{"action":"created","issue":{"url":"https://api.github.com/repos/TheSchwa/sibyl/issues/42","repository_url":"https://api.github.com/repos/TheSchwa/sibyl","labels_url":"https://api.github.com/repos/TheSchwa/sibyl/issues/42/labels{/name}","comments_url":"https://api.github.com/repos/TheSchwa/sibyl/issues/42/comments","events_url":"https://api.github.com/repos/TheSchwa/sibyl/issues/42/events","html_url":"https://github.com/TheSchwa/sibyl/issues/42","id":299488013,"number":42,"title":"`calc` command is missing timeout (can be used to DoS sibyl)","user":{"login":"nixy","id":7588406,"avatar_url":"https://avatars2.githubusercontent.com/u/7588406?v=4","gravatar_id":"","url":"https://api.github.com/users/nixy","html_url":"https://github.com/nixy","followers_url":"https://api.github.com/users/nixy/followers","following_url":"https://api.github.com/users/nixy/following{/other_user}","gists_url":"https://api.github.com/users/nixy/gists{/gist_id}","starred_url":"https://api.github.com/users/nixy/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nixy/subscriptions","organizations_url":"https://api.github.com/users/nixy/orgs","repos_url":"https://api.github.com/users/nixy/repos","events_url":"https://api.github.com/users/nixy/events{/privacy}","received_events_url":"https://api.github.com/users/nixy/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-02-22T19:59:08Z","updated_at":"2018-02-22T20:16:00Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"The `calc` command is a restricted eval that prevents non math commands from being run.\r\n\r\nBy giving this command large calculations (outside python's long) you can force it to do decimal arithmetic pretty much indefinitely.\r\n\r\nExample:\r\n\r\n    calc 9223372036854775807 ^ 9223372036854775807 ^ 9223372036854775807\r\n\r\nWhile calculating these digits the bot will do nothing else and bridging will cease. This means anyone on the other side of the bridge won't even know what hit em B)"},"comment":{"url":"https://api.github.com/repos/TheSchwa/sibyl/issues/comments/367808113","html_url":"https://github.com/TheSchwa/sibyl/issues/42#issuecomment-367808113","issue_url":"https://api.github.com/repos/TheSchwa/sibyl/issues/42","id":367808113,"user":{"login":"TheSchwa","id":6052180,"avatar_url":"https://avatars3.githubusercontent.com/u/6052180?v=4","gravatar_id":"","url":"https://api.github.com/users/TheSchwa","html_url":"https://github.com/TheSchwa","followers_url":"https://api.github.com/users/TheSchwa/followers","following_url":"https://api.github.com/users/TheSchwa/following{/other_user}","gists_url":"https://api.github.com/users/TheSchwa/gists{/gist_id}","starred_url":"https://api.github.com/users/TheSchwa/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/TheSchwa/subscriptions","organizations_url":"https://api.github.com/users/TheSchwa/orgs","repos_url":"https://api.github.com/users/TheSchwa/repos","events_url":"https://api.github.com/users/TheSchwa/events{/privacy}","received_events_url":"https://api.github.com/users/TheSchwa/received_events","type":"User","site_admin":false},"created_at":"2018-02-22T20:16:00Z","updated_at":"2018-02-22T20:16:00Z","author_association":"OWNER","body":"Initially thought this might be made easier with threads, but it seems you can't actually kill them easily. There seems to be one solution that frankly scares me - https://stackoverflow.com/a/325528\r\n\r\nOtherwise it seems `signal` could might useful, however comments online imply that doesn't play nice with `threading` in general which quite a few things in sibyl use - https://stackoverflow.com/a/494273 and I'd be willing to bet that's what somehow broke things in #34 somehow\r\n\r\nMight require `subprocess` or `multiprocessing` here? Not sure, needs more thought/investigation."}}
{"actor":{"display_login":"TheSchwa"}}