Why AT&T blocked 4Chan
3:25

Why AT&T blocked 4Chan

Culture
AT&T caused a flurry of fury when they blocked a server from the online forum, 4chan. On this episode of Hacks, we'll look at the DoS attack against 4Chan and how and why AT&T reacted. The trouble started with neither AT&T nor 4Chan. A third party attacker, possibly a rival forum, started a Denial of Service attack known as TCP SYN flooding, or SYN attack. First let's look at what's supposed to happen when you request a Web page. Your computer let's call it HOME sends a SYN request to the Web Server, (SYN for Synchronize sequence numbers) in this case the server is img.4chan.org. 4Chan's server responds with an ACK flag (short for acknowledge) and then your computer responds with a SYN-ACK and from there the connection is made. In 4Chan's case, the Attacker sent SYN requests with spoofed IP addresses. In other words the requests appeared to come from some other computer or computers, for this example let's call it 127.55.55.127. 4Chan's server responded with an ACK, but since 127.55.55.127 never sent the SYN in the first place, it either sends an RST flag or more likely, nothing at all. And if 4CHAN gets nothing at all it may send 4 or 5 ACKs for every SYN it receives. This whole senario can take around 3 minutes to play out. So now you can see the problem. If the attacker is sending a bunch of SYN's from a bunch of spoofed addresses, the attacked server is going to run out of resources responding to them. The flood of traffic, not only fills up 4Chan, but also floods innocent bystanders. In 4Chan's case, some of these bystanders were in the AT&T network. Some were in other networks like unWired Broadband. But since AT&T is the big kahuna, they got all the attention. AT&T blocked all traffic coming from the 4Chan server sending out the ACK flags. This stopped the ACKs from flooding into AT&T's network, but also prevented any legitimate requests from their network to that 4Chan server. A few AT&T subscribers who suddenly couldn't get to 4Chan, figured AT&T was blocking the often controversial site. So they started grumbling. 4Chan complained that AT&T should have only filtered their server for the sites who had been spoofed. However, if AT&T had done that, and the attackers caught on, they could spoofed different IP addresses. AT&T was taking the rather cautious approach of blocking the entire server, making it irrelevant what IP addresses were spoofed. 4Chan did filter the DoS attack so that it didn't bring down their site, but they were still passing along the ACK requests which caused the trouble. Once they stopped that from happening, AT&T lifted the ban on img.4chan.org, and all went back to the peaceful happy land it had been before. Sort of. Well, except for the CNN iReport 4Chan users put up claiming the AT&T CEO was dead. Hope that sheds some light on the shenanigans of the weekend of July 26th, 2009. I'm Tom Merritt, CNET.com.

Up Next

Hacks@Home: How to install a smart plug
hackshome-how-to-install-a-smart-plug0

Up Next

Hacks@Home: How to install a smart plug

Worst hacks of the year
gettyimages-527099783

Worst hacks of the year

Tweak MiFi to charge
hk_MiFiUSB720.jpg

Tweak MiFi to charge

Elevator hacks
hk_elevators720.jpg

Elevator hacks

Share your purchased iPhone apps on multiple devices
hk_shareapps720.jpg

Share your purchased iPhone apps on multiple devices

Add an external hard drive to your TiVo HD
hk_tivoexternal720.jpg

Add an external hard drive to your TiVo HD

Break into Gmail
hk_GmailSecurity720.jpg

Break into Gmail

Make your own batteries
hk_MakeBatteries720.jpg

Make your own batteries

Tether your iPhone on OS 3.0
hk_tetheriphone720.jpg

Tether your iPhone on OS 3.0

Tech Shows

The Apple Core
apple-core-w

The Apple Core

Alphabet City
alphabet-city-w

Alphabet City

CNET Top 5
cnet-top-5-w

CNET Top 5

The Daily Charge
dc-site-1color-logo.png

The Daily Charge

What the Future
what-the-future-w

What the Future

Tech Today
tech-today-w

Tech Today

Latest News All latest news

Microsoft Surface Laptop Go 2 Video Review
surface-go-22

Microsoft Surface Laptop Go 2 Video Review

What iOS 16 May Tell Us About the iPhone 14
yt-appleslice-iphone-14cnet

What iOS 16 May Tell Us About the iPhone 14

MacBook Pro M2: Apple's New Chip Put to the Test
p1099021-mov-03-56-58-06-still001

MacBook Pro M2: Apple's New Chip Put to the Test

Bring a Little Glamp to Your Camping Trip With These Portable Power Stations
1202484230753671-btat6xklmc41i6ujbdbz-height640.png

Bring a Little Glamp to Your Camping Trip With These Portable Power Stations

Apple Will Have to Add USB-C to iPhones Because of This Legislation
220620-yt-usb-c-explainer-site

Apple Will Have to Add USB-C to iPhones Because of This Legislation

RedMagic 7 Gaming Phone Review: Superfast Charging, Blisteringly Smooth Screen
redmagic-00-00-27-10-still001

RedMagic 7 Gaming Phone Review: Superfast Charging, Blisteringly Smooth Screen

Most Popular All most popular

What's New to Stream for June 2022
netpicks-june-2022thumb

What's New to Stream for June 2022

Apple Will Have to Add USB-C to iPhones Because of This Legislation
220620-yt-usb-c-explainer-site

Apple Will Have to Add USB-C to iPhones Because of This Legislation

MacBook Pro M2: Apple's New Chip Put to the Test
p1099021-mov-03-56-58-06-still001

MacBook Pro M2: Apple's New Chip Put to the Test

SpyraTwo hands-on: The ultimate water gun
spyratwo-2

SpyraTwo hands-on: The ultimate water gun

What iOS 16 May Tell Us About the iPhone 14
yt-appleslice-iphone-14cnet

What iOS 16 May Tell Us About the iPhone 14

Microsoft Surface Laptop Go 2 Video Review
surface-go-22

Microsoft Surface Laptop Go 2 Video Review

Latest Products All latest products

E Ink Tablets: Everything You Need to Know
eink-website

E Ink Tablets: Everything You Need to Know

Moto G 5G Review: A $400 Phone That May Have Everything You Need
clip0001-00-00-25-15-still001

Moto G 5G Review: A $400 Phone That May Have Everything You Need

Hands-On: We Got to Try the Sony Xperia 1 IV and Its Zoom Lens
xperiafinalpicsite

Hands-On: We Got to Try the Sony Xperia 1 IV and Its Zoom Lens

Lenovo Legion 7 Gaming Laptops Combine Great Power With Simple, Slim Designs
lenovolegion-00-00-45-13-still003

Lenovo Legion 7 Gaming Laptops Combine Great Power With Simple, Slim Designs

Exploring Meta Store: Facebook Parent Meta's First Physical Retail Space
metastore

Exploring Meta Store: Facebook Parent Meta's First Physical Retail Space

Lenovo's Torrent of Slim-Series Laptops Has Almost Too Many Options
lenovoslim-00-00-03-10-still001.png

Lenovo's Torrent of Slim-Series Laptops Has Almost Too Many Options

Latest How To All how to videos

How to Delete or Disable Your Instagram Account
phoneonorange

How to Delete or Disable Your Instagram Account

Fix Your iPhone Screen With Apple's Self-Service Repair Kit
dsc00641

Fix Your iPhone Screen With Apple's Self-Service Repair Kit

How to Buy a Budget Laptop in 2022
budgetlaptops-00-08-35-15-still001

How to Buy a Budget Laptop in 2022

Google Pay: How to Set Up and Use
googlepay-inhand

Google Pay: How to Set Up and Use

Clean Your AirPods and EarPods Without Damaging Them
yt-howto-clean-airpods-v3

Clean Your AirPods and EarPods Without Damaging Them

How to Control Your Computer With Your Feet
yt-learn-guitar-foot-controls-v2

How to Control Your Computer With Your Feet