@TerryChia @LucasKauffman sure, theoretically I'll get it on Tuesday, so should be able to have a look at it then .. must say if it's any good they could do quite well with those at £60, although I'll be kind of surprised if the screen is much good at that price
My situation is that I've been programming for about three years and have learned a lot but still have a long long way to go.
I have an idea for an app that I believe would take off, but I'm afraid to build it because it involves architecting a back-end with databases and authenticated payment t...
@Gilles I have added a wee comment, as the only other one was a bit brusque. I'm not a cryptographer though, so I might have been more optimistic than I should have been.
Cascading encryption algorithms do make the ciphertext more secure, provided that both encryption algorithms are radically different and both had extensive peer reviews. My arguments for that are the following:
Provided that encryption algorithm #1 is really secure one, encrypting the plaintext...
well this was funny enough to edit for clarity e.t.c.
@Griffin I see, maybe that's an issue. I use Fedora on my primary desktop though, it's just a lot easier to have a complete desktop package available out of the box.
But yea try it with Uefi and disabling secure boot and just all around wanting to kill yourself. Ohh and then I got it installed (I think) but as I was adding the skin thing apparently grub shit itself. This is the question I ended up asking unix.stackexchange.com/questions/70538/…
@TerryChia I found yum to not have as much stuff as I wanted. I don't think I exactly gave it a fair chance however. I'm used to apt and found yum kinda confusing.
Also do you know where to find the reference stuff for PHP? I managed to find something like it on the php website but I need a download this is what I found : php.net/manual/en/index.php
@TerryChia What does it do that's special? I can get if it's like replying to something over time. And I know the plugin is but that helps a lot because it's in the IDE. I'll download the thing you posted hopefully it works.
"Ain't nothin' micro about their soft." Probably the funniest thing I can remember us saying in here.
@Griffin You can click the arrow to the left of a reply-to message to actually see which message it's replying to. It's helpful when there are several conversations going on at once.
@TerryChia :/ Guess I'll use it when the DMZ is more active.
@TerryChia The schools boy, I haven't been in them. I couldn't even use HTML two days ago. I flipped shit like "WTF is this. I know this shit it's fucking idiot proof. How can I not do this?!?!?" I was pissed at myself.
Oh btw, I think I got my little GitHub search thingy going pretty well. I'll just have to code some logic to stop me from pulling duplicate data and thinking of search terms.
@LucasKauffman That's actually part of what I'm trying to fix on another website. The dude who made this one law firms website made every single page in tables.
@LucasKauffman Of course you can but it still looks clean cut. This made me die inside a little tho "<script language='javascript'> var i; //alert('asdf'); var gPresArray=['Zurich','Vienna','Geneva','Vancouver','Auckland','Dusseldorf','Munich','Frankfurt','Bern','Sydney','Copenhagen','Wellington','Amsterdam','Brussels','Toronto','Berlin','Melbourne','Luxembourg','Ottawa','Stockholm','Perth','Montreal','Nurnberg','Oslo','Dublin','Calgary','Hamburg','Honolulu','Helsinki','Adelaide','Singapore','Paris','Brisbane','Tokyo','Lyon','Boston','Yokohama','London','Kobe','Milan','Barcelona','Madrid','…
@LucasKauffman While very clean, the text is really small. Plus it seems to take a while to load. Due to the fact that when you're in trouble and you want I lawyer I figured that a mobile website that loads fast is best. That's why it's gonna be a simple PHP
But yea I went through their website and just obliterated everything in it. They actually offered to pay me but I didn't want that and I knew I wasn't going to do it very fast so I just said screw it, I'll do it just for the experience.
@TerryChia I'm actually download 55 GB of games. Humble bundle right now is crazy. Their special even as linux games if you wanna check that out.
> And the carpenters show you the houses they’ve built, where every room is a pentagon and the roof is upside-down. And you knock on the front door and it just collapses inwards and they all yell at you for breaking their door.
> PHP basically runs as CGI. Every time a page is hit, PHP recompiles the whole thing before executing it. Even dev servers for Python toy frameworks don’t act like this.
Just read some quotes from the guy who originally created PHP: things like "I hate programming", "I dont bother with all those things you learned in CS class", etc...
@Griffin hehe, true, perhaps not sane, but enjoy my rationality.
You can try this short code to validate a url in a form:
function checkURL(value) {
var urlregex = new RegExp("^(http:\/\/www.|https:\/\/www.|ftp:\/\/www.|www.){1}([0-9A-Za-z]+\.)");
if (urlregex.test(value)) {
return (true);
}
return (false);
}
Catching errors/exception and handling them in a neat manner is highly recommended even if not mandatory.
The reason I say this is because I believe every developer should know and tackle the behavior of his/her application otherwise he hasn't completed his job in a duly manner. There is no sit...
See the problem is the people who know the answer interpret the question differently than people who don't. While I really shouldn't of said infinite the answer I have to this question is my second favorite answer ever. First was to my hashing question on here stackoverflow.com/questions/14802527/…
I love going over my old questions :)
@TerryChia Where you the meany head? Who was the meanie head that downvoted it?
@TerryChia It was awesome answer. The thing is he'd never be satisfied with anything else. He'd always be wondering. Plus it's the only true guaranteed answer. And with the price of hardware and the fact that it seemed to be a laptop it's worth the piece of mind and not worth attempted salvation.
@Griffin No, the appropriate answer is that reformatting the laptop will probably do the trick. Telling the user to destroy his laptop just because tech support installed some remote assistance software is overkill.
@TerryChia It's not about it being necessary it's about him being at piece of mind. If he wanted to know "What's the most effective way to get rid of remote software" my answer would of been different however based on his name and his explination of how freaked out he is I figured the only way he'd be happy is if it was gone. He seemed to think so also.....
@Griffin So your idea of a good answer is one that tells the OP what he wants to hear instead of providing accurate advice that is actually fitting for his situation...? Real nice.....
@TerryChia Actually fitting for the situation? Well how else to you expect a 100% promise? If you want 100% you gotta go to the extremes. And this is a case where it mattered if the OP got to hear what he wanted to hear. Seemed pretty clear that he wasn't worried about the practicality of someone remoting back in it seemed he wanted peace of mind. That is peace of mind in a way that he can't doubt. Have you ever done like simple hardware work with a family member or even professionals?
Once you've fixed their computer anything that happens afterwards is your fault because you touched something. Even if you did no such thing and give no fucks about their excel settings.
@TerryChia Also don't destroy it. I ment just throw it out. Or he could give it to a family member who wouldn't use it for sensitive documents or work :P
@Griffin You got the tick because you told the OP what he wanted to hear. It doesn't mean that your answer was necessarily a good one, that's why you got the downvotes. I stand by what I said, if I had enough rep on SU I would have downvoted that answer.
@Griffin You got the tick because you told the OP what he wanted to hear. It doesn't mean that your answer was necessarily a good one, that's why you got the downvotes. I stand by what I said, if I had enough rep on SU I would have downvoted that answer.
@TildalWave The question was about getting piece of mind so I told him how to get peace of mind. Everyone else wanted to apply a cost / chance ratio. He didn't want that. That's why I got accepted even if downvoted.
@TerryChia I wouldn't tell the OP what he wanted to hear if it didn't solve the problem. If the OP wants to hear he can do it one way and it still solves the problem I don't really see a problem with doing it that way. Unless it's not efficient (which this wasn't) then I will present that option, however in this case it was quite clear he had already concidered and did not like the efficient way.
Catching errors/exception and handling them in a neat manner is highly recommended even if not mandatory.
The reason I say this is because I believe every developer should know and tackle the behavior of his/her application otherwise he hasn't completed his job in a duly manner. There is no sit...
@Griffin Eh, I'm done with this. The OP obviously liked your answer so he gave you the tick. That doesn't make it a good answer so you got the downvotes. There really is no point in discussing it any further when you obviously disagree.
@TerryChia What was wrong with my last comment about fixing the problem :( When people want it a certain way and they're in control it doesn't matter what you suggest if they aren't satisfied the won't do it.
@Griffin I think @TerryChia's point is that answers shouldn't be yes-men, they should give the correct answer - even if (especially if) the asker wouldn't like that answer.
> For somebody who wants to start up a web-based business armed with only an idea, brute force, and awkwardness, the allure of PHP is almost magical. It has a rich ecosystem of boiler plate sites and code, the documentation is good quality and very easy to access, and "complex" ideas like the ternary operator or inheritance is largely hidden from the end user.
@AviD I know that's the point :P But if the user doesn't feel as if the answer truly solves the underlying problem (in this case fix the his fears completely and he did say that he understands his fears aren't logical) then is it really concidered the correct answer? In order to fix an illogical situation you have to apply an illogical solution.
@TerryChia and if you find the ternary operator, or the concept of inheritance, to be complex ideas, you really have no business developing web systems.
@AviD Lol it seemed clear that he understood it was illogical but didn't care.
I find with those people the only answer you can give them is the answer they want to hear. They won't accept anything else as an answer. Plus in this case it didn't do too much harm and made him feel better. White lies, while lies are usually better than the truth.
I think one of the most damaging statements to our craft made by a well meaning, otherwise intelligent person, was when NYC Mayor Bloomberg announced that he will learn to program during the summer, and everybody else should too.
@Griffin Except that the OP isn't gonna be the only person reading that answer so you are doing a disservice to the people who comes into SU searching for actual solutions to their problems.
@TerryChia Don't tell them that! I like the insane gap in programmers want and programmers available. Makes us valuable and needed. I like to feel needed <3
@AviD Wait what?
@AviD Oh you're talking about crazy guy. Yea I know.
@AviD This I agree. Most of the people taking the same course as I am are shitty programmers who can't write simple apps.
And I wouldn't even consider myself anywhere near being a competent programmer even though I'm one of the better few in my course of a hundred or so people.
I was always shocked and disbelieving at some of the stats I've seen, like how 60% of programmers are most productive when they are home sick (actually working makes them net negative productivity), 30% are harmless (but also nearly valueless), and 10% do almost all the work, including cleaning up from the first 60%.
Was disbelieving. Now, I have been around enough different companies, projects, programmers, and countries to know - at least anecdotally, but with quite a lot of anecdotes - that it is quite possibly worse.
at least, bad pentesters form a sort of crude QA, cheap to throw at the low hanging fruit. (as long as noone listens to their recommendations...)
I'm not with the sick part, you see if you're truly sick and home alone there aren't really as many distractions and you still want to get work done (if you have a project you don't want to fall behind).
@Griffin I meant, as in not doing any work. But tbf, most of those wouldnt be working when they're home sick. Passion and competence usually go together.
@AviD Lol yea my teachers learn that the hard way.
@AviD What do you mean tho with they wouldn't be working? If you're truely passionate then wouldn't you want to work while you're at home? It doesn't take much effort you can do it while staying warm under the blankets (even if it's notably harder to type). I find however, I'm quite susceptible to distractions but that's because I end up going off on some other path and working on that :P
@AviD That makes more sense :P I am wondering however do you find you get off on like other projects? Lets say you're supposed to be doing a webpage but then for whatever reason someone wants you to debug an app in beta and you start doing that. While for you it may just be because you dislike web design more you can apply it to other situations.
wel, sadly I spend most of my time in consulting projects (most often not too much coding). But yeah, my tendency is to gravitate to the "easier" projects - easier to get into, i.e. "easier" meaning either projects I like, or lightweight project-lets that can be finished rather quickly.
long projects I dont like tend to take even longer.
I don't have the time to formulate a full answer right now, but the better way to share your code will be to use a service like GitHub. — Terry Chia4 hours ago
@Terry You forgot to tell him he needs to include his config.php
@GreenFly No no, I'm not saying it's a problem at all. You're fully entitled to upvote/downvote whatever you want. I just wanted to know how my "hidden" answers got upvoted, that's all.
But since you're at it, you can rep-cap me if you want :p
I am creating a client access system, to allow manage invoices, make payments, access information about their products and information/functionality alike.
Supposedly there are less than 1000 clients. Would there be any security threat to use only password (UUID v4 strings) to authenticate user?...
I don't know why do we authenticate by prompting the user to enter both username and password.
In my mental model, prompting password only suffices.
The reason is as follows:
Assume there are x valid characters to use.
Case 1 (prompting username and password)
Let the length of username and pa...
@Simon one of my pet peeves WRT DB performance is the fact that forum software like vbulletin et.al. do a DB write on every f-ing page load. So someone asks me why their forum is slow? It's because vbulletin was written by morons.
Well, see, that's the thing: People don't know it's a bad idea. But what is a good idea, they think, is being able to see who's currently viewing this or that page.
and they assume that the database is magically fast.
@Simon Anyway, a lot of security people don't do a lot of software development. So that's why I asked if you write software.
@tylerl Writing software is what I do way before anything related to security. I have been doing it for 3-4 years though, so I don't have as much experience as some people here.
@Simon When I started writing web software your only options were C and Perl. I learned Perl because I didn't want to write CGIs in C. There's a lot that my group needed to un-learn, which is the source of most of what's wrong with the industry today.
so don't feel too bad about not having that much experience.
Yeah. that's just tragic. The guy's told 3 times that he can't have the bug reward because the security bug didn't exist. So he uses it to show them that he's not full of sh*t. And then they say he can't have the reward because he violated their terms of service by demonstrating the exploit.
Which just goes to show: flaws in facebook should be properly sold on the black market, since their security team is too incompetent to pay out on their own reward program.
Cascading encryption algorithms do make the ciphertext more secure, provided that both encryption algorithms are radically different and both had extensive peer reviews. My arguments for that are the following:
Provided that encryption algorithm #1 is really secure one, encrypting the plaintext...
You can try this short code to validate a url in a form:
function checkURL(value) {
var urlregex = new RegExp("^(http:\/\/www.|https:\/\/www.|ftp:\/\/www.|www.){1}([0-9A-Za-z]+\.)");
if (urlregex.test(value)) {
return (true);
}
return (false);
}
I don't know why do we authenticate by prompting the user to enter both username and password.
In my mental model, prompting password only suffices.
The reason is as follows:
Assume there are x valid characters to use.
Case 1 (prompting username and password)
Let the length of username and pa...
