
Research
Security News
Malicious PyPI Package Exploits Deezer API for Coordinated Music Piracy
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
:..: (colon period period colon) is an esoteric programming language based on the manipulation of four unbounded integer registers.
A program in :..:
:
(colon) and .
(period); all other symbols are ignored.Each 4-tuple reads or manipulates one of the four registers A, B, C, D.
The current register is determined by the index of the instruction in the program code. For instance, the first instruction works with A, fourth with D, fifth with A, and so on.
Four possible instructions can be formed based on the position of the colon in a 4-tuple:
Instruction | Name | Meaning | Code |
---|---|---|---|
Noop | Do nothing | .... | |
+ | Increment | Increments the current register value | .:.. |
- | Decrement | Decrements the current register value | ..:. |
[ | Loop begin | Jumps to the loop end if the current register value is not zero | :... |
] | Loop end | Jumps to the paring [ | ...: |
Instructions [ and ] are paired, meaning each [ must have a following ] and vice versa.
Instructions can be combined into compact ones. For instance, the 4-tuple
::..
contains both instructions [ (loop begin) and + (increment).
Compact instructions are executed in the order they appear in the 4-tuple.
Does nothing:
....
Loops forever:
:..:
Alternativelly:
::::
Sets register A to zero:
.... .... :... ....
:... .... .:.. ....
.:.: .... .... ....
..:: .... ..:. ....
The program reads as follows:
C[ A[ C+ A+] A-] C-
Moves register B to register A:
.... .... :... ....
.... :... .:.. ....
.... .:.: .... ....
.:.. ..:. ...: ....
..:. ..:. ..:. ....
The program reads as follows:
C[ B[ C+ B+] A+ B- C] A- B- C-
Copies register A to register B:
.... .... :... ....
:... .... .:.. ....
.:.: .... .... ....
..:. .:.. .... .:.:
.... ..:. ..:. ..:.
.... .... :... :...
.... .... .:.. .:.:
.... .... .... ..:.
.:.: .... .... ....
..:. .... ..:. ....
The program reads as follows:
C[ A[ C+ A+] A- B+ D+] B- C- D-
C[ D[ C+ D+] D- A+] A- C-
Switches register A with register B:
.... .... :... ....
::.. .... .:.: .:..
..:: .... ..:. ..:.
.... .... :... ....
.... ::.. .:.: ....
.:.. ..:: ..:. ....
..:. .... :... ::..
.... .... .:.: ..:.
.... .:.: ..:. ....
.... ..:. .... ....
The program reads as follows:
C[ A[ A+ C+] D+ A-] C- D- move A to D
C[ B[ B+ C+] A+ B-] C- A- move B to A
C[ D[ D+ C+] D- B+] C- B- move D to B
Computes the sequence in register A:
.... .:.. :... ....
.... .... :... ....
::.. .... .:.: .:..
..:: .... ..:. ..:.
.... .... :... ....
.... ::.. .:.: ....
.:.. ..:: ..:. ....
..:. .... :... ::..
.... .... .:.: ..:.
.... .:.: ..:. ....
.... ..:. :... ....
::.. .... .:.: .:..
..:. .:.: ..:. ..:.
.... ..:. :... ::..
.... .... .:.: ..:.
.:.: .... ..:. ....
..:: .... .... ....
The program reads as follows:
B+ init 0 1 0 0
C[ loop forever
C[ A[ A+ C+] D+ A-] C- D- move A to D
C[ B[ B+ C+] A+ B-] C- A- move B to A
C[ D[ D+ C+] D- B+] C- B- move D to B
C[ A[ A+ C+] D+ A- B+] C- D- B-
C[ D[ D+ C+] D- A+] C- A- copy A to B
]
For computing "Hello World," we need to interpret integers in registers as a string. We can achieve this by defining an alphabet and concatenating register values.
Symbol | Binary |
---|---|
| 000 |
d | 001 |
e | 010 |
H | 011 |
l | 100 |
o | 101 |
r | 110 |
W | 111 |
Registers must contain the following values:
Register | Binary | Decimal | Interpreted |
---|---|---|---|
A | 011010100 | 212 | Hel |
B | 100101000 | 296 | lo |
C | 111101110 | 494 | Wor |
D | 100001 | 33 | ld |
Shortened code:
.:.. .:.. .:.. .:.. 33 times
.:.. .:.. .:.. .... 179 times
.... .:.. .:.. .... 84 times
.... .... .:.. .... 198 times
:..: is intuitively Turing-complete as it provides four unbounded registers (two have been proven to be sufficient), elementary arithmetics, and while loops.
A concrete proof is still to be done.
npm i cppc
const cppc = require('cppc')
// [2, 0, 1, 1]
cppc(`.:...:...:...:...:....:.`)
FAQs
:..: (colon period period colon) esoteric programming language
The npm package cppc receives a total of 0 weekly downloads. As such, cppc popularity was classified as not popular.
We found that cppc demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.
Security News
Newly introduced telemetry in devenv 1.4 sparked a backlash over privacy concerns, leading to the removal of its AI-powered feature after strong community pushback.