Add USER-ID to Telegram Notification Agent


Recommended Posts

Hello, please consider adding USER ID field to Telegram agent notifier. By that the agent sends messages only to specified user. Group ID would be handy too. Both features are supported by telegram and people can simply get their IDs by chatting with telegram's IDBot by ty typing /getid. As far as I am aware of its a matter of adding one line of code to the API.

 

This not really handy feature request but more of security and privacy feature request. The problem of telegram agent as it is now is that anyone can find your bot and once they send a message to it Unraid will send them all notifications too. So basically if 100 people finds my bot and says "hi or whatever to it" unraid notifies me and all other 100 people about for example "parity check started". I might be too much worried about that but I can really easily imagine how hacker could use these informations to determinate scheduled parity checks etc. etc.

 

Down the line maybe adding more bots for Mattermost, MS Teams, Discord etc etc. would be great too.

 

Edited by Korshakov
Adding more info
Link to comment
  • 1 year later...

IMO this is not a feature request but a serious security issue which should be fixed ASAP!

Basically (If I understood correctly) Unraid is broadcasting potential sensitive (depending on the notifications used) information to anyone who wants to receive it. 

This feature should not be used until either user id or chat id can be set to restrict access.

Link to comment

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.