Changeset 060d066 for irc.h

Timestamp:

2011-02-01T13:05:58Z (13 years ago)

Author:

Wilmer van der Gaast <wilmer@…>

Branches:

master

Children:

da60f28

Parents:

00fd005

Message:

More password paranoia: Allow omitting the identify/register password as
well (and enter it using /OPER instead).

This is a gross hack and indeed still not solid: In irssi one can still
use /RAWLOG SAVE to find the OPER line sent to BitlBee (and of course not
everyone uses SSL to talk to remote BitlBee servers). This only works
within 10-30 minutes after entering the password though.

File:

• irc.h (modified) (1 diff)

irc.h

@@ -50 +50 @@
         USTATUS_SHUTDOWN = 8,   /* Now used to indicate we're shutting down.
                                    Currently just blocks irc_vawrite(). */
+
+        /* Not really status stuff, but other kinds of flags: For slightly
+           better password security, since the only way to send passwords
+           to the IRC server securely (i.e. not echoing to screen or written
+           to logfiles) is the /OPER command, try to use that command for
+           stuff that matters. */
+        OPER_HACK_IDENTIFY = 0x100,
+        OPER_HACK_REGISTER = 0x200,
+        OPER_HACK_ACCOUNT_ADD = 0x400,
+        OPER_HACK_ANY = 0x700,  /* To check for them all at once. */
 } irc_status_t;