Comment Re:Actual Attack Vector (Score 0) 69
Just a quote from the sharty thread where all the info was dumped posted by the person who dumped it, if you know anything more feel free to contribute
Just a quote from the sharty thread where all the info was dumped posted by the person who dumped it, if you know anything more feel free to contribute
Little things here and there have been updated, like captcha usage and minor posting changes along with TLS. The vast majority remains at least 4 years old with the majority of the PHP code being absolutely ancient. It's likely they had no real sysadmin, which is kind of impressive considering how long it's lasted without a major attack like this
It's been dead since around 30 min after the sharty poster gained complete control, the homepage may still be up but that is hosted separately from the boards. It'll likely take weeks to repair unless they're willing to risk another hack due to not completely patching all the spaghetti code
"Contrary to popular belief, it was not SQL injection.
The exploit is such:
4chan allows uploading PDF to certain boards (/gd/,
They neglected to verify that the uploaded file is actually a PDF file. As such, PostScript files, containing PostScript drawing
commands, can be uploaded.
Said PostScript file will be passed into Ghostscript to generate a thumbnail image.
The version of Ghostscript that 4chan uses is from 2012, so it is trivial to exploit.
From there, we exploit a mistaken suid binary to elevate to the global user."
Just an interesting comparison on what our state determines to be of greater potential benefit to the american taxpayer
So true, maybe with another hundred billion dollars of equipment donated (and subsequently replaced with generous taxpayer funded payments to the our nation's military-industrial complex) Ukraine has a chance to re-capture another eighth of a mine-fielded oblast!
We're truly investing heavily into humanity's future with each 40 year old alcoholic Russian conscript obliterated by a $1,080,000 ATACMS missile
$3,300,000,000/year to Israel, $58,000,000,000/year to Ukraine... $750,000,000/year on fusion research
Online social networking also leads to increased exposure to and engagement in self-harm behavior due to users receiving negative messages promoting self-harm, emulating self-injurious behavior of others, and adopting self-harm practices from shared videos. Greater time spent on social networking websites led to higher psychological distress, an unmet need for mental health support, poor self-rated mental health, and increased suicidal ideation.
https://www.ncbi.nlm.nih.gov/p...
She didn't introduce it/write it. Took a whole five seconds of googling to find who authored it and its basic premise https://legislation.nysenate.g...
>What they want is not immigration of any kind, but guest workers who can be used against American labor, then turned on and expelled at a whim.
Is this why they legalize millions of them? They have no reason to expel workers able to be abused and underpaid, if anything the only reason why they bother pretending to hate immigrants is because the other party receives more of their votes
>Crossing the Darien Gap and riding packed in unventilated, unlit cargo cans is practically a Carnival cruise, amirite?
Certainly not fun, but definitely not nearly as risky as it has ever been in the history of this nation for poor immigrants - there's a reason why millions upon millions are deciding now is the time to cross. There is absolutely zero punishment, rather they are awarded for entering
>Meanwhile young people born here can barely be bothered to show up for a job interview within an hour of the appointment because they don't like the Uber driver on that shift.
Yes, your personal anecdote invalidates the right of a country's children to hope for a well paying career. And don't worry, in one generation the descendants of these migrants will be much the same, except more numerous than the natives, at this point
>Not unless there's a sudden surge in applications from Scandinavian millionaire Christian fundamentalists: The only combination of demographics they'll tolerate.
Reagan himself was the first to grant citizenship to millions of Hispanic immigrants. Both sides of congress enjoy the thought of immigration - one side approves it because it increases short-term corporate profits by importing workers who willingly do the same tasks for a fraction of a native professional's pay, and the other side loves illegal immigration not only for that reason, but also because it ensures a massive future voting block of the descendants of those immigrants who are very likely to vote for their party for the rest of time, flipping states like Texas and all but guaranteeing the demise of their political rivals
>Willingness to accept considerable personal risk for the chance at bottom-of-the-barrel jobs is a superb measure of will and determination
Not really much risk involved anymore, considering how simple was is for almost ten million to cross it in the past few years, and the lack of any sort of punishment for illegal entry. There's not much incentive to stay in their homeland and work to improve conditions there when they could just walk across a paper border and enjoy wages many times greater and a country whose inhabitants already worked to make it a place where they could prosper, which only worsens conditions in their native countries
Live within your income, even if you have to borrow to do so. -- Josh Billings