4 ms·
Yeah, exactly. Those IRC bots work by reading EVERY chat message and looking for commands. Not exactly minimum permissions philosophy, and likely not acceptable
by stu2b50 4y ago
Yeah, exactly. Those IRC bots work by reading EVERY chat message and looking for commands. Not exactly minimum permissions philosophy, and likely not acceptable liability and auditability wise for what is very specifically intentioned to be corporate software.
- woodruffw 4y agoI'm not going to claim that IRC's permission model is good (it definitely isn't), but "EVERY chat message" is inaccurate in most deployments: you generally pick the channels you want the bot to be in, and prevent it/others from joining other channels. That's no different in effect from a Slack bot that's receiving webhook events on every channel message and scrubbing through them, which is also a common pattern.
- giantrobot 4y agoUnless the IRC bot is a service like ChanServ it's just another IRC client. It's only receiving messages from channels it has joined or private messages sent directly to it. A bot is receiving what you would receive if you joined the same channels.