Post A01yvimbWW1T2eoJcG by kick@blob.cat
(DIR) More posts by kick@blob.cat
(DIR) Post #A01Ye2lzrdKx1HR7nk by georgia@netzsphaere.xyz
2020-10-10T16:25:29.292949Z
3 likes, 0 repeats
even a script parsing the aosp security bulletins where you enter when your last patch was, your android version, chip manufacturer, and whether you have google play that proceeds to tell you what vulns effect you (with ability to filter by severity or type) would be rad
(DIR) Post #A01YtZp9GR3VrvJjua by georgia@netzsphaere.xyz
2020-10-10T16:28:17.892522Z
2 likes, 0 repeats
hell you could do it with awkif i were a real egirl someone would make this for me
(DIR) Post #A01Yx2trcHZouoB2bw by null@pl.devfs.xyz
2020-10-10T16:29:06.970920Z
1 likes, 0 repeats
@georgia oh that sounds great, yeah
(DIR) Post #A01Z1LDZS9OQsxRXG4 by lanodan@queer.hacktivis.me
2020-10-10T16:29:51.986029Z
3 likes, 1 repeats
@georgia if android; then echo "You fucked"; else "Maybe you're fine"; fi
(DIR) Post #A01ZdcaJKeZtkfKheq by net@letsalllovela.in
2020-10-10T16:36:48.724127Z
0 likes, 0 repeats
@georgia I could definitely write this but for starters it’s 2am, secondly I’m an eboy, finally where would I get the list of vulns as something like a CSV?
(DIR) Post #A01Zi2uJPJNoY2nXsG by georgia@netzsphaere.xyz
2020-10-10T16:37:36.703968Z
0 likes, 0 repeats
@net https://source.android.com/security/bulletin
(DIR) Post #A01Zkc2dkXWI5uuwQi by georgia@netzsphaere.xyz
2020-10-10T16:38:04.492269Z
0 likes, 0 repeats
@net not sure if there's a csv BUT THANK YOU EBOY FRIEND
(DIR) Post #A01ZnrPz2KcgeWNvDk by galena@paws.moe
2020-10-10T16:38:38.736881Z
2 likes, 0 repeats
@georgia message someone and offer pics in exchange, when they finish it say "sorry my phone broke and I don't have a camera, I'll send pics when I get a new phone ;)" then mute them and never respond
(DIR) Post #A01Zv686jm70J6TUC8 by net@letsalllovela.in
2020-10-10T16:39:57.919019Z
1 likes, 0 repeats
@georgia I’ll have to try in the morning (well it is morning but you know what I mean, when I wake up tomorrow which is probably going to be afternoon at this point but w/e)
(DIR) Post #A01Zy8bM0JDEqFbUsi by georgia@netzsphaere.xyz
2020-10-10T16:40:30.549506Z
0 likes, 0 repeats
@net thank you you're doing the world a favor ;_;
(DIR) Post #A01a2p5A0HMrkfmObQ by georgia@netzsphaere.xyz
2020-10-10T16:41:21.958431Z
2 likes, 0 repeats
@galena will trade code for cunt picsoh did i say cunt? i meant cat.
(DIR) Post #A01aExrjAn2gT4Hnhw by boob@neckbeard.xyz
2020-10-10T16:43:33.658841Z
0 likes, 0 repeats
@georgia @galena What a cunt.
(DIR) Post #A01eBEXVdalOq6J0LY by e@anime.website
2020-10-10T17:27:39.456323Z
1 likes, 0 repeats
@net @georgia 1. There's no csv, that would be too easy. It's all HTML tables.2. You can't do it with awk. I've been trying and I've needed to use an actual HTML parser and jq at this point.
(DIR) Post #A01eSKYuUziYRP75hA by georgia@netzsphaere.xyz
2020-10-10T17:30:46.909285Z
0 likes, 0 repeats
@e @net ah fuck why did i think it would be simple
(DIR) Post #A01hbA45CEmcLxb2lk by e@anime.website
2020-10-10T18:05:58.283182Z
1 likes, 0 repeats
@georgia @net also the HTML is not semantic at all so the tables aren't structurally related to the headersthis is hell
(DIR) Post #A01hlEfYvpX7Wtvmoy by georgia@netzsphaere.xyz
2020-10-10T18:07:47.310291Z
0 likes, 0 repeats
@e @net what if you download the html and do a shellscript that like does a find in text after a keyword and stops at the next keyword
(DIR) Post #A01iNRZnONXSZ2S8ES by e@anime.website
2020-10-10T18:14:43.269518Z
0 likes, 0 repeats
@georgia @net it's typically a bad idea to try and manipulate arbitrary HTML with plain text editing
(DIR) Post #A01j8Agi07PnnOy3iC by georgia@netzsphaere.xyz
2020-10-10T18:23:09.618804Z
0 likes, 0 repeats
@e @net hard coded references are also a bad idea but they work
(DIR) Post #A01wRBUwVm25DNrQPY by e@anime.website
2020-10-10T20:52:15.743925Z
2 likes, 1 repeats
@georgia @net I can't believe I actually did this just to avoid working on other projects:suicide:
(DIR) Post #A01wWP6LMWs2quqM3E by georgia@netzsphaere.xyz
2020-10-10T20:53:13.515255Z
0 likes, 0 repeats
@e @net how should i run it? just as a shell script?
(DIR) Post #A01wYVLl6KReoN3V7w by georgia@netzsphaere.xyz
2020-10-10T20:53:36.068945Z
0 likes, 0 repeats
@e @net ah looks like it nice
(DIR) Post #A01wofZYrSrB9LDfkm by e@anime.website
2020-10-10T20:56:29.526187Z
1 likes, 0 repeats
@georgia @net yeah, but it depends on pup, jq, and curlcurl and jq should be in any self-respecting distro's repos already, but pup may not be, so you can get it here: https://github.com/ericchiang/pup
(DIR) Post #A01xImXfVtgJS7h1VY by georgia@netzsphaere.xyz
2020-10-10T21:01:56.984270Z
0 likes, 0 repeats
@e @net can you run it for me I'm retarded android 9 last patched january 2020 qualcomm no gapps
(DIR) Post #A01xPvUocZcdFYlV44 by georgia@netzsphaere.xyz
2020-10-10T21:03:15.581092Z
0 likes, 0 repeats
@e @net i'm running it on my phone which is why it didn't work
(DIR) Post #A01xSTvtYbAEdIeMD2 by e@anime.website
2020-10-10T21:03:43.144025Z
0 likes, 0 repeats
@georgia @net termux or plain terminal?
(DIR) Post #A01xUZsARZQTdNuDRo by georgia@netzsphaere.xyz
2020-10-10T21:04:05.539179Z
0 likes, 0 repeats
@e @net termux
(DIR) Post #A01xxjRlvSatj5SfJo by e@anime.website
2020-10-10T21:09:21.796691Z
1 likes, 0 repeats
@georgia @net I don't think termux packages pup, so it's not like it would make a difference, but anyway here's everything since 2020-01-01the script doesn't consider android version or manufacturer because the fields change a lot, it's hard, and mostly because my brain hurts after a few hours of fighting with jq'd html
(DIR) Post #A01y4xw4SJ1Ygn5Bk8 by georgia@netzsphaere.xyz
2020-10-10T21:10:38.658357Z
0 likes, 0 repeats
@e @net it does package pup. i cant run shell scripts in termux for some reason though. asciiquarium doesn't work either.
(DIR) Post #A01yNQJhfpflvMwDPE by georgia@netzsphaere.xyz
2020-10-10T21:14:00.719869Z
0 likes, 0 repeats
@e @net yeah thanks but clearly i'm terminally stupidi'm sure it will be of use to others though ;_;
(DIR) Post #A01yvimbWW1T2eoJcG by kick@blob.cat
2020-10-10T21:20:12.167098Z
0 likes, 0 repeats
@georgia @e @net https://github.com/termux/termux-packages/issues/1776#issuecomment-343471767
(DIR) Post #A01z3iXAKiO6aPOzPk by georgia@netzsphaere.xyz
2020-10-10T21:21:39.403631Z
1 likes, 0 repeats
@kick @e @net oh sweet thanks
(DIR) Post #A01zIKcpVVFQmL1J1k by georgia@netzsphaere.xyz
2020-10-10T21:24:17.910464Z
1 likes, 0 repeats
@kick @e @net adding rando script to / like a boss
(DIR) Post #A01zQcRx7TxONRssQy by kick@blob.cat
2020-10-10T21:25:47.264437Z
0 likes, 0 repeats
@georgia @e @net You should probably keep it in your home directory.
(DIR) Post #A01zTV1vAAUcEY57D6 by georgia@netzsphaere.xyz
2020-10-10T21:26:18.994920Z
0 likes, 0 repeats
@kick @e @net permission shmermission
(DIR) Post #A01zXCUY1uSXteEi7k by georgia@netzsphaere.xyz
2020-10-10T21:26:57.594437Z
0 likes, 0 repeats
@kick @e @net oh wait lemme try sonething
(DIR) Post #A01zdTxO0XfFnjija4 by kick@blob.cat
2020-10-10T21:28:06.926095Z
1 likes, 0 repeats
@georgia @e @net ...a tsv is just a spreadsheet, isn't it?
(DIR) Post #A01zppH0ZyuTO7mhsG by hyphen@anime.website
2020-10-10T21:30:19.523975Z
0 likes, 0 repeats
@georgia @e @net I THINK I heard a word that on newer androids exec is straight up prohibited. I think starting with Android 10.Could that be why?
(DIR) Post #A01zsulmbI11IseTrM by kick@blob.cat
2020-10-10T21:30:54.432488Z
1 likes, 0 repeats
@georgia @e @net I'd just try moving it to your home directory and then runningsh e.shI'd imagine the tsv is probably the output of the script.
(DIR) Post #A020Mt5BRBWcl61D3Q by georgia@netzsphaere.xyz
2020-10-10T21:36:19.549513Z
0 likes, 0 repeats
@kick @e @net that's it i give up ._.
(DIR) Post #A020Og8uWDSdCncFm4 by georgia@netzsphaere.xyz
2020-10-10T21:36:38.913222Z
0 likes, 0 repeats
@hyphen @e @net i have android 9
(DIR) Post #A020TgacHhos2Uxkzw by georgia@netzsphaere.xyz
2020-10-10T21:37:33.283427Z
0 likes, 0 repeats
@kick @e @net n-nani?!
(DIR) Post #A020ZV4rzzvQ4Zt08O by georgia@netzsphaere.xyz
2020-10-10T21:38:36.359690Z
1 likes, 0 repeats
@kick @e @net i don't think i can view tsv files
(DIR) Post #A020dUykJANqvOvc1I by happymoomoo@fedi.absturztau.be
2020-10-10T21:39:19.778977Z
0 likes, 0 repeats
@georgia @kick @e @net https://stackoverflow.com/questions/54055549/linux-ubuntu-set-illegal-option-o-pipefail
(DIR) Post #A020joasIECzUsm5Ee by kick@blob.cat
2020-10-10T21:40:28.040986Z
2 likes, 0 repeats
@georgia @e @net Probably a conflict in (what I'd guess are) GNU vs. Busybox utils, but without seeing the script I have no idea. If you pipe `cat e.sh` to `less` or `more` (remember, the syntax for that is `cat X | less`), you should be able to figure out what it was trying to do.
(DIR) Post #A020owmZH8VoLEgubw by kick@blob.cat
2020-10-10T21:41:22.373629Z
0 likes, 0 repeats
@georgia @e @net They can be viewed in any spreadsheet viewer, including LibreOffice, I think.
(DIR) Post #A020ta9ArQ7paSTWC0 by georgia@netzsphaere.xyz
2020-10-10T21:42:14.033056Z
1 likes, 0 repeats
@kick @e @net oh the script is very intuitive and nicely commented, a+
(DIR) Post #A020y1sNhqgekIk0Ku by georgia@netzsphaere.xyz
2020-10-10T21:43:02.253985Z
1 likes, 0 repeats
@kick @e @net i'll check it out
(DIR) Post #A020zHASL1tgSen1hQ by kick@blob.cat
2020-10-10T21:43:15.231335Z
0 likes, 0 repeats
@georgia @e @net My guess is now "It's a bash script, which isn't POSIX compliant."Try:bash e.sh
(DIR) Post #A0210m2t1K6KW6xnJQ by georgia@netzsphaere.xyz
2020-10-10T21:43:32.004303Z
1 likes, 0 repeats
@happymoomoo @e @kick @net it says to run it the original way i tried to lol
(DIR) Post #A0210np8PQI022Xq9g by e@anime.website
2020-10-10T21:43:31.111212Z
1 likes, 0 repeats
@georgia @kick @net yeah, the tsv is just a spreadsheet (Tab Separated Values, aka CSV with tabs)you can open it in a text editor, or just `cat`, for that matter
(DIR) Post #A0212Uk8Jzg5Qw0pRA by hyphen@anime.website
2020-10-10T21:43:49.987406Z
1 likes, 0 repeats
@georgia @kick @e @net this one's easy: sh is usually mksh, I see bashisms in e's script. you want to run it with bash probably
(DIR) Post #A0216Nmy7S8z1WBzoe by e@anime.website
2020-10-10T21:44:32.690927Z
1 likes, 0 repeats
@hyphen @georgia @kick @net it is technically not POSIX, I cheated and used <<< and I think -o pipefail is bash/zsh-only
(DIR) Post #A021A2YczyYIKmEFTk by georgia@netzsphaere.xyz
2020-10-10T21:45:10.471889Z
0 likes, 0 repeats
@kick @e @net "specify current android patch level" i think that means adding an option or something? i don't know how to format january 2020 lol
(DIR) Post #A021D4JYvGCueUcs64 by happymoomoo@fedi.absturztau.be
2020-10-10T21:45:45.503264Z
0 likes, 0 repeats
@georgia @kick @e @net UNIX time?
(DIR) Post #A021Db1zHcl07Xenmi by e@anime.website
2020-10-10T21:45:50.006068Z
0 likes, 0 repeats
@georgia @kick @net same as the patch levels on the bulletin site, YYYY-MM-DD, eg. ./e.sh 2020-01-01
(DIR) Post #A021GuWDHlk5QeNKrI by kick@blob.cat
2020-10-10T21:46:26.387942Z
1 likes, 0 repeats
@georgia @e @net Read the script, you've got how it works in front of you! That's the cool thing about interpreted languages.
(DIR) Post #A021HEzJBItoug8qzA by georgia@netzsphaere.xyz
2020-10-10T21:46:30.532915Z
0 likes, 0 repeats
@e @kick @net ah, that makes sense
(DIR) Post #A021QAdUjMcy1SCFto by georgia@netzsphaere.xyz
2020-10-10T21:48:06.033956Z
0 likes, 0 repeats
@e @kick @net it worked! i love it!
(DIR) Post #A0224G0SBQXIGH3BBo by e@anime.website
2020-10-10T21:55:21.960007Z
1 likes, 0 repeats
@georgia @kick @net there are a few edge cases it doesn't properly handle (multiple patch levels in one month are all shown as one big entry, tables that don't list CVEs as the first column are silently ignored, it doesn't include the actual advisory numbers or anything, etc.)but to be brutally honest, if someone really wants to do this kind of thing in a serious way, they're better off just copying and pasting in to a spreadsheet
(DIR) Post #A02PAvIlrIRt1JlXF2 by net@letsalllovela.in
2020-10-11T02:14:16.614590Z
1 likes, 0 repeats
@e @georgia @kick wow thanks for stealing my thunder guy
(DIR) Post #A02PLAssmJdmFCXqBk by georgia@netzsphaere.xyz
2020-10-11T02:16:07.135566Z
1 likes, 0 repeats
@net @e @kick heh well maybe you could add functionality to his script