bugWeeChat - Bugs: bug #36362, Logger censors username, but not...

 
 

bug #36362: Logger censors username, but not password in logs where identify command is sent to NickServ at OFTC.

Submitted by:  Mika Suomalainen <mkaysi>
Submitted on:  Tue 01 May 2012 03:25:47 PM UTC  
 
Category:  irc plugin Severity:  3 - Normal
Item Group:  security Status:  Fixed
Privacy:  Public Assigned to:  Sebastien Helleu <flashcode>
Originator Name:  Open/Closed:  Closed
Release:  0.3.7 IRC nick:  Mkaysi

Add a New Comment (Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Wed 02 May 2012 10:44:32 AM UTC, comment #1: 

Problem was in irc plugin (when option irc.look.hide_nickserv_pwd is on): now everything after "register" or "identify" will be hidden in commands to sent to nickserv (even username if specified).

No problem in logger, this plugin just writes what is displayed on screen, so the problem was the message displayed by irc plugin.

Sebastien Helleu <flashcode>
Project AdministratorIn charge of this item.
Tue 01 May 2012 03:25:47 PM UTC, original submission:  

Logger censors username, but not password in logs where identify command is sent to NickServ at OFTC.
The logs contain "MSG(NickServ): identify password ******" in which ****** is username.

This probably happens, because WeeChat probably expects the server to use syntax "/msg nickserv identify username password", but OFTC uses syntax "/msg nickserv identify password username".

Mika Suomalainen <mkaysi>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by flashcode (Posted a comment)
  • -email is unavailable- added by mkaysi (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

     

     

    Follow 5 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2012-06-03 flashcode Open/ClosedOpen => Closed
    2012-05-02 flashcode Categorylogger plugin => irc plugin
        StatusNone => Fixed
        Assigned toNone => flashcode
        Release2.4-dev => 0.3.7

    Back to the top


    Powered by Savane 3.5