Slashdot Mirror


Microsoft RickRolls Wi-Fi Network Leechers

An anonymous reader writes "Microsoft has revealed that it RickRolled users that were killing its TechEd conference Wi-Fi network last year by torrenting large files. Network administrators at the event quickly built a list of all of the top torrent trackers around and got the nod to add them all to the local DNS resolver and point them at a local Web server containing some Rick Roll scripts. According to the admin: 'It killed me that I didn't see anyone getting done by this first hand, but there were hundreds of impressions in the server logs containing the Rick Roll scripts so I did get a fair amount of satisfaction at least. It was the most evil of evil Rick Roll scripts too — worse than any that anyone has used to get me in the past.' Fun and games aside, it looks like the leechers will force quotas and traffic shaping for the first time in the event's history."

35 of 165 comments (clear)

  1. It could have been worse... by Mattskimo · · Score: 5, Funny

    At least it wasn't Soulja Boy.

  2. Please tell me... by Anonymous Coward · · Score: 2, Funny

    that whoever owns the rights to "Never Gonna Give You Up" is receiving royalties.

    1. Re:Please tell me... by sopssa · · Score: 2, Funny

      But if they embedded it from YouTube, Google would take the heat.

      Sounds like a plan.

    2. Re:Please tell me... by xorsyst · · Score: 2, Informative
      --
      Get free bitcoins: http://freebitco.in
  3. Evil by DeBaas · · Score: 5, Funny

    Rick Rolling, told you Microsoft is evil ;-)

    --
    ---
    1. Re:Evil by The+Mighty+Buzzard · · Score: 5, Insightful

      Network admins are evil by default, Microsoft or not. Most of them aren't nearly as creatively hilarious as this though.

      --
      Violence is like duct tape. If it doesn't solve the problem, you didn't use enough.
    2. Re:Evil by WCguru42 · · Score: 2, Funny

      My network admin enjoys taking my internet away whenever I am working. I am a Computer Technician so I need it almost all day. But he does not care. He laughs while I fail.

      Strengthening your forearm so you can better use a screw driver does not count as work.

      --
      "Educate the mind but never at the expense of the soul."~Blessed Basil Moreau
    3. Re:Evil by sycorob · · Score: 4, Funny

      Am I the only one that's terrified to click on any links here?

    4. Re:Evil by DeBaas · · Score: 2, Funny

      There is a RickBlockPlugin for Firefox. Install that, and you should be safe.

      --
      ---
    5. Re:Evil by WoodenTable · · Score: 3, Funny

      Why yes, I DO go to youtube.com for all my firefox plugins! I imagine it will be extremely satisfying to finally have something that will protect me from rickrolls, once I get around to clicking on that link.

  4. Re:Just for fun by stonedcat · · Score: 3, Funny

    Chair throwing video?

    --
    You can't take the sky from me.
  5. ObRoll by wiredlogic · · Score: 4, Funny

    Just to get things rolling. Here is the tasteful mashup with Nirvana.

    --
    I am becoming gerund, destroyer of verbs.
    1. Re:ObRoll by Hurricane78 · · Score: 2, Funny

      Pff, this one has 50 Cent instead of Rick, but it takes the cakes. All of them! ^^
      http://www.youtube.com/watch?v=jkyc1dxL3N0

      --
      Any sufficiently advanced intelligence is indistinguishable from stupidity.
  6. Can you spell DoS? by nuckfuts · · Score: 4, Funny

    From TFA:

    So we scheduled this script to run each minute to generate a list of offending MAC addresses.

    We reasoned that if you had a lot of mappings, and that a large proportion of those mappings were to a lot of distinct remote hosts, and largely not idle, that you are probably a Torrenter. OTOH, if you had, say, 20 connections open to a single host or a low number of hosts then this is probably quite fine.

    These scripts output a list of bad MACs, that we then just dropped into a block list in the core switches.

    And there you have it. The culprits fingered and booted off the network. Of course, they then just changed their MAC addresses, in which case they were then re-identified as soon as their utilisation crept up, and the new MAC was banned.

    This approach will work fine until one of the culprits decides to spoof the MAC address of your DNS servers (or whoever else they want to f*ck with) and gets them "booted off the network".

    1. Re:Can you spell DoS? by drinkypoo · · Score: 2, Insightful

      This approach will work fine until one of the culprits decides to spoof the MAC address of your DNS servers (or whoever else they want to f*ck with) and gets them "booted off the network".

      If you're on a different interface from the DNS server, how will you even know the MAC? And if you're on a different interface, what makes you think it will even work? Most APs have DNS proxies anyway, and no device worth using will send you packets destined for itself.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    2. Re:Can you spell DoS? by Lars+T. · · Score: 2, Insightful

      These scripts output a list of bad MACs, that we then just dropped into a block list in the core switches.

      And there you have it. The culprits fingered and booted off the network. Of course, they then just changed their MAC addresses, in which case they were then re-identified as soon as their utilisation crept up, and the new MAC was banned.

      This approach will work fine until one of the culprits decides to spoof the MAC address of your DNS servers (or whoever else they want to f*ck with) and gets them "booted off the network".

      Yeah, I'm sure they don't have a whitelist of MAC addresses from their own infrastructure that gets dropped very early in the scripts. Or an ACL on the switch that blocks them on every port they shouldn't be on.

      --

      Lars T.

      To the guy who modded me down from perfect to terrible Karma - Apple haters still suck

  7. Resource allocation by MichaelSmith · · Score: 2, Insightful

    When managing a resource such as CPU time, memory use or network traffic there should be ways to transparently mediate between users. You set some simple rules like "everybody gets a go" or "each host gets a slice of the network" and write some simple software to implement it.

    Okay so thats traffic shaping and I know its not as simple as I make it out to be but the approach used here seems crude and a waste of man hours.

    1. Re:Resource allocation by muzzmac · · Score: 2, Funny

      Okay so thats traffic shaping and I know its not as simple as I make it out to be but the approach used here seems crude and a waste of man hours.

      "Man hours"? Don't you mean "evil genius" hours?

  8. Been Slashdotted by one+cup+of+coffee · · Score: 4, Informative

    It looks like the news link has been Slashdotted, Here's a mirror to the link

    ic news story Microsoft

  9. Redirecting trackers by threephaseboy · · Score: 2, Interesting

    So you redirect a BT client to a "rickroll" whenever it tries to get a list of peers, and this page is never seen by the end user.
    You did a great job!
    Oh wait...

    We reasoned that if you had a lot of mappings, and that a large proportion of those mappings were to a lot of distinct remote hosts, and largely not idle, that you are probably a Torrenter.(...) These scripts output a list of bad MACs, that we then just dropped into a block list in the core switches.

    Yeah, that might have been a little more helpful than redirecting a client (which will just use DHT instead to find peers)

    --
    .
    1. Re:Redirecting trackers by initialE · · Score: 2, Funny

      Well the joke's on them, I was trying to torrent Rick Astley!

      --
      Starbucks, Harbuckle of Breath.
  10. TBF with a big bucket by jamesh · · Score: 5, Informative

    I solved this problem at the local library's public access wireless with a linux router and a token bucket filter with a big bucket. Each IP address gets a 10MByte bucket that fills up at 256kbits/second. The bucket is big enough that they'll never know they are limited for normal browsing, but a torrent sucks it try really fast and drops down to a slow enough speed that it's not really worthwhile. And even if they do stick with it at least they aren't burning through tens of gigabytes per day. It beats any other filter i've ever tried.

    I still fondly remember the howls of dismay from the leechers when I turned it... they just couldn't understand why their downloads start at 20mbits/second but slow down to a crawl almost straight away :)

    1. Re:TBF with a big bucket by David+M.+Andersen · · Score: 5, Informative

      It's actually pretty easy in linux. http://lartc.org/howto/lartc.qdisc.classless.html#AEN691 In fact, http://lartc.org/ has loads of good stuff.

    2. Re:TBF with a big bucket by Ihmhi · · Score: 2, Funny

      cd router/apps/pwnage

      ./ihasabucket

  11. Re:What surprises me... by Bad+Ad · · Score: 2, Insightful

    because they dont have several websites that have huge amounts of hits (windows update, hotmail, etc) so they clearly couldnt know anything about networking.

  12. Re:Lame by c6gunner · · Score: 4, Informative

    Rick Rolling is so last year....

    gee ...

    "Microsoft has revealed that it RickRolled users that were killing its TechEd conference WiFi network last year ....

    Look on the bright side - at least you didn't make a total ass of yourself by saying:

    What did you expect? This is Microsoft we're talking about here. They're always behind by a full year or five when it comes to internet memes.

  13. oblig. xkcd by ChinggisK · · Score: 2, Funny
  14. Re:Just for fun by Beale · · Score: 3, Insightful

    Appropriate variants of the 1984 ad.

  15. TBF with a big bucket-Howls of pain. by Anonymous Coward · · Score: 4, Funny

    "I still fondly remember the howls of dismay from the leechers when I turned it... they just couldn't understand why their downloads start at 20mbits/second but slow down to a crawl almost straight away :)"

    You wouldn't happen to have an audio copy by any chance?

  16. wait by circletimessquare · · Score: 3, Funny

    "It was the most evil of evil Rick Roll scripts too -- worse than any that anyone has used to get me in the past."

    correct me if i'm wrong, but rickrolling implies its just rick astley singing about how he won't let you down, right?

    so what the heck is he referring to in the quote above? did they distribute 1080p video of ballmer in his underwear singing karaoke and throwing chairs?

    speaking of which, a GIS for ballmer is not exactly flattering

    http://images.google.com/images?q=ballmer

    who would have guessed a GOOGLE image search wouldn't be flattering to steve ballmer?

    i wonder what a bing image search for ballmer would... jesus what am i doing, better stop now before i run into rule 34

    --
    intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
  17. Re:Just for fun by Lars+T. · · Score: 3, Funny

    Suggestions please for equivalent at Apple & Linux events?

    Force install of Win ME.

    --

    Lars T.

    To the guy who modded me down from perfect to terrible Karma - Apple haters still suck

  18. Re:Just for fun by Gonoff · · Score: 2, Funny

    ME is not an operating system. It's a medical Condition.

    --
    I'll see your Constitution and raise you a Queen.
  19. Re:How do Rick Roll scripts work? by natehoy · · Score: 4, Informative

    No. As I understand it, those who are rickrolled basically get a customized DNS response that points all page requests to a local server with one web page and a blind redirect to that web page. That single web page has an embedded rickroll video.

    Somewhat similar to how airports on a pay-for connection, or hotel connections work. Try to go to any website, and you get redirected to a login or purchase page.

    Presumably any other connections not on port 80 (torrent, FTP, etc) are dropped.

    So if you're surfing the web while torrenting, you'll get the rickroll video on the next page you load after you are detected, and you'll find that all of your torrents suddenly stop connecting.

    --
    "This post contains words, known to the State of California to cause thought. Wash brain thoroughly after reading."
  20. it doesn't make sense to me by circletimessquare · · Score: 3, Interesting

    that this man thinks a song from 1987 should still be earning him money

    yes, LEGALLY, he has a case, but morally and philosophically, he just seems like a giant asshole

    fact: there are no morally or philosophically coherent grounds that a song from 1987 should anyone anything. really

    and if you believe otherwise, you very much are a good definition of what is wrong with this world, in terms of a stunning display of greed backed up with force, overwhelming the common good

    --
    intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
    1. Re:it doesn't make sense to me by WCguru42 · · Score: 4, Interesting

      and if you believe otherwise, you very much are a good definition of what is wrong with this world, in terms of a stunning display of greed backed up with force, overwhelming the common good

      What if I want to pretend that I believe this in the hopes that the RIAA will send it's dogs after Microsoft's (and maybe Google's) wolves and never come back. I feel fairly confident that Microsoft and Google have lawyers that would tear the RIAA apart in a real battle. There's a reason the RIAA hasn't taken strong tactics against them (specifically Google via YouTube) in the past.

      --
      "Educate the mind but never at the expense of the soul."~Blessed Basil Moreau