Tip of the day #273

New Issue

2026-10-05T04:09:15+02:00

adam commented

2026-10-05 04:09:15 +02:00

It would be nice to show some usage tips to new users, e.g. when they connect to ZNC (somewhere near 001), or in web interface.

Want to back this issue? Post a bounty on it! We accept bounties via Bountysource.

It would be nice to show some usage tips to new users, e.g. when they connect to ZNC (somewhere near 001), or in web interface. ## <bountysource-plugin> Want to back this issue? **[Post a bounty on it!](https://www.bountysource.com/issues/1326126-tip-of-the-day?utm_campaign=plugin&utm_content=tracker%2F1759&utm_medium=issues&utm_source=github)** We accept bounties via [Bountysource](https://www.bountysource.com/?utm_campaign=plugin&utm_content=tracker%2F1759&utm_medium=issues&utm_source=github). </bountysource-plugin>

adam commented

2026-10-05 04:09:16 +02:00

Purely curious, @DarthGandalf , are you intending to have tips-of-the-day as hard-coded, compiled-in strings, or as an additional plugin with its own global plugin configuration data into which the administrators can add tips to show each day?

Purely curious, @DarthGandalf , are you intending to have tips-of-the-day as hard-coded, compiled-in strings, or as an additional plugin with its own global plugin configuration data into which the administrators can add tips to show each day?

adam commented

2026-10-05 04:09:17 +02:00

@teward Initially I thought about compiled-in strings, but some configuration by admin is a good idea.
Another option is to fetch them from somewhere remote... Though in that case admin would need to explicitly allow ZNC to do so.

@teward Initially I thought about compiled-in strings, but some configuration by admin is a good idea. Another option is to fetch them from somewhere remote... Though in that case admin would need to explicitly allow ZNC to do so.

adam commented

2026-10-05 04:09:18 +02:00

I would advise not having it remote-fetch by default, because in Ubuntu and other OSes which package ZNC, that could become a security issue very quickly. Maybe have remote-fetch as a configure-at-compile thing, like --enable-tip-of-day-remote-fetch or similar, and if that's not there compile a different form of the module that has remote-fetch off. Otherwise, I think it's a good idea to have a tip-of-the-day in the system, that way ZNC providers such as trekweb can have tips in the system that automatically go off at scheduled intervals (that should be configurable).

I would advise not having it remote-fetch by default, because in Ubuntu and other OSes which package ZNC, that could become a security issue very quickly. Maybe have remote-fetch as a configure-at-compile thing, like --enable-tip-of-day-remote-fetch or similar, and if that's not there compile a different form of the module that has remote-fetch off. Otherwise, I think it's a good idea to have a tip-of-the-day in the system, that way ZNC providers such as trekweb can have tips in the system that automatically go off at scheduled intervals (that should be configurable).

adam commented

2026-10-05 04:09:18 +02:00

I would advise not having it remote-fetch by default, because in Ubuntu and other OSes which package ZNC, that could become a security issue very quickly.

I know this is old comment, but I must add that there is recent example of this with Chromium downloading voice search plugin.

> I would advise not having it remote-fetch by default, because in Ubuntu and other OSes which package ZNC, that could become a security issue very quickly. I know this is old comment, but I must add that there is recent example of this with Chromium downloading voice search plugin. - [Debian Bug report logs - #786909 - chromium: unconditionally downloads binary blob](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=786909) - [Google Chrome Listening In To Your Room Shows The Importance Of Privacy Defense In Depth](https://www.privateinternetaccess.com/blog/2015/06/google-chrome-listening-in-to-your-room-shows-the-importance-of-privacy-defense-in-depth/)

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: adam/znc#273