Security Warning |
Top Previous Next |
It would be easy for a malicious person with some programming knowledge to modify these scripts to make them send any information from your computer to another user on irc.
While this script poses no additional risks not present in other mirc scripts, its subject matter makes it an attractive target for such tampering, and you should be aware that your firewall will not be able to detect and block such transmissions, since they would be piggybacked on normal irc traffic.
Because of this, you must excercise EXTREME caution with regard to any script you install in mirc.
Do NOT use a version of this software or ANY mirc script that has not been verified by a source that you trust.
PGP signatures for official versions of this add-on will be released and posted on the mircryption forum. That will enable you to make sure that wherever you download this package from, you have an official version released by me. You can get my "Dark Raichu" public key from any reputable key server.
WARNING!!!
There is no way we can ensure that someone won't modify this software, remove this security warning, and redistribute it as their own.
The following guidelines will serve you well: Before downloading files, do a web search. Check out alternative download sites and look for a homepage for the product, or a bulletin board devoted to it. While it's always possible for a rogue site to be offering a trojaned version of any application, it's unlikely that a worldwide conspiracy is in place to trick you.
The safest thing you can do is of course to examine the source code carefully and recompile it from scratch yourself. Short of that, make sure you get this code from a site you trust, and make sure to verify the signature on the package.
Note also that any mirc script can access the functions of another. This means that you need to be extremely vigilant about checking the safety of *ALL* scripts you install in addition to the MircryptionSuite; if you install a trojan mirc script, it could potentially access the MircryptionSuite functions and send your channel keyphrases (as well as any other info on your computer) to another user. Of course, if you are unfortunate enough to install a trojan, the sharing of channel keyphrases is probably the least of your worries.
Please do not use this tool for immoral activities; use it because you're irrationally paranoid about things no one cares about. |