Root Access - 2016-01-02 (page 1 of 2)

« first day (1975 days earlier) ← previous day next day → last day (3051 days later) »

12:03 AM

@Seth That is kinda awesome... Lol. I haven't been on CFH for many months... Maybe even a year... Things got busy at work, and I just never checked back there

Find the Music.SE chat room, and post it there

Please help to close this off-topic question (looking for a resource) that has made it into HNQ.

4

Q: Dictionary of Windows Registry Meanings

(Moved from Stack Overflow) Is there a resource somewhere that details each MS key in the Windows registry, what it determines, what the valid values are and what those values mean? I've looked at the Registry Reference, but that's detailing how to interact with it on an API level, without talk...

windows-registry

Already voted

That's why I think HNQ needs to take stuff down once there is at least one close vote on it

2 more VTC needed.

Agree to your proposal. ;)

@JourneymanGeek Can close it ;)

@DavidPostill Here's the meta post so far (I want to expand on it):

I've seen this a few times in the past few months, where questions that are blatantly off topic are still on the Hot Network Questions list. Great, it has more exposure, and people who are not familiar with the site's rules for what is a good or bad question for the site are voting up or down.

What I propose is that when a question appears on the HNQ list, and there is a vote to close by someone on the parent site, the question is either temporarily removed, or the question is put on the top of the Close Vote queue for th…

Journeyman Geek

@DavidPostill done

12:13 AM

@CanadianLuke Great start. Having off-topic questions on HNQ gives a completely wrong impression to viewers who may come to look at SU for the first time.
@JourneymanGeek Thanks.

@DavidPostill Done

0

Q: Remove question from HNQ if it has close votes

I've seen this a few times in the past few months, where questions that are blatantly off topic are still on the Hot Network Questions list. Great, it has more exposure, and people who are not familiar with the site's rules for what is a good or bad question for the site are voting up or down. H...

feature-request hot-questions

@CanadianLuke Upvoted

T'anks!

@CanadianLuke Yeah, it happened a couple or few days ago as well. Very annoying. Especially when it knocks off a question where one has an answer ;)

Anyways I'm off to the land of nod. Night all...

Enjoy

12:24 AM

Uh-oh. My web host was slammed with a DDOS yesterday and still appears to be under attack.

status.linode.com/incidents/mmdbljlglnfd

My website seems to be up for the time being and host load is normal.

The attack is currently focused on the US South (Atlanta, GA) region.

yeah linode has been having some big issues lately.

Not sure why. It's likely a government actor or other APT.

by government actor do you mean an actual government or someone trying to act like one?

> - Multiple volumetric attacks simultaneously directed toward all of our authoritative nameservers, causing DNS hosting outages
- Multiple volumetric attacks simultaneously directed toward all of our public-facing websites, causing Linode Manager outages
- Layer 7 (“400 bad request”) attacks toward our web and application servers, causing Linode Manager outages
- Large volumetric attacks toward our colocation provider’s upstream interconnection points, overwhelming the router control planes and causing significant congestion/packet loss

Router control planes. Not stuff I understand (and this is one reason I'm planning to get Cisco certified).

In routing, the control plane is the part of the router architecture that is concerned with drawing the network topology, or the information in a (possibly augmented) routing table that defines what to do with incoming packets. Control plane functions, such as participating in routing protocols, run in the architectural control element. In most cases, the routing table contains a list of destination addresses and the outgoing interface(s) associated with them. Control plane logic also can define certain packets to be discarded, as well as preferential treatment of certain packets for which a high...

> a bad actor is purchasing large amounts of botnet capacity in an attempt to significantly damage Linode’s business

I cannot reach the Atlanta datacenter. Pings to speedtest.atlanta.linode.com are failing.

I have no plans to leave Linode anytime soon. It's not their fault.

That Brazilian Guy

1:18 AM

PHP test for an empty variable: empty()

PHP test for a null variable: is_null()

PHP test for a variable being set: isset()

Seriously, PHP?!

2:12 AM

Would there be any benefit from combining a wireless 802.11ac signal connected to the main router with an Ethernet connection to an extender?

Cause I am getting like a 70% speed decrease with this setup I was forced to use

Journeyman Geek

@Ramhound kinda

if you're load balancing you'd have stuff split between them

Well my problem is the extender can either connect at 5.0 Ghz or 2.4 Ghz but then broadcast at only one

or extend both and switch off and on

Journeyman Geek

ahh

but I am using it as a way to have a Ethernet connection to the extender itself, so I could in theory not broadcast anything

Journeyman Geek

if its nearer 5GHZ is a good idea

2:16 AM

next room

plaster walls

But still went from 100Mbs to 30MBs

Of course I then proceeded to screw up the configuration of 5.0Ghz and can't seem to get it to restart

Journeyman Geek

lol

stupid OPenWRT

Just stuck at "Wireless is disabled or not associated"

So what software could I use to combine a USB 802.11 connection to my Ethernet connection?

Just as a test :$

Journeyman Geek

Dispatch proxy if you want free

runs on node.js tho

how does that combine two local connections though?

Journeyman Geek

Its a load balancer essentially

it'll put connections through either

2:20 AM

Ahh

Journeyman Geek

you typically cannot bond two dissimilar connections

2:34 AM

odd

I am getting a better download speed from a 802.11n device then being connected to 5.0GHz 802.11ac and an Ethernet connection to the extender.

How can I determine if Powerline will work in my apartment?

there we go 56 mbps

Journeyman Geek

2:50 AM

I just took the risk ;p

what risk?

Journeyman Geek

I picked up the cheapest kit I could and tried it

Can any old router be an network extender? I didn't even consider using my current router as an extender.

Journeyman Geek

I have no idea

Yeah I am thinking I will go ahead and pick up a 802.11ac USB 3 adapter and a powerline kit

See which one ends up being the best then returning the other one :$

Journeyman Geek

2:52 AM

rule of thumb is you'll get roughly 1/3 the rated speed in real world situations

Its just I really wish I kept my receipt cause now I have this aC1900 extender

Journeyman Geek

I tend to keep mine in a file for warranty reasons

I normally keep mine also

but I literally moved the day before, was thinking I was going to setup my home pc that weekend, ended up waiting over 3 weeks to do it

so it was thrown away because it got taken out of the BestBuy bag :$

( the extender and the phone I purchased )

not the recpeiet

3:08 AM

@JourneymanGeek Oh you can, PPP multilink!

You do however need something at the other end, be it your own, or your ISP's router/endpoint

@CanadianLuke I disagree

A single (or even two) close votes can always be spurious. That's why aside from moderators, no single close vote does anything.

seems straight forward.

hmmm

Journeyman Geek

@qasdfdsaq typically

intel has a nice little connection bonding option which might work with other ethernet brands. Never seen it work

Ethernet bonding is entirely standardized, but only across multiple Ethernet links between the same two devices

But I'm thinking like a 4G connection and an ADSL connection

Journeyman Geek

@qasdfdsaq intel claims you can do it to many routers.

@qasdfdsaq If I can control both endpoints, this would be sooooo useful

even if its a linux PC

Curious

Don't think I'm familiar with that one

Journeyman Geek

3:21 AM

s/router/switch

Although one-to-many "bonding" is not so much even bonding anymore

Unless you're talking about virtual switch fabrics

Journeyman Geek

my other gigabit adaptor's a realtek and its a complete and utter piece of shit

At which point all traditional networking rules go out the window

Journeyman Geek

I'm talking ~~out of my ass~~ something I tried a while back so I'll need to check

Hmm. I think my last mainboard had two Realtek LAN chips on there. Never had an issue tbh

Journeyman Geek

3:23 AM

realtek PCI card...

At my last workplace we did have one-to-many bonding, sorta

A server would have two gigabit links, to two different HP switches

Journeyman Geek

basically would make most linux systems I use go nuts

But the switches themselves were interlinked in a virtual fabrics

Oh

I had a Realtek gigabit PCI card a long time ago, never really used it

Wasn't much of a linux user back then either :-P

Journeyman Geek

Can't even find the settings any more

I run my servers on linux

wanted to upgrade my atom file server to gigabit

ahh

I was thinking of teaming

and that's broken on windows 10 at the moment it seems

Oh well

Teaming, bonding, meh. Used interchangeably

Teaming and bonding tend to be used interchangeably.

If the PCI card is being a pain I'd suggest just getting a USB gigabit adapter

Journeyman Geek

3:30 AM

Oh, I retired the system

and quite literally breaking 2 different distros by using excessive processor power....

Lol

Journeyman Geek

it got replaced by the brix

@bwDraco Cisco certifications won't explain router control planes until at least CCNP level

Hmmm...

Which you can't get until you already have a CCNA.

3:40 AM

I suppose I'd study it a bit anyway.

TBH on the literal subject of router control planes its pretty damn simple stuff

The control plane is just the shit between the supervisor and the forwarding ASICs that let the former tell the latter what to do

Seems you're a CCNP or perhaps even a CCIE?

did qasdfdsaq say anything that would interest me?

Unlike consumer and/or software routing, enterprise routers don't have the luxury of going looking through the whole routing table every time a new flow comes in

P.

Journeyman Geek

@Ramhound no idea.

3:43 AM

Not personally bothered with I.E. It's very specialized. Well, all the Cisco certifications are.

hmmm

I really don't want to unblock him to find out :$ I will just assume it was his typical and forget about it

Also they get progressively more expensive and I had an employer pay so far.

My mom will probably pay for the CCENT and CCNA.

By the time I have those certifications, though, I should be making enough money from my day job to pay for any further certs on my own.

You can easily skip CCENT.

And if you're good at self study and have some background knowledge and experience already, the only thing you need to pay for is about $200 for the CCNA exam, and just use free study materials online

CCNA is $295 for the unified exam.

3:46 AM

@bwDraco Certs are one of my major goals for the year.

o_0

Either that's gone up, or I'm misremembering badly.

Journeyman Geek

Probably yes

Getting my Security+ cert for the single purpose of being able to change passwords for other users on the network

lol

£213. Yeah, I misrememberd

Must have been thinking £120, which is for the individual exams

But its semi-required for that reason so I gota do it

3:48 AM

Not cheap, for what is basically 30 minutes sitting in front of a computer ticking MCQs

Otherwise, you'd take two exams, ICND1 (for CCENT) and ICND2 (which covers the remaining CCNA material).

But hey, if you can do it and other people can't, more money for you.

Yeah I skipped CCEnt and took the combo.

Aside from Cisco IOS specific command lines, most of it is stuff you'd already come across in here or on the main SU or SF sites.

Each of the ICND exams is $150.

Well I have off to watch Die Hard, no idea why, just got an inch for it

You could get 30 Thai massages for that here

4:14 AM

@CanadianLuke I would, but I got autobanned for mentioning her in the first place

@ThatBrazilianGuy No. en.wikipedia.org/wiki/Hidden_node_problem

Journeyman Geek

4:28 AM

@qasdfdsaq banned noooo

suspension? Maaaybe if someone flagged it

4:41 AM

@qasdfdsaq huh?

@JourneymanGeek "Temporary ban", "suspension", eh, I use the terms interchangeably

@CanadianLuke Her moaning on Skype was causing WiFi interference due to the hidden node problem.

Especially bad with streaming/VOIP/VoIP services. Because constant stream of packets = constant stream of collisions

And unlike typical TCP web/download scenarios, they don't automatically shut themselves up for a while after a collision/loss and readjust

Reminds me of those Motorola Canopy wireless links

Journeyman Geek

5:16 AM

@qasdfdsaq chat moderation here is ... unique

Pretty much everything here is... unique... when there's a dog looking after the site :-P

Journeyman Geek

You'd be suprised how many canine (avatared) mods there are ;p

even more when you include canids (foxes).

Journeyman Geek

5:32 AM

yup ;p

@allquixotic There's only one vulpine mod I'm aware of.

(Kit Fox, EL&U mod)

I wonder how many feline ones? :P

Journeyman Geek

I don't remember any off the top of my head ;p

Is OAuth 2.0 a good way to secure an API ?

...

Depends entirely on your needs.

Also should be noted that it doesn't really secure anything. It just provides authentication - you still need to deal with what the user is authorised to access, and you still need to figure out your own login flow and filters to prevent unauthorised access.

Yeah, using OAuth to make some tokens for auth

5:46 AM

It just tells you that user A can be identified by the token 123.

What you do with that information is up to you.

As for whether it's good for your users ... depends.

Some people prefer to link everything to a single account.

The API will be accessed 24/7, OAuth doesn't make sense then cause the OAuth spec determines that the token has to expire after some time(I think so..)

Others prefer to keep all their online identities secret.

The best of both worlds would be to provide both options.

Like SE does, incidentally.

@HackToHell You can refresh a token within a specified amount of time.

But that's ... imperfect. Sometimes it'll drop out anyway.

But if you require non-interactive access a typical way is to allow users to log in with an interactive account, and then generate an API key that they can use non-interactively.

Not to social sites but as a OAuth provider, and this API will be hit upon by a web server application(probably PHP)

So they use OAuth or whatever to log in to your website.

They generate an API key.

Then all API accesses use this key.

So if the key times out and refresh is imperfect, they have to do it again manually

And that might be a problem

5:50 AM

@HackToHell Again: don't use OAuth directly on the API.

That only makes sense when someone might create an application that lets multiple users log in through it.

You should have an application-specific API key.

See how the SE API does it.

See how the Microsoft (Translate) API does it.

See how the Imgur API does it.

Cool, so normal token based auth, I can't figure out how to do the refresh

All the same. All very standard.

Yeah, I saw the google APIs

@HackToHell You don't do refresh. You don't log in with OAuth

Use OAuth to auth with google account, get token

5:52 AM

No.

So for us, it will be OAuth to our site, get token

The OAuth token is ephemeral.

@Bob Yeah you get tokens with OAuth

...And I'm telling you to not use that token for an API like this.

Okay, so OAuth is out of the door then

5:53 AM

If you're going to ignore that, fine. I've told you the standard way it's done for most APIs. I'm not going to try to help you figure out a way to maintain an ephemeral token indefinitely, because that's a fool's errand.

Go play around with the SE API or Imgur API. See how they generate app-specific keys.

Okay, will do that

api.stackexchange.com

@HackToHell To put it simply: there's two ways an app will need to identify itself.

Okay, then a web ui to generate tokens with specific needs(privileges), and lasts indefinitely or based on the client's param.

It will need to identify itself as the unique app. e.g. App Foo at example.com.

Can be revoked from the web ui only

5:59 AM

This is done with a permanent, unique, API key you generate.

It might also need to identify itself as a user who logged in through the app, and perform actions on behalf of that user.

This is where OAuth comes in.

So you have an app-specific key and a user-specific token.

If it's performing anonymous actions, the user-specific token might not even exist.

Say you use the SE app on your phone.

Ah, right, so for my current use case, OAuth doesn't really work out.

If you're not logged in, it just need the app-specific key. Simple. You can't vote, comment, etc., but it can access the API (usually throttled by key + IP tuple) in a read-only way.

Then say you log in via the app. That happens via OAuth. Now the app has your user token too, so it can use the API with that token to perform actions as your user. The key is also sent (for throttling, or maybe app blacklisting, etc., etc.)

@HackToHell OAuth is when you see a need for apps using your API to perform actions on the behalf of specific users.

It assumes there's some interactive component.

@Bob yeah, so for server side apis, it makes no sense

Hmm

@HackToHell Imgur has a really good explanation of how they do it: api.imgur.com/oauth2

See especially the Registration section.

@HackToHell Hm - looks like the Client Credentials is considered part of OAuth too: tools.ietf.org/html/draft-ietf-oauth-v2-22#section-4.4

Keep in mind that's separate from a Resource Owner.

Ah here we go: tools.ietf.org/html/rfc6749#section-2.3

In fact if you just look at section 2 it talks about client registration too.

Aha, the spec itself states that it needs a UI for Auth

6:13 AM

@HackToHell That's only for user auth.

Client (app) auth doesn't.

Yeah, but that has the issue of the generated tokens expiring

And I was the tokens to last

...? no?

Client IDs and secrets are permanent (until revoked)

You're probably reading the wrong section.

Ignore my first RFC link, that was a draft.

   expires_in
         OPTIONAL.  The lifetime in seconds of the access token.  For
         example, the value "3600" denotes that the access token will
         expire in one hour from the time the response was generated.

Okay, lemme read up more on the second link

Gimme a sec so that I can clear this up

okay so I can auth with client_id and secrey_token/key

And that seems to be permanent

@HackToHell That's if you generate an access token (usually for user auth, occasionally for client auth).

If you use the client id and secret directly then it's a non-issue.

6:29 AM

cool, but changing the secretkey/token is probably going to be a bit of an issue

Would be nice if we can simply use public key cryptography on it

I really need to check the authenticity of the source too

hmmm

@HackToHell why would it need to change?

@Bob Because the endpoint has a bit of sensitive data and this will be over the interwebz

Oh look there's HMAC

Even over the internet, the chances of a MITM to get the token between the two servers is slim

SSL will help but that's going to slow it down

6:56 AM

Oh well I'm still confused

I'll ask for more requirements I guess

If it's not that sensitive, OAuth provider might be a good idea

Otherwise HMAC

thanks for the help @Bob

Journeyman Geek

reddit.com/r/space/comments/3z0r5l/… It'll buff right out...

@JourneymanGeek XD

yeah, but the cost of repairing that might be many times less than the cost of building a new one from scratch

Journeyman Geek

;p

Well the idea is to try to bring that down

especially if some of the more expensive components are far from where the fire stuff was happening (since fire has a tendency to destroy things)

Journeyman Geek

wouldn't that make it cheaper?

since you could reuse a lot of em

7:29 AM

tools.ietf.org/html/rfc2104

@HackToHell TLS (HTTPS) is how you protect against a MitM.

@allquixotic IIRC the idea is that it's directly reusable.

8:26 AM

user image

source

O_O

-5

Q: I CANT DOWNLOAD FILE FROM THE INTERNET "INTERRUPTED ANTI-VIRUS BLAH BLAH BALH"

NEED HELP DOWNLOADING FILES FROM THE INTERNET "INTERRUPTED ANTI-VIRUS BLAH BLAH BLAH" I've tried using opera and chrome. I cant use Mozilla because I cant download it

That's almost hilariously bad.

Journeyman Geek

8:49 AM

@Bob maaaaan

That's worse than the question I answered before walkies

superuser.com/q/1020767/10165 ._. See the comments

@JourneymanGeek Actually that one's easier.

Journeyman Geek

@Bob I shouldn't have to tell someone "hey, get a better monitor" ;p

@JourneymanGeek In this case, wrong answer...

Journeyman Geek

and realise that *they hadn't the slightest idea what that would do"

> However I require a minimum of 1920 × 1080 screen resolution to capture webpage screenshots.

Firefox => Responsive Design View => set higher res => click screenshot button.

Journeyman Geek

8:55 AM

@Bob also suggested a VM

._.

Chrome also lets you simulate a higher res but I don't know about screenshots.

Journeyman Geek

See

I didn't know that

lol

Journeyman Geek

You should post that as an answer.

Pretty sure that's a dupe anyway.

0

Q: In browser screenshots of large web pages?

I've had this issue coming up now and again. Sometimes I need to screenshot large pages, however there are situations when the page is too big for any tool to capture. Right now I'm trying to capture a page 40158px in height, and all screenshot plugins in FF and Chrome just don't do anything (s...

browser screenshot

81

Q: How can I take browser screenshots at a higher resolution than my browser supports?

I need to take a screenshot of a website as it would appear on a very high resolution monitor... say 4000x3000 pixels. My laptop's screen has a native resolution of 1400x768. Basically, I need to simulate having a monitor resolution much higher than my monitor and video card actually supports. I...

browser virtual-machine resolution screenshot screen-capture

Journeyman Geek

8:56 AM

hmmmm

The second?

In fact this answer is exactly what I said:

5

A: How can I take browser screenshots at a higher resolution than my browser supports?

Meanwhile (for at least a year or two -- since version 15, if I am not mistaken), Firefox supports this directly via the integrated developer tools. Either hit CtrlShift M or select Responsive Design View from the Developer Tools icon in the stripe menu. That will bring up this view, which will...

@JourneymanGeek Yea, I'm VtC'ing to close as dupe of that one.

Journeyman Geek

lol

This guy actually asked a decent question. Didn't fall into the XY trap :D

So we can give him an easy answer.

Since your intention is to take screenshots of webpages, I have voted to close as a duplicate of a question asking specifically about that. Personally, I would recommend this answer as something native to the browser (for Firefox), though there are other alternatives for Chrome on the linked question. — Bob 11 secs ago

But, yea. He had enough info to be answerable.

@JourneymanGeek What really annoys me is the "blah blah blah" bit. I just want to slap him and yell READ THE ACTUAL MESSAGE DAMMIT

Journeyman Geek

yeah

Journeyman Geek

10:01 AM

@Bob apparently Sword Coast Legend crashes if you go off the main monitor ._.

10:21 AM

@JourneymanGeek o.O

There's an option to lock the mouse to the screen - would that help?

Or maybe turning off fullscreen.

Journeyman Geek

Or turning off/switching the input for the second screen

I suspected it, but I wanted to make sure

Good morning peeps ;)

Journeyman Geek

arf

and barkers ;)

@JourneymanGeek My tiny second screen is always off :P

Journeyman Geek

10:31 AM

@Bob Well, I prefer running dual screen, and leaving stuff like chat open on the other screen ;p

Hm. I'm up to 150 tabs and 5 GB commit.

4.7 GB private working set.

Journeyman Geek

lol

Overall system RAM usage at 51%.

Journeyman Geek

and still stable?

@JourneymanGeek Getting a bit laggy at times, but mostly stable.

Occasionally I'll catch it while it's busy and have to wait a second or two.

Mostly during huge page loads.

This is a beautiful answer:

50

A: Is current source also a voltage source?

A voltage source provides, as closely as it can manage to the ideal, a constant (or only slightly varying) voltage at whatever current is needed (in real supplies, to the limit of the current it can supply) A current source provides, as closely as it can manage to the ideal, a constant (or only ...

10:55 AM

Thailand is so cheap I'm never going back to Singapore

Except on Wednesday, when I'm going back to Singapore

Journeyman Geek

@Bob especially the last bit.

Its a perfect example of a HNQ too ;p

@Bob Ah but it's not!

The last bit is great, but it doesn't to me explain " What is an example of practical current source?"

It only talks about a hypothetical, ideal voltage/current source, like what you'd get in a circuit simulator program, not IRL

Unless on EE "Practical" doesn't mean "IRL"

Journeyman Geek

@qasdfdsaq naw, they expect you to know that

Do you people have any alternatives for the to-be-discontinued Panorama feature of Firefox?

What's the Panorama feature of Firefox?

« first day (1975 days earlier) ← previous day next day → last day (3051 days later) »

Transcript for

Jan '162

Root Access

For all you Super Users out there. You have backups, right?

computers technology

join this room
about this room

00:00

06:00

12:00

18:00

all times are UTC

site design / logo © 2024 Stack Exchange Inc; legal

mobile