<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Diego's Rants &#187; irc</title>
	<atom:link href="http://blog.massanti.com/tag/irc/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.massanti.com</link>
	<description>Confessions from a Geek</description>
	<lastBuildDate>Wed, 27 Oct 2010 11:22:32 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.4</generator>
		<item>
		<title>Some CSS explanations&#8230;</title>
		<link>http://blog.massanti.com/2008/04/05/some-css-explanations/</link>
		<comments>http://blog.massanti.com/2008/04/05/some-css-explanations/#comments</comments>
		<pubDate>Wed, 30 Nov -0001 00:00:00 +0000</pubDate>
		<dc:creator>Diego Massanti</dc:creator>
				<category><![CDATA[General Rants]]></category>
		<category><![CDATA[css]]></category>
		<category><![CDATA[irc]]></category>

		<guid isPermaLink="false">http://massanti.com/?p=124</guid>
		<description><![CDATA[Another big moment from #CSS on freenode :p [Riyonuk] does list-style-type go on ul or li? [reisio] Riyonuk: either, but ul is a better idea [Riyonuk] why? [reisio] ...and I use 'list-style' [reisio] because ul applies to the ul and the li's within it [reisio] li only applies to the li's [Riyonuk] but the ul [...]]]></description>
			<content:encoded><![CDATA[<p>Another big moment from #CSS on freenode :p</p>
<p><code> [Riyonuk] does list-style-type go on ul or li?<br />
[reisio] Riyonuk: either, but ul is a better idea<br />
[Riyonuk] why?<br />
[reisio] ...and I use 'list-style'<br />
[reisio] because ul applies to the ul and the li's within it<br />
[reisio] li only applies to the li's<br />
[Riyonuk] but the ul itself doesn't have bullets<br />
[Riyonuk] the li's have bullets<br />
[reisio] that's moot<br />
[Riyonuk] how so?<br />
[reisio] for the same reason saying 'guys don't have breasts' is moot<br />
[Riyonuk] not really<br />
[reisio] guys do have breasts<br />
[reisio] they just don't usually have mammory glands<br />
[Riyonuk] ok, how did we go from css bullet propertys to male breasts ]_]<br />
[reisio] you asked :p<br />
[reisio] breast plate?<br />
[reisio] it's basically just the top of your chest<br />
[reisio] female boob fun realm just happens to coincide there<br />
[reisio] so it's become fairly synonymous<br />
[Riyonuk] I'm just gonna add list-style-type to ul<br />
[Riyonuk] ._.<br />
[Riyonuk] I remmeber when were young, and every saturday after school, we'd go down to the beach, and I'd throw sand in your eyes<br />
[reisio] yeah that was fun and lame<br />
[Riyonuk] crap, wrong channel<br />
[Riyonuk] XD</code></p>
]]></content:encoded>
			<wfw:commentRss>http://blog.massanti.com/2008/04/05/some-css-explanations/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Easy way to get root privileges, part 1.</title>
		<link>http://blog.massanti.com/2008/03/28/irc-laughs/</link>
		<comments>http://blog.massanti.com/2008/03/28/irc-laughs/#comments</comments>
		<pubDate>Fri, 28 Mar 2008 19:05:18 +0000</pubDate>
		<dc:creator>Diego Massanti</dc:creator>
				<category><![CDATA[General Rants]]></category>
		<category><![CDATA[hacker]]></category>
		<category><![CDATA[hosting]]></category>
		<category><![CDATA[irc]]></category>
		<category><![CDATA[laugh]]></category>
		<category><![CDATA[php]]></category>

		<guid isPermaLink="false">http://massanti.com/2008/03/28/irc-laughs/</guid>
		<description><![CDATA[Some hours ago i was asking for some help at the IRC channel of a really large hosting company. The IRC channel is not an official support channel for this company, but some admins and company staff are kind enough to be there in order to help people, etc. And well, the following took place. [...]]]></description>
			<content:encoded><![CDATA[<p>Some hours ago i was asking for some help at the IRC channel of a really large hosting company. The IRC channel is not an official support channel for this company, but some admins and company staff are kind enough to be there in order to help people, etc.<br />
And well, the following took place. Keep in mind that i have replaced both real nicknames and also any occurence of the company name for the sake of privacy.<br />
Enjoy <img src='http://blog.massanti.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
<p><code>[RandomKid] By the way, the cookies **Hosting Company** use are no good <img src='http://blog.massanti.com/wp-includes/images/smilies/icon_sad.gif' alt=':(' class='wp-smiley' /><br />
[RandomKid] anther time why, I think they can be poisioned.<br />
[RandomKid] Will try safari now.<br />
[HostingCompanyGuy] why not just bookmark your control panel?<br />
[HostingCompanyGuy] <strong>RamdonKid: weren't you the same person that thought you could get root access to a server just because of an "insecure" upload form?</strong><br />
[RandomKid] hmmm good idea<br />
[DiegoMax] ...<br />
* <strong>RandomKid doesn't think, me knows.</strong><br />
[HostingCompanyGuy] lol<br />
[HostingCompanyGuy] still waiting for you to show me how<br />
[DiegoMax] kids....</code><span id="more-123"></span><br />
<code>[RandomKid] HostingCompanyGuy, if you don't think this is possible, run a search on google of how image can be exploited to deface serveres. Its an old trick, and there are actually ready made scripts for kidz that still do it.<br />
[DiegoMax] RandomKid, you really have no idea about what you are talking about, sorry man.<br />
[HostingCompanyGuy] RandomKid: you're confusing "servers" with "websites"<br />
[RandomKid] Not at all.<br />
[HostingCompanyGuy] so please show me this old trick in action, then<br />
[RandomKid] You can upload a one file php file that acts like a server.<br />
[HostingCompanyGuy] then how do you execute it?<br />
[RandomKid] It all depends fcouse of what access you set/have on the server.<br />
* HostingCompanyGuy sighs<br />
[DiegoMax] and you are assuming then that the admins on a large hosting company are assholes ?<br />
[HostingCompanyGuy] your example was that you could gain root access to rlparker's server because of the script he was running<br />
[RandomKid] They simply need to call http://victimesite/images/fakeimage.php.gif<br />
[RandomKid] it will run the php file which is a server script.<br />
[RandomKid] n rlparkers site I would do something else <img src='http://blog.massanti.com/wp-includes/images/smilies/icon_wink.gif' alt=';)' class='wp-smiley' /><br />
[HostingCompanyGuy] that's not true, RandomKid<br />
[RandomKid] Whats not true?<br />
[DiegoMax] but even if you get to run the php script, how you get root access ?<br />
[HostingCompanyGuy] you can't execute a script that way<br />
[RandomKid] If you giv me 30 min, I would providely living examples.<br />
[RandomKid] Yes you can.<br />
[HostingCompanyGuy] i'll give you an example right now<br />
[HostingCompanyGuy] of it *not* working<br />
[RandomKid] It works fine <img src='http://blog.massanti.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /><br />
[HostingCompanyGuy] http://nevr.net/test.php.gif<br />
[HostingCompanyGuy] give that a shot<br />
[HostingCompanyGuy] let me know how it executes for you<br />
[HostingCompanyGuy] oh wait, IT DOESN'T<br />
[brandoe] lol<br />
[DiegoMax] lol<br />
[HostingCompanyGuy] good try though, you elite hacker, you.<br />
[RandomKid] http://yes.as/dh.gif<br />
[RandomKid] only wors on IE...<br />
[HostingCompanyGuy] lol<br />
[HostingCompanyGuy] dude.. that's HTML<br />
[HostingCompanyGuy] not actual code that you can execute<br />
[RandomKid] DO we have a bet here?<br />
[RandomKid] <img src='http://blog.massanti.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /><br />
* DiegoMax is saving this discussion for the laguhs book<br />
[HostingCompanyGuy] good luck rooting a server with HTML<br />
[RandomKid] If I am going to spend 30-60 min on showing you how an image can be exploited with a php script.<br />
[HostingCompanyGuy] your browser has *nothing* to do with how code executes on the server<br />
[HostingCompanyGuy] your browser just *renders* information<br />
[RandomKid] That was a joke.<br />
[brandoe] RandomKid, HostingCompanyGuy has yummy cookies for you<br />
[HostingCompanyGuy] no it wasn't<br />
[RandomKid] and its client side.<br />
[HostingCompanyGuy] you just got owned.<br />
[rawrly] your browser just *renders* information<br />
[DiegoMax] client side, interesting<br />
[DiegoMax] so you getting root to your own machine then ?<br />
[RandomKid] IE brwoser side<br />
[DiegoMax] i see, you're hacking yourself<br />
[RandomKid] in olddays you could even run a cframe via IE...<br />
[RandomKid] That was fun <img src='http://blog.massanti.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /><br />
[HostingCompanyGuy] oh my god<br />
[HostingCompanyGuy] just stop<br />
[HostingCompanyGuy] you're done.<br />
[RandomKid] ?<br />
[RandomKid] Didnt do nothing.<br />
[HostingCompanyGuy] yeah. that's my entire point.<br />
[RandomKid] And wil ot do anything unless explicitly requested...<br />
[RandomKid] And paid <img src='http://blog.massanti.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /><br />
[HostingCompanyGuy] i'll keep that in mind when i need someone to hack a server in the future<br />
[HostingCompanyGuy] since you've already demonstrated your elite skillz<br />
[RandomKid] A php in cmbination with image can be used to take over servers.<br />
[HostingCompanyGuy] okay <img src='http://blog.massanti.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /><br />
[RandomKid] I didnt demonstarte anything.<br />
[HostingCompanyGuy] i know <img src='http://blog.massanti.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /><br />
[RandomKid] god <img src='http://blog.massanti.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /><br />
[HostingCompanyGuy]<br />
[RandomKid] good<br />
[RandomKid] If you want CV, I can provide you a nice one.<br />
[RandomKid] But I am not a hacker<br />
[HostingCompanyGuy] obviously<br />
[DiegoMax] thats obvious.<br />
[RandomKid] nor a cracker.</code></p>
]]></content:encoded>
			<wfw:commentRss>http://blog.massanti.com/2008/03/28/irc-laughs/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

