Menu

#1 "/mode +b #channel" sometimes reveals too much info

open
nobody
None
1
2000-09-17
2000-09-17
Andy Smith
No

/mode +b #channel

will reveal a channel's banlist even if the user is not in the channel. Included is the nickname of who set each ban. This information should not be revealed.

Discussion

  • Darcy Grexton

    Darcy Grexton - 2000-10-06

    i dont think this is bad, it could be used to see how a ban matches you. ie, you cant get into a channel, and you dont know why, so you check, and find out that some git banned *a*@* .. so you change your username accordingly and you get in (incidentally i don't consider that ban evasion :P)

     
  • Andy Smith

    Andy Smith - 2000-10-06

    The nickname of who set the ban should never be revealed.

     
  • Phil Clarke

    Phil Clarke - 2000-11-01

    Hrm, thats not really the best of plans - having the IRCd give users information that can allow them to evade bans.

     

Log in to post a comment.

MongoDB Logo MongoDB