Author Topic: Anti-Message-ID-Spoofing  (Read 1852 times)

Offline Hecks

  • Contributor
  • ***
  • Posts: 2011
  • naughty cop
Anti-Message-ID-Spoofing
« on: July 28, 2009, 11:57:06 pm »
Some safeguard against Message ID spoofing or substitution - where posters deliberately or mistakenly replace already posted articles on the server - might be wise, since the problem seems to be growing. Newsbin has implemented it through verifying downloaded Subject header fields against Subject attributes in NZBs.

Quote
- Anti-message-id spoofing code. There have been numerous cases lately where people download a file and they get chunks for other files instead of the ones Newsbin was expecting. This defends against that.
http://forum.newsbin.com/viewtopic.php?p=153465

An Astraweb admin explains the problems they're having with it here:

http://forums.newsbin.com/viewtopic.php?t=24986

And if you're going to implement this, may as well do some pre-verification of headers to check NZB completion on server before download starts, but that's been requested elsewhere. ;)
« Last Edit: July 29, 2009, 12:01:16 am by Hecks »