Vivisector
Daggers and Spears and Songs => FA Obsession Collection => Topic started by: Conan on January 16, 2011, 07:33:55 pm
-
FurAffinity turned six today, and Dragoneer's celebration post (when he wasn't plugging FurAffinity: United) featured even more promises for a better FA. Again, we here about a great new version of the site (no, not Ferrox again, but this time just "FurAffinity 3.0"), new features like a "commissions and ratings system", the long-promised new UI and the hosting service that's been expected for nearly a year.
Not too long ago I set out to document just how many times FA has done just this: made announcements for something that never came to be. I found around 10 without really trying. A simple search of "coming, soon, shortly, future" on the FurAffinity Forums and filtered to only include Dragoneer's posts. Very few of the relevant results have actually been seen through to completion. Remember that this list only includes things I found on the forums. There could be more on sites like LiveJournal, IRC, and FA itself.
http://forums.vivisector.org/FAtimeline.pdf
I've also included what I feel are significant events in FA's history, and a timeline of how many servers they had. FA may run on more hardware today than it did three or five years ago, but very little has changed. I think my favorite of all the failures is the CD project (http://forums.furaffinity.net/threads/6306-FA-Dance-Track-Pack-CD?), which Dragoneer claimed was being held up due to a lack of cover art. Yak summed it up nicely (emphasis added):
Okay, now this is just beyond silly.
This thread is six months old, enough to finish a little playlist considering the content is actually as your disposal, Dragoneer.
It wouldn't be as bad as it is if you didn't say you had the CD finalized already, and only cover art's all that remains. I'm sorry, but Fur Affinity is an art site, and the only thing that's delaying the project is cover art?
You've missed a perfect, probably the best ever chance to sell these things at FA: United and get some money back from all the expenses, and probably have some left to cover that hard work you were supposed to be putting in it.
Or simply give them away as a promotional move, in the way Ubuntu's been handed out to people everywhere.
Whatever you'd've chosen as your action we all would be fine with, even an apology and an explanation that this will never happen would suffice - but for crying out loud don't leave this thread agonizing for so god damned long.
But i digress *shrug*
Dragoneer never apologized. The next and last post in the thread was someone withdrawing their submissions to the project.
FA. FA never changes.
-
Yeah, I'm pretty much in the "I'll believe it when I see it" camp when it comes to FA 3.0.
-
Some great things in the celebration thread:
Yes, we were talking about that. Folders need part of a file system revamp that will have FA offline for a few days, so trying to lump that in altogether is beneficial for the site.
I don't understand
do you think you need to put the submission files in actual folders?
-
<_fox> What's this thing about coders for FA 3.0?
<_fox> Sounds like it would be fun
<&yak[work]> Yah. I just need to finish setting up proper backups and damage control tools so that any and all shenenigans (that will inevitably happen) can be restored from.
I still don't understand why he's so worried about this. Are they going to be working on the production dataset? Backing up your test playground shouldn't be a higher priority than, say, protecting your users (you know, the COMMUNITY) from the "shenanigans" that are still possible on the prod site!
<&yak[work]> I've been converting it to MVC all this time and at this point it's 80-85% converted. But that's not the main problem. I'm sitting on a legacy database archetecture (and all the current data in it's current flawed model) and legacy filesystem organization. These thw things... really need to change before any serious work is to be attempted. It's just a PITA
<&yak[work]> I can't even do file backups properly because of how the files are stored :/
<_fox> I noticed the stuff in the UCP about file directories
<_fox> Are the art files actually stored in the paths that compose a facdn url, or is that wrewritten?
<_fox> rewritten*
<&yak[work]> It's being rewritten, but to a similar hierarchy. FA's data storage is pretty much a flat /art directory with a bajillion of directories with user account names. I guess alkora initially didn't plan for more then 32k users or, which is more belivable, didn't know about filesystem limitations.
<&yak[work]> So at this point I have like 12 /art directories with symlinks from 11 of them back in /art
<&yak[work]> and every once in a while I have to add a new one
You've been hobbling along with a filesystem that can only fit 32k files per directory all this time? (ps: this is tunable with mkfs, if you know what you're doing) And now you're trying to fix the architecture at the same time that you're working on the UI? Good fucking luck with that.
Hey, I seem to recall that someone whose name rhymes with "Tee vee" managed to deal with the "legacy database architecture and filesystem organization".
Also I think this explains what Dragoneer is trying to get across with the 'folder' thing. I bet he thinks that user-facing 'folders' on the site will fix this problem.
Finally, one would think that once you had to do this nasty kludge with symlinks twice, that maybe something was wrong and you should look into it, instead of letting it grow to be a 12-directory problem. Just saying.
<&yak[work]> At this point however I really could use an UI designer. I need somebody to finish that template set for all other pages so I could begin to port it into FA
<_fox> Oh, I though FA had a UI designer already?
<&yak[work]> Need more/more reliable.
we;lp
-
I'm also fairly certain that FA has no backups of the actual art; hence their inability to restore the actual contents of wiped galleries.
-
<&yak[work]> At this point however I really could use an UI designer. I need somebody to finish that template set for all other pages so I could begin to port it into FA
<_fox> Oh, I though FA had a UI designer already?
<&yak[work]> Need more/more reliable.
wh
I'm also fairly certain that FA has no backups of the actual art; hence their inability to restore the actual contents of wiped galleries.
Yea I think one of the admins admitted to this. Submissions aren't backed up, just the text data. Have they even reposted the back up data for the people who's stuff was wiped yet?
-
Yea I think one of the admins admitted to this. Submissions aren't backed up, just the text data. Have they even reposted the back up data for the people who's stuff was wiped yet?
They should be restored by this weekend.
So, no.
-
So, no.
Welp.
WE'RE WORKING ON IT, GUYS!!!
-
<Ice-Wolf> Yak: as for the new codebase, it's not in the best of conditions right now if only becasue not much happened with it after I was relocated to Europe, and unable to prod people.
<Ice-Wolf> I've been back on it in recent weeks, and have tasks other quality coders to some tasks (if they get to it great, if not, well, not making vain assumptions anymore.
<Ice-Wolf> Though I do need to get some changes in git pushedup D:
<Ice-Wolf> Motivating people on a free project is hard when everyone has their own full-time jobs to worry about, and life events :|
<Ice-Wolf> I know crashing nmy motorcycle on the interstate killed my motivation to work on FA for a few months <_<;
They have one template, no way to slot it into their existing broken architecture, a new codebase that's starting to get bitrot... but they're announcing future announcements of amazing plans!!
-
I think my favorite of all the failures is the CD project (http://forums.furaffinity.net/threads/6306-FA-Dance-Track-Pack-CD?), which Dragoneer claimed was being held up due to a lack of cover art.
Actually, this reminds me of another "contest" (http://forums.furaffinity.net/threads/15907-FA-Art-Contest-When-Bad-Things-Happen-CLOSED) sort of thing they did.
They had an art contest type of thing for a variety of art to be shown on error/upgrade/etc. pages. There was no real "prize", except maybe having your art selected for one of the pages. Plenty of people entered, but no winners were ever announced afaik and none of the art was used, save for one person's picture became an avatar for the Fender Account (if you can remember, the one of Fender holding a big wrench) and my entry was used as an icon for the now abandoned Ferrox twitter account.
Probably not major enough to go on that timeline, but just another "goes to show you" type of thing, I suppose.
-
I can't wait to see what new vulnerabilities they create by trying to hobble together a patchwork clusterfuck of code. I'm constantly blown away by how laissez-faire they are about the work they want to do; it's that classic avoidance of responsibility or doing actual work that seems to dog lazy people. They can't understand why everything is so jacked up despite only putting in half-ass efforts and ignoring genuinely helpful advice....
-
Ok, guys, You've had this conversation plenty of times before, We know you guys think FA is badly run, We know you guys think FA is poorly coded, and we know some of you have a problem with FA's staff's attitude towards these problems.
Now, please, drop it.
We don't have to see the same conversation for a Nine-thousand-and-first time.
I kindly ask you guys to leave it at the door for this one time. "Or else" *Cough-Cough, Nudge-Nudge*
That settled,
Happy Birthday, FA! May you provide all furs with art for another 6 years to come!
-
...
Give us asspats or we'll ban you! Ha-ha!
-
Is it a bad thing that I've grown jaded enough to the point of giving up caring about this whole mess?
-
Is it a bad thing that I've grown jaded enough to the point of giving up caring about this whole mess?
Absolutely not. By all means, care about more worthwhile things. Lord knows I'm trying to do the same (although the above post isn't really any indication).
-
In between bouts of embarrassing myself on FAF, the conversation on IRC turns to the topic of FA's mediocrity fairly frequently. especially with Yak around. Today we got to discussing FA's alleged plans to have things fixed by May 21 (during FA:U):
<@verix> so then may 21st all of these grievances will be irrelevant
<yak[away]> most of them, probably. for anything else, nab a copy of the code and put your work where your mouth is
<@verix> will do
<@verix> where is it
<yak[away]> ut's not may 21'st yet
<@verix> excuse me?
<@verix> I want to help move the date to sooner than may 21st
<@verix> I have to wait until you actually supposedly release things to get fixed?
<@verix> I'll help you fix things now
<yak[away]> Appreciated, but I can't do that. Not until the glaring issues are fixed, the network setup changed and servers re-purposed
<@verix> yeah, fuck you
<@verix> I put up and you reject
<@verix> you clearly explain to us that you are in over your head, and when I offer help, you say you can't accept the help because things are broken
<@verix> seriously?
<@verix> I AM OFFERING TO HELP FIX THE THINGS THAT ARE BROKEN
<@verix> so I'm going to ask one more time
<@verix> and then any help from me whatsoever is off the table
<@verix> I want to help fix things now
<@verix> can I help you fix things now?
<yak[away]> verix: and at the same time you, or anyone else given the opportunity to help might end up exploiting what they find and without proper damage control tools and data to recover from, it might spell the end of the project. Many people tried to achieve that for the longest time, and I'm not going to make it trivial for them with the careless move until FA's setup is ready.
<yak[away]> don't get me wrong, regardless of not knowing whether you were actually serious or not I appreciate the offer. I just can not accept it yet.
This marks the third person that I personally know to finally get fed up with this attitude enough to withdraw their final offer of support, and the third time that Yak has said something along the lines of "i can't let you help fix things until things are fixed". Meantime... Well, Eevee said it better:
<Eevee> yak[away]: again, while you were ~restructuring to provide a safe dev environment~, you were attacked and administrative privileges were stolen and a great deal of data was lost and over three dozen users' private correspondence was leaked
-
Jesus fucking christ, I can't believe that Yak actively turned down help SO QUICKLY.
HEY THE SITE SUCKS
YEAH WELL IF YOU CAN DO BETTER DOWNLOAD THE CODE AND FIX IT
OK I WILL WHERE'S THE CODE
BLUH FART SECURITY
-
There's more where that came from, but now I am tooting my own horn:
<@Pi> how about you give me access to your fucking router
<@Pi> and i put in a firewall
<@Pi> and then i will shut the fuck up about your production credentials and your fucked template system and your buck-passing fucking shit for at least 24 hours
<yak[away]> we're working on redoing FA's entire networking. what is there now is legacy setup that evolved from a two server network
"i will fix one of the problems you are currently having, right now"
"we're working on it"
-
what is there now is legacy setup that evolved from a two server network
A legacy network.
A legacy network that runs on hardware installed after the 2009 outage (4 active servers and two inactive ones at that point).
A legacy network that has seen two switches.
A legacy network that they could find time to fuck around with and say "UPLINK TO PANTS (http://twitpic.com/1c8djq)" earlier this year... but couldn't find the time to "fix" the setup.
They're not even TRYING to lie anymore.
-
hi guys. here's a really cool sha1 sum: f76298b2e48408aa6875f5019abf09fff1ea476d
it corresponds with a pastebin that I can't fucking encrypt right now because pastebin.ca is being lame and apparently I'm too stupid to figure out how to encrypte a pastebin.com post, so right now it's sitting safe on a shell server. when the time is right I'll post the data that corresponds to this hash. it's a little lame but I'm doing it for a reason, you'll see in a few days. (Pi if you have to plz2defend what exactly I'm doing here.)
-
You know, at this rate, Inkbunny and SoFurry are actually starting to look like viable alternatives when compared to the taped-together house of cards that is FurAffinity.
-
My prediction is that if they respond to this at all, it will be with something along the lines of "no you misinterpreted what we said". Yak tried that during the conversation, in regard to other aspects of what we were saying. The problem is that there is no other interpretation that remotely makes sense. You cannot look at this and see anything other than "cream of bullshit".
-
I don't quite understand why people here are offering to help Yak and Dragoneer. I don't feel they, especially Dragoneer, deserve any help. Is FA the best art site for porn the fandom has, or are you guys doing this to challenge yourselves?
-
I don't quite understand why people here are offering to help Yak and Dragoneer. I don't feel they, especially Dragoneer, deserve any help. Is FA the best art site for porn the fandom has, or are you guys doing this to challenge yourselves?
I can only speak for myself, but it's a combination of things.
FA is pretty popular, and it's also unsafe to use. This kind of thing causes injury to my profession. If only for the safety of the users, someone should care about the security, and none of the people in charge appear to actually give a shit (they would rather just say they do). Plus, I'm an intellectual masochist who enjoys screaming at idiots for catharsis. That kind of rage fuels me to become better. It's self-improvement!
-
I'm an intellectual masochist who enjoys screaming at idiots for catharsis. That kind of rage fuels me to become better. It's self-improvement!
Whats the one where you enjoy watching people be idiots in general until they hang themselves with a rope of their own making?
Because I would be that one.
-
While I haven't and never will offer my skills to Dragoneer for a fee below ten thousand dollars a minute, I have to say the code and architecture horror-stories that get posted are quite entertaining.
The "teststring" md5sum thing made my day. I mean, I challenge you to find a better example of proverbial lizard-brained cut-and-paste coding. Seriously. If you find it I'll be impressed.
-
While I haven't and never will offer my skills to Dragoneer for a fee below ten thousand dollars a minute, I have to say the code and architecture horror-stories that get posted are quite entertaining.
The "teststring" md5sum thing made my day. I mean, I challenge you to find a better example of proverbial lizard-brained cut-and-paste coding. Seriously. If you find it I'll be impressed.
You will absolutely fucking regret saying this to me, I swear it:
source/functions.sys
782: return addslashes(stripslashes(stripslashes($value)));
-
Is it a bad thing that I've grown jaded enough to the point of giving up caring about this whole mess?
Not really. I'm interested in it more for the volley between the people who know what should be done or is a Good Idea™, but a part of me is also rooting for some sort of marked change in FA, staff or code. I regret having little to nothing to actually contribute to these sorts of things but the conversations I see are oddly stimulating.
Also, when I registered to reply to this thread, my Captcha was "Issues: whoops"
I can't wait to see what new vulnerabilities they create by trying to hobble together a patchwork clusterfuck of code. I'm constantly blown away by how laissez-faire they are about the work they want to do; it's that classic avoidance of responsibility or doing actual work that seems to dog lazy people. They can't understand why everything is so jacked up despite only putting in half-ass efforts and ignoring genuinely helpful advice....
Hey, me either! I'm only aware of a few people that have done anything towards the site to -expose- problems, but not aware of who actually does/did debilitating attacks. My guess is that if (when) they revamp with patchwork, the 'good guys' will find the problems, but if the FA staff treat them as they do now, the 'bad guys' will exploit them long before anything gets done, and 'neer will be left shrugging his shoulders and trying to front an apology in the aftermath.
Presently I'm more or less waiting for an alternative to FA with people behind it that I can trust. I'm not especially aware of the people behind IB and SF, and I don't really care to be, no offense intended towards them (I'm stubborn and don't really want to switch right now). I may end up switching anyway, depending on the events between now and some future date/time.
-
You will absolutely fucking regret saying this to me, I swear it:
Yes, but that's just random stupidity. I can't even figure out exactly what the intent is there (ex. why do you need to call stripslashes() twice?). Something about the idea that whoever wrote that md5 thing (Yak? Alkora?) *didn't even know how to generate a random hash-string* is far more entertaining to me.
I'm pretty sure I could do that when I was using Linux on my dad's murder-weapon-sized laptop when I was in middle school 11 years ago.
-
so, I'm really tired of trying to help Dragoneer out. he has pretty much objectively exposed himself to me as a smarmy weasel, and now I'm completely done with any desire to help him or the rest of his site. this means the contents of the hashes-- as well as some logs-- get posted early. I don't do this to mock him, I do this to laud him as a shitheel weasel administrator who objectively has no interest in improving the site and actively has every interest in appearances.
contents: http://pastebin.com/hhuH6F2d
[verix@pihost ~]$ sha1sum 20100119
f76298b2e48408aa6875f5019abf09fff1ea476d 20100119
the best way to verify this is to copy the text from the pastebin into a flatfile as-is, write it, then sha1sum it. it should give you the same sha1 sum if you did it right-- this is a direct upload of the contents. (note that I fucked up the dates in the file like a retard-- it should be 01/19/11 and 01/20/2011, not 18 and 19. I wrote this out last night.)
under normal circumstances I wouldn't post these logs (for example: if Dragoneer hadn't lied to my face about having read what I wrote). but these logs, in tandem with my history of working with this site to help fix it, show both a) just how angry and impatient I've grown with trying to help them out, offering them a final chance to let me just fix all their problems and b) just how much Dragoneer (and Yak, and most likely everyone on the site) actually don't care about fixing the site and care more about being the sole owners of the problems they sit over. they just don't want help. Dragoneer even explicitly said he trusted me, and still won't accept my help. this is amusing, considering at one point he said I was "venting" and then now that I'm using similar language when "venting" it's no longer acceptable. whatever, dude. fuck you.
initial log: http://pastebin.com/6wLrBUyf
log that set me right the fuck off: http://pastebin.com/f8JLCzrU
I hope now that you have competition, Dragoneer, you'll suddenly start caring about this site. apparently the only thing that gets you going is when people "make you look bad." of course, being such an egotist you don't realize that you're the one making yourself look bad, but hey, keep on truckin', fuckface. I'm done helping you.
-
log that set me right the fuck off: http://pastebin.com/f8JLCzrU
I like that, despite being the site owner, he absolutely refuses to tell his staff to do anything and refuses to try to sway their opinions.
I now feel stupider after reading those logs. Thanks.
-
You may have withdrawn your offers to help but I can bet you'll still have some reaction to this stuff when it surfaces time and again, having been attached to it at any point. More power to you to leave it in the dust and make good use of your talent and work.
-
I don't quite understand why people here are offering to help Yak and Dragoneer. I don't feel they, especially Dragoneer, deserve any help. Is FA the best art site for porn the fandom has, or are you guys doing this to challenge yourselves?
This started on IRC, a person came in and asked why we hate Dragoneer. The following is the result stream of consciousness of my thinking on the matter and thinking back to all that happened over the past years. Pi suggested i post it here, so here i go:
Nobody despises him. The term is pity.
We pity him for continually and ceaselessly worsening the state of the resource he has on his hands and for having a mind that allows him to willingly hurt all of its users by laziness, omission and sheer ignorance. Out of this pity and self interest as a part of the community we try to push him and the people around him towards doing the right thing. But he has proven entirely resistent to anything to the point that we're literally just throwing the dice and trying to come up with random new ways to compel him.
And the worst part: With his resistance he even incapacitaties those who could do something, like yak. Yak might not agree, but from his behavior it is clear that he is afraid of what neer might do, not to yak, but in general. And yak has this fear despite being superior to him in literally every way.
<here the person insinuated us making him distrust us by being not nice detracted to our cause>
Neer doesn't need to trust us.
Neer does well to distrust us.
I wouldn't trust us either
But distrusting is not the same as ignoring.
The information we provide has always been independently verifiable and objectively true. But you want to know the reason why he ignores it? Acting on it would mean admitting he did something wrong and he cannot even admit that to himself.
So the only thing that is left to us, is to literally break him publically. Force him to admit being wrong to other people so he can start admitting it to himself.
----
Edit: The important thing here is, as Eevee put it:
We are not Anti-FA, we are not Anti-Neer, we are, at worst, Anti-Bad and Pro-Good.
-
18:04 <Dragoneer> December was a fucking embarassing lesson in humiliation and I want to move past that. No more of this circular motion we've been aiming towards.
"We can't let you fix the security issues until we fix the security issues!"
10:53<Preyfar> Just following up - the answer is no. We appreciate the offer, but we need coders for the new version of FA. It makes no sense to waste that many manhours to patch the current system when most of it will be replaced in May/June.
I don't see why he will not take any help from competent people; is his ego/pride so big that he can't admit defeat even once?
-
10:53<Preyfar> Just following up - the answer is no. We appreciate the offer, but we need coders for the new version of FA. It makes no sense to waste that many manhours to patch the current system when most of it will be replaced in May/June.
I don't see why he will not take any help from competent people; is his ego/pride so big that he can't admit defeat even once?
Yes, combined with his mistrust of anyone looking to help. Obviously, anyone finding security holes original intention was to exploit them.
-
I don't see why he will not take any help from competent people; is his ego/pride so big that he can't admit defeat even once?
It all boils down to this:
<Preyfar> If it weren't for the fact every single thing that is spoken to you, Pi or otherwise gets filtered out, reposted and mocked.... we have no reason to believe that same wouldn't be done with the coding. Just reposted, redistributed, given out. Our private conversations do, and the same issues get rehash, redistributed at a whim. Sorry, but "fucking professionals" don't do that.
He thinks that we are making him look bad, and not his (in)actions. And he's only concerned with appearances. He can't accept our help because it might appear that he needs help, and anything else he says is just some defense constructed as an excuse. And it's not like he's the paragon of professionalism here.
-
<Preyfar> If it weren't for the fact every single thing that is spoken to you, Pi or otherwise gets filtered out, reposted and mocked.... we have no reason to believe that same wouldn't be done with the coding. Just reposted, redistributed, given out. Our private conversations do, and the same issues get rehash, redistributed at a whim. Sorry, but "fucking professionals" don't do that.
Professionals share war stories, sure. It might be argued that you don't say who it is out of courtesy or whatever, but that's not really feasible given the public nature of the situation. And if I've learned anything in this profession...it's that just because you don't personally like someone doesn't mean they write bad code or produce bad results. Assholes often produce the best software. Because really: I don't think he even has the qualifications to judge anyone by their coding skills.
He just doesn't like you. And that is ultimately how Sean Piche operates.
-
Seeing as how people are offering to help him FOR FREE, the least he can do it put up with being criticized. Good luck getting "professionals" to give you free service and not give you shit for doing stupid things. Hell, even if it's for money professionals will give each other shit if it wastes people's time. :I
-
You may have withdrawn your offers to help but I can bet you'll still have some reaction to this stuff when it surfaces time and again, having been attached to it at any point. More power to you to leave it in the dust and make good use of your talent and work.
the reason I stopped actively helping between 2009 and now is because I completely lost interest with caring. dodongo-rolling FA is probably one of my most fun hacks ever-- I wrote a sweet little python script to spam out the submissions with ease, it was pretty awesome. :) it was also kind of my last hurrah with helping FA. throughout the #hackerfurs history bugs have been exposed in the channel, and yak kind of grumbled and fixed them up with a sort of "you meddling kids!" sort of humor. I just kind of rolled my eyes in that 50's sitcom fashion as just "that's our FurAffinity!"
the only reason I started caring again and kind of came out of my hermit-shell is because Dragoneer had to come out and put pressure on a potential rape victim for fear of popular backlash. it's one thing to not "get" security-- I can understand that. some people see hackers as angry motherfuckers who are trying to keep things way too safe, sort of like how we perceive people who aren't legitimate police officers as "rent-a-cops." it's another thing to be lazy-- I'm a fuckin' pro at being lazy, and I understand this standpoint entirely. but the most recent series of events starting from December just completely fucking cemented Dragoneer's rather manipulative character in my head, and I feel completely betrayed for having fallen for it.
so, yeah, I've *had* a reaction to all of this. at first it was apathy because all these bugs just kept piling up. then it turned to anger. and now that the two staff members who would let me work on board lied directly to my fucking face about why I can't work with them for the sixth fucking time, I'm furious.
I'm posting this many words because I'm venting. I was apparently so naive to think that I was helping out the community, when really I was helping to feed the egos of the staff and prevent them from looking bad. fuck that.
-
<yak[away]> verix: and at the same time you, or anyone else given the opportunity to help might end up exploiting what they find and without proper damage control tools and data to recover from, it might spell the end of the project. Many people tried to achieve that for the longest time, and I'm not going to make it trivial for them with the careless move until FA's setup is ready.
Yeah, they're having real trouble doing that right now.
I have to wonder if Yak has a secret desire to see FA get totally compromised.
-
Some logs with yak.
Full: http://eevee.pastebin.com/m5pnWBMe
tl;dr with highlighted bits: http://eevee.pastebin.com/dXuk551k
These expire in a month for various reasons, but I have them saved locally.
-
This came to me from the vaults of history:
Hyenafire: Tsa found a flaw with the NIC card on the main WWW server
Hyenafire: something we're going to have to replace.
Ulrichvonmatsch: Will that be expensive?
Hyenafire: More than likely.
Hyenafire: Estimates right now are about $500
Hyenafire: But that would include 2 or 3 days of downtime
Hyenafire: I have an alternative idea to fix it that will require $2000, but will be better in the edn
Ulrichvonmatsch: Gosh, that's a lot of money. Will a donation drive effort be fet up?
Ulrichvonmatsch: er.. set up
Ulrichvonmatsch: what would the alternative idea be as well? :O
Hyenafire: Just get a god damn new server.
Hyenafire: Then fix the other one
Hyenafire: We can provide zero downtime
Hyenafire: However, the catch on that is that the new server would act as an on-site backup + search engine
Ulrichvonmatsch: Would that be like that search engine thing that that person posted about on the forums recently? i.e it stores a version of the site and searches that, versus a "Real time"(?) search engine?
Hyenafire: Temporarily
Hyenafire: Then followed by a real, fully fleshed out one
Session Close (Hyenafire): Thu Jan 24 20:57:42 2008
Perfect example of "little problem? fuck it let's not even try to fix things and just throw more hardware at it".
Also, who ever heard of a $500 NIC? Not even that stupid "KILLER NIC" gaming thing is that expensive.
-
Perfect example of "little problem? fuck it let's not even try to fix things and just throw more hardware at it".
Also, who ever heard of a $500 NIC? Not even that stupid "KILLER NIC" gaming thing is that expensive.
They're probably people who want to spend money they don't have to feel important. They don't have any actual skills to fix the problem so they rely on pointing non-existent issues and using that as an excuse to get more hardware (and asspats for fixing a 'problem'). It's pretty much kids playing make believe, I think.
-
This came to me from the vaults of history:
Hyenafire: Tsa found a flaw with the NIC card on the main WWW server
Hyenafire: something we're going to have to replace.
Ulrichvonmatsch: Will that be expensive?
Hyenafire: More than likely.
Hyenafire: Estimates right now are about $500
Hyenafire: But that would include 2 or 3 days of downtime
Hyenafire: I have an alternative idea to fix it that will require $2000, but will be better in the edn
Ulrichvonmatsch: Gosh, that's a lot of money. Will a donation drive effort be fet up?
Ulrichvonmatsch: er.. set up
Ulrichvonmatsch: what would the alternative idea be as well? :O
Hyenafire: Just get a god damn new server.
Hyenafire: Then fix the other one
Hyenafire: We can provide zero downtime
Hyenafire: However, the catch on that is that the new server would act as an on-site backup + search engine
Ulrichvonmatsch: Would that be like that search engine thing that that person posted about on the forums recently? i.e it stores a version of the site and searches that, versus a "Real time"(?) search engine?
Hyenafire: Temporarily
Hyenafire: Then followed by a real, fully fleshed out one
Perfect example of "little problem? fuck it let's not even try to fix things and just throw more hardware at it".
Also, who ever heard of a $500 NIC? Not even that stupid "KILLER NIC" gaming thing is that expensive.
For the record, I'm pretty sure this is the "unidentified hardware failure" that happened a few months later (the full log ends with "Session Close (Hyenafire): Thu Jan 24 20:57:42 2008").
It was identified, Sean Piche just saw a chance to get the community to pour money into his e-penis and rolled with it.
-
They're probably people who want to spend money they don't have to feel important. They don't have any actual skills to fix the problem so they rely on pointing non-existent issues and using that as an excuse to get more hardware (and asspats for fixing a 'problem'). It's pretty much kids playing make believe, I think.
Speaking of make-believe, I played some of that with the port-scan results. Pity my vague guesses about their network never turn out to be accurate. Being wrong could mean shame to my popularity as a furry!!!
(http://dl.dropbox.com/u/129462/fanetwork-full.png)
But no, seriously, why in fuck are your out-of-band management interfaces the only thing connected through your redundant backbone?
Ulrichvonmatsch: Would that be like that search engine thing that that person posted about on the forums recently? i.e it stores a version of the site and searches that, versus a "Real time"(?) search engine?
Hyenafire: Temporarily
In 2008 if someone asked me "hey should i build my temporary search engine by taking a database snapshot onto another box" i would have said "haha, nice joke".
-
They're probably people who want to spend money they don't have to feel important. They don't have any actual skills to fix the problem so they rely on pointing non-existent issues and using that as an excuse to get more hardware (and asspats for fixing a 'problem'). It's pretty much kids playing make believe, I think.
Speaking of make-believe, I played some of that with the port-scan results. Pity my vague guesses about their network never turn out to be accurate. Being wrong could mean shame to my popularity as a furry!!!
[image]
Interesting to note that the TF2 server IP falls in the middle of their virtual boxes. They used to use an old server for that. Guess they needed more power so more Medics could follow Dragoneer around.
-
Speaking of make-believe, I played some of that with the port-scan results. Pity my vague guesses about their network never turn out to be accurate. Being wrong could mean shame to my popularity as a furry!!!
But no, seriously, why in fuck are your out-of-band management interfaces the only thing connected through your redundant backbone?
I doubt anyone there has ever considered drawing out what their network topology is; the saddest part is that they probably had it paid for mostly by gullible furries. I'd feel better if they were in deep debt due to all the hardware they bought.... or if they were using it for something useful like academic purposes (yea, right they need their furry porn and TF2) - I'd also love to see how much load each of their physical boxes are under.
Also, that temporary search engine idea boggles my mind. Just what the hell are they on?
-
Jesus, this just keeps getting worse.
Session Start (Irc.Furnet.org:#FurAffinity-core): Tue Jan 29 18:35:27 2008
[...]
[18:55] Dragoneer: I am still waiting on Tsa to give me a hardware recommendation to fix or, or to know what he needs from me for it.
[18:55] Dragoneer: I mean, the new server idea is the best I can think of... replacing the MB may cause too much nasty-ass downtime
[18:56] yak[away]: yeah, it's the best and the fastest option there is right now.
[19:03] yak[away]: also, since we'd be having 3 boxes now, we'd need a gigE switch together with that new server.. that shit is pricey too :(
[19:04] tsawolf: Very.
[19:04] tsawolf: Plus, Gushi may ot let us.
[19:04] tsawolf: THats a lot of U
[19:04] tsawolf: I'm talking to him now.
[19:04] yak[away]: alrighty
[19:05] yak[away]: though i don't see where a lot of U comes from.
[19:05] tsawolf: Well...
[19:05] tsawolf: Even if we get another 1U server, then we still are adding 2U.
[19:05] tsawolf: What size racks are we using? 8U? 16U?
[19:06] Dragoneer: *nods* Well, he's still got that 4U beast for the old server we're using
[19:06] yak[away]: only gushi, and maybe crypto knows
[19:06] Dragoneer: He can have that, do whatever he wants with it. He could easily strip it down to 2U with a new case
[19:06] tsawolf: 42U rack probably, if it really is in a professinoal NOC.
[19:07] Dragoneer: We have two 1U servers and the old 4U shitbox that Alkora got
[19:07] yak[away]: tsawolf: i take the colo is on the level.
[19:07] Dragoneer: Yes.
[19:07] Dragoneer: The Colo is at Gushi's workplace
[19:11] yak[away]: okay, as a summary. what we need is: 1 server with pretty much identical, only compatible hardware this time, and maybe more storage space then now.. can even go 2u i think, to have a reserve there
[19:11] yak[away]: and one gigabit switch
[19:12] Dragoneer: *nods*
I... I can't even make fun of this. It's like watching "America's Dumbest Network Administrators".
-
am I misreading these things when what I'm taking from them is that something physical is damaged or broken and so their solution isn't "replace part" but "buy new expensive server to prevent downtime"?
-
am I misreading these things when what I'm taking from them is that something physical is damaged or broken and so their solution isn't "replace part" but "buy new expensive server to prevent downtime"?
It's the quickest and fastest solution.
Anything else would have required
HOURS OF DOWNTIME!11!1one!!!.
So instead they dawdled and the site was offline for a month loooooooooooooooooooooool.
-
Is it really that difficult to replace parts on a server?
Unless they're factoring in let's-take-a-break-and-have-sweaty-furry-sex time (which I'd approximate at 30 seconds, tops unless foreplay is involved) they're taking too long if they can't pop the case open, replace what they need to replace, and have it back in the rack in 15 minutes.
-
Aren't most servers, especially those overpriced ones they have, designed at a hardware level to let you replace parts without shutting down the system? You can even hot-swap in and out memory and CPUs on some of them, I believe.
My stupid-ass VMware Workstation instance of Windows Server 2008 hosting Microsoft Exchange even lets me emulate such features. I was able to add a backup disk to the virtual hardware without rebooting, and on Windows, yes, even Windows Server, that's saying something.
-
What? No that's stupid, you're stupid, VMWare is stupid. Hot-swapping hard disks? Sure. But that doesn't even require you to open the chassis.
Also, most halfway decent server motherboards these days come with dual NICs, so step 1 is to just reassign the IP to the other NIC port and plug it in. Or - and here's a mind blowing proposition - use both NICs with ethernet bonding! Wow, what a concept!
Anyway for all the talk of OMG DOWNTIME and these people being complete idiots, at least some of it has to boil down to them also being incredibly lazy and unwilling to go do the work at 4am. I've been working in the hosting/isp biz for a decade now, and downtime is just something that happens. If you can offload services to another existing box while the problem one is down, great. If not, you schedule some downtime and get to know the wee hours of the morning a bit better.
This whole concept of OMG CANT HAVE DOWNTIME is also just them giving themselves a hugely inflated sense of worth/importance. No, guys, the world won't end if some furfag in a far-flung timezone has to wait a few minutes for porn.
-
Thought I'd throw in a small stick to the massive pile of monuments to the staff incompetence, since this popped in the FA chat just now.
http://pastebin.com/V9Pe6qgf
The gist of it is that, CerbrusNL is lead to believe that talking about console modding is illegal and thus closes a previous thread, Joe Modder here starts another thread and complains about the mod being naive about closing the other thread, and guess what happens. CerbrusNL infracts Joe Modder for criticizing the mishandling of a case by a moderator and closes the thread, while said naive mod makes a childish "U mad" type of post.
-
blah blah things about datacenters
I feel obliged to ask yet again why FA needs to manage their own hardware at all when they're just hosting a crappy PHP app, MySQL, and a bunch of static files.
-
blah blah things about datacenters
I feel obliged to ask yet again why FA needs to manage their own hardware at all when they're just hosting a crappy PHP app, MySQL, and a bunch of static files.
It's the same reason they don't want to go offline for fifteen minutes to fix something: because they pretend to be a lot more important than they are.
-
blah blah things about datacenters
I feel obliged to ask yet again why FA needs to manage their own hardware at all when they're just hosting a crappy PHP app, MySQL, and a bunch of static files.
I'm gonna take a shot in the dark and say it's probably because their "throw hardware at it" approach stopped being something hosts didn't do or couldn't do, so they settled for squeezing furries for donations + ads and a fat pipe(s) to throw more hardware on.
Or tl;dr: it IS a crappy PHP/SQL app!
Page generated in 1.565 seconds [ 98% PHP, 2% SQL ] (15 queries)
-
Hey, at least it's not doing this any more:
Page generated in 20.35793 seconds (-5299.981% PHP - 5399.981% MySQL [ 5 queries ])
I don't even want to speculate on what might have caused that. It was doing this for a while a couple of years back.
Also, lol, last night it was taking 0.75 seconds per page, this morning it was taking 1, and now it's aiming for 2 seconds. GJ, guys. Great fucking job.
-
I don't even want to speculate on what might have caused that.
overflow :lmao:
also forgot this gem:
Thought I'd throw in a small stick to the massive pile of monuments to the staff incompetence, since this popped in the FA chat just now.
http://pastebin.com/V9Pe6qgf (http://pastebin.com/V9Pe6qgf)
The gist of it is that, CerbrusNL is lead to believe that talking about console modding is illegal and thus closes a previous thread, Joe Modder here starts another thread and complains about the mod being naive about closing the other thread, and guess what happens. CerbrusNL infracts Joe Modder for criticizing the mishandling of a case by a moderator and closes the thread, while said naive mod makes a childish "U mad" type of post.
I didn't really do much of anything, but I felt so much better after getting onto CerbrusNL for their shit. I was surprised to see how far he went to -censor- me before just banning me.
-
If I have to be honest, I'm confused as to why the rest of the staff has no problem with Cerbrus. He's made roughly the same amount of mistakes I did while a mod, but because none of them were stepping on the toes of other mods (well, there was an instance where he decided to call out Ratte for bewildering reasons, so once then), he's apparently fine. Apparently they wanted to permaban my forum account because I argued with Cerbrus about an infraction, stating that I don't show the staff respect, and therefore I should be permabanned. I'm not disrespectful to them in public on FA or FAF, and my arguments are not emotionally charged, and yet apparently it was -so bad- that they wanted to permaban me. If there's anything I learned while being on FA staff, is that select individuals absolutely -hate- it if you argue with them, and will never let it go. It's kind of ridiculous.
-
If I have to be honest, I'm confused as to why the rest of the staff has no problem with Cerbrus. He's made roughly the same amount of mistakes I did while a mod, but because none of them were stepping on the toes of other mods (well, there was an instance where he decided to call out Ratte for bewildering reasons, so once then), he's apparently fine. Apparently they wanted to permaban my forum account because I argued with Cerbrus about an infraction, stating that I don't show the staff respect, and therefore I should be permabanned. I'm not disrespectful to them in public on FA or FAF, and my arguments are not emotionally charged, and yet apparently it was -so bad- that they wanted to permaban me. If there's anything I learned while being on FA staff, is that select individuals absolutely -hate- it if you argue with them, and will never let it go. It's kind of ridiculous.
They have no problem with him because he fits perfectly with their attitude, and that's about all there is to it. God forbid you make someone in power look bad, it might make the users distrust us!
-
<&yak[away]> Eevee_: Yes and no. Trogdor is still set up as both the file and the app server, so it runs both. I can not exactly pinpoint yet why php coredumps occationally and the resulting ~10-15 sec of whitescreens, but LA ~85 during peak time might have something to do with it.
<Eevee_> yak[away]: holy fuck
<Eevee_> are you telling me you have 44U
<Eevee_> and eight machines
<Eevee_> and you are using one of them
<kay> two, theres still a machine for SQL I gather
<Eevee_> oh yes phew
<&yak[work]> Eevee_: three, if you count the ad server: database, file + application, and advertisments. We've only recently obtained all that additional hardware and have yet to put it to use - which will probably include a second file server, second database and two app servers, the latter two of which will probably be load balanced. The rest will be for web and VPS hosting and sister projects.
I could expend the energy to circle everything that's wrong with every one of yak's words, but instead I'll just point out that their web-hosting thing was supposed to be up in 2008, and they're still fumbling around with it.
That, and when something starts dumping core, you chuck that shit into a debugger.
BONUS:
<Eevee_> yak[work]: how did the ad server end up as a dedicated machine?
<&yak[work]> A VPS that's beel allocated half a dedicated machine. Because OpenX is pretty resource demanding, retardedly so in my opinion. Just as I've come to expect from any "management system" that comes free.
<&yak[work]> And even those that don't. It's a frustrating trend that any relatively serious PHP app ends up being slow and bloated.
The doublethink is just fucking palpable, especially considering that just a few days ago yak claimed that his own code is "very light on both the memory and the CPU, fast, streamlined, optimized and minimalistic (http://www.furaffinity.net/journal/2041783/#cid:16777262)".
-
That, and when something starts dumping core, you chuck that shit into a debugger.
Because I know he reads this:
$ ulimit -c unlimited
$ $PROGRAM
$ gdb $PROGRAM $CORE_FILE
(gdb) thread apply all bt full
Yes, it really is that easy.
(Whoops, throwback to an earlier time when I did `ulimit -c unlimited` (or its equivalent elsewhere) in my init files and got into the habit of doing `ulimit -c 0` to keep from filling my disk with core dumps. Totally my bad.)
-
Since we're talking about their hardware...
Over the weekend it was discovered that their monitoring server still had the default "guest" account enabled. By default, Cacti installs with the guest account enabled but many of the features are disabled. Historic graphs don't work, but real-time ones do, meaning you could get a brief snapshot of Trogdor's resource usage, and other interesting notes. Keep in mind, these screenshots were taken around 3AM, so these are far from being peak times.
First off, we see that Trogdor has the worst uptime of all the servers, and also has the highest ping.
(http://img707.imageshack.us/img707/5567/trogdoruptime.png)
(http://img59.imageshack.us/img59/2540/trogdorload2.jpg)
(http://img710.imageshack.us/img710/8220/trogdormemory.jpg)
Apparently it didn't save, but Trogdor's CPU usage was hovering around 90%. It jumped up to 100% a couple times.
I assume this is why they're looking into buying a new fileserver, this one's almost filled up!
(http://img202.imageshack.us/img202/1963/trogdordisk.jpg)
(http://img517.imageshack.us/img517/3786/yakemail.jpg)
As was noted in the code leak, Yak receives a copy of every email the server sends.
(http://img192.imageshack.us/img192/330/uplink.jpg)
Another interesting discovery (note that these reports were not working), Dax, who's only tie to FA is being the IRC admin, was set to receive the "top downloaders" lists. (http://img828.imageshack.us/img828/6240/daxr.jpg) Why the IRC operator needs the list of the top downloaders on the mainsite is beyond me.
-
Another interesting discovery (note that these reports were not working), Dax, who's only tie to FA is being the IRC admin, was set to receive the "top downloaders" lists. (http://img828.imageshack.us/img828/6240/daxr.jpg) Why the IRC operator needs the list of the top downloaders on the mainsite is beyond me.
I believe Dax was a tech admin of some sort for a short time on FA. AFAIK, he set up some equipment for them.
He didn't stay a tech admin for more than a few months though, so I really don't know what happened there. Probably explains why he is set to receive that list, though.
-
I believe Dax was a tech admin of some sort for a short time on FA. AFAIK, he set up some equipment for them.
He didn't stay a tech admin for more than a few months though, so I really don't know what happened there. Probably explains why he is set to receive that list, though.
I would believe that, knowing how lazy anyone in charge of things of that nature is with regard to removing someone from a list or position. ::)
-
The Cacti installation is rather new, I believe it only went back to some time in December.
-
The Cacti installation is rather new, I believe it only went back to some time in December.
Hm I'm pretty sure Dax wasn't a tech admin around December.
No idea why he'd be set to receive that data then.
-
The Cacti installation is rather new, I believe it only went back to some time in December.
So did they install an older version of Cacti? I read in the manual that Guest accounts are disabled by default on Cacti so either some dumbass went in and purposefully enabled it or downloaded and out of date version in December:
The latest stable version is 0.8.7g, released 07/09/10.
From here (http://www.cacti.net/downloads/docs/html/guest_access.html):
By default in 0.8.7 and later of Cacti, Guest or Anonymous access is disabled. This is shift from previous release that came with the "Guest" user enabled and set.
Enabling "Guest" access is easy. But, you must understand that you should only allow the designated "Guest" user access to what you authorized. It is not sugguested that you give the designated "Guest" user more than just access to graphs. To enable guest access, first, need a designated "Guest" user. Cacti by default comes with one already created that has access to only graphs. It is important to note that the default guest user has access to all graphs on the system. Once you have created the "Guest" user, you need to tell Cacti what the "Guest" user is. This is done by updating the Authenication Settings and selecting the "Guest" user you have designated. The "Guest" user must be enabled and be set as the guest user for anonymous access to work.
This goes back to children playing around with shiny hardware trying to pretend to be adults - there's no reason to give anonymous access to anything related with administering a website.
-
The Cacti installation is rather new, I believe it only went back to some time in December.
So did they install an older version of Cacti? I read in the manual that Guest accounts are disabled by default on Cacti so either some dumbass went in and purposefully enabled it or downloaded and out of date version in December:
The latest stable version is 0.8.7g, released 07/09/10.
From here (http://www.cacti.net/downloads/docs/html/guest_access.html):
By default in 0.8.7 and later of Cacti, Guest or Anonymous access is disabled. This is shift from previous release that came with the "Guest" user enabled and set.
Enabling "Guest" access is easy. But, you must understand that you should only allow the designated "Guest" user access to what you authorized. It is not sugguested that you give the designated "Guest" user more than just access to graphs. To enable guest access, first, need a designated "Guest" user. Cacti by default comes with one already created that has access to only graphs. It is important to note that the default guest user has access to all graphs on the system. Once you have created the "Guest" user, you need to tell Cacti what the "Guest" user is. This is done by updating the Authenication Settings and selecting the "Guest" user you have designated. The "Guest" user must be enabled and be set as the guest user for anonymous access to work.
This goes back to children playing around with shiny hardware trying to pretend to be adults - there's no reason to give anonymous access to anything related with administering a website.
They had something like 0.8.7c.
:|
-
Bumping with two things.
One, it's been a couple months and they still don't have their hosting service up like they said they would have done by now. There hasn't been a single mention of the new UI and it's progress, and the new help and support site turned out to be a neglected Knowledgebase that's just sucking money out of Dragoneer's wallet. I wonder how the work on the "commission ratings system" is going... Something tells me it won't launch for a while because Dragoneer is currently quite far behind on the Iron Artist he wanted to be done by May and doesn't want any negative comments for taking so long!
Two, it's now been two weeks since Japan was devastated by an earthquake and tsunami, and FurAffinity has finally taken notice and posted a news article about it.
The tsunami in Japan has affected us all in some way. To help our friends in Japan we've put up link to the Red Cross donation page. We encourage people to donate and support those who have been affected by this tragedy.
Do good deeds!
Love,
Fender
Way to look like a bunch of inept, uninformed jackasses, FA. Most sites posted this, y'know, two weeks ago, hours after the earthquake happened.
-
I'm guessing one of the admins noticed a pocky shortage at their local import store and decided that that meant it had 'affected us all in some way'.
Or maybe something like "why hasn't nipponfur posted a new torrent of super princess loli neko-chan in 2 weeks? What, an earthquake? I must inform everyone!"
Points for using the right form of affect/effect though.
-
Points for not making it some kind of skeevy affiliate link.
-
Points for using the right form of affect/effect though.
Effects on our affects have an approximate affected effectiveness
-
Points for using the right form of affect/effect though.
Effects on our affects have an approximate affected effectiveness
You think that's bad (http://en.wikipedia.org/wiki/Buffalo_buffalo_Buffalo_buffalo_buffalo_buffalo_Buffalo_buffalo)
-
Points for using the right form of affect/effect though.
Effects on our affects have an approximate affected effectiveness
You think that's bad (http://en.wikipedia.org/wiki/Buffalo_buffalo_Buffalo_buffalo_buffalo_buffalo_Buffalo_buffalo)
I often find myself using that sentence to simplify things when I need to explain the hierarchy among bison in Buffalo, NY.
Where would we be in this world of infinite knowledge without Wikipedia?
-
Points for using the right form of affect/effect though.
Effects on our affects have an approximate affected effectiveness
You think that's bad (http://en.wikipedia.org/wiki/Buffalo_buffalo_Buffalo_buffalo_buffalo_buffalo_Buffalo_buffalo)
I either want to murder the English language or have terribly raunchy indiscreet sex with it, I can never truly decide which.
-
Hope this isn't thread necromancy, but it doesn't seem worthy of it's own thread: the donations page is back up, as of April 7 (the latest Fender post on the main page). Interesting information includes the current stated monthly cost of the site ($1695). Go to the site and you see Dragoneer wants money orders to a Pennsylvania address. Interesting that he can't accept checks.
I have noticed that every now and again (maybe once a day), FA repeatedly loads up a blank page. Wait 30-45 seconds and it's okay, but rather slow. No idea why that would be.
-
Interesting that he can't accept checks.
He has stated he has (unreasonable) fears of accepting checks for whatever reason. I think they didn't want them to bounce and somehow cost them money. Another theory is that checks would let you see what account it was deposited into, and we all know he likes to use his personal accounts to pay for FA...
-
The leading hypothesis (https://forums.vivisector.org/index.php/topic,455.msg4649.html#msg4649) on the blank page thing is that their PHP interpreter is crashing.
Meantime, Yak showed us evil trolls some code; apparently he's moving the site to use a real bbcode parser now (at least, as real as PHP gets). No word on the coredumps.
-
Interesting that he can't accept checks.
He has stated he has (unreasonable) fears of accepting checks for whatever reason. I think they didn't want them to bounce and somehow cost them money. Another theory is that checks would let you see what account it was deposited into, and we all know he likes to use his personal accounts to pay for FA...
Shit, most banks these days will clear a check with insufficient funds (within reason—they obviously aren't going to clear a $2,000 check when the customer has $-300), and rape their account holder for an overdraft fee. Especially since the passage of so-called "Regulation E", which prevents them from pulling similar shenanigans on bank cards without the customer's consent.
I had a check clear my account literally less than 24 hours after I gave it to the person I was paying. It was only a $20 overdraft on a nearly $600 check, but it cost me $35 in a fee.
The leading hypothesis (https://forums.vivisector.org/index.php/topic,455.msg4649.html#msg4649) on the blank page thing is that their PHP interpreter is crashing.
You know, I'd do the 'hahaohwow.jpg' reaction if PHP really does use an "interpreter" in the technical sense of the term, but then I remember that Ruby had one of those until their most recent release.
JIT is for trolls, I guess?
-
JIT is for trolls, I guess?
Object code is for trolls. Get it right. :)
-
Well this is fascinating!
traceroute to faunited.org (69.25.27.170), 30 hops max, 60 byte packets
1 0.577 ms 0.565 ms 0.682 ms
2 216.182.225.104 (216.182.225.104) 0.664 ms 0.650 ms 0.623 ms
3 216.182.232.66 (216.182.232.66) 0.450 ms 0.570 ms 0.562 ms
4 216.182.232.50 (216.182.232.50) 0.551 ms 0.523 ms 0.510 ms
5 72.21.220.224 (72.21.220.224) 0.579 ms 0.563 ms 0.537 ms
6 72.21.222.146 (72.21.222.146) 1.344 ms 1.465 ms 1.461 ms
7 72.21.220.148 (72.21.220.148) 1.616 ms 72.21.220.124 (72.21.220.124) 1.767 ms 72.21.220.132 (72.21.220.132) 1.751 ms
8 63-233-113-25.dia.static.qwest.net (63.233.113.25) 3.082 ms dca-edge-18.inet.qwest.net (65.120.78.57) 2.269 ms dca-edge-22.inet.qwest.net (63.233.113.33) 4.091 ms
9 dcp-brdr-03.inet.qwest.net (205.171.251.110) 5.203 ms dcp-brdr-03.inet.qwest.net (205.171.251.106) 5.035 ms dcp-brdr-03.inet.qwest.net (205.171.251.110) 5.157 ms
10 bpr1-so-6-0-0.VirginiaEquinix.savvis.net (208.173.52.65) 5.199 ms 5.127 ms 6.112 ms
11 er2-tengig2-4.virginiaequinix.savvis.net (204.70.197.238) 6.626 ms 6.597 ms 5.862 ms
12 internap.VirginiaEquinix.savvis.net (208.173.159.2) 3.544 ms 3.263 ms 3.616 ms
13 border1.pc1-bbnet1.wdc002.pnap.net (216.52.127.18) 3.856 ms 3.536 ms border1.pc2-bbnet2.wdc002.pnap.net (216.52.127.82) 14.071 ms
Going to it via a web browser redirects you to mallware filled "sedoparking.com".
ALSO, it appears they neglected to install the Intermediate CA certificate (http://forums.furaffinity.net/threads/99875-RapidSSL-Intermediate-CA-missing-SSL-Config-problem.?goto=newpost) when they got their new SSL certificate.
I notice that you have not setup the new Intermediate CA required by RapidSSL. This makes Furaffinity via https break for certain browsers and devices. For example, Android Phones running Froyo 2.2.x barf with a certificate error. This makes one less likely to trust using FA until one can reach a PC again, which ruins the mobile experience.
...
They give instructions for how to do it with Apache. Now I know FA uses nginx, so I you will need to "Translate" the instructions for that. Note as it says on the site
"You MUST install the below Intermediate CA file on your server for your SSL certificate to be fully supported in all web browsers."
So far I fought for 1.5 days with this issue on my own sites with IIS7. Even with Microsoft its not point and click for this stuff sadly.
GREAT JOB.
-
Yeah, people have Problems with chain certificates because they're a new thing. Once you grasp the concept, though, it isn't that big a deal.
Anyway, throwing some more shit at that:
$ dig +short faunited.org|sort -n
63.251.171.80
63.251.171.81
66.150.161.140
66.150.161.141
69.25.27.170
69.25.27.173
70.33.186.218
What. Seriously, what. Only one of these belongs to FA (70.33.186.218), the rest are owned by "Dotster, Inc", some VPS provider.
So, I throw a GET out at all of these:
$ for i in `dig +short faunited.org|sort -n` ; do printf 'GET / HTTP/1.0\r\nHost: faunited.org\r\n\r\n' | nc $i 80 | sed s/http/hXXp/ | egrep HTTP\|Location ; echo ; done
HTTP/1.1 301 Moved Permanently
Location: hXXp://www.sedoparking.com/search/registrar.php?registrar=dotstersecondary&domain=FAUNITED.ORG&site_id=4798
HTTP/1.1 301 Moved Permanently
Location: hXXp://www.sedoparking.com/search/registrar.php?registrar=dotstersecondary&domain=FAUNITED.ORG&site_id=4798
HTTP/1.1 301 Moved Permanently
Location: hXXp://www.sedoparking.com/search/registrar.php?registrar=dotstersecondary&domain=FAUNITED.ORG&site_id=4798
HTTP/1.1 301 Moved Permanently
Location: hXXp://www.sedoparking.com/search/registrar.php?registrar=dotstersecondary&domain=FAUNITED.ORG&site_id=4798
HTTP/1.1 301 Moved Permanently
Location: hXXp://www.sedoparking.com/search/registrar.php?registrar=dotstersecondary&domain=FAUNITED.ORG&site_id=4798
HTTP/1.1 301 Moved Permanently
Location: hXXp://www.sedoparking.com/search/registrar.php?registrar=dotstersecondary&domain=FAUNITED.ORG&site_id=4798
HTTP/1.1 200 OK
Amazingly, I don't think it's compromised, just someone REALLY fucked up the DNS.
Approximately one out of every 7 times, though, the site hosted in the FA rack will actually load. Again. GREAT JOB.
-
Hmm let's see what are the nameservers for faunited.org
faunited.org. 8605 IN NS ns2.nameresolve.com.
faunited.org. 8605 IN NS ns3.nameresolve.com.
faunited.org. 8605 IN NS ns4.nameresolve.com.
faunited.org. 8605 IN NS ns1.nameresolve.com.
Oh that's interesting, they're not even doing their own DNS? Well what about the whois record, how's that lookin?
Domain Name:FAUNITED.ORG
Created On:16-May-2006 01:28:20 UTC
Last Updated On:17-May-2011 10:54:05 UTC
Expiration Date:16-May-2012 01:28:20 UTC
Wait a second, updated 17-May? Created 16-May? Did these idiots actually let their domain expire accidentally? Were they at least smart enough to use a proxy registrar service?
Registrant Name: Real Name Deleted
Registrant Organization:FA United LLC
Registrant Street1: Address lines pointing to a UPS Store
Registrant Street2: PO Box deleted
Registrant Street3:
Registrant City:Manasquan
Registrant State/Province:NJ
Registrant Postal Code:08736
Registrant Country:US
Registrant Phone: Phone number deleted
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:thewolf@furrywolf.com
Oh.
-
The leading hypothesis (https://forums.vivisector.org/index.php/topic,455.msg4649.html#msg4649) on the blank page thing is that their PHP interpreter is crashing.
Speaking of white screens, is it just me or they are becoming more and more frequent as time passes by?
For a while now, the most white screens I got in one day was 3 or 4, but lately it will be a white screen after few mere clicks/refreshes. Impending disaster maybe?
Edit: two white screens now in a span of mere minutes. And after a talk with some friends of mine I'm not the only one experiencing this.
-
Nah, I managed to mine out of yak that it was actually their database shitting the bed. He's supposed to be putting in a proper error handler for that case, so it'll say "the database shit the bed" every three or four refreshes, instead of just spitting out an empty response.
With his track record, it'll break logins for an hour, he'll blame it on a typo, and it'll still serve up whitescreens occasionally because he didn't actually fix anything.
-
Nah, I managed to mine out of yak that it was actually their database shitting the bed. He's supposed to be putting in a proper error handler for that case, so it'll say "the database shit the bed" every three or four refreshes, instead of just spitting out an empty response.
With his track record, it'll break logins for an hour, he'll blame it on a typo, and it'll still serve up whitescreens occasionally because he didn't actually fix anything.
I'm kinda surprised it works as well as it does with the load they're putting on MySQL. No caching that I'm aware of and I'm sure the queries are appropriate to the education level of the people who wrote them.