egghelp/eggheads community

help!

2003-03-16T22:55:45-04:00

np glad to be of assistance

Statistics: Posted by Moonster — Sun Mar 16, 2003 10:55 pm

help!

2003-03-16T19:58:14-04:00

You were prolly using .+user whereas .adduser adds their hostmask at the same time.

Good rule of thumb is Dont add anyone unless they are right there to set a pass on the bots.

Ok, thats why it didn't work. I was using .+user. Thanks!

Statistics: Posted by techman47 — Sun Mar 16, 2003 7:58 pm

help!

2003-03-16T18:01:12-04:00

You were prolly using .+user whereas .adduser adds their hostmask at the same time.

Good rule of thumb is Dont add anyone unless they are right there to set a pass on the bots.

Statistics: Posted by Moonster — Sun Mar 16, 2003 6:01 pm

...

2003-03-16T17:34:52-04:00

Ok, you have convinced me. I'll go back to the password routine. I was using it before, but it would never OP the OP's in my channel. I think the reason was because I never added the users hostmask to their user record in the bots. Thanks for all who replied.

Statistics: Posted by techman47 — Sun Mar 16, 2003 5:34 pm

help!

2003-03-16T14:13:06-04:00

the auto op flag is bad because a person only needs to match the hostmask of an already added user. no other authentication needed.

this means that any users you have added with dynamic hosts are VERY insecure.

with only the o flag, people will have to match the hostmask, and supply a correct password.

using the password routine will not let anyone mess around with your bot. infact, they can set a password on your bots right now, with the foa flags.

if you dont want people on your partyline, edit your .conf like so:

set require-p 1

users can set a pass and op up like this:

/msg bot pass their-password
/msg bot op their-password

to remove the autoop flag:

.chattr handle -a <#chan>

Statistics: Posted by spock — Sun Mar 16, 2003 2:13 pm

why?

2003-03-16T13:56:10-04:00

Ok, why is the auto-op flag bad? I have read several places where they say it is bad also, but they fail to go into detail about it. If you give them the +a flag with their hostmask, how can anyone duplicate it? I feel by using the password routine, you are giving the user a chance to mess around with your bot. no so if you do the +a flag.

Statistics: Posted by techman47 — Sun Mar 16, 2003 1:56 pm

help!

2003-03-16T07:42:11-04:00

Typically Users are added via the bots and then at that moment when the user is present upon addition they send a password to the bots to set. The users can then request their ops from the bot (Typical User flags of fgov) Some channels utilize special mirc scripting that has their users request ops securely from scripting that Verifies the bots name and host (to aid in them not sending their pass to a Mirc (very bad)) Or if your bots names are unique and no one else would want them. But in general AutoOp Flag is a VERY Bad Idea.

Statistics: Posted by Moonster — Sun Mar 16, 2003 7:42 am

help!

2003-03-16T01:38:09-04:00

im not a fan of autoops so i would say remove the +a and make them use a pass and a /msg command... if they wish to be autooped get them to make their scripts send the command auto
That way is safer in my opinion because there is still a need for a pass

Statistics: Posted by gumbydammit — Sun Mar 16, 2003 1:38 am

help!

2003-03-16T00:30:08-04:00

I am a little confused on the OP'ing of users via my eggdrop bot. Right now I give my channel OPs flags "foa" and also add their hostmask. Is this a safe way to OP my users or should I have my OPs supply a password to the bot to OP them.

Statistics: Posted by techman47 — Sun Mar 16, 2003 12:30 am