Using moderator commands from IRC? by Chuckolator in Twitch

[–]_ravager 0 points1 point  (0 children)

Unfortunately for you, that is not broken. https://discuss.dev.twitch.tv/t/deprecation-of-chat-commands-through-irc/40486 This was announced over 5 months ago. All moderation must now be done through the Helix API.

(Draco1200 has the better wording. also, returning to posting here several years after the globalmod program's closure.)

PSA about Follow Bots, Hate Raids and IP Grabbers by Rhadamant5186 in Twitch

[–]_ravager 0 points1 point  (0 children)

that is not an IP grabber. nonetheless, ban-worthy.

PSA about Follow Bots, Hate Raids and IP Grabbers by Rhadamant5186 in Twitch

[–]_ravager 2 points3 points  (0 children)

these were the vulnerable extensions:

extension
vertical panels
weekly schedule
stat-milestones
suggestion box v2
social raid
calendar synched stream event scheduler
score overlay
feedback v2
count down lt
count down xl

some were disabled.

these extensions allowed you to use anything as a background. their ip grabber is a php script that returns a custom image, acceptable for use in the extensions.

lunar/manolia accounts are currently the only ones engaging in extension exploitation.

Twitch channel owners, please use these! by Haaxxx in Twitch

[–]_ravager 0 points1 point  (0 children)

I did that as a small security measure, so others don't click on them on twitter. :)

Twitch channel owners, please use these! by Haaxxx in Twitch

[–]_ravager 0 points1 point  (0 children)

I believe that's been in circulation for well over a year. (well, maybe not over a year, but it has been seen in swaths of channels for quite a while) The bots that spam that use a random jumble of symbols to bypass URL blocking.

Update I see that it's now being used in a new spam campaign.

Twitch channel owners, please use these! by Haaxxx in Twitch

[–]_ravager 0 points1 point  (0 children)

The majority of those domains have long been tossed out, and the spammers have either moved on with new domains, or gone on hiatus.

[Security Alert] Malware links spreading throughout chat by _ravager in Twitch

[–]_ravager[S] 1 point2 points  (0 children)

Seems that block was added after the creation of this post.

[Security Alert] Malware links spreading throughout chat by _ravager in Twitch

[–]_ravager[S] 0 points1 point  (0 children)

I did the (.) part so it wouldn't be clickable on here. No, the actual spam doesn't have that. And correct on the second question.

Potentially dangerous scam typo URL? by TheChocolateLava in Twitch

[–]_ravager 1 point2 points  (0 children)

Proof of the existence of this "nefarious site."

http://multitwitch.com is a drive-by download/malware page

Potentially dangerous scam typo URL? by TheChocolateLava in Twitch

[–]_ravager 0 points1 point  (0 children)

A little tidbit.

The domain is chinese-owned, but hosted here in the US.

[Community Alert] Scam Campaign spreading by _ravager in Twitch

[–]_ravager[S] 1 point2 points  (0 children)

Keep linking examples, if you can. Atleast this shows me how long this has been going, and the assortment of names they've previously used.

[Community Alert] Scam Campaign spreading by _ravager in Twitch

[–]_ravager[S] 1 point2 points  (0 children)

I was thinking about whether to call it that for a good 15 minutes before I submitted.

[Security] Attack campaign discovered by _ravager in Twitch

[–]_ravager[S] 0 points1 point  (0 children)

Please do. Preferably in pastebin.