The DMZ

tylerl

12:19 AM

Working for this company is mildly surreal.

Terry Chia

@tylerl I feel like you have been saying this once a week. :P

tylerl

I post to an internal mailing list about some work being done that is EXT4-specific mentioning that Theo Ts'o (the EXT4 maintainer) said that EXT4 is a stop-gap and btrfs is where things are going, so I ask if what they're doing is portable.

And Theo Ts'o responds to me clarifying his position on ext4.

oh hai, didn't know you worked here.

Terry Chia

@tylerl Hahaha, I knew that. :)

I don't think Google has a large amount of kernel devs?

tylerl

I'd been warned about this sort of thing, of course. One of the older developers mentioned that an intern complained publicly on an internal dev mailing list about how one of the core C APIs was poorly designed.

Terry Chia

@tylerl Oooh that must be fun.

tylerl

12:26 AM

And Rob Pike responds to him saying that back in the 70s when he designed it, the current usage case wasn't what he had in mind.

tylerl

12:43 AM

FWIW: ext4: Not going away any time soon.

Terry Chia

@tylerl Well... yeah. RHEL 6 is supported for another 10 years. :P

tylerl

2:48 AM

@TerryChia i mean, new development, not just "support"

Terry Chia

@tylerl Ahh. Not really surprising. ext4 is a solid choice for typical use cases.

Any vim users in here?

David Freitag

I recently switch to nano because I got fed up with vim.

Terry Chia

@DavidFreitag Pfft. nano is annoying.

David Freitag

@TerryChia Yeah but it's simple and that's all I need when editing conf files over ssh.

Terry Chia

@DavidFreitag Well yeah, I'm using it for development.

Switching from Sublime to vim for the time being.

David Freitag

3:01 AM

@TerryChia Uhh... hm... There must be a really simple explanation for why you suddenly lost all of your sanity

Terry Chia

@DavidFreitag It's actually really nice.

Just wanted some opinions from experienced vim users on some plugins.

Stack Exchange

4:07 AM

A long time in the future, in a galaxy far, far, away, astronomers in the year 2008 sight an unusual gamma-ray burst originating from somewhere far across the universe.

Terry Chia

@StackExchange Looks like Randall had inspiration from collegehumor for this one. :)

►

David Freitag

4:50 AM

@TerryChia Or perhaps great minds think alike?

Terry Chia

5:37 AM

@DavidFreitag I wouldn't exactly consider collegehumor writers "great minds". ;)

David Freitag

@TerryChia I wouldn't know

Kisunminttu

5:49 AM

Morning everyone!

David Freitag

6:00 AM

@Kisunminttu I'm so not a morning person

Kisunminttu

@DavidFreitag I can relate to that a lot. A certain someone can confirm this information.

David Freitag

6:41 AM

lolol. I just saw this message on my tv: "Low batteries detected in remote, replace them soon"

Terry Chia

@DavidFreitag A remote. How quaint. ;)

David Freitag

@TerryChia Yeah I haven't prototyped my telepathic CEC extension yet :b

Before I got it, I used a Logitech revue which had a massive keyboard for a remote.

Lighty

9:44 AM

my boss has a meeting with this guy, about some app, and that guy came to me " youre the intern here?" i reply with a yes ofcourse, and he handed me a google glasses dev model

that is one cool toy

deed02392

11:04 AM

nice @Lighty

Rory Alsop

@TerryChia - couple of flags suggesting things have moved on a bit with this one. Any chance of updating your answer:

32

A: Is Telegram secure?

I'd like to ignore the comparison to WhatsApp because WhatsApp does not advertise itself as a "secure" messaging option. I'd like to instead focus on whether Telegram is secure. Telegram's security is built around their home spun MTProto protocol. We all know that the first rule of Cryptography ...

Lighty

11:17 AM

hehehehehe

Rory Alsop

hehehehehehehe

Good to see others are as childish as me

Lighty

Kisunminttu

@Lighty I c wut u did thar and also give you my hehehe

Lighty

sometimes, being "childish" just means trying not to bore yourself to death by enjoying the little things :3

or just grinning at innapropiate jokes

my teacher sked me a question: "how can you prove an encryption algorithm isn't secure/is broken?", appearantly, the awnsers "wikipedia, and alot of other sites give scripts to decrypt them without a pass in 20 languages" and "OWASPS and hundred other sites state so" isn't valid

what am i missing here? o.o

Rory Alsop

11:36 AM

it is a daft question - ask your teacher to prove an encryption algorithm is secure :-)

Lighty

@RoryAlsop very nice, but he asks for an awnser, not a counter question... i'm still gonna try that one though

he gave me a lsit of questions over the mail, just to check on what i learned by myself past weeks

Arperum

@Iszi someone is making a javascript preprocessor that only uses emojis. So you can "code" in emojis.

github.com/EmoJS

Lighty

@Arperum i doubt that name unpacks well

Arperum

@Lighty Hey, I have nothing to do with that thing, it's all RedRiderX over on The Bridge doing the crazy.

Rory Alsop

@Arperum It's always the Bridge :-)

Arperum

11:51 AM

@RoryAlsop It most certainly is. That's where the crazies gather.

Terry Chia

@RoryAlsop I still stand by the conclusion of my answer. The exact details may have changed somewhat but that does not change my (very low) opinion of Telegram.

@Arperum I'm picturing emojis in node.js code now...

Rory Alsop

@TerryChia Do any of the Telegram devs responses change some of your answer? It appears they could a wee bit. The conclusion may still be just the same, but worth updating if their info is relevant

Lighty

Arperum

@TerryChia You're doing it wrong, you should see node.js code in emojis, no normal text left.

Lighty

y u so big, stoopid picz

Rory Alsop

11:55 AM

@Lighty TWSS

Terry Chia

@RoryAlsop I have not kept up with it much so I can't say for sure. I'll see if I can update it a little this weekends if I have the time and I remember to do so.

Good morning

@raz Mornin'

@raz 'Murnin

12:12 PM

hehehe

i know what kind of emoji's im going to hide in my code, if they're gonna be natively supported by everything

Terry Chia

@Arperum I'm sad now.

@ThomasPornin Hey Thomas, I have a question for you. I assume the answer is "no" but I thought it's worth confirming anyway. Does there exist a cryptographic protocol that allows one to verify that some code running on a remote server matches a snapshot (a git commit?) of a codebase? The protocol doesn't have to be practical to implement.

Lighty

great, thanks @Arperum, now my PHP code is literal and methaforical shit :D

Arperum

12:42 PM

@TerryChia I just used a screenshot from the original dev, I didn't and won't make it myself.

Seemeingly Win 7 and Emojis are not best friends.

Thomas Pornin

@TerryChia Run the expected code in a VM. Once it has executed the "version verifying protocol", swap it with something else.

This shows that what you ask for cannot exist, at least not in this form.

What you could do is to use homomorphic encryption so that machine A runs code from machine B without actually knowing what it is running, and this should prevent silent modification.

(However, it is very impractical)

In any case, even if you can verify from the outside that machine A truthfully executes some piece of code, you cannot check that it does not feature an extra CPU that runs something else at the same time.

Terry Chia

@ThomasPornin So, no. Cheers. :)

@Arperum I can't wait till SV startups start looking for people with with 5 years of experience with EmoJS.

raz

1:02 PM

Sad sad day in history

Arperum

@TerryChia That is impossible to meet the first five years. I expect this requirement to pop up in a couple months if this catches on.

deed02392

hey @ManishEarth, you about?

Lighty

crap, new assignment from school

"here's some crappy JScript code, go format and comment it"

everything is minimized (one line), and no comments or logickz

Rory Alsop

1:22 PM

@Lighty ooh fun

(not)

Lighty

no, but i used the JS beautifier site

which clears the problem of minimiation

Terry Chia

@deed02392 Hmm, haven't seen him in a while.

deed02392

ah fair enough @TerryChia

I was just gonna pick his brains on autocomplete=off on FF

Terry Chia

@deed02392 I thought they disabled that?

deed02392

1:41 PM

yeah I wanted to discuss it conversationally though

Terry Chia

> That's because drinking, say, a white wine with steak is the culinary equivalent of attempting to enjoy fine art after having your pupils dilated at the eye doctor. And if you happen to prefer sweet wines? Well, in that case you may as well just go back to drinking mead in between bouts of crushing your enemies and hearing the lamentations of their women with the rest of the barbarians.

Cracked writers, eloquent as always.

Thomas Pornin

2:07 PM

@TerryChia Though the writer indirectly quotes a line from the movie "Conan the barbarian", that line has a much older history; it is first found in the Secret History of Mongols from mid-13th century, and is attributed to none other than Genghis Khan.

The derogatory term "barbarians" is thus inappropriate.

Terry Chia

@ThomasPornin What exactly don't you know?

Thomas Pornin

@TerryChia I don't know.

4

Terry Chia

@ThomasPornin Hahaha!

Terry Chia

2:20 PM

avremu: An AVR Emulator written in pure LaTeX

This is scary.

Arperum

in The Bridge, 1 min ago, by RedRiderX

Quotes are now supported!

raz

@Arperum yay, I love quotes

@TerryChia Wait what now?

CodesInChaos

2:48 PM

@TerryChia Given the state of modern art, dilated pupils are a necessary for enjoyment ;)

@TerryChia Only if you trust a TPM with preloaded keys to do some kind of remote attestation. I think the latest variant is Intel Software Guard Extensions (SGX).

deed02392

anyone here know much about PHP core?

wanna know if there are any security mechanisms in PHP that are bypassed in a PHP extension versus the same thing being implemented in pure PHP?

AviD

3:16 PM

@deed02392 "...are any security mechanisms in PHP" -> NO.

@RоryMcCune when you happen to be around, I want to pick your rubybrain. Any experience with ruby app servers? And what is the relationship between those and Rails?

Terry Chia

@AviD If it's anything like Python, the app servers handles things like concurrent requests.

AviD

umm... thanks?

no no, I want to delve into the pipeline internals.

Terry Chia

@AviD The relationship is pretty similar to something like Spring and Apache Tomcat to use an analogy from Java land.

AviD

that's.... actually helpful.

thanks, despite me being surprised.

Still, I do need to go deeper, with some specifics on the internals mechanics.

Terry Chia