diff --git a/IRC/Supybot.html b/IRC/Supybot.html index b5a0555..bd49841 100644 --- a/IRC/Supybot.html +++ b/IRC/Supybot.html @@ -31,7 +31,7 @@ Security issues of Supybot

I don't have example command for this, but it happens by nesting "format cut" and "misc tell".

What does this mean? Anyone can tell the bot to ghost someone else on same account, take over a channel by telling the bot to give flags (if it has correct flags), change password of the account and everything else what you do with network services.

4. Web page with special characters in title can be used to send DCC/CTCP commands.

-

This doesn't mean only things like CTCP actions (also known as /me), but known problems with old routers ( ) which make them reconnect to the internet.

+

This doesn't mean only things like CTCP actions (also known as /me), but known problems with old routers ( FF ? DCC SEND “ff???f??????????????” 0 0 0 ) which make them reconnect to the internet.

This is currently* fixed only in Limnoria's testing version.

*See the changelog link at bottom. Currently means 17:43 (UTC) on 2012-10-31.

Are these issues publicly known?

diff --git a/IRC/Supybot.html.md b/IRC/Supybot.html.md index 8c7c9fd..b43bd54 100644 --- a/IRC/Supybot.html.md +++ b/IRC/Supybot.html.md @@ -60,7 +60,7 @@ What does this mean? Anyone can tell the bot to ghost someone else on same accou ## 4. Web page with special characters in title can be used to send DCC/CTCP commands. -This doesn't mean only things like CTCP actions (also known as /me), but known problems with old routers ( ) which make +This doesn't mean only things like CTCP actions (also known as /me), but known problems with old routers ( FF ? DCC SEND “ff???f??????????????” 0 0 0 ) which make them reconnect to the internet. This is currently* fixed only in Limnoria's testing version.