A lesson in Input Validation

The Picard Maneuver@startrek.websitemod to Lemmy Shitpost@lemmy.world – 983 points –
64

"client side validation is fine, nobody's gonna open up the dev console"

usually i think it's cringe when people shit on the linguistics of memes, but this is the most non-pov "pov" post i've ever seen. the meaning would be the EXACT same if they just hadn't included the dumbass "pov:" part. fucking spotify marketing intern ass buzzword

While I agree with you, this is literally their point of view while this is happening

yep, this is the first in a looooong time that I see it used correctly

That's... what a photo is. While technically correct, no one would use "Photo:" as a meme format. It's just redundant and dumb.

Are we really using redundancy and dumbness as a point against a meme format?

"When you

When you shit your pants"

Is literally an old meme format where repeating the top line is part of the joke.

Plus there's "BOTTOM TEXT" which is just completely stupid but funny.

We must be seeing different memes.

Nobody:

You: usually i think it's cringe when people shit on the linguistics of memes, but this is the most non-pov "pov" post i've ever seen. the meaning would be the EXACT same if they just hadn't included the dumbass "pov:" part. fucking spotify marketing intern ass buzzword

thanks. now I don't have to say it.

Oh this reminds me when people discovered all the printers at school were available on the WiFi

And not just printers. There may or may not also be a few Wi-Fi APs with login details admin:admin. And there also may or may not be many computers with RDP enabled without password. And those that have some password may or may not re-use the same short password for Administrator account. There also may or may not be SMTP server, though unfortunately in my case it doesn't allow using it so send e-mails outside the network. It returns "Relay access denied" error.

If it makes you feel any better, before the days of ubiquitous wi-fi, printers on wired networks in my school were about as easy to discover and use from a distance. FTPing a text file to one would start a print job for that file and it would be trivial to mash together that information plus a list of printer addresses for the entire district network (courtesy of nmap).

This information was certainly never put to use.

That's incredible.

Then again, school IT jobs are often given to "my nephew who is good with computers", because the pay is often half compared to the private sector.

One teacher told us that once an IT technician at our school built the network, connecting 2 school institutions with ~7 buildings using only hubs. That network was apparently almost unusably slow, which isn't surprising.

I have a friend that does IT/networking for a school district and he makes bank, YMMV.

My brother works for a school with 200 kids PreK-12. He's a teacher, but he also does IT. He gets a $500/yr stipend, and he calls me at least twice a week with basic questions that are solved 95% of the time by rebooting the computer.

I've told him a number of times the district owes me that stipend lol

$500 a year?!? Hey buddy, thanks for looking after our IT systems, here's an extra $1.50 a week ...

That's ridiculous!

I'm surprised it's not a student ran IT Club that the kids have a pay a materials fee for...

my brain is churning through char limits... i just cant believe it would be large enough through multiple systems..but then, i dont know the char count of the script, compression techniques used, encapsulation etc.

It can just fetch the information one line at a time like a printing machine. I don't think the receipt machine has that much memory to hold everything

im talkin about the half a dozen systems that data flowed through before hitting the printer.

Maybe this isn't a big chain. I worked for a local pizza place a while back, and they had their own website set up by the owner. It would have been up to him to set the limit.

If his printer wasnt one from just eat linked to the just eat order machine we might have had the same problem. The printer was dumb, it likely just responded to whatever input it recieves. In the case of just eat orders they likely have a char limit so its never an issue.

Theres a couple clues that suggest it's a Canadian cannabis dispensary. Which is interesting as many use the same web app for menus and online orders (Dutchie), though some don't.

The script is ~55k characters long, depending on the source. This transcript, 55k, includes who is saying the line, as well as descriptive elements of the story, so the actual 'words only' version will be a bit shorter. This one is 99k and includes even more description of the visual elements. From what I've seen, though, most of transcripts have these non verbal inclusions, so the person who added it to the special instructions likely copied those over as well.

I can't speak to the other points, but allowing 55k characters is definitely wild.

youre not gettin more than maaybe 512 outta me if i was asked to store/move 'special instructions' with no requirement

a part of me thinks someone connected directly to this printer and printed it. i cant imagine someone pasting 55k into an online form and it making it intact all the way to the print job.

reality is, this would have been truncated client side before it even hit the wires.

And if everyone in the chain thought the same, sending this by hand instead of using client would have this effect

I do hope when someone reads about a Christian Nationalism lawsuit going on they don't find out what law office is representing the guy who wants to hurt gay people. Then find the fax number on their site, go get a temp email at all the free sites that provide it, go to a send fax over the Internet site, and send them long faxes.

An old trick you could do on old physical fax machines was to tape a couple of sheets of black construction paper together, feed them into the machine and tape them into a loop. Dial your special person and burn through all their toner. Of course, now it would just generate a bunch of emails.

Black fax - such an effective remote physical attack that fax companies had to actually hard-code a defence against it, to not print pages where there would be enough ink or toner dispensed that it could damage the machine or be a fire hazard

Ahh, yes, the Infinifaxβ„’

I may have once pulled this with the Banana knock knock joke. Ran their machine out of paper.

I would be a little afraid of eating my order after that.

It depends, if the employer doesn't treat his staff well, they'd give you extra portion.

What kind of idiot doesn't check for the Shreck script when validating input? Bunch of amateurs.

Yooo this reminds me, I think there was an AITA comment on reddit some time ago about a guy who burned down a Pizza place due to putting the entire bee movie script in a message box.

Edit: I believe it was a comment on an Askreddit thread, but a quick google search appears to not be enough to find it

Edit 2: I think it's this one, no clue if it actually happened though https://www.reddit.com/r/tifu/comments/bjttfe/tifu_by_ordering_food_online_amd_essentially/

Ok my copier story. We had a copier room in my high school with a little window in the door. I put a black sheet of paper on it, set it to copy 999 times, locked the door from the inside, then walked away. Turns out no one knows where the key was to the little copier room. I got caught and was punished. The end.

Why do most of the comments in this thread match exactly with the comments in the linked reddit thread?

We're not really that unique. We're not consciously or likely even unconsciously referencing that thread or others like it. We're just coming to the same witty conclusions those before us did.

Even your comment comes up every time there's a similar thread or experience. Mine too.

Happy New Year, btw.

I would've put the super uncut extended edition of all three lord of the rings movies

Why not entire txt files containing several hundred random characters such that the entropy is high enough compression is useless >:) but maybe it's preferred.

Next, someone do that with the bee movie script

Set a character limit. Easy. A maximum reasonable length considering the attention span and efficiency of an employee to grasp such information if required should do the job

My God, it's shrexcellent.

Seriously, though, it's 2023 and big corporates are still out here with no input validation?

"Hey, there, this is Josh, with Let's Game it Out!"