Help - Search - Members - Calendar
Full Version: what's a bot?
The Education Forum > Ask an Expert > ICT
John Dolva
Wiki :

"BOTS , also known as web robots, WWW robots or simply bots, are software applications that run automated tasks over the Internet. Typically, bots perform tasks that are both simple and structurally repetitive, at a much higher rate than would be possible for a human alone. The largest use of bots is in web spidering, in which an automated script fetches, analyses and files information from web servers at many times the speed of a human. Each server can have a file called robots.txt, containing rules for the spidering of that server that the bot is supposed to obey.

In addition to their uses outlined above, bots may also be implemented where a response speed faster than that of humans is required (e.g., gaming bots and auction-site robots) or less commonly in situations where the emulation of human activity is required, for example chat bots.

These chatterbots may allow people to ask questions in plain English and then formulate a proper response. These bots can often handle many tasks, including reporting weather, zip-code information, sports scores, converting currency or other units, etc. Others are used for entertainment, such as SmarterChild on AOL Instant Messenger and MSN Messenger and Jabberwacky on Yahoo! Messenger.

An additional role of IRC bots may be to lurk in the background of a conversation channel, commenting on certain phrases uttered by the participants (based on pattern matching). This is sometimes used as a help service for new users, or for censorship of profanity.

AOL Instant Messenger has now introduced a feature that allows you to make a screen name into a bot. This new feature removes the rate limit on the screen name, however it is now limited in the amount of instant messages that can be sent and received."


"Another, more malicious use of bots is the coordination and operation of an automated attack on networked computers, such as a denial-of-service attack by a botnet. Internet bots can also be used to commit click fraud and more recently have seen usage around MMORPG games as computer game bots. A spambot is an internet bot that attempts to spam large amounts of content on the Internet, usually adding advertising links.

There are malicious bots (and botnets) of the following types:
Spambots that harvest email addresses from contact forms or guestbook pages
Downloader programs that suck bandwidth by downloading entire web sites
Web site scrapers that grab the content of web sites and re-use it without permission on automatically generated doorway pages
Viruses and worms
DDoS attacks
Botnets / zombie computers; etc.
Bots are also used to buy up good seats for concerts, particularly by ticket brokers who resell the tickets. Bots are employed against entertainment event-ticketing sites, like TicketMaster.com. The bots are used by ticket brokers to unfairly obtain the best seats for themselves while depriving the general public from also having a chance to obtain the good seats. The bot runs through the purchase process and obtains better seats by pulling as many seats back as it can.
Bots are often used in Massively Multiplayer Online Roleplaying Games to farm for resources that would otherwise take significant time or effort to obtain; this is a concern for most online in-game economies.
The most widely used anti-bot technique is the use of CAPTCHA, which is a form of Turing test used to distinguish between a human user and a less-sophisticated AI-powered bot, by the use of graphically encoded human-readable text."


Cn anyone add to this?
John Dolva
Is there a dada-engine bot that can beat any site-bot?

(One of the earlier Cowboys and Yankees (?) topics had kind of dada-engine-esque flavour)
John Dolva
IF ? ...one was to wake one morning (or evening (funny icon)) and find that there is no internet. A phonecall to the ISP help desk recording informs one that the internet has been disbanded and will not be restored again, sorry, have a nice day.

What would YOU do?

Get a life? Look for ways of having it restored? Let it fade as a memory does as one becomes one of the last of the generation that remembers it?

http://www.defenselink.mil/speeches/speech...x?speechid=1018

"The Internet-Web paradigm considers that principle a contradiction. What is the purpose in creating a medium giving broad access to a virtually unlimited spectrum of information if we are going to turn around and chop that medium up into a host of restricted compartments? Given the security-oriented nature of the intelligence business, isn't it likely that an ability to compartment Intelink will result ultimately in loss of the primary data dissemination and access benefits we initially realized?"

A new art form? making a film...?

http://www.theatlantic.com/issues/96jul/sa...te/satelite.htm

"...the next phase of mapping the earth. By next year three of the four companies plan to produce images of one-meter resolution--100 times as precise as those of current civilian satellites. The ability to see hazy outlines of large buildings will be replaced with the ability to see the clear shapes of small cars. The ability to observe the same farm or city block every sixteen days will be replaced with the ability to observe the same point every two or three days; three to six images a day of most places in the United States are promised within four years. "
John Dolva
What is a static IP address/dynamic IP address?

(link missing, apologies to writer)

"A static IP address is a number (in the form of a dotted quad) that is assigned to a computer by an Internet service provider (ISP) to be its permanent address on the Internet. Computers use IP addresses to locate and talk to each other on the Internet, much the same way people use phone numbers to locate and talk to one another on the telephone. When you want to visit whatis.com, your computer asks a domain name system (DNS) server (think telephone information operator) for the correct dotted quad number (think phone number) for whatis.com and your computer uses the answer it receives to connect to the whatis.com server.
It would be simple if every computer that connects to the Internet could have its own static IP number, but when the Internet was first conceived, the architects didn't foresee the need for an unlimited number of IP addresses. Consequently, there are not enough IP numbers to go around. To get around that problem, many Internet service providers limit the number of static IP addresses they allocate, and economize on the remaining number of IP addresses they possess by temporarily assigning an IP address to a requesting Dynamic Host Configuration Protocol (DHCP) computer from a pool of IP addresses. The temporary IP address is called a dynamic IP address.

Requesting DHCP computers receive a dynamic IP address (think temporary phone number) for the duration of that Internet session or for some other specified amount of time. Once the user disconnects from the Internet, their dynamic IP address goes back into the IP address pool so it can be assigned to another user. Even if the user reconnects immediately, odds are they will not be assigned the same IP address from the pool. To keep our telephone telephone analogy going, using a dynamic IP address is similar to using a pay phone. Unless there is a reason to receive a call, the user does not care what number he or she is calling from.

There are times, however, when users who connect to the Internet using dynamic IP wish to allow other computers to locate them. Perhaps they want to use CU-SeeMe or use a VoIP application to make long distance phone calls using their IP connection. In that case, they would need a static IP address. The user has two choices; they can contact their ISP and request a static IP address, or they can use a dynamic DNS service. Either choice will probably involve an additional monthly fee.

Using a dynamic DNS service works as if there was an old-fashioned telephone message service at your computer's disposal. When a user registers with a DNS service and connects to the Internet with a dynamic IP address, the user's computer contacts the DNS service and lets them know what IP address it has been assigned from the pool; the service works with the DNS server to forward the correct address to the requesting DHCP computer. (Think of calling the message service and saying "Hi. I can be reached at 435.44.32.111 right now. Please tell anyone who tries to reach me to call that number.) Using a dynamic DNS service to arrange for computers to find you even though you are using a dynamic IP address is the next-best thing to having a static IP.

IPv6, which has also been called "IPng" (IP Next Generation), lengthens IP addresses from 32 bits to 128 bits and increasesthe number of available IP addressess significantly, making static IP addresses easier and less expensive to obtain and maintain."
...

"Getting started with static IP and dynamic IP addresses
To explore how static IP and dynamic IP addresses are used in the enterprise, here are some additional resources:
IP routing: Static routes: This article explains the pros and cons of static IP routing, how to create static routes and when to use them in your network.
IP routing: Dynamic routes: This article delves into the benefits and complexities of dynamic IP routing and offers examples of dynamic routing protocols including a configuration using RIP ."
_____________

To check out vulnerability, have a look at grc.com (Gibson research) and try 'Shields up'. It'll probe multiple ports and other ways that may make ones computer vulnerable. The articles written by Gibson are very informative for anyone interested in that sort of thing.
John Dolva
"To check out vulnerability, have a look at grc.com (Gibson research) and try 'Shields up'. It'll probe multiple ports and other ways that may make ones computer vulnerable. The articles written by Gibson are very informative for anyone interested in that sort of thing."
[quote]

--- http://www.grc.com/default.htm - 'shields-up'

"The text below might uniquely identify you on the Internet

Your Internet connection's IP address is uniquely associated with the following "machine name":

XXX-YYY-YYY-YYY-YYY.Z.Z.Z.Z (ed : censored)

The string of text above is known as your Internet connection's "reverse DNS." The end of the string is probably a domain name related to your ISP. This will be common to all customers of this ISP. But the beginning of the string uniquely identifies your Internet connection. The question is: Is the beginning of the string an "account ID" that is uniquely and permanently tied to you, or is it merely related to your current public IP address and thus subject to change?

The concern is that any web site can easily retrieve this unique "machine name" (just as we have) whenever you visit. It may be used to uniquely identify you on the Internet. In that way it's like a "supercookie" over which you have no control. You can not disable, delete, or change it. Due to the rapid erosion of online privacy, and the diminishing respect for the sanctity of the user, we wanted to make you aware of this possibility. Note also that reverse DNS may disclose your geographic location.

If the machine name shown above is only a version of the IP address, then there is less cause for concern because the name will change as, when, and if your Internet IP changes. But if the machine name is a fixed account ID assigned by your ISP, as is often the case, then it will follow you and not change when your IP address does change. It can be used to persistently identify you as long as you use this ISP.

There is no standard governing the format of these machine names, so this is not something we can automatically determine for you. If several of the numbers from your current IP address (YYY.YYY.YYY.YYY (ed) ) appear in the machine name, then it is likely that the name is only related to the IP address and not to you. But you may wish to make a note of the machine name shown above and check back from time to time to see whether the name follows any changes to your IP address, or whether it, instead, follows you.

Just something to keep in mind as you wander the Internet." (- mine's dynamic, but with certain loose locators)
John Dolva
Experimenting with Numerous connections and lines with regards to developing defences against Cyberwarriors

(wiki)

"O-line
An O-line, shortened from Operator Line, is a line of code in an RC daemon configuration file that determines which users can become an IRC Operator and which permissions they get upon doing so. The name comes from the prefix used for the line in the original ircd, a capital O. The O-line specifies the username, password, operator flags, and hostmask restrictions for a particular operator. A server may have many O-lines depending on the administrative needs of the server and network.[8]

Operator flags are used to describe the permissions an operator is granted. While some IRC Operators may be in charge of network routing, others may be in charge of network abuse, making their need for certain permissions different.[9] Operator flags available vary widely depending on which IRC daemon is in use. Generally, more feature rich IRC daemons tend to have more operator flags, and more traditional IRC daemons have fewer.

An O-line may also be set so that only users of a certain hostmask or IP address can gain IRC Operator status using that O-line. Using hostmasks and IP addresses in the O-line require the IP address to remain the same but provide additional security.


K-Line
A k-line or kill line (also written K:line) is an Internet Relay Chat term, applied to a specific user. When a user is k-lined, it bans the user from a certain server, either for a certain amount of time or permanently. Once the user is banned, they are not allowed back onto that server; they have to join a different server to get onto IRC. This is recorded as a line in the server's IRC daemon configuration file prefixed with the letter "K", hence "K-line".

While the precise reason for the disconnection varies from case to case, usual reasons involve some aspect of the client or the user it is issued against.

User behavior
K-lines can be given due to inappropriate behavior on the part of the user, such as nickname colliding, mode "hacking", multiple channel flooding, harassing other users via private messaging features, spamming etc., or in the case of older networks without timestamping, split riding, which cannot be corrected through use of channel operator privileges alone.
Client software
Some IRC Daemons can be configured to scan for viruses or other vulnerabilities in clients connecting to them, and will react in various ways according to the result. Outdated and insecure client software might be blocked to protect other network users from vulnerabilities, for instance. Some networks, e.g. freenode, will disconnect clients operating on/via open proxies, or running an insecure web server.
Geographic location
An IRC network operating multiple servers in different locales will attempt to reduce the distance between a client and a server. This is often achieved by disconnecting (and/or banning) clients from distant locales in favour of local ones.

Other "lines"
There are a number of other network "lines" relating to the K-line.


G-Line/AKill
Main article: Gline
A Gline or AKill is a global network ban applied to a user; the former term comes from Undernet and the latter from DALNet. The term "AKill" comes from an earlier implementation in which the IRC Services would automatically "kill" (disconnect) the user remotely upon login, rather than the individual servers simply denying the connection.


Z-line
Main article: Zline
On some IRCds, such as UnrealIRCd, a Zline is similar to a Gline, but applied to a client's IP address range, and is considered to be used in extreme cases. Because a Zline does not have to check usernames (identd) or resolved hostnames, it can be applied to a user before they send any data at all upon connection. Therefore a Zline is more efficient and uses fewer resources than a Gline or Kline when banning large numbers of users. Because not all IRCds are the same, others, such as Charybdis, use a 'Dline' instead.


Q-line
On some IRCds, such as UnrealIRCd, a Qline forbids a nickname, or any nickname matching a given pattern. This is most often used to forbid use of services nicknames (such as 'X', or NickServ) or forbid use of IRC Operator nicknames by non-operators. Some IRC daemons may disconnect users when initially applying the Qline, whilst others will force a nickname change, or do nothing until the user covered by the Qline reconnects. Other IRCds, like Charybdis, use the 'RESV' command instead, with the stats letter remaining as Q.


Operator abuse
Unfortunately, some IRC operators abuse their power by killing or K-lining users that haven't committed any serious offenses on the network, usually because of boredom, for comical effect, or the user offended the operator in some way. Such abuse is tolerated or even encouraged on a few private networks, while on most major networks it's highly discouraged and abuses of power may result in removal of the O-line or in severe cases, a K-line or G-line of the offending operator."

As the internet develops certain features like it's commercialisation and controlling search engines, the openings for the separation of the internet brings with it hazards in the solutions applied. Perhaps there is a better way?
John Dolva
A ''Forum Technical Help'' thread
http://educationforum.ipbhost.com/index.php?showtopic=14277
John Dolva
''Page Updated: Tuesday, October 10th, 2000

MAJOR NEWS!! Senator John Edwards
Introduces 'Spyware Control Act'


What do the NetZip-descended
file downloaders whisper when
they think you are not listening?
OVERVIEW: How Does This Affect YOU ?''...


http://www.grc.com/downloaders.htm

''...


To Summarize before we examine the details . . .

In order to confirm or deny the reports alleging that the Real Networks and Netscape/AOL download utilities might be spying on their users by secretly "phoning home" with detailed reports of every file their users download, I used a readily available "packet sniffer" to monitor the data being sent from one of my machines when downloading a handful of my own website's files.

I was able to quickly confirm that the NetZip-descended downloaders used by Real Networks and Netscape/AOL were, indeed, sending detailed reports of every download "back to base" every time they were used to download a file.

These reports contained the complete Internet URL of the file being downloaded and were accompanied by an apparently unique "ID Tag" which was associated with each machine. To confirm this, I experimented with downloads from several different computers. In every case the "apparently unique ID" being sent out never changed on the same computer, and each computer has its own.

Netscape's Smart Download goes one step further by including the computer's IP address in a separate "cookie" header. This is troubling, since "cookie" headers tend to be left alone as they pass through proxies and anonymizers. This would thwart deliberate attempts at keeping the computer's IP address confidential.

When you consider that each user's computer is uniquely identified, and that reports are being sent back for every file downloaded — and accompanied by a unique ID tag (and, in the case of Netscape, the machine's unique IP address) . . .


. . . It is NATURAL to wonder WHY
this information is being transmitted,
and to what end the data is being put!''...
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.