darwin-network / slash

1 stars 1 forks source link

can't change nick when authenticated #32

Closed clukawski closed 1 year ago

clukawski commented 4 years ago

Client: irssi SASL: Yes Registered Nick: Yes

To reproduce: /nick NO_HONK

Result: 69:69 -!- NICK Your nickname must match your account name; try logging out and logging back in with SASL

slingamn commented 4 years ago

Suggested workaround:

  1. Find a zero-day in openssh, nginx, exim, or oragono
  2. Get root on the server
  3. Edit /home/oragono/ircd.yaml and set force-nick-equals-account: false
  4. Rehash the server (killall -HUP oragono as root or the oragono role user)
clukawski commented 4 years ago

Here's a screenshot of the problem I am having: nick

slingamn commented 4 years ago

Try https://lcamtuf.coredump.cx/afl/ to look for memory corruption vulnerabilities in the aforementioned executables (except for Oragono, which is written in a memory-safe language).

clukawski commented 4 years ago

I just want to note also that this doesn't work when I try to set a nick with emojis either, when will we have emoji support for usernames?

slingamn commented 4 years ago

As of https://github.com/oragono/oragono/issues/693 (which includes an officially supported "permissive" mode for identifiers) I am actually considering bringing those back!

eklitzke commented 4 years ago

hey how do i log in?

clukawski commented 4 years ago

yeah I can't log in either

clukawski commented 4 years ago

^^

clukawski commented 4 years ago

I'm out of ham cheese

clukawski commented 4 years ago

no wait, there's one left 🧀 🍖

benharri commented 4 years ago

hello

clukawski commented 4 years ago

guys we can just talk on here

clukawski commented 4 years ago

hey ben

clukawski commented 4 years ago

guys bernie right?

benharri commented 4 years ago

yes

clukawski commented 4 years ago

🏴🏴🏴🏴🏴🏴

clukawski commented 4 years ago

no honk nohonk

clukawski commented 4 years ago

05:55 -BitBot:#darwin- [GitHub] (darwin-network/slash) [issue] eklitzke deleted a comment on #32 (can't change nick when authenticated) - https://git.io/JvSxa 05:55 -BitBot:#darwin- [GitHub] (darwin-network/slash) [issue] eklitzke deleted a comment on #32 (can't change nick when authenticated) - https://git.io/JvSxV 05:56 -BitBot:#darwin- [GitHub] (darwin-network/slash) [issue] eklitzke deleted a comment on #32 (can't change nick when authenticated) - https://git.io/JvSAo 05:56 -BitBot:#darwin- [GitHub] (darwin-network/slash) [issue] eklitzke deleted a comment on #32 (can't change nick when authenticated) - https://git.io/JvSxf

benharri commented 4 years ago

drive safe

clukawski commented 4 years ago

good night!

slingamn commented 4 years ago

@eklitzke I can see all your deleted comments in my email, I'm reporting you to Darwin's HR team

@clukawski since you have failed to hack the server thus far, I'm reassigning you from penetration testing to HR, please investigate my complaint in a timely fashion

clukawski commented 3 years ago

@slingamn I'm on it, please forward me any information relevant to this investigation.

clukawski commented 3 years ago

i can't change my nick either maybe try using inspircd?

edmund-huber commented 3 years ago

incoherent screeching

clukawski commented 2 years ago

any updates on this? thinking about switching to libera.chat and being free of utf-8

clukawski commented 1 year ago

closing as nick has been successfully changed