|
|
|
|
|
Irc Takeover WarTakeover wars have plagued IRC networks for a long time. Due to a design flaw in the original protocol specs, if two servers lost the connection between each other, the channel operators on both sides of the split should retain their status. When one of the servers has no users in a channel during a split, the channel does not exist. People could create that channel by joining it and gain channel operator status. When the servers merged, they could kick out the original operators. This caused problems beyond loss of channels, since attackers would use various (often very bandwidth-intensive) methods to deliberately cause server splits which they would then abuse. As time has passed, various measures have been implemented to prevent takeovers in different kinds of IRC server software. The simplest way to prevent this from happening, implemented in IRCu, is to check which channel is newer when two merging servers each have a channel with the same name. If they were both created at the same time, they were the same channel, and operators on both sides should be kept. If one channel is newer than the other, this channel was created later, possibly as a takeover attempt. In this case, the special status of any users in the newer channel is removed when merging. Many servers have implemented Services, automated bots with special status, to protect channel operators. Channel creation during netsplits is not the only kind of takeover attempt, however. Other methods include cracking the computers of channel operators or stealing their Services password. Another popular form of takeover abused a protection system where a user on one side of a netsplit would take the nickname of a target on the other side. When the network reconnected, the servers would "collide" the nicknames, knocking both off the network. The attacker would typically have a second client which would quickly change its name while the original user was reconnecting.
|
 |
|
| Copyright 2005-2009 OnPedia.com. All Rights Reserved |
|
|