The conservative site “63red” created a safe space app that allows MAGAts to find places where they can wear their red caps without being called names. You know, what they make fun of liberals for doing. Anyway, predictably, the guy who created it (Wallace) fucked it up from bean to cup:
- Wallace had left his username, email, and a plaintext password in the code—twice.
- There is no authentication for any of the application programming interface [API] calls, so someone could spoof any user—essentially giving them administrative access to the API.
- […]By using the “Get user by ID” API call, someone could retrieve the user name, email, ban status, and other details on each user account.
- Passwords were not in this data, but the entire user database could be retrieved by iterating through all the possible first letters or digits of an account ID.
- Any user could be blocked using an HTTP Post to the “block” API.
If none of that makes sense, the simple summary is that the app is a security catastrophe full of baby-level errors. Of course, Wallace’s response to the security researcher who found all of these issues was to threaten him, and to lie and say they were fixed when they weren’t.
I’m wondering what “63red” stands for. Is it the Pantone color code for the shade used on the cover of the original edition of Mein Kampf? Maybe someone who speaks more fluent wingnut can help out in the comments.
Sebastian
I am really waiting for someone to get access to PoliceOne or whatever that cops only discussion board is called
Jim, Foolish Literalist
Yeah, I read a Daily Beast story about this, and never saw that explained
I am a little jealous. I wouldn’t know how to make an app but I’m sure if I gave it some time I could figure out a scam to run on the MAGAts
Patricia Kayden
@Sebastian: That would be good. Then we could hear all of their racist chatter.
Patricia Kayden
@Jim, Foolish Literalist: Like the Black woman who claimed that she was being harassed by other Blacks because she was a Trump supporter and got a lot of money through GoFundMe. ‘‘Twas a scam.
Jim, Foolish Literalist
on topic because morons– Fredo is trying turn the college scam thing into an anti-hollywood outrage, a week after it was revealed that his father ordered his lawyers to threaten his alma maters about releasing his transcripts. And now
also, “pledges”…? Were they ever paid up? with whose money? McMahon money from the foundation?
Andrew
No.63 Red, is the shade of red on cover of Mein Kampf (Random AF!)
GxB
@Jim, Foolish Literalist: Maximum allowable IQ.
Actually, I heard it stands for the 63 (places pinky to corner of mouth in horribly dated trope fashion) MILLION imbeciles that voted for the dotard.
Darrin Ziliak (formerly glocksman)
It’s a warning for amateur coders to either leave public app development to professionals or at least have professionals check your work if privacy is a concern before you release it.
Renie
@Jim, Foolish Literalist: And don’t forget the $2.5 million Charles Kushner donated to Harvard and then they accepted his mediocre son, Jared. That’s a crime IMO.
Major Major Major Major
Hoo boy, what a moron.
B.B.A.
@Renie: Real talk: we should shut down all the Ivies and use their endowments to pay slavery reparations.
Signed, BBA, Brown class of ’05
Syd the school envelope guy
Omg…you are the nerd Tom Brady
dmsilev
I was also extremely amused that, when presented with evidence of his gross incompetence (“plaintext password! Twice!”), Captain ConservaCoder responded by screeching about evil hackers and threatened to unleash the FBI.
Mary G
I read part of an article on this yesterday and he was super-insistent that the name 63red was just random. So insistent that I’m sure he was lying.
Mike J
@Darrin Ziliak (formerly glocksman): Most decent frameworks wouldn’t allow any of this stuff. Almost always better to use something that has been tested instead of rolling your own unless you really know what you’re doing.
delk
Not quite 99 Luftballons?
Darrin Ziliak (formerly glocksman)
@dmsilev:
Empty threat.
Even if the FBI did take up the case (doubtful), ‘Elliot Alderson’ is a French citizen and the French, like many other countries, won’t extradite their own citizens.
Who is Elliot Alderson?
HalfAssedHomesteader
When you feel the need to live your life “from a conservative perspective” that’s a pretty big tell you’ve left reality behind.
dexwood
@Mary G:
Fascist dumb asses denying and deflecting. Trying to shift the focus. Always lying.
Chief Oshkosh
@Patricia Kayden: If only. I had access at one time. The most distressing and depressing aspect was what whiny little bitches most of them were/are. Worse than pre-teens at a bitchfest.
I guess like what I’m doing right now – but you know, whatevs…
MomSense
Mega MAGAts
Jim, Foolish Literalist
@Jim, Foolish Literalist: short thread about how trumps get into college. The Beast’s first donation to Penn came right around the time they needed to find a school for Fredo
Jeffro
isn’t 63 what you get when you square the “14 words” or “88 words” or “the 23 tenets of Koch-ism” or whatever the hell weird thing these psychos think is kewl? I don’t know.
B.B.A.
@Jeffro: Let’s ban all numbers, just to be safe.
Baud
@B.B.A.:
Let’s pie pi!
Jim, Foolish Literalist
@Baud: on Thursday
?BillinGlendaleCA
@Baud: It’s irrational, I think it’s only fair.
Jay
@HalfAssedHomesteader:
Because the conservative bubble does not conform to reality, the bubble needs be constantly expanded.
When the VR technology gets better and more portable I am sure that someone will market a version for the real snowflakes so that they can wander about in public 24/7 in a virtual world that conforms to their insanity.
Bus meets MAGAt in 3,2,1 because welfare wagons don’t exist in their VR version.
lgerard
I’ll look this up in the Conservapedia as soon as i clear off all the layers of dust on it.
Jay
@B.B.A.:
Numbers are Islamic doncha know.
Omnes Omnibus
@Patricia Kayden:
How would that be good?
karensky
@B.B.A.: sweet
Chetan Murthy
Oh man. Am I the only one who’s disappointed? If they’d actually managed to not fuck this up, to actually create the community and the rating system they wished, it’d be a *boon* for us libs. A gift from The Goddess, or the FSM by his noodly appendage, or whatever. We’d have known which restos to avoid *like* *the* *plague*.
Ah, well. I’ll have to hope for a next time.
Redshift
@Darrin Ziliak (formerly glocksman):
And if your software lets people create accounts and log in and you don’t think privacy is a concern, you are probably a Dunning-Kreuger poster child.
MomSense
@lgerard:
It’s basically Yelp for Wusses -Welp.
NotMax
Hmmm.
63 is the year JFK was assassinated.
63 on a calculator display, held upside-down, is E9, the highest enlisted pay grade in the U.S. military.
Or maybe the bozo never quite mastered the concept of 69.
justawriter
63red sounds like a Lee Harvey Oswald reference to me
Another Scott
@Jim, Foolish Literalist: I did a little poking around (but not at the site itself).
“63red” may refer to the nearly 63M that voted for Donnie, and the red color that is used to represent GOP areas in maps.
These folks always want to claim that they’re more popular than they actually are, so that sorta fits, also too.
Just a guess though.
[eta:] I see that GxB got there first in #7.
Cheers,
Scott.
Major Major Major Major
@Mike J: do they have such things for native app development though? I’ve neither run across it nor ever looked very hard.
ETA though I guess all the (non-password-in-source-code) problems are on the server side.
The Midnight Lurker
What the hell do they need an app for?
Use ‘the Google’ to find the nearest Chick-fil-A, dipshits.
Redshift
Speaking of MAGA spaces, I was out in the DC exurbs waiting at a Panera during a specialty vet visit, and a guy walking past leaned over and said “make ‘merica great again” as he walked out the door.
I had been focused on my laptop, so I kind of looked up blinking and then he was out the door. I realized it was because I have a “Love Trumps Hate” sticker on my laptop. It wasn’t hostile, more like the tone someone might take it they saw a jersey for a rival sports team. But it was still weird.
Ruff the Dog
Just playing with sounds-maybe it’s pronounced “six thread”, a lame play on 4chan.
NotMax
Cute headline, although 1moran would have upped the mocking value.
Jay
@Omnes Omnibus:
It would change some peoples minds on “LawnOrder” and the Blues.
RSA
I honestly thought it was an illiterate misspelling of 63rd. Under the assumption that 63 has some mystical meaning to right-wingers.
Major Major Major Major
I don’t think we need to do too much numerology since the 63 million ish trump voters thing works.
Omnes Omnibus
@Jay:
Sorry, I am a Blackhawks fan.
??? Goku (aka Amerikan Baka) ??
@Sebastian:
How does that even work? Does PoliceOne require verification that the person is in law enforcement?
Jim, Foolish Literalist
makes sense
NotMax
@Major Major Major Major
What about the additional 100 million who were present at the inaugural? //
??? Goku (aka Amerikan Baka) ??
@Major Major Major Major:
That’s probably sadly it. 63 million was still less than 66 of course, but they’ll never acknowledge that.
“So you just want the coastal elites to make all the decisions in this country?”
As opposed to a rural minority dictating policy to the rest of the country? How is that any more fair? And what about the GooPers in blue states that get ignored because of the EC? Or the Dems in red states for that matter?
Jay
@The Midnight Lurker:
They are looking for more safe spaces to let their freak flags fly aside from Chic a Fil and Hobby Lobby.
They want to also economically boycott progressive business, the lazy way, because none of their boycotts or pout fests or Kureig shootings worked out and Major Brands like Nike and Gilette have made it clear that they don’t want them as customers.
63red is also trying to build a MAGat App Brand with news and other conservative “tools”.
Of course, their apps and tools are little more than malware and a hackers wet dream.
??? Goku (aka Amerikan Baka) ??
@Redshift:
I had a guy do something similar to me in line at work. I couldn’t help but give a slight frown when I saw his stupid red hat. Started spouting off about Hillary, trying to taunt me. I didn’t take the bait.
Major Major Major Major
@??? Goku (aka Amerikan Baka) ??: I am fine with a dictatorship by coastal elites tbh
M31
63 is 88 – 14 if you’re stupid
B.B.A.
@??? Goku (aka Amerikan Baka) ??: One acre, one vote, like that bunch of slave-rapists and crypto-monarchists we deify as our Founding Fathers intended.
trollhattan
Welp, UK wanders further down the Trumpistan pathway.
Vlad’s certainly getting his money’s worth
NotMax
@trollhattan
Will future historians refer to May’s tenure as the Dicktorian Era?
Jay
@trollhattan:
And the EU basically no more Brexit Negotiations, leaving
– May’s NotReallyaDeal
– Hard Brexit
– ditch the whole mess,
Or,
– kick the exact same mess down the road to maybe July
– #PeoplesVote
Jay
@NotMax:
Dunning-Kruger Decade.
Steve in the ATL
@Omnes Omnibus: hell yes!
B.B.A.
Jim, Foolish Literalist
@B.B.A.: related
Jay
To follow up on the Kangaroo post,
Ranier and the Whale,
https://www.google.ca/amp/s/www.thedodo.com/amphtml/in-the-wild/diver-spat-out-by-whale-south-africa
Omnes Omnibus
@M31: I have to say I find your ‘nym rather suspicious. Multiply it by 2 then add 1 and you get 63. Explain that, bub.
Amir Khalid
@??? Goku (aka Amerikan Baka) ??:
Maybe they require a valid badge number to sign up.
Jay
“I’m struck, as the British parliament moves towards the endgame on Brexit, with the number of times Australia, Canada, New Zealand and India have been advanced by the Brexiteers in the public debate as magical alternatives to Britain’s current trade and investment relationship with the European Union. This is the nuttiest of the many nutty arguments that have emerged from the Land of Hope and Glory set now masquerading as the authentic standard-bearers of British patriotism. It’s utter bollocks.”
https://www.theguardian.com/commentisfree/2019/mar/11/commonwealth-save-brexit-britain-utter-delusion-kevin-rudd
“If Britain proceeds with giving effect to what future historians will legitimately describe as the longest suicide note in history by leaving the union, the cold, hard reality is that the mathematics simply don’t stack up in terms of credible economic alternatives to Europe. Much as any Australian, Canadian and New Zealand governments of whichever persuasion would do whatever they could to frame new free-trade agreements with the UK, the bottom line is that 65 million of us do not come within a bull’s roar of Britain’s adjacent market of 450 million Europeans.”
KithKanan
@??? Goku (aka Amerikan Baka) ??:
@Amir Khalid:
According to their registration page, anyway.
Amir Khalid
@NotMax:
Maybe they’ll refer to it as that time when 10 Downing Street was unoccupied.
?BillinGlendaleCA
@Omnes Omnibus: M31 is the Andromeda Galaxy, show some respect!
NotMax
@Amir Khalid
“Pieces in our time.”
:)
Omnes Omnibus
@Amir Khalid: Badges? We don’t need no stinkin’ badges…
@?BillinGlendaleCA: A likely story.
Alternative Fax, a hip hop artist from Idaho
@?BillinGlendaleCA: He probably saw an image at hubblesite.org and was frightened because it could be called mayonnaise colored, because in some of those it almost looks like it has a similar hue.
(((CassandraLeo)))
@Darrin Ziliak (formerly glocksman):
I have located the error in your arithmetic. HTH. :p
Steeplejack
@Darrin Ziliak (formerly glocksman):
Interesting article. Thanks.
Steve in the ATL
@Omnes Omnibus: did you see my Guadalcanal Diary post last night?
Omnes Omnibus
@Alternative Fax, a hip hop artist from Idaho: Now I loathe outer space? I learn so much about myself on this blog.
NotMax
@Omnes Omnibus
Doesn’t take a seer to suss out your feelings towards Caldwell 39.
;)
Omnes Omnibus
@Steve in the ATL: I did not. My brain was in a pitched battle with my body over how to handle DST.
joel hanes
all his base are pwned
Xecky Gilchrist
I figured the real purpose of this app was to finger and harass businesses that didn’t toe their line.
Keith P.
Even sample web apps typically have better security. That stuff is laughable
NotMax
Incentive for me to spend more time at the local branch of my bank, which instituted a ‘no hats, no sunglasses’ policy after a robbery there quite some years ago.
?BillinGlendaleCA
@Omnes Omnibus: You should really be afraid of sgrA*. It’s a monster in our very own galaxy.
Omnes Omnibus
@?BillinGlendaleCA: You aren’t the boss of me.
Spider-Dan
@Jay: I don’t think the EU will allow any delay past May 22. May 23 is the EU Parliament election, and they don’t want a lame-duck UK voting in pro-Brexit reps.
Provided that hard Brexit fails tomorrow, an extension to May 15 should be enough time for UK to hold a new referendum that pits May’s Brexit vs. Remain.
?BillinGlendaleCA
@Omnes Omnibus: SgrA* doesn’t care, it’s a super-massive black hole. If you get too close to it, gravity is the boss of you. It’s the law.
NotMax
@BillinGlendaleCA
Not according to
(wait for it)
the anti-blaxxers.
;)
Keith P.
@BillinGlendaleCA: Do you know what’s going on with the Event Horizon Telescope? This time last year they were taking the images of it, so I figured they’d have had the thing decoded by now. The last I heard, they had a big blast of x-rays where they expected to see a shadow (I would think it somewhat odd for its jet to be pointing at us)
Jay
@Spider-Dan:
What May wants, and says she can get, are different from reality.
I’ll be surprised if the EU allows May to kick the can down the road.
HeartlandLiberal
@Andrew: FWIW, site I found discussing first edition identification of editions of Mein Kamp states:
The first volume of Mein Kampf was published in 1925, and it sold 9,473 copies in its first year. In 1927, the second volume on national socialism was published. The first edition of the first volume is marked by a red cover subtitled “A Reckoning”. The book had relatively mediocre success until 1933 when Hitler became Chancellor, upon which sales of the book skyrocketed.
https://www.biblio.com/mein-kampf-by-hitler-adolf/work/82968
Early edition seem to be available for fans, like the current GOP, at quite reasonable prices.
Mardam
“63Red” is actually the codename for the wingnut plan to turn every state red in the next election.
Original Lee
@B.B.A.: Nah, we should just pick a couple of them to use as playpens for the legacies who don’t want to be there and let the serious students occupy the slots in the others. I vote that Dartmouth and Brown be two of the serious student schools.
(Sez the person who said No to Yale and is glad she did.)
jimmiraybob
As any trump would tell you, the point of any con is to get a big enough haul fast enough to fund a lavish lifestyle and fund the next con. Duh. Fail. Sad.