Charcoal HQ

I've been wondering if I could find out who flagged a message too, which would be much more... urgently in need of fixing. But I've never gotten around to trying it.

hichris123

@Doorknob?

Doorknob

@hichris123 ... ahem

hichris123

... where's the chatbot?

@Doorknob What did I do?

Oh, right.

>>listcommands

... nope, still no worky.

DoorknobChatbot

Bot initialized. Type >>help for help. There is a custom message: "Try to bork me if you can!"

Doorknob

@hichris123 ahem What are you talking about?

hichris123

12:32 AM

@Doorknob So really, what did I do?

>>

DoorknobChatbot

Unknown command .

Doorknob

@hichris123 ... you borked it? :P

hichris123

rofl

ManishEarth

@hichris123 /me no have server

Bit complicated. Until last year's bills get cleared, we can't ask for an advance

hichris123

Ah, makes sense.

ManishEarth

12:34 AM

And till then we can't get the server

Doorknob

ohai Manish

Do you like puzzles?

:D

ManishEarth

The accounts section is slooow

Doorknob

(long story)

hichris123

@ManishEarth KICK HIM PLZ!

ManishEarth

yes

kay done

hichris123

12:35 AM

:P

Doorknob

@ManishEarth Then commit to Puzzling!

ManishEarth

gah

Doorknob

D:

hichris123

0

Q: what are the advantages of creating object oriented operating system

I am fan of code quality and design patterns and I am asking about the benefits of using these patterns in writing an object oriented operating system in C++. What about using Java?

technology

ManishEarth

Can't, until my commits free up

hichris123

12:36 AM

^^ Flag plz

(don't flag @Manish)

Doorknob

@hichris Was that you? :P

ManishEarth

I need to fulfill a couple of commitments, can only do once vacation starts

hichris123

@Doorknob ... was what me?

Doorknob

@ManishEarth Okay then. I've taken on the role of Unofficial Chief Annoying Puzzling Beta Messenger of the Knob of the Door. :P

in Tavern on the Meta on Meta Stack Exchange Chat, 23 hours ago, by michaelb958

Context for future readers:

So now I'm walking up to random people that I know in my school and saying "Hey do you like puzzles? Do you? Do you? Do you? Do you?" even though they have no idea what SE is, mostly just for the fun of it. :D

hichris123

30

Q: Stack Exchange (main+chat) should block or render unprintable characters

Given that people share code on the main site and chat, it might be a good idea to either block or explicitly render control-characters and the like. For example, if you copy the following code block into the nano editor (please DO NOT copy paste directly to the prompt, or if you do, please do n...

feature-request status-completed security

@Manish ^ Do you know if that still works in chat?

ManishEarth

12:39 AM

@hichris123 yes, still works in SE

because there are issues behind fixing it, international issues

(encoding stuff)

but I got a bounty for a similar bug in Bugzilla :P

hichris123

@Manish So okay, try to bork @DoorknobChatbot with it. :P

>>help

DoorknobChatbot

Type >>listcommands to list all commands that the chatbot can execute.

ManishEarth

@hichris123 it's only an issue for GUI terminals

hichris123

Oh, nevermind then. :P

Doorknob

@ManishEarth Ooh, nice :3

hichris123

12:40 AM

yesterday, by ManishEarth

Bug bounty! $1k! The amount was totally unexpected, I expected like 50 :p

@ManishEarth ^ That one?

Wow, congrats!

>>

Unknown command .

>> javascript:id=prompt("id please");int=setInterval(function(){$.post('http://chat.stackexchange.com/rooms/‌‌kickuser/'+document.location.href.split('/')[4],{fkey:fkey().fkey,userId:id})},‌10‌00);console.log(int)

DoorknobChatbot

Unknown command javascript:id=prompt("id.

hichris123

12:43 AM

... length limit @Doorknob?

>>help

DoorknobChatbot

Type >>listcommands to list all commands that the chatbot can execute.

Doorknob

@hichris123 Space separated.

ManishEarth

@hichris123 yep

hichris123

>> 'http://chat.stackexchange.com/rooms/‌‌kickuser/

DoorknobChatbot

Unknown command 'http://chat.stackexchange.com/rooms/‌‌kickuser/.

hichris123

12:47 AM

>>U+0000

DoorknobChatbot

Unknown command U+0000.

Doorknob

Hmm, what commands should I add to it?

hichris123

>>borkthebot

DoorknobChatbot

Unknown command borkthebot.

hichris123

>>plzsendtehcodez

DoorknobChatbot

12:49 AM

Unknown command plzsendtehcodez.

hichris123

@Doorknob ^^ & ^^^^

Doorknob

@hichris123 What would they do? :P I meant useful commands. Like SE stuff.

hichris123

Uh, hmm.....

>>kickthedoorknob?

DoorknobChatbot

Unknown command kickthedoorknob?.

Doorknob

:P

hichris123

12:52 AM

@Doorknob GitHub source plz?

Doorknob

@hichris123 github.com/KeyboardFire/stackexchange-chatty

hichris123

@Doorknob Commit & push plz?

Doorknob

@hichris123 Commit and push what?

hichris123

\"#{e['content']}\"

^ Why do you escape it?

@Doorknob Updated code for the bot.

Doorknob

@hichris123 Ok

@hichris123 Where is that?

hichris123

12:55 AM

sec.send_message ":#{e['message_id']} Hello! That message was \"#{e['content']}\" and your username is #{e['user_name']}." ... etc

Doorknob

@hichris123 Because quotes?

DoorknobChatbot

(removed) to you too, hichris123.

hichris123

Nevermind. :P

@DoorknobChatbot Removed to you, DoorknobChatbot.

Doorknob

Code updated

hichris123

		agent.agent.http.verify_mode = OpenSSL::SSL::VERIFY_NONE

@Doorknob Uh... are you patched? :P

Doorknob

12:57 AM

@hichris123 Too lazy to do proper SSL. :P

hichris123

... but are you patched?

Doorknob

As in Heartbleed?

hichris123

Yeah.

Doorknob

Uh, idk :P

I should probably check

hichris123

... yeah, you should. :P

Doorknob

12:59 AM

Wouldn't that only matter if SE turned evil though?

Since I'm only connecting to SE with the SSL

DoorknobChatbot

Seth starred that.

hichris123

Meh, true.

Doorknob

@Seth It's spying on you... :O

Seth

and I will kill it! >:|

Doorknob

Wait, what? Noooo! :P

hichris123

1:00 AM

Your SSL cert is... weird @Doorknob.

Doorknob

@hichris123 ?

Seth

@Doorknob just joking. but turn that star thing off.

Doorknob

@Seth I do when I'm running it for spam and stuff. Right now it's running just for fun. :P

Seth

it's terribly annoying.

DoorknobChatbot

Bot killed manually

Doorknob

1:01 AM

Meh, okay fine

Seth

I don't mind the bot, but I don't like it announcing when I star things.

@Doorknob hm, ok.

DoorknobChatbot

Bot initialized. Type >>help for help.

Seth

I don't mind as long as the star part doesn't run consistently.

ManishEarth

@hichris123 he's acting as a client. No heartbleed

hichris123

> Issued to *.ipage.com

@ManishEarth Aren't clients affected, too?

Doorknob

1:02 AM

I need to test to see if I can see who the flagger of a message is. But I can't just flag a random message. What should I do? -_-

@hichris123 ... where did you see that

hichris123

If SE went bad, of course.

@Doorknob keyboardfire.com

Doorknob

@hichris123 Probably because my webhost is ipage ;P

hichris123

... would it be bad to flag a message as a test (flag for moderator) for @Doorknob? (cc @Manish, @Seth)

Doorknob

@hichris123 I can't see flag for moderator. Only mods can

I meant like a normal 10k flag that I can see

hichris123

@Doorknob Nevermind.

:P

Well, if you were blue... :P

Seth

1:05 AM

@hichris123 not at the moment.

Doorknob

Maybe on DS or Puzzling. :P

Seth

@Doorknob This is so offensive.

There. :P

Feeds

hichris123 has removed Blaze from the list of this room's owners.

hichris123

... oops, I messed that up.

Doorknob

@Seth Heh, let me switch the bot over to my account so I can test that, thanks :P

hichris123

1:06 AM

@Seth re-roomowner @Blaze plz?

Stack Exchange

Seth has added Blaze to the list of this room's owners.

Seth

@Doorknob ;P

DoorknobChatbot

Bot killed manually

Doorknob

Bot initialized. Type >>help for help.

@hichris Flag that plz. Not sure if it will work from my account

(I mean Seth's message)

hichris123

Flag now?

k

There.

Doorknob

1:07 AM

Thanks!

(marked as invalid :P)

Examining logs

hichris123

... that blue box is so annoying. :P

Doorknob

Bot killed manually

hichris123

... so you admit you're a bot, eh @Doorknob?

Doorknob

@hichris123 :P

@PearsonArtPhoto I can see that you handled that flag. This is highly troubling

hichris123

... that's a problem.

@Doorknob Meta post.

Doorknob

1:12 AM

Definitely

You think it's major enough for a new meta post?

hichris123

... maybe.

Or just edit it to flags/stars?

I dunno.

Doorknob

Or would it be considered a "security flaw" to be reported via "contact us"

(Although that's kind of fruitless now that the code is open source :P)

hichris123

in Android on Stack Overflow Chat, 10 secs ago, by hichris123

^ @PearsonArtPhoto FYI (see transcript for context)

Doorknob

I'm going to post a new meta post. "Sensitive chat flag data is exposed via /events and/or websocket."

hichris123

... hmm... did it expose the flagger @Doorknob?

Doorknob

1:14 AM

Yep

hichris123

@Doorknob Wait, so you could see I flagged it?

That's not good.

Doorknob

Yeah, that's, as I said, highly troubling

This may potentially expose previous flag data too

hichris123

... so basically what you're saying is anyone who's 10k and above on SE can see who flagged something, and who handled that flag?

Doorknob

Yup.

I'm testing /events now to see if I can see past flags

Could you let me talk in Android somehow? I requested access :P

hichris123

@Doorknob I need neb or some room owner to.

Doorknob

1:18 AM

Oh ok

"Yeah, though neither Doorknob nor I are mods on SE" Not for long, anyway. points to ES :P

PearsonArtPhoto

@Doorknob Why do you need to talk in Android?

Doorknob

@PearsonArtPhoto To contribute to this discussion (which is now, supposedly, taking place here, so no need anymore ;) )

PearsonArtPhoto

Basically, there are 3 SE chat servers, or at least there was. There might now only be two, not sure...

Doorknob

Yeah, chat.meta.SO is no more

PearsonArtPhoto

There used to be one for SO, one for MSO, and one for everything else.

If you have privileges in chat in one SE site for the SE server, you have them everywhere in chat. At least, most privileges.

For instance, I can take ownership of this room, being a mod on a site.

Doorknob

1:21 AM

Yes, because this is chat.SE. But how is that related to the flag stuff we were talking about?

Stack Exchange

PearsonArtPhoto has added PearsonArtPhoto to the list of this room's owners.

Lol

Flags are global.

Correct.

PearsonArtPhoto has removed PearsonArtPhoto from the list of this room's owners.

Doorknob

1:22 AM

The problem is, I can see who flagged the message. This is supposed to be private information.

PearsonArtPhoto

Ahhh, didn't know that.

Hmmm... In that case, you not being a moderator shouldn't know that, and I would ask the question on MSE.

Doorknob

And if I'm right, I can see who flagged any message, ever. Which is definitely a problem.

@PearsonArtPhoto MSE now. Old habits. ;)

Yeah, I'm writing up the question now

PearsonArtPhoto

Make sure to include a screenshot.

Doorknob

I'm just going to include my chatbot logs.

And a link to this transcript.

PearsonArtPhoto

Well, for now, I'm leaving this room, good luck!

hichris123

1:31 AM

@Doorknob == chat.meta.SE.

@Doorknob ... posted yet?

Doorknob

@hichris123 I'm trying to see if I can see the flaggers from that flag without the bot constantly listening

hichris123

... what do you mean?

Doorknob

If I can do this, then theoretically I can see the flagger of ANY message EVER.

Does the timestamp 28079799 make any sense to you? Supposedly, it's now.

hichris123

@Doorknob UNIX timestamp perhaps?

Doorknob

Looks like it's in seconds. The new one was about 40 more than that one

hichris123

1:36 AM

Hmm...

Does chat have its own JS?

Doorknob

It's definitely not a unix timestamp

hichris123

c=new Date,c.setTime(c.getTime()+864E5*e.expires)):c=e.expires,c="; expires="+c.toUTCString();

Doorknob

Well, trial and error it is! :P

hichris123

^ Mean anything to you?

Doorknob

Uhhh

hichris123

1:39 AM

@Doorknob ... what?

Doorknob

@hichris123 Decreasing the number until I see the message I'm looking for. :P

That's... a cookie?

hichris123

@Doorknob Probably. :P (un-minified JS. :(

Doorknob

Alright, time for trial and error, then! :D

facepalm

That's the last message ID.

Not a timestamp.

Wait, maybe not.

I'm so confused O_o

hichris123

@Doorknob This is the unminified chat-js: gist.github.com/hichris1234/f74abd1c2e61f67efe0b

... if you're bored. :P

Doorknob

Okay, I give up. I'm just going to post the MSE thing now. :P

hichris123

1:46 AM

rofl

What's this?

UserMerged = 30

@Doorknob ... what happened to the meta post? ;)

Doorknob

@hichris123 It's being written. ;)

hichris123

pokes @Doorknob with a sharp stick

No mod hammer, sorry. :P

Doorknob

is metal

0

Q: Sensitive flagger data is exposed via chat WebSockets (and possibly /events), allowing "private" flags to be publicly visible

So, after I figured out that I could see who starred a message (highly related), I figured I might be able to find out the flagger of a message too. So I tried. Here's some data from my logs: hichris is about to flag {"event_type"=>1, "time_stamp"=>1398388054, "content"=>"Flag now?", "id"=>2807...

bug chat privacy chat-flags

@hichris

hichris123

Okay, upvoted. :P

Tim Stone

That's a not-unknown issue, but I'm not entirely sure why it hasn't been addressed.

Doorknob

1:59 AM

@TimStone That's... interesting

I have no idea why it wouldn't be addressed

Tim Stone

It's possible that the people who would be addressing it actually don't know about it, but it's been mentioned before.

Doorknob

Linky plz?

Tim Stone

Not anywhere public, I don't think.

Doorknob

Oh, ok.

hichris123

@TimStone Know anything about the 'timestamp' returned by the websockets?

"time_stamp"=>1398387950

^ That one.

Seth

2:06 AM

I think it's because no one develops chat anymore.

Tim Stone

What about it?

hichris123

@TimStone What does it mean?

Tim Stone

It's the current timestamp. :P

(but multiply by 1000 in JavaScript for the seconds -> milliseconds conversion)

hichris123

Oh, duh.

@Doorknob ^^

I've even done that before. :P

Doorknob

@hichris Wrong timestamp.

This one:

{"t"=>28080034, "d"=>34}

Annonomus Person

2:07 AM

@TimStone Multi π cation!

hichris123

Oh, there's a different one?

Annonomus Person

Awwh not Pi symbol...

hichris123

8

A: Wikipedia oneboxing only works for languages with a two-letter code

I have changed chat to accept up to 15-character subdomains for Wikipedias, and I've also added the dash. If I didn't miss any, zh-classical is the longest one, so this should catch all of them.

:P

Annonomus Person

Weird image... :D

Seth

Are you developing chat again? I've got a few feature-requests :P — ɥʇǝS 14 secs ago

Annonomus Person

2:09 AM

Why is your name flipped on my screen!?!?

How did you flip your name @seth? :D

hichris123

@AnnonomusPerson He's obfuscated on meta.

:P

Seth

^^

Annonomus Person

ouu∀

Hmm.....

hichris123

No, you're not doing that. :P

Annonomus Person

¡uᴉnƃuǝԀ

hichris123

2:12 AM

in Tavern on the Meta on Meta Stack Exchange Chat, Feb 26 at 2:23, by Shog9

oh, hey... @Seth unrotated his name. Here I thought we elected some other Seth.

Annonomus Person

@hichris123 How mad would people be if I changed my username to that on my mod site? You technically couldn't ping me

hichris123

in Tavern on the Meta on Meta Stack Exchange Chat, Jan 23 at 20:41, by Shog9

@Undo yeah, I'm personally not inclined to give this jackass any more attention, but if Seth (how the hell do I ping you, @ɥʇǝS?) is concerned he should contact us & we'll follow up.

The two relevant Shog pings. :P

@AnnonomusPerson Uh... pretty mad. :P

Annonomus Person

@hichris123 I'm gonna do it! :P

I should write my bio like that :D

> ˙uo spuɐɥ ʎɯ ʇǝƃ uɐɔ I ƃuᴉɥʇʎuɐ oʇ ouᴉnpɹ∀ ʎɯ ƃuᴉɔuǝɹǝɟuᴉ puɐ sllᴉʞs ʍǝu ƃuᴉuɹɐǝl sǝʌol oɥʍ ʇsᴉʎqqoɥ ʇɥƃnɐʇ-ɟlǝs ɐ ɯɐ I

Seth

Just obfuscate it on meta please.

But you should change person to penguin :)

hichris123

That's so annoying @Annon. :P

Annonomus Person

2:13 AM

upsidedowntext.com

@Seth Yeah... but the button's so far away :D

Like what, three clicks?

> ʎlʇɔǝɹɹoɔ pǝllǝds sɹǝʇʇǝl ʍǝɟ ɐ ɹǝʌo ssǝuǝnbᴉun ɹǝɟǝɹd I ʇnq ,,'ʞɐǝɹɟ,, ɹɐɯɯɐɹƃ ǝɯǝɹʇxǝ ɐ ɯɐ I ˙ǝnbᴉun ǝɯ ǝʞɐɯ oʇ ʇᴉ pǝᴉɟᴉpoɯ I os 'ƃuᴉllǝds ǝɯɐs ǝɥʇ ɥʇᴉʍ sɹǝɥʇo ǝɹǝʍ ǝɹǝɥʇ ʇno punoɟ I ɥɔɹɐǝs ʞɔᴉnb ɐ ɥʇᴉʍ ʇnq 'dn ƃuᴉuƃᴉs dn puǝ pᴉp I ,,˙ǝɯɐu ɹnoʎ,, ɥʇᴉʍ xoq ʇxǝʇ ǝɥʇ uᴉ ,,uosɹǝԀ snoɯʎuou∀,, ʇnd I ʎɥʍ s,ʇɐɥʇ 'ʇunoɔɔɐ uɐ ɹoɟ ʇsɹᴉɟ ʇɐ dn uƃᴉs oʇ ʇuɐʍ ʇ,upᴉp I

˙♦ ɯɐǝ┴ oɹԀ ǝɥʇ ɟo ʇɹɐd ɯɐ puɐ ǝʇᴉs ouᴉnpɹ∀ puoɔǝs ǝɥʇ uo ʍou ɯɐ I ˙ǝɹǝɥʇ uoᴉʇɐʇndǝɹ 008 oʇ ʇoƃ I ˙pǝlᴉɐɟ ɥɔᴉɥʍ 'ɥɔunɐl ǝʇᴉs Ɩϛɐǝɹ∀ ƎS˙ouᴉnpɹ∀ ʇsɹᴉɟ ǝɥʇ uᴉ pǝʇɐdᴉɔᴉʇɹɐd I

hichris123

meta.meta.stackexchange.com doesn't exist. :(

> The Q&A site meta.meta.stackexchange.com doesn't seem to exist…yet.

You can vote for it to be created through our democratic, community-driven process at area51.stackexchange.com,

proposes meta.meta.SE site on A51

Annonomus Person

@hichris123 Lol!

> 'ɯoɔ˙ǝƃuɐɥɔxǝʞɔɐʇs˙Ɩϛɐǝɹɐ ʇɐ ssǝɔoɹd uǝʌᴉɹp-ʎʇᴉunɯɯoɔ 'ɔᴉʇɐɹɔoɯǝp ɹno ɥƃnoɹɥʇ pǝʇɐǝɹɔ ǝq oʇ ʇᴉ ɹoɟ ǝʇoʌ uɐɔ no⅄

hichris123

... that's the you can vote thingy. :P

Seth

@hichris123 ahaha

@AnnonomusPerson hah ;P

Annonomus Person

> Ⓘⓢ ⓣⓗⓘⓢ ⓡⓔⓐⓛⓛⓨ ⓐⓝⓝⓞⓨⓘⓝⓖ ⓣⓞ ⓐⓝⓨⓞⓝⓔ? Ⓘⓕ ⓢⓞ, ⓖⓞⓞⓓ!

More stuff!

hichris123

2:16 AM

What do you think would happen to me if I did propose m.m.SE on A51?

:P

Annonomus Person

@hichris123 Only a few days until you're an example... go ahead!

¡ǝlɟɟɐʍ ɐ ʇoƃɹoɟ ʇɐɥʇ uɹoɔᴉun ǝɥʇ ǝɯɐlq 'ǝɯ ǝɯɐlq ʇ,uop ˙ǝldoǝd ǝɯos oʇ ƃuᴉʎouuɐ ʎllɐǝɹ ɯɐ I

Gotta go. Cya

hichris123

Cya!

hichris123

7:42 PM

Oy

Undo

8:18 PM

Oy

6

Q: The API is being very standoffish

I was working on Blaze and noticed that I was getting quite a few of those nasty backoff violations. I checked my code for infinite loops and whatnot, then checked the dev console. Here's the timeline: I call /answers with my key and a pagesize of 100. The exact path I call: https://api.stack...

bug api

@hichris123 ^ Can you repro this?

hichris123

@Undo Hmm, gimme a sec.

Yes.

On Stack Overflow.

Undo

And not any other sites, right?

I think I might poke Kevin.

hichris123

Correct.

Undo

looks for 'poke Kevin' button

hichris123

doesn't have access to that button yet

:(

Undo

8:21 PM

can't find button

:(

Annonomus Person

Community had some of her questions closed on those sites, and decided to ragequit. — Yannis 16 hours ago

lolololol

Undo

Taken up singing, @AnnonomusPerson?

Annonomus Person

@Undo ˙ʎuunɟ ʎllɐǝɹ ʇsnɾ 'oN

Okay, I'll stop that :D

Undo

My dog sighed when you did that.

hichris123

has no email yet :(

Annonomus Person

8:29 PM

What kind of dog?

I could see you with a poodle IMHO

@Undo Or like one of those dogs that fits in a teacup so you could put your dog in your diamond hat... wait you wouldn't risk the well being of your hat ;P

Undo

Of course not

@AnnonomusPerson google.com/search?q=shorkie+tzu&tbm=isch

But bigger

I posted a picture somewhere

Annonomus Person

A user suggested a edit where they pointed out that that could damage your computer. Should I allow?

Undo

link?

Annonomus Person

0

A: My Servo Won't Sweep Smoothly

In electronics, as usual in situations where a cricuit is misbehaving and we don't understand why, a solution that generally works is to add a decoupling cap between +5V and GND. In your case, I would put at least 220uF; that would ensure two things: the voltage used to control the servo neve...

They pointed out that doesn't meet USB 2.0 specs and could damage computer

Undo

meh

Annonomus Person

8:33 PM

arduino.stackexchange.com/review/suggested-edits/669

Undo

that's meant for a comment

Annonomus Person

They commented...

Undo

Borderline

I dunno :P

Annonomus Person

Can I merge comments manually if they're adding just a link?

Undo

I wouldn't.

Annonomus Person

8:47 PM

0

A: Are questions that are only related to Arduino by the parts used on topic?

I personally agree with your policy. I know we're both mods and we have similar viewpoints and all, but IMO it's been pretty much decided that it belongs on SO or EE if it doesn't require specific knowledge of the Arduino platform/software/code/hardware/IDE/etc. That is what CM (community modera...

3ventic

8:58 PM

CM is community manager, not community moderator..

Transcript for