Join devRant
Do all the things like
++ or -- rants, post your own rants, comment on others' rants and build your customized dev avatar
Sign Up
Pipeless API
From the creators of devRant, Pipeless lets you power real-time personalized recommendations and activity feeds using a simple API
Learn More
Search - "steal this idea"
-
This isn't really a hacking story but it does remind me of something I did as "revenge."
In middle school, this one fool kept bullying me. Always tried to harm me, always tried to insult me, always tried to make me fall during PE.
I hated him a lot, so instead of trying to kill him as planned, I did a harmless little keylogger prank thing.
I installed a keylogger on the school's laptop before class. (I did it during break, and when class started, I placed it on his desk.)
He took the bait, and instead of doing work, he logged onto his social media accounts. Now I had his passwords and everything.
When I went home, I logged onto his social media. I checked his messages so I can get some dirt on him, didn't find much except for the fact he snuck out a few times, and smoked before.
I changed his profile picture to some cringy anime thing and messaged one of his friends (the one who always copied my test answers in History and would steal my homework) and I said, "tell --- that if he doesn't stop being an asshole, I'll do worse than "hack" his social media."
It freaked them both out a bit, but didn't change their behavior, which is a shame because my threat was empty. It's not like I was able to do anything more than that in middle school. To this day, they still have no idea who did that.
This was about 4 years ago.15 -
The Absolutely True Story of a Real Programmer Who Never Learned C.
I have a young friend named Sam who is quite a programming prodigy. Sam does know C! I need to make this clear: he’s not the titular programmer.
But a couple years ago Sam told me a story about a different programmer who never learned C, and I liked it so much that right on the spot I asked his permission to repeat it. (I could never just steal such a tale.)
Sam wasn’t always a programmer—actually he started in his later teens, in part because he was more of a jock, and in part because he was related to programmers and wanted to do his own thing. But, like all great programmers, once he was bitten by the bug he immersed himself completely in it.
One day Sam happened to be talking programming with his uncle, who was also a programmer but from way, way back.
“Hey,” said Sam, “I’m learning this language called C. You must know a lot of languages, did you ever study C?”
“No,” said the uncle, to Sam’s surprise. “I am one of the very few programmers who never had to learn C.”
“Because I wrote it.”
Oh, Sam’s last name is Ritchie.
What I love about this story is the idea of Dennis waiting Sam’s entire life to deliver this zinger. Just imagine sitting on a line that good, watching your nephew grow up and waiting, waiting until the one day he finally starts learning to code. Did he work on the line in his head at night? Like, “Hmm, how should I word it so I can deliver the punch line perfectly? Should I say ‘I never took a class on C?’ Nah, too awkward…”
The great thing about geniuses is how much effort they put into everything.
Courtesy : Wil Shiply.5 -
I'm fixing a security exploit, and it's a goddamn mountain of fuckups.
First, some idiot (read: the legendary dev himself) decided to use a gem to do some basic fucking searching instead of writing a simple fucking query.
Second, security ... didn't just drop the ball, they shit on it and flushed it down the toilet. The gem in question allows users to search by FUCKING EVERYTHING on EVERY FUCKING TABLE IN THE DB using really nice tools, actually, that let you do fancy things like traverse all the internal associations to find the users table, then list all users whose password reset hashes begin with "a" then "ab" then "abc" ... Want to steal an account? Hell, want to automate stealing all accounts? Only takes a few hundred requests apiece! Oooh, there's CC data, too, and its encryption keys!
Third, the gem does actually allow whitelisting associations, methods, etc. but ... well, the documentation actually recommends against it for whatever fucking reason, and that whitelisting is about as fine-grained as a club. You wanna restrict it to accessing the "name" column, but it needs to access both the "site" and "user" tables? Cool, users can now access site.name AND user.name... which is PII and totally leads to hefty fines. Thanks!
Fourth. If the gem can't access something thanks to the whitelist, it doesn't catch the exception and give you a useful error message or anything, no way. It just throws NoMethodErrors because fuck you. Good luck figuring out what they mean, especially if you have no idea you're even using the fucking thing.
Fifth. Thanks to the follower mentality prevalent in this hellhole, this shit is now used in a lot of places (and all indirectly!) so there's no searching for uses. Once I banhammer everything... well, loads of shit is going to break, and I won't have a fucking clue where because very few of these brainless sheep write decent test coverage (or even fucking write view tests), so I'll be doing tons of manual fucking testing. Oh, and I only have a week to finish everything, because fucking of course.
So, in summary. The stupid and lazy (and legendary!) dev fucked up. The stupid gem's author fucked up, and kept fucking up. The stupid devs followed the first fuckup's lead and repeated his fuck up, and fucked up on their own some more. It's fuckups all the fucking way down.rant security exploit root swears a lot actually root swears oh my stupid fucking people what the fuck fucking stupid fucking people20 -
I have been strongly considering writing a small fb app today named something along the lines of "Hack your fb friends - for realz". Then add basic oauth (You have to login to pick the friend to hack duh), retrieve their friends list and then publicly post to their own timeline and the friends they chose humorously stating they attempted to hack the persons account "for realz". You know just enough to alert people that the "hacker" is a idiot with bad intentions but with just humour enough to fall under "satire" so fb doesn't remove it.
If your bored please feel free steal and implement my idea, it's hereby open sourced and I will even fund this shit on kickstarter 😂6 -
A few years ago I had a startup. I invited 2 friends to join and we split the ownership equally. I did most the work but didn't mind. I had fun. Anyway, the story is not about me. I was in a startup incubator.
There was this stereotypical rich kid in the incubator too.
For the first few months he refused to even share what his idea was.
Finally he was forced to do it. It was an app for storing gift cards. Literally, there were startups for some high tech phd genious types. But the guy with the idea of a gift card app didn't want to share in fear that we would steal his mediocre idea.
His idea was to digitalize physical gift cards without the consent of the companies and make a market for selling, buying and trading (and taking a fee). When asked what if the companies refuse to accept the unofficial digital gift card, he said he had talked to a lawyer that they should accept it or he would sue them. Wow.
There was a guy who had attempted at doing an app like that 2 years before too apparently.
So here comes the part about the work culture.
He convinced 3 or 4 computer science students to develop the app for him. He offered them 1%, no pay. Talking about how rich they would get and how big it would be.
Luckily, one of the developers came to his senses after a few weeks and convinced the others that they were worth much more.
The guy was furious and even threatened to sue them.
He even got like 2-3k USD from some of his parents rich friends to develop the app. He could afford to pay them.
Anyway, the app was never completed.
I have many stories like that from other startups. A lot of students getting ripped off to work for free. I know people who have startups going for years thanks to free labor.1 -
So I have seen this quite a few times now and posted the text below already, but I'd like to shed some light on this:
If you hit up your dev tools and check the network tab, you might see some repeated API calls. Those calls include a GET parameter named "token". The request looks something like this: "https://domain.tld/api/somecall/..."
You can think of this token as a temporary password, or a key that holds information about your user and other information in the backend. If one would steal a token that belongs to another user, you would have control over his account. Now many complained that this key is visible in the URL and not "encrypted". I'll try to explain why this is, well "wrong" or doesn't impose a bigger security risk than normal:
There is no such thing as an "unencrypted query", well besides really transmitting encrypted data. This fields are being protected by the transport layer (HTTPS) or not (HTTP) and while it might not be common to transmit these fields in a GET query parameter, it's standard to send those tokens as cookies, which are as exposed as query parameters. Hit up some random site. The chance that you'll see a PHP session id being transmitted as a cookie is high. Cookies are as exposed as any HTTP GET or POST Form data and can be viewed as easily. Look for a "details" or "http header" section in your dev tools.
Stolen tokens can be used to "log in" into the website, although it might be made harder by only allowing one IP per token or similar. However the use of such a that token is absolut standard and nothing special devRant does. Every site that offers you a "keep me logged in" or "remember me" option uses something like this, one way or the other. Because a token could have been stolen you sometimes need to additionally enter your current password when doings something security risky, like changing your password. In that case your password is being used as a second factor. The idea is, that an attacker could have stolen your token, but still doesn't know your password. It's not enough to grab a token, you need that second (or maybe thrid) factor. As an example - that's how githubs "sudo" mode works. You have got your token, that grants you more permissions than a non-logged in user has, but to do the critical stuff you need an additional token that's only valid for that session, because asking for your password before every action would be inconvenient when setting up a repo
I hope this helps understanding a bit more of this topic :)
Keep safe and keep asking questions if you fell that your data is in danger
Reeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee5 -
I have this amazing idea, said John
I ask John about this amazing idea.
John goes on to say that it will change the world and solve world hunger.
I ask him again, what's your idea?
John says my idea is to 'solve world hunger'! AMAZING RIGHT?
now now John, so you're gonna do it like (provide a few solutions)..
John says yeah that was exactly what my idea was (ah. Fuck you)
So John now is under the delusion that he can solve world hunger and the steps to do it came from his own ostrich-brained imagination...
Tiny fuck doesn't even realize the fact that he plagiarized.
Now we look into the future where I ask John honestly that he should come up with his own idea to solve world hunger and not use mine.
JOHN GETS ANGRY
John asks 'do you actually think that was your idea? We were brainstorming man, I told you we had to solve world hunger and only because of my voice did I spark that idea in you, I created that idea man'
So, well since he's plagiarized so much I told him that I had this plan to perform a hunger strike in the grand Canyon to get some attention..
Fidgety little bitch found another idea to steal and he was like good idea!! I'm booking my flight to the Grand Canyon now!
What bout me I ask? He says man take some rest let me face the pressure (and the glory apparently)
Well, John did not return.
Poor stupid John did not realize that I had been joking and got his little ass fired under the direct sun in the grand canyon
Moral of the story :
I WILL DESTROY YOUR HOMES AND YOUR LIVES PLAGIARISTS, I WILL EXTERMINATE YOU *cough**cough*
Damn that Sulphur hexafluoride actually worked!8 -
Ok fellow ranters. I've scoured the internet for hilarious and enraging stories of programmers being asked to either work for free, or for stock options, or to hack (crack) stuff, etc.
Here's my latest one. A friend who's obsessed with crypto came up with a "great" idea which was for me (of course) to build a landing page for a fake company to trick people into submitting their crypto wallet keys and all that. What started as a joke quickly turned into my friend getting mad at me for not wanting to actually make it lol. Like seriously wtf is with people. All the reasons not to do that scheme are plainly obvious!
Next. Some person who worked for a company I consult with pulled the generic. "I have this great app idea" line & proceeded to of course ask me to "not steal it" lol. It was just an app that would list gluten free restaurants... That's hardly even an idea!!
But what's fucked up about all this is my friend from the first story is so obsessed with becoming a "crypto millionaire" he actually resents me now for not
1. being obsessed with crypto
2. not committing cybercrime on his behalf
Anybody else have enraging stories about stuff people have asked you to do?3 -
How to know when you're bored?
You feel like building CLI based applications for social media like twitter (And i swear i didn't steal the idea form the devrant version of this)11 -
Since my contract is going to be terminated on 1st July and brilliant devrant community injected me idea to make same project and start selling it as incorporated I made some steps.
I made simple POC that is command line application in different language and unrelated to what I’m doing and showed to my friend and ask if he want to buy it for his company and he was like wtf this shit even exist on the market or it’s new thing ?
I admit company I work for is not present in my country and this product is like not existing on the market. ( at least I can’t find it )
From this point I have a feeling I need to do it. I have life savings that will provide me to at least 2021 or even for a whole year if I’ll be smart and I think it’s going to be good thing to take a summer brake and make own project based on professional experience I have.
Despite the situation around I will be mostly coding 24/7, drinking and playing playstation.
I probably will convince my friend to work on it and my other friend to sell it once it’s done. He already wanted to sell my command line tool but I told him to keep his mouth shut cause they might steal the idea.
I already decided to use different tech stack and api so all software will be different, some business parts are unavoidable but I have many fresh ideas. At the end I will just connect some online payment, make youtube commercial and start selling it by integrating with some api and buying internet ads, also I will start looking for a new job from October if nothing will work out and just keep investing less time in it.
What you think ?
Should I take the risk or not finding job and do something that my heart is telling me to do( I write software for 12 years for money so I don’t think it’s even possible ) or should I live safe boring life and just go to another job ?
Thanks
Have a nice day.9 -
I have a project idea:
Web app that will automatically generate random like-a-facebook project ideas that will handle the buisness side and automatically post that offer on multiple forums, linkedin and send email with it. All using AI, Nural Networks, Big Data and VR.
Seriously, once fucking more some african or indian guy messages me to work for his awesome "its like a facebook but different" idea where he needs "just backend, frontend and mobile apps" and that he will just "handle the rest" and that "have no money now but after I sign a NDA he will give me some shares", I am gonna find him and shit on his head. Monday did not even ended yet and I already read 9 "offers" like this on my mail and facebook, only one guy white, rest indians or africans.
Why are then people suprised that we consider black and indian devs as a fucking joke 90% of the time. I have a indian dev friend and he could not find a dev job for 2 months, because everyone would rather work with less skilled asian / white guy than indian / black guy. This is not about racism, but about those retards that are acting like idiots. Hope I did not offend anyone (unless you do shit like this, then, please just smash your keyboard over your head).
Words like AI and neural networks are used just to lure the investors to our gofundme campain and steal their money after 2 years of silence.1 -
This shit is long story of my computer experience over my lifetime.
When I was young I got my first PC with windows it was not so bad. It required safe shut down of it’s fat32 partition. From time to time I needed to reinstall it cause of slow down but I got used to it I was only a gamer.
Time passes and I got more curious about computers and about this linux. Everything worked there but installation of anything was complete madness and none of windows programs worked well, and I wanted to play games and be productive so I sticked with windows.
I bought hp laptop once with nvidia card, it was overheating and got broken. So I bought toshiba and all I told to the seller was I want ATI card. Took me 5 minutes to do it and I was faster then my friend buying pack of cigarettes because I was earning money using computer.
Then I grown up running my small one person programming businesses and I wanted to run and compile every fucking program on this world. I wanted linux shell commands. I wanted package manager, and I wanted my os to be simple because I wasn’t earning money by using my os but by programming. So after getting my paycheck I bought mac. I can run windows and linux on vm if I need it. I try not to steal someones work so I didn’t want to run hackintosh. I am using this mac for some time.
Also I use playstation for gaming. Because I only want to run and play game I am not excited about graphics but gameplay. I think I am pragmatic person.
I can tell you something about my mac.
When I close lid it go sleep when I open it wakes up instantly. I never need to wonder if I want to hibernate or shut down or sleep and drain battery. It is fucking simple.
When I want to run or open something it doesn’t want me to wait but it gives me my intellij or terminal or another browser or whatever I search for. Yeah search is something that works.
Despite it got 8 gigs of ram I can run whatever number of programs I want at the same speed. The speed is not very fast sometimes but it’s constant fast.
I have a keychain so my passwords are in one place I can slow down shared internet speed, I can put my wifi in monitor mode and I don’t need to install some 3rd party software.
And now I updated my mac to high sierra, cause it’s free and I want to play with ios compilation. Before I did it I didn’t even backup whole work. I just used time machine and regular backups. And guess what, it still works at the same speed and all I did was click to run update and cook something to eat.
When I got bored I close the lid, when got idea open lid and code shit, not waiting for fucking wakeup or fucking updates.
I wanted to rant apple products I use but they work, they got fucking updates all along at the same time. And all of updates are optional.
I cannot tell that about all apple products but about products I use.
I think I just got old and started to praise my limited time on this world. Not being excited about new crap. When I buy something I choose wisely. I bought iPhone. I can buy latest iPhone x but I bought iPhone 7 cause it’s from fucking metal. And I know that metal is harder then glass, why the fucking apple forgot about it? I don’t know.
I know that I am clumsy and drop stuff. Dropped my phone at least 100 times and nothing.
I am not a apple fan boy I won’t buy mac with this glowing shit above keyboard that would got me blind at night.
I buy something when I know that it can save my time on this world. I try to buy things that make me productive and don’t break after a year.
So now piece of advise, stop wasting your time, buy and update wisely, wait a week or a month or a year when more people buy shit and buy what’s not broken. And if something’s broken rant this shit so next customer can be smarter.
Cheers1 -
Is there a search engine indexing pages that work without JavaScript?
Why?
- I use the Lynx text-mode browser
Why else? Maybe I'm naïve:
- At least without JavaScript the advert/tracking methods will not slow load times or break the page.
- This may be a nice way to highlight websites that don't have time to join an SEO/analytics arms race.8 -
So. Wow I have a question. Ok for real... I am in need of advice. I have a concept for a platform based on a specific interest which almost all of us have, based on a peer-to-peer principle with multiple services and user types/needs/agendas/reasons. The platform is intellectually straight forward and users will all participate on the platform as they see fit which will benefit other users as well as motivate more to join. The platform will serve it's own purpose and meet the users needs in a way that you may have seen before but the intellectual property and how the platform is used, is so unique that I can't risk too much information.
The question is. How do I protect my idea / intellectual property so I can recruit help and market without someone coming along and stealing it out from underneath me?
This isn't uncle Vinnys Cologne idea...
Everyone thinks they have the million dollar winner. I'm not sure if this puts gold toilet paper in my bathroom just yet but... I have something that an existing platform with money will absolutely steal and try to push as their own idea... They will probably succeed too.
So how do I protect this from happening so only I get to fail or ruin this good idea?1 -
Was hella drunked yesterday. Guy at work brought me to some place called beer garden. Tf do u order in a beer garden. Whack. They drank 2 huge beers and so did i. Its like 1 or 2 liters no idea. My vision was delayed and blurry. My head hurts now too. They good ppl but i hate alcoholics and average people with no ambition other than to go out talk unimportant stories which wont buy me bread and drink alcohol. Im a fucking businessman. I want to talk about ideas and creating businesses especially tech startups or saas. Im a fucking God. I deserve to be surrounded by highly ambitious millionaires like myself who dont drink or talk shit, but talk only money talk. I can do moneytalk all night long. Any improvements on what can get me bread is ALWAYS highly more valuable topic than shittalking non bread topics. I hate this and i feel bad for these good people to watch them slave their life away not trying to be rich like me they're content with being average and it disgusts me because when ur average ur just 1 slip away from becoming poor or homeless. I'd rather steal millions and rot in jail for the rest of my life than work for matrix as a slave to eat crumbs for the rest of my life...24
-
What ai model would I use to propagate a series of survival factors and decision making scenarios that if the optimal order of activities are pursued would lead survival and even prosperity and the worst set of possibilities would lead to death where the environment and sensations being experienced would always lead to specific pitfalls but wherein some of these pathways would lead to later reward and where the obstacles like predators could be overcome by simple combinations of objects which would be a crude mimicry of the invention ?
Neural nets don’t see to fit this given my understanding but there is a training aspect I’m looking for where the creature being simulated dies, develops fear responses, feels pain, avoids pain, remembers things, develops behaviors related to characteristics in creatures, has unborn motivations that weight decisions, and learns to prioritize.
I had created a massive dataset of objects including memories and aspects of semantic memory and episodic memory colored by emotion inspired by past conflict and reward with the idea that a running average would affect behavior and decide on various behaviors all the way down to perceptual differences
Any thoughts again ? Or will wolf try to steal these too ?29