a random tech banner

/tech/ - Technology

Buffer overflow


New Thread
X
Max 20 files0 B total
[New Thread]

Page: Prev [1] [2] [3] [4] [5] Next | View | Catalog | Banners | Logs


How hard would it be to create a terminal client for endchan/InfinityNow? I know that the OverChan android app can view this site; does that work by scraping or is there an API?

It would be much more comfy to browse here from the terminal than through the browser. You could have proper keyboard navigation between posts, and you wouldn't need a mouse at all. The biggest issue that comes to mind would be solving the captcha for making posts.







thumbnail of 2.0Logo.png
thumbnail of 2.0Logo.png
2.0Logo png
(168.84 KB, 2142x2093)
LynxChan is an imageboard engine I started developing in 2015 with performance and flexibility in mind. It now powers several chans, with some having a good amount of traffic, like http://mewch.net and http://endchan.xyz 

LynxChan 2.0 has entered it's beta with a stable release scheduled for 19/05.
It brings easily the biggest changes ever made in the project's nearly 3 years of existence, having completely changed templating and caching.
Now offering around 5 times better performance when serving pages and 50 times better performance when building pages it is trully deserving of a major version bump.
Along with these optimizations it includes the following features:

Links to board staff on board moderation page.
Page with details for media files, including a list of posts that use the file.
Implemented "remember me" on logins.
Thread's bump order is adjusted when replies are deleted.
Setting to configure the cache expiration of static files.
Optional headers and footers on pages.
Setting to completely hide unindexed boards.
E-mail confirmation.
Terminal command to change account's password.
E-mail notifications of reports made to content you can moderate.
Configurable limit of board message sizes.

The project's repository is at http://gitgud.io/LynxChan/LynxChan and my demo site is http://lynxhub.com




thumbnail of 1080.jpg
thumbnail of 1080.jpg
1080 jpg
(206.06 KB, 1500x788)



thumbnail of 1423378028165-0.gif
thumbnail of 1423378028165-0.gif
1423378028165-0 gif
(174.38 KB, 800x600)
Learning:

http://www.securitytube.net/

http://creator.wonderhowto.com/occupythewebotw/

http://n0where.net/

http://www.offensive-security.com/metasploit-unleashed

http://www.exploit-db.com/

http://resources.infosecinstitute.com/

http://www.windowsecurity.com/articles-tutorials/

http://www.securitysift.com/

http://www.sans.org/reading-room/

http://packetstormsecurity.com/files/

https://www.corelan.be/index.php/articles/

http://routerpwn.com/

http://opensecuritytraining.info/Training.html

https://www.blackhat.com/html/archives.html

http://magazine.hitb.org/hitb-magazine.html

News:

https://threatpost.com/

http://www.deepdotweb.com/

Wargames:

http://overthewire.org/wargames/

https://www.pentesterlab.com/

http://www.itsecgames.com/

https://exploit-exercises.com/

http://www.enigmagroup.org/

http://smashthestack.org/

http://3564020356.org/

http://www.hackthissite.org/

http://www.hackertest.net/

Distros:

https://www.kali.org/

http://sourceforge.net/projects/metasploitable/

https://tails.boum.org/




Posting my old 'learn_asm' textfile:
https://wiki.osdev.org/Main_Page
http://cs.lmu.edu/~ray/notes/nasmtutorial/
http://asmtutor.com/
https://0xax.blogspot.com.au/2014/08/say-hello-to-x64-assembly-part-1.html
https://security.stackexchange.com/questions/176096/how-does-shellcode-really-run
https://www.soldierx.com/tutorials/Stack-Smashing-Modern-Linux-System
https://samsclass.info/127/proj/p13-64bo.htm



Western Digital published a guide to transform the RISC-V HiFive Unleashed board into a desktop:
https://github.com/westerndigitalcorporation/RISC-V-Linux

SiFive completely open sourced their bootloader:
https://www.sifive.com/blog/2018/09/06/an-open-source-release-of-the-freedom-u540-c000s-bootloader/

This means Coreboot can now have more development on SiFi platforms:
https://twitter.com/phoronix/status/1040566412794884097
The usage of Linux kernel as a payload (instead of bloated UEFI stuff) is going good too with the project LinuxBoot:
https://www.linuxboot.org/
Check this (very good) talk:
https://media.ccc.de/v/34c3-9056-bringing_linux_back_to_server_boot_roms_with_nerf_and_heads

There's still some blobs, though. The GPU is not open hardware, although some project have open ISA (maybe in the next years):
https://github.com/VerticalResearchGroup/miaow
https://github.com/asicguy/gplgpu

There's also the concern about closed USB. The project WooKey is trying to solve this:
https://wookey-project.github.io/

Some years from now and we could actually have a RISC-V laptop. The Embedded Controller is still a issue (maybe solved with OpenEC), as well as the keyboard/mouse/display controllers:
http://chromium.googlesource.com/chromiumos/platform/ec/


thumbnail of 473734734.jpg
thumbnail of 473734734.jpg
473734734 jpg
(98.58 KB, 752x1061)
CAN THIS BE DONE?

P2P web browsing via websites served and shared on individual nodes:
users can create their own websites and host them from their own computers/servers
users can upload and share other's websites on their own computers/servers
self serviced websites are manually named *but will generate a random entropy hash within the url, example:
node://7bv45ix0/8ch.net  or  node://c334o96y/endchan.xyz
*the random entropy hash prevents individuals from creating and overriding other established websites
endless domain creation: .com, .org, .info, .onion, .rebel, .on, .geek ... et al (infinite)
browser can access HTTP, HTTPS, FTP, Zeronet, Beaker, eMule/eDonkee and various obscure networks.
browser is enabled for users to share files with others, creating decentralized P2P file sharing
the browser would have its own built-in decentralized search engine similar to YaCy that can pull up any content found
high standard end-to-end encryption would be active by default for all P2P connections
browser has a lightweight bit-torrent client built-in
onion routing is not mandated but the option would be allowed within the browser
I2P routing would also be an option for users
Dust and IPFS could be utilized in the browser for further anonymity and resilient decentralization.
Browser would come with its own built-in email client:
user's emails encrypted and hosted on their computers/servers in a secured directory

The purpose of this would be to create an all-in-one decentralized media sharing monster, rendering the current centralized internet pointless. No more worries about net neutrality or the EU's proposed web filtering or censoring sites like Kick Ass Torrents. It could become impossible for governments, corporations, politicians or media to censor or control narratives or our future.
You  want an internet suite stuffed into one browser?
That's sorta something what Seamonkey and ChromeOS do and dozens of failed projects before them did.
Which is not really good. Having interoperability and data exchange between different gui applications is cool, but having your browser to do all the work is asking for a trouble with too much attack surface. I am also pretty sure, you can have all this shit like accessing zeronet, irc, tor and i2p, download torrents and email with set of web browser addons.
You should also understand that hosting stuff from home computer puts drawbacks on availability compared to a remote VPS in a professional datacenter, or a dedicated server in your basement with nig-rigged car battery UPS which not everyone is eager to invest in.
> the random entropy hash prevents

You just came up with some useless bullshit. Look at how onion, eepsite, gnunet and cjdns domains are resolved and generated. It should not only be a "random hash", but also act as a public encryption key or public key hash without reliability on someone's DNS servers.
The main problem of "le decentralized internet" is how easy it would be for external powerful actor to remove pieces of it, and remove them not only for one group of users, but for everyone. Let's say you live in small corrupt country and post on facebook. Your country's government wants to remove your posts from facebook, but until those break facebook's tos or facebook has big-money business in your country, they don't care. And what would your country do then, ddos facebook or block it? The latter is feasible, but blocks can be avoided, the data still exists on Facebook's servers and is available for those who put much effort in it.
Now say again, you live in Ancapistan Enterprizes Real Estate. A society of decentralized Internetz and such. You host your blog from home, a small single board server and a 1 gbit unlimited connection, pretty nice isn't it? One day you post something bad about McFacebook corporation on your blog. Automated web crawlers of YaCy search engine detect wrongthink and it triggers McFacebook CEO personally. What happens next? They simply DDOS your weak 1gigabit-wide channel to the point when your ISP, or datacenter where your VPS is hosted disconnects your server for consuming too much traffic and blackholes all requests coming for your address, your server is already inaccessible at this moment. It's done, McFacebook corporation completed it's mission and eliminated you quickly. What would you do next? You either go to your ISP or some decentralized CDN provider and ask them to implement a DDOS protection, i.e. you have to find someone who will host your shit for free on pure enthusiasm (ipfs and webtorrent) or for thousands of shekels (Cloudflare) or in exchange for datamining (Facebook). Now you get the same modern Internet and web, where you have to host your important information on a big datacenter with wide bandwidth, distribute content over wide network of CDNs and gateway proxies.

 >>/12806/
Yeah, some girls wrote it years ago
Then google hired them and gave them soul crushing jobs so they would forget about ever having written the wooden stake that could kill the google vampire
https://github.com/PeerServer/peer-server

 >>/12808/
> because will you accept to pay electricity and general infrastructure to host the website of someone else
Just similar to torrents. There is no need to have a full copy, giving endchan as example you could only have /tech/ and a few threads from other boards. You just seed when your pc is on anyway, that should not be expensive. Alternatively some retarded cryptocurrency stuff can be added.

This relly sound like an OS.
You would need to become a router for a lot more traffic.
u also ned moar than jus browser.
I'm too dumb to see how a build in email client wouldn't be a
security threat.




thumbnail of DhabSjYW4AE8qu5.jpg
thumbnail of DhabSjYW4AE8qu5.jpg
DhabSjYW4AE8qu5 jpg
(34.6 KB, 1200x800)
html {
  display: table;
  height: 100%;
  width: 100%;
}

body {
  display: table-cell;
  vertical-align: middle;
}

div {
  margin: auto;
  width: 100px;
  height: 100px;
  outline: inset 100px green;
  outline-offset: -125px;
}
< /style>

< /head>

< body>

< div>

< /body>

< /html>


Source: https://mobile.twitter.com/Martijn&#95;Cuppens/status/1015169981368225793 https://codepen.io/MartijnCuppens/pen/MXojmw







So, they claim Russia attacked about 500,000 routers in Ukraine, with a software that gave root to them. Don't know if it's really from Russia or just democrats trying to push the "election-was-manipulated" agenda, but, that's the future: not as many bombs, but teams that crack the systems to get intel:
https://www.reuters.com/article/us-cyber-routers-ukraine/cyber-firms-warn-on-suspected-russian-plan-to-attack-ukraine-idUSKCN1IO1U9?il=0


You’ve got to give the article some air of credibility, especially considering that the Russian government is the main culprit of the Ukrainian civil war. Such an attack would be in their interests not to mention that the Russian government has performed similar attacks on vital eastern Ukrainian infrastructure



thumbnail of 1_5dOUhQl1ati7FpCfQehhrQ.png
thumbnail of 1_5dOUhQl1ati7FpCfQehhrQ.png
1_5dOUhQl1ati7FpCfQeh... png
(221.01 KB, 1200x603)
 >>/12836/
> Does anybody here use stack exchange? Just curious, there are a lot of tech-oriented sites as part of stack exchange and I was wondering if /tech/ recommends any of them.

Only via search engine results. I attempted to contribute early on but lost interest, though there's a huge push to make their entire suite of sites a "safe space" for idiots to ask stupid questions without fear of being called stupid. I understand that being called an idiot isn't fun, though the goal of not being called an idiot is what pushed me to get good in the first place.


 >>/12837/

This is correct. If you find useful information take it, but don't get yourself involved. Their management publicly announced not long ago that they are to be considered typical sjw trash now, just another outlet for loony propaganda.



thumbnail of 1480819757263.png
thumbnail of 1480819757263.png
1480819757263 png
(138.63 KB, 414x433)





Post(s) action:


Moderation Help
Scope:
Duration: Days

Ban Type:


0 replies | 0 file
Refresh
New Thread
Max 20 files0 B total