Archive for the ‘IRC’ Category

IRC Defender arbitrary code execution exploit

Monday, November 28th, 2011

Yesterday, news broke that there is an arbitrary code execution exploit within the still popular IRC security service IRC Defender which is, according to the reporter, being actively exploited.

The flaw is said to be within the InspIRCd link module for which a patched version exists, but according to the original post to the IRC-Security mailinglist there are more flaws within the InspIRCd link module and also within the UnrealIRCd link module.

UnrealIRCd 3.2.9 – New stable version after 2 years

Wednesday, November 9th, 2011

UnrealIRCd, the IRCd that still dominates the usage statistics of all IRCds, has seen another stable release and is now at version 3.2.9.

After 2 release candidates and with 212 changes and bugfixes – almost the same amount as the last three stable releases combined – among which is a “substantial amount of new features” as Syzop writes in their announcement.

He thanks everyone that made this release possible but especially mentions binki who did a “considerable amount of work to make this release possible”.

And indeed, there is a large amount of changes – for example:

Mibbit has been compromised

Sunday, August 14th, 2011

On August 14 a cracker group claiming to be “hackers” named HTP broke into Mibbit, the popular web chat client for IRC. According to their temporarily “rescue” blog the break-in only affected their IRC network, their primary blog and their Wiki. NickServ passwords in clear text were released later the same day by the HTP, as well as personal information regarding several staff members. Both their IRC O-line passwords as well as their NickServ passwords, home addresses and phone numbers were published to the public via a range of file hosting services, and Pastebin.

Hybrid releases 7.3.0

Sunday, August 14th, 2011

Earlier this week, Jon Lusky released a new version of ircd-hybrid. The version number has now reached 7.3.0. Among the changes you find a new Bulgarian translation, a fixed IPv6 implementation and channel modes O and S for opers-only respective SSL/TLS-only clients. Server administrators now get to choose whether they want to use SSLv3 or TLSv1 to secure connections. All spy-notice modules that previously covered reports for usage of STATS, TRACE, MOTD and ADMIN have been replaced by server-sided notices. The old LazyLinks concept has now been removed, as it was half broken. The WATCH command known from UnrealIRCd and Bahamut has been added. In addition to that, a few minor cleanups and bugs leading to crashes have been fixed.

A Day on QuakeNet

Wednesday, November 17th, 2010

A nice visualization of a normal day on the “largest internet relay chat Network in the world” brings us meeb of QuakeNet:

He goes on to write that the video shows “one day of activity, 24 hours, midnight to midnight in UTC, on the QuakeNet IRC network summarised into a 12 minute data visualisation” and that “each dot represents a new user connecting to the network, there are some 400 new connections per minute on average in this visualisation”.

The data which the video was rendered of has been “collected strictly anonymously at a high level” by a network service that “already stores connection data in memory” meeb emphasizes.