« first day (2 days earlier)      last day (121 days later) » 

Anonymous
11:02 PM
Both are worse
 
I mean pyExecJS
 
Anonymous
I know. PyExecJS < node.js < PyExecJS.
 
Anonymous
JS is just bad
 
Oh haha
problem is none of these js langs have safe mode
im sure theyre riddled with security holes too
 
Anonymous
Probably
 
Anonymous
11:09 PM
XSS woo
 
I think we should steer clear of js things for now
 
Anonymous
Seriously technically has a security hole, in that it uses Python 2's input(), which is eval(raw_input())
 
Anonymous
But there's not much to abuse there
 
I was going to include stuck but it does that too
 
Anonymous
In any scenario where you could do eval evilness with input in Seriously, you can probably also do it a hundred other ways
 
11:11 PM
you should replace it with ast.literal_eval(raw_input
!eval seriously "," "print('baaad')"
 
baaad
None
 
tsk tsk
dennis wont be happy
!eval seriously "," "os.system('ls')"
 
@quartata os.system('ls')
 
?
oh der
!eval seriously "," "import os;os.system('ls')"
 
Bot restarted after crash.
 
11:15 PM
oops
 
Anonymous
!eval seriously "," "__import__('os').system('ls')"
 
code
code-final
input
pid
0
 
Anonymous
Yeah I should change that to ast.literal_eval pronto
 
i wonder what dennis has in his home directory
 
Anonymous
!eval seriously "," "__import__('os').system('ls ~')"
 
11:21 PM
Bot restarted after crash.
 
anyways should probably let him know
 
Anonymous
I just pushed the fix
 
Anonymous
@Dennis You really want to pull Seriously. I fixed a gaping security hole with inputs.
 
Unicode works? :D
 
Anonymous
Yep, I did some magic with requests
 
11:26 PM
\o/ Hooray!
 
Also AST has been done
 
Push to github, copy running over to stable v. 9, copy edit_this to running. ;P
 
Our code no longer looks like spaghetti
 
\o/
Next step: 19th Byte.
 
Anonymous
No
 
Anonymous
11:30 PM
We aren't bringing it in the 19th byte because the mods are very opposed to having bots in that room
 
Anonymous
It can live in here for now
 
Ok, but we've seriously chat-proofed the bot. The only two commands are help and eval.
Plus, it'd be super helpful...
 
The mods didnt want thatha in there because it is spammy. i think they will have a different reaction to this
 
Anonymous
Maybe. Until we get explicit permission for Data to come in 19th, though, it's staying in here.
 
many main site rooms have bots (whiteboard, 2nd monitor)
@Mego of course
 
11:39 PM
^
Not that we can't ask.
 
11:54 PM
@AlexA. Thoughts?
!listcommands
 
Commands:
module, stop, disable, enable, ban, unban, delete, alive, utc, listcommands, help, eval
 
@VoteToClose wat
 
Read last 10 messages or so.
 
Anonymous
^ what I expected :P
 
11:56 PM
Dev stuff would still be here, but the evaller in 19th.
 
Anonymous
I don't really see a reason to bring it in 19th
 
^
 
Anonymous
There's nothing stopping people from joining this room if they wanna use the bot
 
Aw. But we reduced spamability, and it'd come in handy for quick testing code.
 
You could just as easily test said code in here...
 
11:57 PM
But they might not know about this room.
 
Anonymous
If they can't be bothered to click "site rooms", there's not much we can do for them
 
haha
 
Eh. True.
Alrighty then.
 
You could just make a TNB announcement like, "YO! Wanna eval all the shit? Come on down to PPCG Code Snippet Chat Bot, the coolest damn room in town! We got Data from Staaaaaar Treeeeeeeeek"
2
That wording should appeal to the hip, young crowd.
 
^ I would quote that, but mobile.
 

« first day (2 days earlier)      last day (121 days later) »