[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Proposal: the 'token' solution - Informal part




Mario 'BitKoenig' Holbe schrieb:

> The goal of the token approach is, to help against attacking
> users/clients.
> If a client gets attacked, it ping timeouts (bad disconnect,
> it's token gets 'hot'). If the token is requested then, it
> gets assigned to the requesting client (it's authorized to
> get it, because it knows the key - something like an one time
> password to access the token). This requesting client must
> not neccesarily be the same as the dead client - it can have
> another IP, another Ident response, another Nick.
>
> This means, if a client gets smurfed, it just reconnects.

Why not just and easy hidden hosts (usermode +x)  like
@ircnet-239185.dip.t-dialin.net
?
Only Opers can see User realhosts from Clients , and not the abusers.
Solution: No /dns Nick =>  No Smurfattacks in Channels => No Takeovers
=> only Server will be attacked , but
this is useless because Ops are on different Servers.

Regards
HERZ