spammer using cancel evading technique

Paul Tomblin ptomblin at xcski.com
Thu Dec 4 03:06:34 UTC 2003


Quoting Tomasz R. Surmacz (tsurmacz at ict.pwr.wroc.pl):
> The convention of using <cancel.MSGID> allows multiple bots to cooperate
> without generating tons of unnecessary messages. But this works on an
> assumption, that the cancel message will eventually hit all servers,
> from one bot or another. If somebody is poisoning news servers with

So somebody needs to make a smarter bot that if it sees cancel.foo in
history, but but foo is still uncancelled, it issues a cancel_1.foo (but
only if cancel_1.foo isn't in the history as well).

-- 
Paul Tomblin <ptomblin at xcski.com> http://xcski.com/blogs/pt/
It could have been raining flaming bulldozers, and those idiots would have
been standing out there smoking, going 'hey, look at that John Deere burn!'
              -- Texan AMD security guard


More information about the inn-bugs mailing list