December 1, 2011 
< | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | >
December 1, 2011 [00:05:59] *** Algabe has joined #supybot[00:06:34] <Algabe> help me with ircquote ---» msg ChaN register #channel[00:08:58] <skizzhg> ircquote PRIVMSG chanserv register #channel (or whatever the chanserv wants)[00:09:39] *** Algabe_ has joined #supybot[00:09:44] <Algabe_> help me with ircquote ---» msg ChaN register #channel[00:09:52] <skizzhg> wtf?[00:09:54] <skizzhg> ircquote PRIVMSG chanserv register #channel (or whatever the chanserv wants)[00:10:18] <Algabe_> skizzhg: and ChaN?[00:11:04] <skizzhg> ( if you lose connection check with ;;private since )[00:11:19] <skizzhg> ChaN?[00:12:19] <skizzhg> the syntax is ircquote PRIVMSG subject, who 'subject' is or what he wants is your call[00:12:32] *** Rully has joined #supybot[00:12:34] *** Algabe has quit IRC[00:12:42] <Rully> services of ChaN[00:12:43] <skizzhg> PRIVMSG is like /msg[00:13:06] <Rully> skizzhg: im sorry for my conection[00:13:34] <skizzhg> no worries :)[00:14:05] <Rully> ircquote for /msg ChaN register #channel[00:14:13] <skizzhg> if you use 'since' you can see if someone write when you are not here[00:14:40] <skizzhg> who is ChaN, a service?[00:14:46] <skizzhg> chanserv?[00:14:48] <Rully> yap[00:15:20] <skizzhg> ircquote PRIVMSG is like /msg, then add what you need[00:15:24] *** Algabe_ has quit IRC[00:15:57] *** Algabe_ has joined #supybot[00:19:11] *** Rully has quit IRC[00:19:55] *** digitalfiz has quit IRC[00:21:12] *** Algabe_ has quit IRC[00:22:15] *** Algabe_ has joined #supybot[00:40:06] *** hiryu_ has quit IRC[00:41:07] *** hiryu_ has joined #supybot[00:48:39] *** Rully has joined #supybot[00:49:12] *** ircdearia has quit IRC[00:49:59] *** Algabe_ has quit IRC[00:50:15] *** ircdearia has joined #supybot[00:57:29] *** Rully has quit IRC[01:01:14] *** ircdearia has quit IRC[01:02:41] *** ircdearia has joined #supybot[01:09:06] *** ircdearia has quit IRC[01:09:13] *** ircdearia has joined #supybot[01:09:56] *** Rully has joined #supybot[01:16:05] *** Rully has quit IRC[01:28:48] *** Rully has joined #supybot[01:32:49] *** Rully has quit IRC[01:37:19] *** zZzaru is now known as Biiaru[02:28:18] *** bcomplex has quit IRC[02:30:47] *** ircdearia has quit IRC[02:38:29] *** ircdearia has joined #supybot[02:49:59] *** tvxq|fna has joined #supybot[03:09:29] *** eraserhead77 has joined #supybot[03:16:29] *** sythe has joined #supybot[03:28:31] *** }ls{ has quit IRC[03:34:12] *** }ls{ has joined #supybot[04:18:14] *** Biiaru is now known as zZzaru[04:42:07] *** }ls{ has quit IRC[06:16:13] *** Banton has quit IRC[06:16:37] *** Banton has joined #supybot[06:34:58] <ProgVal> [ping] test[06:35:00] <ProgVal> [ping]test[06:35:08] <ProgVal> [ProgVal]ping[06:35:12] <Unit193> Pong[06:35:12] <ProgVal> wtf[06:35:42] <ProgVal> Ah, I see[06:36:17] <ProgVal> someone used MessageParser and Sudo together to run command as me on my bot[06:36:53] <ProgVal> I'll fix it as soon as I can[06:36:55] <ProgVal> In the meantime, I recommend everyone to unload Sudo[06:42:49] *** sythe has quit IRC[08:02:27] *** tvxq|fna has quit IRC[09:07:54] *** ItsMe has quit IRC[09:10:20] *** ItsMe has joined #supybot[10:06:30] *** dcr226 has quit IRC[10:07:32] *** dcr226 has joined #supybot[10:24:29] *** m4v has quit IRC[10:29:29] *** m4v has joined #supybot[10:42:27] <SteelSide> ProgVal, o.0? serious bug there D:[11:04:59] *** cef has quit IRC[11:05:30] *** cef has joined #supybot[12:00:20] *** bcomplex has joined #supybot[12:02:05] *** eraserhead77 has quit IRC[12:14:00] *** iPHP has joined #supybot[12:16:16] *** }ls{ has joined #supybot[13:03:35] <ProgVal> l[13:03:37] <ProgVal> oops[13:13:51] <ProgVal> finally, the vulnerability does not come from Sudo plugin[13:14:12] <ProgVal> it comes from @echo and nested commands[13:14:21] <ProgVal> I'm looking deeper to solve that issue[13:20:31] <ProgVal> I made an Alias for that: @sudo kick [echo $nick][13:21:02] <ProgVal> If the user is called [quit], the command is evaluated to @sudo kick [echo "[quit]"][13:21:31] <ProgVal> which is evaluated to @sudo kick [quit][13:22:02] <SpiderDave> hmm, needs some kind of escape?[13:22:17] <ProgVal> then, Sudo runs the command "kick [quit]" as owner (because the original command was "@sudo kick [echo $nick]", which is considered as safe)[13:22:22] <ProgVal> * bam *[13:22:35] <ProgVal> SpiderDave: yep[13:24:15] <SpiderDave> so would any alias i made (as owner) be vulnerable to this?[13:25:14] <SpiderDave> oh i guess it'd have to be a command that executes a command hmm[13:25:26] <SpiderDave> er an alias that does[13:30:31] *** xy has quit IRC[13:33:45] <dcr226> ProgVal, if sudo isn't loaded....still a problem?[13:35:00] <ProgVal> the "bug" is still here, but only owners can use it[13:35:22] <ProgVal> so it's more or less safe[13:36:41] <SpiderDave> couldn't owners be tricked into using it with an alias?[13:37:16] <ProgVal> Only if the owner nick is [command][13:37:27] <ProgVal> (where "command" is a command, of course)[13:44:14] <dcr226> what about if someone did alias add <nick> quit[13:44:21] <dcr226> where <nick> is the nick of an owner?[13:44:34] <dcr226> meh, I guess the chances of that are slim[13:44:54] *** xy has joined #supybot[13:48:45] <ProgVal> only if the owner has his nick between brackets[13:49:05] * dcr226 nods[13:49:12] <SpiderDave> why does it have to be owner's nick? wouldn't it affect things if the command called for another user's nick?[13:49:13] <ProgVal> but people with their nick wrapped by brackets deserve to die[13:49:21] <dcr226> lol[13:50:00] <SpiderDave> like i have a command .pew that zaps a $randnick[13:50:27] <SpiderDave> if it landed on [AFK] and someone makes afk alias quit, would he quit?[13:51:19] <dcr226> I'm going to be changing my nick while I test my bot....just so you know I'm not messing around ;-)[13:51:24] *** dcr226 is now known as [quit][13:51:25] <ProgVal> only if the owner calls "@echo [echo $nick]"[13:51:27] <ProgVal> mmh[13:51:30] <ProgVal> nevermind[13:58:22] *** ProgVal is now known as te[st][13:58:28] <[quit]> ProgVal, it doesn't need @echo....I'm able to make the bot quit by issuing @kick [quit][13:58:37] *** te[st] is now known as ProgVal[13:58:41] <[quit]> however, non-owners are not[13:58:46] *** ProgVal is now known as te[st[13:58:55] *** te[st is now known as ProgVal[13:59:41] *** [quit] is now known as [part][13:59:56] * [part] thinks this would likely work though[14:00:18] *** [part] is now known as dcr226[14:17:06] <ProgVal> found an ugly way, but the only better one I've found is to rewrite the whole Supybot tokens system[14:17:15] <ProgVal> elif __builtins__['any']([(x in msg.nick) for x in bannedChars]):[14:17:17] <ProgVal> log.warning(('Prevent "%s" from using Sudo because there are banned'[14:17:19] <ProgVal> 'characters in his nick.') % msg.prefix)[14:17:21] <ProgVal> irc.error(_('You are not allowed to use Sudo because you have '[14:17:23] <ProgVal> 'banned characters in your nick'))[14:20:30] <ProgVal> https://github.com/ProgVal/Supybot-plugins/commit/955edae3aae1d217cba708fd707a02c95c8ed26d[14:48:57] * SpiderDave pokes ProgVal[14:57:46] <SpiderDave> i actually have an unrelated exploit if one of the main devs is around[15:20:53] <dcr226> SpiderDave, share? ;-)[15:21:26] <SpiderDave> i want to give it to one of the main devs and let them decide to put it in the wild or fix it first[15:22:13] <dcr226> well....your chances of a supybot fix happening very quickly are umm....yeah[15:22:35] <dcr226> so you're looking for either ProgVal or nanotube to implement into limnoria or gribble respectively[15:28:02] *** iSophiie has joined #supybot[15:39:31] *** zZzaru is now known as Biiaru[16:20:59] *** iSophiie has quit IRC[16:39:01] *** ihptru has quit IRC[16:44:30] *** iSophiie has joined #supybot[16:45:21] *** iSophiie is now known as Sophiiewophiie[16:58:06] *** ihptru has joined #supybot[17:01:08] <ProgVal> oh my[17:01:11] <ProgVal> it's the exploits day[17:01:40] <Mkaysi> ;;translate fi en Google Kääntäjä on kuollut :([17:01:40] <gribble> Google Translator is dead: ([17:01:43] <Mkaysi> :O[17:01:47] <Mkaysi> But it's 1.12?[17:01:58] <Mkaysi> And API will be shut down at 1.12?[17:05:15] <skizzhg> what if I buy a license key (or whatever is it) and then ten people use it ? how can they control it?[17:06:10] <Mkaysi> By thinking that you are pirating their key and closing it?[17:06:56] * SteelSide doesn't feel safe :([17:08:34] <skizzhg> thinking about what? if I pay for a key and the API is used in a bot, then it will have a lot of query[17:08:52] <Mkaysi> Oh, I misunderstood.[17:09:12] <Mkaysi> I thought that you asked about if you buy a key and put it publicly to Limnoria source code and everyone uses it[17:10:11] <skizzhg> I was thinking about both ways :)[17:10:24] <skizzhg> but not exactly put the key in the source[17:10:45] <skizzhg> just share it between "friends"[17:10:57] <Mkaysi> Hmm, that might work.[17:11:28] <Mkaysi> If we bug ProgVal to write such feature to Limnoria (private configuration variable to set API key) :P[17:12:09] <Banton> ask google maybe you get one for free, if you advertise google with your bot :D[17:12:28] <skizzhg> like raising money between us, a dollar each or so[17:12:57] <skizzhg> uhm, an ascii banner...why not[17:13:14] <Mkaysi> *skizzhg joins #supybot[17:13:21] <Mkaysi> <ASCII GOOGLE by gribble>[17:13:27] <Banton> or put after each translation (powered by google) :D[17:13:31] <Mkaysi> *someone_else joins #supybot[17:13:37] <Mkaysi> <ASCII GOOGLE by gribble>[17:13:49] <Mkaysi> That ASCII banner is funny idea :)[17:17:48] <ProgVal> Private configuration variable already exist[17:17:54] <ProgVal> variables*[17:18:00] <ProgVal> &config networks.freenode.password[17:18:01] <gribble> Error: You don't have the owner capability. If you think that you should have this capability, be sure that you are identified before trying again. The 'whoami' command can tell you if you're identified.[17:20:53] <Mkaysi> I mean private configuration variable about setting api key for Google translate. supybot.plugins.google.apikey or something[17:21:07] <Mkaysi> %search proxy[17:21:13] <Mkaysi> ;;search proxy[17:21:13] <gribble> supybot.protocols.http.proxy[17:21:15] <ProgVal> I don't want to deal with that things[17:21:16] <Mkaysi> ;;config supybot.protocols.http.proxy[17:21:17] <gribble>[17:21:26] <Mkaysi> Hmm, I just found a bug[17:21:47] <Mkaysi> supybot.protocols.http.proxy is public and it shouldn't be public, because it can contain password.[17:22:00] <Mkaysi> (If bot is using some other than transparent proxy)[17:22:29] <SteelSide> Mkaysi, hmm? setting something private shouldn't be too much work in the config.py file.. should it?[17:23:15] <Mkaysi> I don't know :)[17:27:21] <dcr226> bug day! \o/[17:30:49] <Mkaysi> <skizzhg> [01:09:54] ircquote PRIVMSG chanserv register #channel (or whatever the chanserv wants)[17:30:53] <Mkaysi> It's[17:31:07] <Mkaysi> ircquote PRIVMSG chanserv :register #channel'[17:31:14] <Mkaysi> without the '[17:31:27] <Mkaysi> ircquote PRIVMSG chanserv register #channe[17:31:33] <Mkaysi> sends message "register" to chanserv[17:31:52] <skizzhg> uhm[17:32:03] <Mkaysi> Try it just for fun[17:32:23] <skizzhg> when I added supyzhg to my account I didn't use the colon[17:32:51] <Mkaysi> Freenode accepts it without colon :O[17:33:11] <Mkaysi> Other networks want the :[17:34:38] <skizzhg> makes sense, it's still the right syntax; freenode is an unique beast[17:34:39] *** Sophiiewophiie is now known as iSophiie[17:50:04] <The-Compiler> according to the RFC you have to prepend a colon to everything which could contain special chars.[17:51:26] <Mkaysi> (Who obeys RFC?)[17:51:58] <Mkaysi> freenode is breaking it in two things, ZNC (stable) is breaking it and many others[18:01:23] *** iPHP has quit IRC[18:09:19] *** XSlicer has joined #supybot[18:15:54] *** iSophiie has quit IRC[18:22:47] *** orphan has joined #supybot[18:23:49] *** orphan has quit IRC[18:24:06] *** orphan has joined #supybot[19:52:32] *** ProgVal is now known as [test][19:52:46] *** [test] is now known as ProgVal[20:24:33] *** Aayush|AFK| has joined #supybot[20:36:33] *** orphan has quit IRC[20:39:22] *** hoxu has joined #supybot[20:39:22] *** hoxu has joined #supybot[20:42:24] *** orphan has joined #supybot[20:43:14] *** m4v has quit IRC[20:46:04] *** m4v has joined #supybot[20:46:36] *** orphan has quit IRC[20:54:17] *** orphan has joined #supybot[21:22:56] *** D9-44CW has joined #supybot[21:23:28] *** D9-44CW is now known as N3LRX[21:31:43] *** maijin has joined #supybot[21:32:01] -RelayBot- <-- sifu has quit on oftc (charon.oftc.net resistance.oftc.net)[21:32:02] -RelayBot- <-- jamessan has quit on oftc (charon.oftc.net resistance.oftc.net)[21:33:02] <maijin> plop, hello I'm looking to create a supybot, but when supybotwizard ask for what irc network will you be connecting to ? i answer freenode. But for what server would you like to connect to, what I'm suppose to answer. Thanks[21:33:22] <ProgVal> irc.freenode.net[21:33:39] -RelayBot- --> jamessan has joined #supybot[21:33:39] -RelayBot- --> sifu has joined #supybot[21:33:40] <maijin> ok thanks[21:35:31] <ProgVal> As you are French, it may be faster to use chat.eu.freenode.net, but both should work[21:35:41] <ProgVal> (I use this one for my bot)[21:36:12] <maijin> ok and in the conf file where should i look to change that[21:36:16] <maijin> ?[21:36:53] <ProgVal> The best way to edit the conf is to use commands on IRC[21:37:28] <ProgVal> but you can search "irc.freenode.net" in the config file and replace it _while the bot is offline_[21:37:38] <maijin> never mind :D[21:37:40] <maijin> it works[21:37:41] <maijin> thanks[21:38:11] <ProgVal> By the way, I suggest you to read the ,,supybook[21:38:12] <gribble> Follow this link to the supybook, a supybot handbook: http://supybook.fealdia.org/ || Another mirror just in case: http://gribble.sourceforge.net/supybook/[21:38:59] <maijin> I've already got it ;)[21:39:39] <ProgVal> cool[21:40:12] <ProgVal> I know someone whose nickname is Majin, are you him?[21:40:21] <maijin> nop[21:40:28] <ProgVal> ok[21:40:37] <maijin> I don't think so[21:42:13] <maijin> anyway I had got an error when I used the wizard : Do you want to remove its owner capability? [y/n][21:42:13] <maijin> (default: n) y[21:42:13] <maijin> Traceback (most recent call last):[21:42:13] <maijin> File "/usr/bin/supybot-wizard", line 663, in <module>[21:42:13] <maijin> main()[21:42:13] <maijin> File "/usr/bin/supybot-wizard", line 528, in main[21:42:15] <maijin> ircdb.users.setUser(id, u)[21:42:17] <maijin> File "/usr/lib/python2.7/site-packages/supybot/ircdb.py", line 715, in setUser[21:42:19] <maijin> self.nextId = max(self.nextId, user.id)[21:42:21] <maijin> AttributeError: 'int' object has no attribute 'id' Now I don't care but just for reporting[21:42:23] <maijin> Sorry for flood[21:42:25] <maijin> I should use pastebin[21:43:00] <maijin> http://pastebin.com/1SeQGqqJ here we are[21:45:22] <ProgVal> You shouldn't have answered yes... nobody does :)[21:45:38] <ProgVal> But that's a bug, through[21:45:53] *** [AFK] is now known as [AFK|OO][21:45:55] *** [AFK|OO] is now known as [AFK|OOO][21:46:08] <maijin> =)[21:46:17] <ProgVal> By the way, why did you run the wizard twice?[21:47:37] <maijin> Because I missed the directories path[21:47:43] <ProgVal> ah[21:50:42] <maijin> anyway it should'nt this error[22:07:59] *** maijin has quit IRC[22:37:29] *** beo has quit IRC[22:38:34] *** beo has joined #supybot[23:52:34] *** XSlicer has quit IRC