Linux and Open Source

Steven J. Vaughan-Nichols & Paula Rooney

Was 4chan block about censorship, security or net neutrality?

By | July 29, 2009, 5:38am PDT

Summary: For cloud computing to succeed we need national and international policies that define when companies can act, and how they can act, so those who are acted upon have legal recourse.

AT&T insists its temporary block of 4chan was about security, that the site was hosting a Dedicated Denial of Service (DDoS) attack aimed at one of its customers.

Others aren’t so sure.

The Inquisitor calls it censorship. Writers at The Daily Kos call it an attack on net neutrality and predict it will backfire before the FCC.

Tristan Louis combines it with the Kindle “1984″ erasure and Apple’s control of iPhone apps, writing “a dark cloud” puts all technology trends into question.

It’s clear this is not a one-off. It is part of a growing trend, corporate attempts to enforce law remotely against property people consider their own.

This is especially relevant as we move into an era of cloud computing, where resources we consider our property are, in fact, dependent upon computing environments owned by others.

It doesn’t matter in this case whether the software in question is open source or closed source. What matters is the remote control of that software exercised by a service vendor, and the legitimacy of that control.

Can people trust clouds, or devices dependent upon clouds, if cloud owners act as judge, jury and executioner, zapping what we consider our own? Wouldn’t a book be more ours, or a simpler, voice-only phone? Should we perhaps only use modems to reach the Internet, and shut the connection when we’re not behind the keyboard?

In the case of 4chan, AT&T’s story is fishy. DDoS attacks come from botnets, not specific sites. While sites may control botnets, and users may launch botnet attacks from sites, those are almost always throwaway URLs today, not popular, well-known sites like 4chan.

Moreover if 4chan were hosting malware then all security professionals should have been made aware of it, and the block should have been universal, backed perhaps by a government warrant.

Corporations are individuals under U.S. law, and subject to legal authority, but they are not law itself. They are not law enforcement agencies. They should not act as such without clear legal authority.

For cloud computing to succeed we need national and international policies that define when companies can act, and how they can act, so those who are acted upon have legal recourse.

Private law enforcement without legal recourse just won’t cut it.  The opposite of government is not freedom, but anarchy.

Kick off your day with ZDNet's daily e-mail newsletter. It's the freshest tech news and opinion, served hot. Get it.

Topics

Dana Blankenhorn has been a business journalist for 30 years, a tech freelancer since 1983.

Disclosure

Dana Blankenhorn

Dana Blankenhorn has been a journalist, writer and part-time futurist for over 30 years.

At the present moment I run only a personal blog in addition to my ZDNet open source blog.

DanaBlankenhorn.Com has the subtitle The War Against Oil. In the past I have used it to write about political history, e-commerce, personal matters, some ideas related to open source, and The World of Always On, which is the idea of using sensors, motes and RFID to turn WiFi links into platforms for applications which live in the air.

My IRA account at Schwab holds a few tech shares, most notably some Intel and Applied Materials, but there are no open source companies in it. I don’t even own any CBS stock.

Biography

Dana Blankenhorn

Dana Blankenhorn has been a business journalist for nearly 25 years and has covered the online world professionally since 1985. He founded the Interactive Age Daily for CMP Media, and has written for the Chicago Tribune, Advertising Age's "NetMarketing" supplement, and dozens of other publications over the years.

Talkback Most Recent of 22 Talkback(s)

  • tens of thousands of DoS attacks are blocked every day
    Dana, you need to get your facts straight. DailyKos isn't exactly an authority figure on
    this and he even admitted to jumping the gun on
    the story like so many other people.

    The owner of 4chan admitted that their
    equipment unfortuantely attacked AT&T
    customers. Because 4chan failed to lock down
    their own equipment, and because 4chan is notorious for organizing DoS attacks against
    other websites which makes them a top site for
    retribution, 4chan caused harm to AT&T
    customers. Yet when AT&T does their job to
    protect the network from 4chan, you glorify the
    villain 4chan as the hero against censorship.

    There are tens of thousands of DoS attacks
    whose IP addresses are blocked every day by
    ISPs and not a peep from anyone. Millions of
    emails are blocked by ISPs every day. Is that
    censorship too Dana? Are you proposing a whole
    new government agency to inspect every piece of
    spam to verify that censorship wasn't
    committed? Let's get real Dana.
    ZDNet Gravatar
    georgeou
    29th Jul 2009
  • 4Chan wasn't the source
    The owner of 4chan admitted that their
    equipment unfortuantely attacked AT&T
    customers. Because 4chan failed to lock down
    their own equipment, and because 4chan is notorious for organizing DoS attacks against
    other websites which makes them a top site for
    retribution, 4chan caused harm to AT&T
    customers. Yet when AT&T does their job to
    protect the network from 4chan, you glorify the
    villain 4chan as the hero against censorship.


    You're implying that 4Chan's network was the source of the DDoS attack. While they're not saints, in this case it was their security appliance which was responding to what was forged source addresses of the DDoS traffic. That was the appliance's default behavior, which 4Chan later rectified. Chris Poole said he believed it was the overreaction of a single engineer at AT&T that led to the blocking of 4Chan's entire address space. He also contended that the amount of traffic "was a few megabits", not the hundreds of megabits per second you're implying.

    Based on that revelation (since the "source" of the DDoS response traffic was a single or a small pool of addresses), I'd say that AT&T over-reacted. It looks like, in this case, 4Chan was only guilty of not fully testing the implementation of the security appliance(s?).

    Similar to the case about 25 years ago when an AT&T SS7 node "flooded" other nodes in the telephone network, bringing down voice service to the D/FW metro area. It was a mis-configuration in its routing code. The end result was the flooding of the control channel, paralyzing the network. Something similar happened later on the East Coast. In both cases, the network over-reacted (automatically, in this case).
    ZDNet Gravatar
    NetArch.
    29th Jul 2009
  • Not implying, I'm telling you what happened
    I'm not implying, I'm telling you 4chan was attacking other networks including AT&T. The mere fact that it was ACCIDENTAL doesn't change a thing just like if 4chan was hacked and spewing malware, Google search is going to censor the whole site with a very scary warning about viruses.

    It doesn't matter if 4chan was acting as the attack proxy. It is their equipment which they failed to secure which reflected a DoS attack. If you fail to lock down your DNS or SMTP mail server and you're spewing DNS attacks or spam, you're going to be blacklisted and blocked. Stupidity and incompetence is not a free pass.

    Lastly, the reason 4chan was being attacked is because they make it a sport to organize and attack other websites.
    ZDNet Gravatar
    georgeou
    29th Jul 2009
  • George Ou - ALWAYS Standing Up For The Big Guys Who Sign His Checks!
    And we're to trust you WHY, Ballmer's Biggest Fanboi...?
    ZDNet Gravatar
    drprodny
    30th Jul 2009
  • RE: Was 4chan block about censorship, security or net neutrality?
    They are not law enforcement agencies. They should not act as such without clear legal authority. k
    ZDNet Gravatar
    zakkiromi
    17th May
  • RE: Was 4chan block about censorship, security or net neutrality?
    So you can't think of this as censorship against 4chan because AT&T and the other ISPs were trying to prevent 4chan from censoring others on the Internet. 4chan is the perpetrator of sensorship you you're confusing them for the ipad bag blog sutudeg education news and pclos hwdb victim. l
    ZDNet Gravatar
    edward polling
    4th Jul
  • ZDNet Gravatar
    georgeou
    29th Jul 2009
  • RE: Was 4chan block about censorship, security or net neutrality?
    @georgeou I'm not implying, I'm telling you 4chan was attacking other networks including AT&T. The mere fact that pembe maske energy balance oyna oyunu moliva orjin krem tutune son nanomatik complex 41 new fx15 it was ACCIDENTAL doesn't change a thing just like if 4chan was hacked and spewing malware, Google search is going to censor the whole site with a very scary warning about viruses.

    It doesn't matter if 4chan was acting as the attack proxy. It is their equipment which they failed to secure which reflected a DoS attack. If you fail to lock down your DNS or SMTP mail server and you're spewing DNS attacks or spam, you're going to be blacklisted and blocked. Stupidity and incompetence is not a free pass.

    Lastly, the reason 4chan was being attacked is because they make it a sport to organize and attack other websites.
    ZDNet Gravatar
    gaberdiye03
    21st Jun
  • I'm not implying, I'm telling you 4chan was attacking other networks
    I'm not implying, I'm telling you 4chan was attacking other networks including AT&T. The mere fact that it was ACCIDENTAL doesn't change a thing just like if 4chan was hacked and spewing malware, Google search is going to censor the whole site with a very scary warning about viruses.

    It doesn't matter if 4chan was acting as the attack proxy. It is their equipment which they failed to secure which reflected a DoS attack. If you fail to lock down your DNS or SMTP mail server and you're spewing DNS attacks or spam, you're going to be blacklisted and blocked. Stupidity and incompetence is not a free pass.

    Lastly, the reason 4chan was being attacked is because they make it a sport to organize and attack other websites.
    ZDNet Gravatar
    georgeou
    29th Jul 2009
  • George Ou
    All: George is a former ZDNet blogger who now works at DigitalSociety, a site dedicated to security and "making it everyone's priority."

    You can find his own feature on the 4chan controversy at http://www.digitalsociety.org/isps-have-a-duty-to-block-malicious-traffic/.

    Thanks for all your help in the past and present George. And keep up your good work in the future. As I said in my e-mail, you are missed here at ZDNet.
    ZDNet Gravatar
    DanaBlankenhorn
    29th Jul 2009
  • No, He's Not, Dana
    He's a self-righteous M$FT and anti-OSS scumbag - and good riddance to him!
    ZDNet Gravatar
    drprodny
    30th Jul 2009
  • Interesting That You Mention Google's Domain Crippling Service
    I especially like the way they'll block access to an ENTIRE DOMAIN, including access to pictures, and other file formats that aren't capable of even distributing malware, when it is only a *SINGLE* HTML page that's infected with something.

    What's even better of course is when you're the owner of the domain, you have well over 22,000 HTML files and the only information you can get out of Google is "we blocked your site for suspicious activity". I mean, they don't even tell you *WHERE* the "suspicious activity" is coming from. So then you're forced to manually check through THOUSANDS of fawckin HTML files trying to find the damn script that's tripping off their domain crippling service.

    I would have sued them myself over it when they did it to my domain, was going to actually, but then we settled out of court over the matter for a small sum of money...in hindsight, I probably should have asked for moar. I'm sure it won't take too much longer though before they piss off somebody who can't be bought, at that point their stock is gonna take a real good nose dive.
    ZDNet Gravatar
    Onideus_Mad_Hatter
    2nd Sep 2009
  • No, It's AT&T SUCKING
    End of story. I don't even have to post facts because it's true.
    ZDNet Gravatar
    itanalyst2@...
    29th Jul 2009
  • Someone needs to post a list of the other ISPs
    That blocked 4chan.org during these DoS attacks. If there were in fact other ISPs that blocked it, I'd venture to say, the censorship claim is bogus and this should be dropped at the least. If 4chan.org is truely known for active support of this type of thing on the net, perhapse they should be looked into a bit more cloesly by law enforcement. Vandalism for entertainment is still a crime.

    On the issue of the actual story, this incident points out why cloud computing (at least based on interent connection) will never be accepted by IT organizations within large organizations (or any entity with a lick of sense). Passing laws to make it appear the internet has some garanteed QoS is laughable.
    ZDNet Gravatar
    DCMann
    29th Jul 2009
  • ZDNet Gravatar
    georgeou
    29th Jul 2009

Talkback - Tell Us What You Think

Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]

The best of ZDNet, delivered

ZDNet Newsletters

Get the best of ZDNet delivered straight to your inbox

Facebook Activity

White Papers, Webcasts, & Resources