Live data from Hacker News

I may be the only evil bit user on the internet

blog.benjojo.co.uk

11–20 of 39 posts

Re: I may be the only evil bit user on the internet

#11
post #3

In 1990 Bergen LUG implemented TCP over Avian Carriers. http://www.blug.linux.no/rfc1149/ The ping over that link was not good http://www.blug.linux.no/rfc1149/pinglogg/

I was in Bergen at the time, repairing concrete (ok, mostly chiseling out the old). Little did I know : )

Re: I may be the only evil bit user on the internet

#13
> Is it that someone didn’t see the date of the RFC, maybe sarcasm doesn’t translate very well, possibly someone in the real world actually sent the evil bit when doing evil things, and cause some products to target it?

I think it was done just for fun. It is slightly concerning that a live equipment has such a joke enabled, but I'd say its fun-to-price ratio is relatively high.

Re: I may be the only evil bit user on the internet

#14
post #13

> Is it that someone didn’t see the date of the RFC, maybe sarcasm doesn’t translate very well, possibly someone in the real world actually sent the evil bit when doing evil things, and cause some products to target it? I think it was done just for fun. It is slightly concerning that a live equipment has such a joke enabled, but I'd say its fun-to-price ratio is relatively high.

I'm not intimately familiar with the RFC's but you could argue that since that bit is technically `reserved` when it's set the packet is 'invalid' and thus should be dropped (by some manufacturers reasoning maybe, not mine specifically)?

Also: IIRC IP packets contain CRC's/checksums of some sort. I'm not sure if the poster corrected for that or maybe the other side does(n't) and somewhere the CRC doesn't check out and thus the packet is dropped/invalid (or maybe even somewhere along the way by at a hop that chokes on such bit)?

Re: I may be the only evil bit user on the internet

#15

I yearn for a world in which that RFC were viable. I love that anyone's implemented it at all though, and I really hope it's deliberate on the part of the people who drop the packet.

> I love that anyone's implemented it at all though

Similarly I have had a page online for years (may still be, can't remember the exact url... so I'd have to dig a little) that was served with HTTP status

  418 I'm a teapot
See https://tools.ietf.org/html/rfc2324#section-2.3.2 :-)

Re: I may be the only evil bit user on the internet

#16
post #14
post #13

> Is it that someone didn’t see the date of the RFC, maybe sarcasm doesn’t translate very well, possibly someone in the real world actually sent the evil bit when doing evil things, and cause some products to target it? I think it was done just for fun. It is slightly concerning that a live equipment has such a joke enabled, but I'd say its fun-to-price ratio is relatively high.

I'm not intimately familiar with the RFC's but you could argue that since that bit is technically `reserved` when it's set the packet is 'invalid' and thus should be dropped (by some manufacturers reasoning maybe, not mine specifically)? Also: IIRC IP packets contain CRC's/checksums of some sort. I'm not sure if the poster corrected for that or maybe the other side does(n't) and somewhere the CRC doesn't check out an…

Reading RFC 791 again, it is said that the reserved bit "must be zero".[1] I'm not sure if it is reasonable to force a "reserved" flag to be a certain value, but I guess if one is following the RFC rigorously, dropping packets with the reserved bit enabled is the correct behavior?

[1] https://tools.ietf.org/html/rfc791

Re: I may be the only evil bit user on the internet

#18
post #14
post #13

> Is it that someone didn’t see the date of the RFC, maybe sarcasm doesn’t translate very well, possibly someone in the real world actually sent the evil bit when doing evil things, and cause some products to target it? I think it was done just for fun. It is slightly concerning that a live equipment has such a joke enabled, but I'd say its fun-to-price ratio is relatively high.

I'm not intimately familiar with the RFC's but you could argue that since that bit is technically `reserved` when it's set the packet is 'invalid' and thus should be dropped (by some manufacturers reasoning maybe, not mine specifically)? Also: IIRC IP packets contain CRC's/checksums of some sort. I'm not sure if the poster corrected for that or maybe the other side does(n't) and somewhere the CRC doesn't check out an…

He patched the IP stack, so the checksum should be correct.

Re: I may be the only evil bit user on the internet

#19
post #9
post #8

While a very good story, I suspect the offending firewalls might drop traffic with any of the reserved bits set, not just the "evil" bit. Very fun exercise though!

This seems like a really bad thing to do. If any of those reserved bits get used for a legitimate purpose in the future then none of these networks will be accessible. Reserved should mean "set to 0 when you send, ignore on when you receive". It's not like these bits actually cost any additional processing. There's literally no benefit to dropping these packets, and it's shenanigans like this that mean we can't impro…

Firewalls and other middleboxes are notorious about doing very bad things like this to the detriment of the internet as a whole. See PMTU discovery, why it was impossible to deploy TCP RED or SCTP, etc.

Re: I may be the only evil bit user on the internet

#20
post #18
post #14

Earlier quoted context omitted.

I'm not intimately familiar with the RFC's but you could argue that since that bit is technically `reserved` when it's set the packet is 'invalid' and thus should be dropped (by some manufacturers reasoning maybe, not mine specifically)? Also: IIRC IP packets contain CRC's/checksums of some sort. I'm not sure if the poster corrected for that or maybe the other side does(n't) and somewhere the CRC doesn't check out an…

He patched the IP stack, so the checksum should be correct.

Agreed, but maybe the other side (or any of the hops in between) have some weird and/or incorrect implementation on which the CRC/Checksum fails because the bit is set? I'm not sure what would happen if the bit is excluded from the CRC calculation but included in the check against/with the CRC for example. Would be a nice edge-case to test and, ofcourse, shouldn't fail. But who knows, maybe it does somewhere along the line?

Also, as barosl observes (https://news.ycombinator.com/item?id=10633361): "but I guess if one is following the RFC rigorously, dropping packets with the reserved bit enabled is the correct"

Post reply on HN