« first day (1671 days earlier)      last day (3214 days later) » 

12:00 AM
@Xander the fact that you don't know, worries me.
;-)
 
@AviD Ha, touché.
 
12:19 AM
@AviD oh now you're just bragging :)
@schroeder or lol
 
@Gilles pffft
 
I thought I would have a larger portion of that.
 
Does that mean that I have some sort of addiction?
 
@Simon addiction, pls
 
12:35 AM
pls ovid
 
@AviD good job, you're almost caught up with kalina!
 
@Gilles pls
BOOM
 
I am not on either list. Either I win, or I lose. @Avid has not told me which.
 
One more to be #2!
 
AND SHE HAS NO WAY OF CATCHING UP AGAIN
 
12:36 AM
<kalina sets fire to AviD>
 
Given that @Avid is at or near the top of both list, I must assume at this point that I lose.
Oh well. It was a nice run while it lasted.
 
@Xander that assumption is based on your assumption of my self-respect.
 
@AviD True. You might have a "Do what I say, not what I do" philosophy. I'm hoping for that one.
 
That is absolutely my philosophy.
It was so frustrating when my mother would tell me that.
 
@Simon You don't really thing people should like doughnuts?
 
12:39 AM
@Xander or rather, dont do what I say.
 
@Xander Donuts are absolute, everyone should like them.
Donuts are love, donuts are life.
2
 
@AviD I'm having a nice gin and tonic, don't confuse me with all your words.
 
Exactly.
 
@Simon That should be your platform for moderator.
 
@Xander Absolutely. Soon, I'll be shaking hands and offering donuts to everyone.
 
12:41 AM
@Simon you have my vote. As long as I have your donut.
 
MY DONUT?!?
 
@Simon Crap, that means I have to vote for you, instead of for myself.
 
TO BE CLEAR in my previous statement "donut" was NOT a euphemism.
 
@AviD Phew.
@Xander Do we only get one vote?
 
@Simon depends how many donuts we get.
@Simon you actually get 3 votes - but only one will count.
 
12:43 AM
@Simon Well, I've never stood in an election, but the ones I've voted in, we've gotten a first, second, and third choice IIRC.
 
@AviD YOU GET A DONUT, YOU GET A DONUT, EVERYYYYOOONNNNNE GETS A DONUT!
5
@AviD That's what I was expecting, good.
 
@Simon What kind of a doughnut?
 
@Xander A classic: chocolate glazed.
 
@Simon Make mine a Boston Creme.
 
pls, don't be so picky.
 
12:46 AM
@Simon Hmm...No good. If it doesn't have chocolate glaze and boston creme, I'm out. Unless it's an apple fritter. I'm good with an apple fritter.
 
Fine, fine. I'm gonna have to get multiple flavors then.
 
@Simon And how will they be shipped? FedEx overnight, with dry ice? I really don't want a stale doughnut that badly.
 
@Simon I must admit. I have eaten an entire box of a dozen donuts.
@Simon Chocolate glazed with chocolate sauce and chocolate sprinkles.
#Murican
 
@Xander oo, no I want a french crueller.
@Simon one of each.
no, two of each.
and get the others whatever they want.
 
@Gilles Next I want to see the most commonly said word for each person.
 
1:00 AM
@ScottPack SE search doesn't support that, and there's no API for chat
you'd have to make a hell of a lot of requests, and they have pretty stringent rate limits
 
@Gilles unlike @Simon's mom
 
I wonder how much space the transcripts actually take up
 
BOOM
@ScottPack I think mine would be "Simon's mom"
 
@DavidFreitag That should be easy to estimate: yours is message number 22752500
 
@DavidFreitag if printed out, they would totally fill every single branch of Dunkin Donuts, Krispy Kreme, and Tim Horton's.
 
1:02 AM
now take a sample to find the average message size
 
@Gilles Yes, but that's for every chat room ever
I mean just this room.
 
add an estimate of metadata
@DavidFreitag 598264 all time messages
 
@Gilles slackers
 
So I put the bacon in the oven five minutes ago. All I can smell is HEAVEN.
 
gotta pick up the pace, if we wanna crack a million by the end of 2015.
 
1:04 AM
@Gilles How did you find that?
 
@Gilles Oh yeah, it would be rough. Gobs of storage space I'm sure.
I wonder if mine would be 'fuck'.
 
I might write a scraper to pull all of the transcript messages so you lot can run analysis on it.
@ScottPack Or perhaps 'cheese'
 
@DavidFreitag That's unlikely.
 
@ScottPack you've said fuck 111 times and cheese only 38 times (in this room)
 
1:07 AM
Just based on the web search I have 111 fucks, which surprises me. 38 cheese.
 
@ScottPack Don't you mean, "That's unlikely as fuck?"
 
The number 111 seems rather low. I would have expected much higher.
 
262 including every room
 
Again. I expected more.
 
some might have been flagged
 
1:09 AM
I wish I could bottle a smell and save it for later.
 
It's possible.
I know I've been flagged a couple of times.
 
To my knowledge, I've never been flagged.
Flogged, sure, but not flagged.
 
Speaking of flags... I'm going to pour some wine and watch some tv.
 
1:27 AM
by god that is the most perfect bacon I've ever consumed.
 
Bacon is yummy.
 
Without fail I burn the shit out of it on the stovetop
so it always ends up being awful and disappointing
But now...
 
It makes me sad to think that @AviD will never know the perfection that is bacon.
 
Why not?
 
Something about old guys with funny hair saying you shouldn't. I dunno. Sounds like crazy talk to me.
 
 
2 hours later…
3:30 AM
@Xander I'll let my engineers decide.
@DavidFreitag I wouldn't dare to buy a dozen because I'm sure that's what I'd end up doing.
 
@Simon but a dozen is only like a few cents more than half a dozen
 
 
1 hour later…
4:39 AM
@ScottPack you know what goes really well with bacon? More bacon!
 
4:50 AM
and beer
morning!
 
morning
 
that's from Rogue Voodoo Doughnut Bacon Maple Ale porchdrinking.com/voodoo-doughnut-bacon-maple-ale
 
 
2 hours later…
7:05 AM
That looks amazing!
I do like those Rogue Voodoo guys
 
7:49 AM
So IIS-6.0 goes out of support today, I'm sure we won't see many of those left online... well only 1,034,267 exposed to the Internet
 
@RоryMcCune ... yeah ... cos ... no-one uses that any more...
(It's okay - even we are more recent than that :-) )
 
@RoryAlsop pphbt windows server 2003, those will have been removed from all large corps and government bodies round the world
I'm sure I'll never have to write a finding about that!
 
@RоryMcCune lol
 
@RoryAlsop You bragged with that beer once, didn't you? Or was it pretzel-bacon flavored? Was some pink bottle IIRC. How was it?
 
8:07 AM
o0
 
8:22 AM
@TildalWave - mine was the pretzel one. It was delicious! Yes - pink bottle
 
8:44 AM
Oh good, my memory still works. Funny that I'd remember that and I forgot about my birthday this year LOL
 
That's a true sign of old age.
I mean, I completely forgot my birthday is next saturday ;p
 
that's OK I forgot to send you a gift anyway :)
 
Its ok, I don't remember when it is anyway.
 
 
1 hour later…
9:53 AM
@JourneymanGeek I never remember my age. For at least 3 months this year I was 2 years out when folks asked me
Well, it's such a small percentage of the total :-)
 
I don't remember mine either. And I'm not even 30.
 
date math is hard.
 
@CodesInChaos when I need to know my age, I just calculate current year minus birth year and then correct for which half of the year I'm in, as I was born in June
Obviously taking into account epoch rollover as needed
inb4 @Iszi
 
10:06 AM
@RoryAlsop But that requires a brain. Not sure if I posses such a device.
 
MUH DEMUCRACY
 
@ManishEarth Jeez dude where have you been?
 
Working for EvilCorp
former EvilCorp to be precise
 
@ManishEarth YAY MANISH IN CAPS!
 
Also generally busy and doing Rust things.
 
10:08 AM
@ManishEarth we all work for former EvilCorp
 
@TildalWave By former EvilCorp I mean MSFT. Current EvilCorp is, of course, the Google
 
that's what I meant too :)
which reminds me, this weekend's Mr. Robot should be out no?
 
heh. Its an interesting show ;p
I'm not sure if anyone but the protoganist, and maybe his dog is real.
(and the hacking scenes arn't too annoying)
 
@Simon Election question: How many free sweet bagels will I get if I vote for you?
 
@JourneymanGeek true, and that's a rarity
 
10:14 AM
Or the hero being a sociopath with social anxiety ;p
 
that's already been done, e.g. Dexter
 
Dexter dosen't have social anxiety tho.
and its one of those plot ideas they could horribly mangle.
 
true
 
(as someone who has had pretty bad social anxiety, and still has that particular black dog on a leash... ;p)
I'm convinced mr robot is not real
I'm not sure about the crazy hacker chick
 
@ManishEarth I thought you were working for Mozilla, not Microsoft?
 
10:16 AM
@CodesInChaos Hah nope
 
OK then Conspiracy Theory, that's a sociopath with social anxiety
 
@CodesInChaos volunteer for Mozilla, intern for Microsoft
Strangely enough, my mornings for this week are filled with Microsoft meetings, and my evenings are filled with Mozilla/Rust videoconfs
@CodesInChaos I could have applied to Mozilla, but my intention behind this internship is to get an idea of the industry and how it would feel to do programming as a career (still not decided on programming vs physics), and I already have an idea of what it's like working with Mozilla.
And I had this msft offer with me, so I took it
 
@JourneymanGeek Not real as in a figment of imagination? Or not real as in not who he's pretending to be?
 
The former
he's the protoganist's tyler durden
Notice, no one paid attention to him at the bar, or at work
 
@ManishEarth Does that mean that you moved to the US? Or does MS do anything meaningful in other countries?
 
10:20 AM
@CodesInChaos No, I'm interning at Microsoft India :)
working on Office for Android. lots of fun work here
 
@CodesInChaos MS Research certainly does meaningful stuff outside the US
 
I thought MS only does boring stuff like support and sales in other countries.
 
I can move to the US (I'm a citizen), but I should finish college first, and then decide what I want to do next :P
@CodesInChaos nope. thats outsourcing, that's different I guess. This is a proper MS division
with proper programmers who program and all
There's a large Google office nearby too. (Hyderabad is a sort of tech hub place thing)
 
10:34 AM
DMZ is rather blue today :)
 
blue? Where?
 
@JourneymanGeek in the leftmost column
 
good lord am I the only non-mod in here?
 
OH MY GOD. IT IS FULL OF MODS!
4
 
@RоryMcCune NOOOOOO! He broke the chain!
 
10:42 AM
@RоryMcCune and amusingly many of them arn't mods here ;p
 
@RоryMcCune There's only one way to fix this: you need to get elected
3
 
@Gilles ah but you're all mods so you can just delete it :)
@Gilles ooh no that would be a bad plan(tm) I'm too wishy-washy to be a mod
 
@RоryMcCune it took a concerted effort of nagging to get me elected.
(not by me. ;p)
 
@RоryMcCune you've kept @AviD and me right a few times - I reckon you'd be good, actually
 
@RоryMcCune It's strange. The DMZ is known to be one of the few slightly-NSFW rooms on the network, and yet all of its regulars are or become mods
(I was a mod before I became a part of the room, but I think Journeyman/Codes/Tildal weren't)
 
10:52 AM
@ManishEarth us... NSFW.... :op we are usually fairly careful about tagging it at least...
 
@RоryMcCune heh
by nsfw I also include language :p
 
@ManishEarth well there has been the odd occasion of language not exactly be-fitting a high-brow cereberal discussion forum for sure...
 
heh
 
@ManishEarth: lunatics running the asylum? ;p
 
yep
 
10:55 AM
@ManishEarth: Might be either way
 
@ManishEarth I have a hobby - editing such language to be much f*ckier :-)
 
@RoryAlsop ftfy
 
@ManishEarth it's nothing compared to the SF chat
 
sure :)
 
and the DMZ isn't particularly NSFW anyway
 
11:03 AM
yep
 
@Gilles well not when @AviD isn't here anyway
 
non-professional, yes, but not NSFW
 
@Gilles we could just be being professional potty-mouths!
2
 
@RоryMcCune System administration is off-topic here.
 
Man, the nomination candidate score thingy is heavily weighted towards reputation eh?
 
raz
11:23 AM
Yeah
I'll sit this election year out, maybe next time
Also, flagging a question should have a reason as "Trolling"
-3
Q: Rootkit + Kernel Panic = Boom?

McLinuxImagine someone found a Linux exploit that causes a kernel panic and tried to use that to gain root. Would they be successful?

 
11:36 AM
@ManishEarth lol
@TerryChia but that shouldn't actually be a problem here. Odds of us having more than 10 candidates are not that high (my guess)
 
@RoryAlsop Yeah, even the last round had less than 10 IIRC?
I'd like to see @Xander as mod.
 
@TerryChia yeah - which means all candidates will go through to election regardless of rep.
Sure, rep will be part of the assessment folks will make when voting, but only indirectly
 
I actually wanted to say that similar to last time, all the candidates are awesome but @Simon nominated himself.
#burn
 
@raz if you feel you could do the job, and want to do the job, nominate - the worst that will happen is you don't get in
 
raz
@RoryAlsop ehhh responsibility is hard
 
11:53 AM
lol - I have a nice view on modding on various sites. Sec.SE is wonderfully civilised compared to some...
(and I would never want to be a mod on one of the big 3)
 
raz
@RoryAlsop What are considered the Big 3? SO...
 
@raz .. SF and @Simon 's mom
 
hahahahahaha
 
raz
lol!
 
"We all are new to cryptography and creating our own crypto protocol seems like a good ideea – "
2
1
Q: Safety of RSA/AES combination for server communication

Adrian SicaruThe team of developers I am part of is trying to develop a safe way to exchange sensitive data between a server and mobile devices. We have come up with the following algorithm: 1.Device generates private RSA key, and sends the public key to server. 2.Server generates unique to user AES key an...

facepalm
 
12:15 PM
@gowenfawr if you paste a link to a comment alone in a chat message, it's shown automatically
We all are new to cryptography and creating our own crypto protocol seems like a good ideea — Adrian Sicaru 10 mins ago
 
@TerryChia Half of the score is reputation. Whether this is "heavy" is subjective.
 
Thanks @Gilles I don't spend enough time in chat :)
 
12:38 PM
@TerryChia before the candidate score, reputation was shown there instead, so it's an improvement in any case
I think I read in a meta thread somewhere that they decided to keep half the weight for 20k rep because it reflects how much you've participated in the site's primary purpose (posts)
 
12:52 PM
Do you want this question, or do you already have too many similar ones?
0
Q: Saving passwords in database

AlirezaI recently studied a lot about writing secure codes and choose secure method to save the password in database. My question is: is it secure to use ready made libraries or API's for this reason? How we can verify the integrtity of those API's? Thanks

 
yay - that's 5 candidates (or 6 if @Iszi posts a sensible nom :-)
@CodesInChaos Hmmm - not sure we have anything on how to verify API integrity specifically, but we do have a few on how to trust software... so this may be a dupe. It is on topic though
so probably best to ping it through and let's see
 
@ManishEarth Every single bagel will be destroyed and replaced by 2 donuts.
@RоryMcCune pls roro
 
@Simon is that 2 Doughnuts per bagel, or 2 doughnuts for all the bagels?
 
@RоryMcCune Yes, 2 donuts per bagel.
 
@Simon that's a lot of dough
 
1:02 PM
And not a lot of nuts.
 
@RoryAlsop oh no, now I'm going to have to not vote for a good candidate
 
Guigui is always mean to me.
 
1:19 PM
Hello @CodesInChaos
I had a question that bugs me since this morning
How does Yoda speak in the German translation ?
 
I think pretty much the same way as in English.
ending the sentence with subject and then the verb.
 
Speak in an agglutinative language Yoda will not.
 
hmm looking at jedipedia.net/wiki/Jediquote:Yoda he seems to speak with better grammar than I remember.
they changed the word order in most sentences, but I don't see an obvious pattern.
 
Dat moment you get an EY training and they recommend password hashing with SHA-2
I'm going to kick someone's ass in India
 
1:38 PM
@LucasKauffman Ooops.
 
"salts are optional"
 
@LucasKauffman Man, it just gets better doesn't it?
 
@LucasKauffman Lol wtf. Is this the 1980s?
 
looks like it
 
@TerryChia Unix was salting passwords in the 1970s
and I don't think it invented the concept
 
1:44 PM
@Gilles AFAIR these salts were too short to work properly
 
@DavidFreitag @TildalWave Yeah, my Inbox said I had a comment on my nomination - probably from a mod/dev - but I can't see what they said since the nom's not there anymore.
 
IMO we still don't understand password hashing.
 
@CodesInChaos How are you defining "we"? My bet is @ThomasPornin understands it just fine.
 
@Iszi I think the question should rather be 'How are you defining "understand"?'
 
@CodesInChaos they were very short but it was DES anyway
 
1:48 PM
@CodesInChaos I think we have some good notions of what currently known algorithms do, but we are quite dissatisfied with them, and we keep believing that something better must exist.
 
@CodesInChaos I think @ThomasPornin trumps any definition of "understand".
 
All that "sequentially memory hard" stuff is still pretty experimental in my book.
 
@RоryMcCune How's that scandal? @Simon's been saying I'm his ex- dad for quite some time now.
@Gilles Beat me to the punch.
 
@CodesInChaos I think that part of the problem of password cracking is about economics, and many people neglect that point.
 
Crypto is our "transparent aluminum". And @ThomasPornin is Montgomery Fuckin' Scott.
 
1:51 PM
And IMO big websites should encrypt password hashes using a HSM which prevents key export.
 
@CodesInChaos This would probably be easier to ensure if existing HSM were not so expensive and so hard to configure and integrate.
Though one can do interesting things with the small HSM known as "TPM".
 
@ThomasPornin I just Thomas Pornined them
 
I blieve that the word you're looking for is Pornininated.
 
2:07 PM
@CodesInChaos Been thinking about this a bit. Is a design where you HMAC a password with a HSM and store the results in a DB table secure?
 
@TerryChia If you're comfortable with completely relying on the HSM.
Personally I'd first hash using a normal password hash and then encrypt the hash using the HSM.
 
I wish HSMs are more readily available for the hobbyist to play with.
 
@TerryChia As I said, one can use an existing TPM as a cheap HSM. A TPM really is a kind of smartcard soldered on the motherboard.
Usually with the same hardware and performance.
Using a TPM does not mean using all the every-code-is-signed model which some people imagined they could achieve with the help of TPM.
 
@ManishEarth Ha! Sure enough. I just found you in the GAL. Welcome aboard!
@CodesInChaos MS has some pretty big offices all over the world.
 
2:23 PM
@Xander At least in Germany they only seem to have one small MS research lab. Plus boring stuff like sales and support.
 
@CodesInChaos Ditto in Norway.
 
@CodesInChaos We have a few thousand folks in Germany, but you may be right that they're mainly sales and support. We have a huge global support organization.
 
@ScottPack:
5
A: Why does aviation use Zulu time instead of the local time?

Victor JulietZulu time, used in aviation quite often, is another name for UTC (Coordinated Universal Time (French: temps universel coordonné)). It is the primary time standard by which the world regulates clocks and time. It is, within about 1 second, mean solar time at 0° longitude; it does not observe dayli...

 
@CodesInChaos Even in the U.S. product dev is mostly concentrated in Redmond...Most of the other big offices are sales, support, and services.
 
@Iszi have you figured it out what happened then?
have you tried rigging elections before they even started? :)
 
2:33 PM
CSRF all the elections.
 
@TildalWave Not authoritatively. But I think it's fairly accurate to assume the devs didn't like my toying with the nomination form and just nuked it.
@RoryAlsop Okay, I'll bite... Why'd they pick "J" as the letter to skip?
Too many guys making dirty jokes about Juliet or something?
 
@Iszi risk of confusion with I presumably
 
@Gilles Dunno how you mistake "India" for "Juliet". For that matter, I would have probably picked one of the "country name" letters instead to reduce confusion.
 
@Iszi when it's written down
as a letter, I mean, obviously not the codewords
 
INDIA vs JULIET - Nope
Yeah, but seriously what's more confusing? I vs J or "We'll be leaving Mumbai at 0630 India time."?
 
2:42 PM
@Xander My internship actually gets over in a week :P
 
@ManishEarth Boo!
 
Though the way things are going they're probably going to offer me a job post-graduation
Perhaps
Though I probably won't take it (higher studies is a greater priority for me)
 
Or how about "We'll arrive in Montreal at 1945 Quebec time."?
 
@Xander who/is is down, otherwise I would have stalked you and all of your managers
:P
 
@ManishEarth Yeah, understandable. Hopefully the experience has been a good one.
 
2:45 PM
@Xander Yes, it has!
 
@ManishEarth LOL
 
And the primary reason I took it was fulfilled -- got an idea of how programming as a job is like, outside of Mozilla
 
Interestingly enough, during DST, Quebec time is Quebec time.
 
@Xander fact: when I first discovered that site I stalked my management chain all the way up to Nadella on it
but then I got bored
who-works-on-what and what-minions-do-they-have is only interesting for so long
 
@Iszi you pen tested it or what?
 
2:51 PM
@TildalWave No. Just used <!-- HTML comments --> and &nbsp; to post a blank form.
 
oh
can't nominate with a tabula rasa... we need dirt on you, otherwise how can you ever be trusted?
 
It's a minor issue all of SE has had hanging open since... like, forever.
 
@ManishEarth Ha.
@ManishEarth Yeah. It is super useful though, when you meet someone new (or going to have a meeting with them) to figure out how they fit into the scheme of things.
 
@Xander yep
 
@Iszi Maybe the possible confusion was not between I and J, but between G and J ?
 
2:54 PM
@Xander In my case I used it to find other interns and find out who I'm going to be talking to before approaching them :p
 
@ThomasPornin Don't see how. The letters don't at all look similar, and "Golf" vs. "Juliet" - nope.
 
(in case I needed to ask someone for something and I had no idea who they actually were)
 
@Iszi If the letter is merely pronounced (like "gee" and "jay"), these two are very close, especially when whoever talks is from Texas.
 
@ThomasPornin If that's what you're going after, there's plenty more letters with more conflicts than that. I probably would have just nuked E.
With a choppy transmission, that intersects with B, C, D, G, P, V, Z.
Interesting tidbit: The ICAO phonetic alphabet has 2 Greek letters, 6 given names (or 26, if you're from Hollywood), 2 countries, and 1 cop-out.
 

« first day (1671 days earlier)      last day (3214 days later) »