🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: altnet.general
Article #694

Re: Alt.net UDP re-proposed. Email correspondence to follow.

#694
From: Follower of the Clawed Albino
Date: Mon, 17 Nov 1997 00:00
107 lines
6957 bytes
-----BEGIN PGP SIGNED MESSAGE-----

In article <34741e6b.4170729@news.enter.net>,
felonyphil@ITSPAMBLOCKrocketmail.com (Phil Oliver) carved on the cave wall:
>On Mon, 17 Nov 1997 01:05:36 -0500, afn23950@pop3.afn.org (Follower of
>the Clawed Albino) announced:
>
>>   * Apparently, based on discussion with Caputo, he does not consider
>>     attempts by his users to deliberately flood Usenet groups (either 
>>     alone or in conjunction with other individuals) as a flood unless
>>     a script is used.  (He also does not consider whether a user is in
>>     fact doing this with other persons, considers "morph" accounts as
>>     separate incidents, and may consider each incident of abuse as a
>>     separate act [not considering that the person has a history of net.
>>     abuse]).
>
>You're either forgetting or ignoring that many people disagree with
>your assessment that some of your examples are "flooding".  In your
>flood reports you included individuals who'd only posted a couple
>off-topic messages to AHWW in a single day.  *You've* probably posted
>more off-topic messages than that to n.a.n-a.u in the past 4 hours
>(and certainly posted more in size).

The posters from alt.net (who, I will note, were NOT alone in this) were
attempting a flood.  I document this by the following:

1) Upwards of 25-30 messages/day, of which roughly 15-20 were from alt.
   net, were posted to alt.horror.werewolves daily (excepting the binary
   floods, where thousands of posts were sent through an open NNTP 
   server).  Normal traffic on alt.horror.werewolves is 40-60 messages/
   day *at most*.

   Towards the end, posts were also affecting alt.barney.dinosaur.die.die.
   die which has upwards of 10 posts/day.

2) As I have stated, this was in fact part of a *coordinated* attempt to
   drive regulars off alt.horror.werewolves.  I honestly do suspect, based
   on previous attacks, that if more open NNTP servers were available the
   attack would be FAR more severe.  Furthermore, the stated intent of
   the entities *was* that of a flood.

3) I can state that, at least in the case of AHWW, the flood did in part
   have its intended effect.  Several regulars have left directly because
   of the flood, and Fluffy did offer to start a list because of the
   flood.  The intent of the list was to replace alt.horror.werewolves 
   because *it was being made unusable*.

4) This is the latest in a series of attacks that have occured since 
   November 1996, which have been targeted largely at myself.  In essence,
   this is the latest episode of an ongoing DOS attack aimed at
   alt.horror.werewolves.  (This is one factor of many that has led to
   me contacting law enforcement over this matter.  At this point, it
   is crossing the line to harassment and a persistent DOS attack.  This
   is also a major factor on why I requested IP numbers.)

5) As I also stated, there are issues that complicate things quite a bit
   in this situation.  There is evidence that the attacks are meant as an
   attempt at harassment aimed at myself and at other folks.  The persons
   responsible for this have harassed family members of targets at times,
   including my family (the listserv-bombing of my fiance and a revenge
   spam targeted directly at Petrea Mitchell's father).  There is also
   other net.abuse going on by at least one of the parties involved.

6) What Caputo has not detailed--many of the posts were reposts of random
   FAQs, reposts of articles from NANA*, reposts of articles from alt.
   fan.karl-malden.nose, etc.  The "meowbot" reposted one article no less
   than four separate times, and with each morph reposted ALL material he
   had posted previously PLUS some new articles--all largely reposts of
   articles from other newsgroups.  (There were other posts like this from
   open NNTP servers abused by the perps in this run--one run being
   reposts of *all* Dave Hayes' recent posts on NANA* from an NNTP server
   at the Medical University of Lviv, etc.)  The last rounds in the attack
   came from Altopia and an open server abused for a binary flood.

7) Over 100 articles (out of 280-odd) on alt.horror.werewolves were from
   alt.net at the end of this round.  This is from alt.net *alone*; this
   does *not* count other sites that were abused in the attacks.  (If 
   these are counted, the total goes up to ~180 posts.  Some of the early
   "Bischoff" posts and the binary-floods are missing in this total, as
   are the initial round of the "meowbot" posts which were cancelled.
   These were on Airnews' server, which holds posts for approximately 2
   weeks, and during the period of ~25 October to 5 November (when the
   flood ended, roughly).  If binary-flood posts and the initial
   "Bischoff" posts, as well as the initial round of "meowbot" posts, are
   counted, the total does go up higher.)  

   I had a similar percentage reported by an Altopia user who also has
   noted that ~33% of posts on alt.horror.werewolves were posts from
   Altopia (before the last binary flood).  

- -- 
- -Windigo The Feral (NYAR!)
Fight the Woodside Literary Agency! Support the Jayne Hitchcock HELP fund 
<http://www.geocities.com/Hollywood/6172/helpjane.htm> * Boycott Internet 
Spam! <http://spam.abuse.net/spam> * Ban Spam Now! <http://www.cauce.org>

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3a
Charset: cp850

iQCUAwUBNHEcxT0Jz30h6bOhAQFodQP2PPLRY5MkDqwpVTPGia4Ch9yEnB9zQski
1D1PaZExlUVsaSOYW5VhqMkMPWZ4IY6atoKvfVjDTFdlI3XottMz1htWkwk7SUUi
Jl5zdstvFIP8ePz6pbIQstCXyItqIrnrUjaEppSRWVQWjfMVb13mHk1Cs9i6l0VC
vVCDPZajPA==
=V0Xh
-----END PGP SIGNATURE-----
Technical Details
Message-ID: <FB699C1B11B7B0A0.38A22C9302FEF36E.BDAD46B16C205341@library-proxy.airnews.net>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail
References: <2E23C4C086DC54E4.DD5852895AF15EA4.775F6371898C1AB0@library-proxy.airnews.net> <64ld0o$q74$0@207.14.113.2> <0D9CE15A15716069.A1962627A15D4D23.CBFA11C72A33EDCC@library-proxy.airnews.net> <34741e6b.4170729@news.enter.net>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: fd665,af9e7bb8e12481e5
X-Google-Attributes: gidfd665,public
X-Google-Thread: 1160de,af9e7bb8e12481e5
X-Google-Attributes: gid1160de,public
From: afn23950@pop3.afn.org (Follower of the Clawed Albino)
Subject: Re: Alt.net UDP re-proposed. Email correspondence to follow.
Date: 1997/11/17
Message-ID: <FB699C1B11B7B0A0.38A22C9302FEF36E.BDAD46B16C205341@library-proxy.airnews.net>
X-Deja-AN: 290612383
References: <2E23C4C086DC54E4.DD5852895AF15EA4.775F6371898C1AB0@library-proxy.airnews.net> <64ld0o$q74$0@207.14.113.2> <0D9CE15A15716069.A1962627A15D4D23.CBFA11C72A33EDCC@library-proxy.airnews.net> <34741e6b.4170729@news.enter.net>
X-Orig-Message-ID: <cZRc0kREjP7A092yn@pop3.afn.org>
NNTP-Posting-Time: Tue Nov 18 11:32:39 1997
X-Attn-Enlow: The same goes for you as in the X-Attn-Lyons header, buddy.
Organization: Bonesingers Collective, Craftworld Lu'Vaul, Kappa Pegasi
NNTP-Proxy-Relay: library.airnews.net
X-HTML-Torture: <html><blink><h3>Use a newsreader, dammit</h3></blink></html>
Reply-To: afn23950@afn.org
X-Meow: Meow
Newsgroups: altnet.general,news.admin.net-abuse.usenet
X-Attn-Lyons: vs. Hustler_).  Fuck off--I'll parody whomever I please.