Java-Discord / JavaBot

General utility bot for the Discord Java Community
https://discordjug.net/
GNU General Public License v3.0
48 stars 22 forks source link

Block the executables with possible malware #353

Open Avatcher opened 2 years ago

Avatcher commented 2 years ago

Is your feature request related to a problem? Please describe. Anyone can send a message with an executable file to any chat with a possible malware. Even if a new rule: "Do not share executables" will be added, the Moderators Team cannot delete these messages instantly. And they should not, when that process can be automated.

Describe the solution you'd like JavaBot will block messages with executable, such as ".exe" or ".jar", files automatically. Then there's no need for human moderation.

Describe alternatives you've considered

  1. Users can send executable only in the special allowed channel.
  2. JavaBot will "freeze" messages and do not publish them until the executable will be checked.

image_2022-08-11_204034553

liquiddevelopmentnet commented 2 years ago

JavaBot will "freeze" messages

That cannot be done with the discord api.

It is surely a good idea to check files, however there is a too high risk for us to block files that are relevant to questions and conversations, as you can not be 100% sure its malicious. This would be really bad if none of the moderators would approve the file for hours.

Also, just checking a file by its extension does nothing, someone could still fit malicious content into other files.

MaeveS2 commented 2 years ago

I don't think this is necessary. If you're going to execute a random file without decompiling and checking it first, and your computer gets infected, honestly, that's on you. Maybe we should encourage people to use common sense and a decompiler instead.

liquiddevelopmentnet commented 2 years ago

I agree with Maeve there.

Pleezon commented 2 years ago
MoonTM-GIT commented 2 years ago

We don't have a rule for the entire server, it's just not allowed in #project-showcase