well, everyone is entitled to their own opinion
mine is that any public control of the bot - that is, control mechanism that uses public medium like irc channel - is inherently insecure and is best avoided (and I've argued about that many times)
if you really can't DCC (I've also argued that anyone could DCC if they try hard enough, see my sticky topics), you should consider using privmsg/notice instead of channel messages
on a side note, even 110 commands can't really substitute full party-line control; in order to implement that, you need to simulate DCC chat, as does rconsole
Inherently insecure? Perhaps, slightly, in that while you are auth'd if your host is spoofed then someone could use the commands but of course as a responsible bot owner you wouldnt leave that door open and would "deauth" as soon as you had issued the commands you needed to. You would also of course have a high standard of password. I even provided scripts for mIRC and Pirch with the script to add menus to do this quickly. As well as that if someone was to do that you would generally see them doing it and be able to prevent it there and then unless they spoofed you and waited until you left the room thus fooling the bot into thinking you where still there. However barring that slight chance that someone would spoof your host while you are using it, it is no less secure than anything else with Eggdrop which as we all know is not a particularly secure way of doing anything and shouldnt be relied on for anything that is considered critical which, lets be honest here, a chat room certainly is not.mine is that any public control of the bot - that is, control mechanism that uses public medium like irc channel - is inherently insecure and is best avoided (and I've argued about that many times)
if you really can't DCC (I've also argued that anyone could DCC if they try hard enough, see my sticky topics), you should consider using privmsg/notice instead of channel messages
on a side note, even 110 commands can't really substitute full party-line control; in order to implement that, you need to simulate DCC chat, as does rconsole
Personally, I cant DCC to my bots from outside my network because they run on my own network and I deliberately block all and any access to anything that's un-necessary externally. My bots have internal IP numbers on a virtual IP Range set as secondary IP numbers on an internal NIC because the chat server they run on is on the same box). I also work for an ISP and sit behind double NAT'd firewalls from the office which blocks just about everything, sure as a network engineer and IT Support specialist I know ways round that but I value my job and dont want to lose it for abusing my knowledge.
I didnt at ANY time say it "substituted full party-line control". I specifically said it covers most of the commonly used commands and if I ever get round to developing it further it will do more but I dont have a major interest in that script anymore and spend my spare time working on Trivia 2000 these days.
On one of your other points I did write a version of The_Quickening a long time ago that used primarily private message instead of public commands but people hated it and I had so many complaints asking me to switch it back that I stopped developing it.
Anyway, as you say, everyone is entitled to their opinions, so I guess we'll have to agree to disagree on this one.
Statistics: Posted by Ian-Highlander — Fri Feb 03, 2006 6:19 am
]]>
