Shoutbox

quote:

---

Originally posted by timothy on mess.be
A serious bug in all MSGPLus 2.x and 3.x versions could allow your buddies to execute commands remotely on your computer.

The damage that can be done at most; is creating a complete system failure and loss of critical data.

How to prevent this from happening:

Avoid the use of the (!N) and (!NP) commando. Especially when people ask you to send this commando !

---

Eh?

Patchou hasn't spoken a word, to my acknoledgement, and timothy didn't give more detail too. But this is what I am going to say:

If there is really such a bug, please do NOT post about how to execute it. Such posts are indeed to be removed, and with the power of mod-banning, the ones who post are likely to be banned.

Yeah. I am aware of this bug, there was a thread about it yesterday...Surprisingly simple to do...I'm not going to say how because I want to keep this under-wraps as well but lets just say be careful about what's in people's screen names...

Were you talking to me Mnjul?

I'm very scared. This is serious.

Only I'm using these commands at Wouter's openConvo Plug-In, but in the "Events log", so I think this is internally, and don't cause trouble.

Or yes?

Well I assume this problem is controlled via a remote user so when you    use internal cmd's I think you should be ok.

quote:

---

Originally posted by Mnjul
Patchou hasn't spoken a word, to my acknoledgement, and timothy didn't give more detail too. But this is what I am going to say:

If there is really such a bug, please do NOT post about how to execute it. Such posts are indeed to be removed, and with the power of mod-banning, the ones who post are likely to be banned.

---

I agree, info like that shouldnt be posted onhere...it's encouraging ppl ta abuse it (just like telling a person how ta hack) bugs like that should be reported to Patchou directly so he can take actions.

Mnjul, did u tell Patchou what was in the posts..so he can do something bout the exploit?

As a preventing action, I have removed the (!N) tag from the openConvo plug-in.

I mailed Patchou about this..but don't worry, I think Timothy had already done so when he posted on mess.be And again, don't worry, Patchou is enough trustworthy so, just wait for an update very soon

quote:

---

Originally posted by Mnjul
I mailed Patchou about this..but don't worry, I think Timothy had already done so when he posted on mess.be And again, don't worry, Patchou is enough trustworthy so, just wait for an update very soon

---

Thanks Mnjul, better e-mailed twice about it than not at all.   I'll take good notice of ppl's nicks till then.