Groups | Search | Server Info | Login | Register

Groups > comp.infosystems.gopher > #685

Re: NEX

Show all headers | View raw

yeti <yeti@tilde.institute> writes:

> "Arti F. Idiot" <addr@is.invalid> writes:
>
>> If you're wanting to play around with Nex I know of two Nex server
>> daemons, nexd (Go-based; see nightfall.city for details) and sonexd 
>> (socat+bash based; see https://rawtext.club/~woog/nex/ for details).
>
> I think checking for sane paths to avoid serving not so public info is
> the only complex part in a NEX server (but there may be libs for that).
> Laziness is one of my well known superpowers and I just needed a server
> to locally test a NEX plugin for Dillo, so I did not care/test much.
>
> Maybe I'll restart may hacks somewhen e.g. with a ZIP as pseudo-FS or
> some other kind of "naturally" being separated from the main FS.  That'd
> make it much easier and lots of editors already can "transparently" edit
> stuff in archives.
>
> Reading beyond this line equals signing a NLA (non laughing agreement):

Now THAT's funny.

But anyway, reading below leads me to think that the NEX protocol is
dangerous.

Not sure what your scripts do. What are the use cases for NEX anyway?

>
>
>
> * NCAT + SH
>
> /!\ Barely tested, treat it as unsafe.
>
> Tested on Debian and OpenBSD.
>
> No automatic directory listings. 
>
> ------------------------------------------------------------------------
> #!/bin/sh -x
> ##
> ## TIADUNSLFANN Is A Dangerously Unsafe Nex Server Looking For A Nicer Name
> ##
> ##  ncat -l -p 1900 -k -c ./tiadunslfann
> ##
>
> root="$PWD"
> alias mute-err='2>/dev/null '
>
> IFS='' read request
>
> if ! realrequest=$(mute-err realpath "$root/$request")
> then	printf "E: bad request '%s'\n" $realrequest
> 	exit
> fi
>
> case "$realrequest" in
> $PWD*) ;;
> *) printf "E: bad request '%s' outside doc root\n" $realrequest ; exit ;;
> esac
>
> if   [ -f "$realrequest" -a -r "$realrequest" ]
> then	cat "$realrequest"
> elif [ -d "$realrequest" -a -r "$realrequest/index" ]
> then	cat "$realrequest/index"
> else	printf "E: bad request, no idea about '%s'\n" "$request"
> fi
> ------------------------------------------------------------------------
>
>
> * MicroPython
>
> /!\ Only minimally tested with MicroPython's ESP8266 and Unix ports,
> treat it as unsafe.
>
> ------------------------------------------------------------------------
> #!/usr/bin/env micropython
> ##
> ## The Ridiculously Simple MicroPython Nex Server
> ##
> ## trsmpns.upy.py
> ##          \   \
> ##           \   editors shall read this as Python source
> ##            but MicroPython != Python
> ##            e.g. sockets are streams by default
> ##
> import os, socket
>
> def main():
>   s = socket.socket()
>   ai = socket.getaddrinfo("0.0.0.0", 1900)
>   addr = ai[0][-1]
>   s.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)
>   s.bind(addr)
>   s.listen(5)
>
>   while True:
>     client_stream, client_addr = s.accept()
>     req = client_stream.readline()[1:-1].decode() # "/req\n" -> "req"
>
>     while True: ## try and ignore errors.
>       try:
>         client_stream.write(open(req).read())
>         break ## req was a file
>       except:
>         pass 
>
>       try:
>         client_stream.write(open("./"+req+"/index").read())
>         break ## req was a dir with index file
>       except:
>         pass
>
>       try: ## silently ignore other types than file and dir
>         client_stream.write("=> ..\n")
>         for f in os.listdir("./"+req):
>           st = os.stat("./"+req+"/"+f)[0] & 0xc000
>           if   st == 0x8000: tc = ""
>           elif st == 0x4000: tc = "/"
>           if st: client_stream.write("=> "+f+tc+"\n")
>         break ## req was a dir without index file
>       except:
>         pass
>
>       break
>
>     client_stream.close()
>
> main()
> ------------------------------------------------------------------------
>
> <https://web.archive.org/web/20240524223243/https://yeti.tilde.institute/dillo-screenshots/20240401-074634__dillo__trsmpns_at_home.png>
> <https://web.archive.org/web/20240524223242/https://yeti.tilde.institute/dillo-screenshots/20240401-181148__dillo__trsmpns_on_ESP8266.png>
>
> * The End.
>
> Both were fun for my use case, YMMV.

Back to comp.infosystems.gopher | Previous | Next — Previous in thread | Next in thread | Find similar

Thread

gopherddit Daniel <me@sc1f1dan.com> - 2024-06-16 07:36 +0000
  Re: gopherddit Marco Moock <mm+usenet-es@dorfdsl.de> - 2024-06-16 12:23 +0200
    Re: gopherddit Daniel <me@sc1f1dan.com> - 2024-06-21 08:03 +0000
      Re: gopherddit Francis <fran@cis.com> - 2024-06-22 04:51 +0000
        Re: gopherddit "Arti F. Idiot" <addr@is.invalid> - 2024-06-22 06:50 -0600
        Re: gopherddit Daniel <me@sc1f1dan.com> - 2024-06-23 19:59 +0000
          Re: gopherddit "Arti F. Idiot" <addr@is.invalid> - 2024-06-24 07:46 -0600
            Re: gopherddit Daniel <me@sc1f1dan.com> - 2024-06-24 15:27 +0000
              Re: gopherddit "Arti F. Idiot" <addr@is.invalid> - 2024-06-24 18:02 -0600
                Re: gopherddit Daniel <me@sc1f1dan.com> - 2024-06-28 11:59 -0700
                Re: gopherddit "Arti F. Idiot" <addr@is.invalid> - 2024-06-28 14:55 -0600
                NEX (was: gopherddit) yeti <yeti@tilde.institute> - 2024-06-29 03:42 +0042
                NEX (was: gopherddit) yeti <yeti@tilde.institute> - 2024-06-29 03:46 +0042
                Re: NEX Daniel <me@sc1f1dan.com> - 2024-07-03 00:56 -0700
                Re: NEX Lawrence Woodman <lorrywoodman@gmail.com> - 2024-07-04 06:54 +0000
                Re: NEX "Arti F. Idiot" <addr@is.invalid> - 2024-07-04 08:13 -0600
                Re: NEX Lawrence Woodman <lorrywoodman@gmail.com> - 2024-07-04 19:38 +0000
          Re: gopherddit Francis <fran@cis.com> - 2024-06-25 02:22 +0000
    Re: gopherddit Daniel <me@sc1f1dan.com> - 2024-06-23 11:32 +0000

csiph-web