| 01:34 |
vex |
no great surprise shinochan, furries much more likely to be tinkering on pc than taking a towncar to wallstreet |
| 01:41 |
vex |
cool to see `nubbins in da logs |
| 01:41 |
asciilifeform |
shinohai: waiwat ? |
| 01:42 |
asciilifeform |
vex: i thought 'furries' were folx who dress up as e.g. leopards before fucking. what's to do w/ tinkering on pc ?? |
| 01:43 |
vex |
I think computer tinkering is the most common job for said folks |
| 01:47 |
vex |
or second favourite hobby, after dressing up like leopard etc. |
| 01:48 |
shinohai |
asciilifeform: I sadly went to that individuals twitter profile. |
| 01:56 |
asciilifeform |
a. |
| |
~ 48 minutes ~ |
| 02:44 |
punkman |
in other shitware, Wordpress pushing forced updates for plugins (Woocommerce) because of remote execution bug that's been there since 2018. Even when you have all automatic updates disabled. |
| 02:45 |
asciilifeform |
punkman: i've been running wp off a disk mounted ro. worx wonders against this kinda nonsense. |
| 02:45 |
punkman |
I'm trying to find how to remove the possibility of this happening again, and nobody I've asked so far has clue about where the backdoor is |
| 02:47 |
punkman |
found a fork that's cut some things off https://github.com/calmPress/calmpress |
| 02:48 |
asciilifeform |
punkman: what's wrong with readonly install ? |
| 02:48 |
asciilifeform |
fuck updates. |
| 02:48 |
punkman |
these are ecommerce websites |
| 02:48 |
asciilifeform |
( see also) ) |
| 02:48 |
dulapbot |
(trilema) 2016-12-28 asciilifeform: ben_vulpes, mircea_popescu : fwiw i never used wp's uploadtron, never wanted to, and configure my wp in such a way that all files on disk are read-only. |
| 02:49 |
asciilifeform |
so what if ecommerce ? the db -- writable |
| 02:50 |
asciilifeform |
nothing useful in wp requires the .php crapolade to be overwritable. |
| 02:50 |
punkman |
there are other users, feeds getting created every 10 minutes, other problems |
| 02:50 |
asciilifeform |
(except for 'updates' and other infections, of course) |
| 02:50 |
punkman |
might do for personal web |
| 02:50 |
asciilifeform |
punkman: can explain which of these features needs writable .php and why ? |
| 02:52 |
punkman |
feeds/other get written in plugin folder |
| 02:52 |
asciilifeform |
tsk. can't see why it couldn't write to strictly db. |
| 02:53 |
punkman |
sure there are a lot of things that can be done to "harden", but I ain't getting paid for all that |
| 02:55 |
punkman |
curiously, I have a couple installations that somehow didn't get forcibly updated. and I can't tell why |
| 02:55 |
asciilifeform |
punkman: unlike most 'things that could be done...' this one's simple and categorical. |
| 02:56 |
* |
asciilifeform has zero tolerance for forced or 'silent' updates in irons he operates |
| 03:05 |
punkman |
I was telling how infuriating this was to friend, "what's the big deal, gotta fix the bug", "THE UPDATE MECHANISM IS A BACKDOOR, HOW ARE YOU NOT GETTING THIS" |
| |
~ 11 hours 31 minutes ~ |
| 14:36 |
asciilifeform |
!w poll |
| 14:36 |
watchglass |
Polling 17 nodes... |
| 14:36 |
watchglass |
185.85.38.54:8333 : Could not connect! |
| 14:36 |
watchglass |
84.16.46.130:8333 : Could not connect! |
| 14:36 |
watchglass |
185.163.46.29:8333 : Could not connect! |
| 14:36 |
watchglass |
205.134.172.27:8333 : Alive: (0.085s) V=99999 (/therealbitcoin.org:0.9.99.99/) Jumpers=0x1 (TRB-Compat.) Blocks=691290 (Operator: asciilifeform) |
| 14:36 |
watchglass |
71.191.220.241:8333 : (pool-71-191-220-241.washdc.fios.verizon.net) Alive: (0.093s) V=99999 (/therealbitcoin.org:0.9.99.99/) Jumpers=0x1 (TRB-Compat.) Blocks=691290 (Operator: asciilifeform) |
| 14:36 |
watchglass |
54.39.156.171:8333 : (ns562940.ip-54-39-156.net) Alive: (0.112s) V=99999 (/therealbitcoin.org:0.9.99.99/) Jumpers=0x1 (TRB-Compat.) Blocks=691290 |
| 14:36 |
watchglass |
205.134.172.4:8333 : (172-4.core.ai.net) Alive: (0.126s) V=70001 (/therealbitcoin.org:0.7.0.1/) Jumpers=0x1 (TRB-Compat.) Blocks=691290 |
| 14:36 |
watchglass |
205.134.172.6:8333 : (172-6.core.ai.net) Alive: (0.140s) V=99999 (/therealbitcoin.org:0.9.99.99/) Jumpers=0x1 (TRB-Compat.) Blocks=691290 |
| 14:36 |
watchglass |
205.134.172.28:8333 : Alive: (0.083s) V=99999 (/therealbitcoin.org:0.9.99.99/) Jumpers=0x1 (TRB-Compat.) Return Addr=0.0.0.0:8333 Blocks=691290 (Operator: whaack) |
| 14:36 |
watchglass |
192.151.158.26:8333 : Alive: (0.203s) V=70001 (/therealbitcoin.org:0.7.0.1/) Jumpers=0x1 (TRB-Compat.) Blocks=691290 |
| 14:36 |
watchglass |
208.94.240.42:8333 : Alive: (0.160s) V=99999 (/therealbitcoin.org:0.9.99.99/) Jumpers=0x1 (TRB-Compat.) Blocks=691290 |
| 14:36 |
watchglass |
176.9.59.199:8333 : (static.199.59.9.176.clients.your-server.de) Alive: (0.281s) V=99999 (/therealbitcoin.org:0.9.99.99/) Jumpers=0x1 (TRB-Compat.) Blocks=412062 (Operator: jurov) |
| 14:36 |
watchglass |
143.202.160.10:8333 : Alive: (0.294s) V=70001 (/therealbitcoin.org:0.7.0.1/) Jumpers=0x1 (TRB-Compat.) Blocks=691290 |
| 14:36 |
watchglass |
54.38.94.63:8333 : (ns3140226.ip-54-38-94.eu) Alive: (0.269s) V=88888 (/therealbitcoin.org:0.8.88.88/) Jumpers=0x1 (TRB-Compat.) Blocks=691290 |
| 14:36 |
watchglass |
213.109.238.156:8333 : Alive: (0.331s) V=99999 (/therealbitcoin.org:0.9.99.99/) Jumpers=0x1 (TRB-Compat.) Blocks=691290 |
| 14:36 |
watchglass |
103.36.92.112:8333 : (terebe.ns01.net) Alive: (0.659s) V=99999 (/therealbitcoin.org:0.9.99.99/) Jumpers=0x1 (TRB-Compat.) Blocks=691290 |
| 14:38 |
watchglass |
205.134.172.26:8333 : Busy? (No answer in 100 sec.) |
| 14:39 |
asciilifeform |
!q uptime |
| 14:39 |
snsabot |
asciilifeform: time since my last reconnect : 12d 21h 37m |
| 14:39 |
asciilifeform |
!q uptime |
| 14:39 |
dulapbot |
asciilifeform: time since my last reconnect : 30d 11h 37m |
| 14:39 |
asciilifeform |
!w uptime |
| 14:39 |
watchglass |
asciilifeform: time since my last reconnect : 6d 16h 47m |