« first day (553 days earlier)      last day (4317 days later) » 

12:16 AM
ninefingers on September 20, 2011

So the purpose of this post is to introduce you, an IT-aware but perhaps not software-engineering person, to the various issues surrounding browser security. In order to do this I’ll go quickly through some theory you need to know first and there is some simple C-like pseudocode and the odd bad joke, but otherwise, this isn’t too much of a technical post and you should be able to read it without having to dive into 50 or so books or google every other word. At least, that’s the idea. …

doesn't have actual code highlighting, just <pre> blocks, is that intentional?
Anyways, I was hoping for @ninefingers and can try and find someone tomorrow AM
 
1:00 AM
@jcolebrand Hrm? Might have to take a look in a bit.
 
Got blog admin access Iszi?
 
1:19 AM
@jcolebrand Where do you see the <pre> blocks? I don't think I see the problem you're seeing. I've got editor privileges.
@jcolebrand Post a screenshot?
 
I expected to see that with color on the functional parts of the C language
compare the coloration here:
2
Q: how string are represented in memory in c

shuntychar imei_temp[14] = {0, }; strcpy(imei_temp, "00000000000000"); According to my understanding this is valid code. But Klocwork is saying Buffer overflow, array index of 'imei_temp' may be out of bounds. Array 'imei_temp' of size 14 may use index value(s) 0..14

 
@jcolebrand Ah, I see. I don't think it was particularly intended not to be in color. I'm not personally familiar with any particular code coloration support built in to BlogOverflow, though.
 
Aye
So I was curious, and we can isolate to that one block I supplied
I was curious what the "wordpress markdown" for that segment looks like
1
Q: Does Blogoverflow support code syntax highlighting?

jcolebrandI don't seem to see where it says that the blog engine in use supports syntax highlighting for code and the like, does the current configuration support syntax highlighting, and if so, how do I use it?

Compare to the examples given here.
[sourcecode language="css"]
your code here
[/sourcecode]
 
Ah.
You'll have to check with @RoryAlsop or @Ninefingers to see if we have that installed, I suppose.
 
@IsziRoryorIsznti I'm curious what the text in the source of the blog post looks like before "publish" actually...
if you opened it right now to do an edit, does it have that square brace bit around the code?
 
1:35 AM
@jcolebrand The HTML just has <pre> tags.
 
That'll work, I'll check with the community team tomorrow and make sure what it should be for this, thanks
much obliged for your time
 
No problem.
 
 
7 hours later…
8:44 AM
@jcolebrand Morning! Sorry... 00:40 is WAAY past my bed time! It'd be 1am here at that time. Hmmm yep I used <pre> because that's all that was available when I wrote it.
 
9:25 AM
@Ninefingers I hadn't heard of this other option - I will ask for it to be enabled on our blog
in fact I could try it just now - the code you have in there is all C (ish) isn't it
@Ninefingers looks like we have it enabled - how does that look?
ninefingers on September 20, 2011

So the purpose of this post is to introduce you, an IT-aware but perhaps not software-engineering person, to the various issues surrounding browser security. In order to do this I’ll go quickly through some theory you need to know first and there is some simple C-like pseudocode and the odd bad joke, but otherwise, this isn’t too much of a technical post and you should be able to read it without having to dive into 50 or so books or google every other word. At least, that’s the idea. …

 
10:11 AM
@RoryAlsop Ah pretty good.
I did look this am, but I didn't have javascript enabled for wordpress.com
that fixes it.
Funnily, we use the same plugin at work!
Eurgh, actually hold on
Wordpress has handily escaped everything with &gt; etc
 
@Ninefingers oh, have I broken the post?
 
@RoryAlsop Nope, but wordpress probably has.
It does some autoescaping thing
 
hahahahaha - typical
 
I do not have this problem on my personal blog - markdown is pretty ace.
 
hmm - the blog looks fine here. Which bit is &gt; escaped?
 
10:18 AM
@RoryAlsop Some of the code if statements
everywhere in C you might use < or >.
 
oh yeah - I see it. damn
probably don't have time to fix it until the weekend
 
@RoryAlsop looking now
Or I would, but they've taken the blog offline for maintenance :(
 
10:39 AM
@Rory now fixed.
 
11:04 AM
excellent
useful to have that functionality in there
 
 
2 hours later…
1:11 PM
@Ninefingers Aye, and the changes you made are exactly what I was curious about. Looks like you don't need to request anything @RoryAlsop
 
1:38 PM
G'day, Bruces.
 
Morn' all.
 
2:12 PM
I think this one should be nuked - product recommendation:
0
Q: What kind of network tapping/sniffing hardware can be used to install NIDS or examine networks?

IanI'm looking for a device that can be plugged in between a client computer and a switch and records all ethernet packets and puts it into a pcap file or similar in order to analyse it with wireshark. I'm thinking of something like pwnie express or pwn plug that can possibly build by myself of pur...

 
 
1 hour later…
3:33 PM
I agree, it does look like a shopping question, but with some fairly minor tweaks it could be something more reasonable.
 
@ScottPack I'm not quite sure it can. The OP has already given a few specific examples of devices he thinks could do the job. That seems directly in contradiction to one of those "good subjective, bad subjective" rules. It's sort of like the "I use x for this, what do you use?" example.
 
I'm agreeing. The question as asked sure as hell looks like the Forbidden Shopping Extravaganza. If the dude is more willing to go with a broader how to do passive network monitoring, I think it is answerable. So, instead of just hammering, I opted to comment and give the chance to fix.
 
@ScottPack I guess maybe I'm a bit too pessimistic about the average low-rep user's capability or likelihood to fix such questions.
Besides, don't we already have a handful of similar questions where the answers generally break down to "use Snort"?
 
4:07 PM
Two layers of the stack
I mean, you have to get the network traffic to snort somehow, and that's what he's asking about.
 
 
2 hours later…
6:26 PM
Yes! @NASANuSTAR has successfully extended its 10 meter mast! another milestone. Next up, first light! http://go.nasa.gov/Lj73hK
Okay, does anyone else read that as NASA celebrating that one of their newest satellites had its first erection?
(Yup, we're back to Rule 34.)
 
6:40 PM
@IsziRoryorIsznti now that you mention it, their logo does look like a little blue pill.
 
7:01 PM
I was just telling someone about 'Love and Other Drugs' this morning.
 
 
4 hours later…
10:59 PM
Not quite sure if this is best for SU or SF, but I don't think it really belongs here...
0
Q: How to Export Microsoft Network Monitor Capture File to .CSV file?

quicksortI've been using Microsoft Network Monitor to capture traffic data, which will eventually be used for data mining purposes and attack detection. It would be much more convenient if I could export the capture to a .csv file. Is there any way to export the capture as a .csv, or, assuming the .cap fi...

 
11:15 PM
Well, this is awesome. Router's firmware upgrade went to 100%, and now the page appears hung while still showing that ominous "Upgrade must not be interrupted!!" message. Additionally, a new browser window seems unable to open the router config pages. Yet still, Internet access is uninterrupted.
This is just for an upgrade from the manufacturer. And I wonder why I can't bring myself to install DD-WRT...
 

« first day (553 days earlier)      last day (4317 days later) »