I acted on the EXIF shito. Here's a summary:


* Uploader preserves EXIF orientation tag, strips everything else.

* Uploader was updated to stop polluting its directory with backup copies of files being stripped. All the existing useless backup files were deleted.

* Uploaded JPEG avatars and minipics get their EXIF metadata stripped, just like with the uploader.

* JPEG avatar/minipic resizing will create a JPEG rather than a PNG. In this case, the orientation tag from the original file will be copied over to the resized version.

* Existing JPEG avatars and minipics were stripped manually.


As usual, let me know if something went wrong.

____________________
NSMBHD - Kafuka - Jul

communism

Remember this?

The EXIF stripping only applies to the uploader. So any JPEG uploaded as an avatar will retain EXIF metadata (ie, if it was taken using a smartphone, your GPS coordinates).

I may change this, but I need to figure out a way to preserve the orientation data, which is part of EXIF.


EDIT- this has been changed, see next annc

____________________
NSMBHD - Kafuka - Jul

communism

looks like I forgot for a while

that our board is turning 6


happy birthday Kuribo64


also, I guess that means we're putting up teh Mosts soon-ish

____________________
NSMBHD - Kafuka - Jul

communism

So as you might already know, in EU we now have these new rules regarding handling and protection of personal data. As our server is located in Amsterdam, this applies to us too.

Therefore:

* The board tracks your location and momentum to provide better service. You can opt out of location tracking, but momentum tracking is mandatory.

* It is legal to smoke weed in the board, as long as that is done in compliance with our rules.

* MD5 hashes of your passwords are sold to Sega (they pay better than Google). Don't worry, MD5 hashes are totally safe!

* The pixels forming the banner are transmitted over a TLS 4.2 connection using 8192-bit RSA and estradiol hemihydrate.

* We have a privacy-threatening exploit where posts submitted to the board can be read by an attacker using a regular web browser. We're working on it.

* Nintendo may request permission to alter usernames and post headers at any time. They may not alter signatures, though.

* You can technically access the Shop storage room at any time as the shop guy never locks it. Not sure why you would want to enter that ungodly mess, but you can.

* We keep banned users in the basement. Given how thick the walls and ceiling are, their privacy there is fine.

* Most of the data stored on the server are Fort Boyard recordings. There are also some weird old code files that seem to make the board work, somehow.

* There is a full Super Mario Galaxy ROM in the attic.

* The server tracks which pages you visit. We offer to sell the logs for $17/KB, but nobody seems to be interested.

* The server deletes your IP address.


That's about it, as far as I can remember.

Happy Kuriboing! Knowledge is power they say.

____________________
NSMBHD - Kafuka - Jul

communism

Better late than never, they say.


Also, mini outage. DigitalOcean updated their plans, so we get a betterer server for the same price.

____________________
NSMBHD - Kafuka - Jul

communism

DigitalOcean was moving shit. Sorry for forgetting to warn you folks.

____________________
NSMBHD - Kafuka - Jul

communism

As the IRC network that hosted our IRC channel is unmaintained and crumbling, we are moving the channel to a network that is in a better state.


irc.badnik.net / irc.rustedlogic.net
#kuribo64


Thank you.

____________________
NSMBHD - Kafuka - Jul

communism

So Photobucket is going down the shitter, but just pulling the plug isn't their thing. Instead, they're attemting an extremely desperate measure where you are required to pay an absurd sum ($400/y) to be able to link your images externally.

So, you are encouraged to stop using it. I updated the postfilter so we don't get their "upgrade to premium" shit all over the place, and to deter people from using it.


Possible alternatives:

* imgur, as long as it doesn't suck (enjoy while it lasts)

* your own hosting space (you can get even a VPS at cheaper rates than Photobucket's premium crap)

* our uploader, as long as you stay reasonable


Thank you.

____________________
NSMBHD - Kafuka - Jul

communism

It seems you're reporting my IP to StopForumSpam along with bogus spam claims.


You aren't being funny. Stop that or it won't be pretty. False claims can get you in severe legal trouble, if you didn't know.

____________________
NSMBHD - Kafuka - Jul

communism

So a while ago, SmithJrBlaquaLuigi tried to bargain for an unban. As you guess, he went nowhere, but his attempt is still worth mentioning.

The gist of it was "I know your address, if you don't unban me I will tell you and you will be shocked to death". In itself, it was pretty ridiculous, as pretty much anything he says, but he actually had something. The attack was incredibly clever given his intelligence (or lack thereof).

He took one of my pictures, grabbed the EXIF metadata, and from there, got a guessed address that he thought was mine. The address was relatively close, but not even in the same street. My phone is always in imprecise power-saving GPS mode, so the coordinates aren't precise enough to find the address.


Regardless, this is a very important point, especially within today's increasing culture of making everything public and transmitting all sorts of data behind users' backs.

When you take a picture with your phone, a bunch of data are embedded in it (the EXIF metadata), among which are GPS coordinates.

It's a good idea to strip EXIF metadata from JPEGs as much as possible. It's also a good idea to disable the GPS on your phone entirely, if you don't care about things like weather forecasts.


So, the uploader update.

When you upload a JPEG, the uploader now automatically strips EXIF metadata. Similarly, all the existing JPEG files have been stripped.

Let me know if this goes wrong somehow.

____________________
NSMBHD - Kafuka - Jul

communism

We're back up!


If you have seen Avengers 2, you know that they put in place a system to move a whole town... same shit here, more or less.

The server migration consisted into moving blargcity out of Trumpistan. If you didn't know, our server was in New York. It's now in Amsterdam. As an added bonus, smoking weed in Kuribo64 is legal now

It only took so long because I tried enabling IPv6, but it turned out that the DO-provided network config was incorrect and was causing the network interface to function in IPv6-only mode... for now IPv6 is disabled. I'll look into it later.


Sorry for the big downtime.

____________________
NSMBHD - Kafuka - Jul

communism

Maintenance will be taking place. I hope it won't take too long.

____________________
NSMBHD - Kafuka - Jul

communism

So 2016 is nearly over. 2017 is coming, and we're hoping it'll be a fun year!


Well, after four years of doing this shit, I still suck at writing a good discourse. Heh.

____________________
NSMBHD - Kafuka - Jul

communism

NSMB2 hacking is the most popular part of 3DS-related hacking here. I moved it to its own forum.

Further forum reorganization may follow. Stay tuned.

____________________
NSMBHD - Kafuka - Jul

communism

After ages of being lazy, StapleButter has finally updated the server. So, what do we get?

* the latest shiny distro, Ubuntu 16.04
* PHP7
* a new (and more picky) MySQL version
* security updates


Let me know if anything shits itself. There were a number of issues caused by the new system being more picky, like logins not working, but this is fixed now. You will need to login again.


KNOWN ISSUES

* board chokes if the URL is too long (buying/selling items, deleting posts...) THERE IS STILL A LOT OF CODE TO FIX
* gfx/status.php is broken

____________________
NSMBHD - Kafuka - Jul

communism

Looks like we're seeing a new form of forum spam happen.


They try to look like legit users. If a new user posts suspicious links or has such links in their signature or profile, you know it's a spammer.

We've got two instances of that. The warcraft4 guy, which I'm unsure about, maybe a spammer, maybe an idiot, maybe a troll. And the more obvious dgfjgh.


We need a captcha to keep them out!

Spammers are humans. Captchas are worthless.

We already have very good protection, but it's not perfect. More protection will be added if events warrant.


Also, please remember this:

Do not reply to spam posts, lamer attacks, and all.

Seriously, are we becoming RVLution? ugh.

____________________
NSMBHD - Kafuka - Jul

communism

If you ever find a 'CoinKiller organization' on Github, it's not from us. It's a random moron trying to be important. Don't interact with it.


Thank you.

____________________
NSMBHD - Kafuka - Jul

communism

Just a heads-up.

Posted by DigitalOcean tech support

[...]

We have scheduled to migrate your Droplet during a 6 hour maintenance period that begins on 2016-09-15 3:00:00 UTC (2016-09-14 23:00:00 Eastern)

The Droplet(s) affected during this maintenance period are listed below in this email.

Throughout this maintenance period, all affected Droplets will be migrated to new hypervisors. We spread out the migrations to ensure the least amount of downtime. Your Droplet will be powered off when it is queued for migration. You can expect about 1 minute of downtime per GB of your Droplet's disk size. After the migration is complete, the Droplet will be powered on.

We expect minimal downtime during this process[...].

I might go down on IRC too, considering my BNC runs on the server.

____________________
NSMBHD - Kafuka - Jul

communism

Don't hesitate to ask the staff about it. We will reconsider it, especially if you were "banned for a while".


We aren't going to be as active as before, so my apologies if some things take too long to get done (or get forgotten about, heh).


Just keep in mind that bans aren't permanent. I don't like the stereotypical "strictly-timed temporary ban / permanent ban" dichotomy.

____________________
NSMBHD - Kafuka - Jul

communism

As he said in this thread, MrRean is going to put all his focus on real life.

We wish him good luck in his endeavors, and to have lots of fun.


We're losing a good admin there, but Kuribo64 will keep going.


Goodbye MrRean! Have fun and lots of waffles.

____________________
NSMBHD - Kafuka - Jul

communism