[Coco] Forum security topics

Roger Taylor operator at coco3.com
Sun Feb 11 04:11:58 EST 2007


I wasn't saying that the owner of sclaudia.net was the spammer.  Come on guys.

I said that the spammer was visiting that site, and was also visiting 
certain pages of coco3.com like the photo gallery, etc.  My log shows 
him visiting sclaudia.net because that's where he came from when he 
reached coco3.com's Hot Link protection handler.  This means that 
sclaudia.net links to a logo that's on coco3.com but it can't be 
viewed from there because I have bandwidth protection turned on, and 
the side effect is that my log shows (to the best of my knowledge) 
whoever visits the home page of sclaudia.net.

My point?  The spammer source is interested in CoCos, and "make dsk 
in windows" since Google referred him to me as well.  That's why I 
said he is among us in the CoCo community because I believe he is a 
CoCo user who's machine has been compromised or is running a HTML 
session hijacker.  That is, some server he's attached to could be 
reusing his forum session ID and immediately posting spam to the 
forums using a similar HTTP request.

Had the spammer (his IP address that matches his spam postings) been 
visiting someothercocosite.com that just happened to do a Hot Link to 
one of my pictures, I would have seen this in the logs and told you.

-- 
Roger Taylor





More information about the Coco mailing list