Baiting

Jarrett Billingsley kb3ctd2 at yahoo.com
Mon Mar 17 20:11:21 PDT 2008


"BCS" <BCS at pathlink.com> wrote in message 
news:frmlt3$1m0k$6 at digitalmars.com...

>>
>> u could add a header like x-forged. the prb is u cant automate detection 
>> of forgery bc almost every1 has dynamic ip.
>
> I known a guy who could do it based on content.

A very simple quasi-password scheme (I think suggested by downs and how some 
anonymous message boards work), is to have all users place a "password" of 
sorts after their username/email address.  So I might have something like 
"Jarrett Billingsley #foobarbaz".  When the server gets the post, it 
converts the #password into a !hash, so it'd be like "Jarrett Billingsley 
!03acfeeb".  The chances of two passwords hashing to the same value are 
obviously nonzero but slim nonetheless.  It's still definitely defeatable by 
something like a rainbow table but it'd keep all but the most determined 
forgery artists at bay.

Whether or not something like this is possible in an NNTP server is beyond 
me.  :S 





More information about the Digitalmars-d mailing list