WTF Bites
-
Maybe it's just that I'm not as familiar with it, so I have difficulty judging how much it will spread.
I mean, a normal bar of soap will probably last a couple of months[1]. You don't need a lot.
[1] I guess? I don't think I've ever kept track.
On other news today: WTDWTF participates in a personal hygiene study!
-
@Tsaukpaetra said in WTF Bites:
On other news today: WTDWTF participates in a personal hygiene study!
LOL.
I have these two huge Costco-sized packs of bars I bought...I dunno, more than a year ago.
-
@Tsaukpaetra what's YOUR favourite soap? TDWTF would like to know!
-
Google's Faulty Login Pages — Aidan Woods
In hope that public disclosure will encourage Google to fix this, despite refusing to, here goes...
Google's login page accepts a vulnerable GET parameter, namely 'continue'. As far as I can determine, this parameter undergoes a basic check
- Must point to .google.com/
...
It is possible to specify both an open redirect
https://www.google.com/amp/[any_domain_here]
And also an arbitrary file, provided public link sharing is enabled after uploading it to Google Drive
https://docs.google.com/uc?id=[file_id_here]&export=download
[With this, someone is] Able to poison the functionality of the login submit action, such that...An arbitrary step is appended to the end of the login procedure (e.g. a "password incorrect, please try again" page, which steals credentials upon the user re-entering them)
...
Google has been notified of this vulnerability, yet they have chosen to do nothing.
Thanks for your bug report and research to keep our users secure! We've investigated your submission and made the decision not to track it as a security bug.
- Must point to .google.com/
-
@Tsaukpaetra what's YOUR favourite soap? TDWTF would like to know!
Not sure. It's whatever happens to be in the dispenser at the time. Currently it's blue, I think Suave?
-
In hope that public disclosure will encourage Google to fix this, despite refusing to, here goes...
Google's login page accepts a vulnerable GET parameter, namely 'continue'. As far as I can determine, this parameter undergoes a basic check
- Must point to .google.com/
...
It is possible to specify both an open redirect
https://www.google.com/amp/[any_domain_here]
And also an arbitrary file, provided public link sharing is enabled after uploading it to Google Drive
https://docs.google.com/uc?id=[file_id_here]&export=download
[With this, someone is] Able to poison the functionality of the login submit action, such that...An arbitrary step is appended to the end of the login procedure (e.g. a "password incorrect, please try again" page, which steals credentials upon the user re-entering them)
...
Google has been notified of this vulnerability, yet they have chosen to do nothing.
Thanks for your bug report and research to keep our users secure! We've investigated your submission and made the decision not to track it as a security bug.
Does that "vulnerability" allow an attacker to do anything that they wouldn't be able to do with just a normal link to the phishing page? It's not like Google is giving the login cookie to the target site.
- Must point to .google.com/
-
Repro'd on Win7.
Well, let's RDP into good ole OnionBelt XP.
Repro'd.
Don't have a 98 or 95 handy, though. Sorry.
-
@ben_lubar well a normal phishing link wouldn't start off on gmail.com -- and given that the login process normally is multiple pages I doubt the average person would notice.
-
@Maciejasjmj said in WTF Bites:
@Maciejasjmj said in WTF Bites:
makeshift shampoo.
You can do that with bar soap, too. Heck, you can use it for shaving.
Hair conditioner can be used for saving.
-
@Maciejasjmj said in WTF Bites:
@Maciejasjmj said in WTF Bites:
makeshift shampoo.
You can do that with bar soap, too. Heck, you can use it for shaving.
Hair conditioner can be used for saving.
+1, I use my Head-n-shoulders substitute shampoo. Plenty lather-ful for the job.
-
Like they couldn't check whether the complete path is exactly the special name.
As Raymod Chen puts it, "If an extension removed the magic, [...] it would no longer be recognized as magical, thereby defeating the purpose of the magic."
But why do we carry these magic filenames forward even today?
Because everybody still relies on them.Now, you could make a solid argument that while everybody still relies on the magic names, nobody uses the part about extensions any more. On the other hand, I don't think you're going to get past the -100 points barrier for changing it.
@boomzilla said in WTF Bites:
But somehow they did not print her name or the card number or the expiration date on it.
tried to install IE11, and got a big "Operating System is not supported"
It wasn't perhaps the 64-bit installer on 32-bit OS? No? Didn't think so.
-
@boomzilla said in WTF Bites:
Capitol One just sent my wife a new debit / ATM card.
Your boomzilla@onion.com won our lucky draw! Click here for a free Poly Station!!
-
I love how this application complains that Quicktime isn't installed.
Granted, it is a video conversion software, but, um... maybe tell me this when I select the potential source file in question?
-
dog saliva ok...cat saliva not so much
I don't even think that. Cat saliva is more likely to cause allergic reaction, but I believe pathogen-wise it contains more anti-bacterial compounds.
I missed this part previously.
A bite from a cat (and my own cat) required me to have emergency surgery (my first ever), my first stitches, and IV antibiotics for 5 days and then 10 days of oral antibiotics.
I am acutely aware of the bacteria in cat saliva. Triage nurse said the only bite worse than a cat is a human.
With all the cat people here...I expected more from TDWTF.
-
With all the cat people here...I expected more from TDWTF.
I'm not really a cat person TBH. ;)
-
@Karla now if the question were fox bites, that'd be a different story, depending on the fox and whether you got social justice cooties in the bite, as that may rot away parts of your mind (like reading comprehension, critical thinking and basic logic) based on symptoms around here.
-
@bb36e you get the same shit in TFS in VS2010.
You poor soul, you have to work with VS2010?
-
@bb36e you get the same shit in TFS in VS2010.
You poor soul, you have to work with VS2010?
I got rid of the last VM that had it actively installed, though I still have the MSDN ISOs if necessary.
-
@Karla This is definitely anecdotal, but it seems the healthiest people I know were farm kids like me who'd come home at the end of the day covered in an amalgam of cow shit, hay dust, red diesel, and 2,4-D, while all the city kids with antibacterial hand soaps and furnace filters and city water are all now dying of a billion odd allergies.
That's because on farm only the fittest will survive. Your 14 brothers and sisters who couldn't survive on a farm would be able to if they were raised in a city.
-
dog saliva ok...cat saliva not so much
I don't even think that. Cat saliva is more likely to cause allergic reaction, but I believe pathogen-wise it contains more anti-bacterial compounds.
I missed this part previously.
A bite from a cat (and my own cat) required me to have emergency surgery (my first ever), my first stitches, and IV antibiotics for 5 days and then 10 days of oral antibiotics.
I am acutely aware of the bacteria in cat saliva. Triage nurse said the only bite worse than a cat is a human.
With all the cat people here...I expected more from TDWtf
Cause cars suck.
I mean, cars suck.
Fuuuuck, not cars, cars.
Shit! Mobile is
once again.one last try: that's because cats suck.
Yay!
-
dog saliva ok...cat saliva not so much
I don't even think that. Cat saliva is more likely to cause allergic reaction, but I believe pathogen-wise it contains more anti-bacterial compounds.
I missed this part previously.
A bite from a cat (and my own cat) required me to have emergency surgery (my first ever), my first stitches, and IV antibiotics for 5 days and then 10 days of oral antibiotics.
I am acutely aware of the bacteria in cat saliva. Triage nurse said the only bite worse than a cat is a human.
With all the cat people here...I expected more from TDWtf
Cause cars suck.
I mean, cars suck.
Fuuuuck, not cars, cars.
Shit! Mobile is
once again.one last try: that's because cats suck.
Yay!
Wow. I am disappoint.
-
dog saliva ok...cat saliva not so much
I don't even think that. Cat saliva is more likely to cause allergic reaction, but I believe pathogen-wise it contains more anti-bacterial compounds.
I missed this part previously.
A bite from a cat (and my own cat) required me to have emergency surgery (my first ever), my first stitches, and IV antibiotics for 5 days and then 10 days of oral antibiotics.
I am acutely aware of the bacteria in cat saliva. Triage nurse said the only bite worse than a cat is a human.
With all the cat people here...I expected more from TDWtf
Cause cars suck.
I mean, cars suck.
Fuuuuck, not cars, cars.
Shit! Mobile is
once again.one last try: that's because cats suck.
Yay!
Days days days fuck
Yeah, my keyboard knows I don't particularly appreciate or talk about cats.
-
A bite from a cat (and my own cat) required me to have emergency surgery (my first ever), my first stitches
Yes, they are small, but have really sharp teeth. I remember some animal help people mentioning somewhere they have kevlar gloves that protect from bites from even big dogs, but cats can still pierce them.
and IV antibiotics for 5 days and then 10 days of oral antibiotics.
Has a lot to do with the fact the bite was really deep.
I am acutely aware of the bacteria in cat saliva.
I suppose it depends a lot on what the animal might eat. Dogs tend to eat shit, which can get some pretty nasty bacteria in their mouths. Cats don't do that, but then they eat rodents and those carry some pretty nasty diseases too.
In either case, the bacteria tend to stick to teeth. So a bite is much worse than a lick.
I can totally think of some animals that have worse bites than humans.
There are very few who have filthier teeth though. Humans are really pretty bad in that regard, probably due to the high carbohydrate diet.
-
@ben_lubar said in WTF Bites:
Does that "vulnerability" allow an attacker to do anything that they wouldn't be able to do with just a normal link to the phishing page? It's not like Google is giving the login cookie to the target site.
Humm... like download a file from Google Doc and send it to another server? I think with HTML5's File API this could be possible. (Not tried because I have no Google account)
-
During a recent price check at my local grocery store, I found that a typical 177-milliliter plastic (!!) bottle of liquid soap went for $2.69, while a 12-ounce three-bar pack of solid soap was $3.99. Those numbers translate into about 1.2 cents per gram of bar soap and 1.5 cents per gram of liquid soap.
She was so close!
-
-
-
With all the cat people here...I expected more from TDWTF.
Hmm, ok, let's try: I don't like dogs. So there.
More seriously, I've never had any bad consequences from being bitten by either, not that it has happened to often. Our (former) cat never bit hard enough to actually puncture the skin. I never was too fond of the cat licking my hand/fingers, so I would usually rinse my hands afterwards. Maybe you were unlucky?
Filed under: The ``bites''-part might actually be on topic
-
@Yamikuronue said in WTF Bites:
Sure enough, they email me a password in plaintext. Well now I know what happened to the last throwaway password anyway...
Well they could send you a password reset link in plaintext instead, but a determined attacker could intercept that too and reset your password before you can... In fact, I don't see how to make a password reset mail secure short of uploading your public key to the website...
-
I loathe start; useful functionality ruined by utter stupidity by some MS underling back in the day and now we're stuck with that shit.
What the actual
!! This is Windows 10 and still the stupid CONfilename problem exists. Now you may say, it is your damn problem for creating a special file name, and it does not matter if~/desktop/con.jsondoes not look at all suspicious. Ok, I did not try to create the file. If your user passes that path to your program to read, the fuckingifstreamhappily opens the non-existent file and you have no way of knowing such file did not exist to return an error. Now, when you try to read all of that file to parse, hehe you have to wait forever! To fucking reaD A NON-EXISTENT filE!!!1111!!!The fact that they're special despite having an extension was a feature back in the day. Now it's a boat anchor but hey, maybe some obscure mission-critical production software still uses it...
-
With all the cat people here...
I like cats, but I woke up at 3am from a nightmare about evil half-alien kittens last night, so I'm off my game
-
I can't use bar soap on my face. It would dry it out.
You tried glycerin-based stuff?
No, I am just thinking when I used to regularly use Dove. If I remember, I will try.
-
A bite from a cat (and my own cat) required me to have emergency surgery (my first ever), my first stitches
Yes, they are small, but have really sharp teeth. I remember some animal help people mentioning somewhere they have kevlar gloves that protect from bites from even big dogs, but cats can still pierce them.
and IV antibiotics for 5 days and then 10 days of oral antibiotics.
Has a lot to do with the fact the bite was really deep.
It was on my finger. I was bit on a Wednesday. Thursday, I nearly fainted in the shower. Friday morning when to see doc (thinking I would just get a script for antibiotics), told me to go see a hand surgeon and soak it. They called around for me, only found a general surgeon, I went to him and he said he couldn't do anything. I was instructed to go straight to an ER.
This was before cell phones, I had to call my manager, my HR person, and 2 people at the client site (because they had 2 sites), the vet (because she bit me because I was trying to take her to the vet), and a friend to feed the remaining cats back home. A nurse eventually yells at me for using the phone.
The surgery occurred at like 10 PM Friday. Interestingly, by one of the top hand surgeons in the country, Dr. Harold Dick.
My hand had 6 stitches from it and there is still a scar but very slight (no one would notice unless I pointed it out).
I am acutely aware of the bacteria in cat saliva.
I suppose it depends a lot on what the animal might eat. Dogs tend to eat shit, which can get some pretty nasty bacteria in their mouths. Cats don't do that, but then they eat rodents and those carry some pretty nasty diseases too.
She was an indoor cat.
Cat bites to the hand can cause serious infections, Mayo study finds - MinnPost
The small joints and tendons make great hiding places for bacteria.
“When bacteria gets into the joints or into the tendon sheaths, that’s a surgical emergency, no matter what the source,” said Carlsen. That’s because antibiotics tend to be unable to reach those infections. Only through surgery can the bacteria be washed out and removed.
Hmm, I think this explains it since it was my finger. I had been bitten by this same cat before on the fleshy part of my hand and that was fine.
In either case, the bacteria tend to stick to teeth. So a bite is much worse than a lick.
I can totally think of some animals that have worse bites than humans.
There are very few who have filthier teeth though. Humans are really pretty bad in that regard, probably due to the high carbohydrate diet.
I was thinking bears and venomous snakes. The bacteria isn't your main problem.
-
With all the cat people here...I expected more from TDWTF.
Hmm, ok, let's try: I don't like dogs. So there.
I love dogs. You heathen.
I've only have only been bitten playfully or incidentally (at the dog park).
More seriously, I've never had any bad consequences from being bitten by either, not that it has happened to often. Our (former) cat never bit hard enough to actually puncture the skin. I never was too fond of the cat licking my hand/fingers, so I would usually rinse my hands afterwards. Maybe you were unlucky?
Cat bites to the hand can cause serious infections, Mayo study finds - MinnPost
The small joints and tendons make great hiding places for bacteria.
“When bacteria gets into the joints or into the tendon sheaths, that’s a surgical emergency, no matter what the source,” said Carlsen. That’s because antibiotics tend to be unable to reach those infections. Only through surgery can the bacteria be washed out and removed.
-
@Yamikuronue said in WTF Bites:
With all the cat people here...
I like cats, but I woke up at 3am from a nightmare about evil half-alien kittens last night, so I'm off my game
That's a little creepy.
I love snakes but I tend to have weird dreams about them.
**looks like all the bras are in the laundry...when husband gets one clean I will let you know
-
Dr. Harold Dick.
Harry Dick? Jeez...I would have called bullshit on that except google seems to know who the guy was (died in 2011).
-
@Karla Oh yeah.
The dream was like so: I was playing some sort of Sims-like game, the details aren't very important for the cat part. I had screwed up and was thinking of starting over or doing a new challenge, so I was walking around looking at everything before I quit the world. There was this adorable dog, so I was thinking after I reset I'd try to get the same dog again; I was petting the dog, trying to see how it was put together (coat length and so on) so I could recreate it, when I realize there's this adorable kitten sitting on the dog's back. It looks up at me and mews, and my heart just melted. I was like, I can't reset, this kitten is too adorable. So I'm playing with the kitten and its tail is curled around my ankle and I'm like, "aww, it loves me back!". And then I realize, wait, the kitten's tail is up here, what's around my ankle?
It was.... another kitten's tail! There ended up being about five black kittens, all adorable and mewing. So I'm playing with the kittens, and they're slowly growing up, and I realize my hands hurt. Are they biting me? No, they seem innocent, not perturbed or anything. Maybe I need to trim their claws? So I'm going to check one of their claws, and it opens its mouth to hiss at me, and the tongue was made of four vicious-looking outward-facing hooks forming a sort of tube shape. And then they separated from each other and wiggled around a little before the kitten pulled the whole thing back into its mouth.
So I'm like, gosh darnit, I swear, the half-xenomorph kittens are always the cutest ones. It's like they're specifically designed to be cuter and sweeter to lure you in.
-
-
-
I needed Windows 7 for some driver testing so I installed it on my secondary workstation. I tried to install Visual Studio 2015, but it said "No, we can't install without having Internet Explorer 10 installed first. Click here to download it." So I followed the link and got sent to a Microsoft website with no IE10 download, but it did have an IE11 download because "If you're running Windows 7, the latest version of InternetExplorer [sic] that you can install is Internet Explorer 11." So I clicked the download button and tried to install IE11, and got a big "Operating System is not supported" error dialog.
Thanks, Microsoft. EIE11_EN-US_WOL_WIN7.EXE does NOT work on Win7.
I clicked "ignore" in the Visual Studio installer and let it try anyway. It is 8:00 AM. The installer's progress bar has not moved since noon yesterday. One CPU core has been pegged at 100% this entire time.
-
@Yamikuronue Funnily enough, a half-xenomorph grizzly bear is less worrying. It's not significantly more hazardous than the conventional bear…
-
@boomzilla said in WTF Bites:
Dr. Harold Dick.
Harry Dick? Jeez...I would have called bullshit on that except google seems to know who the guy was (died in 2011).
IKR? That's why I posted it.
This happened in 1999 and I think he retired soon after.
-
@Yamikuronue said in WTF Bites:
@Karla Oh yeah.
The dream was like so: I was playing some sort of Sims-like game, the details aren't very important for the cat part. I had screwed up and was thinking of starting over or doing a new challenge, so I was walking around looking at everything before I quit the world. There was this adorable dog, so I was thinking after I reset I'd try to get the same dog again; I was petting the dog, trying to see how it was put together (coat length and so on) so I could recreate it, when I realize there's this adorable kitten sitting on the dog's back. It looks up at me and mews, and my heart just melted. I was like, I can't reset, this kitten is too adorable. So I'm playing with the kitten and its tail is curled around my ankle and I'm like, "aww, it loves me back!". And then I realize, wait, the kitten's tail is up here, what's around my ankle?
It was.... another kitten's tail! There ended up being about five black kittens, all adorable and mewing. So I'm playing with the kittens, and they're slowly growing up, and I realize my hands hurt. Are they biting me? No, they seem innocent, not perturbed or anything. Maybe I need to trim their claws? So I'm going to check one of their claws, and it opens its mouth to hiss at me, and the tongue was made of four vicious-looking outward-facing hooks forming a sort of tube shape. And then they separated from each other and wiggled around a little before the kitten pulled the whole thing back into its mouth.
So I'm like, gosh darnit, I swear, the half-xenomorph kittens are always the cutest ones. It's like they're specifically designed to be cuter and sweeter to lure you in.
Yes...creepy.
My snake dreams are often me accidentally harming the snake, or there are multiple snakes all over the place, or it bites me and can't get it to stop.
I've had them since I was a kid. As a kid the snake bit my mom's ear off.
Hmm....I wonder do we need a dream thread? Because, I have some more freaky dreams.
-
I was thinking bears and venomous snakes. The bacteria isn't your main problem.
Almost any animal, cat included, can bite worse than human as far as pure mechanical damage goes. So the nurse was clearly talking specifically about risk of infection.
-
ETA:
Lorne Kates trigger warning: flat Firefox logo
I needed Windows 7 for some driver testing so I installed it on my secondary workstation. I tried to install Visual Studio 2015, but it said "No, we can't install without having Internet Explorer 10 installed first. Click here to download it." So I followed the link and got sent to a Microsoft website with no IE10 download, but it did have an IE11 download because "If you're running Windows 7, the latest version of InternetExplorer [sic] that you can install is Internet Explorer 11." So I clicked the download button and tried to install IE11, and got a big "Operating System is not supported" error dialog.
Thanks, Microsoft. EIE11_EN-US_WOL_WIN7.EXE does NOT work on Win7.
Don't ask me how I did it.
I... I think I simply ran
vs_community_ENU.exe.
I don't even remember installing IE11, though I suppose I had to.I clicked "ignore" in the Visual Studio installer and let it try anyway. It is 8:00 AM. The installer's progress bar has not moved since noon yesterday. One CPU core has been pegged at 100% this entire time.
Yeah, I remember that happening.
-
@Onyx
http://www.videogamemuseum.com/wp-content/uploads/2011/03/Golden-Game-260-in-1-NES-Pirate-Cart-1.jpg
-
@bb36e you get the same shit in TFS in VS2010.
You poor soul, you have to work with VS2010?
Hey! We just upgraded to it!
-
I've only have only been bitten playfully or incidentally (at the dog park).
Puppies! Aka: piranhas.
-
@Tsaukpaetra said in WTF Bites:
I love how this application complains that Quicktime isn't installed.
That must be a really old app. Even Apple says you should uninstall Quicktime (security shit).
-
@Tsaukpaetra said in WTF Bites:
I love how this application complains that Quicktime isn't installed.
That must be a really old app. Even Apple says you should uninstall Quicktime (security shit).
Remind me to get a screenshot, or link to the site (it expects a screen width of 1000 or so IIRC )
