mIRC 6.35 gets released, fixes security flaw

October 30th, 2008 by phrozen77

Little over one month after the last release of the popular IRC-client, a new version becomes public.

According to the website the update is due to a security flaw concerning “very long nicknames on non-standard servers” and it is therefore a recommended upgrade for everyone.

Also, it seems the exploit code for the mentioned vulnerability is already in the wild so it’s advised to update in a timely manner or deploy the following workaround if an upgrade is not possible:

on ^*:OPEN:?:*:if ($len($nick) > 298) halt

The above snippet should be added to ones mIRC’s remotes and shall then prevent the hole from being exploited.

Anope releases RC1 of new 1.8 stable branch

October 30th, 2008 by phrozen77

On Sunday, 26th October the Anope project announces the release of release candidate 1 of their new stable branch, version 1.8 of their widely used IRC services package.

The announcement on their website also mentions that “Apart from updates to language files there are no changes since the last development release (1.7.24).”

However, all users of the last stable release, 1.6.5, should prepare to test the new version since they plan to stop supporting it when 1.8 becomes final.

A detailed changelog can be found here.

Thanks to Chaz & Viper for the tip!

Site Changes, again

October 29th, 2008 by phrozen77

Yes, it’s that time of the year again :)

After quite some time of thinking what to do with the “old” websites code that i would have to customize to get some of the functionality i’d want to have, i took the plunge and moved everything to Wordpress.

After quite a few tiresome days of importing posts and comments manually, installing things and cursing like a seaman i’m finally done :)

Please, let me know what you think about it – suggestions and everything are more than welcome.

EFNet IRC net and Website get hacked

August 20th, 2008 by phrozen77

www.irc-junkie.org tried to get in touch with EFNet to comment on the happenings to no avail but got instead contacted by the hackers themselves.

The hackers, identifying themselves as “2l8″, allegedly killed off the IRCd on efnet.nl and relinked with their “ircd with a custom-made patch iHaq wrote just for the occasion. Amongst other nifty features it had kill protection, automatic opering, hardcoded spoof (incase anyone got in and looked at hte config files) for us (root@your.servers) and a more dynamic, yet coded in spoof that gave every connected user a host like OWNED-#.MASSIVE.2l8.OWNAGE”.

Denora IRC-Statistics version 1.4.1 released

August 20th, 2008 by phrozen77

Changes in the latest version include improved Charybdis support, Nefarious and other P10 IRCD improvements, compiling on Windows has been fixed, some other minor fixes which are unnamed and an as vaguely described “potential security issue in string handling has been adressed”.

Compiling on Windows with SQL enabled has been a “last minute fix” so the developers consider this a test release for Windows and appreciate any feedback via their bugtracker

The homepage of the project is located here