[IRCServices] LISTLINKS, LISTEMAIL, etc.

[Robin Burchell]

Hi,

I did make a post on this a while back, but it was never properly
addressed I feel, so I had best bring it up again.

My point at the time was why LISTLINKS is admin-only, and not
available to users (respecting SET PRIVATE, of course). This is now
largely water under the bridge.

There is a problem with the security configuration of this -- if you
know a user's email, (which you can get, unless SET HIDE EMAIL ON is
used) -- you can get an effective LISTLINKS by using LISTEMAIL.

Example below, performed as a normal user.

[10:48:41] -NickServ (services at chatspike.net)- Syntax: LISTLINKS
[10:48:41] -NickServ (services at chatspike.net)- Type /msg NickServ HELP
LISTLINKS for more information.
[10:48:46] -NickServ (services at chatspike.net)- brain is Craig Edwards
[10:48:46] -NickServ (services at chatspike.net)- Brain is currently online.
[10:48:46] -NickServ (services at chatspike.net)- Time registered: Jun 07
20:55:31 2002 BST
[10:48:46] -NickServ (services at chatspike.net)- Last quit message: Client exited
[10:48:46] -NickServ (services at chatspike.net)- URL: http://www.winbot.co.uk
[10:48:46] -NickServ (services at chatspike.net)- E-mail address:
brain at chatspike.net
[10:48:46] -NickServ (services at chatspike.net)- Information: I'm watching you...
[10:48:46] -NickServ (services at chatspike.net)- Options: Kill
protection, Security
[10:48:58] -NickServ (services at chatspike.net)- List of entries
matching brain at chatspike.net:
[10:48:58] -NickServ (services at chatspike.net)- ` brain at chatspike.net
[10:48:58] -NickServ (services at chatspike.net)- Administrator brain at chatspike.net
[10:48:58] -NickServ (services at chatspike.net)- Brain brain at chatspike.net
[10:48:58] -NickServ (services at chatspike.net)- Brain-gone brain at chatspike.net

[output truncated].

While we're on the subject, is it possible for LISTLINKS to be moved
to oper-only rather than admin-only? Or is there additional reasoning
for this. When one has a troublesome user, it would be nice to be able
to LISTLINKS and watch for their additional nicknames attempting to
connect.

Thanks,
w00t.