![]() |
IOBit Software
|
|
|
||||||
| Software Software such as operating systems like Windows XP, Windows Vista, Windows 7 etc., or specific programs. |
![]() |
|
|
Thread Tools | Display Modes |
|
#1
|
|||
|
|||
|
I have a chatbot connected to IRC. It can do system calls, to access services running on my computer (winXP) and get back text information. I don't use that feature though.
Now I added a capability to the bot, to learn new answers. The problem is that it can learn to start a system call simply by a user telling it so on IRC. :/ I can't prevent this atm, I could only turnoff the learning capability. But I'd rather not do that. So my question is: Can I safely prevent a program from doing any system calls? EDIT: I tried placing the bot in NOD32's or Avast's quarantine folder. That didn't work. I have a Sygate Firewall running, maybe that could be used to monitor the bot. |
| Sponsored links |
|
|
|
#2
|
||||
|
||||
|
Your bot should have an ACL its a pretty bad design if a normal user can access your system from it. This also seems like a pretty hefty security risk, I'd recommend removing this feature form the bot for safety or at least implimenting an ACL
|
|
#3
|
|||
|
|||
|
ACL=AccessControlList?
Well it's my fault for teaching the bot how to learn I guess. I can rewrite the bot's "intelligence" so that only a few persons can access the Learning feature. But that isn't what I'm looking for. First I'd have to really really trust these people ... second others couldn't teach the bot anymore. Of course it would be better to change the bot itself - I totally agree with that. But I cant program C++ nor do I know how to compile this thing. So for the moment I'm basically looking for a crude hack. |
|
#4
|
||||
|
||||
|
To block system calls would require subclassing which you should not even attempt as you already mention you are not familiar with c++. I'd suggest removing the bot from irc entirly, your better with no bot that a bot the poses a security risk.
|
|
#5
|
|||
|
|||
|
Yes of course I removed the bot immediately from IRC as soon as I realised what could happen (fortunately I was the first to do so).
Hmm, I'll try and contact the original authors of this chatbot. Won't be too easy since they stopped the project 3 years ago. So wish me luck. And thanks for your answers matt.chugg. ![]() |
| Sponsored links |
|
|
|
#6
|
||||
|
||||
|
No problem
Good Luck |
![]() |
| Thread Tools | |
| Display Modes | |
|
|