Re: [Operators] DDoS attacks against jabber.org

[Marco Cirillo]

I vaguely remember in the past having a discussion with MattJ about these rooms years back, I pointed out that mostly the rooms were just placeholders having subjects pointing to rooms on other conference servers.. and this in my opinion is semantically no different from unsollicited advertising / spamming.

On 07/02/2014 15:59, Peter Saint-Andre wrote:

Given the insistence... I just ended restricting room creation on conference.lightwitch.org to the parent domain's users which sorted it.

I have a hunch, which the other jabber.org admins don't necessarily agree with, that this is related to conflict in Syria. Most of the rooms that various attackers are interested in have names related to Syria (e.g., English or Arabic versions of Aleppo, Homs, etc.). This would be consistent with other activities I've seen (various people claiming that they used to be admins in these rooms and now need to be given admin rights, etc.).

But, of course, I might be mistaken.

Peter

smime.p7s
Description: S/MIME Cryptographic Signature