25. Re:Correction... by Eivind · · Score: 5, Insightful

    If these policies where openly documented, and there where truly free competition, I'd agree with you; let the market sort it out.

    That typically isn't the case. First, these policies are rarely documented at all, and if they are, it's in language so vague as to make it useless for purposes of comparing one ISP to another. ("We may, at our discretion, at various times, perform adjustments to packet-priority")

    Free competition is also the exception rather than the rule. A huge fraction of end-user-lines where built by telcos acting as a government-granted monopoly, and then they somehow got to keep a large piece of this after the monopolies are no longer in principle monopolies. Which means in many areas they are still in -practice- pretty close to monopolies.

    And even where they're not, competition is low and that will remain so. Few people have more than 2, perhaps 3 physical cables coming in that are suitable for broadband. (many have a twisted-pair copper that used to be for POTS and a coax that used to be for analogue-cable, and that's it, extra bonus if the old monopolist owns the tv-cable in your area!)

    This ain't gonna change. A single modern cable has moder than enough capacity for all needs, so it's not economically sensible to have a large number of competitive cable-networks.

    Really, last-mile networks should be owned and run by the neighbourhoods, or failing that atleast be considered infrastructure, really today a working broadband-connection is basic infrastructure like electric power, water, sewage and roads. (it's not -equally- crucial as those, but it's crucial nevertheless, I doubt a house with -no- telecom-connection of any sort would find many buyers)

    Wireless changes the picture a bit, for low-bandwith applications. But only a bit. The problem is that the RF-spectrum is fundamentally shared, thus it will not be possible to deliver the same speeds and reliability as is possible on physical cable. (a single single-mode fibre easily supports speeds up atleast a Tbps or thereabouts which is more than most people need for the next few decades)

  26. Re:Correction... by Dr_Barnowl · · Score: 4, Insightful

    Not a solution to defeat ISPs attempts to control, what's going through networks they constructed with large sums of both public and private money they mortgaged against providing a service to their customers, not fighting against them.

    Yup, sure do.

  27. Make a restriction, people will beat it by 192939495969798999 · · Score: 1

    Once word gets out that there's some restriction on a service people are used to, they will always find a way to beat it. Last century they tried to ban alcohol and that worked about as well as throttling packets will work here. Inevitably they will have to stop because they'll just force people into any goofy method that circumvents their restrictions.

    --
    stuff |
    1. Re:Make a restriction, people will beat it by Anonymous Coward · · Score: 0

      Except there is a major difference, in prohibition it wouldn't have been feasible to inspect each and every car on each and every road. Here that is exactly the case. I hate to say it, but in technology there are solutions, and typically those solutions favor those who pay for them. Sometimes protection schemes do work, take a look at bluray for example. For all the asinine problems it's protection causes you have to at least admit that it isn't cracked after how many years of people attacking it.

    2. Re:Make a restriction, people will beat it by Save_Clippy · · Score: 1
  28. VPN users can upgrade by tepples · · Score: 1

    Customers who need to make encrypted connections to a business network can upgrade from a one-nine home SLA to a two-nines business SLA.

  29. its only worth it when we try by nx6310 · · Score: 1

    where there's a will, there's a way.

  30. Re:Correction... by Hawkeye05 · · Score: 1

    Not a solution to defeat ISPs attempts to control, what's going through their network.

    Do you understand that ISPs are not exactly charity organizations, don't you? I am paying for their service and I expect it to work as it was advertised in their offer.

    Do you understand that they believe you owe them and that they're just being nice guys for "improving" your online experience. And in the process making it easier for grandparents to download pictures of their ugly grandchildren.

    --
    Http://Stineomite.org (Yeah Thats Right I'm An Organization)
  31. Re: Italian researchers have also found a way to.. by Anonymous Coward · · Score: 4, Funny

    Yeah but that's a cheat owing to the tubes. See, they route all traffic through a huge green pipe and listen for the "Gew gew gew" noise that signals the presence of a Mario Brother.
     
    Why would an ISP do Deep Mario Brother Inspection, I hear you ask? Well if you remember, those depths were filled with coins! There's no depth an ISP won't go in order to get those.

  32. The security hole will soon get fixed by petes_PoV · · Score: 4, Interesting
    > have found a way to categorize the type of traffic that is hidden inside an encrypted SSH session ... They are achieving this by analyzing packet sizes and inter-packet intervals instead of looking at the content itself

    And in the next (or two) release of SSH implementations, this weakness will, no doubt, be fixed.

    Professional cryptographers have known for decades that you don't just switch on your transmitter when you want to send a secret message - no matter how well encrypted it is. The mere fact of traffic is frequently a sizeable tell-tale itself. Instead, you keep your transmitter on 24*7 sending encrypted garbage, with the ability to interleave genuine messages when the need arises. I'm sure that in a short time, the SSH people will remove the ability to profile the transmission to glean anything usable from it.

    --
    politicians are like babies' nappies: they should both be changed regularly and for the same reasons
    1. Re:The security hole will soon get fixed by Migraineman · · Score: 3, Interesting

      Exactly. If you look at the FIPS 140 documents, you'll see layers of data- and physical-security that need to be implemented. Currently, the SSH folks are only considering the raw data encryption requirement at the endpoints. The ISPs' analysis techniques will force the SSH folks to consider the end-to-end link as a single unit, and they'll implement more structures to deny the ISPs any visibility. I fully expect such a move to cost the ISPs more bandwidth. "All these channels look like random data, all the time." Yep.

    2. Re:The security hole will soon get fixed by Anonymous Coward · · Score: 0

      If you go to the news group alt.anonymous.messages, you will see this continuous 24*7 sending technique in action.

  33. Comparison to copy protection schemes by intx13 · · Score: 3, Insightful

    Attempts to analyze (and then throttle) Internet traffic reminds me of copy protection schemes. The schemes get more and more complicated (and costly) and at every turn the user gets more sophisticated in his or her attempts to get around the protection. ISPs would be wise to look at the music, movie, and in particular video game industries and realize that there are many, many more users who wish to use P2P software than there are ISP engineers who wish to throttle said users, and that it will always be a losing battle.

    Personally, I think the granularity of the ISP payment schemes need to be increased. We pay for cell phone minutes in blocks of 100 or so (or by the minute, depending on your plan); we pay for electricity by the kWH, we pay for water by the gallon (or liter), and so on... why not pay for bandwidth by the Mb? In a perfect world (yeah, well, one can dream!) this would mean reduced costs for the average home Internet user, as most people aren't using anywhere close to what is available, and maybe slightly increased costs for people like me. But then at the same time throttling is no longer an issue. Of course in reality this is unlikely to happen any time soon; why charge responsible, realistic rates when you could charge a flat fee and then just block any traffic you don't like with increasingly expensive technology (and pass the cost on to your monthly subscribers, of course)?

    ISPs, learn from the "War on Copyright Violation" - you won't win this battle; give it up and fix the underlying problem.

    1. Re:Comparison to copy protection schemes by Anonymous Coward · · Score: 0

      "why not pay for bandwidth by the Mb?"

      because the user HAS NO CONTROL over how much spam he will be getting so the user refuses to pay per Mb

    2. Re:Comparison to copy protection schemes by Televiper2000 · · Score: 1

      I'm on Rogers in Canada and that's exactly what they have done. I'm a fairly heavy net user and average about 30gig of usage per month with the limit (before paying) of 70gig (upload + download). I don't think Torrents would be a problem if there wasn't a small select group of people turning their home Internet connect into a large 24/7 file server.

      --
      New! Device Legs: These legs will help your poor OEM installed product escape any hamfistedness it may encounter. Ava
    3. Re:Comparison to copy protection schemes by fritsd · · Score: 1

      Great idea! Because if the average user feels this in his wallet, the spam problem finally gets addressed and solved as well.

      --
      To be, or not to be: isn't that quite logical, Slashdot Beta?
    4. Re:Comparison to copy protection schemes by Anonymous Coward · · Score: 0

      Most likely if they charged a per-megabyte/gigabyte rate, they'd price it so that "typical" usage costs just as much as the flat fee now, at minimum. $1/GB transferred?

    5. Re:Comparison to copy protection schemes by Anonymous Coward · · Score: 0

      The problem with volume-based pricing is that then Internet was founded on the concept of flat rate. Remember, before the Internet, when you wanted to connect to a server that was 5000 miles away, you would use your dial-up modem and make a long-distance call. Pricing was proportional to time and mileage. Sure, a leased line could eliminate the time consideration, but not the distance.

      Although the bandwidth utilization (especially upstream) was never contemplated with the Internet was invented, the fact remains that the Internet economy is founded on the concept of a single price for the "all you can eat" buffet. A classic telco approach to pricing will kill the goose that lays the golden eggs.

  34. An even easier throttling rule by MarkH · · Score: 1

    Isn't it about time that ISP's were upfront and simply charged users for what they use? This would encourage ISP's to grow bandwidth to meet demands ( as it adds revenue ) and for users to decide how much content they wish to pay for

    1. Re:An even easier throttling rule by John+Hasler · · Score: 1

      That would be fine with me. I'd be happy to pay something like $10/month for the connection plus so much per gigabyte. Those who find it necessary to download several movies and refill their 'pods every day would not be pleased, however.

      --
      Warning: this article may contain humor, sarcasm, parody, and perhaps even irony. Read at your own risk.
  35. net neutrality by jaymunro · · Score: 2, Interesting

    Call me a troll, and I don't usually comment, however I don't think this is what "net neutrality" is about. If you want to be able to download anything and interrupt other people who want to surf freely, that is one thing, but if you just want to be able to surf freely without restriction being imposed by IPS's and such, that is a totally different kettle of fish.

    1. Re:net neutrality by intx13 · · Score: 1

      I don't think this is what "net neutrality" is about. If you want to be able to download anything and interrupt other people who want to surf freely, that is one thing, but if you just want to be able to surf freely without restriction being imposed by IPS's and such, that is a totally different kettle of fish.

      You realize, of course, that "surfing" is shorthand for "downloading and then rendering as a web page"? The Web is just one system of protocols and file formats that is available on the Internet - who's to say it should be the only one?

      I think it is the exact same kettle of fish. I want to access server A by protocol 1. You wish to access server B by protocol 2. Should mine be throttled so yours can go faster? Should it depend on the servers we want to access ("tiered" Internet)? Should it depend on the protocols we're using (packet-inspection, throttling)? Should it depend on how much we pay (current subscription-based service)? This question is what we call "net neutrality" - how do we get the most people online in a way that is amenable to everything those people want to do - being as "fair" as possible.

  36. Like it matters by phorm · · Score: 1

    Not a Bell customer, but stuck using the Bell network (because they have the DSL last-mile monopoly here)...

    Bell doesn't even seem to bother inspecting my packets. As soon as I open up an SSH connection to my box (during peak hours, during off-time when they're known to relax throttling it's fine), things go slow as shit. Not just the encrypted traffic either... there seems to be an overall slowdown that hangs up other connections.

    And I'm 99% sure it's not my settings, because everything worked fine until Bell's throttling kicked in (no such issues pre-throttling, with my previous ISP, or when I only SSH to that box from the LAN).

    1. Re:Like it matters by Anonymous Coward · · Score: 0

      I don't have that problem. My ISP buys bandwidth from Bell and there is no throttling.

      I rarely use bit torrents, but i download from an encrypted news server and it flies just fine. But even with my bit torrents, I see no signs of throttling.

  37. Re:Correction... by aussie_a · · Score: 3, Insightful

    Funny, when I began using their service they never told me they would throttle certain protocols. They said they'd give me access to the internet at certain speeds to the best of their ability. Throttling packets seemed to be significantly below their best.

  38. Re:Correction... by hitmark · · Score: 1

    thing is that isp's are mutating. they are no longer simple "road" providers/maintainers. now they sell you the "fuel" and the "car" as well.

    all in all, they want the good old vertical silo of providing the "whole widget".

    --
    comment first, facts later. http://chem.tufts.edu/AnswersInScience/RelativityofWrong.htm
  39. Improve infrastructure by elh_inny · · Score: 1

    It seems that all that needs to be done is to solve it is to upgrade the backbone to allow each user an average download of two x264 movies a day or so, circa 10-20GB.
    There is no one able to consume more than that, daily.

    Problem is that processing power is cheaper than fiber these days, so they analyze and throttle the packets, instead of increasing the bandwidth.

  40. Let me help you with this.... by spasmhead · · Score: 1, Insightful

    See the user. See the user after 1 hour. See how many bytes up and down. Check how many different IP destinations the user is connected with.

    Errrr, if they are using VPN then they will have 1 IP destination, to the company that's providing the VPN (think SecureIX or Relakks)

    If they aren't downloading or uploading much, why throttle? :)

    well, of course, we could all just buy an overpriced brardband connection and just not use it. At all. Then we could confidently boast that our connections are never getting throttled and happily invite people to look long and hard at how fucking good we are.

    As it happens, we bought our net connections for a reason.

    And while Iâ(TM)m at it, does anyone notice that the same ISP's that are most inclined to throttle you (or even report you to the music industry) are the ones who *still* advertise their service by boasting how many music/video files you can download in an hour?

  41. Wait for the other shoe to drop by cryptoguy · · Score: 1

    What they have accomplished under a single authentication protocol will probably be extended to the others. When this technique is fully developed, it has potential for other uses besides throttling. For example, a company could use it at the perimeter firewall to prevent use of ssh tunnels to bypass a web proxy.

  42. A modest proposal by symbolset · · Score: 1

    Here's a novel idea: if you intend to sell metered service, sell metered service. Wow. That's just blowing me away with its simplicity. How could they have not thought of that?

    Call it "Bandwidth Plus" or something.

    Better yet, call your local politician and tell him it would be really cool if power districts could sell communications services, because, you know, they own the rights of way and the incumbent communications providers aren't interested in building out the post roads of the 21st century.

    --
    Help stamp out iliturcy.
    1. Re:A modest proposal by gatkinso · · Score: 1

      Don't inject logic into this, you.

      --
      I am very small, utmostly microscopic.
  43. Re: Italian researchers have also found a way to.. by D'Arque+Bishop · · Score: 2, Informative

    Mario Brothers would never be in the packets, as they travel through pipes, not tubes. :-)

  44. I've experienced deep inspection by LM741N · · Score: 1

    "Bend over and cough please"

  45. Re: Italian researchers have also found a way to.. by Anonymous Coward · · Score: 0

    ...and listen for the "Gew gew gew" noise that signals the presence of a Mario Brother

    That's odd; the Mario Bros. don't look Gewish.

  46. Invest more money and resources in building out by Anonymous Coward · · Score: 0

    It seems to me a core issue is not wanting to spend money building out infrastructure to support the greater need for traffic. It's expensive, laborious, but eventually it will become unavoidable.

    Companies like Verizon who were smart enough to lay dark fiber in the past are struggling less now, but they face the same issues.

    Instead of anal retentive traffic analysis and throttling to save the current infrastructure from breakdown, it's time to look to the future.

    Sure, P2P coders can create programs more "friendly" the network - indeed it's to their advantage to do so, but if I'm paying for bandwidth, and the ISP will throttle it (esp. if they don't tell me), then I will demand a lower charge for the connection.

    This is where consumers have power.

    So, it either ends up being a fight over bandwidth, or it becomes a mutual effort to build the infrastructure out and grow the network in a sustainable manner.

    Some Govt subsidy and tax breaks would probably help, too.

  47. From the another-worthless-article departement by smartdreamer · · Score: 1

    It doesn't take a genius to determine what type of traffic (P2P) is passing through an encrypted tunnel with this precision. It takes only little monitoring. Also note that this technic can be countered easilly adding dumb packets to tunnelling protocols. This technic as been used before and is probably already ready in big corporations like AT&T and others with research teams dedicated to stop users from enjoying the Web.

    If your ISP is dumb enough to do bandwidth throttling on P2P, is dumb enough to slow down every encrypted connection.

  48. yeah, like that's gonna last by speedtux · · Score: 1

    analyzing packet sizes and inter-packet intervals ... which are easily modifiable.

    This research is stupid, as is anybody that tries to implement filtering based on it.

  49. A Few Misunderstandings for Many by kenp2002 · · Score: 3, Interesting

    Okay, before everyone starts their throttling engines for war please remember the following:

    A: ISP's are not throttling data because of bandwidth, they are throttling because of latency. If you do not understand the difference, here is a simple way to look at it

    A router can handle a million packets a second let say. Wether the packet is a size of 10 or a size of 1000 it still can only handle a million packets. Bandwidth is how many seats on the bus (or if all the buses had the same number of seats, how many lanes on the road), latency is how fast the bus is going. A router it a toll gate. Too many buses, regardless of how many seats, will bog down the toll gate. P2P is very chatty in the number of packets and depending on how it sliced the data, lots of big chunks, or a whole hella lot of small chunks. Either way the guy working the toll gate is going to go postal at some point.

    B: Encryption, your rights online, data type, freedom, and all of that supurious crap we like to toss around means nothing when: "You sign a contract." While I am not a lawyer I am an informed customer (I read the small print). When you sign up for Internet service, regardless of what you feel, or in fact what your rights are, you can and do sign most of those away when you sign up for a commerical service. If they say that you cannot encrypt your P2P traffic and you do; thus losing your service... that is more then acceptable under most nations idea of contract law. You have no right to privacy if you sign a contract that gives them the right to look.

    Keeping A & B in mind please feel free to march forward with your discussions but, the most important thing to remember, is point A. Telling people there is plenty of bandwidth has LITTLE IF ANYTHING to do with throttling as far as I can tell. I watched 3 hearing on CSPAN and not one rep from the big three telecoms mentioned BANDWIDTH as a reason, but I did hear 18 engineers talk about routers, MTU initiated fragments, and total packets per second capacities on core routers, and I did keep count of bandwidth vs. latency.

    Bandwidth Mentioned: 34 times
    Latency: 400+ times (I ran out of chicken scratch space on the page and gave up...)

    Now I admit I did doze off after 30 minutes of an engineer trying to explain to a senate committee the difference between TCP and UDP but I am human after all.

    Now certainly there is some complexity in latency and bandwidth in how they are related and from what I have heard fiber does take care of a lot of the latency issues (signal to noise ratio seemed to be a big talking point from some AT&T engiee who looked like Dracula) so feel free to toss that into the discussions.

    But seriously, this whole filtering stuff has nothing to do with bandwith, so please, please, please, stop with the bad 3rd party reporting. We have already seen on /. that the ISPs aren't hurting for bandwidth.

    Getting accurate information from the mainstream press on Internet filtering is like asking a caveman to fix your car... all he's gonna do is smash it with a rock.

    --
    -=[ Who Is John Galt? ]=-
    1. Re:A Few Misunderstandings for Many by ratboy666 · · Score: 1

      So -- the problem is caused by non-symmetrical connections. This causes people who wish to exchange information to use "p2p". The efficient methods for controlling a swarm tend to be decentralized, by permitting the clients to ask for random sections, and discuss among themselves.

      And -- we know the network grows by pushing routing decisions to the edge. Or, at least the "networking engineers" should know this. If the issue is that the ISP core routers are being swamped (rather than a bandwidth issue, as you imply), the solution seems evident. Push the routing back to the edge.

      In other words, we have to solve the "last mile" problem to cure this. Obviously, allowing a monopoly for wired connections won't work, unless the organization granted that monopoly can guarantee service levels.

      Another (hold on tight) solution is simply to equalize upload and download rates. This would make the swarm less effective (after all, much larger pieces could be downloaded from a single site).

      But...

      WAIT A MINUTE -- bittorrent doesn't ITSELF break pieces into MTU chunks! bittorrent loads at 128k+ (4mb isn't uncommon) chunk sizes.

      This transacts 128 to over 4000 packets over the same path! Indeed, it's probably more efficient in terms of router use than automated web browsing.

      Which means that the ISP simply cannot bear the load. And it doesn't matter whether that is caused by raw bandwidth or switching. Which brings us back to requiring the SLA.

      --
      Just another "Cubible(sic) Joe" 2 17 3061
    2. Re:A Few Misunderstandings for Many by Adeptus_Luminati · · Score: 3, Informative

      What you said about the problem being latency, is a little bit hard to swallow given that the core of most ISPs runs multi-terabit routers.

      The fact of the matter is that not only have router CPUs increased in power exponentially, but also core router technology, has advanced to implement caching such as CEF (Cisco Express Forwarding), and build into regular router blades additional CPUs such as DCEF (distributed CEF), etc.

      Case in point, core routers these days have SO much spare processing power that most routing cores run VRF (virtual routing and forwarding), which allows a single physical router to VIRTUALLY pose as if it is 100 or even 1,000 different routers, all inside the same box.

      And further, the total throughput capacity of these routing processors today is measured in the TERABITS. The latest Cisco router can process some 15 Terabits of traffic in a single box. Even if packet sizes were inneficient, you're still looking at 1+ Terabits of throughput... which is many many many OC192s (10Gigabit Sonet rings).

      So don't tell me we're hitting router processing capacity, because that's a complete joke, and if that were the case, Bell Canada would have been smart and presented that info right up front to the courts (they're currently being asked to justify why they throttle their end-users).

      I think what it actually may come down to is peering costs with other ISPs... which for the most part isn't a problem for the biggest players which are Tier 1 providers. Tier1 here is defined as a Telco/ISP that is so big (i.e. AT&T) that all other providers pay THEM for packets to traverse their network, and they in fact don't pay anyone or their peering costs are way lower than their peering income.

      So Tier1's aside, yes I can see ISPs having to fork out significant $$ for bandwidth per month, and of course torrent freaks doing 200+ GigaBytes/month are costing them significant money.

      just my $2.22 cents,
      Adeptus

      --
      No trees were killed in the making of this post; however, many trillions of electrons were horribly inconvenienced.
    3. Re:A Few Misunderstandings for Many by BlackHole+Basement · · Score: 1

      He's not referring to ISP backbone tech that is generally easy to upgrade due to it being above ground and easily accessible within a building. He is implying that it is the last mile to our home connections, is where the latency is awkward and flawed due to our crappy lines and equipment connections that they (Cable/Tel-COs) refuse to upgrade because that requires actual back breaking work, I.E: digging, cutting, splicing, many miles of cables into the trunk line.

      They are milking it until the end of time or just waiting for competition--LOL!

  50. Ok, hold on.. by mskadu · · Score: 1

    Ok, balls in the software writers' court now. Lets see what they come up with.

    --
    -- Mskadu (Blogs: http://mskadu.blogspot.com/ and http://mytechieself.blogspot.com/)
  51. markov generator? by Anonymous Coward · · Score: 0

    1. Collect a (large) sample of allowed traffic
    2. Build a model of the traffic (neural networks, markov models, hidden markov models, etc.)
    3. Use the model to generate traffic between peers
    4. ...
    5. Profit!!!

  52. Our way out by Yogiz · · Score: 1

    So now we're going to have to tunnel encrypted traffic as a payload for non-encrypted traffic? That would work, no?

  53. Trace Buster Buster by EnsilZah · · Score: 1

    Just thought I'd share a video relevant to the discussion: http://www.youtube.com/watch?v=Iw3G80bplTg

  54. Re:Correction... by IGnatius+T+Foobar · · Score: 3, Interesting

    Really, last-mile networks should be owned and run by the neighbourhoods, or failing that atleast be considered infrastructure, really today a working broadband-connection is basic infrastructure like electric power, water, sewage and roads. (it's not -equally- crucial as those, but it's crucial nevertheless, I doubt a house with -no- telecom-connection of any sort would find many buyers)

    The ultimate solution would be to ban last-mile owners from providing any services at all. No voice, no video, no data. They exist to provide copper and/or fiber to subscriber premises, and to operate central offices as colocation facilities. That's all. Nothing else.

    Then, anyone who wants to provide services, simply colocates their head end equipment at the central offices in areas where they wish to provide service. At that point it doesn't matter whether they're offering video, voice, data, local or long distance, Internet or private lines, it just doesn't matter because the central office is shared between as many providers as will fit in the building.

    We need to separate the last mile land-use monopoly from the services being provided. There should be no such thing as an ILEC.

    --
    Tired of FB/Google censorship? Visit UNCENSORED!
  55. My experience by tacokill · · Score: 1

    I did that. And I pay exactly $10 more per month than the residential. I have a SOHO package (small home office, but definitely a "business" account)

    It's the best $10/mo I could have spent.

    You see, I don't deal with traffic shaping, bandwidth caps, blocked ports, or anything else. It's just a standard internet connection. I can download/upload as much as I want and I haven't ever heard a peep from my ISP. And trust me, if I was on a residential account.....I would have heard from them.


    (ps: my ISP is Cox Cable)

    1. Re:My experience by thegnu · · Score: 1

      10 bucks is absolutely worth it. I remember vz being like 15 vs 45, though.

      Still probably worth it, to keep the man off yer back.

      --
      Please stop stalking me, bro.
  56. "Go ahead... make my day!" by Adeptus_Luminati · · Score: 2, Interesting

    You'd think those ISPs *cough* Shaw Cable *cough* would have learned the lesson by now. That lesson should have been wastin... I mean spending, MILLIONS and MILLIONS on products like Sandvine to try to throttle bittorrent only to find out a few months later people were bypassing it with encryption.

    So now some Italians can identify prediction based on packet size etc... watch ISPs spend many more Millions implementing this, then the torrent client software guys simply change 10 lines of code, recompile and voila... Millions down the drain for ISPs!

    So go ahead, make my day! Just don't try to pass off those costs in your monthly bills to me.
    Adeptus

    --
    No trees were killed in the making of this post; however, many trillions of electrons were horribly inconvenienced.
    1. Re:"Go ahead... make my day!" by TheLoneDanger · · Score: 1

      If they are spending millions to throttle, could the case be made to their shareholders that if they had put that money into upgrading their networks instead, that they'd have assets worth millions and be more futureproof as opposed to the current, many millions spent on a lost and increasingly contentious cause?

      --

      "But I trust in the people's capacity for reflection, rage and rebellion." -Oscar Olivera
  57. Solution by BigJClark · · Score: 1


    Solution: proxy. Your computer connects to a proxy, which then disseminates to all of the P2P hosts. That way the ISP only sees one or two connections.

    Wait, the ISP would just have to throttle bandwidth to this server. Nevermind. ^H^H^H

    --

    Hi, I Boris. Hear fix bear, yes?
    1. Re:Solution by IdeaMan · · Score: 1

      Close, but no cigar.

      Set BT to maximum 10 connections.
      Don't change above IPs more often than an hour.

      This would make BT route data less efficiently, however it would be easier for a generic traffic shaper to lower the latency.

      --
      They ARE out to get you simply because They are in it for themselves and they don't care about you.
  58. T-Mobile 3G broadband does this already in the UK by divec · · Score: 1

    You have to pay twice as much to use VoIP (see here). Otherwise, even over a VPN, they detect the statistical signature of the packets and insert a latency which makes VoIP unusable.

    It is definitely statistical, because if you do "wget --limit-rate=2.5k http://huge/file.bin" over the VPN at the same time, the latency doesn't get inserted -- presumably because the overall VPN traffic no longer matches the VoIP statistical signature.

    --

    perl -e 'fork||print for split//,"hahahaha"'

  59. Illegal? by kextyn · · Score: 2, Interesting

    When did P2P become illegal? It seems like every comment on this story talks about P2P like it's evil and needs to be stopped. I pay for an unlimited connection to the internet with a max speed of 30Mbps. I should be able to download and upload legitimate data as often as I'd like. And I do have a computer seeding torrents 24/7 which are completely legal. If Verizon doesn't like the fact that I'm constantly using most of my available upload then they should change the contract to say I can't do it. So far they haven't had any problems.

    1. Re:Illegal? by deek · · Score: 1

      That's exactly right. If a client downloading lots of data costs the service providers, then the service providers should have plans which accurately cover their costs!

      If a user starts costing them money, they can only blame themselves. They obviously weren't charging correctly in the first place.

    2. Re:Illegal? by Ghostalker474 · · Score: 1

      They'd rather blame P2P usage then admit to their shareholders they didn't do the math properly when making the rates for customers.

  60. Re:Correction... by Toll_Free · · Score: 1

    Really, last-mile networks should be owned and run by the neighbourhoods, or failing that atleast be considered infrastructure, really today a working broadband-connection is basic infrastructure like electric power, water, sewage and roads. (it's not -equally- crucial as those, but it's crucial nevertheless, I doubt a house with -no- telecom-connection of any sort would find many buyers)

    The ultimate solution would be to ban last-mile owners from providing any services at all. No voice, no video, no data. They exist to provide copper and/or fiber to subscriber premises, and to operate central offices as colocation facilities. That's all. Nothing else.

    Then, anyone who wants to provide services, simply colocates their head end equipment at the central offices in areas where they wish to provide service. At that point it doesn't matter whether they're offering video, voice, data, local or long distance, Internet or private lines, it just doesn't matter because the central office is shared between as many providers as will fit in the building.

    We need to separate the last mile land-use monopoly from the services being provided. There should be no such thing as an ILEC.

    I was going to reply to the parent, but this would do as well.

    I completely can see and agree with both your points, but take this into account:

    Do you HONESTLY want ANOTHER point of failure Ma Bell can point to when you can't sync with the DSLAM? I mean, another company for finger pointing to occur?

    --Toll_Free

  61. Re:Correction... by Toll_Free · · Score: 1

    Throttling packets to you can increase their ability to provide access to others, since their total upstream capacity is inherently increased by lowering total packets going upstream.

    IOW, lower heavy users throughput, and more users can use said pipe.

    Not what we are paying for, unless your contract states otherwise, but you are getting the internet, they usually have a loophole like you stated (to the best of their ability, and if lowering 1 persons upstream throughput can increase throughput for 3 to 5 more people (and you know they would spin it higher than that), then they are INCREASING THEIR ABILITY!!)

    C'mon, it's simple lawyerese :)

    --Toll_Free
     

  62. Workaround... by Nuitari+The+Wiz · · Score: 2, Interesting

    I wonder if doing
    ifconfig ppp0 mtu 73

    Would bypass that shaping?

    1. Re:Workaround... by failure-man · · Score: 1

      Your router (or TCP stack) would get richly hammered if you tried to do any high-volume traffic, as would your destination and everything in between. Other than that, as long as all your packets were >= 73 bytes, it would work.

    2. Re:Workaround... by failure-man · · Score: 1

      (Yes, I do remember the minimum size of a TCP packet. At least now. In the future. So, no then.)

  63. What about hiding it behind online games traffic? by Anonymous Coward · · Score: 0

    Lots of people play online games every day and they need decent speeds plus ultra low latencies. This may force ISPs to limit or avoid packet inspection, let alone eavesdropping, of traffic once it's categorized as such. AFAIK (I'm not an online gamer) many games already encrypt packet in order to avoid cheating.
    Would it be possible to hide p2p traffic into something identical or very close to online gaming traffic?
    ISPs would think twice before throttling it due to the risks of upsetting too many users.

  64. Just provide local P2P by Pentium100 · · Score: 1

    Where I live, almost all ISPs have their own DC hub and/or FTP server. Since an ISP has more bandwidth in its own network, downloads from local P2P are faster, so a lot of users use this option and do not use international bandwidth. Everyone is happy and "unlimited" connection usually means unlimited (at that max speed what you paid for).

  65. Have we all gone retarded? by AnomaliesAndrew · · Score: 1

    Whatever the price difference, I'd much rather they sell me a guaranteed product, instead of a box of donuts with one donut and 11 mirrors inside. This kind of practice makes me not trust them one bit, and I only use them because they are (imo) a local monopoly (just about everywhere).

    Moving to change school districts: practical.
    Moving to change cable providers: not so much.

    Sometimes I think I'd rather pay for my usage. It works that way for electricity, water, and cell phones... I guess we get screwed even harder in those cases. But at least the electric company doesn't shut off my power when I've left the lights on over night.

    --
    Move all sig!
    1. Re:Have we all gone retarded? by UnderCoverPenguin · · Score: 1

      Sometimes I think I'd rather pay for my usage. It works that way for electricity, water, and cell phones...

      Except that then you'd also be paying for all those ads. I suspect that one of the larger reasons ISPs have not switched to metered connections is pressure from the big internet advertising companies.

      --
      Don't try to out wierd me, three-eyes. I get stranger things than you, free with my breakfast cereal. --Zaphod Beeblebr
    2. Re:Have we all gone retarded? by Ciarang · · Score: 1

      At the risk of stating the obvious, what ads?

  66. Seriously... by V!NCENT · · Score: 0, Flamebait

    Is there actually anything good going on in the US these days? It sounds like every day there is less privacy, more corruption, less rights, more 1984.

    --
    Here be signatures
  67. Re:Correction... by Tubal-Cain · · Score: 1

    Do you understand that they believe you owe them and that they're just being nice guys for "improving" your online experience. And in the process making it easier for grandparents to download pictures of their ugly grandchildren.

    And in what way are they obligated to our money without having to provide the agreed-upon service?

    This isn't supposed to be a tax.

  68. Maybe Rude protocols are the cure by John+Sokol · · Score: 2, Interesting

    I worked on implementing Error correction codes over IP some time back http://www.ecip.com/

    This is what we would call part of a family of Rude protocols that would do reverse Throttling.

    All of these ISP are counting on TCP being polite, but it's also counting on the network being passive or at least polite as well.

    In our case we originally implemented ECIP and SPAK when we had a 100KBPS video stream and 99KBPS gave us nothing but garbage. Since video is all or nothing. http://www.videotechnology.com/jessem/all_or_nothing.html

    But with ISP taking a hostile approach, application writers could also start talking a more aggressive approach in a sort of arms race.

    I know everyone has been afraid of this, but I feel that this is indeed a necessary step if some sort if truce is to be reached between USERS and their ISP's. Right now we are really fighting over our rights on how we can use the "last mile" since it's all now been consolidated into the hands of only a few companies. We have already lost our ability to choose and market freedom.

    --
    I am always doing that which I can not do, in order that I may learn how to do it. - Pablo Picasso
  69. Re:Correction... by Sapphon · · Score: 1

    a Tbps or thereabouts ... is more than most people need for the next few decades

    Bill? Is that you?

    Retirement's tough, buddy, but that's alright. Slashdot is here to listen. Judging by your UID you've been here a while (the Gmail address is a nice red herring, too).

    --
    Antiquis temporibus, nati tibi similes in rupibus ventosissimis exponebantur ad necem.
  70. Open letter to ISPs by Anonymous Coward · · Score: 0

    SMTP Email is now useless as a result of all the countermeasures you ISP people added. Your systems now have no problem silently discarding legtitmate corrospondance.

    The end result -- today we are blessed with both loosing legititmate messages and more SPAM than ever reaching our mailboxes.

    Have we learned our lesson? Apparently not.. now we have people blocking RST and going down the same unwinnable road with stupid hueristics on P2P.

    Did it ever once occur to you that this is just an evolution of war that at the end of the day everyone looses? Whats to stop P2P clients from implementing their own huerestic which detects the onset of P2P throttling supplying random trial and error methods to adjust packet length, spacing and connectedness until their bandwidth returns?

    If usage patterns of the few Internet 'power users' are unaccepptably disruptive than for the love of god you need to change your access plans so that they more closely match the true cost of service!!!

    For example uniform bandwidth limits or dynamic bandwidth limits which kick in after a user has been downloading z bytes consequtivly for x hours. Whatever you do just make sure it can be codified in a way the user can understand and accept up-front.

    Until computers are smarter than humans your a retarded idiot if you believe for a second that technology will ever effectivly put a damper on human intent.

  71. Threat to national security anyone? by Anonymous Coward · · Score: 1, Interesting

    I know ISP's can be lousy with tech support, or terrible when it comes to hiding their connections to politicians... but can anyone really look at this and tell me what the real problem is here? In America, the best products usually replace the old and out dated... Not so with the broadband market. Why? Should we not have networks that allow our governments quick access to outside sources? Forget the Federal Government for a second and think about the local governments running off of podunk ISP's out in the boonies. Now let's say you have a county tax system that's trying to send records to a backup server at a datacenter hundreds of miles away. Without a reliable, heavy connection running encrypted packets, SSH or whatever (not an expert... just trying to keep up), it would seem that local governmental institutions would only be further pushed into unsecured networks. Common!? We should be screaming out to all the IT staff out there that these attempts will lead to more identity theft, more security breaches! It seems that the security of the less tech savy has become somewhat of a joke with microsoft security updates that crash 9/10 computers, zero day virii that will never be patched, local priv escalation that almost never gets detected in office environments... Sheesh! What next, Y2k+8+x where x is the number of years until we all are completely replaced by russian teenagers and chinese military agents?

    On a serious note though... Can we stop compromising service in the name of money? Our future, and our children's(probably not the children, more like our elderly) futures depend on the developement of stong infrastructure. Please don't think I'm foolish in choosing the obvious side of this debate. I can see it from the other side as well. ISP's don't want to pay for what they think should come out of customer's pocket... Well that would be fine with an industry like electricity (pay for what you use), but honestly, when was the last time someone stole your financial records through your 110V? For the very providers to be hacking the customers just seems unamerican, dishonest, and greedy. Are we not entitled to privacy on our own home network? Are we not protected by innocent until proven guilty? I want higher bandwidth yes. Do I want to have my porno torrents packet sniffed because there may or may not be copywritten ass in a scene or two? Hell no. Sorry, I said serious... The only serious thing I have is serious delerium... Reading a story like this in 2008? (Walks off mumbling, cursing under breath in a futile attemt to locate alcohol and networking cable)

  72. We need net neutrality now by Eravnrekaree · · Score: 1

    This is more reason for Net Neutralityin law. Anyone who does not support net neutrality seems to want freedom of speech to be taken away from them and wants to live in a fascist totalitarian dictatorship like china. If we want net neutrality we need to elect people who support it.

    1. Re:We need net neutrality now by freedom_india · · Score: 1

      True. Each day it moves away from the common man to transmit and receive files via torrents, esp Linux updates and legal files.
      Net Neutrality should not only be established but rigorously policed. No friggin' "Settlements" for violations. Plain State Jails (Federal jails are too nice) for those a$sholes who violate it. Once AT&T CEO is convicted and sentenced to 10 years (similar to copyright violations), then suddenly you will see Telecoms rushing to bleat they are Net Neutral. Hell, some of them will go one step further and tell RIAA/MPAA to screw off when approached.
      Sigh... that is my dream. In practice, Obama will capitulate like he did for the Spying bill and end up opposing Net Neutrality.

      --
      "Doing what i can, with what i have." ~ Burt Gummer
  73. Re:Correction... by IGnatius+T+Foobar · · Score: 1

    Do you HONESTLY want ANOTHER point of failure Ma Bell can point to when you can't sync with the DSLAM? I mean, another company for finger pointing to occur?

    Who cares? If my plan were implemented then there would be no such thing as Ma Bell. If it were really really easy to switch to another carrier in the same central office, they'd have to work harder to keep your business.

    --
    Tired of FB/Google censorship? Visit UNCENSORED!
  74. Re: Italian researchers have also found a way to.. by Koiu+Lpoi · · Score: 1

    Deep Mario Brother Inspection

    I just got an image of Mario Goatse, thanks.

    *shudder*

  75. Re:Correction... by Hawkeye05 · · Score: 1

    And in what way are they obligated to our money without having to provide the agreed-upon service?

    This isn't supposed to be a tax.

    I'm on your side, i was just trying to see it from the ISP's twisted perspective.

    --
    Http://Stineomite.org (Yeah Thats Right I'm An Organization)
  76. Good! by maillemaker · · Score: 1

    That'll go over like a lead balloon as soon as the first worm comes out that looks for other infected boxes and begins exchanging the contents of /dev/urandom with them.

    Maybe, just maybe, once these things start to cost people visible cash, people will start going after the people responsible for them. Maybe they'll even penalize people for not securing their systems sufficiently.

    --
    A work that expires before its copyright never enters the public domain and thus enjoys eternal copyright protection.
  77. That is what you should expect, but... by kandresen · · Score: 1

    How can you tell that the ISP is not throttling for entirely different reasons? - Lets say due to agreements with Blockbuster to cause all competitors to appear crappy for live video streams, cause all bit torrent traffic to be be limited as agreements with Hollywood/RIAA/etc? To limit competition making sure smaller ISP's cannot provide better services than the bigger ISP regardless if the smaller one in fact have better infrastructure in place for a community?

    A non-neutral net just screams "abuse me".

  78. Sue Them by Anonymous Coward · · Score: 0

    Are any bittorent/p2p organizations making any headway in court cases against this practice? They're throttling these guys while preparing their own pay-to-use download and internet TV services for release. Not to mention their plans to stomp the internet into a tiered subscription package(image). Is this not illegal?

  79. Ping vs. Datarates by davinc · · Score: 1

    Most people don't need insane data rates, they just need good response times. Online gamers and web browsers don't need to sustain 1.5MBPS. I'm not entirely certain why ISPs don't just lower data rates and focus efforts on responsiveness. And frankly as a P2P user, I don't even need most of the bandwidth available to me.

    My life won't end if I have to wait an hour to D/L BSG rather than 10 minutes.
    In my uninformed opinion.

  80. Re:Correction... by celle · · Score: 1

    There is no market in a monopoly environment. That's why ISP throttling is bullshit. They have been already paid to expand the network to provide what's needed so do it already. They're just greedy.

  81. What you think as P2P... by Khyber · · Score: 1

    may in fact be me using something fairly bandwidth-intensive, like, oh, Camfrog with the ability to view 100 live webcams at once while I stream my own?

    Sorry, your "Just look at it" idea is horrifically flawed.

    --
    Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
    1. Re:What you think as P2P... by TheLink · · Score: 1

      Whatever you want to call it, P2P, camfrog, if they notice you're actually eating a lot at the "all you can eat buffet" you paid for, they'll stop you.

      You think comcast has a problem with P2P just because it's "Peer to Peer"? I don't think so.

      It's horrifically flawed because it won't just stop P2P, but it'll stop all those who are getting in the way of Comcast providing less service for more money.

      Of course, what those ISPs should do is actually make good on their promises they made in return for the USD 200 billion they took. But who is going to make them?

      --
  82. I have a program that eats far more bandwidth... by Khyber · · Score: 2, Informative

    It's called Camfrog. Look into it. I can saturate my connection down and up running a Camfrog server faster than I can torrenting the most popular Linux distro. It would look just like P2P traffic too.

    I'd love to see them throttle my $200 Camfrog Pro server. The lawsuit for doing so and saying that it's 'illegal P2P' traffic would get them so owned in court.

    --
    Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
  83. SIGN OFF and strike by Anonymous Coward · · Score: 0

    Cancel your interwebs account and tell the provider why...in very expletive terms.

    The providers can't exist without the users...and nerds are the top users. If we drop off line and boycott providers and suppliers, then the profits plummet, some CEO with his/her head up ass might take notice.

    AN international strike of IT workers would surely get attention on a scale never seen before...that is if the interwebs worked while we went on strike...

  84. Money rules by Anonymous Coward · · Score: 0

    This is the result of money being the most important goal, rather than high-function society.

  85. So SSH and whatever VPN sucks by gd23ka · · Score: 1

    So in order to defeat this analysis packets need to be padded
    and randomized. But tell you what we'll implement that _after_
    they invest.

  86. net neutrality - give your heads a shake by Anonymous Coward · · Score: 0

    when through political and legal maneuvering the corporations gained limited legal liability and gained the same rights as human beings ..

    and

    as long as corporations are sociopathic and criminal by design because of this fact .. and are allowed by the people to exist in their current fashion .. this is and will continue to be a private planet .. controlled and owned by those who own and control the large corporations .. there is and can be no neutrality of anything anywhere .. they can always buy of enough wage slaves to do their dirty work as there aren't enough of them to do it by themselves .. although with recent technological advances they are getting closer ..

    and if you have not done the math .. they have .. the earth is probable capable of providing an average north american life style to about 1 billion people .. which means that 6 out of 7 of us needs to be killed off .. are you really naive enough to believe that you or anyone who frequents /. will be one the lucky ones .. they will let live to be their wage slaves ..

    the ruling class .. the owners of planet earth .. will and are really going to start going after the average america and anyone else of the common class from first world countries .. as they all have way to much of a sense of entitlement .. they have out lived their usefulness and are not serving their interests anymore .. they will keep people from the third world who will be grateful for a chance a being a wage slave and to have a chance at the american dream ..

    corporations and their owners will do what ever the fuck they please ..

    the day that corporation gained limited legal liability was the day the war for planet earth was over .. they have won .. all that is left are the skirmishes by those foolish enough to believe the have some right to life .

    evil has won .. for as be good book says satan has dominion on earth .. this is a private planet .. get it.. and if you don't think that true just do the math ..

    unless the people stand up and remove the power and status of human beings .. that has been granted to the corporations by the power of "the rule of law" .. that's just about the most common phrase or some variation there of .. that you will hear in the political arenas around the world these days "the rule of LAW" it's a DONE DEAL ..

    unless and until that happen ..

    it is ALL just more news speak ..

    and please stop calling a political system that is 50% +1 .. to be called anything but what it is .. a dictatorship .. IE. one person get to decide what is going to happen .. 50/50 is nothing but as state of WAR or a mexican standoff .. anything less than a 67% majority just doesn't cut it .. and even then you are still divided 2 to 1 .. no great state of agreement .. you would have to be at a least 85% for me to consider it's democratic ..

    endless war .. war .. war .. war .. WAR=We Are Right .. until the culling is done ..

    it's all just endless words ..

    words .. words .. words .. endless meaningless words ..

  87. Easy fix by Krneki · · Score: 0

    Provide a lousy service like Telefonica in Canary Island. Make internet stop as soon as you start torrents. This will teach something to those Pirates! YYaarrr!

    --
    Love many, trust a few, do harm to none.
  88. Re:Correction... by Toll_Free · · Score: 1

    No they wouldn't. That's utopia and it wouldn't work.

    Ma Bell won't go away, they shouldn't have to. Just because YOU want faster internet doesn't mean they have to cease to exist because in YOUR business model they can't make a living.

    I mean, I'm all for net neutrality, save-a-hoe, etc., etc., etc.... But c'mon, to expect Ma Bell to just give up infrastructure they put in.... Yeah, right.

    --Toll_Free

  89. 90% accuracy? by deek · · Score: 1

    If 90% of all internet traffic is associated with P2P data, then surely a box which throttles all internet traffic would have 90% accuracy.

    My goodness! I think I've discovered a new business opportunity! Now how did that Profit meme go again?

    (Unfortunately, I think spam mail upsets my traffic estimates. Damn those spammers and their estimate curtailing ways!)

  90. Trying harder to obscure the nature of traffic by Douglas+Goodall · · Score: 1

    In the government/military world, the traffic must be obscured so that the frequency and characteristics of the traffic does not reveal anything to the infidels. This could mean sending spurious packets intermittently or altering the size of the packets randomly. Both of these alterations increase the traffic on the net with only security to gain. If a large percentage of the users used an obscuring protocol, the load on the Internet would be increased.

  91. Last Resort by Anonymous Coward · · Score: 0

    How about as a last resort, have an army of hackers hack the ISP's, throttle it all to near-max, keep it at this level permanently, then utilize the power of the hacked servers to throttle other servers. Even if all it does is crash the servers; it will present a strong message to service providers wanting to utilize any throttling of their traffic.

  92. Re:Correction... by Eivind · · Score: 1

    Nah. I'm not BillG. Though that'd be helpful seeing the house-prices in the Stavanger area, but I digress...

    The fibre is bog-standard. I could be wrong offcourse, and people could start using bandwith more quickly, but I feel pretty confident I'll be proven right; a Tbps or thereabout WILL be sufficient for the next few decades.

    Today 10Mbps, 25Mbps and 100Mbps (symetrical, equal up and downlink) is offered on the fibre. Nearly everyone goes for 10Mbps, because there's just not many applications where it's worth paying extra to have a 100Mbps link at home. (I understand that by US standards, even 10Mbps is a lot)

    If bandwith-demand grows by 50% a year, then it'll take 25-30 years before the Tbps-capcaity of the fibre becomes a problem. And frankly, I think that progress will slow down before that anyway. For natural reasons, such as once you can stream a couple of full-res HDTV-channels to every inhabitant of the house, perhaps demand for even more bandwith will slow ? Time will tell.

    If the TBps -does- prove problematic, we've thougth ahead: We installed the fibre in a... uhm.... "tubes", and we've got drawstrings in the tubes, so we can easily and cheaply put in more fibres or whatever becomes the norm after single-mode-fibre is obsolete.

    The scary thing is, I'm sorta joking, a Terabit pro second sounds like a metric shitload to me. Still, it's not a good bet to say "X will be always be enough" even for what seems like large values of X.

  93. Re:Correction... by Eivind · · Score: 1

    Agreed.

    It's a total illusion that one can have any kind of free competition on a playing-field where one of the players OWN the fucking field.

    It gets worse when the same company owns the last-mile-copper, acts as an ISP --- AND is a content-producer on the Internet.

  94. the alternative by smash · · Score: 1
    Ok, shaping is bad, yadda yadda...

    AS someone who's been an admin for an ISP here in Australia the other side of the coin is that shaping allows you to improve performance for critical apps. If you want an un-shaped, business grade connection, sorry but you need to pay for it. The only reason consumer grade internet access is so cheap is because its generally over-subscribed by re-sellers. Stuff like bit-torrent, and users who are attempting to mirror the internet have unfortunately broken that model, hence shaping to try and regain some sort of acceptable interactive performance. Without shaping your interactive performance will suffer.

    If you want un-shaped, committed data rates, your bandwidth is going to cost more, its pretty simple.

    --
    I run: Windows, OS X, Linux, FreeBSD. Just because you have a hammer, doesn't mean everything is a nail.
  95. Re:Correction... by Richard_at_work · · Score: 1

    We British seem to get along fine, with BT owning the last mile, the exchanges, the regional pipes and also being a content producer on the internet - I can take my ADSL service and go to any one of over 200 ISPs and get wildly varying levels of service for wildly varying prices.

  96. Telecom by Undertone · · Score: 1

    BT throttled out internet last week because we exceeded their irritating "fair usage policy", meaning we used bittorrenting, but my dad rang them up, threw a false fit about needing the bandwidth for vidio-conferencing, and now we're back on full-speed, unlimited usage! I'd highly recommend lying.

  97. Anonymous Coward by Anonymous Coward · · Score: 0

    Am I the only one that would admit to using P2P for unethical purposes? Note that I won't say illegal because that word is too murky, but enjoying the fruit of someone's labor w/o compensation or permission is certainly unethical (on the other hand so is charging unreasonable price for questionable products).