« first day (3163 days earlier)      last day (1778 days later) » 

8:00 PM
Are they not stored anywhere now?
 
stored in excel....
 
ah, of course
There's a migration tool for excel to sql server too, but if your boss is willing to put it in access for you, that's probably a benefit
 
user10864482
a year or 2 ago I had a client request to convert from ms access to mysql. There are tools to automate that and they are not that expensive in regard of how much a pain in the a** that would be
 
is there a bot that auto filters chat
 
If this is the world you have to live in (and I hope it won't be for long), there's worse things from going to access to big boy sql
 
8:02 PM
or did you edit that?
 
ass titty
 
user10864482
@SamuelWakeman I can see how a problem it would be for snippet of code however
 
wouldve been cool if there was a bot
 
ah, the old scunthorpe problem
 
8:03 PM
?
 
or the clbuttic mistake
 
user10864482
a part of the name is 'offensive'
 
when your spellchecker is too overeager
 
user10864482
s cunt horpe
 
user10864482
...^
 
8:04 PM
I run a gag social network called goodchristian.website where there's a swear filter that's intentionally overeager
In @s, in urls, it doesn't care
 
user10864482
I step upon a funny (not that funny) problem;
there is a right to left unicode character and if one put that in a file name, it's possible to trick the os to think it's a different file name. Tested on android, windows, mac, linux
 
user10864482
I'm wondering; how many website are checking for mime file on upload?
 
user10864482
similar to nvd.nist.gov/vuln/detail/CVE-2016-5163 but for filename
 
im not sure what a mime file is but would this website help you?
 
user10864482
@SamuelWakeman file extension is a windows thing. per see all the information for a file can be found in the file header
 
8:14 PM
you're confusing magic numbers with mime type
 
you guys are usings words that scare me
 
user10864482
@Grace what do you mean
 
the mime type (something like application/json or audio/mpeg) gets sent by the browser or server along with the file, so the computer on the other end of the end knows what to do with it. it's not stored in the file.
you can, with some kinds of files, inspect them and find out what kind of file they are
for example, PNGs start with a header like 89 50 4e 47 0d 0a 1a 0a
 
user10864482
@Grace oh. you are correct
 
I always am.
 
8:16 PM
by the grace of God you are
and youre so humble
 
user10864482
how often would you think magic number are looked upon a file upload?
 
user10864482
it could be interesting to test that on hackerOne. There should be some file uploading website there
 
@Grace btw i like how the person named grace who runs a Christian gag site has a picture of a wolf with giant clevage for a profile picture....
 
waddap doughs
 
user10864482
@hexagod hi
 
8:26 PM
whats the difference between gist.github and pastebin
 
user10864482
@SamuelWakeman github
 
but is there any different functino
function*
 
user10864482
I think pastebin is more like anonymous
 
I'll have you know she's a skunk.
Well, depends on the website
if you're running, like, an image host or whatever, you're gonna have libpng or some such on your server
and that'll not work if you give it a not png
if you're running, like, a file locker, who cares
 
user10864482
@Grace to disguise a php script as a pdf or something and then to hope the webmaster didn't change settings and hope there is execution right in the upload folder
 
8:35 PM
seems like a lot of work to hope for a misconfigured website that also has php installed
 
sounds like too much hoping
 
user10864482
@Grace yea but I said php but could be anything really
 
Like, I have executables hosted on my server, but there's no way to, like, trick nginx into executing them
 
user10864482
my little experience with security related stuff is there is a lot of hoping in the process. Like what are the odds of chaining vulnerabilities and stuff
 
less "hoping" and more "trying vulnerabilities to see if they work"
Ideally, you'd know exactly how the server is misconfigured
you gotta engage your brain at some point
 
user10864482
8:38 PM
@Grace true but I had hackerOne in mind
 
if it's so good how come there isn't a hackerTwo
think about that, brain boy
 
user10864482
@Grace lol
 
user10864482
hackerOne is a bug bounty website
 
I already have a bounty of bugs
I don't need a website to give me more of them
 
user10864482
sometimes I get nostalgic for the time when I was making websites
 
user10864482
8:43 PM
then I remember most of them were in Wordpress and then I remember php madness and javascript non sense.
 
I'll throw some html and javascript up somewhere for fun sometimes
it's very yeehaw
Very webscale, too.
 
user10864482
@Grace is hypnovir.us yours?
 
Yep!
 
user10864482
@Grace I love the domain name
 
user10864482
also look like a lot of links are NSFW
 
8:52 PM
Yeah, this is where I keep links to the smut I write
 
user10864482
smut?
 
you know, hornt stuff
 
user10864482
okok
 
I also own illegalpornography.com and social.illegalpornography.com, which have less pornography
and horsehorsehorsehorsehorsehorsehorsehorsehorsehorsehorsehorse.horse, but I'm not doing anything with that yet
 
user10864482
woa, there are a lot of choice for top domain now
 
8:54 PM
It's a wild world out there.
 
user7858150
9:35 PM
I need more horse
 

« first day (3163 days earlier)      last day (1778 days later) »