« first day (2 days earlier)      last day (121 days later) » 

Anonymous
23:02
Both are worse
I mean pyExecJS
Anonymous
I know. PyExecJS < node.js < PyExecJS.
Anonymous
JS is just bad
Oh haha
problem is none of these js langs have safe mode
im sure theyre riddled with security holes too
Anonymous
Probably
Anonymous
23:09
XSS woo
I think we should steer clear of js things for now
Anonymous
Seriously technically has a security hole, in that it uses Python 2's input(), which is eval(raw_input())
Anonymous
But there's not much to abuse there
I was going to include stuck but it does that too
Anonymous
In any scenario where you could do eval evilness with input in Seriously, you can probably also do it a hundred other ways
23:11
you should replace it with ast.literal_eval(raw_input
!eval seriously "," "print('baaad')"
baaad
None
tsk tsk
dennis wont be happy
!eval seriously "," "os.system('ls')"
@quartata os.system('ls')
?
oh der
!eval seriously "," "import os;os.system('ls')"
Bot restarted after crash.
23:15
oops
Anonymous
!eval seriously "," "__import__('os').system('ls')"
code
code-final
input
pid
0
Anonymous
Yeah I should change that to ast.literal_eval pronto
i wonder what dennis has in his home directory
Anonymous
!eval seriously "," "__import__('os').system('ls ~')"
23:21
Bot restarted after crash.
anyways should probably let him know
Anonymous
I just pushed the fix
Anonymous
@Dennis You really want to pull Seriously. I fixed a gaping security hole with inputs.
Unicode works? :D
Anonymous
Yep, I did some magic with requests
23:26
\o/ Hooray!
Also AST has been done
Push to github, copy running over to stable v. 9, copy edit_this to running. ;P
Our code no longer looks like spaghetti
\o/
Next step: 19th Byte.
Anonymous
No
Anonymous
23:30
We aren't bringing it in the 19th byte because the mods are very opposed to having bots in that room
Anonymous
It can live in here for now
Ok, but we've seriously chat-proofed the bot. The only two commands are help and eval.
Plus, it'd be super helpful...
The mods didnt want thatha in there because it is spammy. i think they will have a different reaction to this
Anonymous
Maybe. Until we get explicit permission for Data to come in 19th, though, it's staying in here.
many main site rooms have bots (whiteboard, 2nd monitor)
@Mego of course
23:39
^
Not that we can't ask.
23:54
@AlexA. Thoughts?
!listcommands
Commands:
module, stop, disable, enable, ban, unban, delete, alive, utc, listcommands, help, eval
@VoteToClose wat
Read last 10 messages or so.
Anonymous
^ what I expected :P
23:56
Dev stuff would still be here, but the evaller in 19th.
Anonymous
I don't really see a reason to bring it in 19th
Anonymous
There's nothing stopping people from joining this room if they wanna use the bot
Aw. But we reduced spamability, and it'd come in handy for quick testing code.
You could just as easily test said code in here...
23:57
But they might not know about this room.
Anonymous
If they can't be bothered to click "site rooms", there's not much we can do for them
haha
Eh. True.
Alrighty then.
You could just make a TNB announcement like, "YO! Wanna eval all the shit? Come on down to PPCG Code Snippet Chat Bot, the coolest damn room in town! We got Data from Staaaaaar Treeeeeeeeek"
2
That wording should appeal to the hip, young crowd.
^ I would quote that, but mobile.

« first day (2 days earlier)      last day (121 days later) »