Security Fuckup Megathread - v13.69 - plugins may violate privacy

The Something Awful Forums > Discussion > Serious Hardware/Software Crap > YOSPOS > Security Fuckup Megathread - v13.69 - plugins may violate privacy

«‹›216 »

Lain Iwakura: Aug 5, 2004; The body exists only to verify one's own existence.; Taco Defender

code:

PATCH NOTES FOR 13.0
* Avoids slamming car doors into genitals
* Removed conversation that belongs in D&D

PATCH NOTES FOR 12.0
* A whole new version to reflect the ever-changing threat landscape
* Official HTTPS support--it only took Lowtax like a decade to get it to work properly

PATCH NOTES FOR 11.4
* Added details at end of OP for why the thread is called "You're busted, dude"

PATCH NOTES FOR 11.3
* POP POP of unsigned ints

PATCH NOTES FOR 11.0
* new version with less bloat
* all anime removed and hopefully forever

PATCH NOTES FOR v10.1
* no patch notes required

PATCH NOTES FOR v10.0

* decided that 8 and 9 were bad numbers and skipping to '10' would make us look cooler.
* js crypto added in for the sake of an internet argument

PATCH NOTES FOR v7.69

* Added 1.2 billion passwords from Russian hacker forums

PATCH NOTES FOR v7.2 "BoringSFM"

* The name is aspirational and not yet a promise

PATCH NOTES FOR V1.0.1g

* changed version number

PATCH NOTES FOR V0.9.8

* once again removed LF and Fishmech corruption from the last thread
* added a new feature that enables the mods/admins to go ahead and probate/ban as necessary if LF'n poo poo happens
* added heartbeat feature to non-existent SSL layer on the forums

PATCH NOTES FOR V69

* removed LF and Fishmech corruption from last thread
* new "hello" service for conference attendees
* blocking of js crypto through message relay services like twitter

PATCH NOTES FOR V1.2

* made more efficient for version 1.2 after having removed fishmeching and talk about credit card contracts

PATCH NOTES FOR V1.1

* don't loving use any of these goddamn exploits you dumbshits

join us on irc: irc.synirc.net #yossec

useful news resource for information security professionals: http://reddit.com/r/netsec/

risky business podcast is worth listening to and yospos has been mentioned in it before

here are some old threads that haven't been archived:

Security Fuckup Megathread - v12.2 - you have slammed your dick in the car door (apr 2016-jan 2017)
Security Fuckup Megathread - v11.4 - who u gonna snitch to pussy bitch gently caress u (apr 2015-apr 2016)
Security Fuckup Megathread - v10.1 (Hackers can turn your gas station into a bomb) (nov 2014-apr 2015)
Security Fuckup Megathread - v7.69 (stay safe security ghost) (aug-nov 2014)
Security Fuckup Megathread - v7.2 "BoringSFM" (jun-aug 2014)

Alereon posted:

seriously though people dont post anything that would allow a lurker from gbs to gently caress with anything

OSI bean dip posted:

HERE IS A FORUM FOR YOU D&D WANNABES THAT WELCOMES CHAT ABOUT AMERICAN FOREIGN POLICY AND ITS UTTER FAILURE

Lain Iwakura fucked around with this message at 18:27 on Jan 5, 2017

# ? Jan 5, 2017 16:08

Adbot: ADBOT LOVES YOU

# ? Apr 19, 2024 01:04

Pile Of Garbage: May 28, 2007

thankyou for doing the needful afreak.

for content my ops mgr has asked me if i want to move to the secops team. talk about a secfuck. not the first time he's asked me either, i turned him down in february 2015 becos lol

# ? Jan 5, 2017 16:14

PIZZA.BAT: Nov 12, 2016

i saw the thread was closed and thought, 'haha what have those secfuck boys gotten themselves into now'

p. disappointing. i expect better on this quality forum

# ? Jan 5, 2017 16:18

flakeloaf: Feb 26, 2003; Still better than android clock

i think my overlords got the same thought-a-day calendar

they want me to learn tanium so i can security janitor terabytes of stuff at a time instead of the "just a few hundred gigs or so" i'm doing now

# ? Jan 5, 2017 16:18

Segmentation Fault: Jun 7, 2012

Rex-Goliath posted:

i saw the thread was closed and thought, 'haha what have those secfuck boys gotten themselves into now'

p. disappointing. i expect better on this quality forum

looks like them secfuck boys are at it again

# ? Jan 5, 2017 16:22

Phone: Jul 30, 2005; 親子丼をほしい。

you actually just quarantined the bad discussion, so like the malposts are technically still infecting your system. with this new form of shitposting, you can't take an anti virus approach to these sorts of things and flattening and reinstalling doesn't work.

# ? Jan 5, 2017 16:24

Wiggly Wayne DDS: Sep 11, 2010

Segmentation Fault posted:

looks like them secfuck boys are at it again

get out of the thread, you ruined the last one

# ? Jan 5, 2017 16:26

Pile Of Garbage: May 28, 2007

Rex-Goliath posted:

i saw the thread was closed and thought, 'haha what have those secfuck boys gotten themselves into now'

p. disappointing. i expect better on this quality forum

we stopped loving around like that because bans were handed out the last time (see PATCH NOTES FOR V1.1)

Segmentation Fault posted:

looks like them secfuck boys are at it again

lol

# ? Jan 5, 2017 16:26

Migishu: Oct 22, 2005; I'll eat your fucking eyeballs if you're not careful; Grimey Drawer

Segmentation Fault posted:

looks like them secfuck boys are at it again

mods new thread title tia

# ? Jan 5, 2017 16:30

Migishu: Oct 22, 2005; I'll eat your fucking eyeballs if you're not careful; Grimey Drawer

Security Fuckup Megathread - v13.0.1 - looks like them secfuck boys are at it again

# ? Jan 5, 2017 16:30

Captain Foo: May 11, 2004; we vibin'
we slidin'
we breathin'
we dyin'

0day poastin'

# ? Jan 5, 2017 16:36

apseudonym: Feb 25, 2011

Migishu posted:

Security Fuckup Megathread - v13.0.1 - looks like them secfuck boys are at it again

# ? Jan 5, 2017 16:38

aardvaard: Mar 4, 2013; you belong in the bog of eternal stench

Migishu posted:

Security Fuckup Megathread - v13.0.1 - looks like them secfuck boys are at it again

# ? Jan 5, 2017 16:45

spankmeister: Jun 15, 2008

Hello friends.

# ? Jan 5, 2017 16:46

spankmeister: Jun 15, 2008

Migishu posted:

Security Fuckup Megathread - v13.0.1 - looks like them secfuck boys are at it again

# ? Jan 5, 2017 16:46

Truga: May 4, 2014; Lipstick Apathy

Migishu posted:

Security Fuckup Megathread - v13.0.1 - looks like them secfuck boys are at it again

# ? Jan 5, 2017 16:48

Mr. Nice!: Oct 13, 2005; c-spam cannot afford

Captain Foo posted:

0day poastin'

# ? Jan 5, 2017 16:58

negromancer: Aug 20, 2014; by FactsAreUseless

Those new Chromebook Pros might be nice to throw Kali onto as a quick laptop to do some wireless pen testing and whatnot when I don't feel like carrying a MBP.

# ? Jan 5, 2017 17:04

Pile Of Garbage: May 28, 2007

*chomebook

e: vvv fuckoff vvv

Pile Of Garbage fucked around with this message at 17:10 on Jan 5, 2017

# ? Jan 5, 2017 17:04

30 TO 50 FERAL HOG: Mar 2, 2005

# ? Jan 5, 2017 17:05

champagne posting: Apr 5, 2006; YOU ARE A BRAIN
IN A BUNKER

ate poo poo on live tv posted:

What is the public PGP key of this thread so I know I'm getting an authenticated yospos security fuckup experience?

# ? Jan 5, 2017 17:11

Bhodi: Dec 9, 2007; Oh, it's just a cat.; Pillbug

Captain Foo posted:

0day poastin'

# ? Jan 5, 2017 17:27

anthonypants: May 6, 2007; by Nyc_Tattoo; Dinosaur Gum

Captain Foo posted:

0day poastin'

# ? Jan 5, 2017 17:31

triple sulk: Sep 17, 2014

Captain Foo posted:

0day poastin'

# ? Jan 5, 2017 17:33

triple sulk: Sep 17, 2014

maybe i'll actually keep up w/the thread this time

# ? Jan 5, 2017 17:33

FlapYoJacks: Feb 12, 2009

Gonna leave this here:
https://bugs.php.net/bug.php?id=59336

quote:

Request #59336ioctl() support
[2010-08-03 14:59 UTC] florian at phpws dot org

Description: ------------ Support for ioctl()
Would greatly enhance the usability and scope of the dio package under Unix based systems. It would allow to configure devices that are being used with the other functions provided by dio and thereby allow for the PHP user to make use of the full scale of system devices.

JFC

# ? Jan 5, 2017 17:35

ozymandOS: Jun 9, 2004

Captain Foo posted:

0day poastin'

# ? Jan 5, 2017 17:35

FlapYoJacks: Feb 12, 2009

Migishu posted:

Security Fuckup Megathread - v13.0.1 - looks like them secfuck boys are at it again

Now them secfuck boys got themselves into a heap of trouble.

# ? Jan 5, 2017 17:35

Truga: May 4, 2014; Lipstick Apathy

ratbert90 posted:

Gonna leave this here:
https://bugs.php.net/bug.php?id=59336

JFC

This is great, I hope it happens.

# ? Jan 5, 2017 17:38

Segmentation Fault: Jun 7, 2012

Captain Foo posted:

0day poastin'

guess I gotta emptyquote this

# ? Jan 5, 2017 17:39

Kazinsal: Dec 13, 2011

Captain Foo posted:

0day poastin'

triple sulk posted:

maybe i'll actually keep up w/the thread this time

not emptyquotin these

# ? Jan 5, 2017 17:41

flakeloaf: Feb 26, 2003; Still better than android clock

ratbert90 posted:

Now them secfuck boys got themselves into a heap of trouble.

i'll be 167-7216

# ? Jan 5, 2017 17:42

Pile Of Garbage: May 28, 2007

Truga posted:

This is great, I hope it happens.

i like how the only comment is entirely free of irony and only discusses possible implementation difficulties, entirely ignoring the practicality of such a function let alone how hilariously dangerous it would be

# ? Jan 5, 2017 17:50

Shame Boy: Mar 2, 2010

Captain Foo posted:

0day poastin'

ratbert90 posted:

Gonna leave this here:
https://bugs.php.net/bug.php?id=59336

JFC

finally php will be a useful scripting language like python or perl

# ? Jan 5, 2017 17:58

AAB: Nov 5, 2010

Captain Foo posted:

0day poastin'

# ? Jan 5, 2017 18:00

FlapYoJacks: Feb 12, 2009

Also 0 day posting.

# ? Jan 5, 2017 18:04

vodkat: Jun 30, 2012; cannot legally be sold as vodka

ratbert90 posted:

Also 0 day posting.

triple sulk posted:

maybe i'll actually keep up w/the thread this time

# ? Jan 5, 2017 18:10

Shame Boy: Mar 2, 2010

just cuz I was curious if this existed in everyone's other favorite web language, it sure does:

https://www.npmjs.com/package/ioctl

# ? Jan 5, 2017 18:13

pr0zac: Jan 18, 2004; ~*lukecagefan69*~; Pillbug

posting on the first page and all that

and good lord we need to get some better resource links for newbies than r/netsec, like its good for a reddit but its still reddit

pr0zac fucked around with this message at 18:24 on Jan 5, 2017

# ? Jan 5, 2017 18:22

Adbot: ADBOT LOVES YOU

# ? Apr 19, 2024 01:04

Celexi: Nov 25, 2006; Slava Ukraini!

Did i get on first page

# ? Jan 5, 2017 18:23

The Something Awful Forums > Discussion > Serious Hardware/Software Crap > YOSPOS > Security Fuckup Megathread - v13.69 - plugins may violate privacy

«‹›216 »