Session Start: Sat Jan 19 [21:56] *** Now talking in #helpclass [22:06] *** Topic is '#Help's training class - 12Floods what they are, how many types are there, how to protect yourself from them, how to act when a flood happens - Saturday 19th, 7pm Pacific / 10pm Eastern (US) / Sunday 20th, 1pm AEST (Aus)' [22:06] *** Set by Moby on Sat Jan 19 20:37:21 [22:07] okay i guess we should start [22:07] Greetings all and welcome to our class ;) , I'm Nina for those who dont know me :P [22:07] ok [22:07] (she had that on $cb) [22:07] For starters I'd like to thank Ian for announcing the class and converting the time according to each zone (cuz i hate it doing so *G*) and I would like to thank you all for coming and just so you know, if you cant attend the whole class feel free to leave when you must, the logs would be given away upon request. [22:07] ShyAngel i fell asleep before meeting here and just can't think :) [22:07] The information shared today/night will be based on things most of you already know, but it wont hurt to sit around and watch, we always learn something new, especially by interacting. [22:08] As you may see (and as AnimeMan pointed out!) I have the class prepared ahead, to save us some time instead of typing it instantly (which will take some time) I will simply copy and paste from my prepared text. [22:08] *** Kaloth changes topic to '#Help's training class - Floods what they are, how many types are there, how to protect yourself from them, how to act when a flood happens - In session' [22:08] :P [22:08] Just so the class goes quickly with no interruptions (no 1 wants to stay here forever :P ) I will resort to moderating (+m) the channel and will -m so we can interact and so questions may be asked, your patience and co-operation is highly appreciated. The lesson is divided into 5 parts, after every part would be the good time to ask questions. [22:08] no popups when helping *g* [22:09] shush Moby[Stuff] [22:09] unless you wana stay here for 3 hours? [22:09] ;) [22:09] =] [22:09] Any comment? questions before we start? [22:09] *** Joins: mec_de_mars (Aleh@MTL-ppp-145564.qc.sympatico.ca) [22:09] i lub j00 all [22:09] nope :) [22:09] go ahead:) [22:09] still some late commers.. [22:09] indeed [22:09] If there is something you need to say while moderated, just message me ;) [22:09] *** Kaloth sets mode: +m [22:09] If everyone is ready, please type Yes! [22:09] okay n/m that ;) [22:10] heh [22:10] :P [22:10] *Class has beginned!* [22:10] * Kaloth eyes Lebby [22:10] We encounter several types of channel/private harassments that can take place on IRC and one of them is referred to as "text flooding" , I'm sure you're all quite familiar with it ;) , it basically takes the form of several different text being sent in large volumes and at different speed everytime into the channel/private. [22:10] The purpose of this kind of flooding could be plain fun, or general annoyance, disruption or just lameness ;). [22:11] Some floods may cause your mirc to lock up or freeze or cause you to disconnect from the server you're currently on. [22:11] *** techi has left IRC [22:11] There are several types of floods as we all know, with my assistant Kaloth, we'll demonstrate a few in a moment. [22:11] * Kaloth struts [22:11] *** Joins: samhail (noone@ts12-086.dublin.indigo.ie) [22:11] 1) Manual text flooding [22:11] It's done by continuous rapid typing, or by typing one long line and then repeated by alternately clicking the arrow key and Enter. [22:12] *** Joins: Tmj (DarkDragon@203.106.179.189) [22:12] Kaloth will show you an example. [22:12] nina yaya la la la nina yaya yaya la la la nina dedo la la la agagagagagagsasasasasgfgfgfgfgfggfgfgfggfgffgafafaffaaffaaffaaffafafafaafhhghghghghghghghhgghhghghggsgsgsgsgsgsgssgyiyyydyyyiiyiyiyiyiyafafafafafaffafaaffafafabdbdbbdbdbdbdbdbdbdbdbdbdhhdhdhdhdhdeyeyeyeyeyeyyeyeyelklklkkkkklklklagaggagagagagagagagagagagagagagaagaga [22:12] yydyyyiiyiyiyiyiyafafafafafaffafaaffafafabdbdbbdbdbdbdbdyydyyyiiyiyiyiyiyafafafafafaffafaaffafa [22:12] nina yaya la la la nina yaya yaya la la la nina dedo la la la agagagagagagsasasasasgfgfgfgfgfggfgfgfggfgffgafafaffaaffaaffaaffafafafaafhhghghghghghghghhgghhghghggsgsgsgsgsgsgssgyiyyydyyyiiyiyiyiyiyafafafafafaffafaaffafafabdbdbbdbdbdbdbdbdbdbdbdbdhhdhdhdhdhdeyeyeyeyeyeyyeyeyelklklkkkkklklklagaggagagagagagagagagagagagagagaagaga [22:12] yydyyyiiyiyiyiyiyafafafafafaffafaaffafafabdbdbbdbdbdbdbdyydyyyiiyiyiyiyiyafafafafafaffafaaffafa [22:12] nina yaya la la la nina yaya yaya la la la nina dedo la la la agagagagagagsasasasasgfgfgfgfgfggfgfgfggfgffgafafaffaaffaaffaaffafafafaafhhghghghghghghghhgghhghghggsgsgsgsgsgsgssgyiyyydyyyiiyiyiyiyiyafafafafafaffafaaffafafabdbdbbdbdbdbdbdbdbdbdbdbdhhdhdhdhdhdeyeyeyeyeyeyyeyeyelklklkkkkklklklagaggagagagagagagagagagagagagagaagaga [22:12] yydyyyiiyiyiyiyiyafafafafafaffafaaffafafabdbdbbdbdbdbdbdyydyyyiiyiyiyiyiyafafafafafaffafaaffafa [22:12] thank you Kaloth [22:12] nina yaya la la la nina yaya yaya la la la nina dedo la la la agagagagagagsasasasasgfgfgfgfgfggfgfgfggfgffgafafaffaaffaaffaaffafafafaafhhghghghghghghghhgghhghghggsgsgsgsgsgsgssgyiyyydyyyiiyiyiyiyiyafafafafafaffafaaffafafabdbdbbdbdbdbdbdbdbdbdbdbdhhdhdhdhdhdeyeyeyeyeyeyyeyeyelklklkkkkklklklagaggagagagagagagagagagagagagagaagaga [22:12] yydyyyiiyiyiyiyiyafafafafafaffafaaffafafabdbdbbdbdbdbdbdyydyyyiiyiyiyiyiyafafafafafaffafaaffafa [22:12] next ;) or a file that can be played to the channel which will be considered an automated text flood [22:13] k/+jfZ7mVX4GFI0FaEITgPIyo+XmS+z/ue7/z388yF0brgdmxjrf8J/JoR7+4v/NFr5Ke3N0zT0Mfnv 7RhtHdI9aO9xWmw1dl1nW9sFbsXPyQ3hthZ19X4v4s3vrM3ZiXKVq6zB29TaPvGlx+vZz94O569dYcp+ cGOt94nGzp7csPBnTxFmov3fbLnMI6hO8nbf/XjNHT24m9U7BiaRn4uSk29vYbxbFvvOnzS+JTsCF12B m+n2J9DGkPlRl8XRaZE0an3VXCNPbvBpZRa3402VUPox7S3P3QRZwz26m4UM862WTcfHBL1qWJ/E1/0L o3eNm6AIYcmVpdk41G/jB1sO45+MFRcJMNh7/76aOEGehRKvOAVe5hCM9Ij/RBHX4mfcUY/+Beqt6hBA x6yTHeI02j/9V9sEzovhyJO8N4UJ3q3x0M6C [22:13] k/+jfZ7mVX4GFI0FaEITgPIyo+XmS+z/ue7/z388yF0brgdmxjrf8J/JoR7+4v/NFr5Ke3N0zT0Mfnv 7RhtHdI9aO9xWmw1dl1nW9sFbsXPyQ3hthZ19X4v4s3vrM3ZiXKVq6zB29TaPvGlx+vZz94O569dYcp+ cGOt94nGzp7csPBnTxFmov3fbLnMI6hO8nbf/XjNHT24m9U7BiaRn4uSk29vYbxbFvvOnzS+JTsCF12B m+n2J9DGkPlRl8XRaZE0an3VXCNPbvBpZRa3402VUPox7S3P3QRZwz26m4UM862WTcfHBL1qWJ/E1/0L o3eNm6AIYcmVpdk41G/jB1sO45+MFRcJMNh7/76aOEGehRKvOAVe5hCM9Ij/RBHX4mfcUY/+Beqt6hBA x6yTHeI02j/9V9sEzovhyJO8N4UJ3q3x0M6C [22:13] *** Parts: samhail (noone@ts12-086.dublin.indigo.ie) [22:13] thank you Kaloth [22:13] before we move on to part number 2 [22:13] *** Kaloth sets mode: -m [22:13] any1 has any questions? [22:13] wow [22:13] i have a comment [22:13] ./kill Kaloth flooding not allowed on DALnet. Stop immediately. [22:13] when i joi i saw flood! :P [22:13] Tmj yes, examples of floods. [22:13] AnimeMan tell [22:14] hahaha [22:14] Viper , lolz [22:14] .//run mailto:eb@dal.net?Subject=HELP I'M BEING HARASSED [22:14] :P [22:14] <@ShyAngel> The purpose of this kind of flooding could be plain fun, or general annoyance, disruption or just lameness ;). <-- alot of flooders do it for revenge, revenge is a big issue, e.g some guy flooded someone, and hes getin him back, it happens all the time [22:14] comments? questions? [22:14] nope no questions here [22:14] right AnimeMan :) it happens a lot [22:14] ;D [22:14] revenge is plain lame =) [22:14] any1 else? :) [22:14] i spose [22:15] hm [22:15] maybe if the channel spams [22:15] brb [22:15] *** Quits: ZzzVIPer (zzzviper@DALnet) (Quit: Killed (ChanServ (You've been online too long))) [22:15] they go and clean it out [22:15] can you be more specific please AnimeMan [22:15] Well [22:15] * staif is back : ) (Gone for 5hrs 5mins 48secs [22:15] well, as we know there are mass inviters over dalnet [22:15] * staif is away : Gone) (since 4:11:41 am. Pager/ on, Log/ on [22:15] yes [22:15] If someone is taking the 'law' into their own hands [22:15] and people get annoyed. by it [22:15] *** Parts: WhatEver`` (~Liar@212.33.196.195) [22:15] staif disable your away in here plz [22:16] They will get punished just like any other flooder. [22:16] ahh i got your point yes :) [22:16] *** Joins: e2ekiel (nerd@1Cust43.tnt2.wollongong.au.da.uu.net) [22:16] so they could flood the channel to get rid of the spam [22:16] which yes, is taking the law into your own hands, in a way [22:16] which is still wrong [22:16] yes it is [22:16] indeed :) [22:16] Always send to massads-report@dal.net [22:16] * staif is back : Gone) (Gone for 50secs [22:16] lol yes kaloth [22:16] Kaloth beat me to it :) [22:16] Include a /whois of the spammer and it will be dealt with :) [22:16] im not taking the side of flooders [22:16] AnimeMan we know :) [22:16] im neutral :/ [22:16] i gtg~ next time someone can help me send the logs to my email~ [22:17] Tmj sure. [22:17] any more comments? questions? [22:17] dalnettmj@yahoo.com [22:17] alright, moving on to part #2 [22:17] *** ShyAngel sets mode: +m [22:17] *** Kaloth sets mode: +m [22:17] ha. [22:17] 2) Text flooding automated by scripts [22:18] Automated Text flood to channel, /notice or /msg text floods like the well known Tsunami are a familiar part of flood scripts, Kaloth will demonstrate an example. [22:18] -._.-~`~-._.-~`~-._ .-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._ .-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._ .-~`~-._.-._._._._._____TsUnAmIr_____._._._._.-._.-._.-~`~-._.-~`~-.__.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-.__.-~`~-._.-~`~- [22:18] -._.-~`~-._.-~`~-._ .-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._ .-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._ .-~`~-._.-._._._._._____TsUnAmIr_____._._._._.-._.-._.-~`~-._.-~`~-.__.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-.__.-~`~-._.-~`~- [22:18] -._.-~`~-._.-~`~-._ .-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._ .-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._ .-~`~-._.-._._._._._____TsUnAmIr_____._._._._.-._.-._.-~`~-._.-~`~-.__.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-._.-~`~-.__.-~`~-._.-~`~- [22:18] excellent ;) [22:18] 3) Server message flood (with or without scripts) [22:18] These are normaly chock full of control codes [22:18] indeed [22:19] Nickflood (nickchange) ---> every time a user changes their nick, a message is sent to your client by the IRC server informing you of the change. It follows that if this is done continuously then your client will be flooded with nick change notices. [22:19] Many IRC flood scripts have built in high speed nickchange flooding options, while some services (like nickserv) protect against rapid nickchanges by slowing it down or even by disconnecting the flooder, some networks do not. [22:20] I'm sure it happens to lots of you, when you have to wait 20 seconds or more, to be able to change ur nick again. [22:20] Cycle flood (/part and /join) ----> every time a user joins or leaves your channel, a message is sent to your client by the IRC server informing you of this activity. Cycle flooding is when a user continuously parts (leaves) and joins your channel with the purpose of flooding your client with part and join notices. [22:20] unless, you have that disabled ;) under options -- Irc-- [22:20] *** Quits: Kaloth (kaos@CPE-203-45-225-81.qld.bigpond.net.au) (Write Error: Connection reset by peer) [22:21] Many IRC flood scripts have built in high-speed cycleflooding options. [22:21] Invite request flood ---> every time you are invited to join another channel you receive a message to your client asking you to join, not surprisingly this feature of IRC has also been exploited to annoy users online ;) with or without the aid of a script, a harasser can send you multiple /invite requests to a non existent channel. [22:21] you can of course ignore further attempts from this particular user :) [22:21] *** Joins: Kaloth (kaos@CPE-203-45-225-81.qld.bigpond.net.au) [22:21] *** ChanServ sets mode: +o Kaloth [22:22] *** Parts: yeA`icEy (~Alvin@sai-server3.saigawa-jh.saigawa.fukuoka.jp) [22:22] DCC request flood---> every time another user wishes to DCC you, you receive a message to your client asking you if you will accept the DCC, this feature of IRC can also be exploited to annoy users online, again *with or without* the aid of a script, a harrasser can send you a never-ending stream of DCC requests. [22:22] *** Parts: mec_de_mars (Aleh@MTL-ppp-145564.qc.sympatico.ca) [22:22] *** Joins: yeA`icEy (~Alvin@sai-server3.saigawa-jh.saigawa.fukuoka.jp) [22:22] CTCP floods ---> their purpose is to break your IRC connection by getting you kicked off the server. CTCP or Client to Client Protocol is a method of communication from one IRC client (program) and another. Using CTCP requests you can interrogate another user's IRC client and ask it to tell you information [22:23] The /ctcp version command, for example, asks the other user's client to respond with which client it is. The client answers the CTCP request with the information requested (unless you have set your client to ignore CTCP requests). [22:23] CTCP floods ---> their purpose is to break your IRC connection by getting you kicked off the server. CTCP or Client to Client Protocol is a method of communication from one IRC client (program) and another. Using CTCP requests you can interrogate another user's IRC client and ask it to tell you information [22:24] The /ctcp version command, for example, asks the other user's client to respond with which client it is. The client answers the CTCP request with the information requested (unless you have set your client to ignore CTCP requests of course ;) ) [22:24] *** Parts: Tmj (DarkDragon@203.106.179.189) [22:24] Common CTCP requests are: (syntax: /ctcp ) [22:24] 1) /ctcp version 2) /ctcp finger 3) /ctcp userinfo 4) /ctcp ping 5) /ctcp clientinfo 6) /ctcp time and last but not least 7) /ctcp sound [22:25] Yes, innocent little PING is a ctcp..and you CAN get pinged to death! ;) [22:25] *** ShyAngel sets mode: -m [22:25] ok [22:25] feel free to speak [22:25] yep lots abuse that p*ng [22:25] ok lol two things, firstly, id like to congratulate kaloth on a very realistic floods. and secondly... [22:25] he did a great job yes ;) [22:25] " while some services (like nickserv) protect against rapid nickchanges by slowing it down" it is a services thing or an IRCd feature that prevents rapid nick changes? [22:26] you forgot to mention how the flooders arent always just one person, but people use proxies to flood, and proxies to do ctcp, dcc, text, etc flood [22:26] it's IRCd [22:26] it's an IRCd feature [22:26] k [22:26] AnimeMan i'll get to that [22:26] ;) [22:26] hehe ok [22:26] what if someone where to use chanserv to flood. [22:27] *** Kaloth has quit IRC (Write Error: Connection reset by peer) <-- flooded himself off? lol [22:27] They would be akilled for services abuse. [22:27] no [22:27] see [22:27] like [22:27] what about it e2ekiel =) they get flooded off or akilled [22:27] heh no, my ISP sucks (THANKS TELSTRA) [22:27] * staif is away : asddsad) (since 4:23:08 am. Pager/ off, Log/ on [22:27] lol [22:27] *** Kaloth sets mode: +b staif*!*@* [22:27] *** Joins: |BacK|DooR| (~BacKDooR@tntwc01-3-31.idx.com.au) [22:27] please turn that off. [22:27] chanserv op #channel $str($+(,$chr(32),70) type that 2 times you get 140 lines of floods from cahnserv [22:27] <|BacK|DooR|> has the class started yet? [22:27] |BacK|DooR| yes [22:27] bd, its half way over ;D [22:28] <|BacK|DooR|> dam... [22:28] us scripting fellas are the only ones talking :/ [22:28] <|BacK|DooR|> did i miss anything important? [22:28] no [22:28] lol [22:28] *** Quits: staif (staif@h210n1fls33o1112.telia.com) (Quit: ) [22:28] e2ekiel, that's where ircops come in handy :) they get a notice from services reporting the abuse [22:28] nothing we already knew [22:28] yet you do not get akilled [22:28] err i forgot one ) [22:28] :P [22:29] e2ekiel : I believe chanserv has built in protection against that, but I'm not a services coder -- services does report if it gets used too much.. like constant mkicks [22:29] |BacK|DooR| i'll send you the log later. [22:29] e2ekiel you'd be surprised ;) [22:29] kaloth are you an oper too? [22:29] heh [22:29] nope [22:29] ;/ [22:29] and yes Kaloth it does have protection buildt in, it d/c the person doing so. [22:29] LOL constant mkicks [22:29] my name would be in the top [22:29] :/ [22:30] :) [22:30] not that ive done anything naughty >:-) [22:30] any more qs before we proceed? [22:30] nope, +m :D [22:30] good =) [22:30] *** ShyAngel sets mode: +m [22:30] We discussed earlier what happens when someone floods an IRC network with text. The IRC server will automatically kick that user off the network. The same is true of CTCP request flooding - repeated requests to your client asking for information will cause the sender to be disconnected by the server. [22:31] However, each time information is requested from your client by CTCP your client also sends out information, which means that when you are CTCP flooded your client starts flooding back with answers. The result of this is that both users get disconnected from the network. ;)) [22:31] By using clones in relay to flood you with CTCP requests, a harasser can get you kicked off the network for flooding, without getting disconnected himself. IRC attack scripts are available to automate ctcp flood attacks. [22:31] 10 Clones, doing 10 CTCPs each == 100 CTCPs :) [22:32] If you are being CTCP flooded and you don't have ops then it is important to /silence quickly. [22:32] more clones / more CTCPs each == even more CTCPs :\ [22:32] indeed [22:32] If the attack is coming from outside the channel you are in then you may also like to go //mode $me +iR and then change nicks so that the attacker no longer has your nick to play with. [22:32] *** ShyAngel sets mode: -m [22:32] any comments/qs before we move on to section 4 [22:32] what if all the nicks were registered :P [22:32] f10 { /ignore *!*@* | //mode $me +R } [22:32] sf10 { /ignore -r *!*@* | //mode $me -R } [22:32] good pm flood pro [22:32] :) [22:33] yea i added the / in there :/ [22:33] :) we got hit bad with a clone join and part flood and script wasn't it ShyAngel the other day [22:33] e2ekiel that's very very rare, however if it does happen, silencing/ignore the nicks or even ignoring ctcps/prvs for a lil while would be wise. [22:33] cool join #DIVX4LEECH FOR SOPS [22:33] yes chilee :) correct [22:33] .. damn spammer [22:33] AnimeMan : as I said -> massads-report@dal.net [22:33] AnimeMan lets keep outside channels stuffs out of this chan for now plz. [22:33] ok ok ok sorry [22:34] :/ [22:34] no problem :) [22:34] e2ekiel, normally, the registred nick flooding comes from botnets, registred eggdrop's nicknames all linked together [22:34] botnets/floodnets [22:34] ya [22:34] *nods* [22:34] i think dal is safe from a botnet-type litnum [22:34] yep [22:34] because it used the ident *lit* [22:34] and i think thats banned [22:34] AnimeMan : use /ignore -t for ctcps, -p for query floods etc [22:35] heh [22:35] In that little FKey script [22:35] right :) [22:35] yeah, i wrote that fkey thing ages ago :/ [22:35] AnimeMan time for an update ;) [22:35] hehe yeap [22:35] Alright, shall we proceed? [22:35] yes. [22:35] ./ignore -pntikd *!*@* [22:35] :) [22:35] Good ;) [22:36] *** ShyAngel sets mode: +m [22:36] 4) Avoiding IRC server defenses [22:36] Most IRC servers have a built in protection to prevent text flooding, after about 512 bytes of continuous input within a given time from one user they disconnect that user, clever harassers, however, can easily avoid this. [22:36] Slow flooding can be done with the /play command in mIRC, or Playtext in the Mac Client IRCle, which instructs your IRC client to play any selected textfile to the channel. The speed at which it sends can be adjusted, and so can be done slowly enough so that the sender is not disconnected by the IRC server. [22:37] The other way a harasser can safely flood your channel without themselves being kicked off by the server is by using multiple clones (multiple connection from the same source) to flood the channel in relay. [22:37] An IRC /whois on each clone (/whois ) will reveal the same hostname (node+host) after the @ symbol, indicating that the user has more than one connection to the network from their computer. ;) [22:37] If a user makes a multiple connection to a network of 5 clones, using 5 different servers on the network to do it (to avoid detection from IRCops), then they can mount a very fast and powerful flood attack on another user. [22:38] Because the clones take it in turns, no one clone is flooding continuously - they are operating in relay, and through different servers - so they are better protected from being kicked off the network by the server. Even if one clone, or several clones are kicked offline, the abuser is still there as long as one connection remains. [22:38] IRC attack scripts exist that automate the whole process of clone making and multiple relay text flooding. These are easily available from websites and are easy to operate. [22:38] *** ShyAngel sets mode: -m [22:38] Any qs bef4 we move on? :) [22:38] hmm [22:39] nope [22:39] did well there :D [22:39] where can i download a clone flooder [22:39] :D [22:39] nope [22:39] LOL [22:39] * |BacK|DooR| is too lazy to read all that [22:39] tsk tsk e2ekiel ;)) [22:39] * |BacK|DooR| reads most of it.. [22:39] ;P [22:39] ehem [22:39] lol [22:39] from me e2 :P [22:39] |BacK|DooR| then maybe you're in the wrong place? :) [22:39] heh [22:39] any qs? :) [22:39] nope [22:40] nope [22:40] oh wait [22:40] <|BacK|DooR|> nope [22:40] yes? :) [22:40] <|BacK|DooR|> oh wait yeh [22:40] * ShyAngel listens [22:40] wait me too [22:40] cant they also use /raw to prevent themselves from dc'ing? [22:40] <|BacK|DooR|> how many people from the same host are LEGALLY aloud on a server? [22:40] AnimeMan wether normal commands or /raw or even /quote all same ;) [22:40] oh so it doesnt prevent disconnection? [22:41] |BacK|DooR| it really depends on the server, each server has its own rules, however by connecting more than 1 client to a server you're taking some1 else's place [22:41] and that's really unfair, and unecessary. [22:41] well [22:41] <|BacK|DooR|> but i have 3 comps networked [22:41] <|BacK|DooR|> and they are sometimes all on mirc [22:41] ya what if the other guy wanted to flood aswell,.. very unfair [22:41] unless you're running a friendly bot (if the server allows it) then another connection is okay i guess (yet again depending on the server) [22:41] it's not like DAL is lacking in client capacity :) [22:41] e2ekiel no kidding heh? :) [22:42] yea [22:42] * |BacK|DooR| has no more questions.. [22:42] i know someone who was akill'ed yesterday for having 3 clones (2 comps) running [22:42] Kaloth true, however sometimes ppl like to connect to a particular server close to them, and it might be full [22:42] yeah [22:42] AnimeMan yes, it happens =) sometimes even 1 clone other than yourself. [22:42] * Kaloth grumbles about coins.* [22:42] like i said, depends on the server and its rules/staff. [22:42] * e2ekiel grumbles about *dal.net [22:42] anything else? or shall we proceed? [22:42] yea, but thats pretty unfair if its a family of ppl on computers.. [22:42] are you sure it was an akill? [22:42] *** Joins: CheesEE (nielb@mcld-dsl-24-231.mcleodusa.net) [22:43] for 3 clones? [22:43] yes [22:43] an akill [22:43] for 3 clones. [22:43] but hes unakilled now [22:43] it was temp [22:43] AnimeMan ircops can tell the difference between normal clones and cafes/networks/ etc [22:43] was he on an open proxy? [22:43] no proxy [22:43] running off his hostname [22:43] bet you you couldn't Sheyna [22:43] ShyAngel [22:43] * Kaloth shrugs [22:43] yes CheesEE? [22:43] * |BacK|DooR| sorat has a question.. [22:43] <|BacK|DooR|> sorta* [22:43] ask |BacK|DooR| [22:44] <|BacK|DooR|> its about proxies [22:44] lol [22:44] <|BacK|DooR|> if they are not allowed on any6 servers.. why is it in the mirc options? [22:44] |BacK|DooR| good question, we should ask Khaled about that ;) [22:44] lol [22:44] Because there are times you need to use a proxy [22:44] <|BacK|DooR|> i used to use proxies so my 3 networked computers werent clones.. now they are auto killed all the time [22:44] <|BacK|DooR|> :( [22:45] like at my old school, and my fathers work [22:45] indeed, and some proxies are really harmless. [22:45] any more qs/comments? or may we move on [22:45] .. [22:45] lol [22:45] . [22:45] we can move on [22:45] <|BacK|DooR|> move on! [22:45] thank you :) [22:45] <|BacK|DooR|> :) [22:45] nope move on :> [22:45] well [22:45] *** ShyAngel sets mode: +m [22:45] if you are on a network [22:45] Kaloth? :) [22:45] with a secure proxy [22:46] * ShyAngel pays attention [22:46] you have to specify the address of the proxy [22:46] to connect :) [22:46] *nods* [22:46] thats why it's in mIRC [22:46] :) moving on [22:46] 5) Defense and response against text flooding (last part) [22:47] Text flooding, although annoying, is easily neutralized by using one of the ignore commands on IRC ----> /ignore nick 3 [22:47] 2,3,4 depends on which you prefer ;) [22:47] The use of /ignore nick 3 instead of just /ignore nick means that the ignore command has the ability to follow nick changes. A normal /ignore will only be effective until the flooder changes nicks. /ignore 3 in fact places an /ignore on the hostmask of the flooder rather than the nick. [22:47] just to clear things up :) [22:48] moving on ---> /silence +hostmask [22:48] Text flooding is not going to break your IRC connection, but you may prefer to /silence since people who text flood will also probably be CTCP flooding, and CTCP flooding CAN break your connection. [22:49] Preferred /silence masks are either: U@H (User@Host): /silence +*!*user@*.host or Hostname: /silence *!*@hostname if the person consists on attempting then the whole ip (possibly isp for a lil time) is suggested to be silenced /silence +*!*@ip-here [22:49] An important factor to keep is mind and remember is that the /silence command is not enabled for all users on all nets. On some nets, only IRCops can /silence. It is the perogative of each net whether or not that command is allowed, we on DALnet are lucky ;) [22:49] option number 3 ----> kick/ban [22:50] The appropriate response to text flooding from ops depends on whether the flood is a high speed scripted flood (premeditated) or a slow flood being done manually (more often done without premeditation). [22:50] Also note that /ignore doesn't stop the data reaching you -- you can still be lagged down if you are under attack by a particularly large botnet.. /silence stops the data at the server = no lag from flooders. [22:50] exactly [22:50] For a slow, low volume flood ops should follow a 3 strikes policy: [22:50] 1) Ask politely to stop in /msg or in the channel. [22:51] 2) If the user doesnt stop kick him with a warning that further attempts will result in a ban. [22:51] 3) If user proceed to flood after he/she was kicked, a Kick/ban using U@H or *!*@ip would be the next step. [22:51] For a high speed high volume flood Ops should kick/ban immediately, also if needed set +RM if Chanserv is down +im will do for a lil moment, till things calm down, if no ops around, please contact an IRCop, they will gladly intervene. [22:51] If flooding of the Op continues in /msg or /notice, then use /ignore 3, /silence *!*user@*.host or /silence *!*@hostmask etc... [22:52] Most warnings are preferable to be given in a /msg or /notice this is to avoid humiliating the flooder, which will only escalate the situation, been there ;) trust me [22:52] *** ShyAngel sets mode: -m [22:52] rofl [22:52] :) [22:52] lol [22:52] * |BacK|DooR| has questions :) [22:52] ok [22:52] If you are constantly being disconnected / locked up before you get a chance to isolate the user@host of the flooder [22:52] ;) [22:52] firs tthing [22:52] you can quickly /silence *!*@* [22:52] first thing* [22:52] get the idents/hostmasks [22:52] silence them [22:52] it's really a wise decision to always log [22:52] and then /silence -*!*@* [22:53] <|BacK|DooR|> what if the is freezing ur mirc and u cant type anything? [22:53] if you can type /silence or /ignore before your flooded off (try 1 second) then good on you. [22:53] <|BacK|DooR|> if the flood* [22:53] exactly bd [22:53] the time the messages start rolling in [22:53] you just have to act fast [22:53] your either 1) frozen up or 2) disconnected from the server [22:53] there are plenty of anti-flood scripts [22:53] |BacK|DooR| it happens a lot, you'll have to wait for the flood to end or you have the choice to ctrl+alt+del and close the application urself. [22:53] just leave yourself +R all the time [22:53] thats why you should have a (5 msg's in 2 secs) or similar script [22:53] or that [22:53] if your whole pc freezes, then i guess you'll have to reboot :) [22:54] lets just hope it doesnt get to that point. [22:54] hmmm [22:54] yea [22:54] bd you can script [22:54] just make a protection bot [22:54] heh [22:54] i was flooded yesterday [22:54] <|BacK|DooR|> 1) what if the flood is freezing ur mirc and u cant type anything? 2) what if the the flood is done by more then one host? [22:54] or that ;) but if some ppl dont have scripting abilities, and dont know any1 that would help them, they dont have those choices. [22:54] it had made so many windows it was showing 'error making window' in status [22:54] You can easily reconnect and /silence *!*@* [22:54] then add the masks one by one [22:55] then remove *!*@* [22:55] |BacK|DooR| like i said, unless you have a script to triger on such , you'll have to close the application [22:55] plus an /ignore -ntikpd *!*@* [22:55] <|BacK|DooR|> k.. [22:55] before you are connected [22:55] (after being disconnected) [22:55] or you can just not come back on irc till 1hour later :) [22:55] will stop notices, ctcps, invites, control codes, privates and DCCs [22:56] e2ekiel would you? :) [22:56] yea [22:56] :) [22:56] 1 hour? :) [22:56] right! :P [22:56] ok fine 3hours [22:56] if he was tied up in a game of jippii [22:56] knowing you probably 5 mins ;) [22:56] :D [22:56] lol :D [22:56] anything else ? :) [22:57] there goes an hour [22:57] :/ [22:57] Alright folks ;) this is it, I know Ian asked you to bring your own cookies but for those who didnt feel free to help yourself, we have cookies, milk, coffee tea, you've all been great and earned it. [22:57] ) [22:57] lolzzz [22:57] heh [22:57] (02:53:25 pm) -twisted.ma.us.dal.net:@#sux0r- dvdrip invited [F]Nimsoft into channel #sux0r. [22:57] (02:53:26 pm) -twisted.ma.us.dal.net:@#sux0r- dvdrip invited [F]Nimsoft into channel #sux0r. [22:57] (02:53:27 pm) -twisted.ma.us.dal.net:@#sux0r- dvdrip invited [F]Nimsoft into channel #sux0r. [22:57] (02:53:27 pm) -twisted.ma.us.dal.net:@#sux0r- dvdrip invited [F]Nimsoft into channel #sux0r. [22:57] NO [22:57] frieken hell [22:57] stop him!?!? lol [22:57] we wrapped it in less than an hour ;) that wasnt so bad was it? [22:57] * Kaloth steals the coockies [22:57] MINEEEEEEe [22:57] akill! [22:57] * yeA`icEy grabs all the foods [22:57] lol Kaloth [22:57] ShyAngel, mind if i take the cookies milk and coffee home? [22:57] sure [22:58] * e2ekiel shoves it all in his wallet [22:58] :/ [22:58] WALLET??! [22:58] good class :) [22:58] how bigs your wallet? lol [22:58] lolz [22:58] * ShyAngel gives Kaloth a spelling101 class [22:58] aren't we going to include TCP, UDP, and SYN (commonly known simply as packets) floods in this discussion? because it is very unfortunate to most of the Win* users (except those having a decent firewall) that they have no idea what's happening in the background, and these, above all, are the most harmful floods in one's system. and yes, it is among one of those prohibited by DALnet. :) [22:58] er [22:58] does this chan always have classes? [22:58] has anyone been logging? [22:58] oh [22:58] packeting [22:58] Jedd, of course we didnt list most of the types of floods, only a few [22:58] me [22:58] i logged the whole thing [22:58] yes i was Kaloth [22:58] phew [22:58] lol [22:59] there are floods creations we havent witnessed yet =) but it was just to give you an idea. [22:59] :-D [22:59] lol [22:59] AnimeMan yes we have classes weekly [22:59] n0d3[A], message me [22:59] Kaloth you havent been logging? heheheh [22:59] nina , whats next week class topic >>? [22:59] I thought you were :P [22:59] i didnt need to log it [22:59] Kaloth it appears i typed /log off instead of /log on [22:59] we can report such things, right? to opers, i mean? becaue i know of a few channels with a minimum of 400 users whose OPs are the first ones scanning the channel. [22:59] smart heh? :) [23:00] of course Jedd [23:00] yeA`icEy, Kaloth has the schedule of the classes. [23:00] I do? [23:00] I mean [23:00] yes I do! [23:00] thanks nina. :) you are ignoring notices, aren't you? [23:00] ;) [23:00] lol Kaloth [23:00] yes Jedd i was [23:00] lolz [23:00] lololololol [23:00] thanks guys, this conversation really boosted up my cofidence to continue on my flooding expoditions [23:00] i noticed you like 20 times [23:00] Kaloth: can you show me the class schedule ?? [23:00] Jedd: The answer to stopping those kind of floods is contacting your isp [23:00] not anymore now Jedd [23:00] e2ekiel remind me to kill u later [23:01] okay [23:01] lolzz [23:01] CheesEE: actually it's more of securing your system rather than relying on your ISP. :) [23:01] Just got home before, read over it, another great class, thanks :) [23:01] Thank you all for coming :) and we hope to see you in the next scheduled class. [23:01] Jedd: Are you aware with how those kind of floods work these days? [23:01] hiya Erika hun =) [23:01] *** Joins: IanAFK[bbs] (kaos@CPE-203-45-225-81.qld.bigpond.net.au) [23:01] *** ChanServ sets mode: +o IanAFK[bbs] [23:01] hey :) [23:01] *** Quits: Kaloth (kaos@CPE-203-45-225-81.qld.bigpond.net.au) (Write Error: Connection reset by peer) [23:01] lol ......... [23:01] ppfftt me going to class???????? [23:02] ya i'll be there... [23:02] :| [23:02] Jedd: They rely on the "big datastream, smaller pipe" phenomenon [23:02] * ShyAngel pets e2ekiel [23:02] yes CheesEE, i use BSD. but anyway, thanks Kaloth and ShyAngel for a wonderful class. I have to go back to my sleep now. :) [23:02] No matter how much you secure your system [23:02] ni ni Jedd thanks for coming [23:02] sigh [23:02] *** IanAFK[bbs] is now known as Kaloth [23:02] if they reach you, they have already done their job [23:02] CheesEE: not on OpenBSD. but that's another story. :) [23:02] Jedd bsd is a linux isn't it? [23:03] Jedd: Yes Jedd [23:03] Jedd: Any OS [23:03] They are designed to choke the pipe [23:03] BSD owns linux ;X [23:03] If the data is going down the pipe [23:03] i agree Kaloth. [23:03] it is doing its job [23:03] lol. bye. [23:03] no matter what OS is at the end of it [23:03] ok guys wait i have a question [23:03] chilee :) [23:03] what type of client do you use for being on dalnet using linux? [23:04] yeA`icEy :P [23:04] They used to rely on exploiting the tcp stack a few years ago [23:04] but not anymore [23:04] woooooooo [23:04] knows what shes talking about^ [23:04] i just got linux installed but the one that came with mine doesn't recognize most dalnet commands [23:05] chilee: there are many, IRCII one of being the oldest, then follows BitchX, a better GNU client is XChat and many more. i prefer BX and XChat for their ability to wrap SSL (secure tunneling and encryption) :) [23:05] ok i'll find them on the web thx [23:05] <|BacK|DooR|> that was god ShyAngel :) for the people that didnt know that that is.. but it was good :) [23:05] jedd = irc op? [23:05] lol [23:05] *nods* [23:06] ohhh [23:06] thought so [23:06] AnimeMan: no. never wanted to. [23:06] oh [23:06] ;/ [23:06] alright folks, thanks for coming ;) and thanks Kaloth ;) i need to go grab a bite! see you guys later? :) Session End: Sat Jan 19