Oh my god, this is ridiculous. I made a post about my online institution's website that wasn't secure at all.
Well, they've fixed some shit. For now, it seems that I cannot view other people's messages (I haven't tried much but at least it's safer than it used to be).
They hid parameters (I find them by viewing the source).
They disabled right-click (I can disable JS and it's possible).
and FINALLY:
They made us change our passwords once again. I then proceeded to do a password recovery and at the end of the process they showed me my password in plain text.
HOORA!
Also, they don't even send you an e-mail to recover the password, they just make you enter some personal information and give you your password at the end of the process.
@ManishEarth Well, assuming they've based their bug fixes on what we told them, we would browse the user list and find their ID. Then, we'd use the ID to view their stuff.
So maybe they thought if we can't view the code, we can't get their ID.
My family is having a bit of trouble with his nephew and we need to check his iPod. He has the simple 4 digit passcode, but I know that it can potentially erase it if I enter the wrong passcode too many times. Does anyone know a method that works?
@ekaj Smudge analysis means that you look for fingerprint patterns on the screen to narrow down the possible passcode key combinations. Research shows it works quite well.
Speaking as a parent, were I in that situation, I would confiscate the device. Speaking as a parent who is also a forensics analyst if I then I had to take the iPod into the office to unlock I would begin to get cranky.
Speaking as an Uncle, I would advise the same to my brother and let him beat it out of them.
@CharlieBrown Morning Charlie! Hours you posted are terribly slow here. Europe is still asleep, Americas are already asleep and the far East is... dunno, waiting for the other two to get up? It can be pretty busy at some other times of the days, so maybe just ask when it's more people active here?
@tidalwave hey good morning to you; off to bed for me. Another day of job hunting tomorrow. I can't even remember the question I had but I really haven't figured out the chat rooms yet. I love the SE concept. Why did I discover it when job hunting?! LOL
@CharlieBrown on occasion but mostly just general chatter on everything... oh, and you can reply to a post by simply clicking the post's rightmost icon (after the star). Alternatively, you can type @ and one or a few first username letters and use tab to complete the nickname of the person you're replying to
@LucasKauffman LOL thanks... I'm just editing your answer for spelling and grammar, this should help... maybe I never finish, can you lend me a gun please? :))
@LucasKauffman oh, that's different then :) yeah, I need to lose a few pounds also, I haven't been on my bike as much as I hoped I'll be this year.. .yet
@TildalWave yea I hope I can keep up once I go back to work, I'm going to try and skip my rope at least 15-20 minutes a day and go running twice a week.
@LucasKauffman btw I've abandoned that edit, it's fine as it is. I don't wanna be too anal really. I've started when it had more problems, but after your edit I'm only left with minor stuff, not worth creating a new revision
@LucasKauffman You see that is what I can't make myself doing... I just find it too boring. I like bike because it gets you places, and I have hills here right next to me, most of them with some cabin on top with benches and stuff
problem is I broke my front fork and the lock doesn't work, so it's pretty difficult to go uphill until I fix that
I cand find the part, it's only a small metallic whatsit but nobody has any spare ones, I'll prolly have to make one myself
@LucasKauffman yeah I get it, I don't like flat straights that much either... I have a few 12% steep roads here tho, that's different... and in nature, not much traffic
There have been a few questions which actually all partially or completely boil down to the issues with Security vs Usability. I was wondering if we might need to make one canonical question and answer detailing the issues and common caveats?
@LucasKauffman yeah I did something similar, but we concentrated on ray tracing, which I really loved. Simple geometry used to create epic images, I ended up spending many many hours writing my own tracer.
@LucasKauffman yeah exactly, I was always like...wow thats cool and so simple. And you just crank up the reflection depth to 8 and let it run for a week :P
@Hennes You probably mean security conscious? I guess that depends on the needs of the would-be employer, but it is an ever changing field, so I believe (my personal opinion) that it matters more what you're made of than how well you're cooked ;)
if that makes any sense :O as you have probably guessed, I'm on my lunch break :)
@Hennes I agree with TidalWave. It's more about your ability to think about problems from a security perspective automatically than it is anything else.
@Hennes but obviously you'll need a decent grasp of platform-specific security issues before you try to do it as a job.
e.g. on windows: group policy, SMB security issues, auditing, account management, impersonation, various network stuff, etc.
@LucasKauffman When we moved in we had the upstairs carpets ripped up and refinished the nice oak floors that were underneath. That was in 2008. Now I'm finally getting around to reinstalling shoe mould and that transition piece. The carpet was the same height as the tile. Now there's a bit of a difference.
@LucasKauffman In newer homes the materials and tolerances are such that the flooring sometimes really is flush wall to wall, and the baseboard + shoe really is only decorative.
@LucasKauffman The reducer, thresholds, and T-mold are all what's called "transition pieces". They are used when you go from one type of flooring to another.
We had some pretty good gapping in my daughter's room before I installed that shoe, but I never took a picture of it. I'm seeing if I can find one that's a good example.
When I was a kid I used to help build houses. Hell, my dad and I built a duplex apartment the summer before I went to college. We hired in people to do the foundation, drywall, and roofing. All that stuff sucks.
@lynks More than anything else I can talk intelligently to a carpenter and recognize good work from bad.
I came from a poor rural area. Half of my school was being prepared to go to college, the other half to other stuff. So we had a selection of more craftsman style courses available.
But, no, they had used a drum sander on the rest of the floor and I think they were going to hand sand that area around the vent.
For the size of that gapping between the boards I probably wouldn't bother filling it with anything. It's big enough that it would be too had to match the color. I would probably let the poly cover it over and fill in the gap.
Of course, I'm not insane enough to refinish my own floors.
@ScottPack I used to collect the dust for the mixture with the glue and fill the cracks with it... you can barely see it later since it's the same color than the wood of course
@ScottPack that's before the wood paint anyway and you can use the paint in the mixture itself to match the colour... unless you use water based colors, that's then different
not sure water based colors would stick on the mixture or keep a seamless color, prolly not but never tried
@ScottPack no... damn I really hate this when I don't know the words... I meant the paint (has colour - pigment in it)... but there's the "matte" one that soaks in the wood (I guess that's "stain == wood paint" no?) and the glossy finish one (not the clear stuff) that's latex? Did I get this correct?
Ah, ok. So yeah, if you want the wood to actually be displayed but want to change it's color you generally apply what we would call a stain. Wipe it on, let it sit for a few minutes to soak into the wood, then wipe off. (reapply if necessary) Then you would apply a clear protective layer over top of it. A polyurethane, or varnish, or something.
The other stuff, if you just want to make it a specific color but not display the wood, we would use what we call a paint. It's a mixture of all kinds of stuff, including pigment, that just goes on and dries. You'd also use the same stuff for walls.
The newer paints over here are all latex based. So they're water soluble but as it dries the latex firms up and provides the protection and stability.
@ScottPack yes... OK so we talk of the same things :) anyway, for that glue mixture I used the stain colour, clear epoxy glue, and the dust out of the drum sander's bag (when you do the second round and the color layer is already off from before)
some of it... not too much because it makes for a deeper colour than the wood would if you use too much of it... just a "hint" of it in the mix, and it also makes it a bit easier to apply
I have a friend who mixes his stain in with his polyurethane. Most of the time he's just making something, but isn't overly concerned about the colors matching exactly. It also makes it a one, or maybe two step process.
@ScottPack some mate of mine told me that trick, I was also looking a bit funny at him then... but it turns out it fills smaller cracks that the varnish wouldn't fill really nice and you eventually can't tell the difference
Supposedly it also thins out the poly just enough so that it also soaks into the wood a little, making the surface stronger.
You lose a lot of the ability to color match and blend, since the different woods will take the stain differently, but if your'e just throwing together a basement shelf who cares.
@ScottPack I guess ... it kinda resembles sap ... gluey, barely liquid and dries pretty much the same too (not much difference in volume when it's dry)
@ton.yeung What do you mean with passing auth headers? passing them by what method? POST, GET?
@ton.yeung OK but where would this "header" be stored? Client-side local/session storage? Or in a HTML field passed along each request with the POST method? Or as a URI parameter?
@ton.yeung I think you want @AviD for that, because I have problems imagining the model and there's probably no point in repeating it all again. IIRC you had a conversation with him about it yesterday?
There are a number of states that also have laws banning same-sex marriage. Now that the federal law has been struck down as unconstitutional I wonder what that will mean for the states.
@ScottPack Nothing at all. AFAICT they only struck down subsection 3 of DOMA - the part that disallows gay married couples from receiving federal benefits. Other parts, like the one that prevents states from being required to recognize gay marriages from other states, may still remain effective.
MG seems even a better place to work than before. And I still do not have the expertise. (which is now confirmed). I do seem to have the right way to work. But if that is enough? More on Monday. :(
@Lucas Kauffma Yes, though I am not 43. I assume you got that date from my profile (which is public data and 'thus' shows the unix epoch as my birth date).
However I am 41. So yes. Old for junior
But the place looks nice. the job seems fun. The coworkers are geeks.
What is there that is not to love?
And oh, they do take education seriously
@Polynomi most of the jobs MG gets is webapp testing.
There have been a few questions which actually all partially or completely boil down to the issues with Security vs Usability. I was wondering if we might need to make one canonical question and answer detailing the issues and common caveats?
