spammer using cancel evading technique

Paul Tomblin ptomblin at xcski.com
Thu Dec 4 13:42:39 UTC 2003


Quoting Tomasz R. Surmacz (tsurmacz at ict.pwr.wroc.pl):
> Paul Tomblin wrote on Wed, Dec 03, 2003 at 10:06:34PM -0500:
> > So somebody needs to make a smarter bot that if it sees cancel.foo in
> > history, but but foo is still uncancelled, it issues a cancel_1.foo (but
> > only if cancel_1.foo isn't in the history as well).
> 
> This will only escalate problem with race between bots creating more
> cancel messages and spammers creating more forged cancels.
> Making sure that <cancel.MSGID> really cancels <MSGID> otherwise it is
> not accepted, will solve it permanently.

But that will lock out non-bot cancels.  Self cancels don't obey the
<cancel.MSGID> convention.

-- 
Paul Tomblin <ptomblin at xcski.com> http://xcski.com/blogs/pt/
Crowds want to beat, journalists deserve to be beaten.  Where lies
the problem?
              -- Lars Syrstad


More information about the inn-bugs mailing list