spammer using cancel evading technique
ptomblin at xcski.com
Thu Dec 4 03:06:34 UTC 2003
Quoting Tomasz R. Surmacz (tsurmacz at ict.pwr.wroc.pl):
> The convention of using <cancel.MSGID> allows multiple bots to cooperate
> without generating tons of unnecessary messages. But this works on an
> assumption, that the cancel message will eventually hit all servers,
> from one bot or another. If somebody is poisoning news servers with
So somebody needs to make a smarter bot that if it sees cancel.foo in
history, but but foo is still uncancelled, it issues a cancel_1.foo (but
only if cancel_1.foo isn't in the history as well).
Paul Tomblin <ptomblin at xcski.com> http://xcski.com/blogs/pt/
It could have been raining flaming bulldozers, and those idiots would have
been standing out there smoking, going 'hey, look at that John Deere burn!'
-- Texan AMD security guard
More information about the inn-bugs