Internet Relay Chat takeover

Internet Relay Chat takeover

An IRC channel takeover is an acquisition of IRC channel operator status by someone other than the channel's owner. It has largely been eliminated due to the increased use of services on IRC networks.

Riding the split

The most common variety of channel takeover uses disconnections caused by a netsplit; this is called riding the split. After such mass disconnections, a channel may be left without users, allowing the first rejoining user to recreate the channel and gain operator status. When the servers merge, any pre-existing operators retain their status, allowing the new user to kick out the original operators and take over the channel.

A simple prevention mechanism involves "timestamping" (abbreviated to "TS"), or checking the creation dates of the channels being merged. This was first implemented by Undernet (ircu) and is now common in many IRC servers. If both channels were created at the same time, all user statuses are retained when the two are combined; if one is newer than the other, special statuses are removed from those in the newer channel.

Additionally, a newer protection involving timestamping is used when a server splits away from the main network (when it no longer detects that IRC Services are available), it disallows anyone creating a channel to be given operator privileges.

Nick collision

Another popular form of channel takeover abuses nickname collision protection, which keeps two users from having the same nickname at once. A user on one side of a netsplit takes the nickname of a target on the other side of the split; when the servers reconnect, the nicks collide and both users are killed from the server. The attacker then reconnects or switches nicks in a second client while the target reconnects, and proceeds to jupe (or block) the target's nickname for a period of time.

User timestamping is often used to detect these kinds of attacks in a fashion similar to channel timestamping, with the user who selected that nickname later being kicked from the server. Another protection method, called "nickhold", disallows the use of recently split nicknames. This causes fewer kicks, but causes more inconvenience to users. For this reason, timestamping is generally more common. Some servers, such as ircd-ratbox, do both. IRC services and bots can also protect against such attacks by requiring that a password be supplied to use a certain nick. Users who do not provide a password are kicked after a certain amount of time.

Other methods

Other methods can be used to take over a channel, though they are unrelated to flaws in IRC itself; for example, cracking the computers of channel operators, compromising channel bot shell accounts, having someone add you to a channel service's userlist, or obtaining services passwords through social engineering.


Wikimedia Foundation. 2010.

Игры ⚽ Поможем написать реферат

Look at other dictionaries:

  • Internet Relay Chat — IRC redirects here. For other uses, see IRC (disambiguation). For IRC channels dedicated to Wikipedia, see Wikipedia:IRC Internet Relay Chat (IRC) is a protocol for real time Internet text messaging (chat) or synchronous conferencing.[1] It is… …   Wikipedia

  • Internet Relay Chat services — AKill redirects here. For the creator of Akbot, whose online pseudonym is AKILL, see Owen Walker. Internet Relay Chat services (usually called IRC services) is a name for a set of features implemented on many modern Internet Relay Chat networks.… …   Wikipedia

  • Internet Relay Chat bot — An IRC bot performing a simple task. An IRC bot is a set of scripts or an independent program that connects to Internet Relay Chat as a client, and so appears to other IRC users as another user. An IRC bot differs from a regular client in that… …   Wikipedia

  • Internet Relay Chat flood — Flooding or scrolling on an IRC network is a method of disconnecting users from an IRC server (a form of Denial of Service), exhausting bandwidth which causes network latency ( lag ), or just annoying users. Floods can either be done by scripts… …   Wikipedia

  • Internet relay chat — Schema eines IRC Netzwerks mit Clients (eckig), darunter normale Benutzer (grün), Bouncer (orange), Bots (bläulich) und IRC Services Internet Relay Chat, kurz IRC, bezeichnet ein etabliertes, rein textbasiertes Chat System. Es ermöglicht… …   Deutsch Wikipedia

  • Internet Relay Chat — «IRC» redirige aquí. Para otras acepciones, véase IRC (desambiguación). Internet Relay Chat (IRC) Familia: Familia de protocolos de Internet Función: Conversación en tiempo real Última versión: 2.10 Puertos: 6667/TCP …   Wikipedia Español

  • Internet Relay Chat — Schema eines IRC Netzwerks mit Clients (eckig), darunter normale Benutzer (grün), Bouncer (orange), Bots (bläulich) und IRC Services Internet Relay Chat, kurz IRC, bezeichnet ein rein textbasiertes Chat System. Es ermöglicht Gesprächsrunden mit… …   Deutsch Wikipedia

  • Internet Relay Chat operator — The line that appears in an IRC Operator s client when they oper up An IRC operator (often abbreviated as IRCop or oper) is a user on an Internet Relay Chat network who has privileged access. IRC operators are charged with the task of enforcing… …   Wikipedia

  • Comparison of Internet Relay Chat clients — This article is about Internet Relay Chat clients. For a comparison of instant messaging clients, see Comparison of instant messaging clients. For a comparison of mobile Internet Relay Chat clients, see Comparison of mobile Internet Relay Chat… …   Wikipedia

  • Comparison of Internet Relay Chat daemons — This list is incomplete; you can help by expanding it. The following tables compare general and technical information including the differences in feature sets between popular IRC daemons. Grey entries in the list represent supposedly… …   Wikipedia

Share the article and excerpts

Direct link
Do a right-click on the link above
and select “Copy Link”