fowode / pychess

Automatically exported from code.google.com/p/pychess
GNU General Public License v3.0
0 stars 0 forks source link

PyChess engine sends mails without user consent, and without even notifying the user #725

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
At least in hg, the PyChess engine appears to sends mails without user consent, 
and without even notifying the user. (I came to this conclusion from code 
examination, not actual tests)

This is not acceptable. The code should be removed at once.

Original issue reported on code.google.com by jonas.thiem@gmail.com on 7 Sep 2012 at 6:49

GoogleCodeExporter commented 9 years ago
Well from reexamination, this is probably desired for FICS mode. But why? Seems 
to be a weird thing to do, really didn't expect email code to be in a chess 
engine at all.

Original comment by jonas.thiem@gmail.com on 7 Sep 2012 at 6:58

GoogleCodeExporter commented 9 years ago
The code is in the PyChessFICS class.
I've registred PyChess to legally play as a bot on fics. It does however 
currently only work with my password, but if other people want to register it 
too, they can use the class as well.
Once you have the bot running, you can send it commands from your own account, 
something like 'msg bog sudo msg me hi' which will make the bot tell you 'hi'.
The bot will email you logs and errors, so you can stop it before it goes wild.
There are no email addresses in the source code, and no back doors :) 
Everything must be specified by the user who hosts the bot.

Original comment by lobais on 8 Sep 2012 at 9:18