mIRC Home    About    Download    Register    News    Help

Print Thread
Page 2 of 2 1 2
Joined: Nov 2009
Posts: 11
K
Pikka bird
OP Offline
Pikka bird
K
Joined: Nov 2009
Posts: 11
Originally Posted By: Horstl
A mIRC script could possibly send/receive data by other means (for example via sockets), that is: regardless of your DCC settings.

Because most users are not able to evaluate a mIRC script on their own, they can only rely on trusted users/websites. Yet it's your decision to load a certain script smile If you decide to load it, you're giving "your permission" to do <whatever it was set to do>, so to speak. Every script requires to be loaded at least once, everything after that may be automated and run in the backround.
Also note that while you can lock some of the most potent/dangerous commands at "options -> other -> lock", this does not relieve you from the aforementioned responsibilities. It's a good idea to have these commands locked unless necessary though. A lot of scripts won't require them, others may not work without them (and a "good" script will inform you if you have to unlock a command, and why this is required).

In other words, you cannot achieve safety with "correct mIRC settings" or by blocking/disabling this and that - you have to use your wits, or reject scripts generally. Every command with a possible abuse was made for a certain use - mIRC cannot tell them apart smile


oh dear, IRC looks more and more like a mine land to me! :-s I didn't know any thing about how much a script can be powerful, if it is written by an evil intentions, it is just like a trojan/virus is all over your PC. crazy

I have another question as well (sorry for bothering you with all these question, please forgive my ignorance blush )if we uninstall IRC, this possibly corrupted script can't be run any more, right? (I know it might have let Trojans and viruses in before the program is uninstalled but I am curious about the script itself and is all traces of it going to be deleted from PC permanently after uninstalling IRC or not)

once again thanks so much for helping me and giving me all these great information and advices. you are just awesome. *hugs* ^__^

Joined: Nov 2006
Posts: 1,559
H
Hoopy frood
Offline
Hoopy frood
H
Joined: Nov 2006
Posts: 1,559
A mIRC script itself can run only while mIRC is running.
Also note that I didn't want to give you a wrong impression. I don't militate against scripts. On the contrary, they can be rather useful.
It's just that maybe if more users would be aware of both their good and bad possibilities, they would test (and distribute) them in a... more responsible/aware manner. smile

Joined: Oct 2004
Posts: 8,330
Hoopy frood
Offline
Hoopy frood
Joined: Oct 2004
Posts: 8,330
I just wanted to jump in here as well. Hello, and welcome to mIRC!

As far as the script you may have edited, if you downloaded mIRC from here and didn't download any other scripts, what you would have edited is mIRC's own default scripts. They are not necessary for mIRC to run, but they offer a few useful things. Any editing you might have *accidentally* done isn't going to make those scripts dangerous. If anything, you'll prevent something from working correctly. The script(s) *will* still run, but may have an error in one or more parts. Your best option is to just reinstall mIRC and overwrite the files when asked, then you will have the normal version without any possible errors. Basically, you would have to know what you're doing to make a safe script dangerous unless you were extremely "lucky."

As far as scripts and hacking goes, think of it this way... anyone with knowledge can write a "dangerous" script that can be used to do a lot of different things. You should never run a script from someone you don't trust or type something someone tells you to type if you don't trust them. Either thing could cause you problems. That said, there are a lot of very useful (and safe) scripts out there. If you don't want the additional functions, features, changes, games, etc. that those scripts offer, then just don't ever install any scripts and you won't have to worry about whether or not they are safe. However, if you do like those additions, you can go to a scripting site that is trusted and who examine all scripts they have up for download so that you can be fairly positive they are safe to use. Using scripts really isn't any more dangerous than just connecting to the Internet provided you are smart about what you do with them.

And, as mentioned, there are many other ways you could have problems than just through scripts (with and without mIRC). It really all comes down to being smart about what you do whether it's with mIRC or some other online program. Downloading or installing unknown software/scripts can be dangerous, for example. That is true in mIRC and in a browser like Internet Explorer and in FTP programs and any other software that can download files. If you know how to protect yourself, you can usually get away with trying most unknown software without much concern, but if you're not that familiar with protecting your computer, you're better off just avoiding any unknown downloads.


Invision Support
#Invision on irc.irchighway.net
Joined: Jul 2008
Posts: 236
S
Fjord artisan
Offline
Fjord artisan
S
Joined: Jul 2008
Posts: 236
That, and not all scripts are secure. I bet I'm not the only one to notice common scripts (that clearly aren't ment to be malicious) that introduce far worse vulnerabilities than mIRC's previous DCC vulns. DCC vuln = crash. script vuln = compromise. compromise = key log, trojan, crash... you name it, anything that you can do, it can do (but not necessarily better).

Page 2 of 2 1 2

Link Copied to Clipboard