Slashdot Mirror


AT&T Blocks Part of 4chan

holdenkarau writes "Several news sources (Mashable, The Inquistr, etc.) are reporting that AT&T is blocking img.4chan.org in the southern United States. That server is used for the infamous /b/ board (the home of anonymous). TechCrunch calls the decision to block 4chan 'stupid,' noting that they may have 'opened perhaps the most vindictive, messy can of worms.' The Inquisitr suggests that 'The global internet censorship debate landed in the home of the free.' moot (who runs 4chan) asks users to call AT&T, while some others suggest more drastic action (like cutting AT&T fiber)." Update: 07/27 09:23 GMT by T : Readers' comments below suggest that a) the purpose of the block was to curtail the effects of a serious DDoS attack and b) that the block has now been lifted, at least for some regions.

43 of 342 comments (clear)

  1. Before we act too hastily.. by jx100 · · Score: 5, Informative

    http://www.merit.edu/mail.archives/nanog/msg19609.html

    The president of unWired (a much more reputable ISP) has also blocked the same server. A DDoS was apparently attacking said server which wast travelling over both lines. According to this post, the block was due solely to stop the DDoS.

    1. Re:Before we act too hastily.. by Calydor · · Score: 5, Interesting

      So to stop a DDoS attack on a server, they remove any and all access to that server?

      Am I the only one seeing the irony here?

      --
      -=This sig has nothing to do with my comment. Move along now=-
    2. Re:Before we act too hastily.. by toejam13 · · Score: 4, Insightful

      But, we've already sharpened the pitchforks and lit the torches.

      What are we supposed to do now?

    3. Re:Before we act too hastily.. by partyguerrilla · · Score: 5, Informative

      I don't know how credible this is http://img193.imageshack.us/img193/2523/1248672053880.png But the IP specified there is the same for http://img.4chan.org/

    4. Re:Before we act too hastily.. by dotgain · · Score: 5, Funny

      Well, I'd reverse the polarity of the main deflector dish, of course

    5. Re:Before we act too hastily.. by KDingo · · Score: 5, Informative

      I was confused until I read this.

      http://mailman.nanog.org/pipermail/nanog/2009-July/012198.html

      If IP source headers are spoofed to somewhere else, say to AT&T networks, it makes sense to block them

    6. Re:Before we act too hastily.. by fireman+sam · · Score: 5, Funny

      My God man, are you insane? That would be like crossing the streams and I don't mean like Ghostbusters, more like broke back mountain.

      Slow day

      --
      it is only after a long journey that you know the strength of the horse.
    7. Re:Before we act too hastily.. by dgatwood · · Score: 5, Insightful

      You don't haul a girl off to jail if she was raped do you?

      That's clearly an attempt to draw an analogy, so it really isn't as offtopic as it sounds. And yes, in the case of repeated rape of the same girl by the same person, you might. It's called protective custody.

      In this case, though, AT&T almost certainly isn't doing it to protect 4chan's server. I'm sure they couldn't care less about that. They do, however, care about the huge zombie botnet on their network that is probably racking up huge bandwidth bills for them with their upstream providers.

      --

      Check out my sci-fi/humor trilogy at PatriotsBooks.

    8. Re:Before we act too hastily.. by Opportunist · · Score: 4, Insightful

      If they REALLY cared about what a zombie botfarm AT&T has become, they'd start cutting the users that allowed their machines to turn into spam- and DDoSbots. Instead they block access to a server. And not to protect this server, because of the very nature of the attack, AT&T bears the same if not the higher load of the DDoS.

      They don't give a shit about hosting a zombie botnet. If they did, they'd cut their users, but that in turn would cause angry phone calls to their support center and a lot of canceled contracts. Instead, they block a server to all their customers, along the "can't see it, so it's no problem" theory.

      The zombies still exist. And prepare for the next server to attack. *pondering*... Hmmm.... If I wanted to disallow AT&T users into a server, could I order a DDoS attack? I mean, if it was AOLlers it would be a no-brainer...

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    9. Re:Before we act too hastily.. by sortius_nod · · Score: 4, Insightful

      Unfortunately the very nature of communications is a war of control. If it's not wrestling the control from governments, it's about controlling users.

      AT&T are well known for blanket bans, especially when it comes from reverse NDR attacks. The idea of having low cost human infrastructure working on one of the worlds largest commercial networks is one of the silliest ideas around.

      The only people with any sort of expertise seem to be pushed out with redundancies, etc, by the upper management, and all you're left with is lackies getting paid enough to keep them working, but not enough to make them excel and executives that care more about golf. This pretty much makes any real network security or decent policy impossible.

      While I don't like what's happening, I can understand it. It's all about the cheapest near sighted avenue. The accountants and executives only see short term benefits of actions like this. They're unaware that the impact both on brand and network performance is far more of a negative impact to revenue than any single DDoS can have.

      Pretty much AT&T need to clean their act, network and image up or they'll end up in an irrecoverable position.

    10. Re:Before we act too hastily.. by MaskedSlacker · · Score: 4, Funny

      Pick an ethnic minority and have a party?

    11. Re:Before we act too hastily.. by ssintercept · · Score: 5, Funny

      Finally, ATT sucks. Track their employees leaving the stores and beat the shit out of them, then vandalize their vehicles. Fuck man, it's obvious that they're a front for government spying. When their medical bills are greater than their paychecks and government stipends, the domestic spying will end.

      finally, a rational, well thought out comment that is on topic and offers a solution.

      there is nothing more to add to this discussion.

      --
      "You can kill the revolutionary, but you can't kill the revolution."-- Fred Hampton
    12. Re:Before we act too hastily.. by h4rm0ny · · Score: 3, Insightful


      There is such a thing as orgasm during non-consensual sex. It can be very traumatic and confusing for the victim causing them to question themselves. It has been particularly damaging for children who were abused to have had their first orgasms the result of forced sex. Your implying that sexual stimulation indicates volition is very incorrect. Might as well say that the release of endorphins following physical pain indicates that the injured chose to be hurt.

      The study you linked to about increased chance of pregnancy under rape is innaccurately characterised by yourself as saying "twice as likely". The article you linked to [b]doesn't[/b] say that rape increases the chance of conception (by any amount). It discusses the controversy over some research on the subject. Research, incidentally, that has many factors uncovered. It compares conception rates from casual, consensual sex with rape and it is very far from conclusive. For example, it makes the assumption that a woman is more likely to engage in casual sex when she is most likely to conceive. What is the basis for this assumption? It could just as likely be possible that women are less likely to do so - after all, human beings are one of the few species that uses sex as a means for a female to attract a male even when the female is not fertile. What makes more sense than to see if someone is a good partner first, with less risk.

      And yes, though highly unusual and doubtless under-reported, there are cases of female sexual abuse of males (no, not for payment).

      Finally, regarding the beating up of AT&T employees, should you not be going after the senior execs rather than the phone monkeys? Or do you just go for easy targets?

      --

      Aide-toi, le Ciel t'aidera - Jeanne D'Arc.
    13. Re:Before we act too hastily.. by j-stroy · · Score: 5, Funny

      /b/tard: What happen ?

      /arcanine/: Somebody set up us the null'd packets.

      moot: We get signal.

      /b/tard: What !

      moot: Main screen turn on.

      /b/tard: It's You !!

      AT&T: How are you gentlemen !!

      AT&T: All your internets are belong to us.

      AT&T: You are on the way to Great Firewall of North America.

      /b/tard: What you say !! You'd best be trollin'

      AT&T: You have no chance to survive make your time.

      AT&T: HA HA HA HA ....

      /b/tard: Take off every 'anon' !!

      /b/tard: You know what you doing.

      /b/tard: Move 'anon'.

      /b/tard: For great justice.

    14. Re:Before we act too hastily.. by Megane · · Score: 4, Insightful

      So the problem isn't AT&T, and the problem isn't really even the users (or more likely zombie bots) who are DDoSing AT&T, the real problem is the networks that are allowing the spoofed packets out. Because if you receive an IP packet from an end user with a source address that's not from your network, you should assume that it came from a new legitimate routing path and forward it right up. Because it's normal for your end users to set up crazy routing without even having an AS.

      A big problem on the internets is ISPs that are run by idiots or assholes who don't understand (or care about) basic TCP/IP etiquette. It's not just spoofed packets, it's also spoofed BGP announcements. And freely allowing outbound port 25 access.

      (I noticed recently when I was setting up and testing SMTP auth on my own mail server that AT&T apparently now blocks outbound port 25 for dynamic IP users, hooray for them. It still works from my AT&T static IP, though.)

      --
      #naabhaprzrag, #sverubfr-000, #agi-fcbafberq, negvpyr[pynff*=' negvpyr-ary-'] { qvfcynl: abar !vzcbegnag; }
    15. Re:Before we act too hastily.. by rezalas · · Score: 4, Informative

      This is the very reason at the ISP I work for we cut our user's access to the net once we discover they are spamming/botting/flooding anyone for any reason. We block them off, mark their account, and notify them by phone of why they lost internet access. Once they notify us they've had their PC cleaned we allow them access again. If they do it again though (and we monitor their bandwidth usage for two weeks to be sure they didn't miss something) we require them to bring in a receipt showing they had their PC cleaned by professionals and that they have antivirus before turning them on again. AT&T (if they really are attempting to protect them... which is likely BS) made the poor choice. We receive notification from AT&T when our customers SPAM or flood anyone about how they'll blackhole their IP if we don't stop them (effectively costing us an IP until we fix it), so I know they have an automated system for dumping individual attackers into a block list without interaction from us. This just seems like a power play to eliminate a server they don't particularly like.

    16. Re:Before we act too hastily.. by clone53421 · · Score: 4, Informative

      If I was using your ISP and was told I had to "bring in a receipt as proof that my PC was cleaned by a professional", I'd laugh and ask for my account to be canceled, right after that.

      That's on the second offense. The first time you're only required to inform them that it's been cleaned. If you're successfully able to clean it yourself, you won't have the requirement of showing a receipt from a professional. If you're unsuccessful in cleaning it or you get re-infected shortly thereafter, you obviously need help.

      In his exact words, on the first offense, service is restored "Once they notify us they've had their PC cleaned"; if it happens again, "we require them to bring in a receipt showing they had their PC cleaned by professionals and that they have antivirus". Not all too heavy-handed, really.

      In fact, severa of my very computer-savvy friends have managed to infect their PCs [...] someone decided to infect the self-extracting .EXE file that extracted the multi-sgement .RAR files they downloaded.

      Self-extracting RAR archives? Some free advice: The safe way to extract them is to open them in WinRAR and extract them like you would normal archives. That way if the self-extracting executable part is infected it won't affect your machine because you aren't ever running it.

      most people I know who use their computer enough to order broadband Internet in the first place own SEVERAL computers, typically networked together at home - it's not at all inconceivable they'd clean ONE machine, only to find out a second one was causing some/all of the spamming or flooding issues

      More free advice: clean the one you use for porn. ;P

      --
      Alexander Peter Kristopeit bought his basement from his mommy for one dollar.
    17. Re:Before we act too hastily.. by rezalas · · Score: 4, Informative

      First off, I think you read too far into some of my statements and this is possibly upsetting you a bit too much. I've been in this business for a while now, and believe me when I say that the last thing I want is to alienate my customers; in fact unlike many ISPs we don't even care if you are hosting a server from your home; we merely request (quite reasonably) that if your PC becomes infected you clean it for the safety of our other customers.

      If you do on-site service then I'm certain you understand that whatever you have on your PC is your responsibility and thus making you liable for damages caused to others. By requesting our customers have their PC checked and cleaned/repaired by a professional on the SECOND (not first) offense we are attempting to help both the user (who may have been ignorant of the trouble being caused) and everyone else. If you noticed, I didn't state that we sniff packets or persecute them; we merely require that they be responsible users when accessing our network. Out of the possible hundred times I've done this not a single time did a user get angry; quite the contrary actually. I receive thank you letters (twice actually) or emails (a few) that they are happy we're looking out for them. As a service we also offer free antivirus to our customers upon request (though I usually suggest downloading something like Avast so they don't have to deal with licenses through us).

      If you find our tactics heavy handed or obtrusive then I think you might have a skewed and excessively open expectation of what should be allowed on a network. In the end, no matter what people say about "net neutrality" and carrier immunity ISPs will still blackhole each other for not controlling their user base when it comes to attacks. I think the proactive approach we take with our customers is more personal and effective than other options out there.

  2. Looks like the block was lifted by yamamushi · · Score: 4, Informative

    As of 1am CST, it looks like the block is beginning to be lifted : http://encyclopediadramatica.com/AT%26T_Blocks_4chan#THIS_JUST_IN I can confirm access to img.4chan.org open from the Austin/South Texas area now, whereas it wasn't about an hour ago.

    --
    - Aetheral Research -
    1. Re:Looks like the block was lifted by Anonymous Coward · · Score: 3, Informative

      You're an idiot... obviously there was a DOS going on. http://status.4chan.org/index.html#1567027617431107851

    2. Re:Looks like the block was lifted by Gravedigger3 · · Score: 3, Interesting

      Its not about 4chan, its about censorship. By ignoring this kind of thing we would only let ATT know that they can get away with it. I never visit 4chan but if it turns out that ATT really was trying to censor them then this story deserves all the publicity it can get.

      Of course if it really was just ATT's way of responding to a DDoS attack then perhaps everyone overreacted.

      --
      All you touch and all you see is all your life will ever be. -PF
  3. Hooboy... by IonOtter · · Score: 4, Funny

    This is going to be beyond epic. There's going to be movies made about this a hundred years from now. (It'll be a comedy/tragedy either way, or more probably both)

    --
    [End Of Line]
    1. Re:Hooboy... by Anonymous Coward · · Score: 4, Funny

      The movie will be banned in all 63 states for being approximately 2 hours of child porn strung together with scat jokes.

    2. Re:Hooboy... by JWSmythe · · Score: 4, Funny

          6 states? We have Oceania, Eurasia and Eastasia. What are the other three?

          I was completely thrown by that silly concept of 63 states. According to all the history books I've read, there have always been 3. I already verified this with the RecDep of Minitrue.

      --
      Serious? Seriousness is well above my pay grade.
  4. What is the real problem? by BadAnalogyGuy · · Score: 4, Interesting

    The question is whether 4chan is the real problem or the reaction to 4chan is. /b/ is what it is and has been for quite a while. And the American Southern culture also has roots that go back at least 300 years. So in a battle for legitimacy, which one should take precedence over the other?

    We can talk about freedom of speech and such, but /b/ is home to content that is occasionally over the line illegal. On the other hand, only those who would actually seek it out would even know about it, so it doesn't make sense to "protect" the fair citizens of Hillbilly Valley by blocking the site.

    Raymond Bradbury wrote about this in his seminal work Farenheit 451. Once we start allowing the minority to exert power over the majority in the name of fairness and protection, we lose a critical pillar of our society. Censorship is the first step, but later it will be outright censure.

    Let's let that which is illegal stay illegal, and give everyone the benefit of full access, even if they don't want it. But I'm not from the South, so my cultural background doesn't lead me to the conclusion that censorship is better than freedom.

  5. Simmer Down Now. by ibaboon · · Score: 5, Informative

    The block is gone. It was for 4chans own good. They have been DDoSed for weeks. AT&T just stopped access for a short bit. Settle the heck down.

  6. Idiots by dbcad7 · · Score: 4, Insightful

    while some others suggest more drastic action (like cutting AT&T fiber)

    And eliminate ANY kind of access for themselves, and others who could care less about their problems.. Just as smart as having riots, burning down the grocery stores and then having no place to buy food.. Destruction as a form of protest only hurts themselves and other innocents.

    --
    waiting for ad.doubleclick.net
    1. Re:Idiots by DerekLyons · · Score: 4, Insightful

      Nobody ever claimed the /b/tards were smart. Clever, created, talent, energetic - sure. But not smart.

    2. Re:Idiots by Fex303 · · Score: 5, Funny

      Destruction as a form of protest only hurts themselves and other innocents.

      "Other innocents"?

      You've never actually visited /b/, have you?

  7. Re:Net Neutrality by Anonymous Coward · · Score: 3, Funny

    First they came for the 4chan members, and I did not speak out,

    because I did not want to be labeled a child molester.

    Then they came for...

  8. Wrong way by gmuslera · · Score: 5, Funny

    There are smarter ways to disable 4chan, like this one

  9. Re:Net Neutrality by SmarkWoW · · Score: 5, Insightful

    I'd just like to point you to a few links explicitly discouraging users from taking illegal actions against this:

    ED Article Excerpts:
    "1. DON'T FUCK WITH THE LAW- We want to first make use of the rights we have, censorship is violating our rights."
    "Acting like an idiot and trying to DDoS them will only end with you being persecuted (and/or prosecuted), and your actions being used as a justification."
    "This battle is one we have to fight legally..."
    "DO NOT RAGE ON THESE PHONE NUMBERS, SIMPLY COMPLAIN ABOUT THE ISSUE!"

    Insurgen Article
    Excepts:
    "Acting like a retard and trying to DDoS them will only end in them going [A QUOTE]"
    "Don't try to DDoS or do ANYTHING illegal or legally ambiguous to AT&T. This is a corporation with more resources, manpower, and preparation than anything you script kiddies have ever dealt with. You will be caught and prosecuted. Go through legal channels and reverse this using legitimate means."

    Those are just the ones in the windows I have open.

    Obviously there is no way to force someone not to do something, but the intentions are to solve this without any "damages".

    Thanks,
    Smark
    SpectralCoding

  10. ACK Attack by iYk6 · · Score: 5, Informative

    So to stop a DDoS attack on a server, they remove any and all access to that server? Am I the only one seeing the irony here?

    The post you responded to is misleading. According to this: http://img193.imageshack.us/img193/2523/1248672053880.png, this was an ACK attack, which causes problems not only for the directly attacked host, but for other users as well.

    Ordinarily, a TCP connection is set up when you send a SYN packet to a website, such as 4chan, and then 4chan responds with a ACK, and then you respond again with a SYN-ACK.

    Here is how an ACK attack works. I, the attacker, will send a SYN packet to 4chan, but I am pretending to be you, or your IP address. 4chan then sends an ACK packet to you, excepting a SYN-ACK in response. However, you did not initiate the connection, so you send a RST back to 4chan (or nothing at all, depending on your firewall settings).

    Then I do it again. And again. I effectively flood both you and 4chan with meaningless traffic. Your traffic problems are even worse, because if you have a firewall blocking the RST packets, then 4chan will send you 4 ACK packets (depending on configuration) for every SYN packet I send them.

    In this case, AT&T and other ISPs decided that the simplest solution to ending this DOS against their users was to block packets to and from 4chan (or a specific part of 4chan).

    1. Re:ACK Attack by dublindan · · Score: 3, Interesting

      I'm in favour to transitioning away from TCP/IP towards SCTP/IP personally. Any future network code I write will be based on SCTP instead of TCP, if I can get away with it. :-P Not only is it more resilient to SYN flooding than TCP is, but it gives me other nice possibilities like multiple streams per connection, multi-homing, the choice of ordered or unordered and the choice of reliable or unreliable. The disadvantage being that its not as widely used, so there may be some associated issues, though Linux, at least, does have SCTP support out of the box :-)

  11. Re:Net Neutrality by lgw · · Score: 5, Funny

    I don't think AT&T would care too much of the opinion of a group of 15 year olds.

    Only a complete moron would sell an entertainment pipeline into American homes and not care about the opinion of a group of 15 year olds! So, yeah, you're probably right.

    --
    Socialism: a lie told by totalitarians and believed by fools.
  12. Re:Net Neutrality by Opportunist · · Score: 4, Insightful

    If you don't care about the opinion of people who have too much time on their hands, no life and you're the one who just took away the only thing that gave their life something resembling meaning, you have no call center.

    Be aware who you're dealing with: People who have time to make you waste time. Time of your employees you have to pay by the hour. That costs money, and a load thereof. Don't underestimate the power of people with more time than you. Especially if being an expensive nuisance doesn't take too much skill.

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
  13. Re:"Could this all be a hoax...?" by Opportunist · · Score: 4, Funny

    Uranium rods, like any sane person.

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
  14. In related news: by nilbog · · Score: 4, Funny

    In other news: AT&T pokes bees nest while wearing meat suit in hungry tiger cage.

    --
    or else!
  15. Re:Freedom and privacy by Anonymous Coward · · Score: 5, Insightful

    You have never been punished for exercising your freedom to speak by someone with more money or political clout than you have making you pay for disagreeing with them I see. Being able to be anonymous is basic to free speech.

  16. Re:You know what destroys a sites credibility? by Fex303 · · Score: 3, Funny

    Yeah, gee, you wouldn't want to destroy the credibility of an esteemed site like 4chan, which up till now has been held in such high regard...

  17. Not blocking 4chan.org for all users by Futurepower(R) · · Score: 3, Informative

    The issue was reported on Reddit.com 16 hours ago. At no time, apparently, was access to img.4chan.org slow. Also, at present the IP address 207.126.64.181 connects directly to 4chan.org, as it should.

    So, AT&T, is not blocking img.4chan.org, the company is only blocking some of its users. Check 4chan status. Quote: "UPDATE: Some coverage on TechCrunch, Digg, reddit, and Google News. Also, note that AT&T has yet to contact us."

  18. Re:Net Neutrality by TuaAmin13 · · Score: 3, Informative

    Actually it surprises me that they haven't been labeled a terrorist group yet

    Actually, they have

  19. Re:"Could this all be a hoax...?" by FireFury03 · · Score: 5, Insightful

    Well that makes no sense. AT&T should be taking no action unless somebody from 4chan calls them up and asks them to block the perceived source of the DDoS..

    Sounds like you don't understand what's going on - please educate yourself.

    4chan is being SYN flooded, various ISPs were getting a lot of collateral traffic from the resulting ACKs going back to spoofed IPs. Since those ISPs had nothing to do with either the attacker or 4chan, there was nothing they could do but pull the plug on the source of the collateral ACKs (4chan). i.e. the ISPs who blocked 4chan weren't trying to protect 4chan from an attack, they were protecting their own networks from the fallout.

    Sadly, like you, the vast majority of users are clueless and won't investigate to see what is only going on. I'm sure there will be a kneejerk reaction against AT&T and the other ISPs who tried to protect themselves and everyone will make out that they are the bad guys.