4 ms·
Sure. It is convenient. Consider the security implications of arbitrary commands like he suggests, instead of using, I dunno, SSH or whatever.
by joshu 15y ago
Sure. It is convenient.
Consider the security implications of arbitrary commands like he suggests, instead of using, I dunno, SSH or whatever.
- weavejester 15y agoWell, (a) he's not suggesting that, and (b) even if he were, it doesn't seem like a huge deal. If an attacker has access to Hubot, then they already have access to everything the Hubot server can do.
- icebraining 15y agoUse an IRC server with SSL and client cert authentication? It's a standard feature in many daemons and clients nowadays.