canary application

[adison]

hi.
i would like you guys to maybe develop an application that can work with canary tokens.
here's an example, i'll make a web bug token using https://canarytokens.org .
when someone clicks on that canary token, it will show an alert something may've been compromised.
its kinda like a security tool.
if you wonna know what canary is, check out these links.
https://canary.tools
https://canarytokens.org
https://opencanary.readthedocs.org

[adison]

@girish i would also incurrage you to talk to your team about this. me and my IT department kinda need this

[timconsidine]

@adison said in canary application:

my IT department kinda need this

and your IT department is going to pay for it ?

[timconsidine]

@adison said in canary application:

develop an application that can work with canary tokens

and the prize for the best functional specification goes to ...

[adison]

@timconsidine uh, what? what is that supposed to mean?

[timconsidine]

it means that the request is too vague

[adison]

@timconsidine o.
appologies, i'm bad at explaining things.
basically, the application will ask for a web bug URL.
then, a redirect made, here sis an example, if i wanted to make a honeypot app that seams to contain social security numbers, socialsecurity.blindsoft.net
that redirect to the social security numbers honeypot.
the honeypot URLs look like this.
examplerandomlettersandnumbers.canarytokens.com

[marcusquinn]

@timconsidine I believe https://canarytokens.org is self-hostable, so you don't have to give them your email address for an alert.

• https://github.com/thinkst/canarytokens
• https://github.com/thinkst/canarytokens-docker

Might be smart to have this, given the security considerations of having something like openclaw (clawdbot/moltbot) running.