« first day (854 days earlier)      last day (4031 days later) » 

12:01 AM
Hehe
done
1
A: Can Skype be prevented from snooping? Are there safe alternatives?

D3C4FFThere have been several suggestions that skype is indeed backdoored and evesdroppable. If your concerned about it because Microsoft is now the owner, there are plenty of other alternatives to Skype which I would suggest as the easiest and cleanest solution (besides, if MS is your competitor, why ...

 
@D3C4FF Oh you repwhore! LOL
 
Hahaha. Pretty much word for word right there :P
 
 
7 hours later…
7:09 AM
@RoryMcCune I always hear the collegehumor version...
@RoryMcCune haha, that is awesome. Thought it was going the other way... This is fantastic:
 
> As of this moment I officially resign from my job as software engineer and will take up work on the farm shovelling pig shit, and administering anal suppositories to sick horses because that will be a thousand times more tolerable than being in the same industry as dipshits like you.
> You read the latest post on highscalability.com and think you're a fucking Google architect and parrot slogans like 'web scale' and 'sharding', but you have no idea what the fuck you are talking about.
> You're going to blow some project to hell because you get a woody playing with software like it's a sexdoll.
3
@LucasKauffman yes, we were all teenagers once...
@LucasKauffman I gave a lightning talk / rump talk at an OWASP conference a few years ago. It was supposed to be 5 minutes, at the conference they told us we can use 10 minutes, decided to go a bit slower and did it in 7.
see, 5 minutes wasnt enough of a challenge. So I decided to do the talk together with my boss - two people, 5 minutes, one awesome talk.
Now that's Extreme Rumping.
Actually one of the talks I most enjoyed giving. We had fun with it.
I would agree with the @RoryMcCune and @ThomasPornin - don't put a lot of words if you want them to read it.
you could try having a few words on a slide. Not even a sentence, just a thoughtshard. Make sure its huge font.
Or, fill it with lots and lots of tiny font, making it obvious they are not intended to read it - and prevent them from doing so.
Blurring the text works good too... Sometimes this is good to give a general idea of the amount of whatever the text is describing.
Like a picture of text, not the actual text.
 
7:51 AM
@AviD lol what the hell is this from? xD
@AviD Every hole is a goal?
xD
 
13 hours ago, by Rory McCune
@ScottPack but but that's not webscale either!! http://mongodb-is-web-scale.com/
btw @D3C4FF - did you get a chance to look at the answers to my PLL q on SU? superuser.com/questions/583069/how-to-optimize-pll-voltage
 
Nah i didn't actually, i tried to find it earlier today but no joy.
 
2
Q: How to optimize PLL voltage

AviDI am overclocking my Core i7 (Ivy Bridge 3770K), aiming for a moderate overclock. Currently I have it easily stable at a pleasant 4.4GHZ - BCLK defaulted at 100.00MHz, with the multiplier set to x44. While it is currently stable (tested using Prime95 torture test for a few hours), it does gen...

I'm also worried about doing long-term damage by under- or over- volting something...
 
In -theory- overvolting does do damage running it outside of intel specs
but its kinda a case of 'slowly' degrades
 
does under-volting?
 
8:01 AM
Not afaik. But its not something i've ever really done (water cooling means i care very little about temps :P)
 
@D3C4FF fair enough, but according to @David, undervolting the PLL means you can get stable clocks with lower Vcore. which is cool.
I've actually found a small correlation between them - the x43 anomaly has me raising the Vcore (compared to x44), unless I lower the PLL too, beyond what is stable at x44.
 
@RoryMcCune that looks pretty cool
 
@AviD I'd object to the characterization in that article but it's pretty spot on really.
 
lol
Cryptography: the natural enemy of the Scots.
Surprised he wasn't expecting haggis for breakfast...
 
@AviD mmm haggis
 
@RoryMcCune vomits slightly
 
8:39 AM
@D3C4FF have you ever tried it? It's one of those foods like pate that are great so long as you don't think about what's in it...
 
@RoryMcCune I don't eat pate either.
My boss once bought a can of 'classy' cat food and thought it was patte...
He finished about half of it before we told him what it actually was
xD
 
@D3C4FF eww, yeah they do look similar. That said pate can be really nice
 
@D3C4FF Did you only notice it when he was half way through, or waited till he was half way through to tell him?
 
@TerryChia I noticed when I picked it up to have some after he'd had a few, then waited till he'd had about half of it.
I slightly regret not trying some myself :P
He seemed to quite enjoy it to be fair xD
 
9:00 AM
This is new for me. A question in which I don't seek rep-training.
0
Q: What's an attack's computational complexity?

AdnanRecently I was writing a business-language report about MD5. In my search a found a paper by Yu Sasaki and Kazumaro Aoki explaining their 2123.4 pre-image attack on MD5. I know that it has something with the feasibility (or in some cases, even the possibility) of an attack, but I don't have a so...

 
@Adnan I tried to answer to the best of my understanding.
 
@RoryMcCune One of the best trailers I've ever seen.
 
@ThomasPornin will probably come along later with a much better answer.
 
@TerryChia May I be honest?
 
@Adnan Aren't you always? :)
 
9:08 AM
@TerryChia That's exactly the kind of answers I'm not looking for.
 
@Adnan What sort of answer are you looking for?
 
@TerryChia After the edit, you're getting closer
@TerryChia I'm familiar with the first part of your answer.
Damn! I'm sorry, I'm not good at this.
@TerryChia How can I make it clear in the question?
 
@Adnan I'm not sure really. I was always gonna include the second part of my answer, but I saved it for an edit in case someone sniped me. :P
I only included the first part because others might not know what it is.
What else do you think is missing from mine?
 
@TerryChia Looking at this answer and this answer makes me think that there's some hardware-independent limit, after which "it's just not possible".
 
@Adnan Ahh yes. I was searching for that first answer.
Wasn't sure if it was by @lynks or @ThomasPornin.
 
9:19 AM
@TerryChia See? You deserve your title :D
 
@Adnan heh.
 
9:46 AM
@Adnan would it be useful if I wrote something about big-O notation?
 
10:02 AM
@lynks Probably. I'm familiar with algorithm's complexity, but there might something new. So please, write whatever you think might be helpful.
We're currently having a lecture by a guest professor, it's about cryptography and security. He has just cited Steve Gibson's password Haystacks
 
@Adnan In a good or bad light?
 
@TerryChia Good :(
 
@Adnan He needs to be shot.
 
"Haystacks" appears on line 69422 of my password file
 
@TerryChia It would be illegal.
Should I name and shame?
Naah, I don't think so. I'll talk to him privatly
 
10:16 AM
ok so I just read the haystack thing, what a noob.
wow the more i read the worse it gets
Take, for example, the very weak password “news.” If another lowercase character was added to it (for example to form “newsy”), the total password search space is increased by 26 times. But if, instead, an exclamation point was added, (making it “news!”), the total search space is increased by a whopping 1,530 times!
oh dear...
 
@lynks Makes sense, he said "search space" not "entropy".
 
@lynks So what does he think about Passw0rd!
 
@Adnan i disagree, passwords are not random values and should not be treated as such
 
Yaay.. he started with Alices and Bobs
@lynks That's exactly why I mentioned entropy.
 
@Adnan i think you're missing the point. this is about passwords, and making strong ones, and what he is saying is hugely misleading.
 
10:21 AM
I really hate that he abbreviates Cryptography by saying "cryptog." and "crypt."
 
@Adnan What happened to Crypto? :(
 
@lynks Yes yes yes, please don't think that I think he's correct. If you notice, I started this conversation with a negative tone about Gibson.
@D3C4FF I know. Right?
 
yeah I've never heard anything other than 'crypto', 'cryptog' is weird. sounds a little too close to cyborg.
 
Should I plug Sec.SE when I ask him a question?
But I can't think of a non-douchy way to do it
 
@Adnan at least twice per sentence if possible.
 
10:26 AM
@lynks Yeah, very suspicious. Besides anyone who spends time writing about cryptograf is almost certainly a cyborg.
 
@lynks What was the key length limit after which it's just not possible to brute-force?
 
@Adnan about 190 iirc, thats when you start reaching "solar system" limits
 
@lynks Oh yes yes, 192. If I understood your Applied Cryptography quote correctly.
 
yeah, 192 bits requires at the absolute minimum 32 years worth of sun-energy just to iterate through.
 
@lynks If I understand it correctly, those figures you gave assumes that energy efficiency is is at 100% right?
Which isn't the case in the real world.
 
10:32 AM
@TerryChia Yes, I alos understood it that way
 
The problem with the password padding idea is that it only marginally increases entropy. The padding is almost certainly going to be repetitive and human-chosen. I reckon you have two additional entropy values: the pattern (~ 6 - 12 bits) and the length ( maybe 5 bits, probably 3).
 
YAAY! He said in a very firm voice "Don't roll your own cryptog"
 
If a significant number of people actually used this idea, password crackers would build a module for it that guessed the base word and the padding.
 
@TerryChia correct, it assumes we can absorb all of the suns energy for 32 years with no loss (impossible), and run a machine that requires the minimum possible energy to change state (impossible), we could cycle through 2^192 states.
note: this does not even begin to mention doing anything in each of those states, so there is no crypto or mathematics here yet.
 
So in the real world, even 128bits is more than unfeasible.
 
10:35 AM
@TerryChia yep
 
Actually, even if we "absorb" the energy if the sun, I don't think we have the technology to use it.
 
The advice also seems to be choosing an extremely simple base word as an example (D0g) on the assumption that the padding makes this irrelevant. It also seems to be advising to use either the same base word or the same padding (or both) everywhere.
 
@Ladadadada Exactly! Thank you!
 
The whole thing is trumped by "Use a password manager."
 
Is the bad guy/girl called Eve or Oscar?
 
@Adnan eve is the eavesdropper
 
@lynks Then who's Oscar?
 
@Adnan trying to think...:P I know Trent is the trusted third party and Malory is a malicious user. Not sure about Oscar.
 
"Oscar, an opponent, similar to Mallet/Mallory but not necessarily malicious. Could be white-hat but still wants to crack, modify, substitute, or replay messages." according to Wikipedia
 
10:55 AM
heh, thats a new one to me
 
@Adnan Oscar = Doin' it for teh lulz!
 
11:38 AM
Hi there
 
I love rolling my own crypto protocols and schemes :)
 
@CodesInChaos Don't be a dave.
 
12:14 PM
g'day all
 
@TildalWave it's 8.15pm. day?!?!?!
;)
 
@TerryChia How do you say good night then without coming out the opposite of intended? It's a conundrum
or is 8:15pm still an evening? I guess it depends on how long the day is
 
@TildalWave I consider it night. :D
 
You're both wrong. It's 8:20 in the morning.
 
@TerryChia good night then :P
@ScottPack one hot morning then with really short shadows
 
12:20 PM
@D3C4FF How is haggis significantly different from sausage? /cc @RoryMcCune
@TildalWave Not really, it's about 58F out there. It is supposed to get into the 80s, which is pretty uncomfortable.
 
@ScottPack 24-25°C here so much the same ... not uncomfortable tho I've just came from the nearby hill ... it's tolerable in the shadow
@AviD why is the answer that completely misses the point and the rest is quotes from online documentation higher rated than the real answer from David?
 
@TerryChia The alternative is locking a real cryptographer in my basement ;)
@TildalWave Because people don't actually read the question/answer. They upvote answers that look good. Quoting the spec is always worth a few upvotes.
 
@CodesInChaos Wait, we're people too, no?
 
12:42 PM
@TildalWave I'm thinking that 20+-2 is probably my ideal.
 
@TildalWave there is the fact that people dont read the answer. But more than that, it is a good answer - for SU.
basically saying, the right amount to lower it is not at all.
now, if this was overclocking.SE, that would be different....
 
@AviD Maybe, but I'm not interested in what's a good answer for SU, and I doubt you are either. David's answer is actually a lot more in line with what I'd expect to be a highest rated answer for the question asked. It explains the logic behind it (supported by facts) and gives recommendations what to look for.
2
A: Higher voltage requirement for lower clock frequency

Tim MThe short answer is this: Signal integrity is hard, and the rule of thumb higher frequency should require higher voltage is not the whole picture. There are lots of factors that go into high-frequency signal integrity and without looking at the actual failures at an electrical level, it can be v...

Now this one, I've upvoted for pointing out some things, but it's not that useful at all IMO (save for a few links)
When I said some I meant a couple in this case
I actually expected at least one answer from an experienced OC-er that would include a table of values or two and base his/her answer on personal experience... there's a huge gap between OC theory and OC reality IMHO
@ScottPack 24-26 for me... but that's the perceived temperature, the real one might be different (pressure, relative humidity,...)
I mean my ideal temperature is when it feels like 24-26°C
basically, t-shirt time
 
1:09 PM
@ScottPack well Haggis is a savoury pudding containing sheep's pluck (heart, liver and lungs); minced with onion, oatmeal, suet, spices, and salt, mixed with stock, and traditionally encased in the animal's stomach and simmered for approximately three hours and sausage isn't :)
2
 
@TildalWave absolutely. I plan on accepting it... after I get @D3C4FF's validation... ;-)
 
@TildalWave agree on that one too. Basically the answer amounts to "go study EE for a few years, then maybe you could understand this yourself".
It's practically almost a non-answer, except that it's not wrong. And, in reality, it doesnt really matter.
Still, I would have liked to understand it.
 
@TerryChia nice
 
@RoryMcCune doesn't haggis also include blood in the mix, like black pudding?
 
1:12 PM
@RoryMcCune dang, now I'm hungry
 
@TildalWave possibly, like I said earlier, it's one of those foods that I enjoy while I don't think about what's in it, 'cause it would put me off :)
 
@AviD Yup, I totally disliked that last comment maybe you should ask this on EE
 
@TildalWave it does disprove the A51 closure of the overclock proposal, doesnt it... :)
 
@RoryMcCune we have something similar here, well actually two things... one is closer to black pudding, and the other is what we call the stomach because the stomach it's packed in actually gives it a distinct flavour (some love it, some hate it)
@AviD Let's just say I'm still not convinced the closure was justified... actually less so than when it was closed
 
well, out of the 1 q's I've asked over the last few days, I feel David's answer to the PLL q was as good as I could get. Made me comfortable using SU for this...
the other one, less so.
 
1:17 PM
You can't have one topic being tossed around from one site to another and then call either of the two (or more?) sites as sufficient for the discussed topic
@AviD you mean there's one member that gives satisfactory answers... whose efforts might be better recognizable on a separate site? what I want to say is that you can interpret that either way and while I have a tiny proof more that the OC subsite is needed, I don't have not a hint more of the opposite than when we started this discussion
 
Arvo' all :)
 
@TildalWave oh sure, don't disagree on that. I meant it gave me hope. The second one took that away.
 
@RoryMcCune @ScottPack yep. Pretty much that...
@TildalWave @AviD I agree, i think that the Overclock site would get considerably more 'momentum' behind questions if asked in a dedicated forum. It doesn't seem to 'be their thing'
 
If you have 3-4 minutes with nothing to do. Why not have some fun and help Science at the same time. kgajos.eecs.harvard.edu/ag
 
@AviD I guess what I'm trying to say is that the suggestion we got on the close question might not be as great as I also thought it was. Who's to say that these very same people that give good answers to such questions on SU wouldn't give even better ones on OC? Shouldn't we then ask them as well? How to do that?
 
1:23 PM
So? Let's ask some more questions, not get answers, then lobby for reopening.
 
@AviD I think it's more to it than just receiving answers and then those questions and answers having votes on them. That's what's been suggested, but now I doubt that's a good indication for whether a new subsite is in order or not.
We have no way of measuring quality and social impact of a non existing site, do we?
 
@TildalWave Sure, but if they don't get good answers, then THAT is proof (or at least a damn strong indication) that one IS needed.
 
@AviD So we can't prove that God exists, but we might be able to disprove its existence to acceptable levels?
 
@TildalWave heh, pretty much, yeah :-)
It's more like: We don't know if a new site would be better, but right now we can tell that the site we have is NOT good.
 
@AviD That doesn't bode well for later reopening suggestion IMHO... It's easy to argue either way
 
1:28 PM
what I'm saying is, having decent answers isnt proof that a new site isn't needed, but NOT having ANY answers, IS.
 
@ThomasPornin do you know 'playschool'?
 
@AviD those for the closure can always say but it was sufficiently answered on SU, based on our criteria for new sites. And we could say but SU isn't a new site, so shouldn't it have different success criteria?
 
@ThomasPornin this song reminds me of you youtube.com/watch?v=TNxBOmV9tUY
 
thats what I'm saying. NOT having good answers - and out of the 3 answers I got, only one was decent - is sufficient criteria for a new site.
or, at least should be.
 
@AviD This should is what's bothering me. And the politics involved. I'm fine with policy, but not with politics. We have the latter, but not a clearly defined former.
 
1:33 PM
because it is always subjective, and contextual.
which I would be fine with, unless it's subjective from SU-PoV instead of from OC-PoV.
 
@AviD And it will be, until the site is up and running. My pride wouldn't suffer if it turns out to not be needed (so we gave it a try...), but this subjectivism and openness to personal interpretation IS a pain in the butt (why do anything, let's talk more...).
 
2:00 PM
@RoryMcCune I wasn't implying that haggis is sausage, but that it seems rather disingenuous to enjoy sausage but snub haggis.
 
@ScottPack true true given that sausage can be described as high-fat emulsified offal tubing but still tastes goooood :)
 
@RoryMcCune Sausage is the ground remains of leftover organs, scrap meat, and blood spiced with salt and herbs and stuffed into an intestine of stomach.
Strictly speaking I would consider haggis a specific form of the classification sausage.
 
@lynks Actually it is closer to 225 bits.
37
A: Amount of simple operations that is safely out of reach for all humanity?

Thomas PorninAs a starting point, we will consider that each elementary operation implies a minimal expense of energy; Laundauer's principle sets that limit at 0.0178 eV, which is 2.85*10-21 J. On the other hand, the total mass of the Solar system, if converted in its entirety to energy, would yield about 1.8...

@D3C4FF It's a brand of toys for young children; very similar in design to the Windows XP default theme (or maybe that's the other way round).
 
Time to pull out the headhpones
 
2:22 PM
@ThomasPornin Win XP? I thought it's more Win 8 ... ya'know ... tiles and all :)
@RoryMcCune hehe and you swallowed it? pun is brilliant :))
 
@TildalWave No, for young children you need rounded edges. Otherwise they may harm themselves.
 
@ThomasPornin oh :( so no change of getting life back that cheap, huh? :)
 
@TildalWave yes (prime) minister have some quality lines in them.
 
@RoryMcCune talking of which, how's the new remake? any good at all?
 
@TildalWave must say I've been avoiding it, but from what I've seen it's not getting great reviews..
 
2:27 PM
We got any Outlook experts in here?
 
@ScottPack I use it a bit, not sure I'd call myself an expert... what's the Q.?
 
@RoryMcCune I have a recurring meeting that's every two weeks on a Thursday, today being one of the days. I would like to reschedule it to be next Thursday, and every 2 weeks thereater.
My fallback is to change the end date to the last instance, and create a new meeting.
I presume that if I change the start date it will retroactively screw up the calendar?
 
@ScottPack hmmm this used to be easy enough on the old versions (previous millenium when I last used it), just a calendar change and send updates IIRC, not at all sure how that is now tho
 
@ScottPack ahh sorry don't know that one, but your fallback sounds plausible, and could be a better option as I'd have thought that even if the change works it might send out a load of re-schedule meeting invites...
 
@RoryMcCune In theory it should just sent out one reschedule, for the recurrance. What I want is for the previous meetings to be a fixed point.
I fear that if I fiddle around with the start dates those meetings will disappear.
 
2:33 PM
are questions like "how to protect my application against RCE/modifications" on-topic on security.SE?
 
@Abyx I would say be careful it's not so open ended as to be a NARQ.
 
@ScottPack i asked the missus who used to be an exchange admin and she reckoned recheduling a recurring meeting should work ok...
 
oh, it's public beta already!
thanks
 
@RoryMcCune That's an awful lot of "shoulds" and "reckons" to fill me with not much more than a vague sense of impending doom.
@RoryMcCune I would probably trust her word more were I to receive a Nexus in the post.
 
2:36 PM
@ScottPack I always tend to caveat very heavily when it's not something I've done myself and I don't know the precise system config :). She's off nexii these days anyway it's surfaces all the way (luckily for our bank balance she's not taken to handing those out much!)
 
@RoryMcCune Dagnabbit! Also yes. If my statement is not couched enough to make you feel skeezy then I'm not doing my job.
@RoryMcCune But yeah, what makes me nervous is the fact that I'm not changing times or days or anything, just which weeks it happens. Say what you will about Oracle/Corporate Time but previous calendar events were pretty well immutable.
 
@ThomasPornin ahh but your approach would leave us with no matter upon which to live, whereas my approach would only kill all vegetation on earth.
 
@lynks Death to all vegetables !
 
@RoryMcCune Well, I can't seem to figure out any way to make it work. Changing the start time to next week kills all previous events. There doesn't seem to be a "rechedule" option except for just editing and changing the times. So either it can't reasonably be done, or the option doesn't exist in the Mac version of Outlook.
 
@ScottPack ahh you're using the mac version <shudder>
I've never heard good things about that...
 
2:43 PM
@RoryMcCune From my uses it's largely equivalent to the Windows version, and is significantly better than Mail.
I do really miss proper hierarchical tree views of message threads.
 
i just wasted all my xmp blasters because i didnt realist that proximity to resonators was important :(
 
2:59 PM
@lynks It happens. What level are you?
 
Yo @D3C4FF ^ LOL I'm going for 1337 :P
 
@ScottPack about halfway to lvl 2, i got my access code on tuesday
 
@lynks That's hard too. L1 bursters don't do a whole lot of damage
 
finally found an enlightened lvl 1 portal so decided to take it, plus its in range of a pair of lvl2 portals that i linked today.
i had to walk away with 3 out of 8 resonators still live, i was sad.
 
Nobody dare vote on my answers! I wanna have 1337 at least for a screengrab!! (you can accept my suggested edits tho LOL)
I'll tell you if I need a downvote :))
 
3:07 PM
@lynks Wait, so you're part of the resistance?
 
@ScottPack of course comrade...wait...well this is awkward...
3
 
Join the Resistance you say? Why not Zoidberg? (V)(;,,,;)(V)
 
@lynks Wow. I'm litterally LOLing right now.
Though, shouldn't it be LingOL?
Or maybe just LOL, kinda like there isn't really such a thing as RBIs or RsBI.
In case you're wondering: No. I'm pretty sure I've never been accused of underthinking anything.
 
Don't hurt yourself.
 
@Iszi FCOL!
 
3:17 PM
@lynks a smurf.... in the DMZ.... oh dear...
 
@RoryMcCune We could try to turn him?
 
@RoryMcCune I had no idea the DMZ was infested with kermits.
 
And, by turn, I of course mean learn the error of his ways. Clearly he's been misguided by the idealism of youth.
 
@ScottPack could be the only option.
 
@lynks out of curiosity, what part of the globe are you from? pls don't make me guess! :)
 
3:19 PM
@TildalWave UK, midlands
 
@lynks we're all well enlightened here (well apart from you that is)
 
That's true. There's an awful lot of enlightenment that can be spread about from this room.
 
@lynks nice thx :) I just don't know for @Poly now... I would dare to guess tho
 
@TildalWave Poly used to live in my part of the world, but he moved south
 
@lynks That would be my guess actually... I've been to those parts and I recognised the... hmmm attitude LOL. Didn't for you tho.
Please don't tell me down south means Norwich!!
 
3:23 PM
@TildalWave What attitude? :s
 
@TildalWave he moved london way i believe.
 
yes, I moved to London.
 
@Polynomial hehe there you are!
 
I am Londoning as we speak.
I'm always here.
at least one of my mental threads polls the channel at all times.
sec, nerf fight.
 
@Polynomial London... that's a huge area... not Croydon, huh? :P
 
3:26 PM
@ScottPack the one thing I dont understand about ingress is why there have been no link penis drawings yet.
 
@TildalWave I'm north ;)
about as north of city as Croydon is south of city.
 
@TildalWave he'll be in a top secret location, probably something like this maps.google.co.uk/…
 
@Polynomial oh, that rules Peckham out then :)))
 
@RoryMcCune Super secret.
 
@Polynomial has a nice pub next door IIRC
 
3:28 PM
I'll stand outside and wave as the Google satellite goes over.
 
@RoryMcCune snort Middlesex
 
yup.
Le Pube.
2
er... haha
I meant to say Pubbe.
 
@Polynomial I'm guessing knowing the portcullis crew that proximity to a pub was a key factor on location
 
@RoryMcCune Of course. The new building is being built next to a strip club.
(I wish I was joking)
 
@Polynomial new building, where's that going to be?
 
3:30 PM
@RoryMcCune Next to a strip club.
:P
I don't actually know anything more than that.
 
@Polynomial yeah but this is london, there are a fair few of those...
 
it's not far from here.
I've never been there, so I dunno.
 
@Polynomial this is weird, I thought I'd just google the answer and then look on street view... but brought up this maps.google.co.uk/…
which appears to be street view that goes right into someone's office
where they're sitting?!?
 
That's...interesting
That's a tiny offce
 
haha
if you look straight down you can see the tripod
 
3:35 PM
I'm pretty sure that's smaller than my office
 
@Polynomial I've never seen the walkabout version before, random that they've started doing offices.....
 
If you walk out to the parking lot you can see the reflection of the schlub taking the pictures
Then zoom in on the glass
 
@ScottPack Lies! Everyone knows that people who work for Google have no reflection.
 
@ScottPack yeah indeed. must be a new thing they're doing.
 
@RoryMcCune We still have pretty poor streetview coverage here
 
3:44 PM
@ScottPack worst case, you could always kick him from the room...
 
17
Q: a better approach than storing mysql password in plain text in config file?

ck_It's always bothered me that many PHP programs require the user to store the mysql password in plain text (in a string or constant) in a configuration file in the application's root. Is there any better approach to this after all these years? So far I have come up with two minimal security boos...

accepted answer seems... eww
I can't quite work out why it's bad, but it just reads as obscurity.
 
@AviD I could but that doesn't solve the problem. Right now he's a potential agitator, but it's not his fault. He's been fed misleading information.
@AviD You can't blame a person for being indoctrinated, all you can do is try to correct the problem.
 
who are we unindoctrinating?
 
Well actually, if I were to be an ingressor (ingressian? ingressite?) odds are I would have gone resistance too.
I've seen way too many sci-fi flicks to believe that trusting the aliens is a good idea.
Don't you ever watch Dr.Who??
 
'resistance' in my mind is pretty much synonymous with 'good guys', likewise 'enlightened' with 'bad guys' i had no choice.
@Polynomial me :P
 
3:50 PM
oh god, the worst song just came on the jukebox
PUT A DONK ON IT!
 
@Polynomial I started reading the comments and the answers, I was surprised to see that I have upvoted this one. I really don't remember when
There's simply no better way to do that. PHP, Perl, Python, Java, or any other language.
 
@Polynomial I wanted to say, that's more west than north, but for the life of me I cannot recall the name of the neighborhood that I was based in, when I would pop into London every few weeks...
@Polynomial almost spooky how damn many of that exact question there are.
@Adnan really? I've answered here, there are 2 ways.
#1 - dont keep a password at all.
#2 - encrypt it, and have the OS protect the encryption key.
 
@AviD Nope
 
@AviD hmm... any hints?
not that I know London very well.
 
@AviD How would you go about #1?
 
3:56 PM
@Polynomial north, I think it was the black underground line. east of golders green and a bit north (I know, because I've had to travel there to get kosher food :-) )
 
and for #2, OS is already doing a pretty good job managing the access control to the config.php file
 
it was back in 2008 ish, so I dont remember...
 
Hampstead?
 
@Adnan OS authentication.... and #2 is only -ish, its not encrypted.
@Polynomial hmm, possibly... sec
 
Finchley?
 
3:57 PM
Oh wait wait.. by the way. I do not agree with the accepted answer.
@AviD A- Sometimes OS authentication isn't possible.
@AviD The key is still managed by the OS, pretty much the same thing
 
@Adnan True. IF its possible, I qualified in my answer.
 
@AviD If I trust my OS with my key, I trust it to manage read access.
 
@AviD Hendon maybe?
 
@Adnan hmmm that's for scripted languages. Things change with proper compilers.
 
@Adnan if I pull your disk and stick it in my computer, can I get it?
 
3:58 PM
@TildalWave No! NO NO!
@AviD The AviD strikes again. You're right. That slipped my mind
 
I think it was something like West Hempstead. I remember going thru Finchley to get there...
 
@TildalWave It's super super super easy to get strings out of compiled code.
 
@Adnan DPAPI is a good example.
 

« first day (854 days earlier)      last day (4031 days later) »