Salamanders are usually tiny innocent creatures, but this fine example is so insanely big and cool… We have to find a new name for it?!
The post This Salamander Is Just As Cool As It Is Freaky appeared first on Viral Viral Videos.
This cat is named Loki. Loki likes the dark. The darkness inside a cabinet is his favorite place. Good to know right, how else are you going to find him ever again?
The post This Cat Never Want To Be Found Again appeared first on Viral Viral Videos.
I don’t care who sees it, you deserve it.
The post Here Have A Bitch Slap On Live Television appeared first on Viral Viral Videos.
You might want to rethink how much you hate your ex.
The post Inconvenient Exes appeared first on Viral Viral Videos.
On paper it must have looked awesome. Impress your girl with your pilot skills and while she is in awe, you go for it! You ask her to marry you, while she is scared shitless!
The post Marriage Proposal While Being In An Airplane’s Cockpit For The First Time appeared first on Viral Viral Videos.
"Truly the best null I've ever had. Definitely would purchase again," wrote Andrew R.
"Apparently, the Department of Redundancy Department got a hold of the internet," writes Ken F.
Berend writes, "So, if I enter 'N' does that mean I'll be instantly hit by a death ray?"
"Move over, fake news, Google News has this thing," wrote Jack.
Evan C. writes, "I honestly wouldn't put it past parents in Canada to register their yet-to-be-born children for hockey 10 years in advance."
"I think that a problem has, um, something, to that computer," writes Tyler Z.
[Advertisement] Manage IT infrastructure as code across all environments with Puppet. Puppet Enterprise now offers more control and insight, with role-based access control, activity logging and all-new Puppet Apps. Start your free trial today!
It’s that time of the week again. Fails, fails and even more fails. I just can’t get enough, does that make me a bad person?
The post Look Out For That Bush appeared first on Viral Viral Videos.
Excited for the fighting battle of the century? This animal video makes Conor and Floyd look like amateur school boys to be honest…
The post McGregor vs Mayweather Is Nothing Compared To This appeared first on Viral Viral Videos.
Did you ever stop and realize how hard it actually is to find the one and only true love of your life? Is there some sort of process you have to go through or is […]
The post Casually Explained: Finding The One appeared first on Viral Viral Videos.
When you’re so American you always go for the cheeseburger, no matter where you are.
The post An Italian Cheeseburger-Ah appeared first on Viral Viral Videos.
There’s still people that never watched a fail compilation. This is the result.
The post Mud Is Good For The Skin appeared first on Viral Viral Videos.
In addition to our “bread and butter” of bad code, bad bosses, worse co-workers and awful decision-making, we always love the chance to turn out occassional special events. This time around, our sponsors at Hired gave us the opportunity to build and film a sketch.
I’m super-excited for this one. It’s a bit more ambitious than some of our previous projects, and pulled together some of the best talent in the Pittsburgh comedy community to make it happen. Everyone who worked on it- on set or off- did an excellent job, and I couldn't be happier with the results.
Once again, special thanks to Hired, who not only helped us produce this sketch, but also helps keep us keep the site running. With Hired, instead of applying for jobs, your prospective employer will apply to interview you. You get placed in control of your job search, and Hired provides a “talent advocate” who can provide unbiased career advice and make sure you put your best foot forward. Sign up now, and find the best opportunities for your future with Hired.
And now, our feature presentation: The Agreement
Brought to you by:
[Advertisement] BuildMaster integrates with an ever-growing list of tools to automate and facilitate everything from continuous integration to database change scripts to production deployments. Interested? Learn more about BuildMaster!
The Crazy Leaf Blower God. Albeit he’s a bit young to be a God, he does have that impressive, powerful and deep voice every God needs.
The post A New God Is Born appeared first on Viral Viral Videos.
Did you ever see a swimming gorilla? Let alone a gorilla having fun in the water like a baby?! Aww!
The post Gorilla Splashing In His Private Pool appeared first on Viral Viral Videos.
So, so madly in love. Real love right there.
The post True Love Right There appeared first on Viral Viral Videos.
This donkey knows a place or two to leave his urges.
The post A Perv With Four Legs appeared first on Viral Viral Videos.
It’s not easy to get kicked out of a store, but this funny girl gives it her all. Not sure if it’s hilarious or seriously annoying.
The post Truth Or Dare: Getting Kicked Out Of A Store appeared first on Viral Viral Videos.
Folks, we’ve got to talk about some of the headlines about the Internet of “Things”. If you’ve been paying even no attention to that space, you know that pretty much everything getting released is some combination of several WTFs, whether in conception, implementation, and let’s not forget security.
I get it. It’s a gold-rush business. We’ve got computers that are so small, so cheap, and so power-efficient, that we can slap the equivalent of a 1980s super-computer in a toilet seat. There's the potential to create products that make our lives better, that make the world better, and could carry us into a glowing future. It just sometimes feels like that's not what anybody's actually trying to make, though. Without even checking, I’m sure you can buy a WiFi enabled fidget spinner that posts the data to a smartphone app where you can send “fidges” to your friends, bragging about your RPMs.
We need this news-roundup, because when Alexa locks you out of your house because you didn’t pay for Amazon Prime this month, we can at least say “I told you so”. You think I’m joking, but Burger King wants in on that action, with its commercial that tries to trick your Google Assistant into searching for burgers. That’s also not the first time that a commercial has trigged voice commands, and I can guarantee that it isn’t going to be the last.
Now, maybe this is sour grapes. I bought a Nest thermostat before it was cool, and now three hardware generations on, I’m not getting software updates, and there are rumors about the backend being turned off someday. Maybe Nest needs a model more like “Hive Hub”. Hive is a startup with £500M invested, making it one of the only “smart home” companies with an actual business model. Of course, that business model is that you’ll pay $39.99 per month to turn your lights on and off.
At least you know that some of that money goes to keeping your smart-home secure. I’m kidding, of course- nobody spends any effort on making these devices secure. There are many, many high profile examples of IoT hacks. You hook your toaster up to the WiFi and suddenly it’s part of a botnet swarm mining BitCoins. One recent, high-profile example is the ZigBee Protocol, which powers many smart-home systems. It’s a complete security disaster, and opens up a new chain of assault- instead of tricking a target to plug a thumb drive into their network, you can now put your payload in a light bulb.
Smart-homes aside, IoT in general is breeding ground for botnets. Sure, your uncle Jack will blindly click through every popup and put his computer password in anything that looks like a password box, but at least you can have some confidence that his Windows/Mac/Linux desktop has some rudimentary protections bundled with the OS. IoT vendors apparently don’t care.
Let’s take a break, and take a peak at a fun story about resetting a computerized lock. Sure, they could have just replaced the lock, but look at all the creative hackery they had to do to get around it.
With that out of the way, let’s talk about tea. Ever since the Keurig coffee maker went big, everyone’s been trying to be “the Keurig for waffles” or “the Keurig for bacon” or “the Keurig for juice”- the latter giving us the disaster that is the Juicero. Mash this up with the Internet of Things, and you get this WiFi enabled tea-maker, which can download recipes for brewing tea off the Internet. And don’t worry, it’ll always use the correct recipe because each pod is loaded with an RFID that not only identifies which recipe to use, but ensures that you’re not using any unathorized tea.
In addition to the “Keurig, but for $X,” there’s also the ever popular “the FitBit, but for $X.” Here’s the FitBit for desks. It allows your desk to nag you about getting up, moving around, and it’ll upload your activity to the Internet while it’s at it. I’m sure we’re all really excited for when our “activity” gets logged for future review.
Speaking of FitBits, Qualcomm just filed some patents for putting that in your workout shoes. This is actually not a totally terrible idea- I mean, by standards of that tea pot, anyway. I share it here because they’re calling it “The Internet of Shoes” which is a funny way of saying, “our marketing team just gave up”.
Finally, since we’re talking about Internet connected gadgets that serve no real purpose, Google Glass got its first software update in three years. Apparently Google hasn’t sent the Glass to a farm upstate, where it can live with Google Reader, Google Wave, Google Hangouts, and all the other projects Google got bored of.
[Advertisement] Application Release Automation – build complex release pipelines all managed from one central dashboard, accessibility for the whole team. Download and learn more today!
This guy’s greatest wish turns into an interesting peek in how television actually works. Cool stuff!
The post The Greatest Wish appeared first on Viral Viral Videos.
If you’re not tall, you’ll never find out what it’s like up there. These short friends decided to take matters in their own hands and started their Being Tall experiment.
The post Is Living As A Tall Person Really That Much Fun? appeared first on Viral Viral Videos.
I just want to know about them new games man, don’t distract me.
The post Wait?! Am I At The Right Convention? appeared first on Viral Viral Videos.
Flirting with mermaids is not easy, you know.
The post How I Flirt Back appeared first on Viral Viral Videos.
Well, there is such a thing as being addicted to glue, but that’s not all there is…
The post Why Do Glue Labels Warn Not To Sniff It? appeared first on Viral Viral Videos.
Joe K was a developer at a company that provided a SaaS Natural Language Processing system. As Chief Engineer of the Data Science Team (a term that make him feel like some sort of mad professor), his duties included coding the Data Science Service. It provided the back-end for handling the complex, heavy-lifting type of processing that had to happen in real-time. Since it was very CPU-intensive, Joe spent a lot of time trying to battle latency. But that was the least of his problems.
The rest of the codebase was a cobbled-together mess that had been coded by the NLP researchers- scientists with no background in programming or computer science. Their mantra was “If it gets us the results we need, who cares how it looks behind the scenes?” This meant Joe’s well-designed data service somehow had to interface with applications made from a pile of ugly hacks. It was difficult at times, but he managed to get the job done while also keeping CPU usage to a minimum.
One day Joe was working away when Burt, the company CEO, burst in to their humble basement computer lab in an obvious tizzy. Burt rarely visited the “egghead dungeon”, as he called it, so something had to be amiss. “JOE!” he cried out. “The production data science service is completely down! Every customer we have gave me an angry call within the last ten minutes!”
Considering this was an early-stage startup with only five customers, Burt’s assertion was probably true, if misleading. “Wow, ok Burt. Let me get right on that!” Joe offered, feeling flustered. He took a look at the error logging service and there was nothing to be found. He then attempted to SSH to each of the production servers, with success. He decided to check performance on the servers and an entire string of red flags shot straight up the proverbial flag pole. Every production server was at 100% CPU usage.
“I have an effect for you, Burt, but not a cause. I’ll have to dig deeper but it almost seems like… a Denial of Service attack?” Joe offered, not believing that would actually be the case. With only five whitelisted customers able to connect, all of them using the NLP system to its fullest shouldn’t come even close to causing this.
While looking further at the server logs, Joe got an instant message from Xander, the software engineer who worked on the dashboards, “Hey Joe, I noticed prod was down… could it be related to something I’m doing?”
“Ummm… maybe? What is it you are doing exactly?” Joe replied, with a new sense of concern. Xander’s dashboard shouldn’t have any interaction with the DSS, so it seemed like an odd question. Requests to the NLP site would initially come to a front-end server, and if there was some advanced analysis that needed to happen, that server would RPC to the DSS. After the response was computed, the front-end server would log the request and response to the Xander’s dashboard system so it could monitor usage stats.
“Well, the dashboard is out of sync,” Xander explained. There had been a bug causing events to not make it to the dashboard system for the past month. They would need to be added to make the dashboard accurate. This could have been a simple change to the dashboard’s database, but instead Xander decided to replay all of the actual HTTP requests to the front end. Many of those requests triggered processing on the DSS- processing which had already been done. And since it was taking a long time, Xander had batched up the resent requests and was running them from three different machines, thus providing a remarkbaly good simulation of a DDoS.
“STOP YOUR PROCESS IMMEDIATELY AND DO THIS THE RIGHT WAY!” Joe shot back, all caps intended.
“Ok, ok, sorry. I’ll get this cleaned up,” Xander assured Joe. Within 15 minutes, the server CPU usage returned to normal levels and everything was great again. Joe was able to get Burt off his back and return to his normal duties.
A few minutes later, Joe’s IM dinged again with a message from Xander. "Hey Joe, sorry about that, LOL. But are we 100% sure that was the problem? Should I do it again just to be sure?
If there was a way for Joe to use instant messaging to send a virtual strangulation to Xander, he would have done it. But a “HELL NO!!!” would have to suffice.
[Advertisement] Release! is a light card game about software and the people who make it. Play with 2-5 people, or up to 10 with two copies - only $9.95 shipped!
The kitchen can get heated, but this episode op Kitchen Nightmares is on another level. How the hell do they even get food an a table for their guests? How do they even have guests?
The post Out of Control Owner Attacks His Own Chef appeared first on Viral Viral Videos.
What made you think it’s weird when a toucan loves to cuddle as well?
The post Pet Toucan Loves To Cuddle appeared first on Viral Viral Videos.
When your latest ‘project’ just said “Hi”…
The post Hi appeared first on Viral Viral Videos.
Wanna hump?
The post Hey You Have A Really Nice Skin appeared first on Viral Viral Videos.
Oh, so you think it’s going to be very windy today? Well here you have it!
The post Weatherman Gets The Weather He Forecasts appeared first on Viral Viral Videos.
Today, submitter Adam shows us how thoughtless language assumptions made by programmers are also hilarious language assumptions:
"So we're querying a database for data matching *title* but then need to try again with plural/singular if we didn't get anything. Removing the trailing S is bad, but what really caught my eye was how we make a word plural. Never mind any English rules or if the word is actually Greek, Chinese, or Klingon."
if ((locs == NULL || locs->Length() == 0) && (title->EndsWith(@"s") || title->EndsWith(@"S")))
{
title->RemoveCharAt(title->Length()-1);
locs = data->GetLocationsForWord(title);
}
else if ((locs == NULL || locs->Length() == 0) && title->Length() > 0)
{
WCHAR c = title->CharAt(title->Length()-1);
if (c >= 'A' && c <= 'Z')
{
title->Append(@"S");
}
else
{
title->Append(@"s");
}
locs = data->GetLocationsForWord(title);
}
Untils nexts times: ευχαριστώs &s 再见s, Hochs!
[Advertisement] Manage IT infrastructure as code across all environments with Puppet. Puppet Enterprise now offers more control and insight, with role-based access control, activity logging and all-new Puppet Apps. Start your free trial today!
Did you know cats have hobbies just like we do? Skating is a cat‘s favorite!
The post Boomer The Skating Cat appeared first on Viral Viral Videos.
These animals don’t care about their dad bods, and why would they?
The post Pets Rocking Their Dad Bods appeared first on Viral Viral Videos.
The exact moment you knew you were grounded for at least a week.
The post Oh It’s On appeared first on Viral Viral Videos.
When you’re today’s best athlete, but there is also a suspicious green toolbox.
The post Now That’s A Great Jump appeared first on Viral Viral Videos.
When you’re not totally awake yet and just sleepily walk down onto the street, and then it happens… Wait for it!
The post Get Back To The Porch!!1 appeared first on Viral Viral Videos.
As soon as something happens to the baby elephant, every family member does their part to pitch in and save their little baby.
The post 52 Seconds Of This Elephant Family And You’ll Be Tearing Up appeared first on Viral Viral Videos.
When you’re too desperate to think things through.
The post Just End It appeared first on Viral Viral Videos.
If you have a cool hobby, it’s easy to play the police.
The post The Best Way To Dodge A Fine appeared first on Viral Viral Videos.
The maternal instincts are very strong on this horse. The baby’s reaction is priceless!
The post Horse Rocks Crying Baby appeared first on Viral Viral Videos.
I’ve yet to meet the first human who doesn’t like raccoons. This guy is no exception and what follows is a very cute encounter.
The post Adorable Raccoon Babies Make Human Friend appeared first on Viral Viral Videos.
Being happy isn’t as easy as it might seem, but we got you. Watch and learn!
The post Instructions For A Happy Life appeared first on Viral Viral Videos.
Maybe you’re somewhere where life is quite alright, or maybe you wish you’d been somewhere else. But this is the place where everyone wants to be, as it’s the best place on Earth.
The post The Best Place To Live On Earth appeared first on Viral Viral Videos.
You know this is the freshest booty you’ve ever seen.
The post Shin Chan Drink appeared first on Viral Viral Videos.
Everybody lives their own life, but damn…
The post Me At Age 22 appeared first on Viral Viral Videos.
Always in a hurry when you’re heading for work in the morning? Your life gets a little easier with these life hacks for packing your lunch.
The post The Easiest Way To Pack Your Lunch appeared first on Viral Viral Videos.
"Outlook can't open an attachment because it claims that it was made in Outlook, which Outlook doesn't think is installed...or something," writes Gavin.
Mitch wrote, "So, the problems I'm having with activating Windows 10 is that I need to install Windows 10. Of course!"
"I don't expect 2018 to come around," writes Adam K., "Instead we'll all be transported back to 2014!"
"Here I thought that the world had gone mad, but then I remembered that I had a currency converter add-on installed," writes Shahim M.
John S. wrote, "It's good to know that the important notices are getting priority!"
Michael D. wrote, "It's all fun and games until someone tries to exit the conference room while someone else is quenching their thirst."
[Advertisement] Atalasoft’s imaging SDKs come with APIs & pre-built controls for web viewing, browser scanning, annotating, & OCR/barcode capture. Try it for 30 days with included support.
Okay, that’s not true for everyone, but this 91-year-old has some cool tricks up her sleeve.
The post You’re Never Too Old To Gym appeared first on Viral Viral Videos.
Nature is brutal, we all know that. But in case you needed a reminder…
The post Wolf Hunts Down Goat In Dramatic Desert Chase appeared first on Viral Viral Videos.
There is no bad guy like me, just pick me.
The post I’m Bad At Everything appeared first on Viral Viral Videos.
Leave it to the dogs to race like there’s no tomorrow, whether there’s a little boy coming along or not.
The post Next Level Dog Racing appeared first on Viral Viral Videos.
Leave it to the nerds to build a crappy looking device and let them battle it out in a wrestling ring. WTF!
The post AI Wrestling… Sort Of. appeared first on Viral Viral Videos.
Shawn W. was a newbie support tech at a small company. Just as he was beginning to familiarize himself with its operational quirks, he got a call from Jim: The Big Boss.
Dread seized Shawn. Aside from a handshake on Interview Day, the only "interaction" he'd had with Jim thus far was overhearing him tear into a different support rep about having to deal with "complicated computer crap" like changing passwords. No doubt, this call was bound to be a clinic in saintly patience.
"Tech Support," Shawn greeted. "How may—?"
"I'm out of space and I need more!" Jim barked over the line.
"Oh." Shawn mentally geared up for a memory or hard drive problem. "Did you get a warning or error mes—?"
"Just get up here and bring some more space with you!" Jim hung up.
"Oh, boy," Shawn muttered to himself.
Deciding that he was better off diagnosing the problem firsthand, Shawn trudged upstairs to Jim's office. To his pleasant surprise, he found it empty. He sank into the cushy executive-level chair. Jim hadn't been away long enough for any screensavers or lock screens to pop up, so Shawn had free rein to examine the machine.
There wasn't much to find. The only program running was a web browser, with a couple of tabs open to ESPN.com and an investment portfolio. The hardware itself was fairly new. CPU, memory, hard drive all looked fine.
"See, I'm out of space. Did you bring me more?"
Shawn glanced up to find Jim barreling toward him, steaming mug of coffee in hand. He braced himself as though facing down an oncoming freight train. "I'm not sure I see the problem yet. Can you show me what you were doing when you noticed you needed more space?"
Jim elbowed his way over to the mouse, closed the browser, then pointed to the monitor. "There! Can't you see I'm out of space?"
Indeed, Jim's desktop was full. So many shortcuts, documents, widgets, and other icons crowded the screen that the tropical desktop background was barely recognizable as such.
While staring at what resembled the aftermath of a Category 5 hurricane, Shawn debated his response. "OK, I see what you mean. Let's see if we can—"
"Can't you just get me more screen?" Jim pressed.
More screen? "You mean another monitor?" Shawn asked. "Well, yes, I could add a second monitor if you want one, but we could also organize your desktop a little and—"
"Good, get me one of those! Don't touch my icons!" Jim shooed Shawn away like so much lint. "Get out of my chair so I can get back to work."
A short while later, Shawn hooked up a second monitor to Jim's computer. This prompted a huge and unexpected grin from the boss. "I like you, you get things done. Those other guys would've taken a week to get me more space!"
Shawn nodded while stifling a snort. "Let me know if you need anything else."
Once Jim had left for the day, Shawn swung past the boss' office out of morbid curiosity. Jim had already scattered a few dozen shortcuts across his new real estate. Another lovely vacation destination was about to endure a serious littering problem.
[Advertisement] Manage IT infrastructure as code across all environments with Puppet. Puppet Enterprise now offers more control and insight, with role-based access control, activity logging and all-new Puppet Apps. Start your free trial today!
A little rust can cover up a lot of hidden treasures… Look how this dude goes on a treasure hunt, just by polishing his old and rusty knife. It’s like magic!
The post You’ll Never Guess What Happens After Polishing This Rusty Knife appeared first on Viral Viral Videos.
Casually running when suddenly a wild bear appears. Noooope… Talk about extreme footage!
The post Testing New Drone Gets Dangerous Really Quick appeared first on Viral Viral Videos.
You own a donkey and you’ve got nothing going on… Then why not right?
The post Street Surfing appeared first on Viral Viral Videos.
You just need to know the magic words.
The post It’s Lit appeared first on Viral Viral Videos.
News reporter tries to keep his cool and just do his job, but eventually he cannot ignore the passion that’s going on behind him.
The post Kiss Like There’s No One Watching, Even When There Is appeared first on Viral Viral Videos.
The innermost circle of Hell, as we all know, is trying to resolve printer driver issues for all eternity. Ben doesn’t work with the printers that we mere mortals deal with on a regular basis, though. He runs a printing press, three stories of spinning steel and plates and ink and rolls of paper that could crush a man.
Like most things, the press runs Linux- a highly customized, modified version of Linux. It’s a system that needs to be carefully configured, as “disaster recovery” has a slightly different meaning on this kind of heavy equipment. The documentation, while thorough and mostly clear, was obviously prepared by someone who speaks English as a second language. Thus, Ben wanted to check the shell scripts to better understand what they did.
The first thing he caught was that each script started with variable declarations like this:
GREP="/bin/grep"
CAT="/bin/cat"
In some cases, there were hundreds of such variable declarations, because presumably, someone doesn’t trust the path variable.
Now, it’s funny we bring up cat, as a common need in these scripts is to send a file to STDOUT. You’d think that cat is just the tool for the job, but you’d be mistaken. You need a shell function called cat_file:
# function send an file to STDOUT
#
# Usage: cat_file <Filename>
#
function cat_file ()
{
local temp
local error
error=0
if [ $# -ne 1 ]; then
temp=""
error=1
else
if [ -e ${1} ]; then
temp="`${CAT} ${1}`"
else
temp=""
error=1
fi
fi
echo "${temp}"
return $((error))
}
This ‘belt and suspenders’ around cat ensures that you called it with parameters, that the parameters exist, and failing that, it… well… fails. Much like cat would, naturally. This gives you the great advantage, however, that instead of writing code like this:
dev="`cat /proc/dev/net | grep eth`"
You can instead write code like this:
dev="`cat_file /proc/dev/net | ${GREP} eth`"
Much better, yes?
[Advertisement] BuildMaster integrates with an ever-growing list of tools to automate and facilitate everything from continuous integration to database change scripts to production deployments. Interested? Learn more about BuildMaster!
Do you have a double chin? And is it similar to one of the double chins in this WTF-video?
The post Not Every Double Chin Is The Same appeared first on Viral Viral Videos.
This man loves dogs and loves his work, so why not combine both?
The post Working For UPS Has Its Perks appeared first on Viral Viral Videos.
There is a lot of evidence in this video, but this cute girl denies everything. Time to lawyer up, daddy!
The post Cute Kid Caught Red Handed appeared first on Viral Viral Videos.
Not sure if drunk or just blatantly retarded.
The post Surfing Like A Pro appeared first on Viral Viral Videos.
Sometimes the evidence is right in front of you…
The post Are You Sure You’re The Dad? appeared first on Viral Viral Videos.
Contracting can be really hit or miss. Sometimes, you're given a desk and equipment and treated just like an employee, except better paid and exempt from team-building exercises. Sometimes, however, you're isolated in your home office, never speaking to anyone, working on tedious, boring crap they can't convince their normal staff to do.
Eric was contracted to perform basic website updating tasks for a government agency. Most of the work consisted of receiving documents, uploading them to the server, and adding them to a page. There were 4 document categories, each one organized by year. Dull as dishwater, but easy.
The site was hosted by a third party in a shared hosting environment. It ran on a CMS produced by another party. WTFCMS was used in many high-profile sites, so the agency figured it had to be good. Eric was given login credentials and—in the way of techies given boring tasks everywhere—immediately began automating the task at hand.
Step 1 of this automation was to get a list of articles with their IDs. Eric was pleased to discover that the browser-based interface for the CMS used a JSON request to get the list of pages. With the help of good old jq, he soon had that running in a BASH shell script. To get the list of children for an article, he passed the article's ID to the getChildren endpoint.
Usually, in a heirarchy like this, there's some magic number that means "root element." Eric tried sending a series of likely candidates, like 0, -1, MAX_INT, and MIN_INT. It turned out to be -1 ... but he also got a valid list when he passed in 0.
Curious, he thought to himself. This appears to be a list of articles ... and hey, here's the ones I got for this site. These others ...? No way.Sure enough, passing in a parent ID of 0 had gotten Eric some sort of super-root: every article across every site in the entire CMS system. Vulnerability number 1.
Step 2 was to take the ID list and get the article data so he could associate the new file with it. This wasn't nearly as simple. There was no good way to get the text of the article from the JSON interface; the CMS populated the articles server-side.
Eric was in too deep to stop now, though. He wrote a scraper for the edit page, using an XML parser to handle the HTML form that held the article text. Once he had the text, he compared it by hand to the POST request sent from his Firefox instance to ensure he had the right data.
And he did ... mostly. Turns out, the form was manipulated by on-page Javascript before being submitted: fields were disabled or enabled, date/time formats were tweaked, and the like. Eric threw together some more scripting to get the job done, but now he wasn't sure if he would hit an edge case or somehow break the database if he ran it. Still, he soldiered on.
Step 3 was to upload the files so they could be linked to the article. With Firebug open, Eric went about adding an upload.
Now, WTFCMS seemed to offer the usual flow: enter a name, select a file, and click Upload to both upload the file and save it as the given name. When he got to step 2, however, the file was uploaded immediately—but he still had to click the Upload button to "save" it.
What happens if I click Cancel? Eric wondered. No, never mind, I don't want to know. What does the POST look like?
It was a mess of garbage. Eric was able to find the file he uploaded, and the name he'd given it ... and also a bunch of server-side information the user shouldn't be privvy to, let alone be able to tamper with. Things like, say, the directory on the server where the file should be saved. Vulnerability number 2.
The response to the POST contained, unexpectedly, HTML. That HTML contained an iframe. The iframe contained an iframe. iframe2 contained iframe3; iframe3 contained a form. In that form were two fields: a submit button, reading "Upload", and a hidden form field containing the path of the uploaded file. In theory, he could change that to read anything on the server. Now he had both read and write access to any arbitrary destination in the CMS, maybe even on the server itself. Vulnerability number 3.
It was at this point that Eric gave up on his script altogether. This is the kind of task that Selenium IDE is perfect for. He just kept his head down, hoped that the server had some kind of validation to prevent curious techies like himself from actually exploiting any of these potential vulnerabilities, and served out the rest of his contract.
[Advertisement] Release! is a light card game about software and the people who make it. Play with 2-5 people, or up to 10 with two copies - only $9.95 shipped!
Daddy is usually very handy or just clumsy. There seems to be nothing in between, and this video is proof.
The post Funny Dad Fails appeared first on Viral Viral Videos.
Come at me bro, this cat knows no fear, even when it faces the biggest cat it’s ever seen.
The post Brave Housecat Challenges Lion appeared first on Viral Viral Videos.
What type of walker are you? This guy can walk all the walks, but a little background music would’ve been nice.
The post 100 Different Walks appeared first on Viral Viral Videos.
Don’t come to me when it all comes crashing down again.
The post You’re A Bunch Of Clowns appeared first on Viral Viral Videos.
You wanna learn how to box? I’ll teach you!
The post Serious Boxing appeared first on Viral Viral Videos.
For a brief period of time, say, about 3–4 years ago, if you wanted to sound really smart, you’d bring up “functional programming”. Name-dropping LISP or even better, Haskell during an interview marked you as a cut above the hoi polloi. Even I, surly and too smart for this, fell into the trap of calling JavaScript “LISP with curly braces”, just because it had closures.
Still, functional programming features have percolated through other languages because they work. They’re another tool for the job, and like any tool, when used by the inexpert, someone might lose a finger. Or perhaps someone should lose a finger, if only as a warning to others.
For example, what if you wanted to execute a loop 100 times in JavaScript? You could use a crummy old for loop, but that’s not functional. The functional solution comes from an anonymous submitter:
Array.apply(null, {length: 99}).map(Number.call, Number).forEach(function (element, index) {
// do some more crazy stuff
});
This is actually an amazing abuse of JavaScript’s faculties, and I thought I saw the worst depredations one could visit on JavaScript while working with Angular code. When I first read this line, my initial reaction was, “oh, that’s not so bad.” Then I tried to trace through its logic. Then I realized, no, this is actually really bad. Not just extraneous arrays bad, but full abused of JavaScript bad. Like call Language Protective Services bad. This is easier to explain if you look at it backwards.
forEach applies a function to each element in the array, supplying the element and the index of that element.
Number.call invokes the Number function, used to convert things into numbers (shocking, I know), but it allows you to supply the this against which the function is executed. map takes a callback function, and supplies an array item for the currentValue, the index, and the whole array as parameters. map also allows you to specify what this is, for the callback itself- which they set to be Number- the function they’re calling.
So, remember, map expects a callback in the form f(currentValue, index, array). We’re supplying a function: call(thisValue, numberToConvert). So, the end result of map in this function is that we’re going to emit an array with each element equal to its own index, which makes the forEach look a bit silly.
Finally, at the front, we call Array.apply, which is mostly the same as Array.call, with a difference in how arguments get passed. This allows the developer to deftly avoid writing new Array(99), which would have the same result, but would look offensively object-oriented.
[Advertisement] High availability, Load-balanced or Basic – design your own Universal Package Manager, allow the enterprise to scale as you grow. Download and see for yourself!
You know you’ve already wanted this. Watch magnificent Planet Earth footage with a Snoop Dogg voice over. Crazy!
The post Plizzanet Earth with Snoop Dogg appeared first on Viral Viral Videos.
What if you can have a custom horn in your car for every particular traffic situation? Well, you can, but you have to do it yourself!
The post Nicest Car Horn Ever appeared first on Viral Viral Videos.
When you make a mistake on live television, it’s best to make a silly joke out of it. This news anchor does a great job.
The post News Anchor Drops His Career On The Floor appeared first on Viral Viral Videos.
Look at me vape.
The post Hey Babe appeared first on Viral Viral Videos.
When you wanna be part of the animal kingdom, prepare for war.
The post You Can Have The Onions Still appeared first on Viral Viral Videos.
As much as the next thing, party snacks go in and out of fashion as well. What differences are there between today’s party snacks and those of our ancestors?
The post Kids Try 100 Years Of Party Snacks appeared first on Viral Viral Videos.
You’re as old as you feel, and this man feels better than ever listening to his favorite music.
The post That’s How To Listen To Metallica appeared first on Viral Viral Videos.
You’d think when someone pays a shitload of money so you can make good food again, you’d be a little grateful. Adele has other plans.
The post Adele Absolutely Hates Gordon’s Expensive Restaurant Makeover appeared first on Viral Viral Videos.
I think we can all relate to this one…
The post Cigarettes Are The Devil appeared first on Viral Viral Videos.
Stuck in traffic? Play a game!
The post A Random Rock Paper Scissors Appears appeared first on Viral Viral Videos.
We’ve seen our share of baby geese, but we just can’t get enough. They are so adorable!
The post Biggest Mass of Baby Geese Geeslings Ever appeared first on Viral Viral Videos.
This compilation of fails starts off with a malfunctioning parachute, and as if that’s not terrifying enough, there rest of the video is even worse.
The post Fails Of The Week: Bridesmaid Ruins Wedding appeared first on Viral Viral Videos.
I’m not great at spelling, but at least I know how to spell “accident”.
The post Accident appeared first on Viral Viral Videos.
As a mom, you know your children through and through, you might even be able to predict what they’re going to say. This video is not about that.
The post Maybe You Should Say One Of These Things To Your Mom Sometime appeared first on Viral Viral Videos.
Happy girl. Happy dog. Happy times. Broken chair.
The post Dog = Love appeared first on Viral Viral Videos.
"I asked my son, @Firstname, and he is indeed rather @Emotion about going to @ThemePark!" wrote Chris @LASTNAME.
"I think Google assumes there is only one exit on the highway," writes Balaprasanna S.
Axel C. writes, "So what you're saying here is that something went wrong?"
"Hmmmm...YMMV, but that's not quite the company that I would want to follow," wrote Rob H.
"You know, I also confuse San Francisco with San Jose all the time. I mean, they just sound so much alike!" writes Mike S.
Mike G. writes, "Sure, it's and a little avant garde, but I hear this film was nominated for an award."
[Advertisement] Otter enables DevOps best practices by providing a visual, dynamic, and intuitive UI that shows, at-a-glance, the configuration state of all your servers. Find out more and download today!
