[IRCServices] /ns ghost exploit

[Andrew Church]

     This is basically what I was trying to say.  In response to the
comment that GHOST could check the target's recognized/identified status
before killing, suppose the user hasn't identified when they get
disconnected (maybe their connection dropped just as they connected to IRC,
or maybe they didn't identify for some other reason)?

     The main point, though, is that if the person in question has
registered/linked those nicks, then from Services' point of view (and mine
as well) those nicks belong to that person, and they can do whatever they
want with them, including killing new users who try to use them.  As I said
before, if you have users abusing the command, deal with the users
individually; denying such people this one particular avenue of mischief
will just push them into another anyway.

  --Andrew Church
    achurch at achurch.org
    http://achurch.org/

>Are you guys forgetting what ghost is for??? If you get disconnected (ping 
>timeout or such) and the server hasn't realized that you're disconnecte. You 
>reconnect and you're still showing as being connected. You then GHOST the 
>old connection so you may claim your nickname. Why would you want services 
>to change the name of the old connection? 
>
>You're getting too selfish. GHOST does not have an exploit, it's simply some 
>immature users abusing a function which is working perfectly well. I have 
>_never_ seen this happen before in my years of IRCing, so it's obviously an 
>isolated incident. 
>
>Either talk to your users about their maturity level and abuse, or else talk 
>to the users trying to connect about changing their nicks, because the nicks 
>they're trying to use are already registered. It's not that difficult of a 
>concept, and I don't believe that Services should be changed due to a small 
>situation you're having with a select few people. 
>
>~Ganja51
>irc.lcirc.net
>------------------------------------------------------------------
>To unsubscribe or change your subscription options, visit:
>http://www.ircservices.za.net/mailman/listinfo/ircservices