Of course, during the interview Paul said that he taught here, but he's listed as a student, not a faculty. I also figure it would be inappropriate to look him up in our SIS.
I can't work out why, but it seems the vibrate and haptic feedback functionality on my SGS2 stopped working recently. I've checked all the settings, and they all show as enabled. I've tried using *#0*# and *#0842# test codes to run the vibrate functionality, but they have no effect either. I'm ru...
@Polynomial well I've missed that. My guess would be burnt motor or even more possibly one of the wires detached when you pulled your headphones plug out, it's all next to it: youtube.com/watch?v=3JA3PXNYjJM (how about this link, smeg or not?) hehe
We did alright! Finishing 78 out of 898 competing teams!
We successfully solved 4 of the challenges presented:
'Compression' - Solved by Gilles
A crypto challenge
We managed to get the source code for an encryption service running at 54.234.224.216:4433. Download
Solution Details require...
@d3c4ff I think my favorite is when their salespeople call you an idiot for not buying their product. Then ask to speak to your manager to report your incompetence.
@AviD from memory, my GPU could get upto 110 deg stock without issues. I think it was rated for 120. But check the specs of the card. it should show up somewhere.
Morning all.. in case people haven't seen it, interesting post on the complications of moving stack exchange to SSL everywhere. nickcraver.com/blog/2013/04/23/…
It's interesting, in that some of the implementation issues aren't what I'd have expected as problems (the bit about meta.*.stackexchange.com as a problem)
@Ladadadada yeah I expect I'll go read some more now I've found it :) also on a train all morning so I have some time..
I've been looking at implementing SSL where I work for ages but we have two or three extra confounding factors.
We didn't have the foresight to bring all external content into our own CDN, so we have years of hotlinked images and videos and mp3s that can probably never be converted to SSL.
@TerryChia Whilst I've not used them recently i'd say postfix over sendmail every time. Postfix is relatively straightforward to configure and sendmail can be a nightmare :)
weird, even if i do a normal shutdown, my xp partition still contains a 1.5GB pagefile.sys when mounted from debian. should that not only be the case when i hibernate?
I'm doing a CTF application for my final year project. I wanted to craft a SQL injection flag but I don't wish that they can simply found out the SQLi vulnerability by injecting ' . Hence, is there way to make SQL injection harder but not impossible using PHP?
@Polynomial I saw a nice SQLI somewhere that involved two form fields, and putting in an open comment ( \* ) in the first, and a close comment in the second, to bypass some logic that sat between the two.
@lynks that's too easy imo, but I just had one answer like that... not sure if OP got it tho, but since he was disclosing live websites he doesn't own in now deleted comments, I felt I need to wrap it in a (see-through) candy wrapper. ("My God, It's full of stars!" LOL)
In the novel, the quote is even better: "The thing's hollow! It goes on forever, and... oh My God, it's full of stars!"
@TerryChia The OP was clearly after exploiting it, not sanitizing it... The looong discussion in the comments would show that, but I pointed @RoryAlsop to some OP's comments that were later deleted. Better that they were too IMO.
@Polynomial im tempted to go on and fly all my ships into rubble. i had a lowsec pvp char with a jaguar that I was too terrified to risk. it would be nice to take that out in anger :P
@TerryChia I don't really have a whole lot of experience with Postfix to form a good opinion. Sendmail has the time advantage. If you want to do something you can find the examples on how to do it. Postfix is probably the best bet for that.
@TerryChia I think postfix is the default mailer for the newer RHELs.
Same here. I use it almost exclusively as my unit converter.
@RoryMcCune That Craver blog post was good. Thanks for that. I agree that the metas are a problem, but I would argue that cert generation is less of a problem. It depends entirely on how they do their certs.
I can go from CSR generation to signed cert in as little as 15 minute. Worst case I submit the signing request at the close of business and the signed cert is ready for me when I wake up.
It entirely depends on who you go with as your certificate vendor and what options they have.
On a different topic, every time my RFID takes a couple of seconds to open the door I quickly think "Oh shit! They found out about the thing and they fired me"
@lynks Being a developer can have a career path. It depends on what you want to achieve with your life. Your experience will grow and you'll go through software architecture, software engineering. I personally wouldn't call someone like Jon Skeet a person without a career.
@lynks Don't get me wrong, I don't think I'll ever take that path (the developer's path) but just because I don't like it doesn't mean I'm gonna look-down on it.
(I'll check this conversation later, now I have to run) See you all
There are actually a lot of people who follow a "developer career". Not a career in a given discipline which involves development at some point, but just "developers". Ultimately, this makes for the overwhelming quantity of poor code which can be observed everywhere in the field.
@Adnan absolutely, but I think that it is becoming less true. 'developer' is certainly still a job title, but what i was trying to point out was that 'writing code' is (very slowly) becoming a 'basic IT requirement' and less a 'specialty'
@lynks I disagree. Having a basic understanding of programming or being able to dabble with code is to being a career developer what being able to to slap a band-aid on a cut or knowing how to dispense aspirin is to being a physician. @Adnan's reference to Jon Skeet is one example of a career developer, and Raymond Chen would be another. blogs.msdn.com/b/oldnewthing His level of expertise is, I would say, quite worthy of aspiring to attain.
@lynks I would disagree with that in most cases. There's a big difference between being able to code an application and being able to write a piece of code.
Yup. Never rely on black-listing mechanisms like that for safety. It's broken, and can result in some interesting SQL injections:
$query = "SELECT id, title, body FROM posts WHERE id = " . mysql_real_escape_string($_GET['id']);
This can still be injected:
1 OR 1=1
Resulting in:
SELECT id, ...
can I get some support on this comment thread please?
the guy is clearly not versed in security, but still pushes his incorrect views
@ScottPack :P I think my point is something along the lines of "if i was looking at applicants for <insert technical but non-development job here> I would still count some development skill as an important part of the job. People who can write scripts and tools tend to get things done faster.
Take the example of a receptionist I once knew who accidentally copy-pasted every file in a large directory, yielding copies all appended with "(1)". he was deleting each one in turn, and there were hundreds.
@lynks I would take development skills into account, but I wouldn't hire someone with a majority experience in development as a Network or a Systems Admin without them convincing me they can do the admin skills.
Certain aspects of the skillset are complimentary, but they are different skillsets.
Similarly, I would probably value admin experience in a developer. Primarily because, eventually, the code they write is going to have to be handed off for someone to run.
I've had far too many conversations with developers who don't seem to understand what the terms "packaging" "documentation" or "unattended startup" means. Similarly, I've talked to far too many admin types who can't do anything unless it's written out step by step with exact command line options specified.
@Polynomial hahahaha You're advocating fixing the "I can't eat soup with a knife" problem by using a fork, instead of just switching to a spoon. – Polynomial
We did alright! Finishing 78 out of 898 competing teams!
We successfully solved 4 of the challenges presented:
'Compression' - Solved by Gilles
A crypto challenge
We managed to get the source code for an encryption service running at 54.234.224.216:4433. Download
Solution Details require...
I'm doing a CTF application for my final year project. I wanted to craft a SQL injection flag but I don't wish that they can simply found out the SQLi vulnerability by injecting ' . Hence, is there way to make SQL injection harder but not impossible using PHP?
