Giter Club home page Giter Club logo

defuse.ca's Introduction

defuse.ca

Copyright (C) Taylor Hornby 2011-2018.

defuse.ca's People

Contributors

defuse avatar sc00bz avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

defuse.ca's Issues

Upvote system vulnerable to CSRF

The upvote system is vulnerable to CSRF. It doesn't matter too much because the worst that can happen is someone manipulates the page rankings by making their popular web page outvote regular people.

Possible assembler bugs

Quote from email:

Disassembling of 

0F 84 2C 01 00 00 

gives back 

je     0x132.

On the other hand, assembling of

je     0x132 

gives back

OF 84 2E 01 00 00.

It's probably an ambiguous instruction encoding or something like that but I don't feel like opening the Intel manuals right now ๐Ÿ˜…

Online Assembler: Strip semicolon comments

From email:

Your online assembler is wonderful but is there any chance you
could support comments? (Semiconon comments) It's kind of hard to
upload large pieces of existing code which is commented on nearly
every line!

Bug in zero separation of big number calc float outputs

"I thought you might like to know of a small bug re the spacing of zeroes when multiplication involves numbers with decimal points. For example, 20150000 * 3.5 yields 7 052 500 0.0, whereas the spacing of 000 should obviously be 70 525 000.0"

I didn't even realize floating point worked, might be best to just disallow it. Or fix the bug. I'll probably never get around to doing either.

TRENT: Add box for specifying unused numbers

A suggestion:
Add a box to allow to specify a comma-separated list of unused numbers.
These numbers will simply be skipped during random generation.

For example, if you run a contest with 10 numbers.
8 entrants enter and number 8 and 6 remain unused.

Then you could specify 1-10.
and then "6,8" as unused numbers.

The random generation could technically work like an 1-8 lottery, but if any number higher than 5 is chosen (in the above example), then 1 is added to the random output, and if the resulting number (even if no 1 was added) is higher than 7, add 1 again. (in the 7 case, 1 is added because its higher than 5, which puts it higher than 7, which causes 1 to be added again).
Basically, the translation table would be:
1->1
2->2
3->3
4->4
5->5
6->7
7->9
8->10

Online assembler reads only last 4 bytes of immediate

Hello, I don't know if this is the right place for issues with the online assembler and disassembler.

When I try to assemble mov eax, 0x0123456789abcdef, it doesn't give any error and outputs this:

Assembly
Raw Hex (zero bytes in bold):

B8EFCDAB89   

String Literal:

"\xB8\xEF\xCD\xAB\x89"

Array Literal:

{ 0xB8, 0xEF, 0xCD, 0xAB, 0x89 }

Disassembly:
0:  b8 ef cd ab 89          mov    eax,0x89abcdef

It seems to me that only the last 4 bytes of the immediate are read while the rest is ignored.

TRENT: Add possibility to specify shorter times than 6 hours

Add possibility to specify shorter times than 6 hours. For example 3 hours and 1 hour, for more quick lotteries in for example chats.

Even better, allow the organizer to write the locktime (value between 0-720) in hours instead of having a dropdown.

Minor issues

  • Link to my twitter in the navbar is broken
  • A bunch of 404 links / domains that are now placeholders. I guess run a scanning tool?
  • Some pages aren't listed in the list of all pages
  • Some old outdated posts have no date
  • Make the upvote counter min out at zero so people can't artifically make it look like a page is super hated by everyone
  • There was a link to https://defuse.ca/passwordrestrictions.htm somewhere (which now 404s, probably in the navbar or list of all pages)

Update for inn private newsgroup server setup in Docker

Would you be willing to update https://defuse.ca/inn-private-newsgroup-server-setup.htm because I cannot make it work in Docker with current versions of Debian and INN2?

% docker run debian:bookworm bash
# export DEBIAN_FRONTEND=noninteractive
# apt-get update && apt-get install -y inn2

fails with...

Setting up inn2 (2.7.1-1+deb12u1) ...
innconfval: hostname does not resolve or domain not set in inn.conf
innconfval: the FQDN of the server contains invalid characters not suitable for Message-IDs
dpkg: error processing package inn2 (--configure):
installed inn2 package post-installation script subprocess returned error exit status 1

Online assembler tool issue

Hello. I tryed to do a simple assembler code in your tool and after entering the example code:

SECTION .text
   GLOBAL _start
	
_start:
  MOV ecx,msg
  MOV ebx,1
  MOV eax,4
  INT 0x80
  MOV eax,1
  INT 0x80

SECTION .data
  MSG DB 'First code', 0xa

I had recieved an error:

Sorry, your input is too big or contains unsafe directives! 
The period (.) character must not appear anywhere in your source code.

Please correct the code on website to make it wotk

Add CSP headers

Add CSP headers. Implement what's currently being done with X-Frame-Options using the more-standard CSP header.

TRENT: Possible issue with stuck/biased random generation

Found a possible issue with stuck or biased random generation. It apparently generates lots of 5's in a row, which seems uncertainable and weird.

https://defuse.ca/trustedthirdparty.htm?drawingnum=9273
https://defuse.ca/trustedthirdparty.htm?drawingnum=9274
https://defuse.ca/trustedthirdparty.htm?drawingnum=9275
https://defuse.ca/trustedthirdparty.htm?drawingnum=9276
https://defuse.ca/trustedthirdparty.htm?drawingnum=9279

I got then told by a guy that mcrypt_create_iv() is depreciated and random_bytes() should be used.
Just a little bit strange, and hopefully it could be looked into and hopefully fixed.

Ran a bit more tests and seems to be fine, but as I said, could be worth looking into.

check non-existent registers (abx)

when i enter this assembly code :

add eax , byte ptr [abx+edi*2]

assember generates the following code

Assembly
Raw Hex (zero bytes in bold):

02047D00000000

String Literal:

"\x02\x04\x7D\x00\x00\x00\x00"

Array Literal:

{ 0x02, 0x04, 0x7D, 0x00, 0x00, 0x00, 0x00 }

Disassembly:
0: 02 04 7d 00 00 00 00 add al,BYTE PTR [edi*2+0x0]

Possible bug in x86 assembler

Thanks to the person who emailed me this:
thumbnail_captureasm

(This would be a bug in the upstream disassembler if true, I haven't checked yet).

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.