IRC in the Dog House? 94
Emperor Tiberius asks: "It seems more and more dedicated server companies are turning tail to the idea of hosting IRC machines. Hosts like Rackshack are adding 'no-IRC' rules to their AUPs at the risk of having one's server unplugged. Why is IRC (the once applauded chat medium) being thrown to the dogs? Some might say the horrendous botnets written for the protocol are a part of the problem. However, if we were to shut down the IRC protocol. Isn't it theoretically possible the botnet authors would just migrate to a different protocols like Oscar/AIM, ICQ, ICB, Jabber, just to name a few? If so, how would we manage the problem? Would we shutdown all ICB servers, and cut-off the ICQ network? Are we trying to kill off the problem in the wrong way, or is there a compromise to keep IRC alive, and keep botnets away?"
I remember.... (Score:3, Interesting)
Last time I checked in, the bots had gotten more powerful, and things had taken a nasty turn where nicknames were commandeered and others who dared to use them got punished.
You want Skynet? Terminator: Rise of the Machines? Just witness how bot evolution calcified IRC.
Re:I remember.... (Score:2, Interesting)
1) Cute ChanOP that I met. (I actually met her, and she WAS cute.)
2) Being nuked by some other guy that decided he loved her.
3) War scripts (defense only, of course)
Damn, those days were fun.
Re:I remember.... (Score:1)
It was more like 150 lbs with an incredibly painful-to-look at complexion
Nowdays....
Re:I remember.... (Score:2)
I've come across a couple of channel/server owners who were very cute. One in particular was also a phototgrapher who could have easily been a model. It's all the more surprising when you don't expect it.
On the net, nobody knows you're a dog... but they don't know if you're drop-dead gorgeous either.
Real reason (Score:5, Insightful)
Re:Real reason (Score:5, Insightful)
Re:Real reason (Score:3, Informative)
Re:Real reason (Score:2)
Probably not. An IRC server gets targeted because it happens to have a user connected to it that has done something to piss off a 12 year old h4x0r with a few thousand DDoS zombies under his control.
Re:Real reason (Score:5, Informative)
Indeed, I'm co-owner of PDXcolo.net [pdxcolo.net], using User-Mode Linux to do virtual hosting where you actually get root on the box. One of our customers has purchased the largest such system we offer, and proceeded to use it to run a chatnet.org site. Within days we were hit by 50+Mbps DDoS attacks, which actually took out our upstream provider's router at one point. He's still a customer, and we still have problems every once in a while, but we've been told by our upstream ISP that if something like this happens again, *we* are responsible for it. That's going to mean we get either disconnected (BAD) or fined (we can handle that), but it definitely means we won't be allowing that customer to run an IRC server anymore.
That said, other comments to the effect that if it isn't IRC it will be something else are entirely true. I've heard of DNS providers being DDoS'd out of existence because some pathetic 9 year old script kiddie decided to DDoS the *domain* of a site he doesn't like.
Personally, I wish backbone providers had a little more, um, backbone, when it comes to tracking bandwidth spikes through the net to actually catch the attackers. But no, they get paid for the bandwidth whether it's legitimate or not, so they couldn't care less.
Re:Real reason (Score:1, Informative)
Re:Real reason (Score:2, Funny)
Re:Real reason (Score:2)
Why not attack the root of the problem, dumbass people leaving unsecured, easy to root machines lying around, connected to the Internet?
Re:Real reason (Score:1)
Any ideas?
Re:Real reason (Score:1)
Somebody discover that "Tania, 21 yo, bisexual and horny" was in fact a man...
They were so sad, they shut off all the servers...
Warez (Score:3, Insightful)
Re:Warez (Score:4, Insightful)
And hardware stores allow people to make bombs, and weapons. Get off the illegal excuse. Anything can be abused.
And DDoS applications now use websites to load commands, and IRC network scan for large bot type networks. Its pretty easy for the police to track people on IRC, if your worried about illegal stuff, dont worry, the feds sit on irc and pretend to be 14 yo girls. Last count, there are over 75 cyber cops sitting on networks just looking for pedophiles. Imagine how many are looking for movies and other warez?
But on the good side, IRC can be encrypted, a place to chat with other people with same interests, get questions answered, user groups, etc. IRC isnt going away, just look at how many networks there are, gamesnet.net, slashnet, opensource servers, support servers for companies, DJ groups, etc. There are thousands of small servers out there, other than the big ones, Efnet, Undernet, etc.
IRC is a tool, when a better tool comes along, you trade up. Until then, go get irssi and have fun.
Re:Warez (Score:1, Interesting)
I assume you meant that there are even more people trying to enforce copyrights on IRC. If you did not mean this, then please pardon me while I use that assumption to make a point.
Isn't it a fucked up society we live in, where keeping an eye out for children's safety from child molestors is secondary to protecting the profits of the latest pop music regurgitati
Re:Warez (Score:1)
There's a *lot* more people violating copyright than molesting children.
If your shop were broken into 365 times a year, wouldn't you consider your case more important than even, say, catching a drunk driver?
While I think the methods of enforcement of copyright are crude and harsh, that doesn't mean real police (not RI
Re:Warez (Score:2)
Re:Warez (Score:1)
People like it and it entertains/makes them happy.
It takes some time/effort to make. A persona must be created someone needs to write the crap and someone needs to package it.
People who put money into creating something should be able to try and recoup that money.
Hopefully people will keep buying the shit music and it will continu to support the other acts that don't make as much money.
Re:Warez (Score:1)
Re:Warez (Score:1)
Well, it just may be... (Score:3, Insightful)
Combine that with the public image of IRC being used for illegal file distrobution and "hackers", IRC's in low reguard.
Rackshack doesn't care... (Score:5, Informative)
The submitter misread Rackshack's AUP (as I did when I was signing up for service through them, on this specific topic incidentally -- so I emailed them for clarification). Many of the items in their AUP apply to their virtual servers only -- where many customers share one physical machine. IRC servers aren't permitted on those machines because of the load they put on the machine.
If you've got your own Rackshack server, you can run IRC on it all you want.
Re:Rackshack doesn't care... (Score:2, Informative)
Re:Rackshack doesn't care... (Score:2, Informative)
IRC networks: It is absolutely forbidden to host an IRC server that is part of or connected to another IRC network or server. Servers found to be connecting to or part of these networks will be immediately removed from our network without notice. The server will not be reconnected to the network until such time that you agree to completely remove any and all traces of the irc server, and agree to let us have access to your server to confirm that the content has been completely remo
Re:Rackshack doesn't care... (Score:2)
It is absolutely forbidden to host an IRC server that is part of or connected to another IRC network or server
The way I read that, it says that as long as your IRC server isn't connected to another server/network, and is a network of itself, you are fine. Then again, maybe its just me.
it's not about the protocol (Score:5, Insightful)
The
technical requirements [undernet.org] for running an Undernet.org server explain it pretty clearly. 5 Mbps of legit traffic, plus becoming a target for massive DDOS attacks? Why would a hosting company want that kind of service in their netblock?
Yea, sure, other IRC networks aren't nearly as high-profile, but this is the reputation that IRC has gotten, along with being a haven for copyright violation.
If you want to run an IRC server, then get your own dedicated net connection from a backbone provider and you can host whatever (legal) service you want.
Hosting IRC is asking for a BSA 'investigation' (Score:3, Insightful)
Hosting an IRC server in this day and age is like running an illegal music swapping site in the open. At some point the powers that be (the RIAA or the BSA, for example) will act, so why tempt them in the first place?
Re:Hosting IRC is asking for a BSA 'investigation' (Score:4, Informative)
Hosting an IRC server is not like running an illegal music swapping site in the open. Now, running and serving content in one of said IRC servers channels... that's a different story.
-- iCEBaLM
Re:Hosting IRC is asking for a BSA 'investigation' (Score:2)
No, it's exactly like running a service like the old Napster that uses central servers for searching, but transfers files peer-to-peer. It's not like that saved Napster. In fact, look at Direct Connect -- it's a deliberate combination of IRC and peer-to-peer filesharing.
Re:Hosting IRC is asking for a BSA 'investigation' (Score:2)
Think about what you're saying; if your logic was sound, then the existance of AIMster would mean that AIM wa
Re:Hosting IRC is asking for a BSA 'investigation' (Score:3, Insightful)
DCC was introduced on the Client-side as a method of sending pictures. It has remained client-side. Too bad it evolved into what it is considered today...
Think of it this way: Let's say that ICQ doesn't support file-sharing. Eventually someone figures out a way to file-share over the ICQ network by using just messages and codes it
Re:Hosting IRC is asking for a BSA 'investigation' (Score:1)
Like Napster :-) (n/t) (Score:1)
Re:Like Napster :-) (Score:2)
It has nothing to do with botnets (Score:5, Informative)
Re:It has nothing to do with botnets (Score:3, Interesting)
Yes, a few years ago every * was chasing users running warscripts (or any script at all, because it's really hard to tell whether a script is a warscript or not) or bots, because they were causing too much net traffic. I guess today there are too many users that would have to be banned. Not that banning an IP is particularly useful...
I wonder how webchat client
Not necessarily... (Score:4, Insightful)
1) Some trojans already use non-IRC protocol. Some trojans already use more than one protocol.
2) Almost all of the larger networks run some type of anti-drone and anti-proxy system to prevent the problem from getting out of control. Said programs are widely available in a variety of forms for most IRC daemons.
Newer worms target smaller networks because of this, since smaller networks generally don't run said software (besides the usual nickname/channel services). Many worms also use private IRC networks, since the botnets can't be tracked and/or shut down as easily on them.
3) Most IRC servers are not hosted by people who lease servers at small hosting companies. A majority of servers linked to larger networks are either hosted by ISPs or by large entities with large amounts of bandwidth to burn.
Smaller hosting providers purposely shun IRC servers because they know that they can be a bandwidth burden (not to mention a DDoS target). Larger hosts, which monitor their bandwidth 24/7, usually don't object to hosting servers - all they have to do is blackhole the server's IP when a DDoS attack comes their way and the disruption is minimalized.
EFnet [efnet.info] may have lost some high-profile servers lately, but the majority of IRC networks are doing well server-wise. QuakeNet [quakenet.org] (the world's largest IRC network) is in the process of starting a campaign to link more North American servers... and not because the network needs more servers (they could easily handle 300000 users in their current state), but because they want to draw in more North American users.
Re:Not necessarily... (Score:2)
Damn right too. As a small hosting provider, I used to have no end of problems with that. Mod Parent up!
Some still offer IRC a home! (Score:5, Informative)
At $350 a month, httpd.net [httpd.net] is home for a huge number of IRC servers. With an incredibly advanced and secured network that has been running continuously for over SEVEN YEARS, it has the experience that proves that IRC hosting can be done effectively.
It's not cheap, but quality never is.
In those seven years, it has rarely had any substantial downtime due to attacks, mostly thanks to a serious investment by the administrators to ensure uplink filtering.
Its definitely worth a look when you get serious about a permanent home for an IRC server.
Re:Some still offer IRC a home! (Score:1)
Why people don't like IRC (Score:5, Insightful)
If you're lucky the bot won't be used to host illegal warez using up any bandwidth that is left over from the DDoS, and now you have the RIAA/MPAA knocking on your door too.
People that want to hide from people are often doing it because they are involved in illegal activities such as CC# trading, and/or DDoS networks. So you are getting paid in illegal money (that people will want back), by someone you can't trace.
The people that want to use IRC shell accounts tend to "trade" them on IRC so that they can get even more obscure ones to hide even better (or to have backups in case their main one gets attacked). So now the account is used by 20 people, none of which are accountable for their actions, who are drawing attacks against your services.
In general, letting people IRC from your shell is just asking for trouble. There are plenty of shell providers that capture this niche market with hundreds of "vhosts" so you can choose which "leet" hostname you will appear to come from. They are better set up to weather DDoS, and they are careful about accepting CC#'s.
One of the reasons that IRC has such a bad rep is that it's very "instantanious" to see the affects that your attacks have on people. You can see someone's real IP, and DDoS them and watch them get disconnected. You could pick some random IP off the internet and DDoS that, but it's not nearly as satisfying as watching someone "Ping timeout" off IRC. Other networks like Jabber, ICQ, MSN etc don't give you the IP address of the remote person without their permission, and you have less of a situation where you can see other people. There are less common resources (such as globally nick names) to fight over. The networks aren't as vunerable to attack (DDoS'ing an IRC hub will make the entire network split in two, not just preventing people of that server from talking, but denying half the network from talking to the other half. DDoS'ing a Jabber server prevents users on just that server from talking).
I personally think that the IRC protocol should die a natural death (and, in fact, should have died it about 10 years ago when it was obvious it wasn't going to work) and should be replaced with something like Jabber.
Re:Why people don't like IRC (Score:5, Insightful)
Regarding shells: there are many legitimate reasons to use a shell for IRC, from vanity hosts to bypassing firewall restrictions. While the use of vanity hosts (vhosts) is debatable [spamcalc.net], there's nothing wrong with wanting to show off something like the domain name of a website you maintain or a project you're involved with...
You can't just assume thaty everyone uses a shell to hide or do something illegal. Besides, most people who really want to hide properly use a variety of non-legitimate proxies or route through trojan-infected individuals - it's too easy to get caught by using a dedicated IRC proxy on a shell maintained for such a purpose.
Regarding accountability: If said server gets banned from a network because of something like 20 users using the same account, then it's their own fault for failing to prevent such things from happening.
Regarding bots: There's nothing wrong with running a bot to keep others off a nickname. I do it on many networks and I usually don't have a problem with DDoS. Then again, I usually avoid networks like EFnet where there's no real way to protect hostname information from someone who really wants to pound my bot into the ground.
Regarding illegal activity: Those who are committing illegal activity don't just use IRC. they use all forms of chat, including this "Jabber" you speak of.
Regarding DDoS: There have been several improvements on a majority of IRCds that protect people from the attacks you describe, the biggest example of which is hostmasking (usermode +x or +z, depending on the daemon). Additional steps are also in the process of being taken to improve said safety on IRC.
Besides that, "Kiddies" can sniff out IP adddresses just as easily via other chat mediums as they can with uncloaked users on IRC if they have the right tools. I've been DDoSed by morons on ICQ and AIM many a time...
Regarding MPAA/RIAA: Most shell providers prohibit said illegal activity, passing the blame onto the end user since they violated the shell server's ToS. Those that don't are asking for it. Remember - the RIAA/MPAA doesn't give a crap about what's sitting on someone's server - they're out to fry whoever put it there. And do you think whoever operated the shell is going to help them? Damn right they are...
Yes, IRC has it's faults, but keep in mind that only a portion of networks (See: EFnet, IRCnet) are lagging behind in terms of evolution. The others are working hard to bring IRC up to par with other chat mediums. All of the things you've mentioned haven't gone unnoticed within the community...
instantanious if you are insecure (Score:3, Interesting)
The effects of an attack are instantanious, but only if you are insecure to them. Back when WinNuke was the latest things my brother challanged someone to knock him off. Strange that a Mac protected by a linux firewall (which was very out of date, and insecure) isn't vulnerable to winNuke. (and that was just a 28.8 modem, should have been easy to do if an attacker had any abilities) Now a days whenever someone brags about what a leet attacker they are, we point them to the guy working at an ISP. Very
Re:instantanious if you are insecure (Score:2)
Micropayments (Score:1)
Re:Micropayments (Score:3, Insightful)
Re:Micropayments (Score:5, Funny)
And the thought of paying for each message won't improve the quality of discussion. Cell phones, 2-way pagers and now SMS text messages have always been used to conduct trite, illegal, or sexual calls even when it cost something like a buck fifty per minute.
I agree with you, but reading that first sentance I quoted gave me a different idea...
fred (schmoe@dsl.isp.com) entered #smallcozychannel
fred: hello channel
cellphonenoob: hi fr3d
fred: I've noticed a lot of trouble connecting to the server lately.
fred: The website's news hasn't been updated in two days, anyone spoken to a higher up recently?
cellphonenoob: Y do U talk like tat?
fred: Huh?
cellphonenoob: dznt ur fone cmpny chrge like a $ a msg?
fred: No. I use a computer for IRC. Why can't you spell nomrally?
cellphonenoob: omg im typng wit my thums!
fred: Ok... I can see this channel isn't raising mensa entry requirments
Re:Micropayments (Score:1)
Re:Micropayments (Score:2, Interesting)
Certainly it would be effective at reducing spam, but at what cost?
It is the choice of a server operator (not IRC op, but _root_) to start the ircd of their choice.
If they want to charge, perhaps that should be their right, but the idea of IRC has always been the free (and independant) exchange of ideas over a public network.
Most sysadmins for IRC servers do it not for the imm
Re:Micropayments (Score:2)
However, I think you've really missed the point, which is that IRC server operators ought to consider micropayments as a means of reducing or eliminating the use of bots [undernet.org], while at the same time not detering actual people from chatting.
People often run bots, or
Writing an RFC (Score:1)
IRC Needs Improvements (Score:5, Insightful)
The current state of
The lack of security design is another. Using nicks as identifiers just isn't a fantastic idea -- in this day and age, a public key can reasonably be part of an identifier. Encryption should be simply part of the protocol, at least client-to-client, and ideally to the server as well. There isn't *that* much traffic from each client (though it'd certainly put more load on the server, and might require a more fanned-out-network.
Fserves are an affront to humanity. Granted, this isn't really a native IRC issue, but client support for easy linking to sftp servers would be a good idea.
A fair bit of IRC is a holdover from the days when everything was terminal-based. There's no reason you can't make good text-based clients that provide the same presentation (say, showing chanop prefixed with an "@", but the data being transferred to the client shouldn't be constrained by these formatting issues.
It would be nice to have some kind of anonyminity features, even if most people don't use them and doing so degrades performance. Say, the ability to form "rings" of clients that proxy each others' server-bound data.
Some sort of native support in IRC for mapping IRC networks would be nice.
Re:IRC Needs Improvements-but you missed security (Score:3, Insightful)
Ok... Security 101 class - what does a public key give you on IRC that a nick d
Re:IRC Needs Improvements-but you missed security (Score:3, Interesting)
Absolutely nothing without a trust relationship beyond knowing that the same key is used to log in
That alone would be useful: If someone needs to prove that they hold a private key in order to sign on with a gievn name, you dramatically reduce the risk of DDoS wars caused by people fighting over a name.
Re:IRC Needs Improvements-but you missed security (Score:2)
You also sign a timestamped message from the server when you sign in. By checking signatures and comparing the advertised private key, other clients can form trusted mappings between "(bob37, [pubkey])" pair on Wednesday and a "(bob37, [pubkey])" pair today. This means that I know that Bob really is bob.
Private keys wouldn't need to be broadcast on a per message basis. Once a trusted mapping has been formed, the c
Re:IRC Needs Improvements (Score:1)
SilcNET [silcnet.org]
It's a totally new protocol built from the ground up on being secure, unlike IRC.
Re:IRC Needs Improvements (Score:2)
Funny thing, I've been running an ircd with client-to-client and server-to-server SSL enabled connections for about 3-4 years. We're small and developer-focused, but it works, and if your client supports SSL on port 994, your connections are secured.
IRC (Score:3, Insightful)
Re: (Score:2)
Re:IRC (Score:2)
> What did we get that we didn't have in 1994?
Me too!
~Philly
Re: (Score:2)
Re:IRC (Score:1)
Re: (Score:2)
Re:IRC (Score:1)
Que? (Score:1)
irc or other realtime channel for linux discussion (Score:1)
Re:irc or other realtime channel for linux discuss (Score:1)
#angband is the mostly-official channel for the game Angband [thangorodrim.net] and runs on WorldIRC. WorldIRC sucks. ;D
Actually, besides the fact that WorldIRC is prone to having flaky connections, it's a pretty good network. They have some nice services- nickname services and channel services which
Re:irc or other realtime channel for linux discuss (Score:1)
It seems to be down today... That's not good!