Are there any security risks to using irc? reddit / irc ---------------------------------------------------------------------- 1234plant1234 · 2021-01-19 14:29 [https://www.reddit.com/r/irc/comments/1gavie/are\_there\_any\_securit y\_risks\_to\_using\_irc/?utm\_source=share&utm\_medium=web2x&context= 3](https://www.reddit.com/r/irc/comments/1gavie/are_there_any_security _risks_to_using_irc/?utm_source=share&utm_medium=web2x&context=3) I am a newbie. This question has been asked before, 7 years ago (see link above). I wonder if there have been any developments since then, or if those answers still apply. In terms of 'security', I mainly wonder about the chances of my computer getting infected by viruses or malware, etc. Thanks. ---------------------------------------------------------------------- htepO · 2021-01-19 14:35 - Don't accept DCC file transfers from randos. If it's a transfer that you requested, scan it anyway. - Don't install sketchy scripts. If possible, write your own. - Don't type commands that you don't fully understand. That should keep you safe from almost all virus/malware threats on IRC. ---------------------------------------------------------------------- [deleted] · 2021-01-19 14:37 [removed] ---------------------------------------------------------------------- LtWorf_ · 2021-01-19 15:18 I have used IRC for decades, still use it today, and nothing has happened except the occasional annoying troll spamming messages. ---------------------------------------------------------------------- 1234plant1234 · 2021-01-19 15:22 Thanks. So if I would download mIRC, for instance, and just hang out there to see what's going on (I am simply just curious), and maybe chat a bit, I should be fine? ---------------------------------------------------------------------- htepO · 2021-01-19 15:31 Most probably, yes. If you're worried about exposing your real IP to people on the network (admins included), get a bouncer. They're pretty inexpensive. If you don't want to spend money and are comfortable with setting up Linux VMs, Google and Amazon (maybe Microsoft?) let you use tiny instances for a year for no charge - perfect for running a bouncer. ---------------------------------------------------------------------- aZa0902 · 2021-01-19 16:20 I am, unfortunately, not decades old. But I have used it for years now and I have never had anything bad happenung to me. Except for some creepy dude that acted like he knew me personally. But that dude was a scam ---------------------------------------------------------------------- OMGItsCheezWTF · 2021-01-19 16:56 The biggest and only real passive one is that there is no inherent privacy to the protocol. You connect and the server by default announces your hostname to all other uses in every channel you join and in every message it relays for you. Some servers / networks mask this but on others the masking has to be switched on or doesn't exist. To avoid this you would have to use a VPN or a bouncer like znc running on a server or VPS somewhere to proxy your connection. DCC's protocol can make that even more complex. Otherwise it's just a case of following general good security practices. * Don't click on unknown links. * Don't run commands you don't understand. * Don't run unknown scripts. * Keep your IRC client up to date. * Don't give out personal information if you don't want people tracking you. * Assume everything is logged by both the server and other users. * Many (maybe most?) servers don't use TLS so everything you send is sent in plain text, treat service passwords etc accordingly and don't re use passwords elsewhere. (Don't re use passwords in general!) * Not everyone who is nice to you is a nice person. * If it looks or sounds too good to be true it probably isn't true. * Keep your shoe laces tied. * Wear clean underwear. ---------------------------------------------------------------------- 1234plant1234 · 2021-01-19 17:09 Awesome thanks! ---------------------------------------------------------------------- Mendacity531 · 2021-01-19 17:50 You should be safe as long as you don't get stupid. I don't mean that to be insulting, but that's the reality of things; if you accept files from random strangers, wares or other such sorts of files you are setting yourself up for great risk for malware and worse; if however on the other hand you simply wish to chat, you should be safe. Be aware some IRC networks cater to topics of sensitive nature and I am not referring to that of national security, chose your chat channels wisely, there is some stomach-churning shit out there. YMMV ---------------------------------------------------------------------- soundfeel · 2021-01-19 17:55 I've been on IRCnet since 1994, and everything is just fine. A lot more silent than the golden days, but fine. ---------------------------------------------------------------------- mordomer_man · 2021-01-19 18:28 Null unless you visit random webchats and such of certain irc's. Unlike many modern chats you don't need to download the specific client. Many irc clients are available out there which can be used to connect to almost all irc's. Choose something opensource from the list of irc clients available and there is like no chance for a virus from any irc by just connecting to it. other than that everything in that old post still applies to irc. ---------------------------------------------------------------------- rupturings · 2021-01-20 06:39 Use open vpn, gps location changer, proxy chains if you're feeling insecure ---------------------------------------------------------------------- LtWorf_ · 2021-01-20 07:22 > gps location changer uh??? IRC protocol doesn't include gps data. ---------------------------------------------------------------------- rupturings · 2021-01-20 07:49 I said "if you're feeling insecure" ---------------------------------------------------------------------- LtWorf_ · 2021-01-20 08:18 It's not even a thing on computers… ---------------------------------------------------------------------- rupturings · 2021-01-20 08:20 What are you talking about ---------------------------------------------------------------------- LtWorf_ · 2021-01-20 08:56 computers don't have GPS units… ---------------------------------------------------------------------- rupturings · 2021-01-20 09:08 Ok einstein