RE: Deleted by moisesmcardona

View this thread on: hive.blog | peakd.com | ecency.com

Viewing a response to: @anthonyadavisii/re-moisesmcardona-steemapi-php-python-open-source-20180214t165738471z

technology · @moisesmcardona · Feb 14 '18

$0.05

I did took a look at @jamzed security concern. However, I was unable to reproduce it.

👍 anthonyadavisii

`author`	moisesmcardona
`permlink`	re-anthonyadavisii-re-moisesmcardona-steemapi-php-python-open-source-20180214t200000494z
`category`	technology
`json_metadata`	{"tags":["technology"],"users":["jamzed"],"app":"steemit/0.1"}
`created`	2018-02-14 20:00:03
`last_update`	2018-02-14 20:00:03
`depth`	2
`children`	5
`last_payout`	2018-02-21 20:00:03
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.044 HBD
`curator_payout_value`	0.004 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	85
`author_reputation`	30,544,308,668,193
`root_title`	Deleted
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	37,560,777
`net_rshares`	7,278,859,748
`author_curate_reward`	""

properties (23)vote details (1)

voter	weight	wgt%	rshares	pct	time
anthonyadavisii	0 B		7,278,859,748	33%

@anthonyadavisii · Feb 14 '18

$0.04

Thanks. Will do some pen testing when I get it set up and let you know how it goes.

👍 moisesmcardona

`author`	anthonyadavisii
`permlink`	re-moisesmcardona-re-anthonyadavisii-re-moisesmcardona-steemapi-php-python-open-source-20180214t201121607z
`category`	technology
`json_metadata`	{"tags":["technology"],"app":"steemit/0.1"}
`created`	2018-02-14 20:11:27
`last_update`	2018-02-14 20:11:27
`depth`	3
`children`	0
`last_payout`	2018-02-21 20:11:27
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.028 HBD
`curator_payout_value`	0.008 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	83
`author_reputation`	212,565,147,344,592
`root_title`	Deleted
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	37,562,793
`net_rshares`	5,357,376,106
`author_curate_reward`	""

properties (23)vote details (1)

voter	weight	wgt%	rshares	pct	time
moisesmcardona	0 B		5,357,376,106	7%

@jamzed · Feb 14 '18

@moisesmcardona seriously? ;-)

`https://api.steem.place/getFollowersCount/?a=abc;uname%20-a`

![](https://steemitimages.com/DQmdZ39B1F12iQFNoAH9dWM4vTMicobL33ZCUT7DcEafrGy/image.png)

properties (22)

`author`	jamzed
`permlink`	re-moisesmcardona-re-anthonyadavisii-re-moisesmcardona-steemapi-php-python-open-source-20180214t200917543z
`category`	technology
`json_metadata`	{"tags":["technology"],"users":["moisesmcardona"],"image":["https://steemitimages.com/DQmdZ39B1F12iQFNoAH9dWM4vTMicobL33ZCUT7DcEafrGy/image.png"],"app":"steemit/0.1"}
`created`	2018-02-14 20:09:18
`last_update`	2018-02-14 20:09:18
`depth`	3
`children`	3
`last_payout`	2018-02-21 20:09:18
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	183
`author_reputation`	2,159,179,776,915
`root_title`	Deleted
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	37,562,443
`net_rshares`	0

@moisesmcardona · Feb 14 '18

sure, but doing root stuff doesn't work

properties (22)

`author`	moisesmcardona
`permlink`	re-jamzed-re-moisesmcardona-re-anthonyadavisii-re-moisesmcardona-steemapi-php-python-open-source-20180214t204634303z
`category`	technology
`json_metadata`	{"tags":["technology"],"app":"steemit/0.1"}
`created`	2018-02-14 20:46:36
`last_update`	2018-02-14 20:46:36
`depth`	4
`children`	2
`last_payout`	2018-02-21 20:46:36
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	39
`author_reputation`	30,544,308,668,193
`root_title`	Deleted
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	37,569,007
`net_rshares`	0

@jamzed · Feb 14 '18 (edited)

You never know how your software will be running, it could be running even as root user, but it doesn’t matter...  it has a serious security bug and allows to remotely execute commands on a server...

properties (22)

`author`	jamzed
`permlink`	re-moisesmcardona-re-jamzed-re-moisesmcardona-re-anthonyadavisii-re-moisesmcardona-steemapi-php-python-open-source-20180214t205313633z
`category`	technology
`json_metadata`	{"tags":["technology"],"app":"steemit/0.1"}
`created`	2018-02-14 20:53:15
`last_update`	2018-02-14 20:53:36
`depth`	5
`children`	1
`last_payout`	2018-02-21 20:53:15
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	199
`author_reputation`	2,159,179,776,915
`root_title`	Deleted
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	37,570,190
`net_rshares`	0

1 reply