{"action":"created","issue":{"url":"https://api.github.com/repos/python-discord/bot/issues/161","repository_url":"https://api.github.com/repos/python-discord/bot","labels_url":"https://api.github.com/repos/python-discord/bot/issues/161/labels{/name}","comments_url":"https://api.github.com/repos/python-discord/bot/issues/161/comments","events_url":"https://api.github.com/repos/python-discord/bot/issues/161/events","html_url":"https://github.com/python-discord/bot/issues/161","id":381861818,"node_id":"MDU6SXNzdWUzODE4NjE4MTg=","number":161,"title":"Attack surface and critical service resilience","user":{"login":"pydis-bot","id":45082066,"node_id":"MDQ6VXNlcjQ1MDgyMDY2","avatar_url":"https://avatars1.githubusercontent.com/u/45082066?v=4","gravatar_id":"","url":"https://api.github.com/users/pydis-bot","html_url":"https://github.com/pydis-bot","followers_url":"https://api.github.com/users/pydis-bot/followers","following_url":"https://api.github.com/users/pydis-bot/following{/other_user}","gists_url":"https://api.github.com/users/pydis-bot/gists{/gist_id}","starred_url":"https://api.github.com/users/pydis-bot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pydis-bot/subscriptions","organizations_url":"https://api.github.com/users/pydis-bot/orgs","repos_url":"https://api.github.com/users/pydis-bot/repos","events_url":"https://api.github.com/users/pydis-bot/events{/privacy}","received_events_url":"https://api.github.com/users/pydis-bot/received_events","type":"User","site_admin":false},"labels":[{"id":1130882001,"node_id":"MDU6TGFiZWwxMTMwODgyMDAx","url":"https://api.github.com/repos/python-discord/bot/labels/discussion","name":"discussion","color":"e1e4e9","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-11-17T13:09:25Z","updated_at":"2018-11-17T13:09:28Z","closed_at":null,"author_association":"NONE","body":"**Originally posted by Leon Sandøy:**\n\n**KnownError** brought up a concern regarding attack surface in #dev-contrib. In a nutshell, if we have thousands of unrelated features in our moderation bot, there's a greater chance that one of them will have some bug that exposes a vulnerability and  grants access to one of the moderation tools.\r\n\r\nAnother concern is to ensure that our critical services such as moderation and verification are resilient to downtime. In this, there are two things to consider:\r\n*  If the bot goes down, we will need a second instance to take over somewhere. We already have a solution for this in terms of verification, so I guess we'll expand on that.\r\n*  If the site goes down, **the moderation features should still work even though the API is unavailable**.\r\n\r\nFor these reasons, we should discuss whether the moderation and verification features should be separated out of the bot and ran as an entirely separate instance with no accesses between the two. If we do this, should they run on the same bot token, or on different bot tokens?\r\n\r\nThis is a *discussion* issue, so please share your opinions on this matter."},"comment":{"url":"https://api.github.com/repos/python-discord/bot/issues/comments/439615618","html_url":"https://github.com/python-discord/bot/issues/161#issuecomment-439615618","issue_url":"https://api.github.com/repos/python-discord/bot/issues/161","id":439615618,"node_id":"MDEyOklzc3VlQ29tbWVudDQzOTYxNTYxOA==","user":{"login":"pydis-bot","id":45082066,"node_id":"MDQ6VXNlcjQ1MDgyMDY2","avatar_url":"https://avatars1.githubusercontent.com/u/45082066?v=4","gravatar_id":"","url":"https://api.github.com/users/pydis-bot","html_url":"https://github.com/pydis-bot","followers_url":"https://api.github.com/users/pydis-bot/followers","following_url":"https://api.github.com/users/pydis-bot/following{/other_user}","gists_url":"https://api.github.com/users/pydis-bot/gists{/gist_id}","starred_url":"https://api.github.com/users/pydis-bot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pydis-bot/subscriptions","organizations_url":"https://api.github.com/users/pydis-bot/orgs","repos_url":"https://api.github.com/users/pydis-bot/repos","events_url":"https://api.github.com/users/pydis-bot/events{/privacy}","received_events_url":"https://api.github.com/users/pydis-bot/received_events","type":"User","site_admin":false},"created_at":"2018-11-17T13:09:28Z","updated_at":"2018-11-17T13:09:28Z","author_association":"NONE","body":"**Comment from Leon Sandøy:**\n\nchanged the description"}}
{"actor":{"display_login":"pydis-bot"}}