[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [SAGE] Unwanted users on home wireless network



So once upon a time (over 10 years ago now) I worked for this
university down under where I ran this proxy server (squid) with a
script (calamaris) so as to identify and shame the top talkers. It was
quite effective for a while but given some of the students were
cleverer than I (eg Matt Chapman of rdesktop and Samba fame, though he
was on my side enforcing quotas rather than circumventing them) I had
to run a bleeding edge version to get at some feature (ldap auth or
something like that) on this flaky, bleeding edge (at the time) dual
PPro200 hardware that wouldn't run NT 4 without constant BSODs.

All was well until one day something went horribly wrong whereby squid
got all confused about which resource it had put where and started
serving up content (apparently) randomly. Normally this wouldn't be so
much the problem (security concerns aside), except that most of the
content in this particular cache was pr0n and even back then browsers
were apparently fairly resilient when it came to serving up content
which didn't match the mime type. Hilarity ensued, I got dragged out
of bed and did a 'squid -z' or some such thing and eventually ended up
writing a netfilter IP quota module that I believe is still in use
today:

http://www.koders.com/c/fidAE6B40283E024623640D053328B5B446C84E3B02.aspx

My point is simply that a proxy that could be made to deliberately mix
up resources could be equally entertaining and would be easier on the
CPU and memory as well. Could be a good way to get plausible
deniability (http://www.schneier.com/blog/archives/2008/01/my_open_wireles.html)
without a bandwidth bill!

Sam

On Jan 17, 2008 6:00 PM, John LLOYD <jal@xxxxxxxxxxxxxxxxxx> wrote:
> I've been wondering what to do about this, and saw this reference.
> Beautiful!
>
>
> http://www.ex-parrot.com/~pete/upside-down-ternet.html
>
>
>
> --John
>
>