Full Disclosure mailing list archives

Re: Why is IRC still around?


From: Jason <security () brvenik com>
Date: Fri, 19 Nov 2004 16:11:51 -0500

Unfortunately IRC is not the problem. Removing IRC will cause the systems that use it to leverage another control channel. The people that abuse it will use another forum...

The problem is that systems exist that can be mass exploited and used to coordinate attacks and that there are people happy to exploit those systems.

You can use any of the following to coordinate the same attacks:
- a web page
- ping
- DNS
- newsgroups
- ftp
- AIM
- Jabber
- P2P
- Email
- blog
...


Danny wrote:
Well, it sure does help the anti-virus (anti-malware) and security
consulting business, but besides that... is it not safe to say that:

1) A hell of a lot of viruses/worms/trojans use IRC to wreck further havoc?
2) A considerable amount of "script kiddies" originate and grow through IRC?
3) A wee bit of software piracy occurs?
4) That many organized DoS attacks through PC zombies are initiated through IRC?
5) The anonymity of the whole thing helps to foster all the illegal
and malicious activity that occurs?
The list goes on and on...

Sorry to offend those that use IRC legitimately (LOL - find something
else to chat with your buddies), but why the hell are we not pushing
to sunset IRC?

What would IT be like today without IRC (or the like)? Am I narrow
minded to say that it would be a much safer place?

...D

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: