Live data from Hacker News

4chan Sharty Hack And Janitor Email Leak

knowyourmeme.com

771–780 of 1001 posts

Re: 4chan Sharty Hack And Janitor Email Leak

#771

Earlier quoted context omitted.

This is such a common hole. One of my early hacks was a forum that allowed you to upload a pfp but didn't check it was actually an image. Just upload an ASP file which is coded to provide an explorer-like interface. Found the administrator password in a text file. It was "internet" just like that. RDP was open. This was a hosting provider for 4000+ companies. Sent them an email. No thank you for that one. Always chec…

Uploading ASP as an image and having it execute server side is one thing. But in this case, it's subtly different. This issue relies more on a quirk of how PDF and PostScript relate (PDF is built on a subset of postscript). Imagine you had an image format which was just C which when compiled and ran produced the width, height, and then stream of RGB values to form an image. And you formalised this such that it had to…

You basically just described the XPM format.

Re: 4chan Sharty Hack And Janitor Email Leak

#772

Earlier quoted context omitted.

> Then some morons connected them to the internet for no good reasons. Bad engineering at this point. To be fair, we could have had good car OS, good smartphone OS. But we didn't because everyone wanted to have their own pie castle. Imagine a smartphone that was actually useful. Or a car OS that supports you with repairs. Possible, but not wanted by manufacturers.

Use a proper RTOS kernel with a good UI layer, and see all the developers complain loudly because they can't use the latest mobile phone stacks on that robust platform. Sony boots a RTOS Linux system on their cameras in 3 seconds flat, and the firmware is arguably mission critical for that camera. It can be done for an infotainment system.

Three seconds is a long time. What's it doing to justify that lag? Or is there some kind of cold/warm boot distinction?

Re: 4chan Sharty Hack And Janitor Email Leak

#773

Earlier quoted context omitted.

I still don't understand how to read threads. How do replies work? How do you know it's actually the person you're replying to who's replying back? How is it organized visually??

> How do replies work Reply references the post it is replying to by ID, most boards will turn that ID into a link or even create a UI to view a chain of replies. > How do you know it's actually the person you're replying to who's replying back? You shouldn't, an anonymous imageboard invites you to engage with ideas, not people. However, on most boards you can enter a password with your post, which is displayed as a…

Thank you for explaining it.

Re: 4chan Sharty Hack And Janitor Email Leak

#774

Earlier quoted context omitted.

Use a proper RTOS kernel with a good UI layer, and see all the developers complain loudly because they can't use the latest mobile phone stacks on that robust platform. Sony boots a RTOS Linux system on their cameras in 3 seconds flat, and the firmware is arguably mission critical for that camera. It can be done for an infotainment system.

Three seconds is a long time. What's it doing to justify that lag? Or is there some kind of cold/warm boot distinction?

The booting process is dominated by checking SteadyShot's state (move sensor a bit, center and lock).

However, you don't notice that three seconds. Because when you flick the switch and raise the camera, and it's already ready to shoot.

There's powersave after a minute (configurable), which can be considered as S3 sleep, and returning from that is faster.

Re: 4chan Sharty Hack And Janitor Email Leak

#775

The take on 4chan on here is super intriguing. I always felt that the current social media/doomscroll/memesharing landscape which has become so common worldwide is indiscernable and in some ways worse than 4chan. It feels like 4chan left it's homepage and went worldwide sometime in the early 2010s when iPhone-style phone use became more commonplace. I remember that 4chan users had more honor than users on the interne…

Multiple white supremacist mass shooter have been 4chan users and they cheered on the Buffalo shooter who was live updating during his murder spree: https://www.thetrace.org/newsletter/4chan-moderation-buffalo... The christchurch shooter was a 4chan regular https://theconversation.com/christchurch-terrorist-discussed... The whole "boogaloo" white nationalist/supremacist movement started on 4chan: https://www.splcente…

[flagged]

Re: 4chan Sharty Hack And Janitor Email Leak

#776

Earlier quoted context omitted.

This is an old well known exploit. Don't run versions of ghostscript from 2012?

> Don't run versions of ghostscript from 2012? Per Wikipedia: In February 2013, with version 9.07, Ghostscript changed its license from GPLv3 to GNU AGPL. With the AGPL license being legal kryptonite I wonder if license compatibility drove the decision (and how many other installations of Ghostscript share this concern)?

uninformed or malicious FUD.

agpl is no different than gpl if you're distributing applications. if you host the functionality of the application with improvements then it's rightly so cryptonite and you deserve it.

Re: 4chan Sharty Hack And Janitor Email Leak

#777
post #693

Earlier quoted context omitted.

"I really don't understand why people would think X" is another example but I think there may be some expression of non-understanding. "So retarted it doesnt make sense." Similar, "are you a n*zi" never seen here but as a simple but clever "Could you elaborate?" often as a reply to a polite but ambiguous comment. It's basically bait for the ambiguous commenter to confirm or deny the morality of their comment.

"genuinely curious" is the new one I see everywhere lately.

That's basically the opposite of /s - "I know it's hard to tell whether something is sarcasm or not through text, so I want to emphasise that I am not".

Of course, people will inevitably use it sarcastically.

Re: 4chan Sharty Hack And Janitor Email Leak

#778

The take on 4chan on here is super intriguing. I always felt that the current social media/doomscroll/memesharing landscape which has become so common worldwide is indiscernable and in some ways worse than 4chan. It feels like 4chan left it's homepage and went worldwide sometime in the early 2010s when iPhone-style phone use became more commonplace. I remember that 4chan users had more honor than users on the interne…

My main problem with 4chan is how they talk, like the language they use. They really don't care about anyone's feelings and show a lack of empathy. Unfortunately this has been spreading to other social media as well. Imagine how good a place it could have been if people over there talked like people on HN.

Feature, not bug. Edgy teens don't want responsible adults in their clubhouse. Unfortunately it also attracts manchildren.

If it was pleasant to the senses then it wouldn't be counterculture.

Re: 4chan Sharty Hack And Janitor Email Leak

#779

Earlier quoted context omitted.

That checks out. Years ago I noticed a vulnerability through the photography board. You'd upload your pictures, and 4chan would display all the EXIF info next to the post. 4chan's PHP code would offload that task to a well-know, but old and not very actively maintained EXIF library. Of course the thing with EXIF is that each camera vendor has their own proprietary extensions that need to be supported to make users ha…

> Just with a bunch of extra features hastily grafted and grown organically, but never dealing with the insane amount of technical debt. This describes probably 95%+ of the entire software world, from enterprise, to SaaS to IoT to mobile to desktop to embedded... Everything seems to be hastily thrown together features that barely work and piles of debt that will never get fixed. It's a wonder anything actually even w…

> Everything seems to be hastily thrown together features that barely work and piles of debt that will never get fixed.

move fast and break things is going to be studied in the future as a hilariously clusterfuk misuse of an idea.

Re: 4chan Sharty Hack And Janitor Email Leak

#780

Earlier quoted context omitted.

Hmm, I'm not sure all 15 year old boys do, though: https://en.wikipedia.org/wiki/2022_Buffalo_shooting

Do you remember when people thought first person shooters made people into murderers because the colombine guy played doom a lot and made a custom wad to simulate the attack? If a murderer eats omelettes every day we should ban eggs. Eggs turn people into murderers. Reminder some kids died jumping off buildings with umbrellas after Marry Poppins. Ban movies.

Nitpicking:

a) It seems that no one actually saw the school map to state that it really exists.

b) Doom maps are flat 2D blueprints with varying floor heights, they are quite unsuitable to “simulate” any building with multiple floors, not to mention complete lack of realism in everything else in the game (say, player has a speed of a car relative to the environment). There are some tricks in modern ports to combine detached level geometry into seemingly whole thing for niche maps, but those were not available at the time.

c) Trying to copy one's own school, house, or city block is the most stereotypical thing kids do when they find the level design tools. I remember quite a number of Counter-Strike maps that were nice at least visually, if not gameplay-wise, which were made that way. Surely, not everyone put that much work into a typical map made to play a couple of times with friends.

It seems that cases of overreaction to such funny nonsense that still happen after 30 years, despite everything, are something to scratch your head about.

The real situation is more complex. Harris did use game metaphors: https://doomwiki.org/wiki/Columbine_High_School_massacre Of course, those cliches are not unique to Doom, and were just borrowed from comics and fantasy. We should generalise. The real hypocrisy is that people like to enjoy media and entertainment about The Hero domination everything and everyone, and don't want to be restricted in consuming that, but, at the same time, they don't like to become mere film extras that get shot by the dozen when some idiot believes in that fantasy a bit too much, and decides to live the dream. This is not limited to shootings. If you hate people so much, but instead of getting guns and ammo get yourself hired by social network data extraction press, it's not a straight path to electric chair, but a “successful IT career”. If you read trashy action packed novels, and consider that crippled offspring of romanticism as ideal life, you can try that high-adrenaline amusement ride, as long as it happens in some distant land, and can be called “military career” by others.

So media and entertainment significantly shape everyone's life, but limiting that argument to a small number of scapegoat cases is cowardice.

Post reply on HN