Notices by Matt Hamilton (eriner@noauthority.social)

+ lemon and clementine

The start of peach cheong

> marriage councilor

I’d rather die than (pay to) insert a woman I’m not having sex with into my marriage.

@p @w0rm @graf most of the stuff I see in corporate environments uses containers, and their ops teams almost always push them toward a unified slim image(s) eventually because the people staring at the AWS/GCP/Azure receipts are hounding them to save money on the k8s cluster project that just quadrupled their monthly expenditures, and they can pass the buck to the internal security dpt and have the monkey dance about "reproducible builds" and "centralized dependency management" or something.

@p @w0rm @graf > /bin/sh

it isn't always about what's present, but various runtime restrictions that you have to test. Sometimes it works, sometimes acls and policy flag/prevent weird shell interactions that are commonly "malicious", such as /dev/tcp interaction. Though, zsh's (if present) tcp module often isn't ;)

Unless the app is written in python and using it for runtime, my experience is that python is far more rare than bash or perl.

@p @w0rm @graf I never said "compiled languages are always fast", I said all interpreted languages are slow.

> bash is terrible

I mean, I use zsh, but when you want a reverse shell you have to use what's there, and bash usually is. Sometimes for one reason or another it can't be done with bash, but most systems that have bash also have perl. IIRC most distro distributions of nginx include perl as a runtime dependency.

@graf @w0rm @p I've never contributed to Mastodon (or Pleroma/whatever) because the languages they use disinterest me, and the only Go fedi project is run by crazies.

I've used Go (and zsh) almost exclusively for half a decade and I've grown into quite a happy rut.

I wasn't bothered by the lack of generics, but even that's taken care of (though I think it's a tad ugly).

@graf @w0rm @p to be fair, this is because I'm retarded and don't remember the code I wrote 5 minutes ago, probably a symptom of spending so many hours of code review on so many projects.

At this rate, I'll forever be a Go zealot.

@graf @w0rm @p I would rather use Windows than use an untyped language

@p @w0rm @graf lets be real, all interpreted languages are dog shit slow.

Death to Ruby, death to Python, death to JS, and death to Perl (except keep it installed on your machines because I use that thing for reverse shells more often than I do bash & /dev/tcp, heh)

@graf @w0rm @p I professionally find security bugs for large American corporations who paid sixteen Indians to make Java apps to process electronic medical records.

I assure you there is nothing I haven’t seen before.

The recent mastodon issues have been pretty bad. An arbitrary user email+IP info disc was recent, and before that there was a pretty gnarly SSRF.

@p @w0rm @graf I emergency patched a week or two ago. I already got my whoopin’, so I’m obligated to hoot and holler now that it’s no longer my turn to suffer.

@p @w0rm @graf *laughs in Mastodon*

A driveway gate has been on my list of todos for more than five years, but driveway gates are a pain.

Last night I had an idea.

Soon I will begin work on my driveway portcullis gate.

Thanks Obama

@PNS pft.

Expel them, and in a few months try them as adults so they can go to facilities already equipped to handle it.

Parents know the kids won't face immediate consequence from the State so they use them.

Jailing all involved is only thing that'll suffice short of the long boat playing TOTO on loop.

@PNS > No one ever threw a lab stool at anyone in my school.

The only kid I remember throwing chairs when I went to school was the mentally disturbed kid who loved WWE.

And I'm pretty sure "the messed up kid obsessed with WWE" is itself a meme, so 🤷♂️

@PNS

You're welcome.

@PNS Jim Jones had the right idea. Just think of how clean we could make the streets if we just laced all the kool-aid powder with cyanide.