|
|
| Author |
Message |
shadow16 Lurker

Joined: 02 Sep 2005 Posts: 186 Location: IRC
|
Posted: Dec 28, 2005 2:27am Post subject: mIRC Development |
|
|
Do you guys think we'll ever see another version of mIRC? Khaled hasn't came out with a new version of his famous IRC client in a year and a half. It must still be missing some features, it can't just be perfect the way it is! He better come up with something before someone comes out with a worthy competition.
Last edited by shadow16 on Dec 28, 2005 2:31am; edited 1 time in total |
|
| Back to top |
|
 |
shadow16 Lurker

Joined: 02 Sep 2005 Posts: 186 Location: IRC
|
Posted: Dec 28, 2005 2:30am Post subject: |
|
|
| Two things I'd like to see are better SSL compatibility and an updated GUI. Aside from multi-server capability, it really hasnt changed much since 1997. |
|
| Back to top |
|
 |
PingBad Guru

Joined: 05 Feb 2005 Posts: 2008 Location: New Zealand
|
Posted: Dec 28, 2005 3:36am Post subject: |
|
|
| good luck convincing him to release 6.17, last I heard, khaled retired from mIRC development (which annoys me really, there are quite a lot of things I'd still like to see in mIRC - an embedded way to define text handling (like what x-chat does, instead of resorting to scripts... sometimes very messy scripts) to name one) |
|
| Back to top |
|
 |
shadow16 Lurker

Joined: 02 Sep 2005 Posts: 186 Location: IRC
|
Posted: Dec 28, 2005 3:52am Post subject: |
|
|
It's definitely time for mIRC to get some real competition. Preferably by an open source client, with a decent GUI and all the features people want.
X-Chat can't fill that role for a number of reasons. It's ugly, full of annoyances, the windows version is not open source, and its difficult to do almost anything. |
|
| Back to top |
|
 |
m00c0w none

Joined: 07 Dec 2005 Posts: 28
|
Posted: Dec 28, 2005 6:00am Post subject: |
|
|
well, im not jumping in into the client discussion here, because everyone has its pros and cons...
but i pretty much bet my ass that he is going to release a new version if this exploit is for real (i didnt test it yet).
| Quote: |
- 2 - Vulnerability description
Tested on mIRC 6.16,6.12,6.03 and 5.91, all result vulnerable.
Possibly all mIRC versions are vulnerable.
The code executed are with current user privileges,anyway this bug
could be dangerous in universities,
cyber coffees, schools and any location with restrictions.
Adding/editing filters to locate the specified folder for the files
transfered by DCC if insert a string greater
or equal to 981 bytes the application crash showing an memory error 0x0000.
|
oh and...
| Quote: |
- 4 - Solution
I contacted with khaled in khaled (at) mirc (dot) com [email concealed] reporting the bug on
29/11/2005 without response.
Contacting again with this advisory.
|
i wonder how one (actually, see the big quotation marks there) "pretty simple program" like an irc-client can have _that_ many exploits when it comes to its DCC functions alone...
talk about programming with the feets and being blindfolded? oO |
|
| Back to top |
|
 |
magpie Idler

Joined: 18 Jan 2004 Posts: 454 Location: Essex, UK
|
Posted: Dec 28, 2005 6:10am Post subject: |
|
|
| shadow16 wrote: | | X-Chat can't fill that role for a number of reasons. It's ugly, full of annoyances, the windows version is not open source, and its difficult to do almost anything. |
This is incorrect. The Windows binary version is shareware, however the sourcecode is released under the GPL. This means you're free to build it yourself, and even redistribute this version (like SilverX builds).
Personally I love X-Chat, and I even think it's a damn sight better looking that mIRC. Just my personal opinion though. |
|
| Back to top |
|
 |
Willaim Lurker

Joined: 27 Jun 2003 Posts: 228 Location: IRC
|
Posted: Dec 28, 2005 11:27am Post subject: |
|
|
Maybe Khaled and the UnrealIRCD team are on vacation in the bahamas?  |
|
| Back to top |
|
 |
shadow16 Lurker

Joined: 02 Sep 2005 Posts: 186 Location: IRC
|
Posted: Dec 28, 2005 3:29pm Post subject: |
|
|
| magpie wrote: | This is incorrect. The Windows binary version is shareware, however the sourcecode is released under the GPL. This means you're free to build it yourself, and even redistribute this version (like SilverX builds).
Personally I love X-Chat, and I even think it's a damn sight better looking that mIRC. Just my personal opinion though. |
Just my opinion. I think X-Chat could be better.
| Willaim wrote: | Maybe Khaled and the UnrealIRCD team are on vacation in the bahamas?  |
Maybe they died  |
|
| Back to top |
|
 |
magpie Idler

Joined: 18 Jan 2004 Posts: 454 Location: Essex, UK
|
Posted: Dec 28, 2005 5:02pm Post subject: |
|
|
| shadow16 wrote: | | Just my opinion. I think X-Chat could be better. |
Oh I agree, it's far from perfect. :) |
|
| Back to top |
|
 |
shadow16 Lurker

Joined: 02 Sep 2005 Posts: 186 Location: IRC
|
Posted: Dec 28, 2005 6:36pm Post subject: |
|
|
| At least it's still in development. That puts X-Chat above mIRC in my book. And because it's open source, it has some potential. |
|
| Back to top |
|
 |
Mentality none

Joined: 12 Apr 2004 Posts: 6
|
Posted: Jan 13, 2006 2:22am Post subject: |
|
|
| PingBad wrote: | | last I heard, khaled retired from mIRC development |
I don't know where you heard that. Classic Chinese whispers I guess. Khaled specifies on his website that he is doing a Masters degree, and it has been rumoured that this is why a new version hasn't been released for ages.
With regards to the so-called "exploit", please see this thread that Khaled edited.
The issue of mIRC's GUI has been debated <very large number> times. Personally, I have grown used to how mIRC looks and it doesn't bother me in the slightest. I don't even think of it as "old looking". From what I gather about Khaled's attitudes towards mIRC, I doubt there'll be any major changes, ever. Maybe some new avenues will be opened with Vista (like translucency), but beyond that.... Besides, I think MTS themes do a pretty good job of altering mIRC's look beyond recognition. I guess that's the point. mIRC is a blank canvas for users to edit to their own liking, not for Khaled to splatter it with the next XP fashion statement.
Regards,
Mentality/Chris |
|
| Back to top |
|
 |
braindigitalis Idler

Joined: 22 Sep 2003 Posts: 443 Location: IRC
|
Posted: Jan 15, 2006 6:55pm Post subject: |
|
|
| m00c0w wrote: | well, im not jumping in into the client discussion here, because everyone has its pros and cons...
but i pretty much bet my ass that he is going to release a new version if this exploit is for real (i didnt test it yet).
| Quote: |
- 2 - Vulnerability description
Tested on mIRC 6.16,6.12,6.03 and 5.91, all result vulnerable.
Possibly all mIRC versions are vulnerable.
The code executed are with current user privileges,anyway this bug
could be dangerous in universities,
cyber coffees, schools and any location with restrictions.
Adding/editing filters to locate the specified folder for the files
transfered by DCC if insert a string greater
or equal to 981 bytes the application crash showing an memory error 0x0000.
|
oh and...
| Quote: |
- 4 - Solution
I contacted with khaled in khaled (at) mirc (dot) com [email concealed] reporting the bug on
29/11/2005 without response.
Contacting again with this advisory.
|
i wonder how one (actually, see the big quotation marks there) "pretty simple program" like an irc-client can have _that_ many exploits when it comes to its DCC functions alone...
talk about programming with the feets and being blindfolded? oO |
This is pretty much a FUD exploit. You need to be locally on the machine you wish to exploit, so you can poke the process memory. This means, you probably also need to be the same user. |
|
| Back to top |
|
 |
magpie Idler

Joined: 18 Jan 2004 Posts: 454 Location: Essex, UK
|
Posted: Jan 16, 2006 4:11am Post subject: |
|
|
| It's never been particularly hard to trick users into executing a script which essentially gives control of mIRC to a remote user. Granted, this is the user's responsibility, but mIRC could have made it harder. |
|
| Back to top |
|
 |
Alpha Lurker

Joined: 29 Dec 2005 Posts: 206
|
Posted: Feb 18, 2006 6:25am Post subject: mIRC |
|
|
| mIRC 6.17 was released yesterday. |
|
| Back to top |
|
 |
Poku none

Joined: 26 Mar 2006 Posts: 11
|
Posted: Mar 26, 2006 12:32pm Post subject: Re: mIRC |
|
|
| Alpha wrote: | | mIRC 6.17 was released yesterday. |
Yay for 6.17! Anyway, I think he's gonna keep updating it, but it's his hobby, not his job |
|
| Back to top |
|
 |
|