« first day (2517 days earlier)      last day (2485 days later) » 

12:16 AM
Ah
Yeah, nothing for me there.
Maybe nuke comments or move to chat once things die down
 
Bob
@JourneymanGeek I deleted the last two of my own, since they don't add much - but IMO the other comments are important, if only because they try to point out where the answer is wrong. Or at least where they think it's wrong.
Comments are long, but not very chatty and most definitely on-topic...
idk about move-to-chat (i.e. hiding) but deletion would suggest to future readers that the answer is right.
oh well
arguments about the correctness of an answer, especially a highly-voted answer... bleh
 
12:37 AM
yeah, for now though, I do nothing
and I'm not a fan of blindly deleting comments
 
12:49 AM
._.
WIndows update is updating windows live messenger on this old box
WHAAAAAT?
 
Bob
@JourneymanGeek Thought it might interest you, as a Software Engineer :P
 
er
NO ONE HAS EVER ACCUSED ME OF BEING A SOFTWARE ENGINEER!
 
Bob
@JourneymanGeek A certain movie might have :P
 
12:56 AM
I've gone from "<undef> to "technical support" to "Senior Desktop Engineer" to "IT Executive"
3
 
Bob
@JourneymanGeek See deleted :P
 
1:07 AM
oh, no secret about that
holy cow that has been a while
.... this system is windows 7 sp 0 ._.
 
Bob
1:29 AM
hm
someone suggest a really REALLY light window manager? :P
I mean. Literally all I want is to have resizable windows.
RDP into virt-manager: i.imgur.com/6nJ9tsP.png
But I can't resize cause no WM :P
@JourneymanGeek ...nothing new here
 
Some US senator a while back did some work on a similar and equally appalling bill
Huh, looks like I already complained about that
Apr 10 '16 at 0:43, by Ben N
If any of you live in the US, you might want to write your congressmen to oppose the Burr encryption bill
 
Bob
1:48 AM
I love how it went from 100% to 0% complete.
The best part? I have NFI how these updates started.
Last thing I did was ... restart a network service :S
 
2:20 AM
@Bob fvwm
 
Bob
@allquixotic I just installed openbox
but thanks, I might go fvwm next time :P
just needed the resize handles this time
hm
restarting Network Location Awareness is a DRIVER_IRQL_NOT_LESS_OR_EQUAL on tcpip.sys
Interesting
I blame KVM
 
2:56 AM
Good morning!
 
Bob
'lo
 
I set my server up! YAYAYAYAY
 
Bob
I feel like I missed something :P
 
Ended up using Abyss on Windows
 
Bob
Still confused.
 
3:09 AM
@Bob haha. I'll share link once I get home
The dynamic IP is bugging me though :/
 
@Rahul2001 eh, dynamic dns!
for doubleplus fun, get ipv6 working and proxy over cloudflare
 
Bob
@Rahul2001 Link? Now I'm even more confused.
I'm not entirely sure what you're doing :P
 
@Bob link=URL=way to access website=no domain yet=IP address
;p
@Bob don't worry, neither am I
 
Bob
@Rahul2001 Pretend I'm new here.
What server are you setting up? Why? o.O
hm
Note to self: don't try to install firewalls while connected over RDP
 
@Bob setting up a web/file server on a old laptop
Why? Because having hardware access to your own server is funfunfun
Plus, I should know this stuff anyway
 
Bob
3:22 AM
@Rahul2001 Not having hardware access is more fun :P
You learn all kinds of hackery to work around it
 
hm. I might have a livecd that's going to OOM kill stuff soon, yay
 
@Bob ah well :)
 
Bob
> The reason you wont find anything on opening ports is first because its an option only in paid versions and second in the paid version its a function that not supported either.
wat.
*uninstalls*
 
@Bob whatiszat?
 
Bob
@Rahul2001 zonealarm
I normally hate installing third-party 'security' crap
but in this case Windows Firewall wasn't quite flexible enough
only to find this is somehow worse
actually. given the track record of FUD security software, I shouldn't be that surprised
 
3:31 AM
@Bob me too!
 
4:01 AM
@varfirstName welcome
 
4:28 AM
hm
rsync will carry on from where it left off by default right?
 
Bob
uhhh
good question
 
4:40 AM
eh, transfer failed. Filestructure is odd.
I'll restart
 
Bob
5:24 AM
there we go
Not shown: 65533 filtered ports
PORT    STATE SERVICE
53/tcp  open  domain
443/tcp open  https

Nmap done: 1 IP address (1 host up) scanned in 2450.82 seconds
nice and locked down
 
Bob
5:35 AM
...Funnelcake?
 
the name for Ubuntu's distro of FF I think?
 
Bob
@allquixotic On Windows 10?
 
Bob
o.O
 
there's a SU question on that
1
A: Is Firefox Funnelcake here to stay?

JakeGouldI checked the link you provided and nowhere is there a mention of a “marketing” aspect of this. The most detailed and helpful answer from someone at Mozilla/Firefox states this is not marketing but rather a build based on where people download and acquire Firefox; whether it be from a CDN or mirr...

 
Bob
5:37 AM
@JourneymanGeek That's outdated.
 
> Apparently it’s a build the analytics team is using to figure out how people get to Firefox.
 
Ingredients: vegetable oil, leavened dough, and powdered sugar. Fry until golden-brown; sprinkle with sugar; let cool and serve.
they're comparable in content to powdered donuts
 
Jalebi, also known as zulbia, is a sweet popular in countries of South Asia, West Asia, North Africa, and East Africa. It is made by deep-frying maida flour (plain flour or all-purpose flour) batter in pretzel or circular shapes, which are then soaked in sugar syrup. They are particularly popular in the Indian subcontinent. The sweets are served warm or cold. They have a somewhat chewy texture with a crystallized sugary exterior coating. Citric acid or lime juice is sometimes added to the syrup, as well as rose water. Jalebi is eaten with curd or rabri (North India) along with optional other flavours...
there's an indian version ;p
 
tho these are soaked in syrop
 
Bob
>
Funnelcakes 110/111/112/113 Tour Notification, Automigration
That's the one.
> Variations:
110 - Control, vanilla Firefox 53 with just the configs to denote the funnelcake
111 - Streamlined stub installer (bugs 1333873, 1350405) + Automigration (bugs 1271775, 1271799, + fixes under 1332225) + tour notifications variant A
112 - Streamlined stub installer (bugs 1333873, 1350405) + Automigration (bugs 1271775, 1271799, + fixes under 1332225) + tour notifications variant B
113 - Streamlined stub installer (bugs 1333873, 1350405) + without automigration + tour notifications variant A
@JourneymanGeek I'm also wondering why that question is closed... this isn't opinion-based!
 
6:00 AM
@Bob IMO it is, so it is.
 
hm
I have a 12 year old server under my desk
 
Bob
@allquixotic o.O
 
@JourneymanGeek all variations on a theme: use frying to coat oil (fat) onto a starch (flour) and put sugar on top
@Bob I was kidding
 
Bob
ah
I'm trying to decide if I should be updating my lxd version...
 
6:04 AM
or on this case drizzle stream of batter into hot oil. then ensugarate
 
##define ensugarate
 
ah. Clever. I had a file transfer ongoing which was taking ages. Went for lunch. Done. A watched rsync never seems to finish ;)
@allquixotic to cover in sugary substance ;p
 
Bob
there's two trivial patches but rebuilding the PPA packages for Debian is such a chore
 
Bob
6:19 AM
huh, that was easier than I'd expected
 
6:55 AM
@Rahul2001 you're just filtering out "etc", right?
btw, nice uptime of 108 days 05:43:36.
 
@satibel wot
u wot
 
@Rahul2001 U won't
 
@satibel wotdidudonow
 
@Rahul2001 something, I wanna play a bit more before you block that too ^^
 
@satibel Don't nuke anything or view any passwords, k?
 
7:07 AM
@Rahul2001 no, I already know that the root password is toor anyways :p
 
hah! The jokes on you! We did a caesar cypher with the english alphabet in alphabetical order
 
7:22 AM
@satibel I see! messing with //proc -_-
 
@Rahul2001 yup :p
 
@satibel Meh. Which other directories do I need to filter out?
@satibel Okay, try now?
 
@Rahul2001 all except /home I think.
 
Huh
 
and if /home has a symlink to somewhere else, you're screwed.
uh? the file has grown.
 
7:29 AM
@satibel huh?
grown?
 
proxy.php on line 52
it was 42 before.
 
@satibel yeah, I just added some code
 
That woman on a airflight was attractive and she seemed to look at me at times... But darn it! If I wasn't such a shy person I would find a way to approach her.
 
@Boris_yo aw :/
@satibel I just blocked literally everything
 
@Rahul2001 Being at loss and speechless prevents individual to get creative and approach person who could be potential life partner.
But then we are in different countries so can relationship be built that way?
 
7:39 AM
@Boris_yo Heyyyy gurl, you look damn fine, what's yo numba?
 
@satibel That's too direct and sounds like sexual harrassment?
 
It doesn't sound that way
it is.
 
Probably not sexual harassment, but harassment none the less
 
@Rahul2001 My friend was in Nepal.
 
Coool
 
7:42 AM
There is also mount Kailash somewhere?
Many have hard time to go around it. Sometimes it's not as hard but sometimes people feel like they are almost dying.
 
@Boris_yo there is, indeed
 
It's also part of people's path who do pilgrimage. They say once you are there, you change, your goals change and you return as different person.
 
@satibel Check it out!
Error now doesn't disclose entire path
I just wrote this code:
error_reporting(0);

$value = error_get_last()['type'];
if ($value !== 0){
echo '<br /><b>Custom Warning Message!</b><br />';
$value=0;
}
 
Bob
 
@Bob I think everything cancels out in that
Also, upper limit hasn't been specified?
 
7:51 AM
@Bob the correct answer is "Fuck you."
it proves that you're not a robot.
 
Bob
@Rahul2001 Congrats, you know more calculus than me.
I forgot all of it about 10 seconds after my last exam :P
 
sameeeee
 
@Bob Well, I'm learning it nowadays ;p
 
Bob
@Rahul2001 send me your original script and I'll show you how you secure it properly :P
 
@Bob Sure, one sec ;p
 
Bob
7:53 AM
might take a bit though, I'm about to head home
 
@Bob I said to my teacher "anyways, I don't need to come to class, I'll read the course 1 hour before the exam and get 14/20" ... I got 14.5
 
Bob
@satibel ...guess how my uni career went
 
I spot @Mario!
 
@Bob drink, party, drink, party ... oh fuck exam's tomorrow ?
 
Bob
@satibel minus the drinking and partying, yes
 
7:55 AM
My, that's a grumpy gravatar ;P
 
@Bob s/drink, party/play, waste time on the internet/
 
@Bob y u no hab fun?
 
Bob
@satibel much better
@Rahul2001 what, this isn't fun?
:(
@Rahul2001 ok, got php installed, send it over? :P
 
no but dis is geek phun. regular ppl phun is important too
@Bob one sec, trying to recall github password ;P
 
8:01 AM
Got it?
 
Bob
@Rahul2001 yup
 
@Rahul2001 got it. Initializing white box test...
 
Bob
> Warning: file_get_contents: failed to open stream: No such file or directory in proxy.php on line 58
curious
Mimicing a real error? :P
 
@Bob yup
because the real error shows where the file is.
(thanks, me)
 
Bob
@Rahul2001 fix your indentation pls
 
8:05 AM
@Bob Yeah, sorry. FTP wasn't working, so I was using a web-based file editor instead of Notepad++... hides
 
@Bob I may have a work DOID
 
Bob
lol
I'm trying to get @Rahul2001's script working in the first place
maybe it doesn't work on php7?
 
@Bob Pretty sure it does
What error are you getting?
 
Bob
@Rahul2001 nothing. one sec
 
(remove error_reporting(0);)
 
Bob
8:14 AM
@Rahul2001 first thing I did :P
 
And try proxy.php?url=http://rahul.tech/x
 
Bob
hmmmm
I bet my reverse proxy setup isn't passing the query string correctly
 
@Rahul2001 [error] boring
 
YOU FOOL!
 
Bob
there, that works
 
Bob
@Rahul2001 Yea... hm.
 
Although the [REDACTED] thing is
 
Bob
fixed
 
@Bob Ah, yeah
 
Bob
@Rahul2001 interesting that the fake error always appears :P
try.vulpin.com/lxd/rahul/proxy.php?url=/etc/passwd cool, removed your weird protection
now let's do it right :P
 
8:24 AM
@Bob It doesn't on my server :/
@Bob :D
 
Bob
@Rahul2001 heading home, maybe later. but I smell this is going to be troublesome... selinux don't mesh well with ubuntu
 
@Bob okayy
 
Bob
I should just use my debian server :\
 
crazy morning so far!
but hello!
 
Bob
hi
 
8:30 AM
@Burgi hm?
@Bob I'll host it on my local server, if you wish, and give you access
 
Bob
@Rahul2001 naw, I've got plenty of servers
also the stuff I'm doing is potentially kernel-breaking :P
 
well I got bored
and made this:
 
@Avery whatzzat?
 
basically a VM that I can vnc into through a webserver and login with a yubikey
 
@Avery Cool!
 
Bob
8:43 AM
@Avery sooooo. guac + pam
oh, wait no
 
nope
ubuntu server (1604) + lxde + lightdm with the multi user x vnc thingy enabled + tigervnc + novnc
and yubico-otp
@Rahul2001 check telegram
 
Bob
@Avery yea I thought you meant connecting via web browser at first
 
 
1 hour later…
10:02 AM
@Rahul2001 funny, permission denied is still shown as no such file or directory.
 
@satibel ah yeah
I just put a single error message for everything
 
though, it's weird that I can't seem to access to /var/log on your server.
 
Bob
whoops, had to nuke and recreate the server
ugh
 
@satibel why is that weird?
 
@Rahul2001 I can on mine.
can you give me the result of ls -l /var/log/ ?
 
10:08 AM
@satibel I have no shell access
 
@Rahul2001 <?php echo shell_exec('ls -l /var/log/'); ?>
;p
 
@satibel Doesn't work
 
@Rahul2001 why not?
 
shell_exec is disabled by hosting provider
 
shell exec is disabled?
 
10:12 AM
@satibel I have a copy of the proxy on local server, want URL?
 
@Rahul2001 yep
 
@satibel one sec
 
got it
 
@satibel one sec
There appears to be a bug
 
seems so.
 
10:15 AM
@satibel fixed
 
thanks
 
@satibel want shell access?
 
@Rahul2001 yes, I'll only do ls ^^
 
Okay, how do I modify the PATH environment variable for applications running as system processes? (cc @BenN)
 
windows?
 
10:19 AM
@satibel yeah
 
doesn't changing the global PATH work?
 
@satibel Apparently not
 
batch or gui is ok?
 
@satibel Yeah
 
system properties -> advanced system properties -> environement variables -> system variables
 
10:26 AM
@satibel One sec, looks like I need to restart server
 
in batch SETX -m path "%path%;c:\scripts"
should do the trick.
for once I didn't google it.
 
@satibel bloody hell windows started updating
This is precisely why I didn't want to use windows 10
 
XD
 
@Mokubai DUDE
YOU CONVINCED ME TO USE WINDOWS 10, said updates can be delayed
 
@Rahul2001 install gentoo.
 
10:31 AM
Tell me how
 
go to settings
search updates
enable defer updates.
 
I have it enabled, it's called something else I think
Wait what why is the update taking so long
6%!?
 
Bob
@Rahul2001 I give up :P
 
Are you kidding me?
 
Bob
bloody apparmor won't play nice
 
10:33 AM
Lol, just use my server
I'll give you access in a second. As soon as the update gets over
@Bob SSH server recommendations for Windows?
 
Bob
@Rahul2001 N/A
I've tried that.
Noooooooope.
though apparently mobaxterm includes one, which might not be quite as terrible as the others
 
@Bob Heh.
 
Bob
anyway. I think imma switch to centos
actually. anything not ubuntu would probably work fine
go die, ubuntu
 
yup
arch ftw.
 
10:37 AM
@Avery TCL FTW.
 
@Rahul2001 I did say Win10 Pro... I'm sure I did
Home... Not so much.
 
@satibel hm?
@Rahul2001 message me
oh
 
@Avery tiny core linux.
 
yeah I know
 
@Mokubai meh. Can nothing be done in home?
Iirc @BenN had a registry thingy?
 
10:39 AM
@Rahul2001 uninstall windows, install linux or bsd.
 
@Bob alternative?
@satibel nope.
 
@Rahul2001 sent fix over telegram.
 
@Rahul2001 think you can murder Windows update completely, sure we have a few q's about it, but nothing as easy as a "delay updates" button like you get in Pro.
 
https://hackchal.cf/proxy.php?url=./proxylog.txt
https://hackchal.cf/proxy.php?url=/../../log/syslog (POC)
https://hackchal.cf/proxy.php?url=/../../www/../../var/log/syslog (POC)
@Rahul2001
 
Bob
@Rahul2001 stop trying to manually blacklist dirs. It won't work.
You need MAC.
 
10:44 AM
MAC?
 
Bob
In computer security, mandatory access control (MAC) refers to a type of access control by which the operating system constrains the ability of a subject or initiator to access or generally perform some sort of operation on an object or target. In practice, a subject is usually a process or thread; objects are constructs such as files, directories, TCP/UDP ports, shared memory segments, IO devices, etc. Subjects and objects each have a set of security attributes. Whenever a subject attempts to access an object, an authorization rule enforced by the operating system kernel examines these security...
SELinux, AppArmor, etc..
 
@Bob oh, that.
 
@Bob But it is working :)
(yes, I know, terrible design)
 
@satibel I set the log up to see what you were up to, will disable ;)
What's wrong with the last two?
 
10:49 AM
@Rahul2001 I can get to / and to /var.
syslog being inaccessible 'cause non-root.
 
Bob
@Rahul2001 It's not working.
 
and me being too lazy to exploit further.
 
Bob
These are trivial ways around it.
I bet there's funny encoding issues that can be exploited to bypass your filtering attempts in more direct ways.
 
:(
OKay, you got me convinced
 
Bob
10:51 AM
If you really don't want to set up MAC properly, at least resolve the full path before trying to retrieve it.
That's not perfect, but it's miles better than what you're doing now.
 
OH MY GOD
I HAD A SOLUTION BUILT LAST YEAR
I TOTALLY FORGOT
shoots self in head
 
You just had a fake proxy, right?
 
nonononono
 
you could also just simulate the bug without actually using file_get_contents().
 
I didn't implement it, because I built it late
##trippleheaddesk
 
10:55 AM
@Rahul2001 That didn't make much sense. Use the !!/help command to learn more.
 
whatever
 
##g2g nom nom
 
@satibel That didn't make much sense. Use the !!/help command to learn more.
 
@satibel gossipmonger
@Bob Found last years script
Wait, I'll share it with you
 
Bob
@Rahul2001 hm?
 
10:59 AM
4 mins ago, by Rahul2001
I HAD A SOLUTION BUILT LAST YEAR
 

« first day (2517 days earlier)      last day (2485 days later) »