Root Access - 2016-08-02 (page 2 of 4)

« first day (2188 days earlier) ← previous day next day → last day (2824 days later) »

11:05 AM

LOL

our biggest customers site is down and for a change its not our fault!

@Burgi Time to by a lottery ticket? :P

Lysdexia!

@Leathe Yeah you need to add more points to Dexterity next time you respec.

11:32 AM

I'm left handed so I'd expectr to use it

When I was younger, although I am right handed, I could ride my cycle with only my left hand on the handlebar but not with only my right hand...

Now I can ride without either have touching the handlebar :D

11:57 AM

@Rahul2001 all the time while facebooking

Journeyman Geek

12:10 PM

apparently dogs have handedness too

!!s/hand/foot/

ChatBot John Cavil

@DavidPostill Empty regex is empty

@DavidPostill apparently dogs have footedness too (source)

@Burgi I don't like really like Facebook

I obviously find taking to strangers in the internet more fun

Which is why I'm here ;)

I obviously find taking to strangers in the internet more fun

Dogs With Left Paw Preferences May Be Different Emotionally

@JourneymanGeek

ffs, its like being back in student accommodation here sometimes

12:21 PM

"left pawed dogs were more likely to show such aggression" (toward unfamiliar people)

the milk had leaked in the fridge but rather than clean it up they just left it

Journeyman Geek

lol

milk all over the kitchen floor

me: who's soya milk is this?
account managers: oh its ours and yes we noticed it was leaking....

@Burgi Clearly you have a broken seal on your fridge :)

that i don't care about

but milk all over the floor and being ignored....

also IIS ftp is messed up

i can't get my head around it

12:25 PM

@Burgi You could complain to HR (Health and Safety violation) ...

i will when the office manager gets back from lunch

not going to put it in an email though because i'm not petty

@Burgi You should. It is a serious violation. Somebody could slip and break bones ...

i'll see

Hmm.

"To reduce the number of spill incidents and to ensure any that happen are dealt with rapidly, you need a suitable risk assessment, as recommended in the COSHH ACoP paragraph 77 (c).

Experienced and qualified staff or specialist contractors can identify areas at risk, draw up site-specific contingency plans, recommend response, notification and waste disposal procedures, as well as helping you establish a spill responsibility hierarchy, inspection and safety review timetables and suggesting spill-control equipment appropriate to the fluids you store on site."

serious question: are SSL certs from letsencrypt.org worth it or are they in some way less secure than paid for certs?

Journeyman Geek

12:31 PM

@Burgi they're a full CA

You don't have some options that paid for ones do, but they do the job of "hey, this is really who I am" well

47

A: What makes Let's Encrypt secure?

Same security as other DV certs What prevents me from using this attack on the Let's Encrypt server, and obtaining a certificate for awesomebank.example, and then using it to MITM customers of AwesomeBank without being detected (because I have a valid certificate)? Nothing. If you own the n...

ok thanks

i might try it on our development domain

dafuq

So the "Allow users to choose own username during registration" checkbox makes the entire wiki - every page - take 6x longer to render when enabled.

Regardless if user is registered or not. Or logged in or not. Or if they even try accessing the registration page or not.

@JourneymanGeek Awesomebank.example is probably not that awesome if they are using free DV certificates...

And I've got no time to file a bug report :-/

@Dog what wiki software is this?

12:40 PM

@Bob Foswiki

Heck, it doesn't even matter if registration is enabled or not.

@Rahul2001 the point is someone other than the legitimate owner might get access

doesn't matter if the legitimate owner paid half a million dollars for an overpriced EV certificate

Journeyman Geek

@Burgi its also worth considering, its a lot better/simpler than a self signed cert

(pinning aside)

@JourneymanGeek I'm still using startssl... haven't really found the time/effort to change yet :P

@Dog o.O

@Bob Yeah. Took me a good hour of diff'ing config files to figure that one out -_-

@Dog file a "your software is bad and you should feel bad" report

12:43 PM

Because, y'know, trying all the obviously performance related options like caching, and render paths, had no effect.

@Bob But Foswiki is good and ... I like it a lot

Just this particular option... wtf.

@JourneymanGeek yeah i was going to try a self-signed cert until i remembered those guys and thought "that looks better but why is it free...."

And I've not got time to go through the perl code to figure out wtf it's doing

If it wasn't my last week at work and I already still had four weeks' of work to do, I'd probably look into it properly.

Journeyman Geek

@Burgi cause EFF is good people

(and they get my annual SU mod donation quite a bit of the time)

@Dog perl... I know I hate PHP but honestly perl might be the only thing up there in "pls no" :P

WTF is an annual SU mod donation

@Bob Meh.

12:45 PM

yeah i just wanted to check the level of protection offered was at least equal to a self signed

It's fast, efficient, has excellent enterprise features and isn't an ugly-ass pain in the butt like TikiWiki

@Burgi the protection for you is all the same

@Burgi Pretty much anything is at least equal to self signed

if there was a vuln, it would affect you regardless of whether you used it or not

welcome to the wonder of trusted roots

any vulnerable root automatically puts every single webserver at risk

even if none of them use it

as long as browsers trust it

Journeyman Geek

@Dog blog.stackoverflow.com/2015/12/stack-overflow-gives-back-2015

12:46 PM

Actually, there's a good point - a self signed can be more secure if you know you're the only person who has access to the root authority (i.e. you)

@JourneymanGeek That's them using taxt-deductible excuses to avoid actually paying mods innit

@Dog in that case, it's only more secure if you lock the client to only trust your own root

if it trusts any other (vulnerable?) root, game over

@Bob Well yeah, but for you own domains.

and this applies to intermediates signed by other roots too...

Then again, also good point, by default a browser will accept any trusted root for any domain

Journeyman Geek

@Dog some days, I'm not sure you could ever pay a mod enough ;p

12:48 PM

@Dog yea, that only makes sense when you actually have your own client program

And if you used certificate pinning it wouldn't matter anyway

in which case you might as well not bother with roots and just trust specific certificate fingerprints

which is certificate pinning in a nutshell :P

Isn't there some mechanism that allows a browser to automatically know to only accept certificate authority X for domain Y?

@Dog ya, the only problem with pinning... not very flexible if you ever need to change certs (compromised?)

@Bob OpenVPN happens to do that funny enough :-P

12:50 PM

@Dog I think cert pinning does that

@Bob Well, that's semi-automatic

or does it only pin the cert and not the intermediate/root?

@Dog there's two forms: the auto HPKP, and the manual lists shipped with browsers

I recall there being a mechanism for a domain owner to be informed if a major certificate authority issued a certificate for their domain (and presumably act if they didn't authorise it directly)

oh, turns out HPKP can also specify certs in the chain

@Dog y'know, now that you mention it, I vaguely recall that too

not sure about the specifics though -_-

Something along those lines may work at the client end

Also. CRLs, no idea how they're supposed to work, other than that they bug me al lthe time

12:51 PM

@Dog oh yea, OVPN's 'standard' certificate setup involves setting up your own PKI

that was fun

and by fun I excruciatingly painful

@Dog OCSP now

CRLs are massive lists published

Because I never bothered setting up a CRL server for my own PKI I keep getting "unable to check certificate revocation" in RDP every time I use it

OCSP is a request for a specific cert's status

@Dog yea, HPKP would work. it's still pretty new though

There's a registry entry in Win 7 to disable said checking, but it doesn't work in W8.1 :-/

> HPKP is supported in Firefox and Chrome,[7] but not in Internet Explorer/Edge.[8]

Pfft. Nobody cares about Internet Explorer/Edge :-P

Even Google Maps doesn't work in Internet Explorer -_-

12:53 PM

o.O

(Edge does though)

45

Q: Huge no. of files for Angular 2

I wanted to start a simple hello world app for Angular 2. When I followed the instructions in the official quickstart the installation created 32,000 files in my project. I figured this is some mistake or I missed something, so I decided to use angular-cli, but after setting up the project I co...

javascript angular2

Funny thing is the Google website suggesting you use Edge

"My hello world has 32000 files"

... wat

@Bob Did you accidentally the entire RAR file?

12:55 PM

lol

oh yea, geekbuying decided they can't ship that power bank by EMS

and they didn't offer TNT/DHL

so it's coming by airmail

:(

user image

@Bob ：（

Catlike typing detected?

good luck figuring that one out :D

@allquixotic ?

12:59 PM

Oh god LMAO

：（ vs. :(

@Dog iirc you can disable the cert check entirely if you want :P

Only took me two years to figure out why my CRL isn't working

2

user image

@allquixotic @_@

@Bob Yeah, only in Windows 7 it seems, the registry override to do it doesn't work in W8+

1:00 PM

@Dog LOL

@Dog lol! n00b ;)

Derp.

user image

Registry override? :P

@Bob Oh right, that

@Dog I thought you're not qasdfdsaq?

1:01 PM

@allquixotic nah, Dog just hacked qasdfdsaq's domain

also murdered, which is why you don't see them around anymore

@allquixotic I'm a dog

@Dog your chat profile still says you're a cat

@allquixotic Woof.

@allquixotic Idungeddit

What do you mean still? I've never been a cat. I was born dog.

1:02 PM

user image

StuffIt Expander!

wow, deep art takes ~20mins for a image

with caffe and cpu only mode

Need a server with a CUDA gpu hmm

Azure doesn't have GPU servers :/

@HackToHell EC2 does

@HackToHell yes it does

Yeah, I don't have free credits to that :D

1:05 PM

And spot instances used to get mispriced for them too, letting you get $3 per hour servers for $0.01

@HackToHell Azure has em on N-series

@Bob :O

Awesome!

but only South Central US

Who cares about the latency

yayayaya

thanks @Bob

I remember check a little while ago hmm

looks like it was longer than that

yea they're very new

1:15 PM

Hm it's 15$ a day, I'll be using it only for ~6 hours a day so should be able to stay within my cap with the basic one

Journeyman Geek

user image

Dog.

Hey, I have an on-topic, relevant, pointed question specifically for site vets / CMs / anyone else in the know: When the HELL is Super User going to get the Documentation feature that SO has?!

We neeeeeed that

Never

0

Q: Can saliva destroy my computer?

Usually when I am working with the computer's internals, I have to speak clearly and loudly so that whoever I'm working with can hear me, with my head pointing down. However, sometimes this causes me to spit, and I don't want saliva getting into my computer. We all know that saliva is composed o...

security maintenance

dude what if no chat

@Bob if you use the C++ STL, it is indeed very likely that hello world is composed of a lot of code.

N series isn't showing up if I create

@bob can you see them

Guitar Shoe Dave

@allquixotic first time ive seen this.. This is actually pretty cool.

Wow this is pretty amazing actually

Anmol Raghuvanshi Version 2.0

1:34 PM

morning

@HackToHell Must be South Central US region

I did that, doesn't show up

@oldmud0 The entirety of my VC++ folder only has some 2000 files, and that includes headers.

If you mean the actual STL code, that's baked into the runtime.

Ye but if you use gcc you're in world of hurt

For the Angular one in that question... the runtime would be the browser, IMO.

1:38 PM

If you compile linux, gcc, and binutils, that's 60000 files just to compile hello world

Your hello world made of a lot of stuff kid

@oldmud0 technically, linux and gcc are also common to the browser-runtime if you wanna go that path

browser runtime???

you mean I have to compile chromium, skia, libpng, libjpeg, webm, python

oh gosh this will take vveryy long time

!!learn doaog imgur.com/X4f1skS.jpg

ChatBot John Cavil

@allquixotic Command doaog learned

user image

1:43 PM

ahhhhhhhh

"what kind of a scream is that"

"You have asked more than one question in your post. Please limit it to one answerable question" uh oh somebody lost sense of humor long time ago

!!learn caooaooaat <>http://i.stack.imgur.com/s860n.jpg

ChatBot John Cavil

@allquixotic Command caooaooaat learned

user image

not gonna learn that one but lol

hm I'm not seeing it either @HackToHell

aha, can't see it from 3 different subs.(Company has 2)

It's not rolled out to the general public yet then ?

1:46 PM

@HackToHell Possibly. Some people saying Sept, pending Server 2016 release.

but it's apparently in "public preview"

Oh there's still a month to go then hmm

I'll write to them

I actually saw it in the pricing list just earlier today, which is why I mentioned it :P

and ask for it ^_^

perhaps they might enable it

@Bob yeah they have added it

@oldmud0 you worry about the weirdest things

Ｉ　ｗｏｒｒｙ　ａｂｏｕｔ　ｔｈｅ　ｗｏｒｒｙｉｎｇ　ｏｆ　ｈｕｍａｎ　ｗｏｒｒｙ

Oh looks like I used fullwidth font. Sorry for offending anyone who thinks I am a weeaboo now.

1:49 PM

That actually surprisingly looks much better on 4k than on 1080p

Ｉｔ’ｓ　ｂｅｃａｕｓｅ　ＣＪＫ　ｆｏｎｔｓ　ａｒｅ　ｇｅｎｅｒａｌｌｙ　ｖｅｒｙ　ｈｉｇｈ－ｑｕａｌｉｔｙ

Ｗｈｙ？　Ｂｅｃａｕｓｅ　漢字

user image

what is that, FTL CPU architecture?

Damn

Oliver Salzburg

That is an incredibly helpful flowchart in case you need to confuse someone

2

Journeyman Geek

2:05 PM

@allquixotic No idea - you should ask this on meta

@OliverSalzburg lol

Journeyman Geek

@OliverSalzburg instructions unclear - Accidentally destroyed planet with overripe pear

Why does SE NOT TELL ME WHEN QUESTIONS ARE CLOSED

It's like a fking canary

Oh look things stopped being reported.

It must be CLOSED

Hey look people are unfunny

Hey look random moderator drops in hey look this answer should be closed because I THINK IT SHOULD

Hey look let's completely bypass public opinion! Screw democracy!

CLOSE THE QUESTION FOR ANY REASON AT ALL.

Because I SAID SO.

Ban me ffs for asking questions too good

Fear me. FEAR ME

Because I have such little rep ohhhhh look people care about a number! HOLY COW WE MADE PEOPLE CARE ABOUT A NUMBER!

- jeffy atwoody

Look in an hour I'm going to go back to the office and do some more unpaid child labor for 5 more hours

Oh there goes the moderator here to delete everything..

Hello!

Arrest me moderator, I had an outburst! Sorry!

Journeyman Geek

._.

@Bob I can't figure out where to even start or what the hell that is for

Journeyman Geek

2:21 PM

@Dog maybe you need a flowchart

!! caooaooaat

ChatBot John Cavil

user image

Oh now I get it

At 8 drinks, you switch the torrent from FreeBSD to Microsoft Bob. C'mon, it'll be fun!

> FCC forces TP-Link to support open source firmware on routers in the US
TP-Link settles with FCC after blocking open source and violating power rules

W. W. W... What?! I always bought TP-Link because they had the best support for open source firmwares...

2:24 PM

wow for a 2560x1600 image it takes 20 mins on a grid k2

Deep Neural Networks need a helluva lot of resources :O

arstechnica.co.uk/information-technology/2016/08/…

What kind of a regulatory clusterfuck is this?!

U. S. Enforcing their local regulations on the rest of the world again?! Grrr.

Journeyman Geek

@Dog two things. First, language. Secondly, daaamn, me without my popcorn

what??? I thought FCC wanted to prevent open source firmware to protect airwaves

Journeyman Geek

nope

the ~~neutrinos~~ airwaves are mutating!

Journeyman Geek

2:27 PM

they wanted to prevent overpowered 5ghz routers

5ghz OP

nerf 5ghz

@JourneymanGeek when did we start having warnings for swearing or is it because the Overlords are watching today or something?

Journeyman Geek

@Burgi I do that when I notice

@JourneymanGeek I wish someone made pilot <=> standard cartridge adapters :(

it seems so simple...

Journeyman Geek

See chat.stackexchange.com/transcript/118?m=30342443#30342443 chat.stackexchange.com/transcript/118?m=29108571#29108571 ...

@Bob 0_0

@Burgi the idea being 1) we set boundaries so people know 2) If someone gets huffy, I can say "yeah, I tell people not to"

2:40 PM

@JourneymanGeek and yet TP-Link's violation was nothing to do with the 5Ghz regs but actually 2.4Ghz violations. Which is double weird since the US has higher allowed output than most other countries so setting your router to a different county would actually reduce it 99% of the time.

@JourneymanGeek blog.gouletpens.com/2012/08/… lol

ye but

ah, forget it.

4.1 GHz?

@oldmud0 I edited your question and voted to reopen

For the future, asking "why is my question closed, and what should I do to fix it?" is more constructive than complaining about mods ;)

I hate mods almost as much as I hate cats

doh

I ordered blue ink

then sent them a message requesting black ink

and got black ink

2:47 PM

Lol

...I wanted blue ink

For your converter doohickey?

Bleh

@Dog nah, these are just carts

@electronbeam Bloh

2:48 PM

@Dog blah

half my pens take pilot carts, the other half take standard international :S

Today I have endeavored to Actually™ learn C++ the correct way

Exciting! Which resource have you chosen?

there is no correct way to learn C++

just lots of pain, tears and cursing

@BenN Google, my brain, and some assholes from discord

2:50 PM

close enough :P

ow

@JourneymanGeek so it turns out these cartridges are really hard to open

and that the screw thread bit of the barrel on the Daiso pens is plastic

Jesus christ, another 10 packages and 40 dependencies just to be able to add tags on my wiki

and that plastic cracks rather easily when you slip while trying to insert a cartridge

@Dog what is the wiki

@electronbeam foswiki

@electronbeam hi!

2:53 PM

@Rahul2001 sup kid

Haha, he is a kid

@Dog hence the "sup kid"

Guitar Shoe Dave

cursing starts @ datastructures and on (c++)

anybody know where I can upload last nights 1hr 35m dj set

and delete it 24 hours from now?

Guitar Shoe Dave

soundcloud

not sure

2:57 PM

@GuitarShoeDave too much copyright lol

Guitar Shoe Dave

darn :P

mega?

I want to be able to easily share it lol

user image

@electronbeam you got a server? ownCloud :P

Amazon S3 is free

Guitar Shoe Dave

2:58 PM

programming-motherfucker.com

You'd have to manually delete it after the 24 hours though

« first day (2188 days earlier) ← previous day next day → last day (2824 days later) »

Transcript for

Aug '162

Root Access

For all you Super Users out there. You have backups, right?

computers technology

join this room
about this room

00:00

06:00

12:00

18:00

all times are UTC

site design / logo © 2024 Stack Exchange Inc; legal

mobile