Article View: altnet.general
Article #694Re: Alt.net UDP re-proposed. Email correspondence to follow.
From: Follower of the Clawed Albino
Date: Mon, 17 Nov 1997 00:00
Date: Mon, 17 Nov 1997 00:00
107 lines
6957 bytes
6957 bytes
-----BEGIN PGP SIGNED MESSAGE----- In article <34741e6b.4170729@news.enter.net>, felonyphil@ITSPAMBLOCKrocketmail.com (Phil Oliver) carved on the cave wall: >On Mon, 17 Nov 1997 01:05:36 -0500, afn23950@pop3.afn.org (Follower of >the Clawed Albino) announced: > >> * Apparently, based on discussion with Caputo, he does not consider >> attempts by his users to deliberately flood Usenet groups (either >> alone or in conjunction with other individuals) as a flood unless >> a script is used. (He also does not consider whether a user is in >> fact doing this with other persons, considers "morph" accounts as >> separate incidents, and may consider each incident of abuse as a >> separate act [not considering that the person has a history of net. >> abuse]). > >You're either forgetting or ignoring that many people disagree with >your assessment that some of your examples are "flooding". In your >flood reports you included individuals who'd only posted a couple >off-topic messages to AHWW in a single day. *You've* probably posted >more off-topic messages than that to n.a.n-a.u in the past 4 hours >(and certainly posted more in size). The posters from alt.net (who, I will note, were NOT alone in this) were attempting a flood. I document this by the following: 1) Upwards of 25-30 messages/day, of which roughly 15-20 were from alt. net, were posted to alt.horror.werewolves daily (excepting the binary floods, where thousands of posts were sent through an open NNTP server). Normal traffic on alt.horror.werewolves is 40-60 messages/ day *at most*. Towards the end, posts were also affecting alt.barney.dinosaur.die.die. die which has upwards of 10 posts/day. 2) As I have stated, this was in fact part of a *coordinated* attempt to drive regulars off alt.horror.werewolves. I honestly do suspect, based on previous attacks, that if more open NNTP servers were available the attack would be FAR more severe. Furthermore, the stated intent of the entities *was* that of a flood. 3) I can state that, at least in the case of AHWW, the flood did in part have its intended effect. Several regulars have left directly because of the flood, and Fluffy did offer to start a list because of the flood. The intent of the list was to replace alt.horror.werewolves because *it was being made unusable*. 4) This is the latest in a series of attacks that have occured since November 1996, which have been targeted largely at myself. In essence, this is the latest episode of an ongoing DOS attack aimed at alt.horror.werewolves. (This is one factor of many that has led to me contacting law enforcement over this matter. At this point, it is crossing the line to harassment and a persistent DOS attack. This is also a major factor on why I requested IP numbers.) 5) As I also stated, there are issues that complicate things quite a bit in this situation. There is evidence that the attacks are meant as an attempt at harassment aimed at myself and at other folks. The persons responsible for this have harassed family members of targets at times, including my family (the listserv-bombing of my fiance and a revenge spam targeted directly at Petrea Mitchell's father). There is also other net.abuse going on by at least one of the parties involved. 6) What Caputo has not detailed--many of the posts were reposts of random FAQs, reposts of articles from NANA*, reposts of articles from alt. fan.karl-malden.nose, etc. The "meowbot" reposted one article no less than four separate times, and with each morph reposted ALL material he had posted previously PLUS some new articles--all largely reposts of articles from other newsgroups. (There were other posts like this from open NNTP servers abused by the perps in this run--one run being reposts of *all* Dave Hayes' recent posts on NANA* from an NNTP server at the Medical University of Lviv, etc.) The last rounds in the attack came from Altopia and an open server abused for a binary flood. 7) Over 100 articles (out of 280-odd) on alt.horror.werewolves were from alt.net at the end of this round. This is from alt.net *alone*; this does *not* count other sites that were abused in the attacks. (If these are counted, the total goes up to ~180 posts. Some of the early "Bischoff" posts and the binary-floods are missing in this total, as are the initial round of the "meowbot" posts which were cancelled. These were on Airnews' server, which holds posts for approximately 2 weeks, and during the period of ~25 October to 5 November (when the flood ended, roughly). If binary-flood posts and the initial "Bischoff" posts, as well as the initial round of "meowbot" posts, are counted, the total does go up higher.) I had a similar percentage reported by an Altopia user who also has noted that ~33% of posts on alt.horror.werewolves were posts from Altopia (before the last binary flood). - -- - -Windigo The Feral (NYAR!) Fight the Woodside Literary Agency! Support the Jayne Hitchcock HELP fund <http://www.geocities.com/Hollywood/6172/helpjane.htm> * Boycott Internet Spam! <http://spam.abuse.net/spam> * Ban Spam Now! <http://www.cauce.org> -----BEGIN PGP SIGNATURE----- Version: 2.6.3a Charset: cp850 iQCUAwUBNHEcxT0Jz30h6bOhAQFodQP2PPLRY5MkDqwpVTPGia4Ch9yEnB9zQski 1D1PaZExlUVsaSOYW5VhqMkMPWZ4IY6atoKvfVjDTFdlI3XottMz1htWkwk7SUUi Jl5zdstvFIP8ePz6pbIQstCXyItqIrnrUjaEppSRWVQWjfMVb13mHk1Cs9i6l0VC vVCDPZajPA== =V0Xh -----END PGP SIGNATURE-----
Technical Details
Message-ID:
<FB699C1B11B7B0A0.38A22C9302FEF36E.BDAD46B16C205341@library-proxy.airnews.net>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<2E23C4C086DC54E4.DD5852895AF15EA4.775F6371898C1AB0@library-proxy.airnews.net> <64ld0o$q74$0@207.14.113.2> <0D9CE15A15716069.A1962627A15D4D23.CBFA11C72A33EDCC@library-proxy.airnews.net> <34741e6b.4170729@news.enter.net>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: fd665,af9e7bb8e12481e5 X-Google-Attributes: gidfd665,public X-Google-Thread: 1160de,af9e7bb8e12481e5 X-Google-Attributes: gid1160de,public From: afn23950@pop3.afn.org (Follower of the Clawed Albino) Subject: Re: Alt.net UDP re-proposed. Email correspondence to follow. Date: 1997/11/17 Message-ID: <FB699C1B11B7B0A0.38A22C9302FEF36E.BDAD46B16C205341@library-proxy.airnews.net> X-Deja-AN: 290612383 References: <2E23C4C086DC54E4.DD5852895AF15EA4.775F6371898C1AB0@library-proxy.airnews.net> <64ld0o$q74$0@207.14.113.2> <0D9CE15A15716069.A1962627A15D4D23.CBFA11C72A33EDCC@library-proxy.airnews.net> <34741e6b.4170729@news.enter.net> X-Orig-Message-ID: <cZRc0kREjP7A092yn@pop3.afn.org> NNTP-Posting-Time: Tue Nov 18 11:32:39 1997 X-Attn-Enlow: The same goes for you as in the X-Attn-Lyons header, buddy. Organization: Bonesingers Collective, Craftworld Lu'Vaul, Kappa Pegasi NNTP-Proxy-Relay: library.airnews.net X-HTML-Torture: <html><blink><h3>Use a newsreader, dammit</h3></blink></html> Reply-To: afn23950@afn.org X-Meow: Meow Newsgroups: altnet.general,news.admin.net-abuse.usenet X-Attn-Lyons: vs. Hustler_). Fuck off--I'll parody whomever I please.