| Related sites for http://www.hyphenologist.co.uk/killfile/antitrollfaqhtm.htm |
| IETF_-_URI_Working_Group IETF Uniform Resource Identifiers Working Group | | ARCAD Architectural CAD system for the Linux operating system. | | Techbuy_com_au Sells computer hardware, DVDs and video, plus gaming supplies. | | The_Bait_and_Switch_Honeypot_System A system that redirects all hostile traffic from your production systems to a honeypot that is a partial mirror of your production system. Once switched, the would-be hacker is unknowingly attacking | | 3DNA 3D desktop user interface that works with Windows and the web. Software transforms the static 2D desktop, into a useful 3D interface. Add-on themes are available. | | The_Free_Auction 1.5Mb. Browser uploads. Web-based PageBuilder and templates provided. Search box, guestbook, counter and form mailer provided. | | Outer_Technologies Develops tools for the Windows operating systems and provide our products as shareware or freeware. Companies' flagship products are Linkman, Cacheman and StartEd. | | Aufrance_Associates Creates searchable real estate web sites. | | Alding Supplier of Alding Webshop Maker, a tool for producing web-based shops using a PC. Product information, references, downloads and user forum. | | Super_Vouchers Offer discount vouchers for Comptia exams including A+, Network+, Security+, i-Net+, Server+ and Linux+ certification. | | PhotoHost_org Forum-like photo sharing site. Offers a free membership, and two paid options. | | sfnet_Newsgroups Presentation of the administered Finnish hierarchy: spam and binary cancel policy, control messages and the associated PGP key as well as the checkgroup list. | | RFC_2579 Textual Conventions for SMIv2. K. McCloghrie, D. Perkins, J. Schoenwaelder. April 1999. | | Anders_Gidenstam_Source_Code_Page Software projects: Ada Video4Linux binding. | | Blitzed_Open_Proxy_Monitor BOPM is an open-source open proxy monitor which works with the Hybrid, Bahamut, Xnet, Unreal and Dancer IRCDs. | | Green,_Gary_-_Write2it Web design, marketing communications and content development; based in Tustin, California. | | OctaviusDesigns Provides graphic design, 3D animations, renderings and architectural illustrations. | | Opal_Infotech Provides web design and development, search engine optimization and multimedia services. Based in Gujarat, India. | | Chambers,_Mark Web design, domain registration, and promotion services. Includes a portfolio and Internet resources. | | ScreenTime_Media Software tools convert Macromedia Flash and Director, Apple QuickTime and Microsoft PowerPoint content into screensavers. |
|
New Page 1
Anti Troll FAQ.
Subtitled:
What is a troll,
what do they do,
why do they do it,
and what can one do about them?
URL http://www.hyphenologist.co.uk/killfile
Last modified 3 Nov 2002
1. Introduction and Intent
This FAQ describes what a Troll is, what they do, what can be done about them, together with some suggestions as to why they do may it. Other FAQs on similar subjects, have not covered the ?philosophy? and ?organisation? behind this phenomena, and have not covered the intent of destruction which is now evident.
While every usenet user has been the victim of Trolls, very few have had the opportunity to study many thousand troll posts and look for patterns. They are therefore unaware of the methods used. It is important that all usenet users have access to as much information as possible. A person who has only experienced the Crosspost Trolls in a Sub Target newsgroup will naturally suggest inappropriate measures.
I have only included things which the Trolls have demonstrated that they are well aware.
This FAQ is coordinated by Dave Fawthrop <dave@hyphenologist.co.uk>.
This FAQ is held at http://www.hyphenologist.co.uk/killfile. Feel free to incorporated the URL into sig files,
web pages etc, and post in full to any newsgroup which has problems.
2. Table of contents
>> The misc.kids.moderated effort began sometime in the summer of 1996, when a regular poster to misc.kids, Roger
Hunt, suggested to the newsgroup, as well as others who were former regular posters, that we establish a moderated
alternative to misc.kids. This time, unlike previous occasions when this type of suggestion was made, many people
seized upon the idea. Misc.kids had suffered several troll invasions; many regular and trusted posters had left; and
the level of discourse had declined. Colleen Porter did a straw poll on some issues related to creating a new
newsgroup and got 199 responses. Those responses have been
thoughtfully considered throughout this creation process and form the basis for much of what appears in the RFD. <<<
Towards the end of 1997 misc.kids.moderated was created see: http://www.misckids.org/
After the creation of misc.kids.moderated the level of destructive trolling of misc.kids fell drastically. At
the time of writing, misc.kids.moderated is a small but thriving newsgroup, also misc.kids is a large newsgroup, but
riven by On Topic disputes. On a superficial examination it could be concluded that the creation of mkm was a waste of
time and effort, because mk now has only minor problems. On a deeper examination, it could be concluded that the
existence of mkm protects mk from the worst of the outright
trolling, presumably because in the case of drastic problems, subscribers could move to mkm.
Pro:
It works and is a traditional usenet method of solving the problems of troublesome newsgroups.
Con:
It requires a permanently on line machine. It requires a moderbot to handle much of the work. It requires a team of moderators ideally about six to handle posts which the moderbot does not approve. It requires a very well written charter, with specific moderation guidelines, otherwise the moderators will end up accepting or rejecting posts on personal preference. The Trolls will try to become moderators, and cause mayhem. Changing from a non moderated to a moderated newsgroup is *extremely* difficult. A new newsgroup with the same name but .moderated would normally have to be created. This would need an RFD and vote in the uk.* hierarchy, if that is where the newsgroup is to be situated.
5.4 A purely robomoderated newsgroup
A purely automatic moderation system which will reject all crossposting. Also limit the number of posts which can be made by a single poster in a day, and similar problems.
This is being discussed at the time of writing on uk.net.news.config subject: RFD: uk.net.news.beginners
Pro:
It might work, or at least improve matters.
Con:
It requires a permanently on line machine.
It requires a very well written charter, with specific moderation guidelines,
Changing from a non moderated to a moderated newsgroup is *extremely* difficult.
A new newsgroup with the same name but .moderated would have to be created.
This would need an RFD and vote in the uk.* hierarchy.
Nobody knows how well it would withstand an onslaught by determined and well organised Trolls.
5.5 A Yahoo Group Listserver
If things get too rough the existing group of posters could move to an invitation only Yahoo Group, or a UK Yahoo group. This has been done successfully with uk.local.yorkshire where most of the posters have moved to
Tykesground, which provides respite from the continuing Trolling problems, but uly has not died, because many post to both forums,
Pro:
The Trolls can be effectively kept out.
The group of reasonable posters is kept together.
Con:
Yahoo posts do not thread as usenet posts, on some newsreaders. The list owner is Ghod. He/she must be trusted, and treat the group with a light hand. People get bored, lose Internet access, die and so on, and thus unsubscribe. In the longer term, new recruits must be found or the group will wither and die.
The Trolls have effectively won, and the newsgroup will probably wither and die.
The Trolls hate it and treat the Yahoo group as an affront to the their ability to control the Target Newsgroup. They will fight harder, and *never* go away.
All usenet groups need new blood to replace people who get bored, move on, die, loose access to the net etc. etc.
Getting new subscribers to a closed group is difficult.
5.6 Cancel posts
Traditionally posts which exceed a Breidbart Index of 20 or any of the other usenet rules may be cancelled.
For unix users, there is a system NoCeM which lists posts with a BI above 20, and prevents you from downloading them.
Pro:
It gets rid of offending posts.
The Trolls hate it.
For forgeries of oneself there is good justification for cancellation.
Con:
Cancelling other peoples posts is not for the uninitiated. Cancellation does not work on all
newsservers. It must be done quickly, or it is not worth doing. The posts get to the users machine where cancellation has no effect, harm is done before the canceller sees the post.
Most troll posts are not strictly against the usenet rules and guidelines. In these cases, it is difficult to justify cancellation.
5.7 LART (report to ISP)
Where a Troll breaks the rules of usenet or their ISP an email or "LART" to
abuse@ISP,name will often persuade the ISP, newsserver operator, or their upstream providers to cancel a users account.
Pro:
It often works. It is traditional usenet practice.
Con:
Free ISPs are ten a penny, and the Troll can easily get another account and continue as before.
Some Trolls can have several paid for internet accounts.
Some of the worst trolls take care not to break their ISPs Terms and Conditions, or usenet rules. ISPs are reluctant to act without evidence of an offence.
5.8 Trim the newsgroup line
With the crossposting Trolls one can follow up the posts asking only those in the Sub Target newsgroups to trim the newsgroup line, when following up. Remember not to ask the Troll Communications newsgroups to trim the newsgroup line.
Pro:
It reduces the inadvertent crossposts by up to 90%
Con:
The Trolls notice that it has been done, and replace the crossposts.
Newbies, do not have a clue, and ask what on earth you are talking about.
5.9 Give them a good (virtual)
st*ff*ng.
This is the preferred method on uk.rec.motorcycles, a robust newsgroup.
Pro:
It is very satisfying.
Con:
Some would say that it makes things worse because it gives them the attention which they crave.
At best it becomes a war of attrition. In the Target newsgroups there is nothing to loose, so one might as well try to wear them down.
5.10 Follow up the offending posts.
It is always possible to follow up troll posts.
Pro:
For forgeries of posts in your name, and libelous posts, A follow up is an effective rejoinder, because of the ineffectiveness of Cancel posts.
For The Crosspost Troll, warning the Sub Target newsgroup(s) of the list of crosspostings, is effective in reducing the damage.
For The Request for Assistance Troll, only the Target Newsgroup and the Troll communications
newsgroup(s) will see the followup so they are not effective.
For combined Crosspost Troll combined with a Request for Asistance Troll, only the Sub Target newsgroups should be warned.
Con:
In general just following up is not a good idea.
5.11 Digitally Sign Posts with PGP.
If forgery is a problem, one can sign posts with Pretty Good Privacy. This is free for non commercial use and may be found at
http://web.mit.edu/network/pgp.html. There are USA and Non USA versions available. Non USA users should ensure that they get the non USA version.
This does not stop the forgeries, but does allow the reader to check if a post comes from the person it appears to come from.
Continuous surveillance of incoming email etc. for viruses and trojans is essential for those using a PGP sig. If
your machine becomes infected with a backdoor trojan the digital sig may be compromised.
5.12 Continue posting On Topic posts to the newsgroup.
Those who find themselves subscribed to a Target Newsgroup, can agree amongst themselves that they will not be driven away by the Trolls. If they just keep on posting On Topic posts, the Trolls can never totally win. Better, new subscribers will find something interesting to read amongst the dross, and filth.
If someone includes the URL for the killfile FAQ http://www.hyphenologist.co.uk/killfile in a sig, and perhaps posts the whole thing weekly, new subscribers will learn very quickly how to use killfiles, and so not see the trolls.
5.13 Unsubscribe
When a ng is troubled by trolls it is always possible to just unsubscribe.
Pro:
From a purely selfish point of view this is by far the easiest thing to do. You can happily transfer your
subscriptions to less troubled ngs. Problem solved!
Con:
From the point of view of usenet as a whole, it is absolutely the worst possible course of action. Whether the
trolls are the infantile kind with a strange sense of fun, or the evil kind intent on destruction, the result will be
the same. No On Topic posts, lots of ridiculous troll posts, dead newsgroup.
This is what happened to uk.local.birmingham, when a group of reasonable posters including Iain Bowen just
unsubscribed. It has never recovered.
5.14 Tempt them back into the mainstream of usenet
Trolls sometimes post reasonable things, these can be followed up
Pro:
It may improve matters.
Con:
Those who believe in a strict "ignore them" policy will not use this.
5.15 Reclaim Troll threads
There is sometimes a small point of general interest in troll posts. Careful snipping and follow ups can create
interesting threads.
Pro:
It irritates the Trolls.
Con:
Reasonable posters may already have killed the threads
5.16 Retromoderation
Two forms of retromoderation already exists on usenet, namely:
Spam canceling. This function is not automatic at the
time of writing. Spam is *detected* automatically but the
canceling is done manually by volunteers.
Also binaries, except tiny ones, posted to text newsgroups
are automatically cancelled.
It would be possible to write scripts which would
automatically detect and cancel posts to any specific
newsgroup or newsgroups which contravene some parts of the
newsgroup charter.
Examples would be excessive crossposting, and perhaps
hipcrime attacks.
Pro:
It may be effective against crossposting
Con:
Most Troll activities could not be reliably detected
automatically. A human retromoderator would have great
difficulty determining exactly if a specific post was
to be cancelled.
Retromoderation is intensely disliked by usenet generally.
The Troll communications newsgroup(s) used changes rapidly
It would be impossible to list, Troll communications
newsgroup(s), in a charter because the trolls would just use
a different newsgroup.
6. Why do they do it?
No one knows why the Trolls act as they do, but there are several theories. Clearly an individual Troll may be in one, or several of these groups, or indeed in none at all. It is difficult to believe, but possible, that a totally normal person would become a Troll.
6.1 The Infant or Attention Seeker theory
Some believe that the trolls are just adults who brains and morals have not developed beyond childhood, and they are just behaving as attention seeking children.
6.2 The retired bitter old person theory.
There is evidence that some Trolls are retired persons, with a good pension and little to do with their lives. They may have suffered a personal loss such as the death of a much loved spouse which warped their outlook on
life.
This type is particularly dangerous, because they may have ample funds to buy computer equipment, own multiple domain names, and multiple access to the internet. Worse they may have, say 8 hour per day to invest in their "hobby".
6.3 The insane person theory.
Some Trolls may be clinically insane, indeed one posts as Mogadon John which may indicate that he/she is taking this *major*
tranquiliser, or it may just be a joke.
6.4 The just evil theory.
There are people in this world who enjoy destruction. Some enjoy murdering children. Some enjoy sexually abusing children. Some Trolls may be in a similar category.
6.5 The sad git theory.
There are unfortunately people with such restricted lives that they cannot think of anything useful or constructive to do with the powerful and expensive kit which they are using.
6.6 The loser theory.
This theory is that the Trolls are just losers who cannot succeed in anything in their real lives. They can however disrupt usenet with relative impunity.
7. Definitions
Some of the terms used may not be familiar to all readers, and indeed I have been forced to invent some definitions.
7.1 Target Newsgroup(s)
The newsgroup(s) which they are attempting to destroy, at the time of writing, May 2002, two are uk.local.yorkshire
and comp.os.linux.advocacy (thanks to mjcr)
7.2 Sub Target newsgroup(s)
The newsgroups(s) which they are using to flood the target newsgroup with Off Topic posts. These are continuously changed, examples are the cooking newsgroups, the guns newsgroups, and the political newsgroups. All of which may be relied upon to follow up inflammatory posts which are on topic to them, but off topic to the Target newsgroup.
7.3 Old Target newsgroup(s)
The newsgroup(s) which have been made into a wasteground by the Trolls, and are being maintained so by using crossposts from the target newsgroups. At the time of writing, end 2001, one is uk.local.birmingham.
7.4 Troll communications newsgroup(s).
These are ngs used by the trolls for non important communications, such as the Request for Assistance. Typical ones are alt.troll, alt.alien.vampire.flonk.flonk.flonk, alt.fan.karl- malden.nose, alt.hackers.malicious. If a troll is subscribed to one of these he/she may assist in trolling many Target newsgroups, using the request for assistance troll. The ngs used for this purpose change regularly.
7.5 Sockpuppet
A Sockpuppet is when a poster has several usenet identities, either just different names and email addresses from a single account. Alternatively several email identities with valid email addresses and email accounts.
7.6 Morphed Identity
A morphed identity is when a poster has one usenet identity, which changes in detail, to outwit killfiles. For instance the name may remain the same and the email address change, or the name and/or email address may contain accented characters which are changed for different versions of the same letter.
7.7 Morphed Subject:
A morphed Subject: is when a poster changes the subject line, in some visually insignificant way in the middle of a thread to outwit killfiles set to that thread.
7.8 K00k or kook
A general insult used by Trolls. One who displeases or opposes Trolls
8. Links
Using a search engine such as http://www.google.com/ is the best way to obtain up to date information on Trolls, but some worthwhile links are included here.
net-abuse-faq/troll-faq
URL: http://ddi.digital.net/~gandalf/trollfaq.html
net-abuse-faq/spam-faq
URL: http://ddi.digital.net/~gandalf/spamfaq.html
Google Usenet and Bulletin Board Abuse
URL:
http://directory.google.com/Top/Computers/Internet/Abuse/Usenet_and_Bulletin_Board_Abuse/
Spam-L FAQ
URL: http://www.claws-and-paws.com/spam-l/resources.html
The Art of Lart
http://web.thock.com/lart/
List of Abusive ISPs
http://www.astroconsulting.com/FAQs/abusive_isps_list.htm
9. Disclaimer
This article is provided as is without any express or implied warranties. While every effort has been taken to ensure the accuracy of the information contained in this article, the author/maintainer/contributors <take your pick> assume(s) no responsibility for errors or omissions, or for damages resulting from the use of the information contained herein.
Dave Fawthrop <hyphen@hyphenologist.co.uk> <http://www.hyphenologist.co.uk> Computer Hyphenation Ltd, Hyphen House, 8 Cooper Grove, Halifax HX3 7RF, UK, Tel/F/A +44(0)1274 691092. M: +44(0)7720455248, 16 years of Word Splitting. Hyphenologist is sold as C source code and splits 50 languages.
|
|
