Goonstation Forums › Discussion › Patches
A PSA regarding trusting the client, courtesy of SpyGuy

Thread Rating:
  • 7 Vote(s) - 3.86 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Threaded Mode
A PSA regarding trusting the client, courtesy of SpyGuy
Noah Buttes Offline
Banned
Posts: 2,722
Threads: 143
Joined: Sep 2012
BYOND Username: Powmonkey
#1
10-16-2018, 08:01 AM
Please remember to be very careful when using Topic() and when dealing with hrefs, otherwise this could happen:

Find
sankto Offline

Posts: 37
Threads: 2
Joined: Jan 2014
BYOND Username: sankto
#2
10-16-2018, 02:30 PM (This post was last modified: 10-16-2018, 02:32 PM by sankto. Edited 1 time in total.)
Oh, my god. Nice/terrifying find.
Find
Lady Birb Offline
Banned
Posts: 1,584
Threads: 151
Joined: Jun 2016
BYOND Username: Lady Birb
Character Name: Allie Allison
#3
10-16-2018, 02:38 PM
oh god oh fuck oh why
Find
NateTheSquid Offline
Mentor
Posts: 2,022
Threads: 68
Joined: Jun 2016
BYOND Username: NateTheSquid
Character Name: Nathan Dunkleman
#4
10-16-2018, 06:16 PM
I'm 100% sure this is supposed to be a youtube video but because youtube is experiencing outages in my location right now this is still pretty funny

500 Internal Server Error
Sorry, something went wrong.

A team of highly trained monkeys has been dispatched to deal with this situation.

If you see them, send them this information as text (screenshots frighten them):
   APkpgMUO9rRaBR1CIOE6gS6Kj-Pvk5A0TmqtjCH8gYcihgXKHCkVATgM
   XDTM0GGNQqgVkPVpLH-MdXIYw-jhhLsE0CyRWHJmOpiO8BApDM_xmSwC
   NyIgECJ3r1djO5rbPu9ll_fb7_9OfJqmBZSCck3JIhpMA5vatH--uVVP
   St3nHJZQR9-i60wrd9x9QGpR-eHhq8V-YDmG-RWODDcgbR07RpE9J2k5
   3B2g2lT_I36HcX4LtuXAGTRckzWz2pkGxiWGzBF2rwBUAJOXtLxsyEX1
   Qm99_SP0hmXthbDVigwAdGjPtgDKjlM3Fcp9WiCLOXnZzHrXB1q8M7gy
   bZ22Afg9Y6AoG2TZrLQaoQWU3EldC-wHNb8lB3Yn7KeMbZJVd0yjUzDo
   OjSi3hbJm7XVu9Ar75TaPh8l5cAgMnkIwiXu0JpTtVhZg_wMJ42mI59-
   ioLTs3WXpsYE9hBdTdK0Q_9lwmkUQevCPwjbmcyE-fu2MSdn3FPwDqFx
   8bmu_0w5IiJLYR17D5AgkuQu9_n6fcQf6Kf1luin70B2PGU0zwEL8A_w
   A9CX0iLh2gjG3aKxTGAh392hJZsrblW_uA7mZIHQj1nJAVXJeRv7Fx45
   XhuBznIB0ZUDl1xwtIPI3SyPqrFjU60ATcvBiKLpOiS0Al22FHL5fBFe
   oZC5Q3ZLAM5pgJFgHb0DlUxD2fT14KOdFmv6XLdzM4QHhC-qvDntnCAg
   ay-Ov5mjyLFkQcDexeg-fSnn65b8Roa-Q84D2JvXwyg4YF_u-1z4SUAU
   aZwOgd4xfV8BLIaqdUkED9kr78iE6QQS1KKYHhOTPgNCKLA6YV0SbhwE
   7cHNAjIhQSDh2usnoQLxrPipFZZRtczYdKTYUFoPuQZjcN56a6h1wC8d
   q0Ixx2octfEmukyzH8Qm917S0NKxapcIBDOThzuVCO6Lu-MUNZv2CqRW
   da3zg2TtO2wbZXN_OXpLAHN_ywHldna_uzi6flXnUpEHxqvWrKs6JKhU
   yAGsbgCh5qdQMvxRgxtP5gx6qYFvNhTfNjSKekodPO-FjQ_8Awc27x9G
   ITc2JICtzzWk23DZyYPEW3VWQCjLGb77Fmziq1Og222QRFRg7yYmzx-q
   ZrZwn0ljHw4QX4hFcORV-exc8bFBQ_PXRHXIg-FzIJ0zdWGG3OTwRFlR
   X0KL9CaXnCvhCx5Ienk4_F52F1xKZoMpxfpeYK9uJfbR5yJfZHC9iwHQ
   X2oL2h7KUrri99Aq7vKKyMDLVgXKOYQi8oGbsgE1ETnc02b3XH6TlXlZ
   5PSBvCFfst7ryQquQKKYo9lhvXCrirl683O0Np1kH6r-RmKJ7vzSZ6o6
   Po8W0_a2vzxOX_EEbUFknBVeN31FdEF2YH6lfM-Twx4bSAVceOQivIYi
   KcBb9AU_MNUI58taYSaHpSnAhgVzG_oMe6qiOlLRg78wG4f-EEarFA10
   TaKbLg0_gUpBf4SpVl2Tc2KzUnFX-KDDpXWYfUjJWAttkAhg4ZDEwHno
   G-15dZYvGCc79SFaJZmNJk7xokXobzMNo0wlg13yOpB_ps_X_zxfmceL
   MDI5NEaSiQlRTNBaW_xsljGvHJPOPdvH4UsVvUd2nop9NvZaHKgDsBiL
   xlz8AQYo0DDut0AaXyTu-KAb9Fb-OW-oV2aFUJwbmb8Mg96xg1G9Nmlh
   R2jbmcQoyefrFXkgn8natpMreg2C6D0Ncz5McuZqA9hPbHF6DnkRwMPp
   hAfxE3yrNxCf034BfbAyX0NQchVO3Wi__SiWAoQK7G2Pi4eQRR-uTnQV
   qCY6YA_SgCUIxF_zGmJeDhAZf-wQ66ApkM50li54bLpLQJ4v4DoORCXF
   T6hqgkbaCiqiSFklxf4nCvhjJBjZx5lKi4buO95uP8jPrAR4Kw6t0nOl
   t13Tf9ya8UKxdtgoU0ISHVyj2wSWasujcOPYDkBhTYTGbk1bWSvzBv60
   mvf0FOQH9a_3BkIODYkHMlnR8Xhg6__TD0R-LZjXu3mC9Zf9vmeIcUd3
   21Qn6wTG8xtw7ibYsJZbMkgVwS8GWPrdz47fSpW35Ie26qYDCSFRsnUS
   wZLzNkPTB02L95fCcH101D8drtLd8Kk0nERrYQshvEd3WWlaBgb5Hk6n
   n2JS9p8c-Xksa53b76gJfusVnrwz39lQpTMvmuPpAUPoCFArzJudCHe9
   IK4Z2jExwi99GlLaOnrli4NOvhvrV75iKI94JyxLggJ597Kipq22-M1g
   ea74N7KbWg1IaAonSD_NwQt-wEyF24LsCPAQi2thHHOxa32E_IG1XBwl
   H_VnlMc0JqnviUr2J1WcwO431vdBdkZX-bAdlFYQgIZzlu2JvKV6yW7H
   EHwNQN07sw-hHBmKoTulHssqZv9elIepzV_agLTP0l6B6FVSHRfTWz_C
   oWsGKtUQEjcjDx1V-XlsHz9iG24QwHUo4wCjcWpfpz7YOSVZpFIsoQgP
   pzNcsNTl3t-rbwSwqfOlAFdfL_waZ4ID5h8q41c
Find
sankto Offline

Posts: 37
Threads: 2
Joined: Jan 2014
BYOND Username: sankto
#5
10-16-2018, 06:29 PM
(10-16-2018, 06:16 PM)NateTheSquid Wrote: I'm 100% sure this is supposed to be a youtube video but because youtube is experiencing outages in my location right now this is still pretty funny
It's worldwide (the youtube outage).
The video show someone exploiting a machine ingame to run an unexpected link through an href tag, and end up with 10u of initropidril.
Find
Xaviens Offline

Posts: 68
Threads: 14
Joined: Sep 2015
BYOND Username: Xaviens
#6
10-20-2018, 02:43 AM
This really should have been uploaded in the exploits section so that everyone and their mother doesn't see it and use it.
Find
Technature Offline
Mentor
Posts: 2,456
Threads: 113
Joined: Feb 2017
BYOND Username: Technature
#7
10-20-2018, 12:22 PM
(10-20-2018, 02:43 AM)Xaviens Wrote: This really should have been uploaded in the exploits section so that everyone and their mother doesn't see it and use it.
Find
ZeWaka Offline
Developer
Posts: 2,041
Threads: 65
Joined: Nov 2014
BYOND Username: Zewaka
Character Name: Shitty Bill Jr.
#8
10-20-2018, 12:39 PM
(10-20-2018, 02:43 AM)Xaviens Wrote: This really should have been uploaded in the exploits section so that everyone and their mother doesn't see it and use it.

feel free to use it lol
Website Find
Noah Buttes Offline
Banned
Posts: 2,722
Threads: 143
Joined: Sep 2012
BYOND Username: Powmonkey
#9
10-20-2018, 12:57 PM
(10-20-2018, 12:39 PM)ZeWaka Wrote:
(10-20-2018, 02:43 AM)Xaviens Wrote: This really should have been uploaded in the exploits section so that everyone and their mother doesn't see it and use it.

feel free to use it lol
Find
Berrik Offline

Posts: 1,032
Threads: 310
Joined: Oct 2013
#10
10-20-2018, 02:58 PM
Chem creation/use is logged so anyone who does this will prob get found out immediately, I think.
Find
Noah Buttes Offline
Banned
Posts: 2,722
Threads: 143
Joined: Sep 2012
BYOND Username: Powmonkey
#11
10-20-2018, 06:47 PM
(10-20-2018, 02:58 PM)Berrik Wrote: Chem creation/use is logged so anyone who does this will prob get found out immediately, I think.

It's also been patched entirely.

There's no way in hell I'd post this if Spyguy hadn't done a thorough sweep through the code for anything similar.
Find
ZeWaka Offline
Developer
Posts: 2,041
Threads: 65
Joined: Nov 2014
BYOND Username: Zewaka
Character Name: Shitty Bill Jr.
#12
10-21-2018, 09:48 AM
(10-20-2018, 06:47 PM)Noah Buttes Wrote:
(10-20-2018, 02:58 PM)Berrik Wrote: Chem creation/use is logged so anyone who does this will prob get found out immediately, I think.

It's also been patched entirely.

There's no way in hell I'd post this if Spyguy hadn't done a thorough sweep through the code for anything similar.

also Spy literally posted the video himself

this was filmed quite a while ago
Website Find


Forum Jump:


Users browsing this thread: 5 Guest(s)