1 <!DOCTYPE HTML PUBLIC
"-//W3C//DTD HTML 3.2//EN">
4 <TITLE> [IRCServices] auto suspension after invalid passwords
6 <LINK REL=
"Index" HREF=
"index.html" >
7 <LINK REL=
"made" HREF=
"mailto:ircservices%40ircservices.za.net?Subject=%5BIRCServices%5D%20auto%20suspension%20after%20invalid%20passwords&In-Reply-To=3abb3388.65462%40prima-lan.net">
8 <META NAME=
"robots" CONTENT=
"index,nofollow">
9 <META http-equiv=
"Content-Type" content=
"text/html; charset=us-ascii">
10 <LINK REL=
"Previous" HREF=
"001694.html">
11 <LINK REL=
"Next" HREF=
"001691.html">
13 <BODY BGCOLOR=
"#ffffff">
14 <H1>[IRCServices] auto suspension after invalid passwords
</H1>
15 <B>Mark Hetherington
</B>
16 <A HREF=
"mailto:ircservices%40ircservices.za.net?Subject=%5BIRCServices%5D%20auto%20suspension%20after%20invalid%20passwords&In-Reply-To=3abb3388.65462%40prima-lan.net"
17 TITLE=
"[IRCServices] auto suspension after invalid passwords">markh at eurodltd.co.uk
19 <I>Fri Mar
23 13:
59:
01 PST
2001</I>
21 <LI>Previous message:
<A HREF=
"001694.html">[IRCServices] auto suspension after invalid passwords
23 <LI>Next message:
<A HREF=
"001691.html">[IRCServices] auto suspension after invalid passwords
25 <LI> <B>Messages sorted by:
</B>
26 <a href=
"date.html#1690">[ date ]
</a>
27 <a href=
"thread.html#1690">[ thread ]
</a>
28 <a href=
"subject.html#1690">[ subject ]
</a>
29 <a href=
"author.html#1690">[ author ]
</a>
34 <PRE>If the nickname is suitably protected, e.g. SET KILL IMMED and a limited
35 access list, then the nickname cannot be used by anyone other than the
36 actual services root so it will not happen.
38 If it is still of concern, expiring a suspension invoked purely by the
39 invalid password trap would fix this since the nickname would return to use
40 after a set period while still making life difficult enough for would be
41 password crackers since they cannot
"brute force
" through multiple
42 connections/logons and will have to wait a fair amount of time between
45 An
"accumulator
" could be used to invoke a permanent suspension for the case
46 of a very determined and patient crack attempt.
51 ><i> -----Original Message-----
52 </I>><i> From:
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">ircservices-admin at ircservices.za.net
</A>
53 </I>><i> [mailto:
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">ircservices-admin at ircservices.za.net
</A>]On Behalf Of
54 </I>><i> Andrew Church
55 </I>><i> Sent:
23 March
2001 11:
28
56 </I>><i> To:
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">ircservices at ircservices.za.net
</A>
57 </I>><i> Subject: Re: [IRCServices] auto suspension after invalid passwords
60 </I>><i> >If this feature is enabled, a rogue user could suspend
61 </I>><i> anyone's nick - even
62 </I>><i> >the services roots'. surely this is a bit of a problem? Comments?
64 </I>><i> Hm, this is a good point. Suggestions (other than the
65 </I>><i> obvious
"don't
66 </I>><i> automatically suspend nicks
")?
68 </I>><i> --Andrew Church
69 </I>><i> <A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">achurch at achurch.org
</A> | New address - please note.
70 </I>><i> <A HREF=
"http://achurch.org/">http://achurch.org/
</A> |
メールアドレスが変わりました。
72 </I>><i> -----------------------------------------------------------
73 </I>><i> To unsubscribe, mail
<A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">ircservices-request at ircservices.za.net
</A>
74 </I>><i> with the word UNSUBSCRIBE in the subject of the mail.
75 </I>><i> <A HREF=
"http://www.ircservices.za.net/mailman/listinfo/ircservices">http://www.ircservices.za.net/mailman/listinfo/ircservices
</A>
85 <LI>Previous message:
<A HREF=
"001694.html">[IRCServices] auto suspension after invalid passwords
87 <LI>Next message:
<A HREF=
"001691.html">[IRCServices] auto suspension after invalid passwords
89 <LI> <B>Messages sorted by:
</B>
90 <a href=
"date.html#1690">[ date ]
</a>
91 <a href=
"thread.html#1690">[ thread ]
</a>
92 <a href=
"subject.html#1690">[ subject ]
</a>
93 <a href=
"author.html#1690">[ author ]
</a>