January 18, 2004 / / 10 Comments

Shelley outs some script kiddies, and gets herself deliberately targetted and spammented, and has had to turn off commenting for the moment on her MT system. If I know Shelley, she’s gonna come out swinging. This should be fun.

This attack is from the kiddie script that was found at slashdot, and yes, they are using proxies to pull in different IP addresses. Note, they change the URL to something completely nonsensical with each iteration, as well as the text of the comment. They are not going through the HTML, but are hitting mt-comments.cgi directly.

The Antiblog Manifesto :

We develop our own scripts using varied languages and means and can defeat nearly any standard security measure you put in place.
We’re doing this because bloggers provide a waste to the internet, an amassing of imbeciles who think they deserve to be heard, and think people actually care.
Your only real solution is to turn all comments off. Obviously this will mean your egos will no longer be stroked.

I actually sympathize just a teensy bit with the sentiment here, in the most general sense, if not the actions it attempts to justify. Still: if you don’t care for the legions of self-regarding bloggers, imbecilic or otherwise, Butthead, well, just go play somewhere else, and take Beavis with you.
It’s good that Ben and Mena have released a new rev of MT to try and deal with the problem, but it’s pretty clear that simple IP address throttling isn’t going to work worth a damn, so one hopes there’s something more effective in the pipeline. Neither the latest 2.661 version of MT nor MT-Blacklist (which I use) will protect you, it seems.
Edit : Phil and Shelley explain why they think the current measures are inadequate.
Update : I was waiting patiently until the crapflooders found me, via the trackback to Shelley’s post. It wasn’t in vain – the unclever little dink only took about an hour or so to muster up the skills to follow a hyperlink. I’ve closed off all comments for the moment, of course, but I’ll leave the crapflood there, for archival purposes.
Hey Butthead – this one’s for you, amigo!

Category:
Metablogging

Join the conversation! 10 Comments

  1. Phil Ringnalda

    Now, tell me you didn’t go to nero-online.org.
    Though, between my slow connection and Firebird not being interested in most of their attempts at being annoying, it really wasn’t that much of a much. goatse, a woman with crap on her face, and the “I’m looking at gay porn” audio? I recommend less time writing crapflooding scripts, and more time looking for new disgusting things. You can’t be a really outstanding troll if people just yawn.

  2. stavrosthewonderchicken

    Heh. Goatse and Tubgirl are like old friends by now…they’re ugly, but it just doesn’t feel right if they’re not around.

  3. Wonder Hamster

    Crapflooding is sooo 2001. Why won’t these trolls get with the times?

  4. vaquabp

    We now have randomised message posting! We make a file with a list of
    messages and FloodMT chooses from them at random!

    cybQwen tEEScg RhMOFlV ievgym ma DGLX nBMuON dBWmW ZfrnWoY hSVQXKlOqMvA

  5. jigousjxb

    This crapflood brought to you by FloodMT!
    http://terrato.org/wiki.pl?FloodMT
    The integrated Python 2.2 solution, scalable across the enterprise!
    WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW

    wllXhHDZtwBu AEOis jgBiQiG prLNnXWz SvwixdFY KmLZwZ CqwvY EoXEYN nGVcNmU HJjJ gBmQ RNGXjSiSJn JOYKWCbBgw qIieg XDVt FofnwWV yXciFY zvgWZRUoJLcT FhGkZwjAhx soDFur

  6. fwogexfa

    Alka Seltzer!
    Plop plop,
    Fizz fizz,
    Oh, what a relief it is!
    bbixLPiWpDJh WMoEzquQRv atrGIuOfDt SODkrzsQYLPr YpzBC it FgnNgmcj xDDLZok VEQlbLY ERRVBwqx cZ MgoF XnHt fxMFZLpQ OhVgx lnycx LsclKNa IxVlmFny ldilH chhcwQKt

  7. oaffbdyu

    Alka Seltzer!
    Plop plop,
    Fizz fizz,
    Oh, what a relief it is!
    hhXRGzh eLKCBnhK sitiuJW vtWH HT ch WlFrv lBSMvk NdVsAjFtqZ hGKjwpVx xlUzgL qSnYCegD RYJMNTwtBpzz xVCNDQmfbcCY nkJlQG

  8. ylxytomqp

    We now have randomised message posting! We make a file with a list of
    messages and FloodMT chooses from them at random!

    jcqZzLCt FjaA xUvaYtgH URbaV tSQicSff DhZjRQ ZZLXBhqdlU NdhqdoRN Jnmtyq sqpuHA mceWLJeU iMyJCWLP lRPbsoTvgt tzlBxEl skoNW ElwNAhJADcmh GIbxYrCVhuGZ YEKHIQCx zDApwNsGcRJi eXRbeznEPC

  9. ffvennbyo

    This crapflood brought to you by FloodMT!
    http://terrato.org/wiki.pl?FloodMT
    The integrated Python 2.2 solution, scalable across the enterprise!
    WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW

    eYRl zWJvBRbM hKiXz olBkaDcjTLVV hbXqI CZuGMAVD MOzBZzwcsp QUkMtM EAnLqyYiotMA JiDFkpgM

Comments are closed.