
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
IRC Bouncer with no registration/setup required written in nodejs with support for separate client buffers and always-on.
Bouncers are hard to configure. I felt that we needed an easier one in this world. This requires nearly no configuration to connect! Just set a password! Join #jbnc on freenode to learn more!
Currently usable, but in beta test. Please report bugs by creating an issue on github. I'm using it as my daily driver.
Works on:
git clone https://github.com/realrasengan/jbnc
cp example.conf jbnc.conf
<edit> jbnc.conf
Values:
mode: gateway|bouncer
bouncerPassword: leave blank for no password
serverPort: if gateway mode, else ignored
server: if gateway mode, else eignored
webircPassword: if its there, it will try webirc authentication
bouncerPort: port for bnc,
bouncerAdmin: admin pass
node bouncer.js &
To use another config file:
node bouncer.js somefile.conf &
Sometimes stunnel crashes, so in order to keep things running 24/7/365, there's a great app called immortal.
The immortaldir files are located in this repo (stunnel.yml and jbnc.yml).
Note: To use immortal on ubuntu, after following the steps on the page, please be sure to systemctl enable immortaldir as well as start.
sudo apt install stunnel
Get an SSL cert from Let's Encrypt
Edit /etc/stunnel/stunnel.conf
cert = /etc/stunnel/fullchain.pem
key = /etc/stunnel/privkey.pem
client = no
[jbnc]
accept = 9998
connect = 8888
You just need to set your password in your jbnc config and then setup your IRC client: Just put this in your password:
YourServerPassword||ConnectionPasswordGoesHere/ServerGoesHere
To save clientbuffers for your client
YourServerPassword||ConnectionPasswordGoesHere/ServerGoesHere/deviceid
Here is an example for a desktop and mobile setup with a password protected server (password: dragon) connecting to DALnet:
dragon||AJFiej2fn2345/irc.dal.net:6667/desktop
dragon||AJFiej2fn2345/irc.dal.net:6667/mobile
Use "+port" to do SSL. For example:
dragon||Ajdfklsjfa/irc.dal.net:+6697/mobile
To get a list of commands:
/jbnc
Enable gateway mode and run on the same box as your IRCd to instantly give all your users always on connectivity and seamless synchronization across all devices.
Edit the config file and use gateway mode instead of bouncer.
Run
If you are running jbnc on the same machine as your irc server, let's say irc.example.com, then the only difference would be that your users would need to:
Use a different port (8888 default for plaintext and 9998 default for SSL)
Enter a password in their IRC client. They make up the password and use it to identify to their connection.
SomePassword/buffername
An example buffername could be 'desktop' and on the mobile phone could be 'mobile.'
Beta Testing
(c) 2020 Andrew Lee andrew@imperialfamily.com All Rights Reserved.
MIT LICENSED
FAQs
IRC Bouncer with no registration/setup required written in nodejs with support for separate client buffers and always-on.
We found that jbnc demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.