|
Joined: Nov 2003
Posts: 2,327
Hoopy frood
|
OP
Hoopy frood
Joined: Nov 2003
Posts: 2,327 |
i think mirc should have an alert popup when opening a socket, which you can disable (but not by script).
kind of like:
alias sockopen { if ($$input(socket " $+ $1 $+ " is trying to open to $2 on port $3 $+ $chr(44) would you like this socket to run?,ywd,user prompt) == $true) { sockopen $1- } }
i know its easily scripted, but scripts can easily be unloaded by other scripts.
/unload socketprompt.mrc /sockopen virus someinfectedsite.com 80
edit: i dont use other peoples scripts, but my friend just downloaded mirc and downloaded a script from a war site (it claimed to be an audio player) and it opened a socket to www.xxx*******gs.com, checked for something and then ran the url, which infected him with the js.seeker trojan
Last edited by tidy_trax; 30/12/03 03:49 PM.
New username: hixxy
|
|
|
|
Joined: Dec 2002
Posts: 3,138
Hoopy frood
|
Hoopy frood
Joined: Dec 2002
Posts: 3,138 |
i know its easily scripted, but scripts can easily be unloaded by other scripts. Also sticking an ! before the command would stop it using the alias.
|
|
|
|
Joined: Nov 2003
Posts: 2,327
Hoopy frood
|
OP
Hoopy frood
Joined: Nov 2003
Posts: 2,327 |
yeah, but ive never seen a normal script use !echo, !sockopen, etc. normally people only use ! when theyre helping people find problems
New username: hixxy
|
|
|
|
Joined: Oct 2003
Posts: 273
Fjord artisan
|
Fjord artisan
Joined: Oct 2003
Posts: 273 |
I've always thought there should be a lock/disable option for sock commands just like there is for /run & /dll
|
|
|
|
Joined: Nov 2003
Posts: 2,327
Hoopy frood
|
OP
Hoopy frood
Joined: Nov 2003
Posts: 2,327 |
that could work, but then if someone sends them a clean socket script it wouldn't work... i think something like the box when you click a url would be fine.
New username: hixxy
|
|
|
|
Joined: Oct 2003
Posts: 273
Fjord artisan
|
Fjord artisan
Joined: Oct 2003
Posts: 273 |
Well I had posted a long time ago about a safe mode feature, which basically, if enabled, alerts when commands like /dll, /run, sock commands and stuff like that are used to go along with the ability to lock/disable those commands altogether.
Scripts can have an on LOAD or on START to do if ($lock(run)) echo -a You need to unlock /run to use $nopath($script)
if ($lock(dll)) echo -a You need to unlock /dll to use $nopath($script)
if ($lock(sockets)) echo -a You need to unlock sockets to use $nopath($script)
Last edited by EVH; 30/12/03 04:12 PM.
|
|
|
|
Joined: Jan 2003
Posts: 428
Fjord artisan
|
Fjord artisan
Joined: Jan 2003
Posts: 428 |
i think mirc should have an alert popup when opening a socket, which you can disable Good idea, as long as it can be disabled in mIRC options. PM
IRCnet & DALnet @#travelersinn :-: IRC for fun and relaxation :-:
|
|
|
|
Joined: Apr 2003
Posts: 414
Fjord artisan
|
Fjord artisan
Joined: Apr 2003
Posts: 414 |
The config info of "Disable commands" is in registry HKEY_Current_USER -->Software -->mIRC -->LockOptions it is so hard to change it ?
|
|
|
|
Joined: Dec 2002
Posts: 1,527
Hoopy frood
|
Hoopy frood
Joined: Dec 2002
Posts: 1,527 |
this was a suggestion to modify the lock options u can not currently lock sockets thru mirc that im aware of, maybe reading the entire post would be advised
D3m0nnet.com
|
|
|
|
Joined: Apr 2003
Posts: 414
Fjord artisan
|
Fjord artisan
Joined: Apr 2003
Posts: 414 |
If a option like that will come in.. What will stop the bad-scripts just to disable that option(not only that.. /dll,/run too) from registry ?
Sorry for my 1 post.. It wasn't too clear..
|
|
|
|
Joined: Nov 2003
Posts: 2,327
Hoopy frood
|
OP
Hoopy frood
Joined: Nov 2003
Posts: 2,327 |
thanks for telling the whole board where the lock options are stored, all it takes is a little searching to find this thread and querty's /regdel alias to make an /unlock command.
New username: hixxy
|
|
|
|
Joined: Dec 2002
Posts: 3,138
Hoopy frood
|
Hoopy frood
Joined: Dec 2002
Posts: 3,138 |
http://www.mirc.co.uk/help/password.htmlIt's listed there, too. Easy to find using the search on the homepage, only difference is the slight change of name.
|
|
|
|
Joined: Nov 2003
Posts: 2,327
Hoopy frood
|
OP
Hoopy frood
Joined: Nov 2003
Posts: 2,327 |
oops
New username: hixxy
|
|
|
|
Joined: Dec 2002
Posts: 3,127
Hoopy frood
|
Hoopy frood
Joined: Dec 2002
Posts: 3,127 |
since human nature is such that its pretty much a given that ppl will forget/lose/not put in a safe place for retrieval or the dog will eat passwords, there is a need let them know how to find this one
ParaBrat @#mIRCAide DALnet
|
|
|
|
Joined: Apr 2003
Posts: 414
Fjord artisan
|
Fjord artisan
Joined: Apr 2003
Posts: 414 |
That is no so easy like seems to be.. Because mIRC accept changing settings only from his Option Window.. Even if you delete the reg-key.. mIRC will no refresh his config from Registry.. The mIRC keep the settings in the memory.. He load the config only at load.. After.. When you open the Option Window.. mIRC load the config from his memory nor from $mircini/registry.. IF you change some think.. It save to .ini/registry.. But no any load.. I discover that when i trying to do a alias(/Highlight) what enable/disable Highlight.. sorry form my bad english ;]
|
|
|
|
|