Giter VIP home page Giter VIP logo

Comments (18)

Demosphere avatar Demosphere commented on June 1, 2024 5

I second this.

from sidekick.

katlyn avatar katlyn commented on June 1, 2024 5

I would also like this.

from sidekick.

kherchel avatar kherchel commented on June 1, 2024 4

I'd also love to get the source code. The bot is available for free anyway, so why not let us boost the development a bit?

from sidekick.

mmmeff avatar mmmeff commented on June 1, 2024 4

This is sketch, people should not add this to their Discord unless the source is available

from sidekick.

klaude avatar klaude commented on June 1, 2024 4

If you can write Rust and have an issue in mind

That's kind of the point of using an open source site like this, @ArtemGr. If you want to use GitHub for issue tracking then remove the project's license file and say that this is here for issue tracking in the readme. Others are right that this violates the MIT license. Otherwise, throw the source up! Whatcha got to lose?

from sidekick.

ArtemGr avatar ArtemGr commented on June 1, 2024 3

If you can write Rust and have an issue in mind, then by all means, mention that in the corresponding issue and we'll think of something.

from sidekick.

klaude avatar klaude commented on June 1, 2024 3

Fair enough, @ifohancroft. We've all gotta eat. All he has to do is take the license down and say up front what the project's GitHub presence is for and all is well. At least for me. Otherwise I wouldn't mind seeing the source.

from sidekick.

ifohancroft avatar ifohancroft commented on June 1, 2024 3

I just wanted to say that I am officially stopping to use the bot because of the creator's violation of the license and his refusal to address that. I will right now remove the bot from my server and I urge everyone to do the same.

from sidekick.

FluxAugur avatar FluxAugur commented on June 1, 2024 2

+1

from sidekick.

JyeGuru avatar JyeGuru commented on June 1, 2024 2

I meant, with regard to sharing the source in general (this issue ticket) - letting us bored coders add/fix things that are sitting in your backlog. :)

from sidekick.

JyeGuru avatar JyeGuru commented on June 1, 2024 1

It's not so much an issue with sane server settings. But anyone that gives Administrator to anyone that isn't known to them personally is just asking for trouble, and a lot of people just assume that bots need it, and give it to them regardless.

I think that if you use &permissions=19456 as the mask (giving only Read Messages Send Messages and Embed Links access) by default, this will stop people from just adding it to their stupidly-insecure "Bots" role that has Admin.

(Note: you can change the permissions request in the URL when you add any bot, before you approve it)

from sidekick.

ArtemGr avatar ArtemGr commented on June 1, 2024

@yukihyou Have a doc at hand for me to read more about the permissions vector and mask? I might update the link in README.

Also, everyone, please share your experience with bot using tighter permissions if you do.

from sidekick.

JyeGuru avatar JyeGuru commented on June 1, 2024

The actual bitmask is shown here: https://discordapp.com/developers/docs/topics/permissions
There's a handy dandy calculator here: https://discordapi.com/permissions.html

Note that this bot is really simple (no moderator commands, voice chat, music, etc) so all it really needs is Read and Send permissions in whatever channels you want to use it in. Which, given that most users have that already, shouldn't even need a role most of the time. The only problem with giving &permissions=0 is that it doesn't actually create itself a limited role - it needs at least one permission set to create itself a restricted role.

Unfortunately, a lot of bot creators are going down the "just tick admin then you don't have to worry about stuff not working" route, which is training server admins to just create a "Bots" role with Administrator and assign it to any bot they bring in, because then it "just works" ... The concept of "least privilege" is something that should be encouraged. As an example, Sidekick is currently running in my server with a role that adds no permissions at all - it's the same as any other guest user - and it works just fine.

Also, given the "wontfix" label, I presume you're not interested in people submitting bugfixes/enhancements via pull request?

from sidekick.

ArtemGr avatar ArtemGr commented on June 1, 2024

Thanks for the URLs, @yukihyou! I'll check it out.

Also, given the "wontfix" label, I presume you're not interested in people submitting bugfixes/enhancements via pull request?

Feel free to create a separate issue for permissions or to submit a pull request with a README patch.

from sidekick.

ifohancroft avatar ifohancroft commented on June 1, 2024

I would like the source code as well. I mean, come on, it is issued under the MIT license. If I am not mistaken and reading something wrong, you are actually breaking the license by not giving us the code. Also, the fact that you don't even address us, wanting the source code is just plain rude.

from sidekick.

ifohancroft avatar ifohancroft commented on June 1, 2024

@klaude Apparently he has a patreon page and its sole purpose is for people to support him via money for the bot/if they like it/use it/etc so I guess that's why he refuses to give the source.

from sidekick.

ifohancroft avatar ifohancroft commented on June 1, 2024

@klaude same here.

from sidekick.

ArtemGr avatar ArtemGr commented on June 1, 2024

The MIT license is here to clarify the status of the published source code, such as this one: #90 (comment). And documentation.

from sidekick.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    πŸ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. πŸ“ŠπŸ“ˆπŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❀️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.