This is the new home of the egghelp.org community forum.
All data has been migrated (including user logins/passwords) to a new phpBB version.


For more information, see this announcement post. Click the X in the top right-corner of this box to dismiss this message.

backdoors , .tcl scripts , safe ?

Old posts that have not been replied to for several years.
Locked
d
dmx9595

backdoors , .tcl scripts , safe ?

Post by dmx9595 »

hey , i know that for mirc n clients for winodws u gotta be VERY carefull as to what script u use or load cause of backdoors , so im wondering how safe the addon .tcl scripts are , that ar eon this site , are .tcl , eggdrop scripts more safe or something , did u guys make all these scripts or collect em or? thanks.
t
tainted
Master
Posts: 239
Joined: Sun May 12, 2002 8:00 pm
Location: chicago
Contact:

Post by tainted »

Well, the only way to make sure of there being no backdoors is to only use non-encrypted code which you can audit yourself. Tcl IMO isnt too hard to learn, at least enough to be able to spot backdoors (somewhat). Some could just be a command that isn't checked/protected, in which someone could do say: /msg bot servlag {
 }, giving anyone that knows the unprotected bind full acress to the bot, as well as the shell the bot is on. Another pretty easy way to avoid bad scripts is to get ones suggested by eggdrop's coders and other respected people in the eggdrop field, such as ppslim and the other moderators here. Most of the scripts on egghelp's tcl archive and other major eggdrop sites that have been download numerous times and are widely used are less likely to have a backdoor than the one someone sent you off irc or another chat medium.

There's my five cents, keep the change.
p
ppslim
Revered One
Posts: 3914
Joined: Sun Sep 23, 2001 8:00 pm
Location: Liverpool, England

Post by ppslim »

Downloading from well known sites, or sites endorsed by the developers are the safest.

Egghelp.org is probably the safest. If a backdoor, or exploit is revealed, then the fact is published, and removed from the site.

The only true secure code, is that which you code.
Locked