[OTR-dev] /me bug

Paul Wouters paul at cypherpunks.ca
Sat Sep 14 16:06:23 EDT 2013


On Fri, 13 Sep 2013, Ian Goldberg wrote:

>> You want IRC to show a literal "/me" to the other person, and not
>> use the CTCP ACTION?
>
> What if, when the user types "/me action", the prpl-irc plugin passes
> "/me action" to the pidgin-otr plugin, and sends the result as a
> PRIVMSG.  Then the receiving prpl-irc plugin, when it decrypts and
> *receives* "PRIVMSG ... /me action" from the sender, treats it as if it
> had received "ACTION action"?
>
> The trick would be that the sending (but not the receiving) prpl-irc
> would need to know whether OTR was enabled, but it could easily check
> that after the emit of sending-im-msg returns?
>
>> If I type /nonexisting, you also want to send that over IRC,
>> rather than just generate an error that that command doesn't
>> exit?
>
> I can't speak for Paul, but I wouldn't say so.

I mostly want an accidental typing of /me or /whatever to not leak
plaintext during an OTR conversation:

<otr session active>
Hi Mr.Snowden
/me is scared about the NSA      <--- leaks plaintext
about that secret file. The password is:
/secretliesandstatistics            <----- leaks plaintext


Paul



More information about the OTR-dev mailing list