Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP Posting-Version: version B 2.10.3 4.3bsd-beta 6/6/85; site cbmvax.cbmvax.cbm.UUCP Path: utzoo!watmath!clyde!cbosgd!ukma!psuvm.bitnet!psuvax1!vu-vlsi!cbmvax!grr From: grr@cbmvax.cbm.UUCP (George Robbins) Newsgroups: net.news Subject: Re: Are we all victims of prankster-hackers? Message-ID: <392@cbmvax.cbmvax.cbm.UUCP> Date: Wed, 11-Jun-86 22:56:38 EDT Article-I.D.: cbmvax.392 Posted: Wed Jun 11 22:56:38 1986 Date-Received: Sun, 15-Jun-86 02:57:22 EDT References: <3344@amdahl.UUCP> Reply-To: grr@cbmvax.UUCP (George Robbins) Organization: Commodore Technology, West Chester, PA Lines: 36 In article <3344@amdahl.UUCP> gam@amdahl.UUCP (G A Moffett) writes: > >We received what must have been dozens of articles, alledgedly from >david@ukma.UUCP, which produced the following in our log file: > >Jun 10 19:24 hplabs.hplabs.UUCP received ng net.general.ctl subj 'forged cancel cmsg -- flames >... and so on. It's main side effect appeared to be forcing pointless >(but finite) looping in rnews. Fortunately the looping was spent >mostly in sleep(3)ing, but the many articles -- a few dozen at least -- >forced rnews to sleep so long that uuxqt forgot about it (the LCK.XQT >file wasn't updated). > >I am not plannig to flame david@ukma for this. At least until further >evidence is provided, I doubt that this was his work. He is an UUCP >Admin at the University of Kentucky, according to the Usenet/UUCP maps, >and I can imagine what sort of cute pranks like this bored college >hackers would love to try, blaming a convienient target. The prior >article found in the 'control' newsgroup was also from david@ukma.UUCP >so perhaps that was the source of an article which the pranksers >forged. > >What did other sites do? Or are you aware that this ``bug'' exists? >(do you have more than one uuxqt running now?). These messages went down smoothly here. No, this was not a prank - Dave was canceling the 30 some spurious posting to net.general that seeped of notes at mirror the other day. Now canceling someone else's messages netwide isn't normally a kosher sort of thing, which is why the messages indicated that they were forged. I guess he could have stated his intent a little more clearly though... -- George Robbins - now working with, uucp: {ihnp4|seismo|caip}!cbmvax!grr but no way officially representing arpa: cbmvax!grr@seismo.css.GOV Commodore, Engineering Department fone: 215-431-9255 (only by moonlite)