beyond-all-reason / BYAR-Chobby

55 stars 62 forks source link

Change alt-account keyword, and store it as a hash. #692

Closed DeviousNull closed 1 month ago

DeviousNull commented 1 month ago

Currently, the keyword to allow creation of a second account is stored in plaintext within the Chobby code.

This patch:

  1. Changes the specific keyword that Chobby checks for (known by the Moderation team)
  2. Only stores a hashed copy of the keyword within Chobby's code.

Ideally we would validate the keyword server-side, but this lesser change is simple, self-contained, and provides at least some benefit to confidentiality.