The DMZ

D3C4FF

00:01

Hehe

done

1

A: Can Skype be prevented from snooping? Are there safe alternatives?

There have been several suggestions that skype is indeed backdoored and evesdroppable. If your concerned about it because Microsoft is now the owner, there are plenty of other alternatives to Skype which I would suggest as the easiest and cleanest solution (besides, if MS is your competitor, why ...

TildalWave

@D3C4FF Oh you repwhore! LOL

D3C4FF

Hahaha. Pretty much word for word right there :P

AviD

07:09

@RoryMcCune I always hear the collegehumor version...

►

@RoryMcCune haha, that is awesome. Thought it was going the other way... This is fantastic:

Lucas Kauffman

AviD

> As of this moment I officially resign from my job as software engineer and will take up work on the farm shovelling pig shit, and administering anal suppositories to sick horses because that will be a thousand times more tolerable than being in the same industry as dipshits like you.

> You read the latest post on highscalability.com and think you're a fucking Google architect and parrot slogans like 'web scale' and 'sharding', but you have no idea what the fuck you are talking about.

> You're going to blow some project to hell because you get a woody playing with software like it's a sexdoll.

3

@LucasKauffman yes, we were all teenagers once...

@LucasKauffman I gave a lightning talk / rump talk at an OWASP conference a few years ago. It was supposed to be 5 minutes, at the conference they told us we can use 10 minutes, decided to go a bit slower and did it in 7.

see, 5 minutes wasnt enough of a challenge. So I decided to do the talk together with my boss - two people, 5 minutes, one awesome talk.

Now that's Extreme Rumping.

Actually one of the talks I most enjoyed giving. We had fun with it.

I would agree with the @RoryMcCune and @ThomasPornin - don't put a lot of words if you want them to read it.

you could try having a few words on a slide. Not even a sentence, just a thoughtshard. Make sure its huge font.

Or, fill it with lots and lots of tiny font, making it obvious they are not intended to read it - and prevent them from doing so.

Blurring the text works good too... Sometimes this is good to give a general idea of the amount of whatever the text is describing.

Like a picture of text, not the actual text.

D3C4FF

07:51

@AviD lol what the hell is this from? xD

@AviD Every hole is a goal?

xD

AviD

13 hours ago, by Rory McCune

@ScottPack but but that's not webscale either!! http://mongodb-is-web-scale.com/

btw @D3C4FF - did you get a chance to look at the answers to my PLL q on SU? superuser.com/questions/583069/how-to-optimize-pll-voltage

D3C4FF

Nah i didn't actually, i tried to find it earlier today but no joy.

AviD

2

Q: How to optimize PLL voltage

I am overclocking my Core i7 (Ivy Bridge 3770K), aiming for a moderate overclock. Currently I have it easily stable at a pleasant 4.4GHZ - BCLK defaulted at 100.00MHz, with the multiplier set to x44. While it is currently stable (tested using Prime95 torture test for a few hours), it does gen...

I'm also worried about doing long-term damage by under- or over- volting something...

D3C4FF

In -theory- overvolting does do damage running it outside of intel specs

but its kinda a case of 'slowly' degrades

AviD

does under-volting?

D3C4FF

08:01

Not afaik. But its not something i've ever really done (water cooling means i care very little about temps :P)

AviD

@D3C4FF fair enough, but according to @David, undervolting the PLL means you can get stable clocks with lower Vcore. which is cool.

I've actually found a small correlation between them - the x43 anomaly has me raising the Vcore (compared to x44), unless I lower the PLL too, beyond what is stable at x44.

Rory McCune

08:33

quality game vid. youtube.com/watch?v=Vxxnq5YAVHw&feature=youtu.be

AviD

@Rory and @Rory: "I’m payin ya for this, so ya better figger her out!”

@RoryMcCune that looks pretty cool

Rory McCune

@AviD I'd object to the characterization in that article but it's pretty spot on really.

AviD

lol

Cryptography: the natural enemy of the Scots.

Surprised he wasn't expecting haggis for breakfast...

Rory McCune

@AviD mmm haggis

D3C4FF

@RoryMcCune vomits slightly

Rory McCune

08:39

@D3C4FF have you ever tried it? It's one of those foods like pate that are great so long as you don't think about what's in it...

D3C4FF

@RoryMcCune I don't eat pate either.

My boss once bought a can of 'classy' cat food and thought it was patte...

He finished about half of it before we told him what it actually was

xD

Rory McCune

@D3C4FF eww, yeah they do look similar. That said pate can be really nice

Terry Chia

@D3C4FF Did you only notice it when he was half way through, or waited till he was half way through to tell him?

D3C4FF

@TerryChia I noticed when I picked it up to have some after he'd had a few, then waited till he'd had about half of it.

I slightly regret not trying some myself :P

He seemed to quite enjoy it to be fair xD

Adnan

09:00

This is new for me. A question in which I don't seek rep-training.

0

Q: What's an attack's computational complexity?

Recently I was writing a business-language report about MD5. In my search a found a paper by Yu Sasaki and Kazumaro Aoki explaining their 2123.4 pre-image attack on MD5. I know that it has something with the feasibility (or in some cases, even the possibility) of an attack, but I don't have a so...

brute-force computation

Terry Chia

@Adnan I tried to answer to the best of my understanding.

Adnan

@RoryMcCune One of the best trailers I've ever seen.

Terry Chia

@ThomasPornin will probably come along later with a much better answer.

Adnan

@TerryChia May I be honest?

Terry Chia

@Adnan Aren't you always? :)

Adnan

09:08

@TerryChia That's exactly the kind of answers I'm not looking for.

Terry Chia

@Adnan What sort of answer are you looking for?

Adnan

@TerryChia After the edit, you're getting closer

@TerryChia I'm familiar with the first part of your answer.

Damn! I'm sorry, I'm not good at this.

@TerryChia How can I make it clear in the question?

Terry Chia

@Adnan I'm not sure really. I was always gonna include the second part of my answer, but I saved it for an edit in case someone sniped me. :P

I only included the first part because others might not know what it is.

What else do you think is missing from mine?

Adnan

@TerryChia Looking at this answer and this answer makes me think that there's some hardware-independent limit, after which "it's just not possible".

Terry Chia

@Adnan Ahh yes. I was searching for that first answer.

Wasn't sure if it was by @lynks or @ThomasPornin.

Adnan

09:19

@TerryChia See? You deserve your title :D

Terry Chia

@Adnan heh.

lynks

09:46

@Adnan would it be useful if I wrote something about big-O notation?

Adnan

10:02

@lynks Probably. I'm familiar with algorithm's complexity, but there might something new. So please, write whatever you think might be helpful.

We're currently having a lecture by a guest professor, it's about cryptography and security. He has just cited Steve Gibson's password Haystacks

Terry Chia

@Adnan In a good or bad light?

Adnan

@TerryChia Good :(

Terry Chia

@Adnan He needs to be shot.

lynks

"Haystacks" appears on line 69422 of my password file

Adnan

@TerryChia It would be illegal.

Should I name and shame?

Naah, I don't think so. I'll talk to him privatly

lynks

10:16

ok so I just read the haystack thing, what a noob.

wow the more i read the worse it gets

Take, for example, the very weak password “news.” If another lowercase character was added to it (for example to form “newsy”), the total password search space is increased by 26 times. But if, instead, an exclamation point was added, (making it “news!”), the total search space is increased by a whopping 1,530 times!

oh dear...

Adnan

@lynks Makes sense, he said "search space" not "entropy".

Terry Chia

@lynks So what does he think about Passw0rd!

lynks

@Adnan i disagree, passwords are not random values and should not be treated as such

Adnan

Yaay.. he started with Alices and Bobs

@lynks That's exactly why I mentioned entropy.

lynks

@Adnan i think you're missing the point. this is about passwords, and making strong ones, and what he is saying is hugely misleading.

Adnan

10:21

I really hate that he abbreviates Cryptography by saying "cryptog." and "crypt."

D3C4FF

@Adnan What happened to Crypto? :(

Adnan

@lynks Yes yes yes, please don't think that I think he's correct. If you notice, I started this conversation with a negative tone about Gibson.

@D3C4FF I know. Right?

lynks

yeah I've never heard anything other than 'crypto', 'cryptog' is weird. sounds a little too close to cyborg.

Adnan

Should I plug Sec.SE when I ask him a question?

But I can't think of a non-douchy way to do it

lynks

@Adnan at least twice per sentence if possible.

D3C4FF

10:26

@lynks Yeah, very suspicious. Besides anyone who spends time writing about cryptograf is almost certainly a cyborg.

Adnan

@lynks What was the key length limit after which it's just not possible to brute-force?

lynks

@Adnan about 190 iirc, thats when you start reaching "solar system" limits

Adnan

@lynks Oh yes yes, 192. If I understood your Applied Cryptography quote correctly.

lynks

yeah, 192 bits requires at the absolute minimum 32 years worth of sun-energy just to iterate through.

Terry Chia

@lynks If I understand it correctly, those figures you gave assumes that energy efficiency is is at 100% right?

Which isn't the case in the real world.

Adnan

10:32

@TerryChia Yes, I alos understood it that way

Ladadadada

The problem with the password padding idea is that it only marginally increases entropy. The padding is almost certainly going to be repetitive and human-chosen. I reckon you have two additional entropy values: the pattern (~ 6 - 12 bits) and the length ( maybe 5 bits, probably 3).

Adnan

YAAY! He said in a very firm voice "Don't roll your own cryptog"

Ladadadada

If a significant number of people actually used this idea, password crackers would build a module for it that guessed the base word and the padding.

lynks

@TerryChia correct, it assumes we can absorb all of the suns energy for 32 years with no loss (impossible), and run a machine that requires the minimum possible energy to change state (impossible), we could cycle through 2^192 states.

note: this does not even begin to mention doing anything in each of those states, so there is no crypto or mathematics here yet.

Terry Chia

So in the real world, even 128bits is more than unfeasible.

lynks

10:35

@TerryChia yep

Adnan

Actually, even if we "absorb" the energy if the sun, I don't think we have the technology to use it.

Ladadadada

The advice also seems to be choosing an extremely simple base word as an example (D0g) on the assumption that the padding makes this irrelevant. It also seems to be advising to use either the same base word or the same padding (or both) everywhere.

Adnan

@Ladadadada Exactly! Thank you!

Ladadadada

The whole thing is trumped by "Use a password manager."

D3C4FF

10:47

anticscomic.com/?p=854

Adnan

Is the bad guy/girl called Eve or Oscar?

lynks

@Adnan eve is the eavesdropper

Adnan

@lynks Then who's Oscar?

lynks

@Adnan trying to think...:P I know Trent is the trusted third party and Malory is a malicious user. Not sure about Oscar.

Adnan

"Oscar, an opponent, similar to Mallet/Mallory but not necessarily malicious. Could be white-hat but still wants to crack, modify, substitute, or replay messages." according to Wikipedia

lynks

10:55

heh, thats a new one to me

D3C4FF

@Adnan Oscar = Doin' it for teh lulz!

M'vy

11:38

Hi there

CodesInChaos

I love rolling my own crypto protocols and schemes :)

Terry Chia

@CodesInChaos Don't be a dave.

TildalWave

12:14

g'day all

Terry Chia

@TildalWave it's 8.15pm. day?!?!?!

;)

TildalWave

@TerryChia How do you say good night then without coming out the opposite of intended? It's a conundrum

or is 8:15pm still an evening? I guess it depends on how long the day is

Terry Chia

@TildalWave I consider it night. :D

Scott Pack

You're both wrong. It's 8:20 in the morning.

TildalWave

@TerryChia good night then :P

@ScottPack one hot morning then with really short shadows

Scott Pack

12:20

@D3C4FF How is haggis significantly different from sausage? /cc @RoryMcCune

@TildalWave Not really, it's about 58F out there. It is supposed to get into the 80s, which is pretty uncomfortable.

TildalWave

@ScottPack 24-25°C here so much the same ... not uncomfortable tho I've just came from the nearby hill ... it's tolerable in the shadow

@AviD why is the answer that completely misses the point and the rest is quotes from online documentation higher rated than the real answer from David?

CodesInChaos

@TerryChia The alternative is locking a real cryptographer in my basement ;)

@TildalWave Because people don't actually read the question/answer. They upvote answers that look good. Quoting the spec is always worth a few upvotes.

TildalWave

@CodesInChaos Wait, we're people too, no?

Scott Pack

12:42

@TildalWave I'm thinking that 20+-2 is probably my ideal.

AviD

@TildalWave there is the fact that people dont read the answer. But more than that, it is a good answer - for SU.

basically saying, the right amount to lower it is not at all.

now, if this was overclocking.SE, that would be different....

TildalWave

@AviD Maybe, but I'm not interested in what's a good answer for SU, and I doubt you are either. David's answer is actually a lot more in line with what I'd expect to be a highest rated answer for the question asked. It explains the logic behind it (supported by facts) and gives recommendations what to look for.

2

A: Higher voltage requirement for lower clock frequency

The short answer is this: Signal integrity is hard, and the rule of thumb higher frequency should require higher voltage is not the whole picture. There are lots of factors that go into high-frequency signal integrity and without looking at the actual failures at an electrical level, it can be v...

Now this one, I've upvoted for pointing out some things, but it's not that useful at all IMO (save for a few links)

When I said some I meant a couple in this case

I actually expected at least one answer from an experienced OC-er that would include a table of values or two and base his/her answer on personal experience... there's a huge gap between OC theory and OC reality IMHO

@ScottPack 24-26 for me... but that's the perceived temperature, the real one might be different (pressure, relative humidity,...)

I mean my ideal temperature is when it feels like 24-26°C

basically, t-shirt time

Rory McCune

13:09

@ScottPack well Haggis is a savoury pudding containing sheep's pluck (heart, liver and lungs); minced with onion, oatmeal, suet, spices, and salt, mixed with stock, and traditionally encased in the animal's stomach and simmered for approximately three hours and sausage isn't :)

2

AviD

@TildalWave absolutely. I plan on accepting it... after I get @D3C4FF's validation... ;-)

Terry Chia

@RoryMcCune youtube.com/…

AviD

@TildalWave agree on that one too. Basically the answer amounts to "go study EE for a few years, then maybe you could understand this yourself".

It's practically almost a non-answer, except that it's not wrong. And, in reality, it doesnt really matter.

Still, I would have liked to understand it.

Rory McCune

@TerryChia nice

TildalWave

@RoryMcCune doesn't haggis also include blood in the mix, like black pudding?

AviD

13:12

@RoryMcCune dang, now I'm hungry

Rory McCune

@TildalWave possibly, like I said earlier, it's one of those foods that I enjoy while I don't think about what's in it, 'cause it would put me off :)

TildalWave

@AviD Yup, I totally disliked that last comment maybe you should ask this on EE

AviD

@TildalWave it does disprove the A51 closure of the overclock proposal, doesnt it... :)

TildalWave

@RoryMcCune we have something similar here, well actually two things... one is closer to black pudding, and the other is what we call the stomach because the stomach it's packed in actually gives it a distinct flavour (some love it, some hate it)

@AviD Let's just say I'm still not convinced the closure was justified... actually less so than when it was closed

AviD

well, out of the 1 q's I've asked over the last few days, I feel David's answer to the PLL q was as good as I could get. Made me comfortable using SU for this...

the other one, less so.

TildalWave

13:17

You can't have one topic being tossed around from one site to another and then call either of the two (or more?) sites as sufficient for the discussed topic

@AviD you mean there's one member that gives satisfactory answers... whose efforts might be better recognizable on a separate site? what I want to say is that you can interpret that either way and while I have a tiny proof more that the OC subsite is needed, I don't have not a hint more of the opposite than when we started this discussion

D3C4FF

Arvo' all :)

AviD

@TildalWave oh sure, don't disagree on that. I meant it gave me hope. The second one took that away.

D3C4FF

@RoryMcCune @ScottPack yep. Pretty much that...

@TildalWave @AviD I agree, i think that the Overclock site would get considerably more 'momentum' behind questions if asked in a dedicated forum. It doesn't seem to 'be their thing'

Adnan

If you have 3-4 minutes with nothing to do. Why not have some fun and help Science at the same time. kgajos.eecs.harvard.edu/ag

TildalWave

@AviD I guess what I'm trying to say is that the suggestion we got on the close question might not be as great as I also thought it was. Who's to say that these very same people that give good answers to such questions on SU wouldn't give even better ones on OC? Shouldn't we then ask them as well? How to do that?

AviD

13:23

So? Let's ask some more questions, not get answers, then lobby for reopening.

TildalWave

@AviD I think it's more to it than just receiving answers and then those questions and answers having votes on them. That's what's been suggested, but now I doubt that's a good indication for whether a new subsite is in order or not.

We have no way of measuring quality and social impact of a non existing site, do we?

AviD

@TildalWave Sure, but if they don't get good answers, then THAT is proof (or at least a damn strong indication) that one IS needed.

TildalWave

@AviD So we can't prove that God exists, but we might be able to disprove its existence to acceptable levels?

AviD

@TildalWave heh, pretty much, yeah :-)

It's more like: We don't know if a new site would be better, but right now we can tell that the site we have is NOT good.

TildalWave

@AviD That doesn't bode well for later reopening suggestion IMHO... It's easy to argue either way

AviD

13:28

what I'm saying is, having decent answers isnt proof that a new site isn't needed, but NOT having ANY answers, IS.

D3C4FF

@ThomasPornin do you know 'playschool'?

TildalWave

@AviD those for the closure can always say but it was sufficiently answered on SU, based on our criteria for new sites. And we could say but SU isn't a new site, so shouldn't it have different success criteria?

D3C4FF

@ThomasPornin this song reminds me of you youtube.com/watch?v=TNxBOmV9tUY

AviD

thats what I'm saying. NOT having good answers - and out of the 3 answers I got, only one was decent - is sufficient criteria for a new site.

or, at least should be.

TildalWave

@AviD This should is what's bothering me. And the politics involved. I'm fine with policy, but not with politics. We have the latter, but not a clearly defined former.

AviD

13:33

because it is always subjective, and contextual.

which I would be fine with, unless it's subjective from SU-PoV instead of from OC-PoV.

TildalWave

@AviD And it will be, until the site is up and running. My pride wouldn't suffer if it turns out to not be needed (so we gave it a try...), but this subjectivism and openness to personal interpretation IS a pain in the butt (why do anything, let's talk more...).

Scott Pack

14:00

@RoryMcCune I wasn't implying that haggis is sausage, but that it seems rather disingenuous to enjoy sausage but snub haggis.

Rory McCune

@ScottPack true true given that sausage can be described as high-fat emulsified offal tubing but still tastes goooood :)

Scott Pack

@RoryMcCune Sausage is the ground remains of leftover organs, scrap meat, and blood spiced with salt and herbs and stuffed into an intestine of stomach.

Strictly speaking I would consider haggis a specific form of the classification sausage.

Thomas Pornin

@lynks Actually it is closer to 225 bits.

37

A: Amount of simple operations that is safely out of reach for all humanity?

As a starting point, we will consider that each elementary operation implies a minimal expense of energy; Laundauer's principle sets that limit at 0.0178 eV, which is 2.85*10-21 J. On the other hand, the total mass of the Solar system, if converted in its entirety to energy, would yield about 1.8...

@D3C4FF It's a brand of toys for young children; very similar in design to the Windows XP default theme (or maybe that's the other way round).

Rory McCune

@ScottPack youtube.com/…

Scott Pack

Time to pull out the headhpones

TildalWave

14:22

@ThomasPornin Win XP? I thought it's more Win 8 ... ya'know ... tiles and all :)

@RoryMcCune hehe and you swallowed it? pun is brilliant :))

Thomas Pornin

@TildalWave No, for young children you need rounded edges. Otherwise they may harm themselves.

TildalWave

@ThomasPornin oh :( so no change of getting life back that cheap, huh? :)

Rory McCune

@TildalWave yes (prime) minister have some quality lines in them.

TildalWave

@RoryMcCune talking of which, how's the new remake? any good at all?

Rory McCune

@TildalWave must say I've been avoiding it, but from what I've seen it's not getting great reviews..

Scott Pack

14:27

We got any Outlook experts in here?

Rory McCune

@ScottPack I use it a bit, not sure I'd call myself an expert... what's the Q.?

Scott Pack

@RoryMcCune I have a recurring meeting that's every two weeks on a Thursday, today being one of the days. I would like to reschedule it to be next Thursday, and every 2 weeks thereater.

My fallback is to change the end date to the last instance, and create a new meeting.

I presume that if I change the start date it will retroactively screw up the calendar?

TildalWave

@ScottPack hmmm this used to be easy enough on the old versions (previous millenium when I last used it), just a calendar change and send updates IIRC, not at all sure how that is now tho

Rory McCune

@ScottPack ahh sorry don't know that one, but your fallback sounds plausible, and could be a better option as I'd have thought that even if the change works it might send out a load of re-schedule meeting invites...

Scott Pack

@RoryMcCune In theory it should just sent out one reschedule, for the recurrance. What I want is for the previous meetings to be a fixed point.

I fear that if I fiddle around with the start dates those meetings will disappear.

Abyx

14:33

are questions like "how to protect my application against RCE/modifications" on-topic on security.SE?

Scott Pack

@Abyx I would say be careful it's not so open ended as to be a NARQ.

Rory McCune

@ScottPack i asked the missus who used to be an exchange admin and she reckoned recheduling a recurring meeting should work ok...

TildalWave

@Abyx there's also reverseengineering.stackexchange.com

Abyx

oh, it's public beta already!

thanks

Scott Pack

@RoryMcCune That's an awful lot of "shoulds" and "reckons" to fill me with not much more than a vague sense of impending doom.

@RoryMcCune I would probably trust her word more were I to receive a Nexus in the post.

Rory McCune

14:36

@ScottPack I always tend to caveat very heavily when it's not something I've done myself and I don't know the precise system config :). She's off nexii these days anyway it's surfaces all the way (luckily for our bank balance she's not taken to handing those out much!)

Scott Pack

@RoryMcCune Dagnabbit! Also yes. If my statement is not couched enough to make you feel skeezy then I'm not doing my job.

@RoryMcCune But yeah, what makes me nervous is the fact that I'm not changing times or days or anything, just which weeks it happens. Say what you will about Oracle/Corporate Time but previous calendar events were pretty well immutable.

lynks

@ThomasPornin ahh but your approach would leave us with no matter upon which to live, whereas my approach would only kill all vegetation on earth.

Thomas Pornin

@lynks Death to all vegetables !

Scott Pack

@RoryMcCune Well, I can't seem to figure out any way to make it work. Changing the start time to next week kills all previous events. There doesn't seem to be a "rechedule" option except for just editing and changing the times. So either it can't reasonably be done, or the option doesn't exist in the Mac version of Outlook.

Rory McCune

@ScottPack ahh you're using the mac version <shudder>

I've never heard good things about that...

Scott Pack

14:43

@RoryMcCune From my uses it's largely equivalent to the Windows version, and is significantly better than Mail.

I do really miss proper hierarchical tree views of message threads.

lynks

i just wasted all my xmp blasters because i didnt realist that proximity to resonators was important :(

Scott Pack

14:59

@lynks It happens. What level are you?

TildalWave

Yo @D3C4FF ^ LOL I'm going for 1337 :P

lynks

@ScottPack about halfway to lvl 2, i got my access code on tuesday

Scott Pack

@lynks That's hard too. L1 bursters don't do a whole lot of damage

lynks

finally found an enlightened lvl 1 portal so decided to take it, plus its in range of a pair of lvl2 portals that i linked today.

i had to walk away with 3 out of 8 resonators still live, i was sad.

TildalWave

Nobody dare vote on my answers! I wanna have 1337 at least for a screengrab!! (you can accept my suggested edits tho LOL)

I'll tell you if I need a downvote :))

Scott Pack

15:07

@lynks Wait, so you're part of the resistance?

lynks

@ScottPack of course comrade...wait...well this is awkward...

3

Scott Pack

Join the Resistance you say? Why not Zoidberg? (V)(;,,,;)(V)

Iszi

@lynks Wow. I'm litterally LOLing right now.

Though, shouldn't it be LingOL?

Or maybe just LOL, kinda like there isn't really such a thing as RBIs or RsBI.

In case you're wondering: No. I'm pretty sure I've never been accused of underthinking anything.

Scott Pack

Don't hurt yourself.

TildalWave

@Iszi FCOL!

Rory McCune

15:17

@lynks a smurf.... in the DMZ.... oh dear...

Scott Pack

@RoryMcCune We could try to turn him?

lynks

@RoryMcCune I had no idea the DMZ was infested with kermits.

Scott Pack

And, by turn, I of course mean learn the error of his ways. Clearly he's been misguided by the idealism of youth.

Rory McCune

@ScottPack could be the only option.

TildalWave

@lynks out of curiosity, what part of the globe are you from? pls don't make me guess! :)

lynks

15:19

@TildalWave UK, midlands

Rory McCune

@lynks we're all well enlightened here (well apart from you that is)

Scott Pack

That's true. There's an awful lot of enlightenment that can be spread about from this room.

TildalWave

@lynks nice thx :) I just don't know for @Poly now... I would dare to guess tho

lynks

@TildalWave Poly used to live in my part of the world, but he moved south

TildalWave

@lynks That would be my guess actually... I've been to those parts and I recognised the... hmmm attitude LOL. Didn't for you tho.

Please don't tell me down south means Norwich!!

Polynomial

15:23

@TildalWave What attitude? :s

lynks

@TildalWave he moved london way i believe.

Polynomial

yes, I moved to London.

TildalWave

@Polynomial hehe there you are!

Polynomial

I am Londoning as we speak.

I'm always here.

at least one of my mental threads polls the channel at all times.

sec, nerf fight.

TildalWave

@Polynomial London... that's a huge area... not Croydon, huh? :P

lynks

15:26

@ScottPack the one thing I dont understand about ingress is why there have been no link penis drawings yet.

Polynomial

@TildalWave I'm north ;)

about as north of city as Croydon is south of city.

Rory McCune

@TildalWave he'll be in a top secret location, probably something like this maps.google.co.uk/…

TildalWave

@Polynomial oh, that rules Peckham out then :)))

Polynomial

@RoryMcCune Super secret.

Rory McCune

@Polynomial has a nice pub next door IIRC

Polynomial

15:28

I'll stand outside and wave as the Google satellite goes over.

Scott Pack

@RoryMcCune snort Middlesex

Polynomial

yup.

Le Pube.

2

er... haha

I meant to say Pubbe.

Rory McCune

@Polynomial I'm guessing knowing the portcullis crew that proximity to a pub was a key factor on location

Polynomial

@RoryMcCune Of course. The new building is being built next to a strip club.

(I wish I was joking)

Rory McCune

@Polynomial new building, where's that going to be?

Polynomial

15:30

@RoryMcCune Next to a strip club.

:P

I don't actually know anything more than that.

Rory McCune

@Polynomial yeah but this is london, there are a fair few of those...

Polynomial

it's not far from here.

I've never been there, so I dunno.

Rory McCune

@Polynomial this is weird, I thought I'd just google the answer and then look on street view... but brought up this maps.google.co.uk/…

which appears to be street view that goes right into someone's office

where they're sitting?!?

Scott Pack

That's...interesting

That's a tiny offce

Polynomial

haha

if you look straight down you can see the tripod

Scott Pack

15:35

I'm pretty sure that's smaller than my office

Rory McCune

@Polynomial I've never seen the walkabout version before, random that they've started doing offices.....

Scott Pack

If you walk out to the parking lot you can see the reflection of the schlub taking the pictures

maps.google.co.uk/…

Then zoom in on the glass

Polynomial

@ScottPack Lies! Everyone knows that people who work for Google have no reflection.

Rory McCune

@ScottPack yeah indeed. must be a new thing they're doing.

Scott Pack

@RoryMcCune We still have pretty poor streetview coverage here

AviD

15:44

@ScottPack worst case, you could always kick him from the room...

Polynomial

17

Q: a better approach than storing mysql password in plain text in config file?

It's always bothered me that many PHP programs require the user to store the mysql password in plain text (in a string or constant) in a configuration file in the application's root. Is there any better approach to this after all these years? So far I have come up with two minimal security boos...

php mysql security passwords

accepted answer seems... eww

I can't quite work out why it's bad, but it just reads as obscurity.

Scott Pack

@AviD I could but that doesn't solve the problem. Right now he's a potential agitator, but it's not his fault. He's been fed misleading information.

@AviD You can't blame a person for being indoctrinated, all you can do is try to correct the problem.

Polynomial

who are we unindoctrinating?

AviD

Well actually, if I were to be an ingressor (ingressian? ingressite?) odds are I would have gone resistance too.

I've seen way too many sci-fi flicks to believe that trusting the aliens is a good idea.

Don't you ever watch Dr.Who??

lynks

'resistance' in my mind is pretty much synonymous with 'good guys', likewise 'enlightened' with 'bad guys' i had no choice.

@Polynomial me :P

Polynomial

15:50

oh god, the worst song just came on the jukebox

PUT A DONK ON IT!

Adnan

@Polynomial I started reading the comments and the answers, I was surprised to see that I have upvoted this one. I really don't remember when

There's simply no better way to do that. PHP, Perl, Python, Java, or any other language.

AviD

@Polynomial I wanted to say, that's more west than north, but for the life of me I cannot recall the name of the neighborhood that I was based in, when I would pop into London every few weeks...

@Polynomial almost spooky how damn many of that exact question there are.

@Adnan really? I've answered here, there are 2 ways.

#1 - dont keep a password at all.
#2 - encrypt it, and have the OS protect the encryption key.

Adnan

@AviD Nope

Polynomial

@AviD hmm... any hints?

not that I know London very well.

Adnan

@AviD How would you go about #1?

AviD

15:56

@Polynomial north, I think it was the black underground line. east of golders green and a bit north (I know, because I've had to travel there to get kosher food :-) )

Adnan

and for #2, OS is already doing a pretty good job managing the access control to the config.php file

AviD

it was back in 2008 ish, so I dont remember...

Polynomial

Hampstead?

AviD

@Adnan OS authentication.... and #2 is only -ish, its not encrypted.

@Polynomial hmm, possibly... sec

Polynomial

Finchley?

Adnan

15:57

Oh wait wait.. by the way. I do not agree with the accepted answer.

@AviD A- Sometimes OS authentication isn't possible.

@AviD The key is still managed by the OS, pretty much the same thing

AviD

@Adnan True. IF its possible, I qualified in my answer.

Adnan

@AviD If I trust my OS with my key, I trust it to manage read access.

Polynomial

@AviD Hendon maybe?

TildalWave

@Adnan hmmm that's for scripted languages. Things change with proper compilers.

AviD

@Adnan if I pull your disk and stick it in my computer, can I get it?

Adnan

15:58

@TildalWave No! NO NO!

@AviD The AviD strikes again. You're right. That slipped my mind

AviD

I think it was something like West Hempstead. I remember going thru Finchley to get there...

Adnan

@TildalWave It's super super super easy to get strings out of compiled code.

AviD

@Adnan DPAPI is a good example.

Transcript for