I've been using
weechat to connect to IRC since late 2016 and one
of its killer feature is relays. They let use other frontends like the Weechat
Android app or the amazing Glowing Bear (packaged in
Debian Bullseye by yours truly).
Sadly, relays also used to be somewhat of a security risk: anyone with access to
a relay1 could run scripts on the machine running
weechat by using
commands such as
/script. Not great.
Sadly, this default didn't make in into Bullseye. If you are
weechat and are using the relays feature, after upgrading to
Bullseye, I would recommend you run the following commands in the
For example, someone steals your phone and connects to IRC via the Weechat app... ↩