1moron

The conservative site “63red” created a safe space app that allows MAGAts to find places where they can wear their red caps without being called names. You know, what they make fun of liberals for doing. Anyway, predictably, the guy who created it (Wallace) fucked it up from bean to cup:

  • Wallace had left his username, email, and a plaintext password in the code—twice.
  • There is no authentication for any of the application programming interface [API] calls, so someone could spoof any user—essentially giving them administrative access to the API.
  • […]By using the “Get user by ID” API call, someone could retrieve the user name, email, ban status, and other details on each user account.
  • Passwords were not in this data, but the entire user database could be retrieved by iterating through all the possible first letters or digits of an account ID.
  • Any user could be blocked using an HTTP Post to the “block” API.

If none of that makes sense, the simple summary is that the app is a security catastrophe full of baby-level errors. Of course, Wallace’s response to the security researcher who found all of these issues was to threaten him, and to lie and say they were fixed when they weren’t.

I’m wondering what “63red” stands for. Is it the Pantone color code for the shade used on the cover of the original edition of Mein Kampf? Maybe someone who speaks more fluent wingnut can help out in the comments.






94 replies
  1. 1
    Sebastian says:

    I am really waiting for someone to get access to PoliceOne or whatever that cops only discussion board is called

  2. 2
    Jim, Foolish Literalist says:

    m wondering what “63red” stands for.

    Yeah, I read a Daily Beast story about this, and never saw that explained

    I am a little jealous. I wouldn’t know how to make an app but I’m sure if I gave it some time I could figure out a scam to run on the MAGAts

  3. 3
    Patricia Kayden says:

    @Sebastian: That would be good. Then we could hear all of their racist chatter.

  4. 4
    Patricia Kayden says:

    @Jim, Foolish Literalist: Like the Black woman who claimed that she was being harassed by other Blacks because she was a Trump supporter and got a lot of money through GoFundMe. ‘‘Twas a scam.

  5. 5
    Jim, Foolish Literalist says:

    on topic because morons– Fredo is trying turn the college scam thing into an anti-hollywood outrage, a week after it was revealed that his father ordered his lawyers to threaten his alma maters about releasing his transcripts. And now

    Tim O’Brien @ TimOBrien
    Tim O’Brien Retweeted Donald Trump Jr.
    Suddenly remembering that string of pledges by your father to Penn/Wharton in the 1990s — totaling at least $1.5 million — that coincided with the 1996 and 2000 enrollment there of you and Ivanka respectively:

    also, “pledges”…? Were they ever paid up? with whose money? McMahon money from the foundation?

  6. 6
    Andrew says:

    No.63 Red, is the shade of red on cover of Mein Kampf (Random AF!)

  7. 7
    GxB says:

    @Jim, Foolish Literalist: Maximum allowable IQ.

    Actually, I heard it stands for the 63 (places pinky to corner of mouth in horribly dated trope fashion) MILLION imbeciles that voted for the dotard.

  8. 8
    Darrin Ziliak (formerly glocksman) says:

    It’s a warning for amateur coders to either leave public app development to professionals or at least have professionals check your work if privacy is a concern before you release it.

  9. 9
    Renie says:

    @Jim, Foolish Literalist: And don’t forget the $2.5 million Charles Kushner donated to Harvard and then they accepted his mediocre son, Jared. That’s a crime IMO.

  10. 10
  11. 11
    B.B.A. says:

    @Renie: Real talk: we should shut down all the Ivies and use their endowments to pay slavery reparations.

    Signed, BBA, Brown class of ’05

  12. 12
    Syd the school envelope guy says:

    Omg…you are the nerd Tom Brady

  13. 13
    dmsilev says:

    I was also extremely amused that, when presented with evidence of his gross incompetence (“plaintext password! Twice!”), Captain ConservaCoder responded by screeching about evil hackers and threatened to unleash the FBI.

  14. 14
    Mary G says:

    I read part of an article on this yesterday and he was super-insistent that the name 63red was just random. So insistent that I’m sure he was lying.

  15. 15
    Mike J says:

    @Darrin Ziliak (formerly glocksman): Most decent frameworks wouldn’t allow any of this stuff. Almost always better to use something that has been tested instead of rolling your own unless you really know what you’re doing.

  16. 16
    delk says:

    Not quite 99 Luftballons?

  17. 17
    Darrin Ziliak (formerly glocksman) says:

    @dmsilev:

    Empty threat.
    Even if the FBI did take up the case (doubtful), ‘Elliot Alderson’ is a French citizen and the French, like many other countries, won’t extradite their own citizens.

    Who is Elliot Alderson?

  18. 18
    HalfAssedHomesteader says:

    When you feel the need to live your life “from a conservative perspective” that’s a pretty big tell you’ve left reality behind.

  19. 19
    dexwood says:

    @Mary G:
    Fascist dumb asses denying and deflecting. Trying to shift the focus. Always lying.

  20. 20
    Chief Oshkosh says:

    @Patricia Kayden: If only. I had access at one time. The most distressing and depressing aspect was what whiny little bitches most of them were/are. Worse than pre-teens at a bitchfest.

    I guess like what I’m doing right now – but you know, whatevs…

  21. 21
    MomSense says:

    Mega MAGAts

  22. 22
    Jim, Foolish Literalist says:

    @Jim, Foolish Literalist: short thread about how trumps get into college. The Beast’s first donation to Penn came right around the time they needed to find a school for Fredo

    Tim O’Brien @ TimOBrien
    Also recalling great reporting from Trump biographer Gwenda Blair, that President Trump was only admitted to Wharton — after transferring from Fordham — as a special favor from an admissions officer who was an acquaintance of Trump’s brother, Freddy:

  23. 23
    Jeffro says:

    isn’t 63 what you get when you square the “14 words” or “88 words” or “the 23 tenets of Koch-ism” or whatever the hell weird thing these psychos think is kewl? I don’t know.

  24. 24
    B.B.A. says:

    @Jeffro: Let’s ban all numbers, just to be safe.

  25. 25
    Baud says:

    @B.B.A.:

    Let’s pie pi!

  26. 26
    Jim, Foolish Literalist says:

    @Baud: on Thursday

  27. 27

    @Baud: It’s irrational, I think it’s only fair.

  28. 28
    Jay says:

    @HalfAssedHomesteader:

    Because the conservative bubble does not conform to reality, the bubble needs be constantly expanded.

    When the VR technology gets better and more portable I am sure that someone will market a version for the real snowflakes so that they can wander about in public 24/7 in a virtual world that conforms to their insanity.

    Bus meets MAGAt in 3,2,1 because welfare wagons don’t exist in their VR version.

  29. 29
    lgerard says:

    I’m wondering what “63red” stands for.

    I’ll look this up in the Conservapedia as soon as i clear off all the layers of dust on it.

  30. 30
    Jay says:

    @B.B.A.:

    Numbers are Islamic doncha know.

  31. 31
    Omnes Omnibus says:

    @Patricia Kayden:

    That would be good. Then we could hear all of their racist chatter.

    How would that be good?

  32. 32
    karensky says:

    @B.B.A.: sweet

  33. 33
    Chetan Murthy says:

    Oh man. Am I the only one who’s disappointed? If they’d actually managed to not fuck this up, to actually create the community and the rating system they wished, it’d be a *boon* for us libs. A gift from The Goddess, or the FSM by his noodly appendage, or whatever. We’d have known which restos to avoid *like* *the* *plague*.

    Ah, well. I’ll have to hope for a next time.

  34. 34
    Redshift says:

    @Darrin Ziliak (formerly glocksman):

    It’s a warning for amateur coders to either leave public app development to professionals or at least have professionals check your work if privacy is a concern before you release it.

    And if your software lets people create accounts and log in and you don’t think privacy is a concern, you are probably a Dunning-Kreuger poster child.

  35. 35
    MomSense says:

    @lgerard:

    It’s basically Yelp for Wusses -Welp.

  36. 36
    NotMax says:

    Hmmm.

    63 is the year JFK was assassinated.

    63 on a calculator display, held upside-down, is E9, the highest enlisted pay grade in the U.S. military.

    Or maybe the bozo never quite mastered the concept of 69.

  37. 37
    justawriter says:

    63red sounds like a Lee Harvey Oswald reference to me

  38. 38
    Another Scott says:

    @Jim, Foolish Literalist: I did a little poking around (but not at the site itself).

    “63red” may refer to the nearly 63M that voted for Donnie, and the red color that is used to represent GOP areas in maps.

    These folks always want to claim that they’re more popular than they actually are, so that sorta fits, also too.

    Just a guess though.

    [eta:] I see that GxB got there first in #7.

    Cheers,
    Scott.

  39. 39

    @Mike J: do they have such things for native app development though? I’ve neither run across it nor ever looked very hard.

    ETA though I guess all the (non-password-in-source-code) problems are on the server side.

  40. 40
    The Midnight Lurker says:

    What the hell do they need an app for?

    Use ‘the Google’ to find the nearest Chick-fil-A, dipshits.

  41. 41
    Redshift says:

    Speaking of MAGA spaces, I was out in the DC exurbs waiting at a Panera during a specialty vet visit, and a guy walking past leaned over and said “make ‘merica great again” as he walked out the door.

    I had been focused on my laptop, so I kind of looked up blinking and then he was out the door. I realized it was because I have a “Love Trumps Hate” sticker on my laptop. It wasn’t hostile, more like the tone someone might take it they saw a jersey for a rival sports team. But it was still weird.

  42. 42
    Ruff the Dog says:

    Just playing with sounds-maybe it’s pronounced “six thread”, a lame play on 4chan.

  43. 43
    NotMax says:

    Cute headline, although 1moran would have upped the mocking value.

  44. 44
    Jay says:

    @Omnes Omnibus:

    It would change some peoples minds on “LawnOrder” and the Blues.

  45. 45
    RSA says:

    I’m wondering what “63red” stands for.

    I honestly thought it was an illiterate misspelling of 63rd. Under the assumption that 63 has some mystical meaning to right-wingers.

  46. 46

    I don’t think we need to do too much numerology since the 63 million ish trump voters thing works.

  47. 47
    Omnes Omnibus says:

    @Jay:

    and the Blues.

    Sorry, I am a Blackhawks fan.

  48. 48
    🇺🇸🌎 Goku (aka Amerikan Baka) 🗳🌷 says:

    @Sebastian:
    How does that even work? Does PoliceOne require verification that the person is in law enforcement?

  49. 49
    Jim, Foolish Literalist says:

    @Another Scott: “63red” may refer to the nearly 63M that voted for Donnie, and the red color that is used to represent GOP areas in maps.

    makes sense

  50. 50
    NotMax says:

    @Major Major Major Major

    What about the additional 100 million who were present at the inaugural? //

  51. 51
    🇺🇸🌎 Goku (aka Amerikan Baka) 🗳🌷 says:

    @Major Major Major Major:
    That’s probably sadly it. 63 million was still less than 66 of course, but they’ll never acknowledge that.

    “So you just want the coastal elites to make all the decisions in this country?”

    As opposed to a rural minority dictating policy to the rest of the country? How is that any more fair? And what about the GooPers in blue states that get ignored because of the EC? Or the Dems in red states for that matter?

  52. 52
    Jay says:

    @The Midnight Lurker:

    They are looking for more safe spaces to let their freak flags fly aside from Chic a Fil and Hobby Lobby.

    They want to also economically boycott progressive business, the lazy way, because none of their boycotts or pout fests or Kureig shootings worked out and Major Brands like Nike and Gilette have made it clear that they don’t want them as customers.

    63red is also trying to build a MAGat App Brand with news and other conservative “tools”.

    Of course, their apps and tools are little more than malware and a hackers wet dream.

  53. 53
    🇺🇸🌎 Goku (aka Amerikan Baka) 🗳🌷 says:

    @Redshift:

    I had been focused on my laptop, so I kind of looked up blinking and then he was out the door. I realized it was because I have a “Love Trumps Hate” sticker on my laptop. It wasn’t hostile, more like the tone someone might take it they saw a jersey for a rival sports team. But it was still weird.

    I had a guy do something similar to me in line at work. I couldn’t help but give a slight frown when I saw his stupid red hat. Started spouting off about Hillary, trying to taunt me. I didn’t take the bait.

  54. 54
  55. 55
    M31 says:

    63 is 88 – 14 if you’re stupid

  56. 56
    B.B.A. says:

    @🇺🇸🌎 Goku (aka Amerikan Baka) 🗳🌷: One acre, one vote, like that bunch of slave-rapists and crypto-monarchists we deify as our Founding Fathers intended.

  57. 57
    trollhattan says:

    Welp, UK wanders further down the Trumpistan pathway.

    Theresa May’s EU withdrawal deal has been rejected by MPs by an overwhelming majority for a second time, with just 17 days to go to Brexit.

    MPs voted down the prime minister’s deal by 149 – a smaller margin than when they rejected it in January.

    Mrs May said MPs will now get a vote on whether the UK should leave the EU without a deal and, if that fails, on whether Brexit should be delayed. She said Tory MPs will get a free vote on a no-deal Brexit.

    Vlad’s certainly getting his money’s worth

  58. 58
    NotMax says:

    @trollhattan

    Will future historians refer to May’s tenure as the Dicktorian Era?

  59. 59
    Jay says:

    @trollhattan:

    And the EU basically no more Brexit Negotiations, leaving
    – May’s NotReallyaDeal
    – Hard Brexit
    – ditch the whole mess,

    Or,
    – kick the exact same mess down the road to maybe July
    – #PeoplesVote

  60. 60
    Jay says:

    @NotMax:

    Dunning-Kruger Decade.

  61. 61
    Steve in the ATL says:

    @Omnes Omnibus: hell yes!

  62. 62
    B.B.A. says:

    The two most important debates in politics right now: — Should House Democrats investigate Trump and then not impeach him, or impeach and then not convict? — Which candidate’s agenda will fail in the Senate in 2021?
    — Matthew Yglesias (@mattyglesias) March 13, 2019

  63. 63
    Jim, Foolish Literalist says:

    @B.B.A.: related

    Jon Favreau
    A good read on the Democratic path to flipping the Senate in 2020, which is the only way a Democratic president will be able to get any legislation passed (even without the filibuster):

    One path: hold AL, flip AZ, CO, and ME
    Or: flip AZ, CO, ME, and either GA or NC
    Or, win one of the longshots: TX, IA, KS, KY
    This won’t be easy

  64. 64
  65. 65
    Omnes Omnibus says:

    @M31: I have to say I find your ‘nym rather suspicious. Multiply it by 2 then add 1 and you get 63. Explain that, bub.

  66. 66
    Amir Khalid says:

    @🇺🇸🌎 Goku (aka Amerikan Baka) 🗳🌷:
    Maybe they require a valid badge number to sign up.

  67. 67
    Jay says:

    “I’m struck, as the British parliament moves towards the endgame on Brexit, with the number of times Australia, Canada, New Zealand and India have been advanced by the Brexiteers in the public debate as magical alternatives to Britain’s current trade and investment relationship with the European Union. This is the nuttiest of the many nutty arguments that have emerged from the Land of Hope and Glory set now masquerading as the authentic standard-bearers of British patriotism. It’s utter bollocks.”

    https://www.theguardian.com/commentisfree/2019/mar/11/commonwealth-save-brexit-britain-utter-delusion-kevin-rudd

    “If Britain proceeds with giving effect to what future historians will legitimately describe as the longest suicide note in history by leaving the union, the cold, hard reality is that the mathematics simply don’t stack up in terms of credible economic alternatives to Europe. Much as any Australian, Canadian and New Zealand governments of whichever persuasion would do whatever they could to frame new free-trade agreements with the UK, the bottom line is that 65 million of us do not come within a bull’s roar of Britain’s adjacent market of 450 million Europeans.”

  68. 68
    KithKanan says:

    @🇺🇸🌎 Goku (aka Amerikan Baka) 🗳🌷:
    @Amir Khalid:

    We confirm the status of all officers registering for PoliceOne by calling that officer’s department directly.

    According to their registration page, anyway.

  69. 69
    Amir Khalid says:

    @NotMax:
    Maybe they’ll refer to it as that time when 10 Downing Street was unoccupied.

  70. 70

    @Omnes Omnibus: M31 is the Andromeda Galaxy, show some respect!

  71. 71
    NotMax says:

    @Amir Khalid

    “Pieces in our time.”

    :)

  72. 72
    Omnes Omnibus says:

    @Amir Khalid: Badges? We don’t need no stinkin’ badges…

    @🐾BillinGlendaleCA: A likely story.

  73. 73
    Alternative Fax, a hip hop artist from Idaho says:

    @🐾BillinGlendaleCA: He probably saw an image at hubblesite.org and was frightened because it could be called mayonnaise colored, because in some of those it almost looks like it has a similar hue.

  74. 74

    @Darrin Ziliak (formerly glocksman):

    if privacy is a concern

    I have located the error in your arithmetic. HTH. :p

  75. 75
    Steeplejack says:

    @Darrin Ziliak (formerly glocksman):

    Interesting article. Thanks.

  76. 76
    Steve in the ATL says:

    @Omnes Omnibus: did you see my Guadalcanal Diary post last night?

  77. 77
    Omnes Omnibus says:

    @Alternative Fax, a hip hop artist from Idaho: Now I loathe outer space? I learn so much about myself on this blog.

  78. 78
    NotMax says:

    @Omnes Omnibus

    Doesn’t take a seer to suss out your feelings towards Caldwell 39.

    ;)

  79. 79
    Omnes Omnibus says:

    @Steve in the ATL: I did not. My brain was in a pitched battle with my body over how to handle DST.

  80. 80
    joel hanes says:

    all his base are pwned

  81. 81
    Xecky Gilchrist says:

    I figured the real purpose of this app was to finger and harass businesses that didn’t toe their line.

  82. 82
    Keith P. says:

    Even sample web apps typically have better security. That stuff is laughable

  83. 83
    NotMax says:

    Incentive for me to spend more time at the local branch of my bank, which instituted a ‘no hats, no sunglasses’ policy after a robbery there quite some years ago.

  84. 84

    @Omnes Omnibus: You should really be afraid of sgrA*. It’s a monster in our very own galaxy.

  85. 85
    Omnes Omnibus says:

    @🐾BillinGlendaleCA: You aren’t the boss of me.

  86. 86
    Spider-Dan says:

    @Jay: I don’t think the EU will allow any delay past May 22. May 23 is the EU Parliament election, and they don’t want a lame-duck UK voting in pro-Brexit reps.

    Provided that hard Brexit fails tomorrow, an extension to May 15 should be enough time for UK to hold a new referendum that pits May’s Brexit vs. Remain.

  87. 87

    @Omnes Omnibus: SgrA* doesn’t care, it’s a super-massive black hole. If you get too close to it, gravity is the boss of you. It’s the law.

  88. 88
    NotMax says:

    @BillinGlendaleCA

    Not according to

    (wait for it)

    the anti-blaxxers.

    ;)

  89. 89
    Keith P. says:

    @BillinGlendaleCA: Do you know what’s going on with the Event Horizon Telescope? This time last year they were taking the images of it, so I figured they’d have had the thing decoded by now. The last I heard, they had a big blast of x-rays where they expected to see a shadow (I would think it somewhat odd for its jet to be pointing at us)

  90. 90
    Jay says:

    @Spider-Dan:

    What May wants, and says she can get, are different from reality.

    I’ll be surprised if the EU allows May to kick the can down the road.

  91. 91

    @Andrew: FWIW, site I found discussing first edition identification of editions of Mein Kamp states:

    The first volume of Mein Kampf was published in 1925, and it sold 9,473 copies in its first year. In 1927, the second volume on national socialism was published. The first edition of the first volume is marked by a red cover subtitled “A Reckoning”. The book had relatively mediocre success until 1933 when Hitler became Chancellor, upon which sales of the book skyrocketed.

    https://www.biblio.com/mein-kampf-by-hitler-adolf/work/82968

    Early edition seem to be available for fans, like the current GOP, at quite reasonable prices.

  92. 92
    Mardam says:

    “63Red” is actually the codename for the wingnut plan to turn every state red in the next election.

  93. 93
    Original Lee says:

    @B.B.A.: Nah, we should just pick a couple of them to use as playpens for the legacies who don’t want to be there and let the serious students occupy the slots in the others. I vote that Dartmouth and Brown be two of the serious student schools.

    (Sez the person who said No to Yale and is glad she did.)

  94. 94
    jimmiraybob says:

    As any trump would tell you, the point of any con is to get a big enough haul fast enough to fund a lavish lifestyle and fund the next con. Duh. Fail. Sad.

Comments are closed.