#ctrl-c | Logs for 2020-09-13

Back
[00:00:12] <wholesomedonut> timemachine: I'll have to mail you a picture of it. It's almost like an 8-track tape. Very thin, it isn't double-wide like some red/blacks I've seen, and it's like a plastic underneath the ink.
[00:00:22] <wholesomedonut> expect that mail in just a second.
[00:00:46] <wholesomedonut> oh wait nvm i dont know how to attach it XD
[00:21:45] <timemachine> wholesomedonut: no problem I know what you mean.
[00:24:43] <timemachine> That's called a correctable film. instead of ink it uses a graphite-like substance. If you make a mistake you can backup to the incorrect letter, change the ribbon for a rubberized "correcting film" and then strike the key again to lift the graphite off the paper.
[01:52:01] <wholesomedonut> in which case... i'll either have to look at getting a new correctable film roll or just go with the oldskool ink ribbon. Either way that's good to know. Learn something new every day!
[03:58:04] <timemachine> Coming to you live from my new desktop ... finally! network gremlins are at bay for the time being
[04:57:21] -!- smlckz [smlckz!smlckz@ctrl-c.club] has joined #ctrl-c
[04:57:38] <smlckz> hi
[04:58:16] <smlckz> timemachine?
[04:59:14] <smlckz> hmm?
[04:59:23] <slipyx> its right over there
[04:59:56] <smlckz> what?
[05:00:00] <timemachine> hola!
[05:00:24] <smlckz> yo
[05:34:08] <smlckz> hmm
[06:13:51] -!- smlckz has quit [Client exited]
[11:51:13] -!- felix [felix!~nttp@212.87.203.208] has joined #ctrl-c
[13:09:32] -!- k33k has quit [Connection closed]
[13:19:04] -!- k33k [k33k!k33k@tilde.club] has joined #ctrl-c
[13:26:56] -!- k33k has quit [Connection closed]
[13:27:12] -!- k33k [k33k!k33k@tilde.club] has joined #ctrl-c
[14:44:24] <timemachine> It's a new day of learning and discovery!
[14:45:29] <felix> Do tell!
[14:48:06] <timemachine> I'm going to start diving into a new side project today; it should take me outside of my comfort zone
[14:49:11] <felix> Good luck!
[15:07:18] <felix> So what is it?
[15:15:29] <rmg> fun. tell!
[15:17:05] <timemachine> there is a lot to it but the basics are a gemini server in rust.
[15:18:13] <timemachine> That's the starting point at least and then I want to build some plugins ontop of that. I want to make it really moduler like apache or nginx.
[15:18:13] <rmg> so which is outside of the comfort zone, the rust or the gemini?
[15:19:56] <timemachine> both, technically. gemini is pretty straight forward. however, I'm 100% new to rust.
[15:20:33] <felix> I see! Good luck!
[15:20:36] <timemachine> well the rust language. I know how it works under the hood.
[15:22:51] <rmg> Good luck!
[15:23:06] * rmg still has no clue why people complain about the easy parts of rust, i.e., the borrow checker.
[15:24:26] <timemachine> I'll let you know my thoughts when I have more practical exp.
[15:55:36] -!- smlckz [smlckz!smlckz@ctrl-c.club] has joined #ctrl-c
[15:55:43] <smlckz> hi
[15:56:24] <felix> Hello!
[15:56:34] <timemachine> howdy
[15:57:30] <smlckz> ah
[15:57:30] <smlckz> just trying to use nim, doesnt work
[15:58:32] <felix> Not even a "Hello, world?"
[15:58:34] <smlckz> anyone using nim?
[15:58:48] <felix> Nope, haven't tried since coming to Ctrl-C.
[15:59:55] <smlckz> nim command returns weird error regarding some choosenim cfgs not good in my homedir
[16:01:26] <smlckz> felix, can you try running nim and tell me what happened and what to do?
[16:02:14] <felix> Yep, it gives an error.
[16:02:32] <felix> I don't remember it needing any kind of special setup.
[16:04:33] <smlckz> hmm
[16:05:57] <felix> We seem to be using this on copper: https://github.com
[16:06:17] <felix> But there's no such executable in my path.
[16:07:08] <smlckz> thats weird
[16:07:11] <timemachine> yeah you need to use choosenim to pick a toolchain.
[16:09:08] <felix> Maybe it was placed in /usr/sbin.
[16:13:57] <smlckz> let me look at that again
[16:13:57] -!- smlckz has quit [Client exited]
[16:29:26] -!- smlckz [smlckz!smlckz@ctrl-c.club] has joined #ctrl-c
[16:30:23] <smlckz> hmm
[16:31:24] <smlckz> is admin with us?
[16:34:30] <smlckz> felix, what did you do?
[16:35:55] <felix> Same as you presumably: saved a "hello, world" and tried to compile it.
[16:36:27] <felix> And it gave me repeated error messages about a "choosenim", so I looked that up in the installation instructions.
[16:40:14] <smlckz> so, what to do now?
[16:40:39] <felix> Wait for calamitous?
[16:43:06] <smlckz> who will tell him?
[16:44:49] <felix> The scrollback isn't going anywhere.
[16:45:19] <felix> To be on the safe side, post on the forum too.
[16:45:50] <smlckz> hmm, iris?
[16:46:02] <felix> Yep!
[16:48:56] -!- smlckz has quit [Client exited]
[17:00:54] -!- smlckz [smlckz!smlckz@ctrl-c.club] has joined #ctrl-c
[17:03:31] <smlckz> felix, posted!
[17:03:45] <felix> Okay!
[17:08:21] <smlckz> can i use cgi in public_html?
[17:08:41] <felix> I don't know. Haven't checked.
[17:08:55] <felix> Isn't there anything about it in the FAQ, or on the wiki?
[17:08:55] <smlckz> ah
[17:09:45] <smlckz> no, nothing in faq/wiki about cgi
[17:11:35] <felix> So it seems!
[17:11:44] <felix> What did you want to use?
[17:12:49] <timemachine> looks like php files are not parsed by default.
[17:12:59] <timemachine> I can check the nginx config.
[17:13:21] <felix> Do we even have PHP?
[17:14:48] <smlckz> yes we have old php, look at faq
[17:15:26] <timemachine> well it is in /etc/nginx/sites-enabled/default
[17:15:37] <felix> That's curious then.
[17:16:42] <smlckz> what does cfgs say about cgi?
[17:17:12] <timemachine> Zend Engine v2.5.0
[17:18:30] <timemachine> you mean CGI as in common gateway interface? FastCGI is running on port 9000. the default config passes urls ending in .php to FastCGI. There is nothing about perl or anyother languages.
[17:19:18] <felix> That's probably there for the main site.
[17:20:22] <felix> Why, what did you want to make anyway?
[17:22:25] <smlckz> old style ''interactive'' websites i think
[17:22:39] <timemachine> ahh, you know what it is misconfigured. The matching for ~username/(.*) is before ~/username/(.*).php
[17:24:06] <timemachine> I'm smoking somthing ... nevermind that last comment.
[17:27:09] <timemachine> I think that line #44 needs changed s/alias /home/$1/public_html$2php;/alias /home/$1/public_html$2.php;/
[17:28:08] <timemachine> well I didn't escapt my slashes but yeah... there is no dot in the $2.php at the end of the line.
[17:29:03] <timemachine> so fast cgi can't find the file which is why: http://ctrl-c.club makes a 404.
[17:30:56] <smlckz> try phpinfo..php maybe
[17:37:19] <timemachine> lol
[17:37:34] <timemachine> that worked.. good thinking.
[17:38:37] <felix> So, are we dealing with a misconfiguration, or a security hole?
[17:39:44] <smlckz> or both?
[17:40:39] <felix> Well, either we're meant to use PHP or we aren't.
[17:40:45] <timemachine> I dont think there is a security issue. but there maybe. I cant think of a direct expolit and mismatched paterns either cause errors or send the file to FastCGI so the security pipeline is still intact.
[17:42:42] <timemachine> it may allow unregulated file access, but still can't escape the `public_html` dir. so the only thing secret maybe .htaccess files but there is no Apache running on the server so not much of a problem.
[17:44:48] <smlckz> thats for php, what about other languages?
[17:45:25] <felix> A malicious script can still read any other file on the server and pass it on.
[17:45:49] <felix> So there really is a question of how much we trust each other here.
[17:51:00] <smlckz> hmm
[17:51:20] <timemachine> it's just a misconfiguration. it's not a security flaw.
[17:57:30] -!- smlckz has quit [Client exited]
[17:58:16] <felix> That depends on whether we're supposed to use PHP or not.
[18:01:03] -!- smlckz [smlckz!smlckz@ctrl-c.club] has joined #ctrl-c
[18:01:32] <timemachine> php is listed as one of the available probramming languages in the FAQ...and it's installed (intentionally not as a default) so yeah I think we are suposed to use php, if we want. It just has never worked.
[18:02:42] <smlckz> maybe it is here for us to use it as a scripting language
[18:12:04] <smlckz> ah
[18:18:51] -!- smlckz has quit [Client exited]
[18:22:10] <timemachine> I emailed admin.
[18:23:27] <felix> Okay! Got to go, see you!
[18:24:00] -!- felix has quit [Client exited]
[19:32:47] -!- k33k has quit [Connection closed]
[19:33:05] -!- k33k [k33k!k33k@tilde.club] has joined #ctrl-c
[20:18:54] -!- k33k has quit [Connection closed]
[20:19:08] -!- k33k [k33k!k33k@tilde.club] has joined #ctrl-c
[21:39:51] -!- k33k has quit [Connection closed]
[21:39:58] -!- k33k [k33k!k33k@tilde.club] has joined #ctrl-c
[23:55:10] -!- k33k has quit [Connection closed]
[23:55:41] -!- k33k [k33k!k33k@tilde.club] has joined #ctrl-c