12test (IRC colors in post notifications or how to be banned)

b/Other publicado por u/Dream of Omnimaga October 21, 2016, 03:50:24 AM

12test (IRC colors in post notifications or how to be banned)

Test (I was wondering if that worked)

Last Edit: October 21, 2016, 04:00:48 AM by DJ Omnimaga

Inicia sesión o crea una cuenta para dejar un comentario

u/kotu October 21, 2016, 03:52:22 AM

A test of what you could do without being killed?

u/Dream of Omnimaga October 21, 2016, 03:59:09 AM

Somewhat. Anyway I was testing if IRC color codes worked in topic titles because on Omnimaga they did so the post bot showed them

But obviously it needs to not fall under the wrong hands

u/p2 October 21, 2016, 08:45:03 AM

you should move it to savehacen so newbies dont find out about this...

u/novenary October 21, 2016, 10:59:00 AM

Yeah the title is passed straight through to IRC by the bot. I don't think it's something worth bothering with.

u/Travis October 21, 2016, 01:46:00 PM

Heh, I hadn't thought of it being possible to stick control characters in topics. With ^A, it may be possible to fool a bot into making arbitrary CTCPs (or mess up the CTCP /me's it's already trying to send).

u/Sorunome October 21, 2016, 01:48:09 PM

testing for security leak

u/Dream of Omnimaga October 21, 2016, 02:14:40 PM

I remember back when Omni post bot was a SMF mod and had that exploit allowing me to post THE GAMEvia the bot

u/novenary October 21, 2016, 09:19:21 PM

SMF strips new lines so it should be pretty safe considering we prefix the title with some text.

u/Dream of Omnimaga October 21, 2016, 09:48:18 PM

Actually, the exploit I am talking about was basically this: The post notification was sent by running a PHP file with URL parameters. Anyone who knew the URL and required arguments could send any text from the post notifier at will by opening the file URL in their browser. That was somewhere in 2011, hence why I was a bit against making CW bot a PHP script at first. But as an admin, it was fun while it lasted

u/c4ooo October 21, 2016, 09:53:27 PM

Lol, this is pretty aswome xD Reminds me of when Commisar Snektron was experimenting with sending colour codes via Minecraft chat. (Which didn't work)

u/Dream of Omnimaga October 22, 2016, 12:25:36 AM

I think they would only have worked on IRC and perhaps Omnom/WIRC.

Also, I remember having fun with ASCII art using background colors. I was posting Mario sprites, but then someone posted goatse of Homer Simpson in ASCII-art form (oh and don't google it if you're under 18 x.x)

u/p2 October 23, 2016, 05:55:16 PM

was searching for "goatse of Homer Simpson" just out of curiosity (didnt know what I should expect so I just tried it).
Half of the results is stuff carved into pumpkins...

I guess I misunderstood something as it's not my mother language ^^

That was my favorite one: :3

Spoiler

u/novenary October 23, 2016, 06:42:03 PM

Quote from: DJ Omnimaga on October 21, 2016, 09:48:18 PM
Actually, the exploit I am talking about was basically this: The post notification was sent by running a PHP file with URL parameters. Anyone who knew the URL and required arguments could send any text from the post notifier at will by opening the file URL in their browser. That was somewhere in 2011, hence why I was a bit against making CW bot a PHP script at first. But as an admin, it was fun while it lasted .

Technically that's what the bot does, but it only accepts connections from localhost. I sometimes make it say the game.

u/Dream of Omnimaga October 24, 2016, 03:26:25 AM

Quote from: Streetwalrus on October 23, 2016, 06:42:03 PM
Quote from: DJ Omnimaga on October 21, 2016, 09:48:18 PM
Actually, the exploit I am talking about was basically this: The post notification was sent by running a PHP file with URL parameters. Anyone who knew the URL and required arguments could send any text from the post notifier at will by opening the file URL in their browser. That was somewhere in 2011, hence why I was a bit against making CW bot a PHP script at first. But as an admin, it was fun while it lasted .
Technically that's what the bot does, but it only accepts connections from localhost. I sometimes make it say the game.

Ah I see. At least it's kinda secure at least. And yes you made me lose often with it

Quote from: p2 on October 23, 2016, 05:55:16 PM
was searching for "goatse of Homer Simpson" just out of curiosity (didnt know what I should expect so I just tried it).
Half of the results is stuff carved into pumpkins...
I guess I misunderstood something as it's not my mother language ^^

That was my favorite one: :3
Spoiler

That is scary

. I guess it's a good thing, though, because what the shock site was is truly NSFW and 18+ content that is somewhat gruesome as well