Comment 5 for bug 234629

Revision history for this message
Aminda Suomalainen (mikaela) wrote : Re: [Bug 234629] Re: supybot !web title leaks LAN HTTP servers to the channel

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

09.05.2012 15:17, Ralph Corderoy kirjoitti:
> Mika, I think I explained adequately above. There is no warning in
> the documentation for the plugin that enabling it opens up the LAN
> to interrogation in a way that may not be obvious to the
> administrator that's having a browse of the plugins and enabling a
> few here and there.
>

There isn't warning about "Unix progstats" command giving out PID,
username, GID, configuration location, supybot binary location, config
location and Python version when Unix plugin is loaded outside
supybot-wizard.

Example output from Unix progstats:
> Process ID 30171 running as user "<censored>" and as group
"<censored>" from
> directory "/<censored>/<censored>/<censored>/<censored>" with the
> command line "/<censored>/<censored>/<censored>/supybot --daemon
/<censored>/<censored>/<censored>
> /<censored>/<censored>.conf". Running on Python <censored>
> (<censored>, <censored>, <censored>) [GCC <censored>].

I doubt that that bug, if you call it as bug, gets fixed in upstream,
because it's dead. You might have better luck moving to some fork
reporting it at their issue tracker.

Supybot has currently two bugs, which can cause the bot to crash with
computer, which it's running on.
https://bugs.launchpad.net/ubuntu/+source/supybot/+bug/996947 and
https://bugs.launchpad.net/ubuntu/+source/supybot/+bug/996950 .

- --
[Mika Suomalainen](https://mkaysi.github.com/) ||
[gpg --keyserver pool.sks-keyservers.net --recv-keys
4DB53CFE82A46728](http://mkaysi.github.com/PGP/key.txt) ||
[Why do I sign my
emails?](http://mkaysi.github.com/PGP/WhyDoISignEmails.html) ||
[Please don't send
HTML.](http://mkaysi.github.com/articles/complaining/HTML.html) ||
[Please don't
toppost](http://mkaysi.github.com/articles/complaining/topposting.html) ||

[This signature](https://gist.github.com/2643070) ||
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=y9v5
-----END PGP SIGNATURE-----