RTFA: http://www.cnet.com/8301-13739_1-9769645-46.html

Comcast is perfectly within its right to filter the Internet traffic that flows over its network. What it is not entitled to do is to impersonate its customers and other users, in order to make that filtering happen. Dropping packets is perfectly OK, while falsifying sender information in packet headers is not.

Comcast lowers its bandwidth bills by spoofing TCP RST packets. The net effect is that if their customers run normal TCP/IP stacks, the customer’s computer will think the remote host has disconnected. Right now, they use this on Bittorrent traffic, but the same technique is used in China to perform per-keyword HTTP-over-TCP filtering, too. One solution, presented in this paper, is to hack your TCP/IP stack to ignore, or at least be smarter, about spoofed TCP RST packets.

 

Trackbacks

(Trackback URL)

close Reblog this comment
blog comments powered by Disqus