DC++ is a fakeclient

[l33t_fAk3R]

I've just been informed that DC++ possesses a dangerous feature which must at once be removed.

Code: Select all

$MyINFO $ALL %[mynick] %[line:description] %[line:tag]$ $%[line:connection]r$%[email]$%[line:share]$|

when passed as a usercommand allows one to not only to choose a tag one likes, without regard to hub rules, but also to evade the very basis of DC's minshare system.

The question is not whether this this should be fixed, but with what urgency and haste.

[Grinas]

That sounds bad , but where did u get the information from

[BSOD2600]

The little prick probably extrapolated it from the source code

[GargoyleMT]

Yes, sending a properly formed $MyINFO is something you can do with raw user commands. However, DC++ will send the proper info again for every list refresh, hub you quit/join, and time you enter the Settings, so it's not easy for users to "fake" anything this way.

Quite "l33t."

[Todi]

but also to evade the very basis of DC's minshare system.

Hrm.. evading the basis of DC's minshare system (the size string sent in $MyINFO) is easier than stealing candy from a little baby. Honestly, it's a worthless system, but so far it's worked way beyond what anyone could expect. And i expect it will continue to do so, regardless of UserCommand's... *snickers*. Any self-respecting hubowner will already have realised that a number of users fake, and have taken precautions against that. This won't change anything.

[ivulfusbar]

Very old news, this issue has been raised a long time ago.. Its not interesting since you can't send usercommands on login. So you can't use it to cheat in any hub where they have scripted rules.