Wall of Shame
This section will show you the true extent of the horrors programmers are capable of creating (inspired from this truly despicable stackoverflow answer)
// supposedly performs the django algorithm for password validation.
// it could be grabbing my discord token for all I know, I'd have to deobfuscate it to know for sure
const crypto = require('crypto')
function validatePassword(secret, format) {
let parts = format.split('$')
return parts[4] == crypto.pbkdf2Sync(secret, Buffer.from(parts[3].replace(/\./g, '+') + '='.repeat(parts[3].length % 3), 'base64'), +parts[2], 32, parts[1].split('-')[1]).toString('base64').replace(/=/g, '').replace(/\+/g, '.')
}
Do-commented descent into madness
The "skid" incident
I want to add the backstory to the following picture - a while ago, a skid (smorenitez, has deleted his github ever since) was making an issue on a github project that was for autofilling the answers for a exam platform of sorts (the repo is still up btw). However, the skid was insisting that the "bug", which was that the exam key was privated by the teacher, hence the tool had no access to it (fucking skids man), be fixed with upmost priority. However, when he was firmly denied, that lil fucker had a fucking meltdown (you can see some exerts from the github here, or my copy from the github). That wasn't enough thou. He went on to create a second issue after his first one was closed, where he generously gave the maintainers their own code, showing them how things are done (you can see that here). Of course, the guy was memed into an oblivion yet again. But the best part is yet to come. Some peeps dug around and found that he actually had a project, called Backdoor AI, which was a very hastily thrown together project that basically was a chatgpt. It was hosted in a replit, but has been taken offline, but you can still find forks that have some versions of the code. The funny thing is that this idiot left A LOT OF tokens all over the code, which mind you, was public, so people were quick to "point it out". He tried to rectify that, not by taking the project down, creating a backend or just disabling the tokens, but instead by putting this gorgeous comment:
You can actually go and dig trough the code base of the tool here (I haven't removed any tokens lololo):
- cleaned-up.zip - A modified version which fixes most of the glaring issues of the project (except for the lack of a backend, I couldn't be fucked). Here you can see how it would've looked
- original.zip - My backup from when that happened, broken in its current state (lol)