logbot being autoadded to creepy group chats and automatically generating unmoderated logs #36

Open
opened 2023-03-10 13:45:10 +01:00 by ccl · 1 comment
Owner

Logbot can be activated by just inviting it into an xmpp chat room, like any regular xmpp user. What happens sometimes is that people scrape xmpp addresses and mass add them to random chats. So this has happened with the logbot, where it had been added to a terrible chat with gory images that automatically created a log website on our server. A Varia member noticed and we deleted it this morning.

Manetta says: i think we made a function for that in logbot, but it has been a while since that was made, so i don't remember it by heart

Luke says: https://git.autonomic.zone/decentral1se/xbotlib#user-content-invitations

Can we activate the "--no-auto-join" function for the Varia logbot? How would the bot be invited to join a chat then?

Logbot can be activated by just inviting it into an xmpp chat room, like any regular xmpp user. What happens sometimes is that people scrape xmpp addresses and mass add them to random chats. So this has happened with the logbot, where it had been added to a terrible chat with gory images that automatically created a log website on our server. A Varia member noticed and we deleted it this morning. Manetta says: i think we made a function for that in logbot, but it has been a while since that was made, so i don't remember it by heart Luke says: https://git.autonomic.zone/decentral1se/xbotlib#user-content-invitations Can we activate the "--no-auto-join" function for the Varia logbot? How would the bot be invited to join a chat then?
ccl changed title from logbot being autoadded to creepy group chats and automatically to logbot being autoadded to creepy group chats and automatically generating logs 2023-03-10 13:46:12 +01:00
ccl changed title from logbot being autoadded to creepy group chats and automatically generating logs to logbot being autoadded to creepy group chats and automatically generating unmoderated logs 2023-03-10 13:46:25 +01:00
Owner

According to https://git.autonomic.zone/decentral1se/xbotlib#user-content-invitations the bot will automatically re-join what it fins in data.json so we might want to clean the list below?

root@variaserver:/srv/gitea/clones/bots/LogBot# cat /etc/supervisor/conf.d/bots.conf  | grep directory | grep Log
directory=/srv/gitea/clones/bots/LogBot/
root@variaserver:/srv/gitea/clones/bots/LogBot# pwd
/srv/gitea/clones/bots/LogBot
root@variaserver:/srv/gitea/clones/bots/LogBot# cat .xbotlib/data.json
{
  "invited": [
    "sabofez@muc.vvvvvvaria.org",
    "zamopuzo@muc.lurk.org",
    "xbotlibtest@muc.vvvvvvaria.org",
    "afijeno@muc.vvvvvvaria.org",
    "everyday-technology@muc.vvvvvvaria.org",
    "xopupo@muc.vvvvvvaria.org",
    "opentap@muc.vvvvvvaria.org",
    "kinuxov@muc.vvvvvvaria.org",
    "relearn2021@muc.vvvvvvaria.org",
    "cafeta@conference.conversations.im",
    "oreqan@muc.vvvvvvaria.org",
    "osevi@muc.vvvvvvaria.org",
    "ibaxaro@muc.vvvvvvaria.org",
    "x-y-protocols@muc.vvvvvvaria.org",
    "testtesttest@muc.vvvvvvaria.org",
    "infra@muc.vvvvvvaria.org",
    "hold-and-release@muc.vvvvvvaria.org",
    "amro-times@muc.vvvvvvaria.org",
    "intheruins@muc.vvvvvvaria.org",
    "orehike@muc.vvvvvvaria.org",
    "hello@muc.vvvvvvaria.org",
    "digitaldepletionstrike@muc.vvvvvvaria.org",
    "dislog@muc.vvvvvvaria.org"
  ]

I don't think --no-auto-join is being used also?

root@variaserver:/srv/gitea/clones/bots/LogBot# cat /etc/supervisor/conf.d/bots.conf  | grep command | grep logbot
command=/srv/gitea/clones/bots/.venv/bin/python3 logbot.py
According to https://git.autonomic.zone/decentral1se/xbotlib#user-content-invitations the bot will automatically re-join what it fins in `data.json` so we might want to clean the list below? ``` root@variaserver:/srv/gitea/clones/bots/LogBot# cat /etc/supervisor/conf.d/bots.conf | grep directory | grep Log directory=/srv/gitea/clones/bots/LogBot/ root@variaserver:/srv/gitea/clones/bots/LogBot# pwd /srv/gitea/clones/bots/LogBot root@variaserver:/srv/gitea/clones/bots/LogBot# cat .xbotlib/data.json { "invited": [ "sabofez@muc.vvvvvvaria.org", "zamopuzo@muc.lurk.org", "xbotlibtest@muc.vvvvvvaria.org", "afijeno@muc.vvvvvvaria.org", "everyday-technology@muc.vvvvvvaria.org", "xopupo@muc.vvvvvvaria.org", "opentap@muc.vvvvvvaria.org", "kinuxov@muc.vvvvvvaria.org", "relearn2021@muc.vvvvvvaria.org", "cafeta@conference.conversations.im", "oreqan@muc.vvvvvvaria.org", "osevi@muc.vvvvvvaria.org", "ibaxaro@muc.vvvvvvaria.org", "x-y-protocols@muc.vvvvvvaria.org", "testtesttest@muc.vvvvvvaria.org", "infra@muc.vvvvvvaria.org", "hold-and-release@muc.vvvvvvaria.org", "amro-times@muc.vvvvvvaria.org", "intheruins@muc.vvvvvvaria.org", "orehike@muc.vvvvvvaria.org", "hello@muc.vvvvvvaria.org", "digitaldepletionstrike@muc.vvvvvvaria.org", "dislog@muc.vvvvvvaria.org" ] ``` I don't think `--no-auto-join` is being used also? ``` root@variaserver:/srv/gitea/clones/bots/LogBot# cat /etc/supervisor/conf.d/bots.conf | grep command | grep logbot command=/srv/gitea/clones/bots/.venv/bin/python3 logbot.py ```
Sign in to join this conversation.
No Label
No Milestone
No Assignees
2 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: varia/bots#36
No description provided.