[Weechat-dev] [bug #36362] Logger censors username, but not password in logs where identify command is sent to NickServ at OFTC.

[Mika Suomalainen]

URL:
  <http://savannah.nongnu.org/bugs/?36362>

                 Summary: Logger censors username, but not password in logs
where identify command is sent to NickServ at OFTC.
                 Project: WeeChat
            Submitted by: mkaysi
            Submitted on: Tue 01 May 2012 03:25:47 PM GMT
                Category: logger plugin
                Severity: 3 - Normal
              Item Group: security
                  Status: None
                 Privacy: Public
             Assigned to: None
         Originator Name: 
        Originator Email: 
             Open/Closed: Open
         Discussion Lock: Any
                 Release: 0.3.8-dev
                IRC nick: Mkaysi

    _______________________________________________________

Details:

Logger censors username, but not password in logs where identify command is
sent to NickServ at OFTC.
The logs contain "MSG(NickServ): identify password ******" in which ****** is
username.


This probably happens, because WeeChat probably expects the server to use
syntax "/msg nickserv identify username password", but OFTC uses syntax "/msg
nickserv identify password username".




    _______________________________________________________

Reply to this item at:

  <http://savannah.nongnu.org/bugs/?36362>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.nongnu.org/