i know i am going to probably be banned for this but image uploading and image thumbnails have been broken for many hours with no fix in sight so i should probably go public about what happened
i have a stupid image on my computer. it is a screenshot of a north korean soldier taken from google streetview. i tried to make this image absurdly big at one point but my computer crashed halfway through. now i have a massive corrupted jpg.
i tried uploading this to chacha because i was curious how the site would handle it. i would’ve tried to responsibly disclose this before attempting it but i did not know how to anonymously contact the moderation team, since dms are disabled for new accounts. this inability to reach out to the staff anonymously is also why i’m forced to make this a public post instead of trying to inform them by dms, because i can’t dm them and i do not know how to reach them otherwise. if i can suggest anything from this situation, get rid of the account age limitation on dms, or allow new accounts to still message site moderators.
it would also be much more professional for the site to have a dedicated email address you can contact for security that has a rapid-response, as is standard on most other major websites that have elevated security risk, as chacha does.
whenever i uploaded the image, even before posting it, the site gave me a json error: “unexpected character at line 1 column 1 of the JSON data” and then proceeded to crash. this downtime started at 3:58 PM EST and continued until roughly 4:03 PM EST.
even after the site recovered since then, it is impossible to upload any new images, thumbnails aren’t being processed, and any attempt to access old images times out. sometimes you can get a single small thumbnail to load but it takes forever
my guess is that the image processing server is continuously looping on that one corrupted image or something along those lines, and making it slow to the point of timing out on anything else. it probably needs to be purged from the database, but this also needs to be fixed in general otherwise it will just happen again the next time a bad actor has a similarly messed up image to break the site with.
i acknowledge that posting this could lead to more harm, but i feel that since image uploading is already broken (i’ve tried to post it again and it hasn’t crashed the site, it doesn’t go through at all), and since this hasn’t even been addressed or acknowledged for many hours, it’s important to point this out.
i apologize for the hassle, i did not expect it to cause any problems that would go on this long
well, whatever you do please don’t try to upload it again for lolz. If you seriously think this is happening please contact us on matrix #hexbear-dev:chapo.chat to provide a sample of this site breaking file
Yeah OP break matrix too
No Gods, No Matrix!
Actually though, does internal image hosting allows for jpgrar shenanigans then?