Prime Reacts: Creating JSF#*!

[@amr3162]

0:37 creating a slice of a string in V8 just creates a `SlicedString` object which is like a `string_view` it only contains reference to start and end. This actually leads to some funny and unexpected results like when you take a small slice of a 100mb string, the garbage collector in V8 is not able to collect the larger string because the SlicedString holds a reference to it.

[@ThePrimeTimeagen]

that was my suspicion and i wish i would of said that because this comment would of been amazing!

[@vytah]

@@ThePrimeTimeagen Fun fact: Java used to work like this until version 7 update 6, when it started to copy the substring into a new array. Yes, it was a change in a patch release, and yes, tons of code that relied on the previous behaviour suddenly started sporting quadratic performance instead of linear. According to the API, both behaviours are correct, so theoretically it was the API users' fault that they were relying on undocumented behaviour.

[@fulconandroadcone9488]

When he asked the question I thought about and 15 seconds latter I thought, well how do you handle that in a garbage collector? Do you split the string in 3 parts so only one can be retained? How do you handle that? Ah well I guess they would do just a copy and have some parts of the string duplicate. Guess not.

[@GameJunkiesChannel]

Both of us watching vids at 1.5x ain't going to cut it!!!

[@ThePrimeTimeagen]

yeah, i have since stopped doing that

[@GameJunkiesChannel]

@@ThePrimeTimeagen Luv the vids!

[@catalinoprea5313]

:)))))

[@VivekYadav-ds8oz]

for some reason this reminds me of the TCP over TCP problem.

[@ronniebasak96]

2.25x

[@godowskygodowsky1155]

In college, my systems professor once said, "If you're programming in a high-level language like C..." I forget what the context was or how that sentence ended, but those words will echo in my head until the day I die.

[@goblincrimes8524]

Any language is high level if you program by switching individual bits on and off

[@W0lfCL]

I bet ur college professor was an experienced computer scientist from 1970's-80's who coded in machine code, a, b and assembly Ofc C is high level for him

[@VivBrodock]

did my man insert punch cards into his room sized computer?

[@kirbykilledgod]

In an exam I had to write C was a high level language because you were not manually changing registers, it drove me so mad

[@heron619]

Imagine having such a low level in depth understanding of a language that even Prime is impressed by it just to use it to create a meme JSF*ck compiler. What a flex!

[@ThePrimeTimeagen]

such a flex

[@theshermantanker7043]

Well, easily doable if you're bored enough to read the language specification

[@seannewell397]

I love it when you realized about interpolated property access via indexing. Your brain aligned but your heart sank.

[@ThePrimeTimeagen]

hah, it hurt so good

[@techwithattila]

Happy that today I learned something which I can use in my team’s codebase. I’m sure they will like it

[@DesTr069]

Imagine you see there’s a new PR up, one file added, +200k lines, you run it and it just logs a message LMAOOO

[@xarunoba3894]

For "obfuscation purposes"

[@kahnzo]

Your face at 9:56 is amazing. This is the reason that I watch these mostly throwaway videos, that moment that you realize the horror....

[@ThePrimeTimeagen]

haha, it hurts once you realize what's happening

[@Richard-sp3ul]

Hey buddy on Banana: as an English from Bristol. We say put wa'er in the baff. We don't mess about in 'Brizzle', we just say bannaner . On another note so much of the code community is defined by American English and thinking, as an English, I still have to process what you hell you guys are talking about. But I love it.

[@ThePrimeTimeagen]

haha! LOVE THIS RESPONSE

[@marcotroster8247]

If you watched the video until the end, you would have seen the guy transpile his transpiler into JSF*ck as well which makes it even more funny because he actually deduced an entire language with his charset 😂

[@channel_zero]

I have never seen Prime be so shocked and appalled and impressed simultaneously. At 10:08, you can see th- entire head-brain explode.

[@PhilipAlexanderHassialis]

10:05 "He is beginning to believe" 15:31"Do you want to know more?"

[@KyleHarrisonRedacted]

10:50 I remember the first time learning a similar “trick”/“language feature” in php that lets me just dynamically reference an object BY string and thus access any members that dynamically. I wondered.. JavaScript could do that.. And sure enough it could. But in was a flash Developer at the time, and knowing ActionScript2 was based off ECMAScript just as JavaScript was.. sure enough… could do it there too. I suddenly became way too loose and dangerous with that knowledge lol

[@M3R14M.]

3:20 LOL, the guy is so obviously not British. By the way he pronounces words ending with 'd', I'd say his native language is Dutch.

[@SimGunther]

TECHNICALLY you could write low level stuff in JS or Haskell, but the results are...macabre to say the least.

[@el.bromas]

macabre

[@kellybmackenzie]

Haskell actually has really good C interop! And it has pointers too. You can do manual memory allocation/management with Haskell just fine (in the IO monad, of course), it just sadly isn't fast as C (for obvious reasons). GHC (the main Haskell compiler) has a lot of tools that make it really easy to call C from Haskell and vice versa, it's super neat! The only downside is that cross-compilation is really hard with GHC.

[@HelloThere-xs8ss]

This was actually the primary way JS was to be written. The people got it wrong.

[@tokiomutex4148]

let first = undefined;

[@ThePrimeTimeagen]

GET EM, and i love you my little, safe mutex

[@7heMech]

If they only compiled the compiler, it would have been perfection.

[@DrewryPope]

"you don't make a compiler by accident" ehehehehehehe are you sure

[@ThePrimeTimeagen]

yeah, i was caught off guard by that

[@theodorealenas3171]

This is one of the things where C would actually be easier to use for. Because chars are one byte integers. I don't know, but the same tricks would probably be much easier.

[@RunningRay9]

but even if it's easy to construct any string, i don't think in C you can run strings as code tho

[@dancom6030]

This sort of thing would be impossible in c because it's a compiled language with no type coercion.

[@theshermantanker7043]

​@@dancom6030Type coercion is literally everywhere in C, there's a reason it's a weakly typed language

[@dancom6030]

@theshermantanker7043 yeah idk what I was saying lol. Technically this kind of thing actually is possible because global strings in C are executable. It's just that that code would then be highly platform dependent.

[@mario7501]

I have never written javascript, but I'm also no longer surprised that I haven't been able to switch Microsoft accounts when logging into Microsoft teams without deleting my browser cache.

[@fulconandroadcone9488]

I don't think that has as much to do with JS as it has to do with Microsoft

[@rthurJ]

It's really only missing a benchmark, pretty sure going low level like that is going to yield some sweet performance gains /jk

[@theodorealenas3171]

lol. I made a BF program once which did division, and to divide 2 digit numbers it took like half a second? I don't remember. That was BF, not JSF.

[@elin4364]

I mean in the end its basically just eval-ing a string of normal js code right? So once you've parsed through everything it should be reasonably fast

[@dus10dnd]

"It sucks to invent something and also get it wrong." So much truth!

[@EwanMarshall]

I would point out, we figured this out in C ages ago, and there are so many ways to do it there we ended up with the international obfuscated c code contest, ioccc :D

[@shimadabr]

Imagine an employee rage quitting a small company and changing an entire project to work based on this unholy implementation haha. Wrap everything to work like this underneath the hood and only the next cursed employee would notice it hahaha.

[@seannewell397]

The feels when he reached for hex! THE FEELS

[@DriveandThrive]

Extreme extreme JS : we can convert all of JavaScript to only Zero's and one's and write anything mind blown**

[@NuncNuncNuncNunc]

@3:25 Don't get Prime started on how brits say "bag" or "flag." JS: true + "0" = "true0" Also JS: true + true + "0" = "20" and since addition is commutative: Also JS: "0" + true + true = "0truetrue"

[@antsii]

love that winky winky after you got all that delicious food

[@ThePrimeTimeagen]

its the best way to live your life

[@godowskygodowsky1155]

3:10 Intrusive R and linking R are common in SBE because Anglophones hate vowel hiatus.

[@JackDespero]

I read "JSF" and my brain went to "JeSus, Fuck".

[@danser_theplayer01]

Mfer out there writing code in Galactic Basic language from Star Wars.

[@rumplstiltztinkerstein]

We should create a transpiler that converts javascript code into that format.

[@KnightMirkoYo]

This video literally shows it in the end :)

[@luisguilherme2403]

Bro just summoned food in the middle of the live

[@psilogismo30]

The cool thing: JSF#* behaves more consistently than vanilla js!

[@andythedishwasher1117]

I've seen this before and I took it as a kind of thesis on how Javascript is a high level language for a reason. Tbh, it was the first language I was exposed to and I find myself increasingly disliking it the more I explore outward. It's a language made of hacks because 90% of its history consists of people hacking it to do stuff it wasn't previously designed for.

[@beebakrizzle]

Make a jsf interpreter in Rust for blazing fast performance

[@ab.3800]

I rewrote this “compiler” in about 500 lines of C

[@derzw3rg]

At 10:08 prime had a small meltdown.

[@AndrewTSq]

Imagine first day at work, and you have to debug jswtf code :) ive seen this been used to obfuscate code for malware, since the virusscanner dont have any idea what is going on.

[@RedHandedBug]

"I am that guy" - ThePrimeagen

[@ko-Daegu]

This is helpful really helpful for obfuscation when we pentest web apps

[@TeodorDimitrov1991]

Please watch videos at 1x speed.. otherwise love the content

[@ThePrimeTimeagen]

i have stopped doing this as it doesn't allow people to speed tihngs up :)

[@xdman2956]

its funny to me that you have to get backslash character despite it being in the character list

[@jacoblockwood4034]

btw for the ppl in chat who are all WRONG: brainfuck is not inspired by javascript, jsfuck is inspired by brainfuck. sorry for the nitpick

[@yeahaddigirl]

Feed the source compiler into the compiler and make it self contained

[@seannewell397]

THE FUNCTION CTOR Goooood damn this guy

[@suman_js495]

Really? Is there a compiler that can turn the normal js into that? 😮 If it does can you share the name of the compiler? Thanks

[@martijn3151]

The start of the video was right, this truly was some low level JS code trickery.

[@soyitiel]

Video should have ended at 21:49

[@CaptainWumbo]

the only usecase for this is obfuscating malicious code. Probably a little more subtly than running the whole application through this, but you could probably sneak a line into an open source project abusing coersion and claim you're a genius who is just doing fast inverse square root.

[@ExpertOfNil]

Low Level Learning is shaking his head in disgust right now 😝

[@draguve3821]

This is high level rop chaining

[@samtv19981]

Haha I hoped you would cover JSF (Java Server Faces).

[@loganhall1529]

God had no hand in this

[@heron619]

Bananer

[@ThePrimeTimeagen]

got me

[@hexdiqoreprime7974]

Now this is code.

[@ofeenee]

You can turn an open source JavaScript into a closed source JavaScript available publicly using this compiler. 😂

[@kebien6020]

Not really, if you just remove the () at the end you get a function instead of calling it. You can then call .toString() on the function and get the decoded source code. For reversing any JSFuck compiler output, and not specifically this one, there is also the option of monkey-patching eval and Function.prototype.constructor to print out their input before eval'ing it. Kinda like this const original = Function.prototype.constructor Function.prototype.constructor = code => { console.log(code); return original(code) }

[@isaakarslan9485]

I thought this video was going to be about primagen implementing Java server faces in rust 😂

[@ollystoppa9155]

Is this a payload obfuscation masterclass?

[@Ironication]

God, I love this language.

[@xBZZZZyt]

00:40 which JavaScript engine?

[@Veptis]

Hrey hoodie prime? Is this how esolangs started?

[@JacobCanote]

No words!

[@Kavukamari]

no words, only ()[]+!

[@draakisback]

I think I want to write a lisp compiler using a JS fuck compiler. I've seen this video before but it's always impressive. Seriously though this is probably the biggest fuck you to any serious JavaScript evangelist. Every time they say their language is so great and so safe, all you have to do is show them this.

[@venc0r]

I'm dying here

[@ThePrimeTimeagen]

in a good way?

[@Ikxi]

why at 1.5x??

[@danser_theplayer01]

They meant low level OF javascript.

[@seannewell397]

Legend

[@romanmaciel8072]

Cool but is that a default dunst notification I see in the corner? Real programmers rice.

[@JhonatasRosendo]

I clicked thinking this was gonna be about Java server faces 😅

[@4idenn]

Why is this even possible...?

[@economicist2011]

3:15 He's Bri'ish. He can't help it.

[@venc0r]

add a stream command !js for it

[@theideaot]

Like for the floating sandwich

[@vimaximus1360]

just use rust

[@Deepfri3d]

Bloody Rust developers, telling us how to talk in English. Stick your Banana in a compiler Developer Disrespect. Still better than that Theo guy though.

[@unusedTV]

This guy sounds Dutch, not British.

[@sadboisibit]

By "low level JavaScript" I really hope they mean all the C++ under the hood.

[@TomasKonrady]

try THIS with Rust

[@0644dev]

Primeagenanar

[@yuriblanc8446]

baNaNa

[@m1kr0kosmos]

the letter d is *bloat*

[@HaKazzaz]

Hey Prime, I'm gonna save this vid for later when I'm next to a 70' TV. Thank's for not full screening a coding video :)

[@brunomello7499]

first hehe