
Research
wget to Wipeout: Malicious Go Modules Fetch Destructive Payload
Socket's research uncovers three dangerous Go modules that contain obfuscated disk-wiping malware, threatening complete data loss.
This is yet another common Python wrapper for Alice and Sber Salut skills and bots in Telegram*, VK, and Facebook Messenger.
Currently, it provides:
DialogConnector
,
for which you can create or customize adapters.BaseDialogManager
and its flavors, including:
BaseStorage
and its flavors (specifially, MongoBasedStorage
)This package may be installed with pip install dialogic
.
To create your own bot, you need either to write a config for an existing dialog manager,
or to inherit your own dialog manager from BaseDialogManager
.
The components of dialogic
may be combined into a working app as follows:
import dialogic
class EchoDialogManager(dialogic.dialog_manager.BaseDialogManager):
def respond(self, ctx: dialogic.dialog.Context):
return dialogic.dialog.Response(text=ctx.message_text)
connector = dialogic.dialog_connector.DialogConnector(
dialog_manager=EchoDialogManager(),
storage=dialogic.session_storage.BaseStorage()
)
server = dialogic.flask_server.FlaskServer(connector=connector)
if __name__ == '__main__':
server.parse_args_and_run()
Now, if your app is hosted on address {BASE_URL}
,
then webhooks for Alice, Salut and Facebook will be available,
respectively, at {BASE_URL}/alice/
, {BASE_URL}/salut/
, and {BASE_URL}/fb/
(and you can reconfigure it, if you want).
The webhook for Telegram will be set automatically, if you set the TOKEN
environment variable to the token
given to you by the @BotFather.
If you want to test your app locally, you can run it with command line args:
--cli
- to read and type messages in command line, completely offline--poll
- to run a Telegram bot locally, in long polling mode (in some countries, you need a VPN to do this)--ngrok
- to run the bot locally, using the ngrok tool**
to create a tunnel from your machine into the internet. This is probably the simplest way to test Alice skills
without deploying them anywhere .The examples directory contains more detailed examples of how to create dialogs and serve the bot.
If you have questions, you can ask them in the Telegram chat Dialogic.Digital support.
* The Telegram wrapper is based on the pyTelegramBotAPI package.
** The ngrok connector was taken from the flask-ngrok library. It will be refactored to a dependency, as soon as the library is updated on PyPI.
FAQs
Yet another common wrapper for Alice/Salut skills and Facebook/Telegram/VK bots
We found that dialogic demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket's research uncovers three dangerous Go modules that contain obfuscated disk-wiping malware, threatening complete data loss.
Research
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.
Product
We redesigned Socket's first logged-in page to display rich and insightful visualizations about your repositories protected against supply chain threats.