Stripping
mv Binary Binary~
lipo -thin {arch} Binary~ -output Binary
Patching
31 C0 xor eax, eax 40 inc eax (i386) FF C0 inc eax (x86_64) C3 ret 90 nop 74xx je 75xx jne EBxx jmp
Resigning
codesign -s {signing key name} -f MacOS/Binary
Echofon
-[AppController checkLicense] → ret +[Registration validate] → ret
I should probably post more often. I just don't!
Signup failure: invalid timezone User agent: Mozilla/3.0 (x86 [en] Windows NT 5.1; Sun) IP: [omitted here - dusk] Name: jonnylasanta Email: johnnsantoro@gmail.com ICQ: 541976432 AIM: MSN: YIM: Skype: Website: Location: USA Occupation: student Interests: music, internet Custom title: Where to point to frippery goods Signature: hi my name is slim shaddy
So why so few reCAPTCHA failures? I've tested the registration flow myself and confirmed that the form does fail if you leave the CAPTCHA blank or enter it wrong, so the only possible conclusion is that reCAPTCHA is broken. Maybe not in the technical sense, as I've so far seen no evidence that it's being OCRed (in fact, if it were I'd expect to see more failures), but definitely in the practical sense! Chances are that there's a sweatshop of Chinese workers somewhere punching in random distorted words.
So what's the solution? I'm not sure. Solutions like the one I've come up with (identifying anomalies in bot-driven registrations) work in some cases, but they don't scale — the only reason this works at all is because most phpBB installations are easier targets than ours. If this solution was deployed on a wider scale, the bots would implement workarounds. A few do already, actually; it just looks like the ones that do are less widespread.
Fucking spammers.
Exhibit 1: "Supreme Court Allows Corporations To Run For Political Office" (The Onion)
Exhibit 2: "Corporation Says It Will Run for Congress" (New York Times)
Exhibit the First: Looks Real Good, Hurts Real Bad.
Exhibit the Second: Cruel Shoes.
Also, I have a job.
Scary stuff.
Also included are cliques.py and closeness.py. The former finds cliques containing a specified user (or set of users); the latter finds users who are popular among your friends using a PageRank-like algorithm.
Python is (obviously) required, as is the sqlite3 module, which is available with Python 2.5. Assuming you've got that all set up, you can go ahead and download ljsh.