JavaBot icon indicating copy to clipboard operation
JavaBot copied to clipboard

Block the executables with possible malware

Open Avatcher opened this issue 3 years ago • 5 comments

Is your feature request related to a problem? Please describe. Anyone can send a message with an executable file to any chat with a possible malware. Even if a new rule: "Do not share executables" will be added, the Moderators Team cannot delete these messages instantly. And they should not, when that process can be automated.

Describe the solution you'd like JavaBot will block messages with executable, such as ".exe" or ".jar", files automatically. Then there's no need for human moderation.

Describe alternatives you've considered

  1. Users can send executable only in the special allowed channel.
  2. JavaBot will "freeze" messages and do not publish them until the executable will be checked.

image_2022-08-11_204034553

Avatcher avatar Aug 11 '22 18:08 Avatcher

JavaBot will "freeze" messages

That cannot be done with the discord api.

It is surely a good idea to check files, however there is a too high risk for us to block files that are relevant to questions and conversations, as you can not be 100% sure its malicious. This would be really bad if none of the moderators would approve the file for hours.

Also, just checking a file by its extension does nothing, someone could still fit malicious content into other files.

liquiddevelopmentnet avatar Aug 11 '22 19:08 liquiddevelopmentnet

I don't think this is necessary. If you're going to execute a random file without decompiling and checking it first, and your computer gets infected, honestly, that's on you. Maybe we should encourage people to use common sense and a decompiler instead.

MaeveS2 avatar Aug 11 '22 19:08 MaeveS2

I agree with Maeve there.

liquiddevelopmentnet avatar Aug 11 '22 19:08 liquiddevelopmentnet

  • I believe we do have a rule that prohibits sharing non text / picture files

Pleezon avatar Aug 11 '22 19:08 Pleezon

We don't have a rule for the entire server, it's just not allowed in #project-showcase

MoonTM-GIT avatar Aug 11 '22 19:08 MoonTM-GIT