Sensitive Module Data about znc HOT 4 CLOSED

Nickserv module should send the password to erm... Nickserv of the given network.
Question: how to unhash the password from this hashed .registry?

Nickserv module should be able to login using your credentials, in some way (even if it's public/private key instead of password). So well, it should have access to these credentials.

Exception could be server-side configuring to give access to your IP. Some services support that.

from znc.

Maybe it could be encrypted with the user's sha256 hash in znc.conf?

But then it could just be decrypted the same way, since having access to user/moddata/nickserv/ would likely mean you have access to znc.conf as well, so trying to encrypt it is useless.

Suggestion: use a randomly generated alphanumeric 25 character password for nickserv, and save it somewhere (like LastPass or 1Password). This way at least you're not using the same password everywhere and if your moddata/nickserv/ password is hijacked, the worst you could lose is your irc nick. And maybe you can even get that back since your email doesn't use the same password now.

from znc.

Isn't your suggestion really a best practices for the end user? Not really something for ZNC to implement? Honestly, there's only so much you can do if someone can access your file system.

from znc.

Yes, yes, and I agree.

from znc.