« first day (745 days earlier)      last day (1415 days later) » 

Sam
8:52 AM
@JacobGray :O
Good to hear you're alright.
 
 
3 hours later…
Sam
11:42 AM
@Uni I forgot. What are you using to host the chat docs?
 
11:53 AM
@Sam Originally, GitHub pages. Now that I think about it, I can host them for us, then I would simply install GitLabs on my cloud.
 
Sam
12:12 PM
@Unihedro Sounds great :D
Well, since I've got nothing better to do, I'm going to continue burninating tags...
 
12:41 PM
Huh, I've been invited to some high table dinner.
Empirically, I'm famous..
 
Sam
Congrats!
Know what's on the menu yet?
 
Meh, they didn't attach one.
 
Sam
Aww. Well, have a good night/evening/dinner. ;)
 
:) Thanks
It's not tonight, though.
 
Sam
Something to look forward to then.
Brb, I've gotta reconfig my lappy...
 
1:14 PM
Heyaa..
How are you all
@Sam new dp :D
 
Sam
... and I'm back online!
@LittleGirl Yeah :D
 
Not visible.. plz turn on light...:D
 
Sam
lol
 
hehe!
 
Sam
The full sized pic is easier to see...
 
1:18 PM
lol yeah..:D
hey whrs my HATZ...
All HaTz gone.............:( :(
 
Sam
:/
 
:(
@Sam you look similar to Harry potter ;) :P
 
Sam
lol
 
@LittleGirl :(
 
1:43 PM
Hiya @LittleGirl !
 
Sam
Wb @Jac
 
Unfortunately, I am dead, sorry @Sam
 
Sam
Ah, what a shame.
 
Yes, I will never turn 16 :(
 
Sam
Don't worry, you aren't missing out on much. ;)
 
1:46 PM
Lol
Pop quiz, what does HTTP stand for?
That would be HTML
 
Sam
lol
Sorry, missed that.
 
Lol
 
@JacobGray hypertext transfer protocol
 
Yay!
 
Sam
@JacobGray Do you want a serious answer?
 
1:49 PM
Counter quiz, what does SSH stand for? No googling.
 
Sam
Secure Shell. (IIRC)
 
Lol, I dont care
 
No, I'm not dead
 
SSH may refer to: == Science and technology == Saffir–Simpson hurricane wind scale Sea-surface height, the topography of the ocean surface Secure Shell, a network protocol for secure data communication and remote command execution Social sciences and Humanities, the disciplines and communities involved in or related to this area of research and science Suppression subtractive hybridization, a genetic technique to show differentially expressed genes == Organizations == SSH Communications Security, a Finnish company that developed the Secure Shell protocol Secondary State Highways, branch...
 
Although I thank you for your concern
 
1:49 PM
@Sam :D
 
Lol
 
Sam
@Unihedro Yay! :D
@its_notjack Np, you may resume not being dead.
 
-_-
 
What does SPLAT stand for?
 
NOBODY LIKES ME :(
shoots self
 
1:50 PM
Oh wait, thats starred
 
@its_notjack Wait!
 
Sam
2 days ago, by Jacob Gray
(SPLAT stands for Squishing the Pathetic Little Alien Tarantula)
@its_notjack Who's "nobody"? I'm Sam, say it with me, "S-aaam".
 
@Unihedro Bit late for that :-P
@Sam ;)
 
Sam
~ R.I.P. Here lies the broken remains of Jack's keyboard.
 
@Sam School keyboard so NVM
Yay for VNC!
 
Sam
1:53 PM
@its_notjack Oh.
gtg
Cya guys later.
 
2:53 PM
So... I did a thing
Another render:
 
Helleuh
 
3:39 PM
Hello
 
Sam
Hiya
 
 
2 hours later…
6:00 PM
Hi all
 
6:59 PM
Hiya!
 
Herro
 
Baa!
 
Hi
The best time on an analog clock is 6:30. Hands down.
Ba-dum-tish!
 
How is everyone?
 
Great
 
7:06 PM
Thats good
 
@JacobGray Can I get a discount on Digital Ocean for educational purposes?
 
Digetal ocean?
 
Yes.
Wait, no.
You're mocking me!
 
Oops, I ment what you said
I have never used digital ocean @Unihedro
 
Hey
@its_notjack! You're there
 
7:10 PM
Yep :)
 
I always thought you were the same as @Ahmad.
 
Check my chat(user counter is broken): plus.montreus.com:3000
 
yo
me? same as what?
 
OMG
I CAN'T BELIEVE IT
 
7:15 PM
I thought you and @JacobGray (previously Imagine Studios) were the same person, @Ahmad.
 
MY APP GOT 126 DOWNLOADS IN 2 WEEKS
 
IT GOES DING WHEN THERE'S STUFF
 
I crashed your chat for me
:L
 
@GabrielTomitsuka Good. You should invest in DDoS protection now.
test
 
@Unihedro Yes, and buy a new web template, consider hiring a designer/web designer and many other things a lucrative iOS app needs.
@Unihedro How do you do this?
 
7:18 PM
<del>LOL</del>
Sheeeeet :(
 
Gabriel
Did I crash the chat by accident?
 
it's called markdown
 
Please, report
 
lrn2md
 
7:18 PM
@Firedrake969 No
 
Ok, good
I can't enter it thoguh
 
You crashed nothing but your browser :)
It still works
 
though*
Can you change my username?
 
@GabrielTomitsuka Done.
 
It's saved in the Local Storage of your browser.
 
7:20 PM
Ok
 
@Unihedro lol @Ahmad lives in Germany, i live in the US
 
:O
 
@JacobGray I also live in Germany
 
@Ahmad are we the same people?
 
@JacobGray Democrats or Republicans?
 
7:21 PM
Neither, i am a American!
 
Which political party?
 
Good. Centrism?
(I'm personally a social-democrat, left-wing in the social side, right-wing when it comes to investments and federal budget)
 
welp, I just blocked my own access to montreus chat
Since I crash my tab every time I enter
 
I think democrats are stupid, and the current republicans don't have a backbone, Obama an idiot, Joe Biden is stupid, and Terry McAwful and his minions are horrid slime buckets. That's my opinion!
 
So... who do you vote for?
(or would you, assuming you're <18)
 
7:25 PM
I can't vote, but i lean republican. I would vote for the candidate closest to the constitution
 
The constitution is a pretty strange issue now, considering all the technology we have to deal with legally that wasn't around back then
 
:21046742 It's not responsive
 
Need proper arrangements and position: fixed
I really should put up some products (software) which would make income for me.
 
Is anyone still on his chat?
 
@Unihedro I can't remove the smile on my face because Painless finally does money :)
You could go to developer tab and remove the local storage for the tab
 
7:31 PM
I know, Gabriel
I did
Is anything happening on your side?
hm
 
THE PAGE GOT BLANK
 
You really should replace <> with &lt; &gt;
Yup
 
WHAT DID YOU DO?
 
Security.
 
SCRIPT
CRAP
 
7:32 PM
Yeah, HTML tag.
<script>$('body').remove();</script>
 
COULD YOU PLEASE REMOVE IT?
 
LOLZ
 
I'll try
 
rekt
 
7:33 PM
It's on the local storage
 
I know
 
(Opening Issue #7 on the Github page)
 
I can help you fix it if you want
 
Senior Community Edition (The best SE chat client everrr*)!! and Senior Pro (with literally no new features from the free one, but you get a happy face in the login page as a reward for supporting your favourite** developer)!!
*: Until Sam finishes his client, then mine will be out of business
**: You do not necessarily have to make the developer your favourite in order to support him
 
The source is available on github.com/gtomitsuka/montreus-chat
@Unihedro Link? Closed-source?
 
7:34 PM
Gabriel, are you using NodeJS?
 
I can't believe you're trying to market a product.
 
It's open source, but WIP.
 
@Firedrake969 Yeah
 
Yeah, me neither.
I hope it was at least slightly convincing since I was trying.
 
58
Q: HtmlSpecialChars equivalent in Javascript?

Bart van HeukelomApparently, this is harder to find than I thought it would be. And it even is so simple... Is there a function equivalent to PHP's htmlspecialchars built into Javascript? I know it's fairly easy to implement that yourself, but using a built-in function, if available, is just nicer. For those un...

Do that for usernames
 
7:35 PM
Do you need help on marketing?
 
Nah.
 
@Unihedro ALSO, you said you can CSS. I need a proof before assigning you to front-end development.
 
I can Cascading Style Sheets!
 
@Firedrake969 I'm gonna pay him for handling scalability and security of my new solution.
(Unihedro: I need you to find a way to work with API keys. Could you do that another day?)
 
@GabrielTomitsuka You didn't even research the person you're trying to hire? :P My top voted SE question has a nice Stack Snippet.
37
Q: One-box repositories, issue tickets and such on GitHub in the chat

UnihedroGitHub links are posted in chat quite frequently, but the support of the appearance is somewhat poor: <html><head><link rel="stylesheet" href="http://cdn-chat.sstatic.net/chat/css/chat.stackoverflow.com.css"></head><body><div id="transcript"><div class="monologue user-2246344"><div class="si...

 
7:38 PM
Btw, there's a lot worse things I could probably do besides just removing the chat
 
Maybe I just stalk too many people.
 
Also, I don't think 2 weeks will be the period. Could we cut the time and payment to only one week? We need to hire 2 more people, and the budget is getting... tight.
 
lol k :P
 
Sam
Hiya!
 
@Firedrake969 For example?
 
7:41 PM
XSS injection
Redirecting anyone viewing to a site that installs whatever
I have to go eat lunch; bye all
 
Please make a note thru email, it's 3.40, I won't remember this on my next schedule access.
 
Bye Fire.
 
From now on, I won't allow HTML anymore.
 
I don't get why they were allowed on the first place.
 
7:46 PM
@Unihedro Error with my new markdown parser
 
Just use raw. IRC has proven it no problem.
I like the old kind of AOL chat where everyone gets a 'user308' and only raw text interfaces. Fun times, man.
I'm too young for that, AOL died decades ago
 
@Unihedro Me too
 
Which may or may not be why I adore text based UIs.
 
Issue #6 Closed and Fixed!
HTML is now escaped :)
Still, I must deploy...
 
7:53 PM
Deployed!
Issue #6 - Fixed and closed
Bye
Goodnight
 
Hola?
 
yawn
I really should outsource part of JCE. Or at least pull in someone to help me debunk my messy drawings into proper specs.
 
Back
Gabriel - it's not completely fixed
 
It was a fire drake from the north, smaug had come...
 
Yes?
I read Dragon Rider when I was young
 
8:05 PM
@GabrielTomitsuka your chat will not work, it appears right as you lode the page, then vanishes
 
Yup
That's my doing
He misinterpreted my description of how I broke it
 
Lol, how?
 
HTML
xD
Wait - how he misinterpreted, or how I broke it
 
I tried php didnt work
 
That's since PHP is server-side
 
8:07 PM
so i shut down his server with a buffer overload :P
 
How?
Secret for secret? :P
 
He fixed it now, i posted a 20000 bite message, and it overloaded his server and shut it down for 5 min :P
 
He now has a limit to message size :P
 
I'm going to try another exploit
I'm a white-hat "hacker" - I love finding exploits, but I try to tell the owner about them
 
8:09 PM
I cant try anything, the chat has vanished :P
 
So you can get back on soon
 
@GabrielTomitsuka HELP
 
It's back on
dude
I put it back up xD
 
Okay :)
 
What's the link, again?
I wanna join
 
8:10 PM
no
I will SHUT IT DOWN
jk
 
@Firedrake969 Isn't that grey-hat then?
 
Well, my html was fine
 
Meh
It's not like I leave the exploit up
 
8:13 PM
In home computing, a hacker is someone who modifies software or hardware of their own private computer system. It includes building, rebuilding, modifying, and creating software (software cracking, demoscene), electronic hardware (hardware hacking, overclocking, modding), either to make it better, faster, to give it added features or to make it do something it was not originally intended to do. Hacking in this sense originated around hobbyist circles discussing the MITS Altair at the homebrew computer club. == Hardware modifier == Hardware hackers are those who modify hardware (not limite...
Eh, white hats has nothing to do with hackers
 
LOL
I think I crashed the server
 
Lol, what did you do?
 
nvm
Who made the screen mauve?
 
Somebody's username
 
Oh
Could someone stop for a sec
I'm going to try to crash the server
 
8:15 PM
LOL
 
stahp
 
LOL
 
...
STAHP
 
'please stop for a sec I'm going to crash it'
 
I WANT TO CRASH THINGS NOW
...
you read my mind
 
8:16 PM
How do you get the div stay there?
 
css?
 
oh, you post CSS?
 
Probably inline styled
Who's doign it?
doing*
 
alright, i gotta go
 
@Firedrake969 It's you
 
8:19 PM
It's not me
ugh
 
Did you break some site, @Firedrake969?
 
No
well, kinda
I may have exposed an exploit
can anyone load the page?
 
What's the URL?
 
plus.montreus.com:3000
 
shit... this site is fucked
 
8:23 PM
xD
 
Sam
@Firedrake969 Wth have you done? lol
 
two alerts indicating XSS script injection
 
To heck with this, I'm removing everything
 
not XSSS
just script injection
 
$("#sidebar > h1 > p.connectionLabel").remove();socket._callbacks.connections[0] = function () {console.log(arguments)} makes it usable
 
8:24 PM
Yeah
 
don't do that... it can probably be fixed
 
I know
 
Well that f*cked it more
 
I fixed the sire
Refresh it
 
8:26 PM
Ok, refresh it
 
It's not fixed... It's just broken another way
 
But not red anymore
Does the chat work?
Try saying something
 
I can't.
It's blank.
 
8:28 PM
Refresh it
 
k
No, it still works for me
 
What did you do?
 
I did script injection in my username to stop the other HTML element injection
 
Can you see me?
 
No, my script removes the user list
It does console log it, lemme see
 
8:30 PM
Oh
:L
I have to go actually, bye
 
Are you 'can you see me?'
Alright, is the site any better now?
 
can you change out your username @Mateon1? I want to see if I can fix this but I need to see the usernames
 
You can't change what's already sent if you disconnect... Sorry
The server needs to be physically restarted
Well, not physically
 
It's possible there may be a way around that
 
No, the userlist is controlled by the server
 
8:36 PM
but the username is passed via the socket with no visible authentication
so theoretically, you could pretend to be "<script>alert('yes')</script>" and change your username
 
Sam
cough the repo cough
 
@Firedrake969 It depends on my mood :)
 
that helps
 
Good night :-P
 
storing location, and then editing the array, oh god
This code is the worst thing I've ever seen
 
8:51 PM
It's not good that's for sure. I managed to get a list of the users at least. Trying to disconnect them now
socket.emit('auth_details', {username:"<script>alert('yes')</script>"}); socket.emit('disconnect'); should do it. There's no other validation going on. Maybe I'm missing something though. It's not using cookies for sessions is it?
It's not going to work. It relies on the position in that array
The thing that kills me is that it has an escapeHTML function, but it doesn't use it on usernames
 
 
3 hours later…
11:37 PM
Hola!
Oops, plus.montreus.com:3000 is dead lol
 
11:54 PM
LOL, SURPRISE! @Sam @Unihedro i found out how to post images on @GabrielTomitsuka chat! lol
 

« first day (745 days earlier)      last day (1415 days later) »