Root Access

That Brazilian Headless Horse

12:02 AM

@JourneymanGeek Like this?

Journeyman Geek

exactly

wat

Didn't the part at the back get blown up?

actually this looks almost intentional.

That Brazilian Headless Horse

@JourneymanGeek I don't care if it's intentional! Who says "let's demolish half this building and call it a day"?

bwDraco

So do modern desktop motherboards POST faster?

Journeyman Geek

depends on how they're set up

Also, a lot of systems hide the post screen

bwDraco

12:21 AM

!!/taytaytaycatconfirmed

ChatBot John Cavil

@bwDraco That didn't make much sense. Maybe you meant: taytaytaycatconfirmed

Bob

POST time can depend on what peripherals you have attached.

bwDraco

Google Now on Tap on desktop Root Access returns Taylor Swift, lol

Bob

USB is a big one.

That Brazilian Headless Horse

Hey @Bob, can I add you on steam?

bwDraco

12:26 AM

Root Access == Taylor Swift 😛

Bob

@ThatBrazilianHeadlessHorse Sure. Do you have anyone else from RA?

At work right now so I can't really dig up the profile...

That Brazilian Headless Horse

@Bob JGM and Allq. I looked for a "Bob" on their friendlists, didn't find one :P

I found hits site (steamparty.info) and want to try it

bwDraco

I'm sure @kerbalspacecat will like seeing this but I'm ignored :(

Bob

I have 39 invites o.O

That Brazilian Headless Horse

@bwDraco Seeing what? Ignored what? Huh what? Wat?

:32276633 Yeah

bwDraco

12:32 AM

10 mins ago, by bwDraco

That Brazilian Headless Horse

Oh

bwDraco

Apparently, Google thinks Root Access is about Taylor Swift.

The room description might be the reason for this behavior...

> For all you Super Users out there. Current topics: Technology, Tea & Taylor Swift. You have backups, right?

Bob

@ThatBrazilianHeadlessHorse Prob is I'm sure half my game library is actually in gifts (bought as gift for a few sales in case I didn't want to play one :P) and unredeemed humble bundles

That Brazilian Headless Horse

@Bob I have dozens of unredeemed IHBs in a spreadsheet.

I have to someday organize it, filter the repeated titles and put in on those giveaway sites

Bob

We also tend to find decent-sounding games to play and then buy em :P

bwDraco

12:36 AM

!!/xkcd 1373

ChatBot John Cavil

I'M PLUGGING IN MY PHONE BUT THE BATTERY ON THE SCREEN ISN'T CHARGING

bwDraco

Just popped up on my mind because my Nexus 9 was 22% charged (though plugged in) as shown on the screenshot.

That Brazilian Headless Horse

@ChatBotJohnCavil To me is 92348945789346896 notification icons.

It's the modern version of dozens of toolbars

bwDraco

I tend to keep my devices relatively free of junk.

That Brazilian Headless Horse

I see someone like that on the bus and have to control my urge to clean their notifications

What's the point of having 10 messengers, 3 email apps, etc and never opening them?

Journeyman Geek

12:39 AM

lol

bwDraco

> When someone posts a screenshot of their phone, I can't pay attention to the content if their battery is low.

Ben N

My Android recently-ish started pushing zillions of sports-related notifications and I have no idea why

bwDraco

Screenshot?

Ben N

I don't even watch sports (with the exception of the Olympics)

It's not doing it at the moment :/

bwDraco

Pull down the notifications the next time you see it. Be sure to ping me.

...and yes, I consider 22% to be low.

In fact, I consider anything below 30% to be low.

Journeyman Geek

12:41 AM

@BenN sure its not malware?

That Brazilian Headless Horse

@Bob I'm actively avoiding the "buying" part. If a game seems really interesting and is in the 10 BRL range (can't use USD because I've seen games with the same price in digits BRL/USD, some varies by region AFAIK)

Ben N

I don't know how I would have gotten malware on my phone, but I guess it's possible

That Brazilian Headless Horse

@BenN You can long-press a notification and it shows what app started it.

!! s/clean their notifications/clean their taskbar/

ChatBot John Cavil

@ThatBrazilianHeadlessHorse I see someone like that on the bus and have to control my urge to clean their taskbar (source)

Ben N

I'm pretty sure it's a Google app (sometimes the icons include a G) but I'll try that

bwDraco

12:56 AM

kerbalspacecat

Hi

bwDraco

(9.5 MB GIF)

(and my NLE software crashed on exit)

I try to keep all GIFs under 20 MB. Anything larger than this will be posted as a GIFV.

Bob

@bwDraco If we're talking about those posted to chat... I'd suggest 10 MB or even 5 MB.

bwDraco

Okay.

Bob

Personally, I think 2 MB is about as big as oneboxed data should go.

bwDraco

1:00 AM

I do check GIF sizes before posting.

Bob

Problem is people on mobile...

bwDraco

I'll limit to about 5-10MB in the future. (I did post a 16MB GIF a while back.)

Bob

It doesn't even affect me personally anymore cause I now have more mobile data than I know what to do with.

But... others here aren't that lucky

bwDraco

It's not an issue for me even if I'm on LTE but about 15-20MB is as much as I'll accept.

Bob

@bwDraco I really think this is a problem that SE should fix, but they've not done so yet. Bleh.

bwDraco

1:02 AM

There ought to be click to play.

Bob

@bwDraco Consider a fairly typical monthly data cap is something like... 1 GB. Maybe 2-3 on the higher end.

That gives you some 30-100 MB per day.

Using a good chunk of that (involuntarily) on a single image... :S

bwDraco

I have 3 GB and generally don't even hit 1 GB, but I realize some folks have very limited data allowances.

Bob

Yea, I'd prod slightly with a "try to keep it down" with something in your <20 MB (<10 MB?) range, but more than that and I'll start moving them out of the room if I see them.

@bwDraco tbh I'm not entirely sure what's normal in US, UK or EU.

Ben N

Heh, I just stumbled upon your MSE request for click-to-play

Bob

I do know @DavidPostill has rather limited data even at home :\

@BenN Yea, I think I asked that after someone posted an 80 MB gif -_-

bwDraco

1:07 AM

Oct 17 '15 at 18:57, by DragonLord

@tereško Sorry, but I have to flag this for mod attention. The animated GIF is 73 MB in size, which is dragging my connection down.

Bob

There's also the potential for abuse. Someone could maliciously post a 200 MB GIF :O

bwDraco

(200 MB is the limit for Imgur)

Bob

Of course, that'd probably be followed pretty quick by a banhammer (if malicious), but not until it's had an impact :\

@BenN This one?

8

Q: Can we make oneboxing optional on mobile chat?

As the title says. It'd be nice to have oneboxing optional on mobile chat, especially if it were something like click/tap-to-reveal. Why? Well... my data plan is crying at the tens-of-MB GIFs that get posted now and then. Related: Add support for .gifv format in chat onebox One of the recent...

bwDraco

Anyone with a server with sufficient storage and bandwidth can post images of arbitrary size. I could easily post a multi-GB GIF on one of my servers and link to it if I wanted to.

Bob

Huh, there's GreaseMonkey for FF Mobile now

bwDraco

1:09 AM

That's the problem. Once you think about it from the standpoint of an attacker, it becomes readily apparent that this can be an DoS attack vector against SE chat users.

Bob

I could do click-to-reveal in a userscript :D

bwDraco

...and this is why I need to learn JS.

Bob

Hm. Either intercept chat code or do it on DOM mod... the latter might be too late? I wonder if removing the img stops the load.

Eh... if I remember when I get home, I'll try.

bwDraco

@Bob Mind if I add to your post describing security implications?

Journeyman Geek

ehhhh. Unless you're on mobile or have a super limited data plan...

DDOS is a bit of an extreme way to describe it

bwDraco

1:14 AM

Not DDOS. DOS.

Journeyman Geek

same difference. Still extreme.

Bob

@bwDraco Go ahead.

Journeyman Geek

unrelatedly, I'm starting work tommorrow. I think tommorrow is 9-6, but I donno after that...

so any pings during office hours are likely to get responded to much later.

Bob

@JourneymanGeek What do you count as super limited, though?

1 GB is common (less than that is still common...). A single 200 MB gif is a good chunk of it.

Journeyman Geek

@Bob a gig or two I guess. I've almost never had a wired broadband connection with restrictions.

Bob

1:16 AM

I suppose you could say people in RA are more likely to have greater limits.

But, hey... I was on 1-1.5 GB for a few years.

Journeyman Geek

but I think the term DOS is inappropriate here. I suggest "PITA" AKA "My Donkey has agony internally"

Bob

IIRC @DavidPostill has 5 GB across all devices (tethered?)

bwDraco

@Bob Done.

Journeyman Geek

(just for the record, I think click to play/hiding oneboxes is a good idea)

Bob

@JourneymanGeek Eh... I think DoS actually describes the malicious actor case pretty well.

Journeyman Geek

1:18 AM

but not everyone is malicious.

bwDraco

8

Q: Can we make oneboxing optional on mobile chat? (Potential security exploit!)

As the title says. It'd be nice to have oneboxing optional on mobile chat, especially if it were something like click/tap-to-reveal. Why? Well... my data plan is crying at the tens-of-MB GIFs that get posted now and then. Related: Add support for .gifv format in chat onebox One of the recent...

feature-request chat mobile-web onebox security

Journeyman Geek

I for one don't always check the size of the gifs and other images I post.

Ben N

@Bob Yep, that's the one!

Journeyman Geek

If I THINK its large or know its large, sure I > it and mention its big

Bob

@JourneymanGeek Never said everyone is... just thought the potential was there.

@bwDraco -- not sure I like having that in the title :P

That Brazilian Headless Horse

1:19 AM

@JourneymanGeek I did. The last one I posted I reduced from 22MB to 800KB.

Ben N

The new title might be editorialized just a little much for my taste

bwDraco

Edited out.

Ben N

Also, sorry about the time I oneboxed a 180MB GIF - I didn't know it was so huge!

That Brazilian Headless Horse

!!wat

ChatBot John Cavil

Journeyman Geek

1:20 AM

@BenN which is why I followed the whole line of "this seems an extreme term"

;p

Wouldn't "this could be a potential security exploit" be better as a comment?

Bob

Back in a bit

Pc just died

bwDraco

> This has security implications because an attacker can post an image of arbitrary size on any server with sufficient storage and bandwidth and link to it on chat. Because chat automatically loads direct image links from any source, one could, with relative ease, post multi-GB animated GIFs and quickly exhaust user data allowances, effectively denying service to chat users.

Journeyman Geek

0_0

bwDraco

This is especially true if the attacker is using a CDN for the image, which isn't exactly expensive.

Journeyman Geek

ehhhh. You're overthinking it

bwDraco

1:23 AM

Can't help to think about it from an attacker's standpoint.

That's just how security experts think.

Journeyman Geek

True, but we have a reasonably robust defence too

bwDraco

Not that I'm an actual hacker but I've taken a computer hacking course and know about this.

Journeyman Geek

an attacker would need at least 20 rep, and you can usually get a mod's attention within a few hours

Ben N

ROs should be able to take care of such shenanigans too

Bob

@JourneymanGeek Eh. We've seen ... questionable... users in here.

Journeyman Geek

1:25 AM

they can kick but... not edit?

Bob

Anyway, that was all from a bit of a random thought => chat.stackexchange.com/transcript/message/32277076#32277076

@JourneymanGeek Nah, move the message.

Journeyman Geek

@BenN barrier of entry is higher

the hard part is getting the 'right' mod

Bob

@JourneymanGeek read the scrollback a bit :P

I think I said above - I'd probably move (to trash?) anything > 20 MB if I see it

Ben N

Deleting/moving messages ought to do it, right?

bwDraco

I might be ready to become a room owner but not 100% sure at this point.

Journeyman Geek

1:27 AM

(locals, mods familiar with the channel - I'd trust jokerdino or terdon to do the right thing, but we've had some non local mods overracting in the past)

@BenN moving the messages takes care of the immediate issue

Bob

@JourneymanGeek The problem is "a few hours" is long enough for a fair bit of damage.

Journeyman Geek

not the person causing the issue

Bob

And we're talking monetary damage here...

bwDraco

^^^ This.

Bob

I've seen charges of 4c/MB, 5c/MB

200 MB can cost $8

Journeyman Geek

1:28 AM

@Bob I was thinking the prospect of someone posting a bunch of large gifs maliciously ._.

Once again tho, I think click to view is a good idea

Ben N

Oh, but when it comes to getting 20 rep, you don't actually have to earn anything

Journeyman Geek

Just not the whole .... "OMG PEOPLE COULD ABUSE IT, PANIC..."

Ben N

Just associating 20 accounts together will do the job

Journeyman Geek

@BenN nope

Bob

@JourneymanGeek Whether malicious or not, there's the potential for that damage. Malicious could be much worse - they could post far more...

Journeyman Geek

1:29 AM

you need it on one site

Ben N

I saw a user in here a while back who had 1 rep everywhere

Journeyman Geek

and proper earned rep (but association needs 200 anyway)

Bob

@JourneymanGeek You're kinda exaggerating the reaction there.

Journeyman Geek

@Bob ehhh, Maybe I'm assuming @bwDraco is overreacting...

Bob

It's not so much "INSTANT PANIC".

It's "This could happen. If it happens, it's bad. Please fix it."

2

bwDraco

1:30 AM

^ Yup.

Bob

@JourneymanGeek ...y'know, I agree with him here. Heck, I brought it up first -_-

Journeyman Geek

Maybe I'm overreacting to the prospect of over reacting. or playing the feline's advocate...

Ben N

Also relevant: meta.stackexchange.com/questions/253487/…

Bob

This doesn't even affect me personally anymore. I don't really have a reason to panic. I have some 50 GB now...

But I still want to see this fixed, cause it could seriously affect other users.

That said... I'm somewhat regretting bringing this up in chat/meta now.

Journeyman Geek

@BenN wierd. Coulda sworn the requirement was per site...

@Bob meh, that's what they are for

Bob

1:32 AM

Certain people who might or might not be here might or might not be the type to do this now that they know...

Journeyman Geek

I actually think its a good idea for other reasons, and asked about in the past.

I consider it a usability issue rather than a security one

Bob

@JourneymanGeek It's really both, IMO.

@JourneymanGeek The type of person to post random abusive spam is the type of person to do this.

Journeyman Geek

Yeah

Bob

@JourneymanGeek I think I said above - yea, we can probably clean up pretty quick. Yea, they'll probably be mod/banhammered pretty hard. But that's still enough time for damage.

Purely reacting is not really enough... it's a bit different from just saying something offensive.

At the moment, it's a hypothetical. I don't want to see it become a reality.

Journeyman Geek

yup

That Brazilian Headless Horse

1:43 AM

@JourneymanGeek Apparently they can use 20 x 1rep meta.stackexchange.com/questions/253487/…

Journeyman Geek

yeah. I assumed they fixed that ._.

That Brazilian Headless Horse

@Bob ROs can move messages? I can't!

arda

@ThatBrazilianHeadlessHorse are you a to?

R o

Dammit phone

You can click on the room drop-down on right side of screen and pick move messages if you are

Ctrl+click and Shift+click applies.

kerbalspacecat

!!caaaaat

ChatBot John Cavil

That Brazilian Headless Horse

1:46 AM

@arda I'm a ~~gato~~ ~~potato~~ sorry, wrong cat

@arda aaaah...

Bob

O_O riots in Bangalore...

Journeyman Geek

@Bob yeah, they keep hogging all the water :(

el gato potato masho!

@ThatBrazilianHeadlessHorse you should be able to

and IIRC kick

That Brazilian Headless Horse

@JourneymanGeek El Gato Macho?

Journeyman Geek

masho.

That Brazilian Headless Horse

Sexism!!!!!!!111111one

Journeyman Geek

1:54 AM

You sayin a woman can't be a macho woman?

IS THAT WHATCHA SAYIN?

kerbalspacecat

Yes

That Brazilian Headless Horse

@JourneymanGeek Yeah, I need to use the room dropdown

@JourneymanGeek Not that I know of.

Journeyman Geek

@ThatBrazilianHeadlessHorse could you click on a regular user's nick and check?

it should be the last thing in the list.

Else I'd need to break out and RO aibobot. Can't trust em robots. They don't smell right.

That Brazilian Headless Horse

@JourneymanGeek Oh, I can "kick-mute"!

Journeyman Geek

yup

Its for shorter periods, but would get you time to find ~~an adult~~ mod to handle things

bwDraco

2:04 AM

It's more like unchecked input allowing malicious content.

That Brazilian Headless Horse

So, I submitted a talk proposal to the upcoming WordCamp. It was accepted. I didn't expect it and I'm aprehensive.

Journeyman Geek

\o/

Break a leg. Better yet, break someone elses leg!

That Brazilian Headless Horse

Actually, I sent two proposals. One I had already presented at a security conference last year at an, ahem, top renowned national university ;P

Well, more of my boss came to me and said "we're having a security conference, you like WordPress, you're giving a talk on WP security".

So I freaked out and read lots and lots of stuff and managed to pack 60 pages of slides in a presentation of 45min

(I also helped organizing the conference with the rest of my team, by the way)

kerbalspacecat

And you did all that without a head?

That Brazilian Headless Horse

and this year I'm helping organizing the local WordCamp, for the 2nd year

kerbalspacecat

2:09 AM

Wow

That Brazilian Headless Horse

@kerbalspacecat I hadn't been cursed yet back then

kerbalspacecat

Ah

That Brazilian Headless Horse

Last month I was bitten by a headless mule

Headless Mule

The Headless Mule (Portuguese: mula sem cabeça, IPA: [ˈmulɐ ˈsẽ̞ȷ̃ kɐˈbesɐ]) is a character in Brazilian folklore. In most tales, it is the ghost of a woman that has been cursed by God for her sins (often said to be as concubinate or fornication with a priest within a church) and condemned to turn into a fire-spewing headless mule, galloping through the countryside from Thursday's sundown to Friday's sunrise. The myth has several variations concerning the sin that turned the cursed woman into the monster: necrophagy, infanticide, sacrilege against the church, fornication, etc. == Origins and... ==

@kerbalspacecat I know, right! It's almost like the men fear and hate women.

Have you read the original text of Bram Stoker's Dracula?

It's so sexist I rolled my eyes so much I became cockeyed

Anyway as I was saying....

This year I'm again part of the WordCamp team

Although the new organization chose to label me "volunteer" instead of "part of the organization team" so I'm not getting a new shiny badge.

But I digress

Besides having agreed to write a dozen and half blog posts (and freaking out on a nearly daily basis) I will help on the event day itself

And on the very last minute I decided to submit two proposals

One was the aforementioned talk on WP security, which I was betting they'd chose

Another was "Setting up a dev environment with git, Docker and WP-CLI".

It was accepted and I have only a rough idea on the contents. >_<

Well, I have two weeks to write it.

If I know myself well (and I know myself since I was born), this is what will end happening:

Journeyman Geek

0_0

Crushing durian with hydraulic press

►

that durian looks... a bit rotten

Bob

2:25 AM

@JourneymanGeek s/that durian looks/all durians look/

@JourneymanGeek yea, I found out by email

because our support offices are closed, apparently o.O

Journeyman Geek

(basically they are upstream, court will tell them to release water to TN, which results in... well this. I totally blame politics.)

@bwDraco I literally mean it looks like a durian that's rotten

and I'm singaporean, and the malaysians are firm believers in letting them drop off the trees themselves...

and that looks like its a few weeks past its stink by date.

That Brazilian Headless Horse

@JourneymanGeek It really looks like some fruit I almost recognize

Journeyman Geek

@ThatBrazilianHeadlessHorse jackfruit and breadfruit are less stinky cousins

Also do not require personal protective equipment to cut open

Journeyman Geek

3:02 AM

@ThatBrazilianHeadlessHorse if the mule is headless... what did you get bitten with?

Bob

43

Q: Our teacher is encouraging us to use cracked software

I'm taking a course on Mathematica, which is a bit expensive for me to afford. On the first lesson of this course, the teacher told us how to crack this software, and asked us to have Mathematica 11.0 installed on our computers by this Wednesday. However, I just don't want to use cracked software...

teaching undergraduate copyright legal-issues china

@JourneymanGeek I blame SR for my current thoughts...

Journeyman Geek

lol

Paul Vargas

3:44 AM

I wonder something ... How does Stack Exchange, Inc. earn its money?

Journeyman Geek

3:55 AM

@PaulVargas advertising

there's actually a question on this on meta

204

Q: What is Stack Overflow's business model?

I once answered a question that asked how Stack Overflow makes money, but that was before the time of VC. Now, Stack Overflow has cash, and they have an ever-growing list of employees, but where's the business model? The Experts-Exchange team took the time to answer its own Q&A about its site (...

discussion stackexchange business business-model

SE also has been experimenting with letting folk run their own copies a few times

The 'stackbabies' AKA SE 2.0 started with that

also its worth considering that for a site its size (and importance!) SE has a relatively small amount of infrascture

Paul Vargas

@JourneymanGeek Thank you so much. That was very helpful.

bwDraco

5:13 AM

!!/learn taytaytaygooglenow <>http://i.stack.imgur.com/klld1.png

ChatBot John Cavil

@bwDraco Command taytaytaygooglenow learned

bwDraco

5:30 AM

I think @kerbalspacecat is going to have a field day with this...

Good night.

Bob

@kerbalspacecat I like how Sony actually releases detailed specs :D

Well, reasonably detailed.

Journeyman Geek

5:46 AM

All manuals were once like this ._.

Bob

@JourneymanGeek "were"

Journeyman Geek

yup.

Bob

6:16 AM

@JourneymanGeek I think I need to ask a hwrecs :P

Gah. Never mind. Can't think of how to write it :P

Journeyman Geek

@Bob what sorta hardware recommendation?

I often find talking through the requirements of what I need is super handy

Bob

6:35 AM

@JourneymanGeek Summed up in one sentence? USB power bank that can do USB-PD, probably at 9V but maaaaaaaybe need 15V.

AFAICT they don't exist :\

Journeyman Geek

ah

Bob

@kerbalspacecat Rumors that there'll be a firmware update for the Note7 (and maybe S7?) to enable 4G/3G dual-SIM O_O

Isn't that supposed to be a hardware thing?

Journeyman Geek

@Bob yes and no

I think its a matter of baseband, radios...

USB C?

Bob

@JourneymanGeek USB-PD implies USB-C, yea

Journeyman Geek

ah

Hmm, heh. I would find something like that handy with my next laptop ;p

Bob

6:56 AM

UDP-over-TCP! funfunfun

Journeyman Geek

lol

WHHHYYYYYYYY?

0

Q: someone is bullying me in computer class

someone is sending me messages in computer class trought notepad, also they keep closing my session when I try to study, how can I know who is? is thera a way to reply, or to stop what they are doing?. all the computer are connected via ethernet

windows-8

._.

Bob

ihavenoideawhatimdoing.jpg

@OliverSalzburg Did you have fun with azure? :P

Whoops, I have two VMs in separate VNets that need to talk to each other.

Oh, I know, I'll just add a NIC to each with a new VNet! Wait, no, can't do that.

Hmm. Ooh, Maybe I can add a VNet to an existing NIC? ...nope.

Maybe I need to link the VNets together? Let's see...

Create a VPN gateway on VNet1... create a VPN gateway on VNet2... assign a public IP to each... pay for the public IPs...

Create a connection between the two gateways because you need the gateways...

What a convoluted mess :P

Journeyman Geek

7:17 AM

That's the way we do things? ;p

Oliver Salzburg

7:36 AM

@Bob Lots!

Burgi

morning

Bob

sudo bash -c "killall sshd && service ssh start"&

*prays*

Burgi

what on earth is an "ocean mind"?

Thanks Burgi, is not for you, but i am new to this site and got a url in google to put a quest, so i have did here. But some people why there are making as down vote, by the way this a right quest. if they ocean mind then they should explain the same — Nik Varma 2 hours ago

Bob

open mind?

Journeyman Geek

quest?

Burgi

7:41 AM

shrug

Oliver Salzburg

@Bob Azure is pretty neat, unless you're planning to use a domain in Azure AD with SSO. That's where most problems came from. So I dropped that idea, because it was mostly nice-to-have. The bigger problem later was that nobody in the client's office has credentials to log into their current hosting provider's website and they don't have access to the mailbox that is tied to the account

I used to have those credentials, but someone must have changed them

It's a clusterfuck of epic proportions