Will on the whey back

wei

How much is it?

We had a similar one a few years ago

Very similar

£10

SilverCrest crt

Was it good?

Don't nap now kid, this is important

Pretty good

I woulf day it's worth it

Would *

Say*

Also I didn't nap I was walking to the bus stop

!play turrican the great bath

Cya nigs the bus is here

aight

!play autism

fugh

wrong autism, Mitubot

!play cancer

!queue

!play cancer

!play jew

!play https://www.youtube.com/watch?v=SmsRN78qMxM

>8ball Do you have autism?

:question: **Question**: `Do you have autism?`
🎱 **8Ball Answers**: `Most likely no`

Fucking normie

>8ball Are you a fucking normie?

:question: **Question**: `Are you a fucking normie?`
🎱 **8Ball Answers**: `Most likely`

>8ball are you a sperg?

:question: **Question**: `are you a sperg?`
🎱 **8Ball Answers**: `Probably not`

Nadeko :(

You aren't one of us

>8ball are you one of us?

:question: **Question**: `are you one of us?`
🎱 **8Ball Answers**: `Maybe`

>8ball do you like the D?

:question: **Question**: `do you like the D?`
🎱 **8Ball Answers**: `Dont even think about it`

I got fucking denied

!skip

>8ball did I get denied?

:question: **Question**: `did I get denied?`
🎱 **8Ball Answers**: `NO - It may cause disease contraction`

Ok

never forgetti http://puu.sh/pwkGp.png

>8ball Do you want to get on the dickey ride?

:question: **Question**: `Do you want to get on the dickey ride?`
🎱 **8Ball Answers**: `Dont even think about it`

:(

Denied

:^)

ayy lmao

First cop of the day

Will review

👌

Will watch review

!play 5 ways to pierogi

Quick post view

I have to go to a birthday party

Cya

aight

Raviogi Raviogi

what's in the pierogi

Ravioli ravioli where's the hoodioli

boutta go garage sale hunting for cheap PCs

lets go boyz

last year got a pc with i7 920, 8gb ram, and an hd 4870 for $40

Wat

How

Also I found smash melee for 40 dollars

Hey chains

Xiaomi Typewriter when

Fookin gorgeous typewriter

Looks like mech keys

>british red cross

fucking nurses

£1t

15*

FUVK

Dat dere

God dammit Aliexpress, why dont you have any good S7 cases you fucks.

>poll what to cop;CRT TV;Amp;Typewriter

📃**Comfy** from **/csg/** server has created a poll which requires your attention:

**what to cop**
`1.` **CRT TV**
`2.` **Amp**
`3.` **Typewriter**

**Private Message me with the corresponding number of the answer.**

Pm Nadeko 1 2 or 3

>pollend

📄 **Total votes cast**: 2
--------------**POLL CLOSED**--------------
📄 , here are the results:
`1.` **[CRT TV]** has 2 votes.(100%)

I'll check it Monday

Ran out of time

hi

Hi, welcome to chink shit cancer central

Thanks good to be here

is there a /g/ discord? for non chink shit related things

Probably not TBH.

That sucks

Probably for the best since it's technically summer on 4chan.

Who cares

I kinda wanna start a /g/ CTF team

We mostly talk /g/ in here anyway

https://boards.4chan.org/g/thread/55139998 lets see how this goes

niggers smh

<#189808092219703297> is where all the /csg/ happens

yo how do i change my avatar on this damn site

cog in the bottom left next to the chatbox

Click user settings (cog at the bottom left) and click your avatar.

ty

i feel like im gonna get a whole bunch of elitists replying to this

yay for /g/

>/g/
>expecting them not to be elitist

If any of you newbies want to add music to the playlist join the General voice channel

Then

!play with a youtube link or song title

> Not using windows 10 for anything related to security

> Not having control flow guard

!clear

!play /g/ 4chan

```
Could not extract information from /g/ 4chan

?[0;31mERROR:?[0m Unable to download webpage: <urlopen error no host given> (caused by URLError('no host given',))
```

Nice.

type !help to see the mitubot commands

I have a shit taste in music so I'll save your ears.

Sucks that I'm in the kitchen. It's too damn noisy.

i like kitchens

uh...

most people here play Japanese ear licking audio

is that bot written in py?

play whatever you want

yeah I believe so

!play https://youtu.be/ckMvj1piK58

that's.. probably not a great idea to give anyone access to the urllib/requests package

:^)

there's a HTTP response splitting bug

can in theory result in pwning of the bot

top class british songs m8

Wanna fix it, Dawn?

cathy is in control, I trust him

i mean idfk if it's vuln

Wait what where

Everything has vulnerabilities. Everything.

Why am I mentioned

Someone saying Mitubot is vulnerable to attack

well depends what ver of urllib it uses

It's using youtube-dl

!play https://www.youtube.com/watch?v=UctriMuXYS0

!play google.cum

eh

Bassline

can someone try requesting an invalid url

why not join the voice channel :^)

!play https://www.youtube.com/watch?v=NHiM8Fanus

i'm good

lel

can someone do !play google.cum

!play google.cum

uhm.

Either way don't blame me

I'm just hosting it

i mean

Blame this guy

someone could in theory exploit your box

!help

via that bot

!skip

!skip

Well you're welcome to try

inb4 Dawn is another 12 year old like Zombii

I don't have a non work box I can use to hit it with

so I can't test it

You got me.

Sucks to be you

I mean try injecting another header into the URL

then look at the response

I don't see how that would do anything, it gives youtube-dl the link and asks for the stream url

Uh you can use it to hit internal resources/send requests to any site with any data you want

It's open source so they can see for themselves.

youtube-dl, I mean.

We're just using someone else's bot

Yeah but someone here is hosting it

all I'm saying is it's worth checking so they don't get abuse complaints for someone using their shit in a bad way

If it was that much of a problem to you then you'd fix it. :^)

So you want to request cp links in here with !play or what?

What the fuck

All I did was suggest that your bot might be vuln to a public CVE

!play autism

I was about to say.

All I did was suggest that all you can do is maybe send a random request

I don't know if ydl has any filters

... I already said I don't have a box I can tail -f logs for

And I don't particularly care about that

lol

Discord isn't going anywhere, try hitting it later

I don't have a box that isn't work related

itistimetostopposting.jpg

>poll is it time to stop posting;yes;no

📃**Comfy** from **/csg/** server has created a poll which requires your attention:

**is it time to stop posting**
`1.` **yes**
`2.` **no**

**Private Message me with the corresponding number of the answer.**

Mind elaborating what "hit it" means?

Make a request to my http server

Where I can see if it's actually working, it's HTTP header injection

It's an issue even if you just have private services running on your box

because smeone can use that to pivot to them

>pollend

📄 **Total votes cast**: 2
--------------**POLL CLOSED**--------------
📄 , here are the results:
`1.` **[yes]** has 1 votes.(50%)
`2.` **[no]** has 1 votes.(50%)

I thought Snowdenistas went out of fashion.

Like i'm only telling you because I like it here already. I'm not trying to make a big deal out of it

But you are.

>not making a big deal out of it

I mean it's a potential security bug

I really don't know what's the correct way to handle it now, I thought you'dw ant to at least be informed

You did more than inform, Dawn.

I don't know what that means.

I'm just trying to help..

http://blog.blindspotsecurity.com/2016/06/advisory-http-header-injection-in.html

dude weed lmao

There's a POC

There's a time and a place and this isn't it.

It's hardly /csg/ related too.

I thought you said /g/ chats in here

>autism-general
This.

Have I upset people?

yes

im highly upset

Wasn't my intention.

I'm crying... for suppressing my laughter for too long.

Tbh I don't care either way about all of this, it's just how you haven't let the subject drop for a long time, it gets awkward

It was kind of awkward to begin with.

Like, it's fine saying there may be a slight flaw with it but the way you went about it was too much, Dawn.

Ok I'm actually at my computer now

wtf was that noise

I'm not trying to argue or be hostile, I just wanted you to explain what you think could be done

i appologize then @Deleted User i just noticed something and thought out loud.

Can someone please let me rate their purchases?

And the way I understand it right now, the worst thing you can do is get the ip of the box

It's not me you should be apologising to. Anyways, moving on.

@cathy I said, can be used to send requests filled with custom data, and pivot through your network

Unless there's a horrible vuln in the requests lib

there is.

Mind if I pm you?

Go ahead

Also I'm somewhat puzzled about "pivot"

Should've DMed at the start IMO.

Okay I get it.

Are the anti-discord fags in the /csg/ thread laughing at us even harder now?

This is like Marmaladegate

probably

^

fuck whats with these fucking noises holy shit

Bricky is making them, I can't hear right now

mute him if you want

right click on him then mute