Root Access

Journeyman Geek

12:32 AM

atlasobscura.com/articles/olivia-doll-predatory-journals

yay

I was supposed to go in early to help set up for a class

class got cancelled

Gypsy Spellweaver

12:57 AM

@JourneymanGeek Now you can chase down the hidden wifi APs.

Journeyman Geek

naw, I just didn't go in

those hours are not 'on the clock' so to speak

Bob

For those concerned about Napoleonic bus stations: busses also meant kisses. — TimLymington Nov 15 '11 at 22:36

lol. Napoleonic bus stations :D

getting back into more than one answer a month :P

@JourneymanGeek you missed a perfect opportunity to image-macro that answer :P

Journeyman Geek

@Bob I SERIOUSLY CONSIDERED IT.

But apparently people hate it.

Bob

lol

it's not really nice to see at work, true

@JourneymanGeek also. backup script works :)

so... I tend to use b2 on temporary systems I don't want to leave my key on. so I want a new key on those. but creating a new key auto-replaces the old one. that's why I'm doing that git thing :P

Journeyman Geek

1:14 AM

@Bob on one hand, it feels mean here

On the other hand, this is my best chance for a reversal badge

Bob

I can create a new key, push it to git, and all my backup scripts across potentially multiple systems will keep working

Journeyman Geek

lol

sigh time to leave for work. Again. Soon.

Bob

2:15 AM

Gypsy Spellweaver

2:25 AM

@Bob Done

Bob

lol

@JourneymanGeek community.online.net/t/…

github.com/systemd/systemd/issues/2582

the responses... *facepalm*

Bob

2:52 AM

Warning: Journal has been rotated since unit was started. Log output is incomplete or unavailable.

Active: failed (Result: exit-code) since Mon 2016-03-07 02:26:38 EST; 1 years 2 months ago

...has been rotated? you don't say...

Gypsy Spellweaver

@Bob Must be a busy system to rotate the log file that often. :/

Bob

@GypsySpellweaver very busy, of course

Seth

@BenN So I caught it. This is what I got:

I think it was officebackgroundtaskhandler. I went to its location and ran it and a cmd window popped up and closed real fast

I think I will run a virus scan just in case though.

Journeyman Geek

hm

For some reason, the automatic channel hopping feature in our

'better' APs seem to have been turned off

and of course. None of this is bloody documented

Bob

3:14 AM

hm

bwDraco

Macro virus?

Bob

@bwDraco but macs don't get viruses!

@JourneymanGeek I was going to name a server Mnemosyne but I don't think I'd remember it, oddly enough :P

Bob

4:34 AM

!!tumbleweed

Boris_yo

Logitech Performance MX for $29.99 (excluding $5 shipping) sounds not expensive?

Bob

@Boris_yo sounds like a nice price but idk what the normal price is

Bob

4:52 AM

@JourneymanGeek oh boy. discourse.tt-rss.org/t/our-little-comminuity-going-forward/18/…

Rahul2001

6:23 AM

@Bob REMINDER! hackchal.cf

Bob

@Rahul2001 but... but... I'm installing lamps :(

lamp lemp whatever they call it these days

@Rahul2001 site's SFW?

@Rahul2001 "which I use to circumvent the Facebook block at school" you might not wanna advertise that

Rahul2001

@Bob heh, just to make the challenge more realistic. It doesn't work anyway, but I'll change it...

Bob

6:56 AM

hm. not getting anywhere :P

I need to take off my common-vulns hat and put on my guess-what-rahul's-thinking hat

jokerdino

where do I get that hat?

Bob

idk, wish I knew

I'm also wondering if <code>[error]</code> is intentional... it probably is

though it's also rather weird (cc @Rahul2001)

satibel

@Bob yeah, the challenges are pretty sensitive.

Bob

think I'm just not feeling it today

stuck at the first step lol

hmm.

evidently every path is being passed through some script

satibel

do you want a hint?

Bob

7:09 AM

eh. sure, not worth wasting time over :P

<html><head><META HTTP-EQUIV="refresh" CONTENT="0;URL=/cgi-sys/defaultwebpage.cgi"></head><body></body></html>

iiiiiiiiiiiiiiinteresting

though I suspect I've broken out of the challenge sandbox entirely by accident :P

satibel

does defaultwebpage.cgi containg unchecked grep calls? :p

Bob

nah, cpanel thing

Rahul2001

@Bob what page is that on?

C'mon, you've solved the first challenge before, it was there last year too...

Bob

@Rahul2001 I have a horrible memory :P

Rahul2001

@Bob it is

Bob

7:20 AM

@Rahul2001 hint? :P

Rahul2001

@Bob Input may not be sanitized, allowing the user to view files on the server itself

Bob

@Rahul2001 you'd think so ... but I tried that. probably missing something obvious.

I mean. It's like the first thing to try.

Rahul2001

@Bob ?url=../<dir>/<file>

satibel

missing that some work, some don't.

Bob

@Rahul2001 I... tried that. I think.

Rahul2001

7:23 AM

@Bob Try again :P

Bob

...nope

wait

Rahul2001

@Bob read the challenge carefully?

Bob

fail. I think I tried literally everything possible except that

that's only half of them

Rahul2001

lol :P

You were so close! In one place you forgot the .., in another, the url

Bob

mhm

satibel

7:30 AM

@Rahul2001 you probably should, for this challenge, put apache in a chroot read only sandbox (on a subdomain) and let people have fun with the "feature".

Rahul2001

@satibel hm, yeah. Tried last year but couldn't get the sandbox to work... Let me see.

Bob

@Rahul2001 lxd init ... lxc launch ubuntu:17.04 myserver

@Rahul2001 I'm assuming replies to the email are unnecessary, and if there are any hidden parts in the source then MS stripped it out.

Journeyman Geek

@Bob lol yeah I remember that

Bob

7:45 AM

> Cool! You reached here! Come back tomorrow!

Journeyman Geek

Hm. Apparently this place has a rediculously high staff turnover rate.