#ot2-the-original-pubsta
652 messages Β· Page 52 of 1
@hazy laurel okay
i have a live image of kali on an usb i carry around, and when i need kali for smt i boot to it
I have another laptop just for kali
thats how you're supposed to use it
I actually saw a really cool use case for kali recently. TryHackMe gives you a cloud kali VM so that you don't have to install things on your device
Kali's really not meant to be installed, or so I've heard
Apparently you're meant to boot live and use tools on-demand
and that's why it's so "bloated"
Generally people run it in a VM afaik. Running it native runs the risk of you getting malware into your local network since there is no security
Or just use a live USB with persistent modeπ€·ββοΈ
Im planning to go deeper into ethical hacking so i just need it permanently
live USB doesn't feel too safe
And its a standby laptop so its fine
Why tho?
Yeah one snap and your os crashes
Sounds safer ngl. as long as you've not mounted your drives
You are connecting to untrusted servers from an OS that explicitly makes no effort to stop malware
Running malware in VMs isn't a good idea
because apparently it's fairly trivial to break through a VM
but this is why I Imagine distros like Tails exist
and I figure maybe pentesters actually prefer tails, with some persistence for whatever tools they choose
You think malware can't mount a drive?
I imagine it's a lot more difficult than breaking through a VM
Kali is in part designed to attack with physical access
So I can't imagine mounting a drive for malicious purposes being a hard thing
I imagine Kali's got something built-in for protecting against unwarranted mounts and stuff
VMs are pretty secure
You can mount your hdd from a live kali
Regardless, there's a lot more hoops to jump through
I think it was literally just mount /mnt/whatever /dev/sda2
I'm not sure, but I Imagine with Kali you might need root
You always have root in kali
I don't think that's true
because that'd be the most unsecure thing they could decide to do
Yes, they don't care about security
You're probably meant to set up your own user
I used kali before, it boots you into password less root.
No, you should stay as root since it is faster
Some of the tools need root after all
Not sure, can't pretend to know anyone who seriously uses Kali
all I know is that Kali is supposedly meant to run live most of the time
Not out of concern for the users hard drives I would imagine, more because you don't want kali installed since it makes the machine pretty useless
Well I figure most viruses won't expect to be running on a live USB
and assuming whoever's using Kali knows what they're doing (as they should)
then I Imagine it's safer in that regard
A live USB is barely different from booting from a different hard drive (except the non-persistent filesystem)
Breaking through a VM is much harder than scanning all hard drives connected to a Linux machine
I'm pretty sure that most people would create a non-root user after installing and I imagine breaking through both the user and drive encryption gets pretty difficult
I'd looked up some "Kali post install" guides online just now, one of the common denominators seems to be creating a non-root user
Huh, when I tried no one said that
That's good.
At the same time, consider VPSes. If VMs were were easy to break, wouldn't that be a more common problem and maybe hosting providers wouldn't just give you rooted machines
I imagine that's some of the reasoning behind credit card verification
iirc there was a bug bounty for Google Cloud within the past few years
something something remote code execution something something
Yeah, turns out that's just a thing that happens sometimes, I was wrong there. Still not convinced local privilege escalation is harder than breaking out of even a basic VM
I don't remember, I just know some people had made some advisories that running malware in VMs does not mean you're safe
Maybe that's changed, but my mind hasn't
ok
hi
anyone know any good editor classic
just to crop some scenes yk
@daring canopy
davinci resolve
I'm so bad at editing.
history of discord?
hows?
what time is it for you guys?
6:16PM
same
5 and a half hours ahead of GMT gang.
why is every problem I see where they force you to use recursion just looping but uglier
why can't they think of things where recursion is actually a good idea
why can't they think of things where recursion is actually a good
why can't they think of things where recursion is actually a
like recursion is fine for fibonnaci or dfs
but
why would you ever use recursion to reverse a string
its utterly pointless
Baelin (Rowan Bettjeman), a simple background NPC in the video game 'Skycraft' has been walking the same route for as long as he can remember. However, his peaceful (and mindless) routine is violently shaken as a short-tempered Adventurer (Ben Van Lier) drags him off his path and into a dangerous quest to escort a mysterious NPC girl named Willo...
because problems where recursion is required are often a lot more complex
and they want to show you the concept of recursion
not how to solve a complex problem using recursion
i used recursion recently in order to parse all ini files from folder of folders
it looked like the shortest way to do it
yeah but then people will think that recursion is only used for looping-esque problems
That's what it does, the same thing over and over
aka a loop...
I'm guessing recursion/
ok i know about haskell and friends
but no one writes a raw recursive function when they want to loop in haskell
...haskell can optimize them into loops, though, right? Right??
they use map, foldr, etc
this channel is off topic
that's not what anyone actually uses recursion for
correct, that's not what anyone actually uses recursion
really?
yeah
what is the airborne velocity of an unladen swallow @proud pulsar
then help someone in one of the help channels lol
or in python-general
you kidding?
no
what is the empty set literal syntax @proud pulsar
aerodynamics of a cow
is it an African or European swallow?
ook
that's not a literal π
but {} would be a dict
{*()} π
is ''
nice bro
π©
@radiant socket
{} for empty sets {:} for empty dicts when π©
!e py print(type({*()}))
@tranquil ridge :white_check_mark: Your eval job has completed with return code 0.
<class 'set'>

:yeye:
so like *() does nothing?
Is there a PEP about it?
it unpacks an empty tuple
no
i know
what is django?
web framework
web backend framework
a bra
what is diff between function based and class based?
in python
@dusky cliff
you can answer.
idkbr
like, functional vs object oriented?

is that a shadow
noice
that's one udderly aerodynamic cow
the udders don't seem to matter, actually
take the pun
no
don't spam please
We're a large, friendly community focused around the Python programming language. Our community is open to those who wish to learn the language, as well as those looking to help others.
ok, sure
Yes.
yes, but the rules still apply
this is totally not off topic smh mh
bro servers can grow past 700k now
already have lol
why did the innersloth server go back down tho?
innersloth requested a lower cap because that many people is very hard to moderate
We're at 250k iirc?
I know we've had to ask to have the cap for online server members raised a few times
might cap that in a month or two tbh
Yeah. We'll probs ask for a cap raise in the next month or so.
wait what
We've still got time
yeah
there's both a member cap and online member cap?
mhm
how do they manage who's online?
like they just not let people be online if they go over
server is unavailable
The server goes unavailable and people can't connect.
that's unfortunate
One of the announcements had the issue because we were hovering near the cap and the ping made more people come online and put us over the cap iirc
why do they have up the member cap anyhow?
infra reasons
like, they could do it automatically tho?
imagine that 250k members come online all at once
if you try support that, you knock off your critical infrastructure and ruin performance for everyone
member caps allow services to rebalance
it's considerably better than it was, you used to have to go request a bump every 10k
oh yeah, joe. We should probs think about putting in a request to raise the cap past 250k in the next few months
we can't
not until discord says you can i think
you raise the cap 10k before you hit it, so we raised to 250k at 90k
yea
the client notifies you and says "you're nearing the cap"
^
aaah, okay cool
same place it tells you about the quick switcher
or 2fa requirement
its pretty cool
is the default limit 100k?
katj, I hope your happy Tests Passed: 31, Failed: 0, Skipped: 0 NotRun: 0
yeeeeeeeeees, is this for microservice as a service?
amazing, literally the perfect service
!mute 395471198173134849 3D Absolutely not. Re-read our code of conduct. This is not appropriate at any level for this server.
:incoming_envelope: :ok_hand: applied mute to @obtuse wind until 2021-05-17 18:32 (2 days and 23 hours).
ah they left
ok π€
ok π€
How do C# and Java/Kotlin/other JVM languages compare in making desktop apps?
C# is generally better if you are targetting Windows
JVM has the advantage of being crossplatform, and necessary for Android development, but what if that doesn't matter for one's case?
It looks pretty slick and .Net is more likely to be installed. Also, .Net Core has MAUI https://github.com/dotnet/maui
That being said, Microsoft is moving more towards Electron then older style GUI apps
interesting
if I was standing up a new app, I'd look at Electron (despite all it's faults) just because web support is always asked for
not sure I want to proliferate Electron apps π
Neither do I but........
There are probably some nicer Electron alternatives somewhere
There's Tauri, but it's only for Rust for now, though it plans to eventually be multi-backend
I'm looking at it from practical point of view
like companies/consumers want web/mobile/Desktop apps, Electron helps bridge that
Hmm, I actually found this just now
https://www.nuget.org/packages/TauriApiWrapper
and from learning point of view, you might as well learn the popular stuff, few people want old style GUI apps these days, it's so annoying for various reasons
I wonder if you can in fact use Tauri in C#
Yeah, I see how Electron would be marketable, but, ehh
It's not just marketable, web stuff has ton of advantages for everyone, you can sell subscriptions, IT admins don't have to keep another thing up to date, users who can't install can use web
Looking at you Discord and Spotify
no
My point wasn't "Which is better technology?" it was "Who wants the π° ?"
Thanks a lot for the help. Sadly, the problem is that you've managed to sum up the things that annoy me most about modern applications π
I'll probably avoid learning Electron for some more time
hmmmmmmm
Yeesh
All but one of my main programs uses electron
Can you guess which one doesn't?
Pls do
Write stuff that is usable that doesn't use it
oh poggers, you can do public static string Hello() => "Hello world!"; in C#
Kotlin can do that, but not Java
!e
while True:
print("1")
@jovial island :x: Your eval job has completed with return code 143 (SIGTERM).
001 | 1
002 | 1
003 | 1
004 | 1
005 | 1
006 | 1
007 | 1
008 | 1
009 | 1
010 | 1
011 | 1
... (truncated - too many lines)
Full output: too long to upload
hehe
quick question... may or may not have gotten into an argument with someone about whether small functions (like 2 - (1 + e^2))should be put into separate helper functions rather than hardcoded in. what's the general consensus about this?
Simple math doesn't need helper functions imo
Athough what the general consensus is I don't know
I'd put it into a function if I wanted to write tests for it, or wanted to give it a name
Depends on the type of functions, what it's doing and how often I use it
~ or wanted to reuse it, yeah π
alright, thanks π
Will giving the operation a name make it clearer is the question.
I made a vscode insiders/stable icon
That looks nice ish
For not really any reason other than making it
I'm not a fan of the weird blend on the cross
It was my first time using gimp smh
It was just a copy but it's ugly I agree
Maybe I should switch the colors and put the green on the front and the tail
Hm
Lemme figure out how to take an overlay and use that color mapping on an image below
lol
@daring jay for kicks
i overlaid them and merged the color scheme

That doesn't look too bad
reminds me of Microsoft Office
its the old vsc icon but based on vs
yes but it reminds me of Microsoft Office
lol
yeah
VSC has entered the chat
one sec, currently loading
Ok, hi, how is everyone?
jaeger is still CPU spiking
goodbye jaeger
i think this is just because i got lazy and didn't set up a proper storage backend lol
but i don't want to!!! i want it to be volatile!
RAM DISK FTW
lol
ramfs prob won't fix things here
we don't really use tmpfs on the nodes
we just stick data in the root, since the nodes are volatile
the all in one install already stores in memory
and I don't want... these lol
so far so good on wiki rollout
these are the only things that we've had 404s for and most of those are cache
eyy
who caused a 403 on the homepage lol wtf
light
whatever i'm feeling like
why is this index still building
should have used postgres..........
no, it's really really truly not
i agree with that statement
MongoDB does have some impressive benchmarks, but they do some interesting things to get those numbers. For example, when you write to MongoDB, you don't actually write anything. You stage your data to be written at a later time. If there's a problem writing your data, you're fucked. Does that sound like a good design to you?
mongodb is webscale
love that
what is webscale?
it's a good shitpost
scale of the web
As applications write data, MongoDB records the data in the storage layer and then writes the data to disk within the syncPeriodSecs interval, which is 60 seconds by default. Run fsync when you want to flush writes to disk ahead of that interval.
Relational data > non-relational data imo (usually)
wellllllll i mean sometimes nosql wins
its not always relational data
is how to define exceptions?
class ThreadError(Exception):
pass
class ThreadNotCreated(ThreadError):
pass
discord literally switched from mongodb to cassandra/scylla because mongodb just didn't scale
mongodb is great for rapid prototyping
Mongo is kinda overrated because of Atlas imo
discord might be updating their highlight.js shit yay
scylla is fucking magic
i mean Cassandra already was but scylla just adds additional flair
it must suck being a cassandra contrib
you implement something in cassandra and then see some C++ brainbox implement the same thing with a 10x performance increase
ya
still what i think is most magical is the fact that you can literally have one cluster spread around the whole globe
lmao
it's such a small feature but I much prefer it to psql
SMH WHY IS THIS HARD
is how to define exceptions?
class ThreadError(Exception):
pass
class ThreadNotCreated(ThreadError):
pass
yes
have it have another exception attached to it
hmm?
kinda? I guess?
you can do something like
I more or less want it to have an attribute of the error that caused it
In [5]: raise ThreadNotCreated("oh no") from Exception("oh god")
---------------------------------------------------------------------------
Exception Traceback (most recent call last)
Exception: oh god
The above exception was the direct cause of the following exception:
ThreadNotCreated Traceback (most recent call last)
<ipython-input-5-68cd161001e6> in <module>
----> 1 raise ThreadNotCreated("oh no") from Exception("oh god")
ThreadNotCreated: oh no
oh nice
try:
raise SpecificException
except SpecificException as e:
raise ThreadNotCreated('ur code sucks') from e
right?
uuhh
you might want it the other way around
>>> raise Exception("bad") from RuntimeError("lolol")
RuntimeError: lolol
The above exception was the direct cause of the following exception:
Traceback (most recent call last):
File "<stdin>", line 1, in <module>
Exception: bad
no
yeah that's right, is it not?
ya i just merged chris' pr
and it only does it once too
anyways
this is if a specific config var isn't set i don't want a generic error I want to know that this occured
now
one more question
This would catch the error?
class ThreadError(Exception):
pass
class ThreadNotCreated(ThreadError):
pass
try:
raise ThreadNotCreated
except ThreadError as e:
raise RuntimeError('ur code sucks') from e
okay cool
I think ot2 has become Joe's channel
lol
honestly i'm happy about ot2
i am equal spread
like peanut butter?
ot2 is more active than ot1
since we brought up boycotting #ot0-fear-of-python I've seen a rise in activity in both #ot1-this-regex-is-impossible and #ot2-the-original-pubsta
oh yes. back to boycotting ot0
class ThreadError(Exception):
pass
class ThreadNotCreated(ThreadError):
pass
is this okay to do?
they're talking about Japanese cartoons
What on Earth have you done
ot2 has been being used more than ot1 in the past month
i haven't sent a message in it since the 5th
oh jeez
that's a NameError.
You messaged and deleted some
That counts
two because it was a mistake
as the ThreadError doesn't yet exist in its own body, I believe
There's not a point to parenting unless there's shared behavior, I would imagine
Wdym? ot0 is way higher
was more active in november 2020, try harder
smh
You are not allowed to use that command here. Please use the #bot-commands channel instead.
21.3% of off topic messages nov 1st to 7th were in ot2
sheesh
It's perfectly fine to use inheritance to show, well, relationships between exceptions. ThreadNotCreated is a child of ThreadError because we want the former to be a kind of the latter
oh, I guess I misinterpreted what "ThreadError" is meant to be
but
class ThreadError(Exception):
pass
class ThreadNotCreated(Exception):
pass
say you have that code
why
then you realize that's creates an error
what then? ThreadNotCreated gets dropped immediately after being created, and doesn't exist anymore π
why?
does it?
can you have a class within a class?
oh. I see
that seems very weird D:
!e ```py
class ThreadError(Exception):
pass
class ThreadNotCreated(Exception):
pass
print(ThreadError.ThreadNotCreated)
@grim seal :white_check_mark: Your eval job has completed with return code 0.
<class '__main__.ThreadError.ThreadNotCreated'>
yikes
there are some public stats available at https://stats.pydis.com/, but that chart is from our instance of https://metabase.com/
The fastest, easiest way to share data and analytics inside your company. An open source Business Intelligence server you can install in 5 minutes that connects to MySQL, PostgreSQL, MongoDB and more! Anyone can use it to build charts, dashboards and nightly email reports.
is there a reason to do this?
no
Couldn't you just have a generic error and then in the same scope have the children
oops
lol
check it again
should make this 418 error
i added some 404s to that 4 u
yes. joe is a teapot
lol, don't look at the PUTs on /
uh oh
π
time to send DELETE requests
chrome UA headers always confuse me
"sec-ch-ua": "\" Not A;Brand\";v=\"99\", \"Chromium\";v=\"90\", \"Google Chrome\";v=\"90\"",
how do I even begin to decipher what the hell is going on there
lol
The base version of chromium is 90, and the version of google chrome on top of chromium is also 90 (since they don't necessarily have to match)
Not_a_brand is intentional to not encourage standard processing for user agent headers. GREASEing
Sec-CH-UA is part of the standard
so where does the 99 come from
Randomizing order and string with escaped characters to ensure proper
parsing and prevent ossification.
Bug: 1070922
Change-Id: I720492ea41b1d313ffed6a42c4e44dd873e328da
Reviewed-on: https://chrom...
the what
greaseing
getting rid of everything and sideways elevators
i've read the standard, I remember it coming out a couple of years back
otn a greased chihuahua list
I just think it's got some very weird things going on
otn a not a brand 99
switched 6 minutes ago
lmao its perfect for rn
hahaha
CONTEXT
That's perfect
smh that lasted a while π
WELL
sorry but I enjoy conversation that I undestand
idk what y'all talking about.. Google Chrome chihuahua grease
the thing is
you say it's random
but what actual component is random, lol
it's constant enough that they are literally unit testing the output value
idk
selected by fair dice roll
lmfao
.xkcd 221
ah lol
this function better get inlined, or the compiler will lose all street cred
inlined?
lol
basically just copy the code into where the function is called
it lets the compiler optimize more because it has more context
god we get some weird requests to pythondiscord.com lol
there is an easter egg on python discord site
y'all should try find it some day
it is not
lul
Aww lame
I got an ad for that
What the fuck youtube cant even get rickrolled anymore
nah not .env
welp, bruteforcing all short links on the site it is then
Is it a normal page, or do we have to scour subdomains
time to make a scraper to open every linked page
I hope there are no annoying antiscraping measures like google has lol
huh
time to search the secret staff ones
let's see what's the same on all pages
like in the DNS?
what the fuck
I'm perplexed
Same
Best link ever
lmao
I mean the website's open source right
it's injected by cloudflare
haha
lol
lel
I'll just hack cloudflare then 
ah yes
easiest solution
perfect solution
also worth bearing in mind you are not machines
how do you know π
haha
π€
But we are programmers /hj
of course joe would say that when Xithrius isn't around
well if xith wasn't around it wouldn't be true
the hecc where is it
lul
lmao
tf when I view the source of the page there's like nothing
but when I inspect there's a ton of stuff
ugh it's the script
lol it's not the script
oh nah
react :P
I can't say the page here cuz it's not available
dawn your just dawn now?
Yes
robots.txt
bruh you STILL don't have a robots.txt wow
Robots doesn't exist yet for PyDis
we don't need one
lmao
but the seo
the SEO is fine, SEO defaults to all if no robots.txt
alright, now the alerting actually works
lol
all the domains?
including git.pydis.com?
so that makes it easier
does it
find the git.pythondiscord.com that doesn't redirect
lol
And how is that easier than just checking for a 404 page
*doesn't redirect to github
easier, it returns a 418
Unless you want to automate it
I think it always redirects
That's only if you want to automate it
If you're just manually going through some
Then no
I'm just spamming staff names now
half of those are me
and all are wrong π
Like 10 of those are me
lol
How do you track every request?
he has logging
we're tracking requests rn
wait.β¦
helps with dewikification migrations, checking we don't link to any 404s
But like, using what?
does it possibly have an additional / in it
it's a cloudflare worker throwing stuff to faunadb
the easter egg?
How many dbs do you use?
yes
no
alphanumeric?
I wonder how long it would take to make a request to every page of the alphabet up to 20 characters
oh
lol
It would?
yea
I thought it'd be higher
nah it'd be 26**20
Idk math
what if we split it
oh
someone starts at the end
lmfao
and the other starts at the start lol
me neither apparently
it's a file and an extension
yeah like image.jpg etc etc
is it jpeg
lol
no
single word
ok so it's a word
exe?
also worth bearing in mind you are not machines
*if
lol
what is the ext
txt
lol
and what is before the txt?

do any of the other mods/admins/owners know it
worth a shot
if so I need to grill them
I GOT IT
WHAT IS IT
smh it didn't work
oop
I thought joe might say it if i said that
yeah that was a long shot
He's literally having alerts
Someone got it?
it's not
all of the weird ones
You see me spamming /easteregg.txt?
lol ya
lmfao
share
i will say one attempt was VERY close
How do you know who it is?
someone got it?
no, i mean i know when people gget it
Ohhh
IPs and what y'all have said here lol
YES
ack i canclled my spam script for the thing
What is it?
won't spoil it yet
won't say since it says not to
Oh common
joe pls mute me for 10 minutes so i don't say it lel
we are people, not machines
lol
hm
Now I'm staring at these 5 words
What are people guessing?
That ends in .txt
watching this is funny now lol
lol, that was easy
π
was I close
LMFAO
wait hold on is that a bot or a webhook?
webhook
lol
smh we didn't really get the hint and notice it for a while
u got here after he said it was a word, and had the .txt extension
we tried for some time before it got to that
i got it first tho π
man city supporter
I can't find a dictionary module
Chris is just going all 
this is the key bit
just
lol
think about what joe said
if that doesn't help joe originally said this
also worth bearing in mind you are not machines
lmfao
okay
because you will get exceptions
say the user has disabled dms or blocked them
Latkercszy still has to guess
answer: ||u peeked||
lol
I PUT /HUMANS BEFORE CRAP
lol
i put ||human.txt||
that's when joe said a really close answer
and i went back through my searches
are there any dictionary modules tho
!pypi dict
!pypi dictionary
no
unfortunate
lmfao
wait really its a thing?
file ending since this is gonna be hard?
if it was it would probably be joe's lemons sebastians and one others
no its all 4 bots lel
UUIDs != userIDs
this one was just a file, next one is a set of hops π
oh
π€¦
a UUID is a 128-bit universally unique id
uh
lol
now we all DM joe
lmfao
Yeah, joe wanted to match pydis members' IPs to their identities and had a wonderful idea on how to do it π
does it send it every time I reload lol

lmfao
lol, ya
let's all spam it
Yes please
lol
Hah, inb4 cloudflare ratelimits again
how much traffic does pydis get?
considerable amount
like in the cloudflare metrics, how many unique people per day
let's see
Impressive, what's your website?
1.31k last 24hrs
wow
Dang
29.79k last 30 days
That's much more than I thought
I need to get and graph metrics on my site for no reason whatsoever
thanks
I didn't come up with the design actually, I'm really shitty at that
A friend made a figma and I converted it to html/css/js
caught me red handed
oh nice website
oh shit
is that in this server or a different server?
8888888b. 888 888 8888888b. d8b 888
888 Y88b 888 888 888 "Y88bY8P 888
888 888 888 888 888 888 888
888 d88P888 88888888888888b. .d88b. 88888b. 888 888888.d8888b .d8888b .d88b. 888d888 .d88888
8888888P" 888 888888 888 "88bd88""88b888 "88b888 88888888K d88P" d88""88b888P" d88" 888
888 888 888888 888 888888 888888 888888 888888"Y8888b.888 888 888888 888 888
888 Y88b 888Y88b. 888 888Y88..88P888 888888 .d88P888 X88Y88b. Y88..88P888 Y88b 888
888 "Y88888 "Y888888 888 "Y88P" 888 8888888888P" 888 88888P' "Y8888P "Y88P" 888 "Y88888
888
Y8b d88P
"Y88P"
Works fine for me
there's no error for me either
figma? is that like a ligma
lol
works for me 
I mean it worked when I reloaded lol
Design software where you can design things like websites and stuff
ah, that was the google result, but I thought that wasn't it
strange
also, interesting, that might be a tool I solely lacked for a long time
maybe heroku just screwed up
different
probably
I like how Figma upped their limits on how many projects/files you can have
actually
btw this is the real response (i'm not that bad with encryption)
hopefully
I feel like I learn new http response codes every day lol
I might release the next challenge in the next 30 minutes or so
Hah yea, I editted it
ik lol
I need to play through it myself to check that it all is solvable lol
That error seems to be from the redirect from http to https
well, hopefully it's still unsolved tomorrow since I'm going to sleep now lol
cuz cloudflare handles that
laters
adios
Night Chris
π
what are these challenges π
guessing easter eggs
lol
Am I the only one who doesn't like the new discord theme?


