Root Access

rlemon

3:00 PM

what a fucking nightmare man

I shouldn't even be here today :/

Journeyman Geek

:/

rlemon

(I'm sick)

Awal Garg

but how would they override the password security in debian? I don't think someone can bypass it...

Journeyman Geek

lol

rlemon

there are so many things in the event viewer :(

Journeyman Geek

3:08 PM

@AwalGarg: with physical access, it would take me about 30 seconds to get into a debian system without encrypted home folders.

Awal Garg

@JourneymanGeek "without" physical access. over the network.

Journeyman Geek

@AwalGarg: little trickier, but a real, proper hacker could probably get a root escalation somewhere. Don't forget, most hackings are low hanging fruit.

Bob

@AwalGarg bugs.

every OS has bugs

(until formally proven correct, but no major general-use OS will be that, because it's crazy)

rlemon

well after rebooting I still can't get rid of RU keyboard

and it still isn't showing in the list

and there is no proc's running that look funny

Journeyman Geek

That dosen't mean there's nothing there

rlemon

3:13 PM

I'm just giving all the information as I get it :/

Awal Garg

@rlemon "microsoft standalone system sweeper" in boot mode only.

rlemon

we need to hire a networking guy

Awal Garg

btw, do they still maintain it...?

oh they do.

allquixotic

3:27 PM

@rlemon ~~hire me~~ I'm not moving to Canada, sorry

Bob

@allquixotic caveat with /import is it requires a bot restart after use

I just tried to track down where the commands are loaded from the bot memory

it's a maze

allquixotic

bot restart is fine :)

maybe I can write a WebDAV server in Java that will work rather than making people set one up of their own. lul

Journeyman Geek

0_0

@allquixotic: eww java

(wouldn't js make ~~less~~ more sense?)

Bob

@allquixotic why would you do that

just supply a simple nginx config

allquixotic

@JourneymanGeek eww java is right -- we wouldn't have a bot without it

@Bob good idea.

that's even better.

Bob

3:31 PM

                location /dav/ {
                        add_header Access-Control-Allow-Origin $http_origin;
                        add_header Access-Control-Allow-Methods "PROPFIND, PROPPATCH, COPY, MOVE, DELETE, MKCOL, LOCK, UNLOCK, PUT, GETLIB, VERSION-CONTROL, CHECKIN, CHECKOUT, UNCHECKOUT, REPORT, UPDATE, CANCELUPLOAD, HEAD, OPTIONS, GET, POST";
                        add_header Access-Control-Allow-Headers "Overwrite, Destination, Content-Type, Depth, User-Agent, X-File-Size, X-Requested-With, If-Modified-Since, X-File-Name, Cache-Control";

you can probably drop most of the Access-Control-Allow-* stuff

Journeyman Geek

Man. Finally solved this superuser.com/questions/808737/…

Bob

I just did ADD ALL THE THINGS cause I wanted to go home :P

rlemon

dism /Online /Get-Packages

doesn't list the RU package anywhere

allquixotic

btw, the Qt 5.3.1 JSCore in its QtWebKit implementation seems to be roughly on par in terms of JS features with Chrome/Firefox released in 2014, so yay PhantomJS 2.0! :D

rlemon

:/

Journeyman Geek

3:32 PM

I'm convinced its switching back the resolution after login

allquixotic

I hope it doesn't have stability issues like PJS 1.x

Bob

ifI were to guess at an absolute minimum...

allquixotic

!!info

ChatBot John Cavil

@allquixotic I awoke on Wed, 10 Sep 2014 07:21:18 GMT (that's about 8 hours ago), got invoked 3 times, learned 85 commands

allquixotic

he's still alive :D

Bob

3:33 PM

                location /dav/ {
                        add_header Access-Control-Allow-Origin $http_origin;
                        add_header Access-Control-Allow-Methods "PUT, OPTIONS, GET";
                        dav_methods PUT;
                        dav_ext_methods OPTIONS;
                        dav_access all:rw;
                        limit_except GET {
                                allow bot-ip/32;
                                deny all;
                        }
                }

not sure if that works, but it should

allquixotic

sweet

Bob

OPTIONS is required because FF checks it before doing a PUT when it's cross-domain

allquixotic

you know, if someone were really evil, I'm sure they could hack both of our servers just by watching chat

we give out too much here -_-

Bob

if it doesn't work, I suspect the Access-Control-Allow-Headers needs to be added

allquixotic

!! s/we/I/

ChatBot John Cavil

3:34 PM

@allquixotic I give out too much here -_- (source)

allquixotic

the new bot seems faster

!!no

ChatBot John Cavil

Bob

@allquixotic I try to redact :P

oh, nginx needs to be compiled with both dav and dav_ext - debian's one comes with that

Journeyman Geek

lol

allquixotic

@Bob I remember editing in multiple, shrunken little "no"-cats into some screenshot I took

Bob

3:36 PM

o.O

I need to see that one :P

in reality, what will be easier than all this WebDAV stuff...

there's no reason what you did before shouldn't work -_-

the base64 stuff

allquixotic

except it silently failed when I had it to a point that it should've worked

I blame Zalgo.

!!listcommands

ChatBot John Cavil

@allquixotic help, listen, eval, coffee, refresh, forget, info, listcommands, tell, afk, awsm, ban, unban, color, convert, define, doge, domain, export, findcommand, forgetseen, github, google, hang, inhistory, import, jquery, learn, test, why, ok, hello, friday, after5, theanswer, caution, nicethings, goaway, status, thatword, poptart, routertroubleshooting, networkingproblem, meta, rlemon, no, foxno, yes, orlmente, fixit, uio, taytaytay, ping, maybe, say, facepalm, hv, ohhh, whocares, snore
toostupid, bababababat, plz, whee, lol, ittts, gates, potato, pissed, evil, ohmy, cancer, theplan, …

Bob

I blame the giant mess of an encoding function

wtf was the URI encoding

just plain base64 it

heck, just plain JSON.stringify it, assuming chat markdown doesn't mess with that

allquixotic

!!info yay

ChatBot John Cavil

@allquixotic Command yay, created by That Brazilian Guy on Fri, 14 Mar 2014 13:56:13 GMT but hasn't been used yet

allquixotic

3:39 PM

!!yay

!!rlemon

o.O

lol?

!!whee

see, something is already fucked up from the import

!!whee `

Bob

3:41 PM

I have hardware I work with that uses those switches in the second picture. It also runs programs exactly the same way. Upvote for using such a great picture — Ramhound 2 hours ago

o.O

allquixotic

!!whee /`/

Bob

@allquixotic really? o.O

!!whee `

allquixotic

@Bob pretty sure that isn't how whee should work

Journeyman Geek

o0

Bob

so... fix the import round three? :P

Journeyman Geek

3:42 PM

0_0

allquixotic

also, how do we have a command called !!{user_id}? definitely fucked up. and a command called \/s*!

Bob

see deleted :P

Journeyman Geek

Mind if I clean that up?

allquixotic

@JourneymanGeek go to town

Journeyman Geek

Its done completely unspeakable things to my chat transcript ;p

Bob

3:43 PM

o.O

@allquixotic go to that file, ctrl+f whee

the json... kinda... looks right

Journeyman Geek

→ 4 messages moved to Recycle Bin

allquixotic

@Bob but the json parser is getting confused. there can't be a command named {user_id}. that's nonsense.

!!learn {this_is_impossible} google.com

ChatBot John Cavil

@allquixotic Command {this_is_impossible} learned

allquixotic

!!{this_is_impossible}

ChatBot John Cavil

@allquixotic google.com

allquixotic

3:45 PM

0_O

Bob

you sure about that?

"{user_id}":"{\"name\":\"{user_id}\",\"output\":\"arrr\",\"input\":\"/.*/\",\"creator\":\"Jimmy Hoffa\",\"date\":\"2014-01-14T18:57:19.184Z\",\"description\":\"User-taught command:  `arrr`\"}","\\/s*":

that looks like perfectly valid JSON to me

!!{user_id}

ChatBot John Cavil

@Bob arrr

Bob

also,

!!whee Â´

ChatBot John Cavil

@Bob ส้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้ヾ(

Bob

...I think that was how it was supposed to work :P

@allquixotic mind if I reboot the hetzner one to check? if it has the same commands...

allquixotic

3:47 PM

!!info {user_id}

ChatBot John Cavil

@allquixotic Command {user_id}, created by Jimmy Hoffa on Tue, 14 Jan 2014 18:57:19 GMT, invoked 1 times

allquixotic

wow. that's.... odd

I'm pretty sure that didn't exist on superuser.tq

Bob

eh, I'll switch it over

also, we need to work on a more graceful shutdown than a killall

Awal Garg

!!whee awal garg

allquixotic

hang on

Awal Garg

3:49 PM

?

allquixotic

I'm firing up su.tq for testing

@Bob I got it :P

Bob

ohk :P

ChatBot John Cavil

@AwalGarg Input not matching /´/. Help: User-taught command: ▽

ส้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้ヾ(

allquixotic

!!info

ChatBot John Cavil

@allquixotic I awoke on Wed, 10 Sep 2014 15:49:48 GMT (that's about 19 seconds ago), got invoked 1 times, learned 85 commands, teleported 45 goats

allquixotic

3:50 PM

!!listcommands

ChatBot John Cavil

@allquixotic help, listen, eval, coffee, refresh, forget, info, listcommands, tell, afk, awsm, ban, unban, color, convert, define, doge, domain, export, findcommand, forgetseen, github, google, hang, inhistory, import, jquery, learn, test, why, ok, hello, friday, after5, theanswer, caution, nicethings, goaway, status, thatword, poptart, routertroubleshooting, networkingproblem, meta, rlemon, no, foxno, yes, orlmente, fixit, uio, taytaytay, ping, maybe, say, facepalm, hv, ohhh, whocares, snore
toostupid, bababababat, plz, whee, lol, ittts, gates, potato, pissed, evil, ohmy, cancer, theplan, …

allquixotic

!!info {user_id}

ChatBot John Cavil

@allquixotic Command {user_id}, created by Jimmy Hoffa on Tue, 14 Jan 2014 18:57:19 GMT but hasn't been used yet

allquixotic

!!info \/s*

ChatBot John Cavil

@allquixotic Command \\/s* does not exist. Did you mean: \/s*

@allquixotic Command \/s*, created by Jimmy Hoffa on Tue, 14 Jan 2014 18:59:47 GMT but hasn't been used yet

allquixotic

3:50 PM

that's super bizarre

Bob

...IT'S ALL HIS FAULT

!!info whee

ChatBot John Cavil

@Bob Command whee, created by allquixotic on Fri, 06 Dec 2013 19:33:00 GMT, invoked 1 times

Bob

...I blame you for that one.

allquixotic

......mostly

Awal Garg

niceish

Bob

3:51 PM

so, the import succeeded? :P

Awal Garg

cya later guys :)

allquixotic

well then, looks like the export/import worked perfectly

still annoyed that b64 doesn't work, but oh well

Bob

I would certainly expect it to, considering this is exactly what JSON was designed for :P

hm, though I didn't use JSON.parse()

just src'd it in a script tag

allquixotic

o_O

Bob

...which is what JSONP does anyway, bleh

@allquixotic basic b64 should, but the encode function I saw was a mess

allquixotic

3:52 PM

ok, bringing cavil.tq back

@Bob trying to remember if hoffa gave a justification for that or not

or if he just copy pasta'ed from MDN

Bob

@allquixotic didn't you see? 'bot.memory.data=' + JSON.stringify(bot.memory.data) + ';bot.memory.save();'

the script that gets executed is literally bot.memory.data={...};bot.memory.save();

allquixotic

so how can we get this working without setting up a WebDAV server? :P

if we can do that, one of us can fork Zirak and make a pull-request

I still want it in upstream ;p

Bob

@allquixotic well, could give b64 another shot?

allquixotic

so we you can say we contributed moar awesome stuff to the bot

Bob

or try plain JSON first

allquixotic

3:55 PM

plain JSON didn't work....

Bob

@allquixotic eh, imma try anyway

allquixotic

k :D

Bob

oh wait

that damn line-length limit

allquixotic

;p

still needs to become a gist then download the raw

Bob

@allquixotic gist won't work

needs something that allows cross-origin

well, two options

cross-origin allowed and XMLHttpRequest

allquixotic

3:57 PM

damn XHR! we need node to bypass these artificial limitations :P

Bob

or cross-origin not allowed and JSONP

the script output I have now works just like JSONP does

allquixotic

could we do a POST with the data? as a form submission? :PP

Bob

@allquixotic sure, but you'd need something to eat the data

...gist API? :P

allquixotic

:D

Bob

...waitno

are cross-origin POSTs allowed?

allquixotic

3:59 PM

I... th... I, er...

maybe? :S

Bob

...welp

might as well try

allquixotic

24

A: Cross Domain Form POSTing

The same origin policy is applicable only for browser side programming languages. So if you try to post to a different server than the origin server using JavaScript, then the same origin policy comes into play but if you post directly from the form i.e. the action points to a different server l...

document.eval? :P

Bob

> and there is no javascript involved in posting the form, then the same origin policy is not applicable.

oh for fucking fuck's sake

wait.

@allquixotic we're using phantomjs, not firefox

allquixotic

@Bob meaning, just use DOM manipulation to construct the HTML elts you need

Bob

...does pjs block cross-origin?

@allquixotic you'd have to post somehow, and that implies you need a user click

allquixotic

4:01 PM

@Bob PJS provides backdoors like Node, but we can't directly inject PJS script I don't think, not from the client side, which is where the bot runs

Bob

code.google.com/p/phantomjs/issues/detail?id=28

allquixotic

remember, we use Selenium to interface with PJS

Bob

> There is no plan to allow XHR from phantom context. If you think it's a useful feature, please open a new issue and provide a compelling user story/use case.

oh for...

allquixotic

code.google is outdated location for PJS defects anyway; they moved to github

github.com/ariya/phantomjs/blob/master/src/qt/qtbase/src/…

(just an aside)

hey! I have an idea! maybe we can just pretend that this issue doesn't really exist, and forget about it forever until I decide to switch to something other than PJS again, and then be like "@Bob, how did we do that import/export last time?" followed by Bob: "Ugh..."

the import worked; do we need more? :P

Bob

lol

eh, I'll take a look at the gist API

if it won't work with cross-domain then I'll abandon it :P

\o/

@allquixotic github sends the Access-Control-Allow-Origin header :D

Alraxite

4:14 PM

Hello.

That Brazilian Guy

@Alraxite .olleH

!!whee I don't know what this command does.

ChatBot John Cavil

@ThatBrazilianGuy whee: User-taught command: ▽

ส้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้ヾ(

Alraxite

I'm trying out NoScript and I wanted to know if it's possible to have one particular Greasemonkey script enabled on all sites.

ChatBot John Cavil

@ThatBrazilianGuy Input not matching /´/. Help: User-taught command: ▽

ส้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้้ヾ(

Alraxite

I'm thinking of converting the script into an add on.

So perhaps it'll work then.

The script basically changes the background colour to grey.

Bob

4:17 PM

@allquixotic is it alright if I completely destroy export.js and import.js?

Alraxite

And I really want it enabled everywhere.

NoScript seems to only allow scripts on a per site basis.

That Brazilian Guy

You could use something such as Stylish

> For you technical types out there, think of it this way: Stylish and userstyles.org are to CSS as Greasemonkey and userscripts.org are to JavaScript.

Never tried it myself, but I suppose it could easily do what you want (...if you're using firefox.)

Alraxite

I don't know any scripting...

That Brazilian Guy

@Alraxite CSS?

Alraxite

I just have this nice script that changes the background colour to grey.

@ThatBrazilianGuy Eh, that too.

That Brazilian Guy

4:20 PM

@Alraxite body {background-color: gray }; <== that's basically just it.

allquixotic

@Bob they're in git, so yeah, but take a backup of the code if you had some old code that worked

That Brazilian Guy

Oh, there's a Stylish extension for Chrome, so it works on 2 major browsers chrome.google.com/webstore/detail/…

I'd try it if I were you @Alraxite

Alraxite

@ThatBrazilianGuy How do I make it so that it works on all sites? I tried it on google, and it works pretty good!

> @namespace url(http://www.w3.org/1999/xhtml);

@-moz-document domain("google.com") {
body {background-color: gray };
}

That's the script which Stylish displays.

@ThatBrazilianGuy I'm on Firefox, btw.

It does leave the colour of the top portion as white on google.

Which the greasemonkey script doesn't do.

But that's OK.

Okay, I figured it out. I just had to remove that domain function.

It however doesn't work on Wikipedia.

So, I'll still stick to that original greasemonkey script I think. It works almost everywhere.

@ThatBrazilianGuy But thanks for that!

Also doesn't work on Youtube.

Awal Garg

@JourneymanGeek hey u there? remember you once told me never to run lcd at any other res than the native...

Alraxite

Right. So I think I'll just try converting the script to an add-on either by using Scriptify or Arantius.

Awal Garg

4:35 PM

so today, I decided to play around

and I was able to switch to native (1366x768) by powerstrip

and now, I am in a dilemma

I don't want to keep that software installed, if I un-install it, would my resolution stay?

The new res list is now clear in the default windows screen res list.

also, that software is not free, so it will expire in a while.

@JourneymanGeek ^

allquixotic

he's probably asleep in his doghouse

Awal Garg

@allquixotic hey can you advise me...?

allquixotic

no, I don't know the answer

Awal Garg

ok

allquixotic

simplest thing to do is try it and see if the resolutions stay after you uninstall

Awal Garg

4:40 PM

I fear I would cause the system to break. every action of powerstrip requires a reboot.

also, the screen is looking very nice now, I don't want to see that flickering screen again.

allquixotic

so buy the program!

if someone is selling commercial software and it does what you want and you can't find any cheaper or free alternatives, pony up the money or live without it

Awal Garg

:(

allquixotic

welcome to the real world

Awal Garg

I wonder what the software does and why can't I do that manually.

I am sure it did some registry changes. That's what it told me before starting all the processing.

allquixotic

you could run process explorer while it is running and see what it changes

Awal Garg

4:46 PM

Is there anyway to scan what registry changes the software it did? I would send the software maker a thankyou mail and would buy it later sometime...

ahh ok

ok I will try that out.

thanks :)

allquixotic

or just spend $29.95 which is perfectly reasonable for a piece of commercial software; I've seen way worse (I'm looking at you, Adobe)

Alraxite

Alternatively, RegShot.

Bob

ok

Psycogeek

@AwalGarg regshot will do a "compare" of the registry and provide a registry that has the changes in it. you scan once, make the changes (or install software) then scan again, then do a compare. Total Uninstall (the really old one) does the same thing for both file changes and registry changes.

Bob

let's see if this works

!!info

ChatBot John Cavil

4:49 PM

@Bob I awoke on Wed, 10 Sep 2014 16:48:38 GMT (that's about 9 seconds ago), learned 86 commands, teleported 76 goats

Bob

!!export

ChatBot John Cavil

@Bob Could not process input. Error: XMLHttpRequestConstructor is not a function (evaluating 'XMLHttpRequest()')

Bob

hm.

That Brazilian Guy

@Psycogeek Hmmmmmmmmmmmmmmmmmmm. That would be really nice to finally understand what a weird chrome addon + firefox addon + java applet + windows DLL mandatory bank security does on windows.

Bob

whoops, forgot a new

That Brazilian Guy

4:50 PM

!!die

ChatBot John Cavil

@ThatBrazilianGuy Registered; need 1 more to execute

Alraxite

@Psycogeek I believe RegShot also records file changes.

Bob

!!info

ChatBot John Cavil

@Bob I awoke on Wed, 10 Sep 2014 16:50:06 GMT (that's about 11 seconds ago), got invoked 1 times, learned 86 commands

That Brazilian Guy

!!live

Bob

4:51 PM

!!export

ChatBot John Cavil

@ThatBrazilianGuy I'm afraid I can't let you do that, That Brazilian Guy

@Bob Could not process input. Error: InvalidStateError: DOM Exception 11

Bob

@ThatBrazilianGuy please don't play with it now

That Brazilian Guy

._____. okay

Bob

I'm trying to get something working; feel free to play some other time

allquixotic

that fucking DOM Exception 11 is a royal pain

Bob

4:51 PM

...clippy, you aren't helping

6

Psycogeek

comparing and seeing what is going on in the winders system was a whole lot easier when there was way less going on. cant recommend some of the methods now because without stuff toned down (shut off) in the system, it is like reading through a ram dump :-)

That Brazilian Guy

It looks like you are trying to get something working! :D

Bob

!!info

.

!!info

ChatBot John Cavil

@Bob I awoke on Wed, 10 Sep 2014 16:54:29 GMT (that's about 26 seconds ago), learned 86 commands

Bob

!!export

ChatBot John Cavil

4:55 PM