The DMZ

Rоry McCune

15:00

@RoryAlsop but it's totally safer and better and JavaScript runtimes are all great, and I'm sure it'll be easy to debug stuff that was written in c++ and then compiled to JavaScript!

RoraΖ

@RоryMcCune Compile... you keep using this word. I don't think it means what you think it means...

Thomas Pornin

Anyway: bellard.org/jslinux/tech.html

Simon

WHY ARE PEOPLE SO OBSESSED WITH JS?

LET IT LIVE INSIDE BROWSERS ONLY PLS

Thomas Pornin

Since you can emulate a full PC in Javascript, you can technically run any compiled language in Javascript.

Journeyman Geek

cause they really love turning bolts with hammers?

RoraΖ

15:01

@ThomasPornin The horror... the horror

Simon

I swear I'm gonna start working on PHP OS if no one stops with this JS madness.

2

Rоry McCune

@RoraΖ hey that's what they're calling it... may not fit in with your view of what a compiler is, but doesn't seem to be stopping them :)

Mark Buffalo

@Matthew Dude, now I want to write a doom-like game

Matthew

@ThomasPornin And it means you can have front end developers do all your coding, yes?

RoraΖ

I can also rape, murder, and pillage. Doesn't mean I should write a Linux kernel in Javascript.

Simon

15:03

wot: sourceforge.net/projects/php-os

I'm not responsible if anyone runs this.

Matthew

@RoraΖ No, you don't write it in Javascript! That would be insane! You write it in a different language, and compile to Javascript... Much better!

TildalWave

who's the douche that flagged @MarkBuffalo's canonical question about deobfuscation as unclear?

RoraΖ

@Matthew LOL

Damn you Matthew... damn you

Simon

@TildalWave It wasn't me but I wish it was me.

Ohnana

@TildalWave RUDE

Mark Buffalo

15:05

@TildalWave Dunno. Feel free to edit it to make it more clear, though. :p

RoraΖ

@TildalWave Link?

Mark Buffalo

35

Q: I found unknown PHP code on my server. How do I de-obfuscate the code?

We've been getting a lot of noise regarding hacked PHP files here, and it's taking a lot of time to answer these questions. In many cases, they are off-topic. We've had a discussion about this on Information Security Meta, and many people want these posts to stay. However, nearly every single p...

Simon

flegged

Mark Buffalo

before you say "luls unclear/too broad," I was asked to make this!

TildalWave

@MarkBuffalo How? It's intentionally "broad" to cover most of the same questions we're getting because they're not off-topic but they do get terribly repetitive

Ohnana

15:07

accept your answer goofball

i wanna start muh dupe hamma

Mark Buffalo

@TildalWave Yep

Iszi

@RоryMcCune But doesn't that just cover about half the Nmap feature list?

Mark Buffalo

@Ohnana You mean you can't start the dupe hammer unless the answer is accepted?

Ohnana

yeah i think it has to have an accepted answer

makes things kinda annoying

Rоry McCune

@Iszi well some things are quite specific but then they do provide a scripting env for even more specific stuff...

Mark Buffalo

15:08

@Ohnana Ah, well I at least want to give others time to add additional information

diagprov

@ThomasPornin try this to see what I mean. (gist.github.com/diagprov/d408f07fbdbf5061bc4f). It's only compile-time, the template basically specializes automatically on each buffer declared.

Ohnana

@MarkBuffalo accepting isn't a lockout

it just signified to others that this is the answer that worked for you

Mark Buffalo

But accepting an answer discourages adding more answers, and we could all learn something

diagprov

I called it ovid_memmove because I know how much @AviD likes memcpy.

TildalWave

@MarkBuffalo wanna add some links to online decoding / deobfuscation tools?

Mark Buffalo

15:12

@TildalWave I did?

TildalWave

oh

Mark Buffalo

"Common tools that aid in deobfuscation"

Lighty

@MarkBuffalo bleach

TildalWave

@MarkBuffalo ddecode.com/hexdecoder seems to do all at once for decoding

Lighty

@MarkBuffalo Drainage Cleaner

Mark Buffalo

15:13

@TildalWave I used that site a few times. It didn't work for the majority of things I tried

I had to do a lot of extra work, all of which has been cut down by UnPHP

TildalWave

OK I'll stop referring to stoopid google then :)

Mark Buffalo

So I listed the tools which gave me the largest success rate combined

no, it's fine

If you have other ideas, add to the question

TildalWave

neah TL;DR :)

I just whip up that line of JS when I need it

Mark Buffalo

What line of JS?

Simon

@diagprov It is recognized as bad luck to name anything after him but I dig the "ovid" part a lot.

TildalWave

15:16

magic :)

Thomas Pornin

@diagprov You need more than that, because in many cases of memcpy() or memmove(), both the source and destination are within buffers, but not necessarily at the start.

Ultimately you end up with "safe" functions that take base and offset parameters instead of a single pointer value base+offset.

At that point you may as well be using C# or Java.

TildalWave

@MarkBuffalo like so jsfiddle.net/bhLcze00

took me like 20 seconds

Mark Buffalo

Yeah, that can be done, but won't work against some strings

Simon

@ThomasPornin Is the low-levelness of C still a good argument to use the language nowadays?

Thomas Pornin

@Simon I'd say that it is still a good argument not to use the language nowadays.

Simon

15:22

Damn.

Thomas Pornin

In older times you would use C as a kind of "portable assembly" in situations that require a lot of speed but still be somewhat portable across architectures.

Speed is overrated.

diagprov

@ThomasPornin that's true, if you want within buffers for the destination. For the source, not a problem.

Simon

@ThomasPornin So what would you use to be port-friendly nowadays?

Thomas Pornin

In 99.9% of cases where a developer uses C "for performance", there is not an actual performance problem that C solves.

Rоry McCune

@Simon go!

Thomas Pornin

15:24

@Simon Now that's the tricky point. You need to use C for portability, if you target systems that are not all PC/tablets/smartphones.

If you just want to support big platforms, then a not-too-bad choice would be C#.

With Mono, it runs decently on Linux/OS X, and it is native to Windows.

Rоry McCune

@ThomasPornin also .NetCore will run natively on Linux/OSX soon

Thomas Pornin

@RоryMcCune Ah ! "soon".

Mark Buffalo

@RоryMcCune Woot!

Simon

@ThomasPornin Interesting.

Thomas Pornin

@diagprov You need to check overflows for the source too, because read overflows can be a problem too (e.g. Heartbleed).

Mark Buffalo

15:26

I love C#

Java is right up there too

Thomas Pornin

I use C#

Rоry McCune

@ThomasPornin RTM Q1 2016 according to github.com/dotnet/core/blob/master/roadmap.md

Thomas Pornin

I don't fall in love with programming languages.

Matthew

@Simon Alternatively you can use Javascript. @RoraΖ will help if you need it

Mark Buffalo

@ThomasPornin I do. caresses C# ever-so-gently

But I can adapt to new ones quickly

Simon

15:27

@ThomasPornin But the implementation of SSL that you were working on was C, right?

@Matthew o pls

Thomas Pornin

@Simon Yes. Because portability to embedded systems.

Simon

@ThomasPornin I see.

Lighty

Thomas Pornin

Though I test implementation techniques on another implemention of mine, in C#.

Lighty

quick question

in OWASP:ZAP. i get a LOT of these 503's while forcebrowsing the filelist

Ohnana

15:28

@Lighty YOU BROKE IT

diagprov

@ThomasPornin Also true. You can template that also if you want it. With enough careful checks you could do portions of buffers too.

Lighty

@Ohnana I HAVE NO IDEA WHAT IM DOING

Ohnana

jk, the server's having some issues, or is configured to return 503 instead of 404

either or, really

Lighty

@Ohnana thats wht I was thinking, actually

Ohnana

test it with a keymash attempt

if that returns 503, then it's a configuration

Mark Buffalo

15:31

wikileaks.org/nsa-201602

Lighty

well, the weird files we never are seeing here kinda look like either the list is overly-clogged with BS (the filelist.txt ?), or indeed, the server is configged like that

or both!

Mark Buffalo

:-o

> new WikiLeaks docs are classified COMINT-GAMMA, the highest classified docs ever published by a media organization.

We publish the highest classifications ever, the full docs with no redactions, the actual interccepts & selectors & authorities and more.

Tweeted by wikileaks on February 23, 2016 at 1:28 AM

schroeder

@MarkBuffalo thanks for the last line of your Answer!

Ohnana

@MarkBuffalo HOLY SHIT.

They bugged Ban Ki-Moon?!

Mark Buffalo

@schroeder Welcome. I knew you'd appreciate that. :]

M'vy

15:33

it' so good they interccepted the data

Mark Buffalo

@Ohnana I'm sure more docs will be coming soon

The NSA is full of noobs and script kiddies

Lighty

jesus tits

M'vy

/s/NSA/World/

Lighty

if this doesn't make other media outlets... :')

diagprov

@RоryMcCune you can also use the coreclr right now on Linux :)

Thomas Pornin

15:34

@Ohnana Weird. Usually, the USA does not seem to think that the UN are really relevant.

Ohnana

@ThomasPornin it's not relevant because we constantly spit on them like this

Lighty

wtf?

Simon

Nice hammer.

Do they make it for men?

Lighty

@Simon check your privileges, I identify as a pan-sexual gender fluid non-binary mocca frappuchino with dual acting hydraulic cylinder and leather grip Swiss army hammer

Mark Buffalo

@Lighty triggered

I identify as an attack helicopter, and Ragnaros the firelord

Lighty

15:38

Mark Buffalo

I don't even understand the triggered meme

Simon

-.-

Mark Buffalo

googles

Simon

It's what Twitch kids say to streamers when they get mad by something.

Lighty

@Simon It's a tumblr feminist meme

not fully tumblr

Simon

15:39

You would know about Tumblr.

M'vy

throws his BGH at @MarkBuffalo

Lighty

unfortunately, I had clients who wanted a tumbler API on their website

so yes

yes I do

Simon

@M'vy YOU PLAY HEARTHSTONE?

Mark Buffalo

Yeah, I don't... know if... this is a good meme.

diagprov

@RоryMcCune that said I have one complaint about coreclr, the whole .exe/.dll thing. It's very Windows-specific. OSX uses Mach-O and Linux uses ELF - to stick with PE is really annoying. Would be nice if it could look more native.

Mark Buffalo

15:40

PTSD is real, and those who suffer from it are being mocked

"Lulz, sounds like you've been triggered."

M'vy

@Simon ultra-casually

Rоry McCune

@diagprov ah that's interesting to hear, I've not used it in anger as yet...

Simon

@M'vy Ah.

M'vy

Like when I have my phone and some time left, or in vacations.

Rоry McCune

@Simon isn't hearthstone a bit of a nurd game?

Simon

15:41

@RоryMcCune Much much much much much less nurd than WoW.

Lighty

@Simon Still nurd

Simon

Shut top Lighty.

Rоry McCune

@Simon sure that still leaves quite a bit of scope for nurditude

Lighty

@Simon I play it too :P

Simon

@Lighty Luckily you're on EU otherwise I'd rek you.

Rоry McCune

15:42

doesn't @kalina play that as well?

Lighty

@Simon EUW Lighty#2249

and yes

yes you would

I suck

Simon

@RоryMcCune It requires the player to think so it's probably too hard for her.

Rоry McCune

@Simon you're very brave for a man who knows @kalina is AFK at the moment :op

Simon

#yolo

Lighty

but 1v1 me on D3 on battle.net :3c

if you play diablo :x

Simon

15:43

pls d3

I played for like 3 months when it came out.

M'vy

D3 starts to be really ridiculous.

Lighty

@M'vy you think? :P

Simon

It was ridiculous from the very beginning.

Nowhere close to d2.

M'vy

Played last seaon for 2/3 less than the previous one and already reached over my late paragon level

Lighty

@Simon D2 was indeed better, but when I wanna play with friends

like

play and skype, so you are like, 50% playing, and 50% bitching over skype or discord

Id prefer D3

M'vy

15:45

And seriously they have to stop with damage ramp. Or start using scientific notation

Though last UI updates are very nice to have

Simon

I quit not too long after they removed the "sell 4 irl monies" feature.

diagprov

@RоryMcCune hmmm they might have fixed that by now though actually. It looks like I am a bit behind. The experience was quite rough anyway :(

Mark Buffalo

@diagprov Is that a... euphemism?

Simon

Markus, don't involve my m8 diag in your dirty thoughts.

M'vy

euphemism as new topic #1 ?

Mark Buffalo

15:54

@Simon Is that a you feminism?

Simon

o pls

kalina

@RоryMcCune it's basically magic the gathering, it's one step away from being a full on dungeons and dragons nerd

so no, obviously I don't play it

Mark Buffalo

@kalina Kings bounty <3

All Kings Bounty series are amazing

kalina

you're speaking about things I know nothing about

so I shall resume afk

Mark Buffalo

go to steam

look up Kings Bounty

you might like Armored Princess

diagprov

16:00

@MarkBuffalo It wasn't, actually. I meant rough as in it does not have a polished development environment that you see in other languages. Go for example is pretty good at this.

Rоry McCune

@kalina ahh I see, almost full DnD nurd... ewww!

Simon

@RоryMcCune She's a bad person.

Ohnana

hey i like DND

Simon

@Ohnana We all like D&D.

I don't understand how someone with so much rep on Arqade can laugh at D&D.

She's the nurd of all nurdz.

Ohnana

kalina is the highest tier of nerd -- the nerd that helps other nerds in free moments

Simon

16:09

That's really nurdy.

Rоry McCune

pls man up you two and ping her, hey @kalina we reckon you're nurdier than a DnD nurd!

Simon

As if we needed to ping her, we just said that she's a ultimate nurd, which means that she constantly reads the chat.

Arperum

@Matthew No. Even if it's only to spite you.

Rory Alsop

@M'vy that would be very old topic #1

Simon

You're a very old topic.

Rory Alsop

16:18

@Simon why yes, yes I am

and probably a euphemism

Simon

o

AviD

@diagprov lol still not getting off that topic, huh

kalina

@Simon no

AviD

ya damn neckbeard ;-)

kalina

@RоryMcCune that's some serious nerding

Simon

16:18

@AviD HEY LEAVE MY M8 ALONE

kalina

I'm not sure how you could be nerdier than a D&D nerd

Rоry McCune

@kalina it's high grade nurditude for sure

kalina

D&D nerd is as high as my scale goes and it's up in the clouds from my current level of nerd

Ohnana

leave neckbeards out of this

AviD

@Simon soimin pls, this was before your time

Rоry McCune

16:19

@kalina LARP

kalina

@RоryMcCune ...what?

Rоry McCune

LARPers are waaay nurdier than DnD'ers

Simon

I took a pic of my car this morning and couldn't believe that roro thought it's a hairdresser car :(

Ohnana

i know someone who runs a LARP event

kalina

the fact you know about this and I don't clearly determines the difference in nerdiness between us

Rоry McCune

16:19

@kalina "Live Action Role Playing", you dress up as orcs/wizards etc and run round with foam swords and the like

Ohnana

writes the scripts, does the factions stuff, all of it

Rory Alsop

@Simon the hairdresses Subaru, yes?

Simon

PLS

kalina

@Ohnana changed gender to avoid being the nerdiest female in the room

I only hold that title by default

Arperum

@Ohnana I should look around if I can find some event around here. I kinda want to try it out.

Ohnana

16:20

oh no, my plan is foiled

kalina

and only when @MrsMcCune isn't here

Ohnana

@Arperum it sounds like a ton of fun

kalina

I'd bet that @lady.doughnut is nerdier than I am

Arperum

@Ohnana Exactly.

kalina

how do you even computer plz

Simon

16:21

fkin lol nice try kalinuh da nurd

Rоry McCune

@kalina MrsMcCune is Nurdier than you (if you define D&D as being nurdier than you)

@kalina heck playing DnD is how I met MrsMcCune!

kalina

@RоryMcCune pls D&D is so far up the nerd scale that I don't even know how to get up there

I've never even played Warhammer

Rоry McCune

@kalina yeah I still think WoW/Eve people are every bit as geeky as DnD'ers

Simon

Nice 53k rep on Arqade u fkin nurd

Arperum

@kalina The one DnD campaign I did was a ton of fun. But the DM quitted after that campaign, so it dissolved :(

Rоry McCune

16:22

I mean how is "spreadsheets in space" not a nurdy thing

kalina

@RоryMcCune I quit EVE because it was obvious I was not nerdy enough

Rоry McCune

and WoW, people have gotten married in WoW

kalina

@RоryMcCune and pls, normal people play WoW

Simon

@kalina LOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOL

Rоry McCune

@kalina only if they're.... filthy casuals

kalina

16:23

it's only players from the top 25 guilds in the world who're nerdy

and my guild never made it into the top... oh

well it's only players from the top 10 guilds in teh world who're nerdy

and my guild never made it into the top 10

Simon

ok nurd

There are nurdz who are horrible at gaming, y'know.

Rоry McCune

@kalina lolz, soz you have a "guild" they have a "top 25/10" ranking... this all sounds fairly nurdy

kalina

listen, PHP developer

and information security "expert"

Simon

@kalina You're wrong again but keep going, we'd like to hear more wrong things that you have to say.

kalina

@Simon ok, Simon is great

another wrong thing to add to the list

Simon

16:25

Did someone send you your nurd ID card yet?

kalina

@Simon I don't have a nurd ID card

I'm not nurd enough to join your club

Simon

fkin_lol_irl_actually_i_lied

kalina

I know being serious is not something you're capable of

but there is no way that I'm in the top 10 nerdiest people in this channel right now

there are 26 people in here, there is no way I'm in the top 20 nerdiest people in here

absolutely zero chance

Simon

You really are in a huuuuuge denial stage.

kalina

THIS IS NOT DENIAL OH MY GOSH I FEEL LIKE I'M IN SOME KIND OF MENTAL ASYLUM

oh look, @AviD exists still

AviD

16:27

@kalina YOU ARE ITS CALLED THE DMZ

Simon

WHAT WAS THAT OVID

SHOW ME

M'vy

wow that discussion went haywire

AviD

@Simon you and your mom

Simon

o ew

kalina

@Simon he said he has a huge penis and you just asked him to show you?

Matthew

16:28

@kalina Have you ever worn a red harlequin outfit, and fantasized about a guy with a white face and a big smile?

AviD

@kalina lol jeez wat

Rory Alsop

@kalina you might be - I'm in HR

kalina

@Matthew have I ever cosplayed as harleyquinn?

TildalWave

@kalina your profile says 74.6k on SE so... yeah

Simon

re_rekt

kalina

16:28

please who hasn't cosplayed as harley...

AviD

@Matthew 8/10 could have been more subtle

2

Ohnana

i haven't

NERD

Rory Alsop

@kalina erm...

Simon

nurd overload detected

Matthew

@AviD Well, I didn't want the nerd reference to be overlooked...

AviD

16:29

@kalina ooh youre right, I should totally do that

Rory Alsop

@Simon nurd overlord detected

Simon

@RoryAlsop Hehehehe.

kalina

this is disgraceful

I'm leaving

Rоry McCune

@AviD that's what you should dress as for the suicide squad movie!

Ohnana

@kalina sorry we already elected you president nerd

3

congrats madame president

kalina

16:32

@Ohnana nice deflecting your own nerd credentials

I mean seriously, @Ohnana is millions times more nerdy than I am

Ohnana

@kalina :thumbs:

how so

diagprov

@Ohnana Is @Simon chief of staff?

Ohnana

how am i more nurdy than someone with 75k rep

kalina

@Ohnana do you play D&D?

Ohnana

yes

kalina

16:33

@Ohnana internet points barely count, I know the rules of the game

@Ohnana do you roleplay?

Simon

@diagprov pls

kalina

@Ohnana do you know any programming languages?

@Ohnana could you automate a simple task with some kind of simple scripting language

diagprov

@AviD nope not a chance it's way too much fun.

kalina

DO YOU LIKE STAR WARS?!

I don't even like star wars so much that I've never seen any of them

instant -10000000 geek points

Simon

Dec 10 '15 at 13:41, by kalina

@JukEboX

declare @now datetime = getdate();select 'Good ' + case when datepart(hh,@now) < 14 then 'morning' when datepart(hh,@now) < 17 then 'afternoon' when datepart(hh,@now) < 21 then 'evening' else 'night' end + ' everybody!'

WEE WOO WEE WOO NURD OVERLOAD ALERT

M'vy

16:37

damn are you keeping tabs?

Ohnana

@kalina in a SFW way or a NSFW way

@kalina no i hate SW

Simon

@M'vy I searched her posts containing "select".

Ohnana

@kalina yes duh

Simon

It took literally 10 seconds to find.

Ohnana

@kalina in bash yeah

M'vy

16:37

you keep tabs on what to look for

Simon

Yeah my brain likes to log useless things.

Rоry McCune

@kalina a lot of WoW'ers RP...

kalina

@Simon pls everybody in here could do that

Ohnana

@kalina i'd need a reference

kalina

@Ohnana I can't program, I know no languages

thus you > me

@Ohnana www.google.sg

Ohnana

16:46

and i've never heard of half of those functions in SQL

@kalina um whut

kalina

that's because I got it totally wrong due to not being nerdy

@Ohnana what?

Ohnana

@kalina is .sg a valid TLD?

kalina

ya tis

singapore

Simon

Not sure if ohnuhnuh is trying to sell the idea that kalinuh is nurdier or genuinely didn't know that

kalina

look whoever informed you that I'm a nurd is wrong

I have a minor geeky streak at best

Simon

16:48

GEEKY

DA TERM NURDZ USE TO REFER TO THEMSELVES AS

kalina

MINOR

please nurds don't call themselves geeks

because they're nurdy enough to know the difference between the two

Ohnana

@Simon i didn't recognize it as a country code

also google.sg returns 404

kalina

@Ohnana 'MURICA

Simon

"I'm not a nurd, I'm a geek" - Literally every single nurd ever

@Ohnana o

Ohnana

@kalina i know most of them

kalina

16:49

@Ohnana for me it forwards me to .com.sg

Ohnana

prob cuz you're in singapore

kalina

well probz but I'm not atm

AviD

@kalina are you a checkbook?

Ohnana

@AviD i'm a credit card actually c:

Transcript for