09:01 <Wobbley> dominikh: Hmm how can I solve it then? :(

09:06 <Wobbley> hmm I found that you have some documentation under encoding, will check that :D

20:23 <apeiros> hi there

20:31 <leftylink> coworker commented on my PR telling me "don't forget to change these two files". coworker had forgotten to commit the files so I didn't even have them. doh.

20:44 <apeiros> how does `match` work with a regex? especially with regards to anchoring?

20:45 <apeiros> i.e., if I write `match /command/`, is the resulting regex: /^!command/?

20:45 <apeiros> (due to default prefix)

20:48 <dominikh> apeiros_: yes.

20:48 <dominikh> apeiros: the prefix and suffix are concated to the regexp to pass to match

20:48 <dominikh> (if the prefix/suffix is a string instead of a regexp, it will also be prefixed with ^ or suffixed with $ respectively)

20:49 <apeiros> hi there dominikh, long time no see :)

20:49 <dominikh> indeed

20:49 <apeiros> dominikh: how'd you verify a user is not spoofing? m.user.nick == required_user && m.user.authed? is insufficient as I just tested

20:50 <dominikh> well, for one, I wouldn't authenticate by nick, I would authenticate by authname

20:50 <apeiros> at least when jhass used "/nick apeiros" the check passed

20:50 <apeiros> ah, m.user.authname

20:51 <dominikh> (also, if you accept messages in private, you need a m.user.refresh to get fresh data. if you only accept messages in channels, Cinch takes care of it)

20:52 <apeiros> btw., plugins don't seem to like inheritance. I assume you run an included callback which initializes class ivars?

20:53 <dominikh> "maybe". It's been years since I looked at those bits

20:53 <dominikh> https://github.com/cinchrb/cinch/blob/master/lib/cinch/plugin.rb#L121

20:54 <apeiros> so:`m.user.refresh; m.user.authed? && Authorized.include?(m.user.authname) ? success : fail` is proper?

20:55 <dominikh> proper enough. there's still a possible attack, but you can't make it 100% safe if you accept private messages. (an unauthed user could invoke a command, quit, have the correct user connect and auth, before you managed to run #refresh)

20:55 <apeiros> ok. thanks :)

20:56 <dominikh> but actually, a channel message might be vulnerable to the same thing now that I think of it…

20:56 <apeiros> btw., you no longer frequent #ruby/#ruby-lang?

20:57 <dominikh> I no longer write a lot of Ruby, either ;)

20:57 <apeiros> :-O

20:57 <apeiros> what are you writing now?

20:57 <dominikh> (but no, I don't frequent most channels that face a lot of repetitive newbie questions anymore, in general)

20:57 <dominikh> I write Go now

20:58 <apeiros> ok. you got a job where you use go?

20:59 <dominikh> well, I freelance and have work involving Go

21:05 <apeiros> nice :)