The DMZ

kalina

22:00

I either get 150-195

Rory Alsop

@kalina you should do it the way I do - I have no problems with it at all...

Simon

@RoryAlsop Should I upvote that?

kalina

or I get 200 and another 200 of votes that don't count because I rep capped

Rory Alsop

@Simon might work

Simon

oki

AviD

22:01

@RoryAlsop now.... we wait.

ManishEarth

@rory anime.stackexchange.com/questions/6416/…

@avid which post? (re:vote rory)

AviD

@ManishEarth the one he posted a moment ago.

BUT only if you believe it is upvoteworthy

or they will ban the whole DMZ as one big voting ring.

@ManishEarth now... we wait.

Scott Pack

And if anyone knows about getting hit by the vote fraud algorithm it's @AviD.

Simon

I can read removed posts. It says: "i suk".

AviD

@ScottPack hehehe.

okay, I'm 98% sure I figured out the headphones too.

Scott Pack

22:07

They go over your ears.

AviD

I'm not listening.

the hat.

the secret hat.

Scott Pack

What is it?

AviD

headphones.

Scott Pack

>_<

Simon

Typical, 2 old men who don't understand what the other is saying.

AviD

22:10

hmm, I'm perturbed. Neither of my experiments worked, even though all the evidence points that direction.

Simon

Welcome to the real life.

AviD

@Simon oh, but I'm not wrong. I'm just missing some details.

Simon

They all say that.

Rory Alsop

@ManishEarth ah - I have no presence there

ManishEarth

@avid maybe it is getting a great answer badge for an old question?

Oops, answer

AviD

22:21

@ManishEarth nope, I have a datapoint that disproves that.

Gilles

@AviD has anyone gotten it outside SO?

ManishEarth

Hmm

AviD

@Gilles hmm, I think there was some on MSO.

ManishEarth

@avid all datapoints support your hypothesis?

AviD

maybe what my theory is missing is # of views?

@ManishEarth yes, but I havent found many yet.

@ManishEarth well, except for you and @RoryAlsop. But that could still just be timing.

ManishEarth

22:23

Ah.

Rory Alsop

So now - we wait

Simon

I'm already hungry as nobs, god damn it.

AviD

in fact - I have one datapoint that has very few variables in it. Timing is really the only variable unaccounted for.

oo, eagle hat. cuz of all those spamflags. that automatically get approved.

Gilles

9

Q: How do I have exactly 20 hats?

I have exactly 20 hats on Stack Overflow: How does that work? I thought that once you get to 20 The Milliner immediately bumped you up to 21. I seem to have it though, which is weird.... Also, I recall having 19 hats before getting those headphones (yay sekrits, it must have something to do w...

this guy got the headphones on SO shortly before 19:54 today

stackoverflow.com/review/suggested-edits/3614854 ?

AviD

yeah, that was my theory.

I havent got it yet though. Again, timing.

Gilles

22:27

and? did you try it?

want me to help?

AviD

@Gilles might also be accumulative.

Gilles

@AviD this was the only time during the bash that he rejected a suggested edit on his own post

he did vote to reject others before

AviD

@Gilles ohh, his own post. that is a damn good point, surprised I missed it.

and explains a lot.

Gilles

19

A: Winter Bash 2013: Secret Hats

They're not really all that secret if we give it all away so easily, are they? Here are some hints - if you can figure them out, you're on your way to some SECRET hats: ...then I took an arrow to the knee. Earned ten of the most meaningless points on the 'Net I live... AGAIN! He ain't no drag...

one of these is probably a hint

ManishEarth

@avid quick, make a suggestion to one of my posts on phy

Rory Alsop

22:33

@AviD I saw a post of yours that I thought needed a spelling correction. You may disagree.

AviD

@RoryAlsop you.... cant suggest edits...!

Gilles

@AviD Here's an experiment

@AviD yes I can

Rory Alsop

@AviD can't I?

what happens if you roll back that one?

AviD

@RoryAlsop doesnt it automatically get approved?

@RoryAlsop which one?

Rory Alsop

@AviD probably - give it a shot

10

A: Why CSRF Token has to be a Cryptographically Strong Random number, in Double Submit Cookies method?

Short answer: To prevent brute forcing the CSRF token. Let's take a trivial example: let's say your token is a single digit, accepting values from 0 to 9. Now sure, an attacker cannot read this value from the cookie or header, but she does not have to - she can just send 10 CSRF requests, one...

it should be rejected as far too minor

Gilles

22:34

@AviD quick, reject mine before someone else does it

AviD

@Gilles which??

Gilles

67

A: Do we need to logout of webapps?

This is not a trivial, simplistic question. There are several different aspects you need to consider, and several different mechanisms and countermeasures that apply to several different threats in several different scenarios that are affected by several different clients. Let's examine these one...

oh, it looks like it was silently rejected

Rory Alsop

did that work?

Gilles

nice

ManishEarth

How are you guys suggesting edits?

Gilles

22:36

I made an anonymous vandalizing edit, and it doesn't seem to have appeared in /review

Lucas Kauffman

I did that as well to earn a hat

Gilles

@ManishEarth incognito window

AviD

@Gilles oh duh

Simon

Mods abusing the system, I love it.

ManishEarth

Can't do from mobile. Care to edit one of my physics posts?

Simon

22:37

It reflects the society quite well.

Rory Alsop

@ManishEarth sure, why not

AviD

@Simon testing, not abusing.

ManishEarth

Ping me with the link then, thanks :)

Simon

@AviD Yes, they're also testing if they're gonna get caught when they steal moneyz.

ManishEarth

We steal moneyz every day

Gilles

22:39

don't get excited, it's not (just) that

Rory Alsop

1

A: How do voltage and voltage drops over a circuit relate to work done?

But then that means that the electron in the 5 ohm circuit would have done 5x the amount of work (or work done on it) of the 1 ohm circuit over 5x the duration. You're confusing work with power here. Work has nothing to do with duration. If an electron crosses a potential difference of $V$ ...

Gilles

or else they've been really sneaky and it has to be from different IPs (I didn't bother)

Simon

@ManishEarth I like the way you speak.

ManishEarth

@rory I think it needs to be a suggested edit

Rory Alsop

@ManishEarth dammit - dunno how to do that

ManishEarth

22:42

I think @avid can do that

Rory Alsop

I'm only a 2k on Physics so thought it would just be normal

Simon

2k? That sounds awesome.

AviD

@ManishEarth try that again. right now.

w000t, got me some sweet headphones!!

Simon

wat

AviD

@Gilles we were right.

Simon

22:44

@@@

Rory Alsop

@AviD can you, eh, do me, like? :-)

Simon

^

(no homo)

AviD

8 mins ago, by Gilles

@ManishEarth incognito window

Simon

den wot

ManishEarth

Much appreciated

Gilles

22:46

@AviD how so?

AviD

@Gilles the headphone hypothesis.

Gilles

huh

I did get the hat

but I didn't get a notification

Simon

Yeah I never get a notification.

AviD

@Gilles jeez, I hope SEI doesnt audit us for hat abuse. We would get slapped.

ManishEarth

@gilles has happened multiple times to me

Simon

22:47

@AviD r3portet

ManishEarth

@simon notifications are part of the premium plan

Gilles

@AviD we and a jillion other users. At least that doesn't do anything bad to the site, not like the people who post bad questions, or even like the guys who spam comments and chat stars

Simon

@ManishEarth I already pay 100$ a month to be allowed here, would it cost me more?

Scott Pack

@Simon Speaking of which, I haven't been receiving your payments.

Simon

@ScottPack Can I pay twice next month?

Rory Alsop

22:48

@AviD hmmm - nothing yet...

seems logical. DOne the necessary, but no sign

I'll wait

it may take some time

Or else I've entirely misunderstood

AviD

@RoryAlsop done.

Scott Pack

As you get older it takes a little while.

Simon

lol

ManishEarth

Lol

Scott Pack

@AviD So is it just rejecting a suggested edit?

Rory Alsop

22:50

@ScottPack that's good, right?

AviD

@ScottPack on your own post.

Scott Pack

@AviD Ah

Simon

BUT I CAN'T DO THAT.

Rory Alsop

@AviD yep - - still nothing

ManishEarth

@rory iirc the hats come in batches so yoy may have missed the one avid got it on

AviD

22:50

@RoryAlsop well, there are pills that could help.

@Simon oy. see the 1 rep guy discussion from this morning....

Simon

@AviD wot

AviD

@RoryAlsop no, you already have it. Hence the "Done".

Simon

OH

ManishEarth

I got it too. Yay headphones

Simon

NAJ

AviD

22:51

@Simon bigger problem is that no one would bother editing your posts.

Rory Alsop

@AviD ahhh - hence your 'no notification' message. All the others have pinged a notification

Simon

@AviD Except a fake account @@@

Scott Pack

@RoryAlsop DEVOPS

Simon

Can one of you nurdz suggest an edit on one of my Qs?

I asked nicely.

AviD

@LucasKauffman that hat edit is weak.

Lucas Kauffman

22:54

@AviD I made it community wiki...

Simon

@AbeMiessler Mourning.

AviD

@LucasKauffman ah, I was looking at expanding the user's name...

@RoryAlsop @ManishEarth I'm still bothered by the hipster hat though. I have nearly conclusive evidence, with the exception of it not working with you two. Unless this one only gets triggered overnight.

ManishEarth

@simon I would, but mobile. Unless you can find a site where I don't have edit privs and you have posts

Rory Alsop

@AviD are the only remaining data points votes and time?

Simon

@ManishEarth Bah it's fine, thanks though.

AviD

22:56

@RoryAlsop no. votes are accounted for, views are too. It is just timing.

ManishEarth

@avid might be, due to most SE things having to do with <redacted> take a day

Rory Alsop

@AviD how about accepted answer?

Lucas Kauffman

@AviD yea wanted to make sure I got the hat so I did an extra minor edit

AviD

and, obviously, something secret that did not occur to me.

@RoryAlsop nope. One DP makes that irrelevant.

@LucasKauffman ha, see?

dammit, @RoryAlsop, you're everywhere! Even all up in my datapoints!

Lucas Kauffman

@AviD aside from making it community wiki

AviD

22:57

though, to be fair, I dont have a lot of those.

Rory Alsop

Ah - Frosty the snowman is a puzzle to me. I chose 3 sites to only make upvotes on yesterday, and didn't get it.

@AviD erm - what I do now?

AviD

you got @rory in my datapoints.

Gilles

@RoryAlsop “cast only upvotes on a day, to at least five different users”

AviD

hey, what date did the hats start?

ManishEarth

15

Rory Alsop

23:05

@Gilles ooo - didn't read that. But they must have been different users....

ah well - it's nearly another day

AviD

dammit. Okay, I just found a counter point. My theory has been disproven, even accounting for overnight delays.

Abe Miessler

@Simon, mourning

AviD

But it definitely is something around that, just dont know what I'm missing.

ManishEarth

@avid :(

AviD

@ManishEarth btw YOU are one of the counter points, here on sec.se....

Gilles

23:07

@AviD what hat are you talking about now?

AviD

@Gilles Hipster.

ManishEarth

Huh. But.... O.o

Simon

Why don't we hack the damn servers and find out? This is InfoSec after all.

ManishEarth

Ohhhh, I see

AviD

@Simon THIS IS SPARTAAAAA!!!

Gilles

23:09

@Simon too much work. Just offer a dev a beer

Simon

@Gilles That should work too.

@AviD Good movie.

ManishEarth

@avid maybe the X has to be the only X?

AviD

@ManishEarth nope.

ManishEarth

Ah. Hmmm

AviD

outdoors.stackexchange.com/q/4997 and note the answerer.

I NEED MORE DATA!!

ManishEarth

23:11

Hah

AviD

that outdoors one is pretty definitive though.

unless.... might have to do with his meta post?? WTF?

Hipster seems to be very rare.

ManishEarth

Do any of you have strange hat stories?

AviD

beta?

ManishEarth

?

Rory Alsop

@AviD haven't had a chance to try that yet

ManishEarth

23:15

Hmm

AviD

Damn, I love a good puzzle, but I've got stuff to do.

Simon

like wot

ManishEarth

@avid email me the sample space, ill have a look tomorrow morning.

AviD

umm.... its just those two. :$

not enough for a scientific study, I know, but thats all I've found. And counter examples.

Gilles

-9

Q: Hipster Badge Suggestion

I used x before it was popular. Tag badges are created by the system when the first user reaches the bronze level for that particular tag. Why not give a "hipster" badge to the person that caused it to be created? Honestly, I think the very first person to hit a milestone in any given tag sh...

discussion badge-request

probably just a naming coincidence but you never know

AviD

23:22

not far off.

Simon

I think nostalgia through music is the worst.

ManishEarth

@avid what if the hat clue is "I live....AGAIN"

That means that it needs to be recreated

Nope, not it

AviD

@Simon you only say that because the only music you know is impossible to be nostalgic about.

Simon

How would I be able to say that if I've never experienced it, sir?

David Freitag

23:55

woohoo my spark cores are finally here

Simon

n

Rory Alsop

@DavidFreitag I don't know what that means, but it sounds good!

Woohoo

and Yay

!

Simon

!

AviD

you just love an excuse to woo

David Freitag

@RoryAlsop It gives Arduino's and the like WiFi capabilities

spark.io

Transcript for