astronomy-chat.net
Promoting astronomy discussion.

Main
Date: 16 Aug 2007 00:59:04
From: Davoud
Subject: Another Way Around the Sporge Flood?
I have filtered out messages longer than 20 lines.

Works like a charm.

Now, with my luck, Anthony Ayiomamitis, Daniele Gasparri, Pete
Lawrence, and the other top-dog astrophotographers will jointly publish
a 21-line exposition detailing how even I can produce great
astrophotos.

Davpid

--
usenet *at* davidillig dawt com




 
Date: 15 Aug 2007 20:37:42
From: SkySea
Subject: Re: Another Way Around the Sporge Flood?
That might inspire folks to trim quotes, too!

>Davoud <star@sky.net> wrote:
>I have filtered out messages longer than 20 lines.
>
>Works like a charm.

=============
- Dale Gombert (SkySea at aol.com)
122.38W, 47.58N, W. Seattle, WA


 
Date: 16 Aug 2007 01:28:42
From: Terry B
Subject: Re: Another Way Around the Sporge Flood?
Does anyone know how to set up a filter in outlook express that will filter
any posts that are cross posted to any other news group? This would get rid
of most of the problem with minimal colateral damage. I have tried
unsuccessfully so far.
Cheers
Terry B

"Davoud" <star@sky.net > wrote in message
news:150820072059022838%star@sky.net...
>I have filtered out messages longer than 20 lines.
>
> Works like a charm.
>
> Now, with my luck, Anthony Ayiomamitis, Daniele Gasparri, Pete
> Lawrence, and the other top-dog astrophotographers will jointly publish
> a 21-line exposition detailing how even I can produce great
> astrophotos.
>
> Davpid
>
> --
> usenet *at* davidillig dawt com




  
Date: 16 Aug 2007 01:56:04
From: Ed Holden
Subject: Re: Another Way Around the Sporge Flood?

"Terry B" <bohlsen@optusnet.nospam.com.au > wrote:

> Does anyone know how to set up a filter in outlook express that will filter
> any posts that are cross posted to any other news group? This would get rid
> of most of the problem with minimal colateral damage. I have tried
> unsuccessfully so far.

Yes, see my instructions on that very topic here:
news:4GFwi.9795$mZ5.6242@newsfe6-win.ntli.net





   
Date: 16 Aug 2007 07:10:28
From: Joe S.
Subject: Re: Another Way Around the Sporge Flood?

"Ed Holden" <ed@home.com > wrote in message
news:U8Owi.15211$mo.959@newsfe4-win.ntli.net...
>
> "Terry B" <bohlsen@optusnet.nospam.com.au> wrote:
>
>> Does anyone know how to set up a filter in outlook express that will
>> filter
>> any posts that are cross posted to any other news group? This would get
>> rid
>> of most of the problem with minimal colateral damage. I have tried
>> unsuccessfully so far.
>
> Yes, see my instructions on that very topic here:
> news:4GFwi.9795$mZ5.6242@newsfe6-win.ntli.net
>
>
>

As I understand the way OE rules work, you also need to check "And stop
processing more rules."

Now, I may be wrong, but -- as I understand the OE rules -- OE applies rules
to incoming messages in the order in which the rule is listed in your list
of rules. If a message is blocked by a rule, that message is then compared
to the next rule, and so on. If the message is approved by any single rule,
that message is passed. However, if you check "And stop processing more
rules," if the message is blocked by a rule, that message is blocked and is
not processed by any further rules.

So -- all my message rules have "And stop processing more rules" checked --
except for one rule that says "Delete from server" in which case "And stop
processing more rules" is not available.





    
Date: 16 Aug 2007 13:31:11
From: Ed Holden
Subject: Re: Another Way Around the Sporge Flood?

"Joe S." <noname@nosuch.net > wrote:
>
> As I understand the way OE rules work, you also need to check "And stop
> processing more rules."

That's only necessary if you expect one of your rules to conflict with
another. For example, I have 3 rules in place: one to highlight my
favorite posters in Fuchsia, another to highlight messages with certain
keywords in the subject line, and another to kill cross-posted junk. None
of those have "And stop processing more rules" on them. Therefore, if one
of my favorite posters replies to a cross-posted message, it will be deleted.
To prevent that, I could set the favorite posters rule to "And stop processing
more rules" which would then allow the cross-posted message to survive.





   
Date: 16 Aug 2007 02:29:25
From: John Nichols
Subject: Re: Another Way Around the Sporge Flood?

"Ed Holden" <ed@home.com > wrote in message
news:U8Owi.15211$mo.959@newsfe4-win.ntli.net...
>
> "Terry B" <bohlsen@optusnet.nospam.com.au> wrote:
>
>> Does anyone know how to set up a filter in outlook express that will
>> filter
>> any posts that are cross posted to any other news group? This would get
>> rid
>> of most of the problem with minimal colateral damage. I have tried
>> unsuccessfully so far.
>
> Yes, see my instructions on that very topic here:
> news:4GFwi.9795$mZ5.6242@newsfe6-win.ntli.net
>
>
>

Let me add that by following those directions that so far I've been able to
filter out the current round of crap.




    
Date: 16 Aug 2007 09:49:24
From: John Nichols
Subject: Re: Another Way Around the Sporge Flood?

"John Nichols" <bejay@worldnet.att.net > wrote in message
news:9EOwi.432329$p47.177416@bgtnsc04-news.ops.worldnet.att.net...
>
> "Ed Holden" <ed@home.com> wrote in message
> news:U8Owi.15211$mo.959@newsfe4-win.ntli.net...
>>
>> "Terry B" <bohlsen@optusnet.nospam.com.au> wrote:
>>
>>> Does anyone know how to set up a filter in outlook express that will
>>> filter
>>> any posts that are cross posted to any other news group? This would get
>>> rid
>>> of most of the problem with minimal colateral damage. I have tried
>>> unsuccessfully so far.
>>
>> Yes, see my instructions on that very topic here:
>> news:4GFwi.9795$mZ5.6242@newsfe6-win.ntli.net
>>
>>
>>
>
> Let me add that by following those directions that so far I've been able
> to filter out the current round of crap.
However, this morning it's back. I think whoever is doing this is reading
our ideas, because this latest round doesn't appear to be crossposted.




     
Date: 16 Aug 2007 07:09:48
From: Jan Owen
Subject: Re: Another Way Around the Sporge Flood?
"John Nichols" <bejay@worldnet.att.net > wrote in message
news:E4Vwi.38253$ax1.9586@bgtnsc05-news.ops.worldnet.att.net...
>
> "John Nichols" <bejay@worldnet.att.net> wrote in message
> news:9EOwi.432329$p47.177416@bgtnsc04-news.ops.worldnet.att.net...
>>
>> "Ed Holden" <ed@home.com> wrote in message
>> news:U8Owi.15211$mo.959@newsfe4-win.ntli.net...
>>>
>>> "Terry B" <bohlsen@optusnet.nospam.com.au> wrote:
>>>
>>>> Does anyone know how to set up a filter in outlook express that will
>>>> filter
>>>> any posts that are cross posted to any other news group? This would get
>>>> rid
>>>> of most of the problem with minimal colateral damage. I have tried
>>>> unsuccessfully so far.
>>>
>>> Yes, see my instructions on that very topic here:
>>> news:4GFwi.9795$mZ5.6242@newsfe6-win.ntli.net
>>>
>>>
>>>
>>
>> Let me add that by following those directions that so far I've been able
>> to filter out the current round of crap.
> However, this morning it's back. I think whoever is doing this is reading
> our ideas, because this latest round doesn't appear to be crossposted.

Yes, I was just figuring out the same thing... These new ones are targeted
SPECIFICALLY at SAA (or rec.birds), rather than on sci.crypt... So it looks
like this's someone with a grudge, or an agenda...

It was nice while it lasted... Hopefully, when these folks get caught, the
authorities'll throw the book at them (AND their parents, should this turn
out to be kids), instead of just telling them to be good little bed-wetters
after this, as is often the case...

--
Jan Owen

To reach me directly, remove the Z, if one appears in my e-mail address...
Latitude: 33.6
Longitude: -112.3
http://community.webshots.com/user/janowen21




      
Date: 16 Aug 2007 09:00:19
From: Greg Crinklaw
Subject: Re: Another Way Around the Sporge Flood?
Jan Owen wrote:
>>> Let me add that by following those directions that so far I've been able
>>> to filter out the current round of crap.
>> However, this morning it's back. I think whoever is doing this is reading
>> our ideas, because this latest round doesn't appear to be crossposted.
>
> Yes, I was just figuring out the same thing... These new ones are targeted
> SPECIFICALLY at SAA (or rec.birds), rather than on sci.crypt... So it looks
> like this's someone with a grudge, or an agenda...

No way. Let's not be paranoid. This sporge flood likely originates via
a bot of some kind that was planted some time ago in servers with
security holes around the web. Otherwise, they'd just stop it at the
source. Not only that, but if you do a Google search you will see that
SAA is merely one in a very long list of groups that have been attacked
in the last month.

Greg

--
Greg Crinklaw
Astronomical Software Developer
Cloudcroft, New Mexico, USA (33N, 106W, 2700m)

SkyTools: http://www.skyhound.com/cs.html
Observing: http://www.skyhound.com/sh/skyhound.html
Comets: http://comets.skyhound.com

To reply take out your eye


       
Date: 16 Aug 2007 08:11:26
From: Jan Owen
Subject: Re: Another Way Around the Sporge Flood?
"Greg Crinklaw" <theskyhoundyoureye@yahoo.com > wrote in message
news:7aa9d$46c4667c$4212a552$18605@TULAROSA.NET...
> Jan Owen wrote:
>>>> Let me add that by following those directions that so far I've been
>>>> able to filter out the current round of crap.
>>> However, this morning it's back. I think whoever is doing this is
>>> reading our ideas, because this latest round doesn't appear to be
>>> crossposted.
>>
>> Yes, I was just figuring out the same thing... These new ones are
>> targeted SPECIFICALLY at SAA (or rec.birds), rather than on sci.crypt...
>> So it looks like this's someone with a grudge, or an agenda...
>
> No way. Let's not be paranoid. This sporge flood likely originates via a
> bot of some kind that was planted some time ago in servers with security
> holes around the web. Otherwise, they'd just stop it at the source. Not
> only that, but if you do a Google search you will see that SAA is merely
> one in a very long list of groups that have been attacked in the last
> month.
>
> Greg
>
> --
> Greg Crinklaw
> Astronomical Software Developer
> Cloudcroft, New Mexico, USA (33N, 106W, 2700m)
>
> SkyTools: http://www.skyhound.com/cs.html
> Observing: http://www.skyhound.com/sh/skyhound.html
> Comets: http://comets.skyhound.com
>
> To reply take out your eye

Yes. I agree... In the larger sense, the SAA part of this whole problem is
just one little piece of a large jig-saw puzzle...

What I was referring to was when it was suggested to filter on sci.crypt,
the bot. or someone on the inside who is watching (insert some spooky
chamber music here), changed the next flood to exclude sci.crypt, thereby
eluding the filter... THAT'S where I brought up the possibility of someone
(even if it IS a bot) specifically targeting SAA... Because in this
specific instance, that's exactly what happened... Now, I suppose, the bot
COULD be somehow programmed to take alternate actions, when faced with an
obstacle (filters), but I'm not sure how likely that might be...

--
Jan Owen

To reach me directly, remove the Z, if one appears in my e-mail address...
Latitude: 33.6
Longitude: -112.3
http://community.webshots.com/user/janowen21




        
Date: 16 Aug 2007 10:24:17
From: Greg Crinklaw
Subject: Re: Another Way Around the Sporge Flood?
Jan Owen wrote:
> "Greg Crinklaw" <theskyhoundyoureye@yahoo.com> wrote in message
> news:7aa9d$46c4667c$4212a552$18605@TULAROSA.NET...
>> Jan Owen wrote:
>>>>> Let me add that by following those directions that so far I've been
>>>>> able to filter out the current round of crap.
>>>> However, this morning it's back. I think whoever is doing this is
>>>> reading our ideas, because this latest round doesn't appear to be
>>>> crossposted.
>>> Yes, I was just figuring out the same thing... These new ones are
>>> targeted SPECIFICALLY at SAA (or rec.birds), rather than on sci.crypt...
>>> So it looks like this's someone with a grudge, or an agenda...
>> No way. Let's not be paranoid. This sporge flood likely originates via a
>> bot of some kind that was planted some time ago in servers with security
>> holes around the web. Otherwise, they'd just stop it at the source. Not
>> only that, but if you do a Google search you will see that SAA is merely
>> one in a very long list of groups that have been attacked in the last
>> month.
>>
>> Greg
>>
>> --
>> Greg Crinklaw
>> Astronomical Software Developer
>> Cloudcroft, New Mexico, USA (33N, 106W, 2700m)
>>
>> SkyTools: http://www.skyhound.com/cs.html
>> Observing: http://www.skyhound.com/sh/skyhound.html
>> Comets: http://comets.skyhound.com
>>
>> To reply take out your eye
>
> Yes. I agree... In the larger sense, the SAA part of this whole problem is
> just one little piece of a large jig-saw puzzle...
>
> What I was referring to was when it was suggested to filter on sci.crypt,
> the bot. or someone on the inside who is watching (insert some spooky
> chamber music here), changed the next flood to exclude sci.crypt, thereby
> eluding the filter... THAT'S where I brought up the possibility of someone
> (even if it IS a bot) specifically targeting SAA... Because in this
> specific instance, that's exactly what happened... Now, I suppose, the bot
> COULD be somehow programmed to take alternate actions, when faced with an
> obstacle (filters), but I'm not sure how likely that might be...

Or, less paranoid--it's just a coincidence, Jan! It morphs regularly.


--
Greg Crinklaw
Astronomical Software Developer
Cloudcroft, New Mexico, USA (33N, 106W, 2700m)

SkyTools: http://www.skyhound.com/cs.html
Observing: http://www.skyhound.com/sh/skyhound.html
Comets: http://comets.skyhound.com

To reply take out your eye


     
Date: 16 Aug 2007 10:52:13
From: Jim
Subject: Re: Another Way Around the Sporge Flood?
On 2007-08-16, John Nichols <bejay@worldnet.att.net > wrote:
>>
>> Let me add that by following those directions that so far I've been able
>> to filter out the current round of crap.
> However, this morning it's back. I think whoever is doing this is reading
> our ideas, because this latest round doesn't appear to be crossposted.

During the original flood I had a word with news.individual.net - as a
result I'm not seeing this new one, so I only have your word for it that
there even _is_ a flood in progress.

Best 10euros I've ever spent.

Jim
--
Find me at http://www.ursaMinorBeta.co.uk
COTTERSTOCK (n.)
A piece of wood used to stir paint and thereafter stored uselessly in a shed
in perpetuity.


  
Date: 16 Aug 2007 01:46:07
From: Florian
Subject: Re: Another Way Around the Sporge Flood?
I switched to Xnews a few days ago. It's different than OE but not that
hard to learn if you take a bit of time with it. And you can block anything
that's crossposted. Website is here...

http://xnews.newsguy.com/

.Florian



   
Date: 16 Aug 2007 02:38:18
From: Davoud
Subject: Re: Another Way Around the Sporge Flood?
Florian wrote:

> I switched to Xnews a few days ago. It's different than OE but not that
> hard to learn if you take a bit of time with it. And you can block anything
> that's crossposted. Website is here...
>
> http://xnews.newsguy.com/

Two things: 1) I use Macs for all Internet stuff. 2) I examined many
sporge msg headers. Quite a few were not cross-posted. The 20-line
limit is working, but see my first post in this thread for the possible
downside.

Davoud

--
usenet *at* davidillig dawt com