This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
5536
Off-topic / Honey pots
« on November 7th, 2011, 12:25 AM »
I've been constructing two honeypot sites for tracking spammers and their habits, and more importantly, whether some of the anti-spam defences I have in mind are likely to work against the current slew of bots.
Now, I'm not going to give out the details behind the logging, suffice to say they're likely to be fairly expensive on the server as I'm recording a lot of information and I'll be setting up various specialist processes for getting it back to my PC in a meaningful fashion so that I can make sense of it.
The reason I'm posting is because shortly I'm going to need some help. I'm not asking anyone to host these in any form, because of the above, but I am going to need links to the sites when they're ready, which means I'm going to be requesting people put one or other of the links in their signatures or indeed anywhere else, in a cloaked fashion, on whatever sites they're able to.
If it's going in bbcode, it should be in the form of:
Code: [Select]
That's right, no text in there. Regular users won't see it, search engines will be advised on landing that they're not supposed to be there.
Better still, if it's your own site, embedding this in the template at the bottom would be even better.
Code: [Select]
I'll publish links when I'm finished with the code, and whatever you do, please do not directly visit them. Since every request you make will also be logged, it's just fluff in the data which will make it harder to pinpoint genuine users. (I mean, should genuine users find their way there for any reason, there's not a lot I can do about that, just hopefully it won't contaminate the data set too much)
As for the reason behind two honey pots, one's SMF 1.1.x, the other 2.0. I don't want to use Wedge because 1) I don't want to give them a heads-up as to the things in Wedge, 2) I don't want to have to strip out the layers of defences and 3) it's actually easier since I don't have to deploy anything that expects me to keep it up to date as much ;)
I'm hoping you guys will be able to help me get some backlinks, because this is the best way for me to track spam bots.
Now, I'm not going to give out the details behind the logging, suffice to say they're likely to be fairly expensive on the server as I'm recording a lot of information and I'll be setting up various specialist processes for getting it back to my PC in a meaningful fashion so that I can make sense of it.
The reason I'm posting is because shortly I'm going to need some help. I'm not asking anyone to host these in any form, because of the above, but I am going to need links to the sites when they're ready, which means I'm going to be requesting people put one or other of the links in their signatures or indeed anywhere else, in a cloaked fashion, on whatever sites they're able to.
If it's going in bbcode, it should be in the form of:
[url=http://one-of-the-sites/][/url]That's right, no text in there. Regular users won't see it, search engines will be advised on landing that they're not supposed to be there.
Better still, if it's your own site, embedding this in the template at the bottom would be even better.
<a href="http://one-of-the-sites/" rel="nofollow"></a>I'll publish links when I'm finished with the code, and whatever you do, please do not directly visit them. Since every request you make will also be logged, it's just fluff in the data which will make it harder to pinpoint genuine users. (I mean, should genuine users find their way there for any reason, there's not a lot I can do about that, just hopefully it won't contaminate the data set too much)
As for the reason behind two honey pots, one's SMF 1.1.x, the other 2.0. I don't want to use Wedge because 1) I don't want to give them a heads-up as to the things in Wedge, 2) I don't want to have to strip out the layers of defences and 3) it's actually easier since I don't have to deploy anything that expects me to keep it up to date as much ;)
I'm hoping you guys will be able to help me get some backlinks, because this is the best way for me to track spam bots.
5537
Off-topic / Re: Voxatron + others...
« on November 6th, 2011, 11:03 PM »
Hmm, built for Win95, so it's likely been modified internally to run on newer Windows versions but yeah, that should run like **** off a shovel on a modern PC, assuming they haven't broken the timing logic in making it work on later versions.
5538
Features / Re: Thought system
« on November 6th, 2011, 11:00 PM »I still think there's an issue with bbcode though...
5539
Plugins / Re: Plugins I refuse to do
« on November 6th, 2011, 10:59 PM »Please, don't tell me you also already implemented the thought system somewhere I didn't notice...
Why not reuse the UI in AeMe BTW...? I think it has enough stuff with regards to setting album privacy.
Even if we, for the moment, transpose read/write as view/enter, we've still got to somehow convert the per-user disable read and per-user disable write into something that works for groups, which means you have three states per view and three per enter (as opposed to two which can be meaningfully represented with a checkbox)
I'm also not sure about setting a password per board, though it is requested often enough on sm.org.
(Also, in an album configuration in Aeva, you can set per-user grant and per-user deny. If you put the same username in both, what happens, out of interest?)
| 1. | Doesn't cleanly handle inherited groups but I think that entire concept is semi broken anyway. |
5541
Plugins / Re: Plugins I refuse to do
« on November 6th, 2011, 07:41 PM »I like the idea of View/Enter Board permissions, btw... Probably more than 'view list of topics in boards you can't access'.
The one downside is that I *still* haven't fixed the UI for it in the admin panel, even though it's like months later, because I still haven't figured out a non-ridiculous way of doing it that I like. (It's certainly going to be an improvement on it being a true and physical permission like my mod was)
5542
Off-topic / Re: Voxatron + others...
« on November 6th, 2011, 07:38 PM »
I do like the idea of voxels but I've not seen many games do it well.
I imagine it'll run a bit faster now, but it depends whether it's a Windows executable or not, if it's not, likely as not you won't see the benefit if you have to use DOSBox...
I imagine it'll run a bit faster now, but it depends whether it's a Windows executable or not, if it's not, likely as not you won't see the benefit if you have to use DOSBox...
5543
Features / Re: Thought system
« on November 6th, 2011, 07:37 PM »
I would not perform htmlspecialchars on the client side. I would leave it as is, and do it on the server side. Always assume the client is insecure/unsafe.
Strictly speaking, anything that's going to be sent, no matter how indirectly, to the bbc parser 'should' go through preparsecode, and if memory serves, preparsecode does not perform htmlspecialchars anyway, because I seem to recall it's always done ahead of time by other processes.
It's complicated because there are other side matters to attend to with it. preparsecode actually does an insane amount of stuff, IIRC the list in no particular order is:
* convert newlines to br tags (not entirely sure why it does this, I've never fully understood this logic but I'm assuming it's for the benefit of code tags so that you don't try second guessing p tags, and it means if you want a double blank line, you get one)
* validates that anyone using the html bbcode is an admin (or remove the tag otherwise)
* breaks the content of nobbc bbcode so that it won't be parsed (physically convert the brackets to their numeric equivalent)
* attempt to fix table tag hierarchies through regular expressions (table must contain tr, tr must contain td, td must be inside tr, tr must be inside table, list must contain li, li must be inside list)
* convert double space to nbsp+space so they're actually displayed as such
* break instances of [] and [' so that they're not parsed as potential bbcode for speed (e.g. inside people posting code outside of code tags)
* convert /me to the me bbcode
* convert specific colour bbcodes to the generic case (e.g. replace red, blue, etc, bbcode with color=red, color=blue)
* invoke the tag scheme checker to go through img, url and similar tags looking for valid http/s entries and forcing them to have the right scheme
* if images are posted and there is a maximum image size, validate the image's size and rewrite the img bbcode if necessary to include new sizes
It is pretty insane when you think about it! But that's what's required to ensure that any arbitrary posting is safe to be displayed later. (More, in fact, could be done, because it could step through the tags at save time and validate that they are properly nested and so on, and take that burden off parse-bbc)
Long story short, it depends on what you're looking to allow in the thought system. If it's the small list of inline codes, you don't need to invoke the entire preparser, but it will need a subset of the loop at the end of the routine where it splits the post into sections by code tags, most importantly to catch the fixTags call (to sanitise links and/or images posted, though images should probably be rewritten to links anyway!)
You don't need to have it also do the regexps that handle fixing table/list nesting because they're not going to be parsed anyway, so no need to alter them (and I'd suggest not altering the thought for that purpose)
Perhaps there should be a parameter to preparsecode, for inline parsing requirements, where if false, only do what's necessary for inline bbc requirements.Quote This is a problem that has affected many, many people in figuring this stuff out. The HTML to BBC converter is not rugged, but if you're only feeding it the inline tags, it's probably enough.
Strictly speaking, anything that's going to be sent, no matter how indirectly, to the bbc parser 'should' go through preparsecode, and if memory serves, preparsecode does not perform htmlspecialchars anyway, because I seem to recall it's always done ahead of time by other processes.
It's complicated because there are other side matters to attend to with it. preparsecode actually does an insane amount of stuff, IIRC the list in no particular order is:
* convert newlines to br tags (not entirely sure why it does this, I've never fully understood this logic but I'm assuming it's for the benefit of code tags so that you don't try second guessing p tags, and it means if you want a double blank line, you get one)
* validates that anyone using the html bbcode is an admin (or remove the tag otherwise)
* breaks the content of nobbc bbcode so that it won't be parsed (physically convert the brackets to their numeric equivalent)
* attempt to fix table tag hierarchies through regular expressions (table must contain tr, tr must contain td, td must be inside tr, tr must be inside table, list must contain li, li must be inside list)
* convert double space to nbsp+space so they're actually displayed as such
* break instances of [] and [' so that they're not parsed as potential bbcode for speed (e.g. inside people posting code outside of code tags)
* convert /me to the me bbcode
* convert specific colour bbcodes to the generic case (e.g. replace red, blue, etc, bbcode with color=red, color=blue)
* invoke the tag scheme checker to go through img, url and similar tags looking for valid http/s entries and forcing them to have the right scheme
* if images are posted and there is a maximum image size, validate the image's size and rewrite the img bbcode if necessary to include new sizes
It is pretty insane when you think about it! But that's what's required to ensure that any arbitrary posting is safe to be displayed later. (More, in fact, could be done, because it could step through the tags at save time and validate that they are properly nested and so on, and take that burden off parse-bbc)
Long story short, it depends on what you're looking to allow in the thought system. If it's the small list of inline codes, you don't need to invoke the entire preparser, but it will need a subset of the loop at the end of the routine where it splits the post into sections by code tags, most importantly to catch the fixTags call (to sanitise links and/or images posted, though images should probably be rewritten to links anyway!)
You don't need to have it also do the regexps that handle fixing table/list nesting because they're not going to be parsed anyway, so no need to alter them (and I'd suggest not altering the thought for that purpose)
Perhaps there should be a parameter to preparsecode, for inline parsing requirements, where if false, only do what's necessary for inline bbc requirements.
which means that if they have BBC, they end up showing HTML tags in the code. Hmm...
5544
Off-topic / Re: Dungeon Defenders
« on November 6th, 2011, 06:37 PM »
Eh, I'm still downloading but the Steam page has this to say:Quote
The Aperture Science Handheld Portal Device for the Huntress hero class. Constantly consuming energy when active, this device allows it’s user to open portals from one location to another and can be used to greatly extend a trap’s range, quickly teleport across the map, or confound enemies!
5545
The last day or so I've been working on a one-off site, pretty privately. The site has a lot of potential to it, and regulars on another forum will probably know what the domain name for it is too. But I'm not prepared to share that here, not yet.
The technical design is one-off, utilising a modified forum backend as the admin area (and only the admin area) while not showing anything of the forum on the regular user side, at least not directly. (The site blog will be using SSI to pull from the forum, the login system will use the forum login core, making use of the API to handle authentication and registration, with comments going back to the forum too)
What I will say is that it will be powered by nginx, PHP, and Wedge (though, really, there's no reason why I can't do it in SMF, I'm not using the forum core, but it will mean I have to fix the API) and make heavy use of the GD or Imagick libraries (might be a good time to learn that really)
But I'm stuck primarily on the site's look and feel (generally; I already have some of the very specific elements on the site planned out and even drawn in some cases).
What I guess I'm wondering is whether anyone has any resources or places they go for general inspiration for design. I don't even have a colour scheme at this point in time; time is the theme of the site, and I did contemplate doing some kind of steampunk clock motif around the border (since the majority of the main content is its own thing), but not sure about that at this time.
Sorry I can't give any details out, trying to keep this one sort of a surprise until I'm closer to being ready with it.
The technical design is one-off, utilising a modified forum backend as the admin area (and only the admin area) while not showing anything of the forum on the regular user side, at least not directly. (The site blog will be using SSI to pull from the forum, the login system will use the forum login core, making use of the API to handle authentication and registration, with comments going back to the forum too)
What I will say is that it will be powered by nginx, PHP, and Wedge (though, really, there's no reason why I can't do it in SMF, I'm not using the forum core, but it will mean I have to fix the API) and make heavy use of the GD or Imagick libraries (might be a good time to learn that really)
But I'm stuck primarily on the site's look and feel (generally; I already have some of the very specific elements on the site planned out and even drawn in some cases).
What I guess I'm wondering is whether anyone has any resources or places they go for general inspiration for design. I don't even have a colour scheme at this point in time; time is the theme of the site, and I did contemplate doing some kind of steampunk clock motif around the border (since the majority of the main content is its own thing), but not sure about that at this time.
Sorry I can't give any details out, trying to keep this one sort of a surprise until I'm closer to being ready with it.
5546
Off-topic / Re: Dungeon Defenders
« on November 6th, 2011, 06:24 PM »
The real draw for me was on Steam, where you get the portal gun to play with. Depending on how well it's implemented, it could really stir the game mechanics up.
5547
Off-topic / Re: Dungeon Defenders
« on November 6th, 2011, 06:19 PM »
Yeah, it's one of those I already bought on Steam and is currently downloading right now.
5548
Off-topic / Re: Voxatron + others...
« on November 6th, 2011, 06:13 PM »
Never seen it or heard of it but likely rather well.
Sonic Generations, btw, is essentially an HD remake/tribute so it has some of the old levels in HD with 3D bits and some new levels. But holy crap is it insane in places.
Sonic Generations, btw, is essentially an HD remake/tribute so it has some of the old levels in HD with 3D bits and some new levels. But holy crap is it insane in places.
5549
Off-topic / Re: Voxatron + others...
« on November 6th, 2011, 05:56 PM »
Also, in a fit of pique and/or wanting to relive my mis-spent youth, I picked up Sonic Generations.
Holy **** it's fast. I mean, the original is fast but this is faster if any, and in 3D at times :o My machine can't actually cope with it at times because of the animation at such high speeds.
Holy **** it's fast. I mean, the original is fast but this is faster if any, and in 3D at times :o My machine can't actually cope with it at times because of the animation at such high speeds.