[00:00:12] OH NO [00:00:22] that's my single answer [00:01:21] Elaborate? [00:04:10] i found eightteen xsses in cargo [00:04:16] i don't think it's gonna go well for moderation [00:04:35] yikes [00:04:58] oh, and the ability to run arbitrary sql functions and two CSRFs [00:06:34] And this folks is why you have cargo in its own DB [00:06:51] [00:07:14] So true [00:07:32] What other Yaron’s have you tried [00:10:24] not even my first program i wrote in 2018 can compete with cargo [00:10:31] it has zero security vulnerabilities [00:10:36] i barely knew how to use for loops back then [00:11:23] anyway [00:11:27] > [12/11/2024 11:07] What other Yaron’s have you tried [00:11:36] i tried to find vulns in replace text, but couldn't find any [00:11:46] but i think it's bundled with mediawiki normally? [00:11:53] ExternalData? [00:12:02] oh yeah, that too [00:12:10] couldn't find any vulns, even if i tried [00:12:16] Impressive [00:12:17] surprisingly [00:12:25] What others does he have [00:12:25] i should pick out a random yaron extension and do a sec review [00:12:28] as fun [00:13:51] Can you get the list [00:14:03] https://www.mediawiki.org/wiki/user:yaron%20Koren#My_extensions [00:14:59] Widgets [00:15:07] :pupCoffeeMH: [00:15:12] heh [00:15:32] If you can find a vuln in admin links [00:15:37] I’m fucking done [00:17:24] BlankEclair: I’d say try Page Exchange [00:17:33] i actually looked, couldn't find one [00:17:39] I’d be interested in seeing if it could be used on dev wiki [00:18:07] https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/extensions/DataTransfer/+/refs/heads/master/includes/DT_Utils.php#17 [00:18:13] i think someone doesn't know that you have to enable ooui [00:18:51] Think it would pass sec review? [00:18:59] so uh [00:19:03] how do i say this [00:19:13] That’s how you know it’s good [00:19:19] 🍿 [00:19:23] Let’s hear it love [00:19:26] i'll be testing the extension locally [00:19:40] use uselang=x-xss on a specific page [00:20:27] How many [00:20:41] now I want popcorn because of pixi lol [00:21:15] four system messages on a page so far [00:23:34] For page exchange [00:23:41] 4 xss [00:23:44] On one page [00:24:19] same cause [00:24:28] ugh, why does my server have to be so slow [00:24:33] okay, i have a phorge task to create now [00:24:47] Claire and Pix for SRE when [00:24:54] lol yeah [00:25:48] Isai [00:25:53] me for [00:25:56] nothing [00:25:57] yes [00:25:58] Did you see when I set up a local mediawiki [00:26:16] https://tenor.com/view/ghost-modern-warfare2-stare-meme-2022-gif-27104713 [00:26:20] lol [00:26:22] I did not [00:26:33] please give a summary [00:26:35] Count yourself fortunate [00:27:01] [1/2] Looked something like this [00:27:01] [2/2] https://cdn.discordapp.com/attachments/615786602454581249/1305690277758898278/image0.jpg?ex=6733f254&is=6732a0d4&hm=91fb9eaf3401c8c334e3a09d9ce5a62101a02d02417ff69756d6f891f12f10ba& [00:27:15] lol rip [00:27:16] This was when I first set it up fully from scratch on Ubuntu VM [00:27:26] Now i use [[mw:cli]] [00:27:26] https://www.mediawiki.org/wiki/cli [00:27:26]

[00:27:36] on fresh install? [00:27:39] with no extensions? [00:27:44] I may or may not have [00:27:51] Dilly dallied [00:27:54] With chown [00:27:56] Just a bit [00:27:58] https://issue-tracker.miraheze.org/T12870 [00:28:09] yippe [00:28:25] Private task 😔 [00:28:31] must be serious [00:28:35] chown 655 usually fixes everything [00:28:44] i mean, private tasks for security vulns :p [00:28:46] That’s chmod [00:28:49] and chown www-data [00:28:51] i'll send the first part of the task though [00:29:01] > so uh, pixl and i were criticising yaron's security posture in his extensions, and i decided to randomly pick an extension and do a security review on it [00:29:03] > uhhhh [00:29:05] > (image of xss) [00:29:16] I tried that [00:29:19] be sure to be as unprofessional as possible in your tasks! [00:29:22] chmod 777 also works \:P [00:29:22] That VM is probably dead now [00:29:28] I mean it’s private [00:29:31] agentisai: please don't [00:29:35] yes [00:29:42] lol [00:29:44] yamete kudastop [00:29:51] embrace bad permissions [00:29:51] wow, lots of traffic here [00:30:01] oh hey juest [00:30:02] Replace SRE with MWS(much less braindead) and we probably would [00:30:09] i did a security review in a yaron extension for the lolz [00:30:11] hey how its going, i should probably not be joined to the miraheze irc channels, right? [00:30:24] I forgot that SRE doesn’t exist anymore [00:30:28] oh wait, there's a couple more [00:30:57] But we both can’t [00:31:13] For one reason or another with is definitely not NDA [00:31:22] i've been having sort of a connection hazard with znc [00:31:23] Hola [00:31:36] Secretary’s been delaying with the NDA form \>:( [00:31:36] so i think maybe i should leave some channels like this one [00:31:59] you can still be here even if you don't use mh if you want to [00:32:08] hmm, do BNC services still exist [00:32:14] yeah i know, but im on mh discord so i guess its pointless to be joined here [00:32:24] on irc that is [00:32:28] except for tech-ops [00:32:30] I was on the irc channel too at one point [00:32:36] I think at least 75% of IRC members are also on Discord [00:32:39] so its not that unheard of [00:32:45] yeah, not unheard of [00:32:51] rhinosf1 is both on irc and the discord [00:32:53] I’m also on IRC just because why not [00:32:57] lol [00:33:17] anyways been quite a while since i wasnt here :) [00:34:06] good to see you [00:34:23] Secretary is finishing his Masters [00:34:27] Same [00:34:30] is it a good idea to try a billion laughs attack on my server [00:34:44] I’m finishing my doctorate, no excuse \:P [00:34:57] Wait shit really? [00:35:00] must be cool [00:35:05] I didn't even finish community college [00:36:51] okay cool, i found yet another xss [00:36:58] this time because of a print() statement (?????) [00:37:29] print doesn’t even exist in JavaScript [00:37:33] php [00:37:46] i didn't even know that function existed [00:38:03] Yaaaaaaaarrrooooonn [00:38:11] huh [00:38:24] there's a debug() function defined with a commented out print() [00:38:26] and yet... [00:38:32] there's a direct call to print() anyway [00:39:48] oh wait, print is a keyword [00:40:00] @agentisai id make a joke calling you doctor but I don’t remember your surname:waah: eh retcon. Hi Dr. Penguin! [00:40:21] Dr. Isai [00:40:26] lol? [00:41:39] lol [00:41:46] No isai is his first name though [00:41:52] huh okay [00:42:16] yeah, agent is basically agent prefix like type of person [00:43:10] Agent is actually derived from my childhood fascination of becoming an EPF agent (read: Club Penguin spy) [00:43:11] https://files.catbox.moe/i4s5g5.png [00:43:13] avghelper: i did it [00:43:18] took me a month, but you're welcome [00:43:43] I have memories of being on the Club Penguin Wiki too [00:43:53] interesting [00:45:13] my childhood fascination was either being a pokemon trainer or being on a virtual world like in one of the old cartoons I used to watch [00:49:19] or I dreamed of being in outer space because I was really into astronomy when I was much younger [00:50:38] I’m surprised meteorologist wasn’t in the mix [00:50:58] Hmm that was in my teenage years but it was there [00:51:13] just later on [00:52:32] according to my dad I used to have the stats of the planets memorized [00:52:36] (I don't anymore) [00:53:46] Actually this reminds me of when I met a local meteorologist in my senior year of HS. The school I was in made it happen and I was like [00:53:47] omg no way [00:56:57] lol, i figured out a way to make mediawiki core eat 100% cpu [00:57:19] hmm [00:57:19] I'm scared to know how [00:57:22] is it supposed to stop? [00:57:27] it's not stopping... [00:57:59] Please don’t do that on prod [00:58:02] oh okay, it stopped [00:58:25] pixldev: what's stopping me? :3c [00:58:28] (/lh) [00:58:31] lol [00:58:43] i wonder if i can dos my own server this way [00:58:46] The toggle on Special:CentralAuth/BlankEclair [00:58:50] a [00:58:52] touche [00:58:52] oop [00:59:31] congratulations, girl made her server eat up 100% cpu on all cores [01:00:09] nothing like some old fashioned murder can't fix [01:00:12] rip I'm scared to know how that can happen [01:00:16] Om nom nom [01:00:17] Claire [01:00:22] Would this work on beta [01:00:47] maybe [01:00:51] > [12/11/2024 12:00] rip I'm scared to know how that can happen [01:00:53] htop [01:01:13] htop? [01:01:29] you top your system [01:01:32] or dom [01:01:42] oh [01:01:47] lmao- [01:01:48] interesting [01:01:56] okay okay, htop is a process manager xD [01:02:05] i just killed the php processes that were being hit [01:02:12] oh [01:02:17] sounds interesting [01:02:44] … [01:02:52] Tell me about this please [01:02:55] a [01:02:57] about what? [01:03:18] OOMing beta [01:03:36] i don't think it can oom [01:03:38] i hope? [01:03:46] but it can make it use 100% cpu until it hits the time limit [01:04:42] I don’t wanna hope on IRC if I make a PGP key on my phone rn do you wanna tell me how it works lol [01:04:57] lmao that works, i guess? [01:06:00] The key is 1k over the char limit [01:06:09] eks dee [01:06:14] Waaah [01:06:20] awawa [01:06:21] I could email it to you [01:06:21] But [01:06:23] At that point [01:06:28] We could just email talk [01:06:37] imagine [01:06:40] private phorge task where we talk [01:06:52] But talking to each other in public with PGP is funny af [01:07:02] oh wait [01:07:03] paste [01:07:19] On phorge? [01:07:24] yeah? [01:07:31] or do you want me to make a task so we can talk [01:07:39] conpherence, task edition [01:08:16] Nah lmao [01:08:29] i can make it visible to just the two of us ;) [01:08:35] why did i wink [01:08:35] I’ll email you my public key and you send me yours [01:08:37] Funnier [01:08:58] lmao sure [01:09:09] 8866 53BF BBA3 1BC2 4904 2484 6F08 77E2 8B7F E933 [01:09:21] Sent [01:10:07] Is it on a key server [01:10:11] yeah? [01:10:16] omg why is it so long [01:10:25] Pffft [01:10:39] Idk I’m using the PGPro app on my phone I had [01:10:49] What’s the email associated with it [01:11:06] Disroot? [01:11:09] yeah? [01:11:27] Huh [01:11:38] The app may just be stupid [01:11:42] > > gpge --import gay.asc [01:11:43] > gpg: no valid OpenPGP data found. [01:11:45] > gpg: Total number processed: 0 [01:11:55] What [01:12:40] ??? there's a BOM? [01:12:44] > gay.asc: Unicode text, UTF-8 (with BOM) text, with CRLF line terminators [01:12:45] Wat [01:12:57] so there is [01:13:43] okay, imported [01:14:24] Still can’t find yours [01:14:30]