I've been tinkering with Python all day today... it's pretty slick. Just for practice, I tried to cobble together a tripcode decoder that would let you have "real" words in your tripcode as !WAHa and Sling and others do, and it actually came out better than I thought it would be. I'm aware there's already a program that does this, but if memory serves me, it's Windows-only and in Japanese besides. My script is kind of dumb in the way it goes about things -- it basically just tears through random strings until it finds one that fits -- but I've tested it repeatedly and it seems to work. If you'd like to check it out, nab it here:
http://www.anre.org/crap/detripper.bz2
Of course, you may need to modify the hashbang line depending on where Python is on your machine, and don't forget those execute bits, people... Use "-h" for help.
First person to ask how to get this to run on Windows gets pointed and laughed at.
None of the characters that are expanded fall under the range of characters that wouldn't already produce a salt character of ".", and they can all be represented as characters with the high bit set with no change to the resulting crypt, so that's not a point that you really need to worry about, and really, doing those checks is just a waste of processor power.
Some equivalents:
# = £
! = ”
< = ¼
> = ¾
& = ¦
" = ¢
' = §
, = ¬
If your tripcode searcher checks all characters from 0x1 to 0x7f, and checks all applicable combinations for salt values, you're getting the complete range of possibilities, and with a bit of finagling, any tripcode it generates can be converted into a format acceptable for use on a board, without needing to do any complex and expensive html conversions.
>>475
but '&aaaaaaa' and '¦aaaaaaa' produce different tripcodes. with '&aaaaaaa', '&aaa' gets passed to crypt, but '¦aaaaaaa' the result is the same as if '&aaaaaaa' were passed to crypt. note that in this case it also changes the salt, in one it is 'am', and in the other it is 'aa'.
also, if you're printing to stdout, you need to convert to the appropriate character set before you print the tripcodes, which isn't necessary if you restrict it to just ascii. printing shift-jis to a utf-8 terminal is just plain broken.
>>476
You're thinking too hard about the wrong things. Of course they produce different tripcodes; if you're implementing the searcher you should be able to figure out how to deal with the characters it uses. Just change your &'s to ¦ and so forth.
Second, if you search all possible characters, or even random eight-character strings, you will eventually check the plaintext &aaa
as well. And why worry about printing sjis and converting stuff? Just escape it and deal with it elsewhere. (i.e. after collecting the tripcodes) Figuring out how to get a tripcode key you can input into a textbox based on the data printed from a function such as this shouldn't be too difficult if you're familiar with how crypt works (which, considering you're even posting here, I would assume is the case :)
void print_key(char *k) {
while (*k) {
if (*k > 32 && *k < 127 && *k != '\\')
putchar(*k);
else
printf("\\x%02x", *k);
k++;
}
}
Naturally if you were making a general-purpose tripcode searcher meant for mass consumption you would want to have some kind of "real" conversion -- and definitely use some sort of GUI rather than output to the terminal in the first place, because let's face it, terminal support for non-ASCII frankly sucks. (Especially when working with multiple OSes, and with different locales... and different terminal types... ugh.)
> And why worry about printing sjis and converting stuff? Just escape it and deal with it elsewhere. (i.e. after collecting the tripcodes) Figuring out how to get a tripcode key you can input into a textbox based on the data printed from a function such as this shouldn't be too difficult if you're familiar with how crypt works (which, considering you're even posting here, I would assume is the case :)
just because i know how to do it, doesn't mean i want to when i can have the computer do it for me. copying and pasting from a terminal is a lot easier than converting it myself.
> and definitely use some sort of GUI rather than output to the terminal in the first place, because let's face it, terminal support for non-ASCII frankly sucks.
terminal support for non-ascii on any modern operating system isn't too bad, and you can just disable any non-ascii stuff for windows builds.
> just because i know how to do it, doesn't mean i want to when i can have the computer do it for me.
Oh, I definitely agree there. But until spending the time getting a really nice implementation going, it kinda works. (I used that function to get this tripcode, incidentally.)
I would think Vista counts as a modern OS. :P (unless they finally updated the command prompt and I never heard about it?)
In any case a GUI is a much more flexible and friendly interface.
Most tripcode searchers have horrid UI. Typing big long regexes into a one-line textbox, or worse, onto the command line and having to be careful with all the special characters, is really not fun. It would be awesome to be able to have a list of "interesting" patterns, and be able to modify it on-the-fly while the searcher is running.
> I would think Vista counts as a modern OS. :P (unless they finally updated the command prompt and I never heard about it?)
IMO, proper unicode support is the only thing keeping it from being a modern OS. until they update the command prompt to support unicode and add proper unicode support to the GUI, windows will not be a modern OS.
> In any case a GUI is a much more flexible and friendly interface.
but cross-platform GUIs are a lot harder to get right than cross-platform non-ascii terminal support.
> or worse, onto the command line and having to be careful with all the special characters,
putting single quotes around the regex isn't really that hard.
> It would be awesome to be able to have a list of "interesting" patterns, and be able to modify it on-the-fly while the searcher is running.
that would be awesome... perhaps put the patterns into a text file and have the searcher reread the file if it receives a certain signal...
writing a GUI wrapper to a command-line program is just as easy as putting a GUI into the program itself, and doesn't require several hundred megabytes of libraries that would otherwise not be used at all on my quad-core server when i'm just going to be sending the results back to my desktop over an SSH connection. and you could even have functionality in the GUI to control multiple instances of the command-line program over SSH.
Windows doesn't have Unicode? Are you sure you're not using Win95 by accident?
I use a WinXP box to deal with both Japanese and Pashto text on a regular basis, and I have yet to come across any shortcomings aside from the command prompt. (Which I don't care about, since the GUI is developed well enough that I hardly ever need to touch it anyway.)
> putting single quotes around the regex isn't really that hard.
No, but it's annoying, and an extra step that shouldn't be necessary.
> but cross-platform GUIs are a lot harder to get right
HTML certainly isn't hard to get right cross-platform, and doesn't require a bunch of extra libraries on the server to implement a networked GUI -- just some way to serve the page to the client. You could implement the controller as a CGI script. If you want, you can add in secure connections, access control lists, etc. -- and, best of all, no ssh needed! (Doing work over a ssh connection outside my lan generally makes me want to beat myself with a hammer.)
Plus, it would be highly flexible: you could still wrap a fancy GUI around it if you were clever. It'd send POST data to the server (or if you had a multiple configuration, each server in the list) to update its search terms, and fetch new trips periodically.
(Tangentially, there are many cross-platform GUI libraries that are far lighter than "several hundred megabytes". I suspect you've mostly had experience with wxWidgets+gtk or something similar.)
Something else I have been considering the possibilities of is a Map/Reduce style-model -- it might be a good excuse for me to learn a bit about Hadoop...
> Windows doesn't have Unicode? Are you sure you're not using Win95 by accident?
have you ever tried using characters outside the BMP? only a few programs handle them correctly, due to the fact that microsoft seems to think that the BMP is all there is.
> HTML certainly isn't hard to get right cross-platform, and doesn't require a bunch of extra libraries on the server to implement a networked GUI -- just some way to serve the page to the client. You could implement the controller as a CGI script. If you want, you can add in secure connections, access control lists, etc. -- and, best of all, no ssh needed! (Doing work over a ssh connection outside my lan generally makes me want to beat myself with a hammer.)
> Plus, it would be highly flexible: you could still wrap a fancy GUI around it if you were clever. It'd send POST data to the server (or if you had a multiple configuration, each server in the list) to update its search terms, and fetch new trips periodically.
so instead of using SSH, you'd try to use HTTP to do what SSH was designed to do? and why use HTML? why not just serve the results as plain text and use javascript to insert them into an HTML document? that way if you do wrap a fancy GUI around it you don't need to have HTML parsing in your GUI.
>>483
You don't understand what I'm suggesting, and don't seem willing to either.
Shame, too; at first I'd thought you had some common sense.
Ive been running the japeneese tripcode program for 7+ hours?
how long does it take to find a 8 character, noncase sensitive tripcode?
2.4ghz dual core, so i dont think its a power restraint slowing it down...
>>485 it's a big keyspace. if you're trying to find something that long, be prepared to wait for a long time.
anysort of timeframe? hopefully in hours but any estimation would be nice ( its not actually my computer so its a friends their resources, about 50% of them)
>>487
it took me about two weeks to find a 7-character string on a ~1.7ghz ppc. of course that's apples and oranges, but it should give you a bit of a bearing.
>>489-495
please read the rules at the top of the page:
> This board is not for testing your tripcodes.
and you could have at least used sage.
>>488
Are there any detrimental effects of having your pc run an app at %100 cpu for 2 weeks non-stop?
darn, still no password turn up
>>488
By that measure, it'll take this guy 2 * 36 weeks, or a year and a half. 8-character codes just aren't going to turn up, unless you're incredibly lucky like m0hey/p0ri. Even then, his tripcode was kind of in l33tspeak and not exactly what he expected.
>>502
it took me about half an hour to find this tripcode... of course that was when i was having a run of unbelievably good luck.
after i found this one i left the tripcode searcher running for about 6 hours and found !HOTaRuCUtE, too.
gfgaf
I found this one completely by accident when playing around with a trip searcher. Took me less than 2 hours.
Too bad it doesn't seem to work on 4chan at all; it's perfect for /prog/...
>>502
The trip came way before the whole identity of Mohey, so i wouldn't exactly say there was much planning to get a unique trip from the get-go.
hai
sss
Would it be conceivable to brute force every possible combination and result, and then save that as a list for future reference? Or would searching such a list take longer than brute forcing each combination again?
>>510
searching the list could be pretty fast, if you store it in a format that's fairly well optimized for searching. the biggest problem i've found with this approach is that the list would take up several teraby tes of space, which i don't have.
>>511
Then perhaps a list with a dictionary of common words in different combinations, rather than every possible combination, perhaps?
> the biggest problem i've found with this approach is that the list would take up several teraby tes of space,
Far more than that.
You have a 56-bit keyspace, which is 65536 teras or 64 petas, and each one of those is not a byte, but several. In addition, you would have to keep the auxillary data to mangage it.
A binary search over 64 petarecords takes only 56 divisions, so searching the table would be many orders of magnitude faster than bruteforcing.
But anyone with that amount of storage would not be using it to store tripcode tables anyway.
http://trip.orz.hm/
In theory, a google search would find every tripcode listed on that site.
Also remember the keyspace is more than 56 bits. The second and third byte of the key affect the salt used if you use characters outside the range 0-127, and since the algorithm changes various other characters with htmlspecialchars and by character set translation, there are other effects of using characters with the high bit set.
>>514
Hooooooooooooly shit! Those pages have got to be dynamically generated.
Also, those tables don't even allow upper+lowercase+digits in the same tripcode, or at least from what I've seen.
lol
> Also remember the keyspace is more than 56 bits.
actually it's less than that. you can't use control characters, and the & character can only be followed by certain sequences of characters.
>>517
Erm, no, sorry... it's more.
If you use sjis characters in positions 2 and 3, it alters the salt value used without changing the 56-bit key. Same goes for using characters with the high bit set in other positions, and control characters as well as &"#<> etc. are still usable by setting the high bit - so long as it's still valid Shift-JIS data.
Determining the actual keyspace is fairly difficult, since sjis is a stateful encoding and what byte values are allowed is dependent on previous input data, but it's definitely more than 56 bits.
I wonder if the person who posted that patch was basing the implementation on >>312-314, which is also missing &.
In related news, various threads suggest that 2ch doesn't seem to run htmlspecialchars -- or at least, not for some characters.
Namely, lots of the "novelty" tripcodes listed in posts like http://gimpo.2ch.net/test/read.cgi/puzzle/1129465527/203 have such characters as &
and '
in them. It doesn't make a ton of sense to me for someone to post these if they have to be reencoded in order to be used, considering the "fixed" tripcode could be posted just as easily and it's a fairly trivial process. So what gives?
asdf
>>520
Having just dissected the 0ch source, it only substitutes "<>
with entities.
DSFARGEG
>>524
Uhhh, what?
>>525
That would be Russian spammers of a highly persistent sort.
asdfg
Still nothing on the password for the English version of Tripper?
>>When Visual Basic is the only language you've ever used, every language looks like either "Visual Basic with [something useful]".
fixed
s
>>534
please see >>275,496,528
This board needs something like die S_READTHERULESMORON if length($comment) < 10 and $trip and !$name;
wat ?
>>536
Oh god yes.
And die S_ENJOYTHEBAN if name == 'heh man'
>>540die S_ENJOYTHEBAN if $comment=~/(?:kasuba|serissa)/i
would be better.
trippie code
feeee
dddddeee
>>545,547,548
stop spamming and read the rules, faggots
tge
Let's go away.
dsfargbump
Hi. Believe it or not, this is the OP. (I hope I got my tripcode right - it's been a while.)
Even though the links in my posts have been 404s for years, I'm still getting an absurd amount of traffic from them. Could a mod please do me the favor of removing those links just to stop flooding my server's logs with requests to those files? Much thanks if you can.
;_;
>>553
you know people are going to start clicking that link just to spam your logs and annoy you now, right?
>>553
!WAHa.06x36's e-mail address is on the front page. (http://wakaba.c3.cx/) He is the admin.
>>553
'sup Albright. What have you been working on lately?
>>558
it took me FUCKING 100 MINUTES to figure out where to click in that poorly designed WEB 2.0 bullshit to download the file.
and then i had to reload the page 5 times to get a captcha that wasn't black text on a dark blue (almost black) background.
also, your file has a lot of duplicates in it.
Why not just 301 redirect the requests to a page stating this?
I'm a professional web developer now. No, really. I've done a lot of stuff with the Drupal CMS in the last two years or so and I'm really enjoying it. And I've improvedc to the point where I'd rather just forget about that thing I released a while back. No, not the tripcode decoder; the other thing. If you don't know what I'm talking about, just forget it. I hope nobody's still using it.
Okay, perhaps I'll try emailing him.
Because I suspect it's not humans who are hitting the links. There just can't be that many people who are interested in five-year-old tripcode decoders written by a Python n00b. (I haven't really used Python since, BTW.)
> No, really. I've done a lot of stuff with the Drupal CMS in the last two years or so and I'm really enjoying it. And I've improved
most people wouldn't admit to switching from python to php, let alone call it an improvement.
Is there anything as mature & easy to deploy as drupal that is written in python? PHP sucks but it does have its good points.
can't figure out how to use this stuff. is there something more noobfriendly?
>>564
drupal, like the language it's written in, is basically a 10 minute hack plus years of feeping creaturism.
HAY EVRY1 MY SCRIPTING LANG OF CHOISE HAS A BIGER PENIS THAN URS! LOLOLO
I need to know how to get a copy of that detripper.exe. I'm on windoze, can anyone help?
Okay, I see a moderator is here deleting posts. Could same moderator delete my posts too, please? Or edit them? Do I need to offer cash or favors or something?
I don't really feel like going to the effort to dig into and edit posts, and deleting the first post in the thread would kind of ruin it. Just put in a redirect already.
I found an english language executable file, no readme of anything else: http://www.megaupload.com/?d=kepnylnz
No pass.