Security Fuckup Megathread - v7.2 "BoringSFM"

The Something Awful Forums > Discussion > Serious Hardware/Software Crap > YOSPOS > Security Fuckup Megathread - v7.2 "BoringSFM"

«‹›47 »

Rufus Ping: Dec 27, 2006; I'm a Friend of Rodney Nano

WARNING: Posting in this thread is not secure as it may contain unfixed security issues

post all your epic security #fails itt

code:

PATCH NOTES FOR v7.2 "BoringSFM"

* The name is aspirational and not yet a promise

PATCH NOTES FOR V1.0.1g

* changed version number

PATCH NOTES FOR V0.9.8

* once again removed LF and Fishmech corruption from the last thread
* added a new feature that enables the mods/admins to go ahead and probate/ban as necessary if LF'n poo poo happens
* added heartbeat feature to non-existent SSL layer on the forums

PATCH NOTES FOR V69

* removed LF and Fishmech corruption from last thread
* new "hello" service for conference attendees
* blocking of js crypto through message relay services like twitter

PATCH NOTES FOR V1.2

* made more efficient for version 1.2 after having removed fishmeching and talk about credit card contracts

PATCH NOTES FOR V1.1

* don't loving use any of these goddamn exploits you dumbshits

join us on irc: irc.synirc.net #yossec

useful news resource for information security professionals: http://reddit.com/r/netsec/

# ? Jun 23, 2014 02:18

Adbot: ADBOT LOVES YOU

# ? Apr 18, 2024 21:52

Lain Iwakura: Aug 5, 2004; The body exists only to verify one's own existence.; Taco Defender

i'll do highlights of the last thread later

# ? Jun 23, 2014 02:20

Squinty Applebottom: Jan 1, 2013

idg the version #

# ? Jun 23, 2014 02:20

forum enthusiast: Aug 12, 2010

javascript crypto ought to be enough for anybody

# ? Jun 23, 2014 02:22

Nintendo Kid: Aug 4, 2011; by Smythe

hail satan

# ? Jun 23, 2014 02:22

Luigi Thirty: Apr 30, 2006; Emergency confection port.

voted 7-2 mod 5

# ? Jun 23, 2014 02:23

syscall girl: Nov 7, 2009; by FactsAreUseless; Fun Shoe

rufo you're avatar makes me feel insecure, as you are not moose milkie

my eye pee compromised

# ? Jun 23, 2014 02:23

Rufus Ping: Dec 27, 2006; I'm a Friend of Rodney Nano

Squinty Applebottom posted:

idg the version #

https://www.imperialviolet.org/2014/06/20/boringssl.html

and 7.2 is the last version of truecrypt

# ? Jun 23, 2014 02:25

Vicas: Dec 9, 2009; Sweet tricks, mom.

syscall girl posted:

rufo you're avatar makes me feel insecure, as you are not moose milkie

my eye pee compromised

he's been spoofing moose milkie's av this whole time

this forum needs a more secure protocol for making sure i don't think some user is some other user

# ? Jun 23, 2014 02:25

DONT THREAD ON ME: Oct 1, 2002; by Nyc_Tattoo; Floss Finder

every time the other thread gets closed i know it's time to read it because something bad happened

# ? Jun 23, 2014 02:26

theadder: Dec 30, 2011

in on the ground floor

# ? Jun 23, 2014 02:27

hobbesmaster: Jan 28, 2008

USSMICHELLEBACHMAN posted:

every time the other thread gets closed i know it's time to read it because something bad happened

not this time!

# ? Jun 23, 2014 02:33

Lain Iwakura: Aug 5, 2004; The body exists only to verify one's own existence.; Taco Defender

it was already gold and about to hit 100 pages. it was time for a new one

# ? Jun 23, 2014 02:36

kitten emergency: Jan 13, 2008; get meow this wack-ass crystal prison

this is how the sec thread ends
not with a !
but with a whimper

# ? Jun 23, 2014 02:43

Progressive JPEG: Feb 19, 2003

the bigger blacker thread

# ? Jun 23, 2014 02:49

Sharktopus: Aug 9, 2006

fatwood from snack overflow

# ? Jun 23, 2014 03:45

Moist von Lipwig: Oct 28, 2006; by FactsAreUseless; Tortured By Flan

# ? Jun 23, 2014 04:14

ChickenOfTomorrow: Nov 11, 2012; god damn it, you've got to be kind

OSI bean dip posted:

it was already gold and about to hit 100 pages. it was time for a new one

are we back to the days where threads with >100 pages would crash the forum DB? :lol:

# ? Jun 23, 2014 04:24

Asymmetric POSTer: Aug 17, 2005

theadder posted:

in on the ground floor

# ? Jun 23, 2014 04:28

Joe Law: Jun 30, 2008

somehow the last thread managed to survive heartbleed and not get closed, but ill still only give this one 2 weeks.

# ? Jun 23, 2014 04:28

kitten emergency: Jan 13, 2008; get meow this wack-ass crystal prison

this thread needs a warrant canary; how about if you're compromised, start making good posts

# ? Jun 23, 2014 04:30

kitten emergency: Jan 13, 2008; get meow this wack-ass crystal prison

Ed - thanks for the double post awful app

# ? Jun 23, 2014 04:30

Nintendo Kid: Aug 4, 2011; by Smythe

ChickenOfTomorrow posted:

are we back to the days where threads with >100 pages would crash the forum DB?

nope people are just sperging way too hard about sizes

# ? Jun 23, 2014 04:31

syscall girl: Nov 7, 2009; by FactsAreUseless; Fun Shoe

uncurable mlady posted:

this thread needs a warrant canary; how about if you're compromised, start making good posts

# ? Jun 23, 2014 04:36

Rufus Ping: Dec 27, 2006; I'm a Friend of Rodney Nano

some interesting people yall might like to follow on twitter. or not

@agl__
@ashk4n
@briankrebs
@Cryptomeorg
@csoghoian
@EFF
@electrospaces
@gcluley
@hashbreaker
@ioerror
@matthew_d_green
@micahflee
@moxie
@Paulmd199
@puellavulnerata
@rossjanderson
@runasand
@schneierblog
@SecureTips
@thegrugq
@tqbf
@ValhallaSSL

# ? Jun 23, 2014 04:36

fritz: Jul 26, 2003

ChickenOfTomorrow posted:

are we back to the days where threads with >100 pages would crash the forum DB?

i think it was only 25 pages, 1000 posts

# ? Jun 23, 2014 05:19

neutral milf hotel: Oct 9, 2001; by Fluffdaddy

Rufus Ping posted:

some interesting people yall might like to follow on twitter. or not

oh nice thanks!

# ? Jun 23, 2014 05:32

Cocoa Crispies: Jul 20, 2001; Vehicular Manslaughter!; Pillbug

Rufus Ping posted:

some interesting people yall might like to follow on twitter. or not

@agl__
@ashk4n
@briankrebs
@Cryptomeorg
@csoghoian
@EFF
@electrospaces
@gcluley
@hashbreaker
@ioerror
@matthew_d_green
@micahflee
@moxie
@Paulmd199
@puellavulnerata
@rossjanderson
@runasand
@schneierblog
@SecureTips
@thegrugq
@tqbf
@ValhallaSSL

tqbf is still the #1 hacker news poster iirc

# ? Jun 23, 2014 05:33

Linguica: Jul 13, 2000; You're already dead

finally the forum recovers from its hacking by the Syrian Liberation Army

# ? Jun 26, 2014 02:04

Luigi Thirty: Apr 30, 2006; Emergency confection port.

Database integrity fuckup thread v6.9 radium edition

# ? Jun 26, 2014 02:30

Peanut and the Gang: Aug 24, 2009; by exmarx

The SA forums were extremely secure for three days.

# ? Jun 26, 2014 02:34

Vicas: Dec 9, 2009; Sweet tricks, mom.

Peanut and the Gang posted:

The SA forums were extremely secure for three days.

not a single thing was stolen from the servers

# ? Jun 26, 2014 02:43

jony ive aces: Jun 14, 2012; designer of the lomarf car; Buglord

i'm the reddit link in the op

# ? Jun 26, 2014 02:54

Peanut and the Gang: Aug 24, 2009; by exmarx

jony ive aces posted:

i'm the reddit link in the op

Reddit Fail! Rufo's never going to live this down.

# ? Jun 26, 2014 02:59

jetz0r: May 10, 2003; Tomorrow, our nation will sit on the throne of the world. This is not a figment of the imagination, but a fact. Tomorrow we will lead the world, Allah willing.