« first day (1338 days earlier)   

2:00 PM
Hello all
Damn, I can say 1), but still can't really 2). But not because I can't
Simply because I never needed
Like with AWK
Never used it, and the day I needed, I simply did it
So no certificate from @Letharion for me :(
 
2:14 PM
@Mołot Lol. TBH, not sure a certificate from me is worth much anyway, so you're probably fine ;)
 
@Letharion I would put it on a wall at work ;)
There is a lot of empty space, and I'm shy to put nude ladies...
 
@Mołot lol
@Mołot Haha, yeah, my certificate would probably be more politically correct ;)
 
I have two hobbies, beer and photography, sadly both turns out to be forbidden at work, when they taste best ;)
 
@Mołot Afterwork, lots of afterwork, and you can do both
 
This weekend - making beer. Next one - making photos. Too much Drupal at work for now. Luckily we aviuded armageddon...
 
2:35 PM
@Mołot Did do you tell though? We'll probably be doing a big audit next week (still up to management to decide to set aside the time for it), but there's a lot of potential for armageddon to lie dormant for a while.
 
@Letharion We upgraded stage and replaced live with satge's copy
Unless someone inside did something, we are safe
There was no important content changes in the meantime, so we could afford it
 
@Mołot Ah, nice situation.
 
I'm glad, too
Audit is good thing, but... better not to need
 
@Mołot A lot better, indeed.
 
My admins hate me and my "make snapshots, please" or "Why migrating DB is so slow? Yes, yes I needed to do it again"
;)
 
2:40 PM
Slightly different topic: Someone I know does a lot of hosting, and I know a particular server that still hasn't upgraded bash for shellshock, despite my reminder. That's Armageddon just waiting to happen right there.
 
Any way to kick it's admins?
I mean, if you break into VPS, you can DoS other mashines in the same infrastructure a lot easier...
 
@Mołot One man operation mostly. Short of trying to get myself root access, I've done what I can. Though considering the apparent state of things, maybe getting root access wouldn't be difficult ;)
 
LOL
Yea, once upon a time I did something similar
It wasn't even breaking id, doors was wide open ;) There was this internet shop that opened login form by default
admin:admin
worked :/
 
Ha. I've seen similar horror stories where people don't understand why keeping all the login logic in JS would be a bad idea.
 
Wow
just... wow
But there was this guy on Drupal Answers who wanted to test if page was accessed legitimately by testing referer
and didn't want to believe me when I told him that referer is whatever user sets it to, if user cares, of course, so this is not the best method
 
2:48 PM
I thought I read it on coding horror, but I can't find it now... shame.
Haha, that's fantastic.
 
Fun how http header is referer when English word is referrer.
well, at least it make it clear that referer is not a real referrer ;p
 
Never though about, but wikipedia has short note about it I see: en.wikipedia.org/wiki/HTTP_referer
 
Well I'm "almost dyslexic", I need to think what I'm writing all the time, so I notice thingsl ike that
 
@Mołot You familiar with Dunning-Kruger effect?
I often think of that when I see beginners thinking they've "solved" the security problem in a "new" way. Such as looking at the referer-header.

It's hopeful though that people actually do research on the topic and we might collectively become less ignorant of our own shortcomings one day.
 
3:04 PM
Wait a minute
I'm reading Wikipedia entry for Dunning-Kruger
 
I haven't read the WP article (though I used it to check my spelling ;) ) but this article is written by Dunning himself: psmag.com/navigation/health-and-behavior/confident-idiots-92793 "Where all confident idiots", and it's fascinating.
 
Oh, thank you
Well,
it's easy to think less about what you know
when you know how much you don't know ;)
And more you know, more questions :)
 
3:34 PM
@Letharion gotta go, have a calm weekend
 
@Mołot Enjoy the beer!
 
I'll be making it
enjoyment in 4 weeks ;)
 
@Mołot Well go buy a beer to have along with the making :)
 

« first day (1338 days earlier)