[Dshield] Interesting thread over on NANOG

Kenneth Porter shiva at sewingwitch.com
Mon Aug 25 10:50:07 GMT 2003

--On Friday, August 22, 2003 8:51 PM -0700 John Sage <jsage at finchhaven.com> 

> Maybe there are no master servers.  Maybe it doesn't need one.
> Perhaps it just uses a network like Game Spy to find public Halflife
> (or other gaming servers) to get the viruses to "link" together.

There's an interesting idea. Create a virus server that pretends to be a 
game server, and reports its existence to the master servers for that game. 
The virus can then run GS protocol to get the "rules" of all the servers 
(simple variable/value pairs), one of which indicates that this "game 
server" is not what it claims to those in the know.

More information about the list mailing list