[Dxspider-support] You are killing all Webclusters!

[IZ2LSC]

I see a lot of naivety in your messages. Or maybe you don't understand the
true nature of the problem. The various checks of the authenticity of the
spots (i.e whitelist), cannot be based on the information contained in it
(for example the source node, ip address, and so on), because all this
information can be forged at will by the attacker.

We have to go to the source of the issue.

73s

Andrea

-->


On Fri, Mar 7, 2025 at 5:33 PM Tony K1AX via Dxspider-support <
dxspider-support at tobit.co.uk> wrote:

> Hi Tobias,
>
> Thank you for sharing your perspective. I understand the concerns of some
> web cluster operators regarding the impact of $DXProt::sendverify = 2,
> though my experience has been quite different.
>
> I recently launched my own web cluster, DX Data (https://dxdata.io), and
> while I recognize the challenges you’ve outlined, not all web clusters
> appear to be affected in the same way. My web cluster continues to function
> as expected, and spots from my users are still being picked up by DXSpider,
> CC Cluster, and most web clusters, including yours. I’d be happy to compare
> notes at some point to better understand why some web clusters are
> experiencing issues while others, like mine, remain unaffected.
>
>
> 73,
> Tony K1AX
>
>
> ------------------------------
> *From:* Dxspider-support <dxspider-support-bounces at tobit.co.uk> on behalf
> of Tobias Wellnitz via Dxspider-support <dxspider-support at tobit.co.uk>
> *Sent:* Thursday, March 6, 2025 7:21 PM
> *To:* The DXSpider Support list <dxspider-support at tobit.co.uk>
> *Cc:* Tobias Wellnitz <tobias.wellnitz at gmail.com>
> *Subject:* [Dxspider-support] You are killing all Webclusters!
>
> Hi all,
>
> my apologies for the slightly provocative email subject, but in the name
> of all Web Cluster operators I would like to express our strong concerns
> and disagreement about the recently rolled out "source" verification of DX
> Spots! This setting does more harm than good. Literally all spots submitted
> through web clusters are been dropped since the roleout of
> $DXProt::sendverify = 2.
> Why? Because web clusters manage their users and their accounts in the web
> stack and not in dxspider.
>
> Just to give you an idea about the magnitude: Only my web cluster (
> dxheat.com) has >30.000 registered users and has at any time 800 - 1500
> connected users. I know that Dxfun and Dxwatch are serving even larger user
> bases!
>
> Look at Andrea's table of dropped spots within a day:
>
> +-------+----------+
> | SPOTS | NODE     |
> +-------+----------+
> |   502 | EA4RCH-5 |
> |   411 | VE7CC-1  |
> |   273 | DH1TW-2  |
> |   208 | AE5E     |
> |   138 | PY1NB-4  |
> |   104 | EA6VQ-2  |
> |   103 | DO5SSB-2 |
> [...]
>
> Here is the mapping:
>
> EA4RCH-5 -> dxfun.com
> DH1TW-2 -> dxheat.com
> PY1NB-4 -> dxwatch.com
> EA6VQ-2 -> dxmaps.com
> DO5SSB-2 -> qrzcq.com/dxtron
>
> As you can imagine, we have put a lot of effort into building and
> operating these web clusters. The total number of affected users, which
> participate in the dx cluster network through our web services is larger
> than the overall users connected via telnet!
>
> We therefore kindly ask you to reconsider and undo the recent changes!
>
> Let jointly keep on discussing other possibilities on how to further
> harden together our DX Cluster network!
>
> Thanks & 73,
> Tobias, DH1TW
> _______________________________________________
> Dxspider-support mailing list
> Dxspider-support at tobit.co.uk
> https://mailman.tobit.co.uk/mailman/listinfo/dxspider-support
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mailman.tobit.co.uk/pipermail/dxspider-support/attachments/20250307/51d80e26/attachment-0001.htm>