[IRCServices] Bug in mode locked keys in 5.0.6

[Craig Edwards]

There has to be some way of doing this without use of a bot, e.g. in services. As it stands services gives away the key of a channel to whoever enters first, and this person may not be on the access list and/or may not be welcome so this is not a good idea. People have been known to use this as a way to steal a channel's key, and users will insist on security that involves nothing more than a mode locked key... so anything would be good, as we cant really say to users "the ability to lock a key is part of services but you shouldnt use it as it can be exploited" - if this is the case its not worth having the feature in the code at all :) ... Suggestions anyone?

>On Wednesday 01 January 2003 05:36 pm, Craig Edwards wrote:
>> the idea of services is supposed to be that users shouldnt need to run
>> bots?
>
>no its not...
>
>	"Services provides for definitive nickname and channel ownership, as well as
>	the ability to send messages ("memos") to offline users, and gives IRC
>	operators considerably more control over the network."
>
>	"Channel management. Like nicknames, Services allows users to register
>	channels as well. A channel's owner can give privileges to other users of the
>	channel, such as auto-opping or the ability to set various channel options,
>	or conversely deny other users the ability to obtain channel operator
>	privileges or even enter the channel altogether. Services will remember the
>	topic on the channel even after the last user leaves, and can automatically
>	set modes on the channel whenever a user joins it."
>
>doesn't say anything about keeping modes while the channel is empty... 
>besides... putting a pseudo in the channel isn't the answer... services 
>aren't supposed to sit in channels
>------------------------------------------------------------------
>To unsubscribe or change your subscription options, visit:
>http://www.ircservices.za.net/mailman/listinfo/ircservices