Discussion Topic |
|
This thread has been locked |
zBrown
Ice climber
|
|
|
Apr 22, 2017 - 05:44am PT
|
Use of img tags OK?
There used to be a "vulnerability" where the image could send a HTTP 401 Unauthenticated response, which would trigger a login screen for the user. If you set this as forum avatar, it would spawn a login popup for anyone visiting a page where your avatar appears. Lots of people will then attempt to log in with some username and password combination, probably the one for their forum account.
A friend of mine found this a few years ago, but nowadays it doesn't seem to work anymore. At least I couldn't easily reproduce it a few months back. Edit: I was wrong, this attack is still possible! /edit
As for XSS attacks this way, you're safe. The browser will, or should, always interpret this as an image no matter what it contains or what headers it sends. You can customize the image based on the request (serving a small image to SMF prechecking the image so that it doesn't downscale it, then large for everyone else). Or feed the browser lots of gif-data until memory runs out or something. But there are no real big vulnerabilities here that allow Remote Code Execution as far as I know.
https://security.stackexchange.com/questions/36447/img-tag-vulnerability
|
|
mouse from merced
Trad climber
The finger of fate, my friends, is fickle.
|
|
|
Topic Author's Reply - Apr 22, 2017 - 06:52am PT
|
Do not assume the image I am seeing is the same one YOU are seeing.
Frankly, I don't get it. It fails to add up. I feel stupid now. Thanks a lot.
Not to mention vulnerable.
|
|
mouse from merced
Trad climber
The finger of fate, my friends, is fickle.
|
|
|
Topic Author's Reply - Apr 22, 2017 - 09:52am PT
|
He is resting in peace somewhere, maybe taking the answer to the question:
"What happened to four feet of Tioga Pass?" with him.
Dingus, do you, as the putative geology expert of the bunch, know anything about the would-be elevation of TP?
|
|
mouse from merced
Trad climber
The finger of fate, my friends, is fickle.
|
|
|
Topic Author's Reply - Apr 22, 2017 - 10:08am PT
|
Yes, a man's got to know his limitations.
Else, how can one exceed them?
[Click to View YouTube Video]
And did life imitate Andy or did Andy imitate life?
Who really cares but Andy's lickspittles?
In Oliver Stone's The Doors, Jim Morrison meets Andy Warhol at a party. The camera focuses on a golden telephone, which Warhol offers to Morrison saying: "Somebody gave me this telephone... I think it was Edie... yeah, it was Edie... and she said I could talk to God with it, but uh... I don't have anything to say... so here... (giving Jim the phone) this is for you... now you can talk to God." Morrison accepts the telephone and later gives it to a homeless person.
I'm fairly certain there was just the standard black phone access at TP.
|
|
mouse from merced
Trad climber
The finger of fate, my friends, is fickle.
|
|
|
Topic Author's Reply - Apr 22, 2017 - 03:46pm PT
|
A slow day at the Taco. A veritable swamp of molasses.
Not even a peep about 4 - 20 the last two days. Not even from Gnome.
In the spirit of livening it up, here.
[Click to View YouTube Video]
BRAND NEW FILLEM ABOUT EARLY CLIMBERS GETS THE BIRD.
Details when they come. I think Messner is holding the bird in question, a very tiny one.
[Click to View YouTube Video]
The hardest climb was always the best for Mummery.
|
|
zBrown
Ice climber
|
|
|
Apr 22, 2017 - 03:53pm PT
|
Yeah I know, jewels and binoculars hang from the head of the mule, but what about Freddy Fender?
For the feint of Eye
But the bootz you say, weren't they made for walkin?
Christopher or Nancy, I say.
|
|
Gnome Ofthe Diabase
climber
Out Of Bed
|
|
|
Apr 22, 2017 - 04:08pm PT
|
So bad is my devices' function that I tap three words before any of the type spears.
Phugggin broken , infected
Far from usable.
I've been slandered hard from here
and my 4/20 share, from here is front and center in the hcrub's latest attack.
I'll bring it here I'm just not interwebbing till I lose some weight.& get the bugs out of the machine
|
|
Gnome Ofthe Diabase
climber
Out Of Bed
|
|
|
Apr 22, 2017 - 04:23pm PT
|
used a'ghin me by the viscous sociopath who has been hung 'from 'round my neck by Glue snifffers*
4 / 20
Bump,
akin to wishing I had some.
Good people don't smoke pot
They eat it now.
If to inhale a flowers smoke be a make or break.
It is
Already broke.
The way it seems,
the just say No grandmas ?
They smoked dirt weed.
Now It would be different
The now is so to high test you need to take a rest.
I prefer a mild buzz. A buzz that proffers a tidy smile and lite laugh.
That I can (&some times 5 times) a day and still afford a coffee.
I'm industrial, low grade stems n seeds to feed to my boids.
I've not afforded a splief in years!
And the leaf I'd use has no longer been safe to grow for me.
I've moved out of the woods, my back yard idjut, burns everything all the time from smoke stack to wet pine, in piles . His woods!? Not mine !
Wow
It sucks not Having half a dozen girlfriends in!
know, I'm old now, and my friends in Durango are too, with kids and other pass times,
one couple has a yurt somewhere.
I'm glad to try to build the stoke, &
Pass along any advice that I can. I've been tied in and on belay since I was 4yrs old..
Not that means anything at all, just that do have
Two teenagers who also visit the forum.HCRUB
|
|
Gnome Ofthe Diabase
climber
Out Of Bed
|
|
|
Apr 23, 2017 - 01:29am PT
|
What page how far back?
@ 4:20 I was trying to find the break up moment where we bantered as to the likely. Hood
That any one would spot me ? Stop me from hitting the deck?
As a thing I pointed out I've tried and both been bigger and of a kind nature ,
But
I'm able nd better at Using flames
Burning bridges
The Flames ~ They burn
Leaving waste But harsh is wHT is
A family thing
Fear of rejection ?
Nope, sure of it !
Expecting it to come, from Moment one.
I still wake with terror
From a climb I'd not known of
via some bagger sheep dipper
The far top end, The ' visor,
the whole upper chunk was hollow
A curving, longish, thing. You could belay off a bumper.
From up there, sweeping vistas of the campin' & Parkin
Josh
Now it's has crashed but then it flexed as you pressed past
Only to find no holds up there
One had to turn the flake on the expanding edge,
A long sideways from Hexes,
in the fix between the matrix and the long hollow,
falling off flaking thing that had to be climbed.
|
|
mouse from merced
Trad climber
The finger of fate, my friends, is fickle.
|
|
|
Topic Author's Reply - Apr 23, 2017 - 05:43am PT
|
TWTEDTW.
That was the Earth Day that was.
Not much happened, we rotated once, revolved 1365th of the orbit, and I spent the day and the next more asleep than awake.
Not feeling good. This lung diseased body is crapping out.
But that's not to say I don't sympathize with Mother Earth. She's getting more and more abused by humans. It's reasonable. Look at me. I've abused my body by smoking, some pretty stupid drug use, and a disregard for its need for regular exercise. Why should the Earth expect to be treated any different by critters who don't treat their own bodies well? Humanity is the disease here, and it won't be long before both myself and the rest are, too.
Happy f*#kin' Monday when it gets here. I'm going back to bed again. Maybe my cheer will return, but with breathing coming this hard, it's not likely.
https://qz.com/965184/us-president-theodore-roosevelts-camping-trip-in-yosemite-with-john-muir-was-a-prelude-to-a-national-parks-system/
|
|
Gnome Ofthe Diabase
climber
Out Of Bed
|
|
|
Apr 23, 2017 - 07:26am PT
|
I've said that 'man is the earths cancer' - for decades
Ever since
"Send a Mouse to college" days
Any one remember that anti -cancer campaign?
|
|
|
SuperTopo on the Web
|
Let us know!