[ubuntu-uk] IRC security mention in Ubuntu Weekly News 27

[Andy]

On 15/01/07, alan c <aeclist at candt.waitrose.com> wrote:
> I  have only used IRC a few times, and have only a vague idea of the
> issues around it. I noyice in UWN 27 that
> =====
> If you are using IRC to connect to any of the Ubuntu IRC channels, the
> IRC Operator's Team would like to inform you that to make your
> connection secure you should use port 8001 when connecting to any of
> the Freenode servers.
Secure?
Do they really mean secure, when I tired to make an SSL connection it
refused, but non SSL works fine.
I would not ever call an un encrypted connection 'secure'.


> There has been a recent surge in people
> exploiting vulnerable routers of IRC users. Using port 8001 will
> prevent you from being disconnected from one of these DCC attacks.
This suggests to me that an attack is launched against a router, this
router then launches an attack on the users PC, is this correct?


> It
> is also recommended that you download and install the latest firmware
> for your router.
Ironically updating firmware for products from Linux is one of the
trickiest things to do IMHO. The firmware update software is written
for windows generally.

Anyone got any more info about this?

-- 
Did you think it should be legal to rip a CD to your PC or MP3 player?
Change the law, sign the petition http://petitions.pm.gov.uk/privatecopy/