[00:26:47] We're a hot mess, but we do have a habit of making our mess everyone's mess [00:27:03] So probably worth keeping marginally aware of. 😅 [00:28:29] Ohh for sure, I certainly fear what gonna happen should trump manage to become president again... far more than last time (and I am from Denmark) [00:45:27] Heh, y'all are one of my possible escape plans if things should take one dark turn too many, given my relatives still in the area [00:47:51] heh, cool :), but again I fear the dark turn could be for the entire western world at least if he should get in power [01:18:22] Okay, is the rebrand legitimate, or an April Fool's joke? Because thanks to how timezones work, I'm already seeing April Fool's jokes. [01:19:45] yes, blame those pesky Europeans [01:19:54] we're having april fools jokes coming early [01:20:02] is Orain another wiki host or smth? [01:20:17] it's Miraheze's predecessor! [01:20:35] Ooh, interesting. [01:27:21] I can confirm here in Denmark it is 3:27am on 1st april as I am writing this [01:28:26] it's your fault then \>:( [01:31:38] I didn't design the calender and timezones [01:44:07] you're literally blaming the entire eastern hemisphere lol [01:44:29] sighs speaking of april fools i just got reminded a lot of reddit's communities are gonna make some weird jokes again lol- [01:44:48] like i've once seen whole subreddits switch topics at some point [01:44:48] 2763? [01:44:52] yea [01:44:53] bfdi? [01:44:57] yeah lol [01:45:00] lol [01:45:32] changed my info for april fools because i've seen some people do it too, this isn't really permanent im afraid- [01:50:30] I mean it is Aprils fools, nothing is meant seriously on this date [01:50:43] lol [01:51:04] i changed the featured page on astronomy wiki to golden barrel cactus [01:52:59] lol- [04:29:45] i cant tell if this is april fools or not [04:30:09] look at the calendar [04:30:11] and you tell me [04:30:14] ^ [04:30:49] even though it is still the 31st for me lol [04:30:59] https://tenor.com/view/my-reaction-to-that-information-moai-gif-26264218 [04:31:01] same lol [04:56:00] https://tenor.com/view/aww-yeah-get-over-here-gif-27631439 [04:56:01] https://cdn.discordapp.com/attachments/615786602454581249/1224220706447818803/image.png?ex=661cb361&is=660a3e61&hm=55bb5b9e78c62a8e5ebb1752760f7d783a3caa11b2690d662a1e272f4812a330& [04:56:32] Figured out how to connect to Miraheze API from externally <3 Yay [05:02:30] Hope everyone is doing alright! Easter is pretty fun [05:09:58] https://cdn.discordapp.com/attachments/615786602454581249/1224224216577216582/Frames_Excalibur_Gangster_Edition.mp4?ex=661cb6a6&is=660a41a6&hm=da140fec5a4f7a20809d3d36000387fae3dc21b5a66c6a54e068ab402e7c9eb4& [05:13:16] @tali64 does this have anything to do with you https://editthis.info/wiki/Special:Contributions/Rob_is_pedophile [05:13:20] or is it just some other funny person lmao [05:13:50] It is [05:13:57] Lol [05:13:57] Ok [05:14:52] [1/2] https://editthis.info/wiki/Special:Log [05:14:52] [2/2] This filter is just amazing [05:15:02] You can make everything stop working by putting the no no word somewhere [05:16:31] aww, it didn't disable the recent changes [05:16:45] [1/2] seeing this when i try to go to the home page [05:16:46] [2/2] https://cdn.discordapp.com/attachments/615786602454581249/1224225924309057579/Screenshot_20240331-231621.png?ex=661cb83d&is=660a433d&hm=e9895fbf8215fb7a28fa0c3f6b7c3366846bb23889c5c3d9fb0b49ca200e358a& [05:16:52] talk about ad free [05:17:18] For some reason, the recent changes is the only thing not disabled lol [05:17:23] Not that it's not trying [05:17:30] https://editthis.info/wiki/The_magic_word [05:17:39] Lol yeah [05:17:50] [1/2] lmao I just noticed [05:17:50] [2/2] https://cdn.discordapp.com/attachments/615786602454581249/1224226193360949258/image.png?ex=661cb87d&is=660a437d&hm=3c8e041e5d2c4a3362e61e5259473dc8907d6959ab8b64db09a344a3be1eeb69& [05:18:19] oh lol [05:19:37] I wonder why it's not able to [05:19:51] Also this seems to be done by hacking the core because there's nothing in Special:Version about the filter and it's not client side [05:20:05] <.labster> I wonder if you could save a page with {{subst}} with portions of the magic word put together [05:20:05] https://meta.miraheze.org/wiki/Template:subst [05:20:06]

[05:20:16] You can save a page with the no no word [05:20:23] It's just that it has that filter message once it shows up [05:20:38] <.labster> excellent implementation [05:20:40] Although I wonder if you could bypass the filter by having different parts, like {{Pe}}{{do}}{{phile}} etc [05:20:40] https://meta.miraheze.org/wiki/Template:Pe [05:20:41]

[1/3] [05:20:41]

[2/3] [05:20:41]

[3/3] [05:20:44] lol yea [05:21:02] And this also effects special pages [05:21:09] So you can just break logs, contributions, etv. [05:21:25] for normal pages it hides the content but you can just edit the page and see the content [05:21:30] Yeah [05:21:32] <.labster> Operation put EditThis out of business: just break every page on their site [05:21:45] does not work [05:21:54] tried with https://editthis.info/wiki/?title=Lolicon&action=edit, result at https://editthis.info/wiki/?title=Lolicon [05:21:58] <.labster> zero width space tho [05:22:02] oh [05:22:03] thats a good idea [05:22:11] I am pretty sure that would bypass the filter actually [05:22:48] Yep it works lmfao [05:22:48] https://editthis.info/wiki/Lolicon [05:22:55] it would because it would then not be the filtered word [05:22:59] Yeah [05:23:01] with that empty character [05:23:11] [05:23:19] Lol you can send a mesage that's just a zero width space [05:23:46] Wait I think [05:23:50] This would also break Special:Block wouldn't it [05:23:54] Because it has the no no word in their name [05:23:56] Let me test on my wiki [05:24:47] yeah [05:25:46] [1/2] wait.. [05:25:47] [2/2] https://cdn.discordapp.com/attachments/615786602454581249/1224228193956003840/image.png?ex=661cba5a&is=660a455a&hm=02728e74e7ba08899d4b4e61f8192960044c6a2c68d3f0b1bf7e4a47b5955c2c& [05:25:54] > it must have at least 0 characters [05:25:55] lmaoo [05:26:02] so you can have an empty password [05:26:19] no one would ever guess an empty password :thumbsupcat: [05:26:19] <.labster> hackers would never guess that [05:26:23] exactly [05:26:24] Lol [05:26:28] Also there is no ratelimit on the login [05:26:41] But there is a captcha on the signup 😂 [05:27:03] <.labster> How can you disclose a password that doesn't exist? 5-D Sun Tsu chess right there. [05:27:22] [1/2] Yeah so you can block people with the no no word if you go to Special:Block but the result doesn't work [05:27:22] [2/2] https://cdn.discordapp.com/attachments/615786602454581249/1224228595187191899/image.png?ex=661cbaba&is=660a45ba&hm=319348c9bd62dc546ad8387475848a64f81b0968a0d38e23f245d05e0e410d94& [05:27:45] or idk for sure [05:27:48] because [05:27:49] https://editthis.info/colleitest/Special:Block/Pedophile [05:27:52] doesnt work [05:27:57] and https://editthis.info/colleitest/Special:Contributions/Pedophile shows block not unblock [05:27:59] hilarious lmfao [05:30:18] [1/2] Borked [05:30:18] [2/2] https://cdn.discordapp.com/attachments/615786602454581249/1224229331941720074/Screenshot_20240401_002949_Firefox.jpg?ex=661cbb69&is=660a4669&hm=6bf125899db931991d40a4cccafcfd467352995a35d21455d7fdf965b13916e7& [05:30:35] lmao [05:30:46] my favorite, navigati [05:31:00] Lol I've had this happen a few times [05:31:55] [1/2] ? [05:31:56] [2/2] https://cdn.discordapp.com/attachments/615786602454581249/1224229742207701082/image.png?ex=661cbbcb&is=660a46cb&hm=c537f79e1c6804137c35b22f29beea002cff8edbb7319a173a2c93ea931f5760& [05:33:11] This seems Firefox-ish [05:33:56] it's opera gx just so i'm always logged out of everything [05:36:20] [1/2] Do you think he'll fall for it? [05:36:20] [2/2] https://cdn.discordapp.com/attachments/615786602454581249/1224230850980347964/image.png?ex=661cbcd3&is=660a47d3&hm=85476aa0043045f53516859f5a91ac1cf384b2e4433f71a7da481fe0fd682412& [05:36:29] If that's my wiki, it's just a silly lil xss [05:36:51] (That I found by searching on DuckDuckGo for MediaWiki CVE) [05:38:28] Does anyone know some workarounds to MediaWiki's "template loop detected"? I want to create a template loop that isn't detected [06:04:18] <.labster, replying to koreirose> There are some days I think it might just be easier to ban you Collei, but you’d probably just come back with alts and bots. [06:04:36] I wouldn't come back [06:04:43] I'm just curious [06:04:50] I wouldn't do that on MH obviously [06:05:03] <.labster> Maybe try getting modules via Lua? [06:05:27] That's a good point [06:06:44] <.labster> I mean I do this too. I’m still on two web forums and I know XSS exploits for both of them. [06:07:12] Lol that's cool [06:24:15] LMAO [06:24:35] if they do, tell them to remove it [06:24:57] The person in question is a really annoying person and their wiki is just a broken copy-paste of a reception wiki they got banned from [06:25:09] So I honestly think it'll be deserved if they do fall for it [06:25:24] <.labster> Today, editthis.info, tomorrow xz [06:29:16] What’s xz? [06:31:31] an open source project that got malware added to it [06:55:47] [1/2] Wow I just saw this [06:55:47] [2/2] https://cdn.discordapp.com/attachments/615786602454581249/1224250846087483474/image.png?ex=661ccf73&is=660a5a73&hm=de023b5739224847bd16c0eb9a2d163a6ba1a7840267aa1d498f3e83b9b5f8e0& [06:55:50] It's spot on [07:58:43] <.labster> Yes, everyone says something should change, but what? Pay people, so the open-source work is done by the corporations? Make people stop being assholes about wanting new features? [07:59:44] hackers hate this one trick [08:00:55] <.labster> So this advanced hack of SSH via xz almost made its way into a Ubuntu LTS, if it hadn't been discovered pretty much by accident, because the dev made the code accidentally slow. [08:01:20] <.labster> We came this close to having literally millions of companies being compromised. [08:03:25] <.labster> And if you look at the history of what happened, it looks a little like a social engineering attack to get the original dev to hand over maintainership... but one that is indistinguishable from normal user activity. People whine about patches not getting merged, and some people just feel bad about saying no, even though they have no reason to care about someone else's use case. [08:04:47] <.labster> Ultimately I'd like to see a little more effort in the nonprofit space, since nonprofit led projects tend to keep a good balance, and can give grants to accomplish goals in the code. [08:05:52] @.labster can I cough about a certain ToU banned user [08:06:04] Who we only caught cause they made 1 mistake [08:06:51] <.labster> It's all very Agatha Christie, the one mistake exposes the baddie. [08:07:28] :ThinkerMH: [08:08:56] <.labster> It could have been a social engineering attack, planned from the beginning. It could have been someone who joined in good faith, but were later forced to do the hack by the government where they live. It was definitely not an accident. [08:09:22] <.labster> But if it were the second case, it's possible that the adversary made a mistake on purpose. [08:09:50] 2.5 years is a long time [08:09:58] I'm not sure you'd do that without motive [08:12:31] I'd also be surprised if this is the last we hear [08:12:35] Sadly [08:18:00] <.labster> Espionage always continues [08:23:35] I am loving this new style of thread names. Please keep it like that 😆 [08:54:17] [1/2] I agree but I think they would be better with a giant hair all blocking the screen or ball [08:54:18] [2/2] https://cdn.discordapp.com/attachments/615786602454581249/1224280669090349147/IMG_1542.jpg?ex=661ceb39&is=660a7639&hm=3963ad9b82d29228e114f867282e3a3cb05499fee43b325a036dcaf728ef6820& [10:02:15] pov: the secure shell isnt secure [10:06:27] [1/2] RfC: can we keep this? [10:06:28] [2/2] https://cdn.discordapp.com/attachments/615786602454581249/1224298829780881419/8a501aadd7f550c9.png?ex=661cfc23&is=660a8723&hm=19cf579ddcb099569f91bb6cbc8644497197269aa83bbb4837c3dd03c69d58c8& [10:08:03] orain dictatorship [10:08:12] :thumbs_up: [11:26:43] [1/2] we did forget the icon change too [11:26:43] [2/2] https://cdn.discordapp.com/attachments/615786602454581249/1224319028600897588/e6896c377e8946e7.png?ex=661d0ef3&is=660a99f3&hm=4b300fdfd713424eb954a2b4b85e51367d3286d2a1ab59fbe44dddf47eeedb93& [11:39:47] :StrongestSupportMH: [12:01:37] https://github.com/libarchive/libarchive/pull/1609 popped up on the alpine/users ML, not qualified to comment on whether there's a vulnerability there though [12:06:48] also https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1068024 discussion in debian about reverting to a version of xz-utils that have no commits by the attacker [12:10:10] the former is my personal conspiracy theory regarding this btw [13:41:12] [1/5] Luckly I was not affected. Lack of updating for the win? [13:41:13] [2/5] demon@demon-desktop:~$ xz --version [13:41:13] [3/5] xz (XZ Utils) 5.2.5 [13:41:13] [4/5] liblzma 5.2.5 [13:41:14] [5/5] demon@demon-desktop:~$ [15:02:57] [1/12] Yeah, Translated: [15:02:57] [2/12] ``` [15:02:57] [3/12] To our customer, [15:02:58] [4/12] Discord prioritizes maintaining a safe and healthy environment for our community. Your account has violated Discord's Terms of Service or Community Guidelines. Therefore, we have suspended your account based on the following reasons: [15:02:58] [5/12] Your account has been suspended by Discord due to observed spamming and/or misuse of the platform. Discord's anti-abuse system flagged your account due to one or more of the following factors: [15:02:58] [6/12] - Sending a large number of DMs in a short period. [15:02:59] [7/12] - Joining servers primarily focused on spamming Discord users. [15:02:59] [8/12] - Automating your user account or engaging in self-promotion. [15:02:59] [9/12] - Engaging in actions that are impossible for a human to perform at the speed observed (such as rapidly joining a large number of servers). [15:03:00] [10/12] - Engaging in potentially fraudulent activities. [15:03:00] [11/12] Thank you for your attention to this matter. [15:03:01] [12/12] Discord Trust and Safety Team``` [15:03:16] Thanks lol [15:03:21] (I just happened to find it lol) [15:03:29] I did send an appeal to Discord and they did not reply to [15:03:42] oh no [15:04:08] I'm assuming this is just one of those mass ban events again that happened last year and they're going to take forever to reply because of a massive backlog of support tickets [15:04:25] If there isn't a response in like a week I'll just submit a new appeal ticket even though it probably won't make them any more likely to reply [15:05:15] I was unfairly banned from my Twitter account, but got a response 2 months later [15:05:29] Lol I see [15:05:31] That's unfortunate [15:06:35] Seems like it can take months to get a response on large services 😿 [15:06:55] [1/2] :EpicFaceMH: [15:06:55] [2/2] https://youtube.com/watch?v=TkxhFzrkBS0 [15:17:52] https://youtube.com/watch?v=oD2fwIIHq6E [15:21:40]