« first day (2427 days earlier)      last day (2585 days later) » 

1:00 PM
@FleetCommand ADVENTURE The Colossal Caves. Mainframe computer game. Text-only
 
@GypsySpellweaver not really for the masses though
 
@Burgi It was in its day. There were no full screen 120fps computer games back then.
 
Amateur radio (Ham) is the masses, and tend to be in the front of lots of technology.
 
Ah. I thought he was referring to CC :)
 
Packet radio, 2m band, is the father of most of the internet's communications.
 
1:02 PM
@Bob Oven. Also, liquid metal thermal pastes do it at room temperature. Also, high end CPUs and AMD Zen's have heatspreaders soldered on
 
user226528
@GypsySpellweaver I remember typing XYZZY Enter Shift activated a cheat mode in Minesweeper.
 
In any case, when you get this... did you ever upgrade to Android 7 on your S7 and is yours still encrypted?
 
@FleetCommand Maybe I'll try that. Minesweeper, as in the Windows included game?
 
user226528
@GypsySpellweaver Windows 95 only. Removed from later games.
 
user226528
Besides, your screen resolution should be so low as to see the change in the pixel of the top left corner of the screen.
 
1:05 PM
@Bob Hiding from my nemesis. How did you find me? :-o
 
@FleetCommand OK. I'll try it later.
@FleetCommand In ADVENTURE the magic work XYZZY would teleport you between a room of debris and inside the well house at the starting point. The other magic work, PLUGH would teleport from a room called Y2 to and the inside of the well house.
 
user226528
Looks like I was wrong. It's for Windows 3.x.
 
@FleetCommand That I'll have to install to try then.
 
user226528
You know, it has been long time since I have become 21 but I never played a game that is rated 21+. I don't know why.
 
1:14 PM
@FleetCommand Me too, me neither.
 
user226528
Eh... Guess we'll never know. Probably they are not good games anyway.
 
PS games are FinalFantasy series, finished none, and similar (Chrono Cross, etc), and GranTourismo 2. Did some NSES and N64 back when. Now it's almost all computer work. The "game" is to solve the next puzzle, or trace the next logic error.
 
user226528
I finished both Final Fantasy 7 and 8. :)
 
user226528
On PC of course. Not PS.
 
@GypsySpellweaver only puzzle games
 
1:19 PM
@Annaduh hi TOWMN
 
@FleetCommand I foolishly bought FF-XI, couple months later got around to wanting to play it, and found out I needed the net to play it. Didn't have net then, so never installed it.
 
user226528
I never ever touch a MMORPG or MMO of any kind.
 
@djsmiley2k At least turn-based. I ain't got the hand-eye thing for "live action". Gran Tourismo 2 was a fluke.
 
user226528
How about turn-based strategy? I played Shining Force when I was a kid.
 
user226528
And Shining Force 2
 
user226528
1:22 PM
And Shining Force CD.
 
@FleetCommand I've done the real RPG's but not the MMORPGs
 
user226528
@GypsySpellweaver Like, what? Syberia? Diablo? That kind?
 
@FleetCommand Tunnels & Trolls, Dungeons & Dragons. Books and paper, not keys and mice. People in the flesh sitting at a table.
 
user226528
@GypsySpellweaver So, basically, every episode of The Big Bang Theory.
 
@FleetCommand Doh. Had to look that up, should've know what that was.
Wife's watched a few episodes
 
user226528
1:26 PM
Basically, they are band of geeks who love doing a lot of stuff; among those stuff is playing Dungeons and Dragons.
 
@FleetCommand Kind of. Except in my case I was the only geek, and that was the only contact I had with the rest of them outside school. (High school that is).
 
Bob
@Annaduh I am now...
 
user226528
Bye!
 
Bob
@GypsySpellweaver It's supposed to be a revival of an old phone :P
@GypsySpellweaver '06, huh. The original 3310 was released in 2001 :P
 
@Bob Makes sense. Looks sort of like one I remember from '04
 
Bob
1:30 PM
@Burgi Wrong target market, and it'd basically be a Snake-playing brick. 2G turning off in AU means no mobile connectivity.
 
Step dau, was into "latest" phones.
 
Bob
@Annaduh I... kinda saw you enter the room. Also, name reuse :P
@Annaduh No, I haven't updated it since sometime last year. Don't really want to break/fix anything :\
Maybe when I have some free time again (like, at least a day or two uninterrupted on weekend just in case) so I can fix it if it breaks.
@GypsySpellweaver Depends on how you use it, of course, but I find my phone spends most of the time as a portable web browser :P
Some people like gaming. Others use it for music (I do that too).
 
Bob
And of course chat/sms/phone.
 
@Bob My phone gets about 30 min/month of use. two/three short calls/week, half-dozen texts. done.
 
Bob
1:33 PM
@Rahul2001 Uhm. You realise that PHP script is unsafe in just about every way? -_-
 
90% of calls are to check card balance :)
 
Bob
The first and most glaring is if someone specifies a file name of ../ they can break out of your target directory
@GypsySpellweaver Heh, I might use the actual phone functionality less than you
text/chat is so much more convenient when it's not urgent
 
I would carry a second phone if it would make my voice call life easier :P
 
 
I use my iPod touch kind of like a smart phone. play music and patience. Look up bus schedules, Dr. appointments. that's about it.
s/patience/solitare/
 
Bob
1:37 PM
@GypsySpellweaver Yea, I suppose that's what most of us use our phones for, only with just one device (convenient!)
Also, phone (data connection) => real-time timetables ;)
 
iPod + wifi = internet, ditto
 
Bob
@GypsySpellweaver Oh, public wifi? Or just at home?
 
busses are wifi, and I get it lots of places courtesy of TWC (my home internet provider)
 
Bob
public wifi is only just becoming a thing here around now
 
@Bob How so?
 
Bob
1:39 PM
I don't like it much tbh... often slow, generally insecure
5 mins ago, by Bob
The first and most glaring is if someone specifies a file name of ../ they can break out of your target directory
Obviously no authentication to speak of
 
If they see what bus I'm going to catch I won't worry too much.
 
Eh, it's for internal use by me
But okay, I'll add a warning
 
Bob
File extension filtering is often ineffective - e.g. if I rename a PHP script with .jpg the PHP interpreter will happily execute it
@Rahul2001 That's what you think, but if the machine is connected (say, to your school network) then technically it's in use by everyone on that network
 
@Rahul2001 With a publicly accessible URL that you posted on your blog ;)
 
@OliverSalzburg Oh shit, I forgot to remove it :P
 
Bob
1:41 PM
lol. whoops?
 
The .exe I just uploaded was just for kicks
 
Bob
LOL
 
@OliverSalzburg \o/
 
Bob
actually, one sec. @Rahul2001 mind if I try to break it? :P
I promise to avoid breaking the rest of the server
 
@Bob Sure, go ahead
 
1:42 PM
Dude, @Rahul2001 O____O
Shut down your web server bro :D
The stuff you can find with only the slightest bit of digging...
 
@OliverSalzburg Hm... :P
@OliverSalzburg hm. what did you find?
the tiscontrol directory doesn't have anything that will be useful to you
 
@Rahul2001 Phone number and email address is like right there :D
 
@OliverSalzburg oh shit. shit.
Right, okay, removed
sigh
 
Good ;)
 
Bob
@Rahul2001 Ok, at least your PHP interprefer doesn't parse everything
the phpinfo didn't execute :P
still, poor form to have these vulns
 
1:45 PM
@Bob lol
 
Bob
IIRC there's a way around it
This is a very common vuln in poorly-written PHP scripts -_-
but I can't remember what that way was
so you're safe for now :P
 
:P
 
Bob
but yea
 
@Rahul2001 @OliverSalzburg @Bob This is entertaining, and I hate to leave in the middle, but I got other duties. Have fun.
 
Bob
take that script off please
 
1:46 PM
@GypsySpellweaver This happens here often
@Bob Yep, will do
 
Bob
and don't host it anywhere publicly accessible... or even locally-accessible if there's literally anyone other than you on the network
@GypsySpellweaver cya
@Rahul2001 I'm gonna try one more thing
 
@Rahul2001 this is why you can't have nice things
 
@Bob have removed from blog post
 
Bob
Actually never mind, the extension restriction is kinda protecting you from the worst of it for now :P
 
@Bob lmao, okay
 
Bob
1:49 PM
I can still probably replace any image on your site, but replacing the core pages is harder
 
@Rahul2001 With scripts like that, try to have minimal protection with HTTP Basic Auth or checking for the existence of a specific HTTP header/cookie. This is not only a security feature in regard to keeping people out. It's also a security feature against accidents caused from other errors
 
Bob
@Rahul2001 you really should remove the script altogether, not just the blog post...
 
@Bob ugh, okay.
@OliverSalzburg okay, thanks!
 
Bob
@OliverSalzburg To add to this, it's better if you (a) host it on a separate webserver from your main site, and (b) restrict it to certain IP addresses
But these are all just attempts at hiding a rather broken script :S
@Rahul2001 you should read this owasp.org/index.php/Unrestricted_File_Upload
> Upload .rar file to be scanned by antivirus - command executed on a server running the vulnerable antivirus software
lol
that one's actually pretty funny
 
@Bob I'll just find a decent script, and password protect it
 
Bob
1:53 PM
@Rahul2001 in your case of just uploading files, consider WebDAV
Personally, I like ownCloud and its WebDAV implementation is decent
 
@Bob Oh, I have ownCloud on my server
But I've never used WebDAV
EW. My eyes! webdav.org
 
@Bob Sure. I just find that adding a simple if to check for a constant is very little effort for what it provides. It's a good start if you have nothing else
 
Bob
@Rahul2001 You... use hashes? wat
 
@Bob for... passwords? intead of plaintext?
 
Bob
@Rahul2001 Yea, it's better than nothing. Except the false sense of security. So it's good to keep in mind that it's pretty much a terrible cheap hack fix :P
 
1:55 PM
posted on March 29, 2017

 
Bob
@Rahul2001 Uh. That doesn't help you, FYI
Hashing passwords at rest protects your users from password reuse issues
But it does nothing to protect you from even passive interception
 
@GFSE that sounds like a punk/death metal band
 
Bob
You basically need HTTPS for that.
 
@Bob I have HTTPS :P
 
Bob
HTTP Digest authentication is kinda halfway there, but HTTPS is bettererer.
@Rahul2001 Not enforced! And your sample curl command doesn't use it!
 
1:58 PM
@Bob Not yet
 
Bob
Having it isn't enough. You actually need to use it :P
eww, lukewarm tea
 
@Bob I de-enforced it because the busybox version of wget doesn't support https
But I switched to curl anyway
 
Is there a better meta q about seemly valid but off topic questions posted with the express purpose of allowing a "valid" but spam answer, like this one meta.superuser.com/q/10715/235569
 
Bob
@Braiam Ask @JourneymanGeek, I think he generally just deletes poor known-suspicious questions (PST-repair is popular) and protects decent suspicious ones.
 
How do I do a * in a question?
just escape with \?
 
2:03 PM
yep
 
@Bob ah. Pretty much same here, except I just gave in case I was sure I remembered someone I know who had an S7 saying they updated and everything was fine.
 
Bob
@Annaduh The rooted part makes it harder. And the whole not-updated-in-ages bit.
@Annaduh Did your update go alright?
 
Now I've updated there seem to be unresolvable issues with root + encryption. Everything else is basically flawless.
 
Bob
Also I'm kinda scared cause my first update caused a full wipe... really CBF setting that up again.
@Annaduh Issues?
 
Root + no encryption seems fine
@Bob bootloop/no boot at all.
 
Bob
2:09 PM
@Annaduh Ow. Fack.
 
@Bob I'm getting really pissed off with all these update guides that just randomly slot in a wipe your device for no reason step and don't point it out.
 
Bob
@Annaduh Oh that reminds me the autoroot had something about encryption on it... Something to do iwth either disabling it or using a custom recovery. can't remember more
@Annaduh was more that I stuffed something up and had to do a full flash
 
@Bob it seems any modification to the bootloader, recovery, or system partition results in a hang if your data partition is encrypted.
 
Bob
@Annaduh Wait, how do I check encryption status again?
 
settings -> storage
 
2:11 PM
@Bob same. You seeing me entering the room earlier was probably me looking up our chat history to see what it was I/we did wrong last time to accidently wipe our phones.
 
Bob
@Annaduh lol. lemme know if you figure it out :P
 
Basically I was looking for this
 
Bob
@djsmiley2k just tells me usage
 
Nov 6 '16 at 16:27, by Bob
> 3. If you want to install another country firmware, or wipe your phone, then use

BL
AP
CP
CSC

CAUTION: This CSC contains a PIT file that will wipe your existing data and return your phone to 'out of the box' or will install another country/network firmware
 
Bob
2:12 PM
@Annaduh ohhhhhhhhhhhh that brings me back
 
But err yeah, now I'm weighing up the options, either going without encryption or downgrading to Android 6 again
 
Bob
yea I think I had a failed flash cause old Odin wouldn't complete on the old HOME_CSC
 
This time I had a backup. Unfortunately I forgot to backup my data. Fortunately I didn't accidentally wipe anything.
 
Bob
The failed flash stuffed thigns up. I tried ot manually fix the CSC but broke it more.
Then gave up and did a CSC flash
but new Odin should work fine with HOME_CSC... I hope
 
Surprisingly setting the phone to 720p display isn't actually that terrible. Barely noticeable fuzziness if I pay attention but that's it
@Bob it does
 
Bob
2:14 PM
@Annaduh battery savings?
 
Didn't you wipe/decrypt your phone when you first rooted it anyway, cause you thought it was required?
@Bob that's the idea, yeah
Not sure how else my Z3C gets 3x the battery life out of a smaller battery...
 
Bob
@Annaduh Smaller screen, only cat4 LTE...
 
Android 7 has quite a few nice improvements on the S7 so I'm not super keen to go back.
 
Bob
I think LCD uses less power than OLED too, especially if on white pages
@Annaduh such as?
 
@Bob well my S4 I was comparing against has only Cat 3 lte
@Bob Blue Light filter? New emoji? :-P
 
Bob
2:17 PM
o.O
 
@Braiam I do more or less what bob said
 
Nah, mostly minor things. Facebook messenger is now unable to hide itself from power saving features, also LTE MCS is displayed on the main debug screen
 
though that is a particularly obvious example.
In most cases you can find something to close as dupe
and there's a few companies in my (mental) list of not good people.
 
Bob
I can't tell if encryption is enabled -_-
think it's disabled by root
 
Still need to root to figure out if I can get any more advanced LTE features working though. Also I broke 3G on my phone last night so flashing it was mostly me trying to remedy that.
 
2:20 PM
@Braiam for most part its "common sense" rules I guess.
 
@Bob hmm. That's what I thought
I recall someone I know saying they unencrypted their S7 to root it and the only other person I know with an S7 on A7 hasn't rooted it
 
Bob
@Annaduh that was probably me :P
 
apparently comic relief caused controversy last week by calling a jaffa cake a biscuit
 
Oh my god.
 
its a damn cake
 
2:21 PM
:O
 
SACRILEGE
 
If you're unencrypted I'd recommend updating. It's nice. I'm yet to find any drawbacks so far except the root + encryption problem.
 
WILL NO ONE THINK OF THE TAX BENEFITS?
 
Bob
@Annaduh CF Auto-Root disables encryption IIRC
@Annaduh ... if it breaks I'm blaming you :P
 
Changing screen resolution on the fly is very nice.
@Bob it didn't for me!
 
Bob
2:22 PM
uh. 10% battery no good for updating yea?
 
If you follow some of the guides that tell you to flash some dm-verity-no-crypt.zip or something at the same time as cf-auto-root, which most guides seem to tell you to do, then that disables encryption and wipes your phone without warning
 
Bob
@Annaduh Did you update from like an April 2016 ROM?
 
@Bob its powered off USB while updating anyway...
@Bob nah, from whatever I was running last autumn when you told me how to update without wiping just after I'd accidentally wiped my phone
Nov 6 '16 at 16:27, by Bob
> 3. If you want to install another country firmware, or wipe your phone, then use

BL
AP
CP
CSC

CAUTION: This CSC contains a PIT file that will wipe your existing data and return your phone to 'out of the box' or will install another country/network firmware
^^ that's basically the actual day I did the update
Oh that was on the way to my Skyscanner interview too I think
 
Bob
TiB'ing 407 apps + data
hm where's my sammobile account
> Device model not found
wat
 
Bob
2:27 PM
I'm on... G935FXXU1APDN
damn my membership expired
@Annaduh Remind me, did you just flash AP?
or the whole lot?
sammobile download page says AP only :S
 
@JourneymanGeek But no examples on meta :(
 
@Bob 457 for me lol
 
Bob
just re-bought sammobile prem for that sweet 1.3MB/s download :P
 
@Bob the whole lot (ap/cp/bl/home_csc)
:36361455
 
Bob
backup is 44% complete
 
2:39 PM
:-o
 
@Braiam If its a dupe, close as dupe. If an answer is spam, flag it. We'll typically deal with the rest.
 
Bob
tomorrow I'll either have Android 7 or be taking a day off work cause my phone's borked...
 
I never had premium, I just download them to my server at some crappy speed then 4G it into my phone on my unlimited 4G plan then MicroSD card it onto my laptop
 
If you want to post a - go ahead
but it's felt redundant so far.
 
@Bob lol -_- it'll only take 5 minutes to restore in a worst case scenario...
 
Bob
2:40 PM
@Annaduh well it's kinda 1:30 AM and at their 'regular' speed I'd be doing the install at 3:30 AM
@Annaduh tbh I have no idea how I'd restore
I don't think I have a full image abckup and I can't remember how to make one
 
@Bob that's fine, I already blamed you for not telling me you knew how to avoid accidentally wiping until after I had accidentally wiped.
 
@JourneymanGeek I was thinking about spam enabling questions where the question was nucked as spam
 
@Braiam notice - the question was nuked after the answer
 
Bob
@Annaduh how do you restore?
just flash the old AP and hope for the best?
ah crap I'll have to redo changes I can't remember to the system partition
at a minimum gsam root needs to be reinstalled
 
2:42 PM
@Bob flashing old firmware always works fine. It's nigh on impossible to brick them Samsung's
 
Bob
@Annaduh oh, not worried about a hard brick. just the data loss :P
 
@JourneymanGeek I guess. I'm only looking for the examples of such questions.
 
Bob
@Annaduh one of the reasons I went back to samsung for this phone. bootloader is effectively always unlocked, and you'd have to really stuff it up to brick it
 
@Bob oh right. Just don't flash csc without home and pray you're not encrypted
 
Bob
IIRC it even has a JTAG mode via the USB port
 
2:43 PM
@Braiam I nuked so much spam before smokey... I don't remember most of em.
 
@Bob yup
 
Bob
or used to anyway
 
Data loss... Do you have TWRP? just make a nandroid image?
 
Bob
@Annaduh ...I can't remember -_-
 
(TWRP breaks encrypted Nougat too)
 
Bob
2:44 PM
55% backed up
at this rate I'll finish the download before the backup
also fast charging + backup = hot
 
I think I might just go without encryption since going without root is painful
@Bob oh I should see if fast charging works with the screen on yet
 
@JourneymanGeek is:q deleted:1 locked:1 score:..-1 ;)
 
Bob
@Annaduh ha, hopefully. it didn't on the S4 either
and with the note7 debacle I doubt Samsung wants to touch the battery code just in case -_-
 
@Bob ooh now you mention it my S4+ was just delivered
@Bob lol that's getting a bit paranoid
Then again Sony's update on the Z3C defaults the battery to reduced capacity mode now
To "extend handset life" because yknow, glued internal batteries and what not
Need to download updated firmware for my S4+ now too
 
Bob
@Annaduh well, I'm not saying they shouldn't. I'm just saying they might decide to play on the safe side and not do it.
 
2:52 PM
@Bob I hope they don't play it too safe with the S8
 
Bob
ya. I want a big battery.
 
Oh hey it's being released today
 
Bob
And by now, they (a) know what the problem was and (b) they're actively checking for it in new devices.
Which is probably more than any other manufacturer did anyway.
 
c) S8s catch fire.
;p
 
Bob
@Annaduh you going for an S8?
huh, funny screen ratio
ugh, 3000 mAh battery on the 5.8" one
and 3500 mAh battery on the 6.2" one
 
2:54 PM
@Bob probably not. I hear they ditched the home button and had to panic update the fingerprint reader onto the back because the under screen fingerprint reader wasn't ready in time
@Bob that's not really unexpected... Basically same as the S7/S7E
Except a tiny bit lower on the Edge that had 3600 before
 
Bob
so. the S8+ 0.4mm thicker (yay), 1mm wider and 10mm longer than the S7E. And has a slightly smaller battery.
:(
@Annaduh urk
oh, they ditched the front buttons? :(
 
@Bob oh, I thought they were keeping them the same size :-(
 
Bob
at least the longer screen makes up for it
I hated sacrificing screen space on the G4 for the onscreen buttons
 
Arf
I can barely reach the HR sensor on the back as it is
 
Bob
@Annaduh no TWRP.
 
2:57 PM
Definitely don't want to have to reach up there every time to unlock my phone
 
Bob
dm-verity verification failed I suppose that's good :P
@Annaduh well I didn't like reaching for the front button anyway so I used smartwatch unlock
I actually really like the fingerprint sensor on the Xperia
it's in the perfect position (side, on power button) and it's much more reliable detection too
proably because the button has a nice indented curve
 

« first day (2427 days earlier)      last day (2585 days later) »