The DMZ

Terry Chia

13:00

This is hilarious: stricture-group.com/files/adobe-top100.txt

3

Gilles

> We do not (yet) have the keys Adobe used to encrypt the passwords of 130,324,429 users affected by their most recent breach. However, thanks to Adobe choosing symmetric key encryption over hashing, selecting ECB mode, and using the same key for every password, combined with a large number of known plaintexts and the generosity of users who flat-out gave us their password in their password hint

I'm surprised by #23 sunshine and #25 letmein

Terry Chia

@Gilles Yup, I was swearing about that on here a day or two ago.

Adnan

@TerryChia Christ!

Gilles

@Adnan looks correct except for the “4 more bits of entropy” bit

Terry Chia

@Adnan It's Triple-DES-ECB btw. Not even AES.

Adnan

13:06

#18 iloveyou

Gilles

that would mean that the username can be in one of 15 positions, or nowhere, with equal probability

Adnan

@Gilles It can be in 13 positions or nowhere, with equal probability. The closest ^2 is 4 (to get 16).

@Gilles What's wrong here, and how can I correct it?

Gilles

@Adnan it's a bit less than 4 bits, and it's safer to round down. But that's very minor.

Adnan

@Gilles Ahaaaa.. sure sure, rounding down.

Gilles

Also the model where P(password_in_position_X) = P(password_not_used) is weird

but we're quibbling over approximately one bit of entropy

Adnan

13:10

@Gilles In any case, I've corrected it. Thanks.

I'm surprised that 22,719 users used the password jessica

Googling top 10 female names in the U.S.

Top 1000 US female names 1990 to 1999

#2 Jessica

@TerryChia Honestly, thank you. This is so much fun!

Lamia

@LucasKauffman , @Adnan Grazie :3

Terry Chia

@Adnan You must be really bored. :P

Lamia

Sarah is a worldwide name

Adnan

@TerryChia Apparently, everybody visits their parents on Sunday. So, yeah, I'm all by myself.

Test: Please let me know which of the following didn't ping you.

@Terry's

@TerryChia's

@Terry,

@TerryChia,

Terry Chia

@Adnan Are you done? :P

They all pinged me.

Adnan

13:18

@TerryChia Fantastic!

I no longer have the compulsive need to type @Terry 's

because I'm afraid the apostrophe will kill the ping

Lamia

There's an eclipse today

Adnan

@Lamia You're most welcome.

ManishEarth

@Lamia in Africa

Adnan

@Lamia Well, there's no sun in Finland.. so.. yeah.

Lamia

@ManishEarth Even some parts of Asia

@Adnan Why so serious :P

Adnan

13:22

@Lamia Go to work at 09:00, it's dark. Come from work at 17:00, it's dark.

Gilles

@Adnan move to Singapore

Adnan

@Gilles 4 years ago I almost did, but stopped the plans after I read/heard about the weather.

Lamia

@Adnan cloudy country?

Adnan

I can't survive almost 30C all year long

ManishEarth

@Lamia where?

Gilles

13:23

Solar eclipse of November 3, 2013

A total solar eclipse will occur on November 3, 2013. It is a hybrid eclipse of the Sun with a magnitude of 1.0159. Totality will be visible from the northern Atlantic Ocean (east of Florida) to Africa (Gabon (landfall), R. Congo, DR Congo, Uganda, South Sudan, Kenya, Ethiopia, Somalia), with maximum of 1 minute and 39 seconds visible from the Atlantic Ocean south of Ivory Coast and Ghana. Places with partial darkening will be the Eastern coast of North America, southern Greenland, Bermuda, the Caribbean islands, Costa Rica, Panama, Northern South America, almost all the African continent,...

Adnan

@ManishEarth Partial: Syria, Lebanon, Jordan, Palestine, Israel, Saudi Arabia, etc..

Lamia

@ManishEarth Middle east

ManishEarth

grr

Lamia

Even America?

Adnan

@Lamia According to this, yeah.

@Gilles I thought it was partial in the middle east. Looks like it's full. (at least what I understood from the animation).

Gilles

13:26

@Adnan no, the shaded zone is the partial zone

totality is the dark dot in the center

Adnan

@Gilles Oho! Makes sense.

Gilles

it's barely total (99s max)

Lamia

If you were to get a superpower during the eclipse what would it be?

I know it's lame-sites type of question

Gilles

@Lamia stopping time? because eclipses are cool

Lamia

@Gilles I'd stop time because it'd make me use more of my superpower during the eclipse

Terry Chia

13:29

@Lamia I want to sparkle.

Lamia

@TerryChia For what purpose?

Adnan

@Lamia I know it's a lame answer, but since it's a superpower and with no conditions or requirements, I'd go with ability to permanently end war.

Terry Chia

@Lamia Sparkling is an end in itself.

Lamia

@Adnan Look at you.. Why did the psychopathy quiz gave u 16 :P

Adnan

@Lamia Jesus Christ on the cross!! Psychopathy has nothing to do with wanting people to die!

kalina

13:32

@Gilles it's actually agreed by SE that removal of "thanks" of ok

you as a moderator should know that

Lamia

@Adnan I don't know the quiz made it look like this

@Adnan I give you the prize of best answer

Adnan

@Lamia Trust me, they have nothing to do with each other.

kalina

the fact that you saw fit to ping me 10 times over it means you're obviously trolling

Adnan

@kalina By itself, no. Along with improving the post overall, yes.

ManishEarth

What @Adnan said.

Adnan

13:34

In any case, we, as the collective Security.SE moderation body, don't want such edits. We reject as we see fit.

kalina

the bulk of them had additional clarify edits

@Adnan that's fine, the statistics disagree with you since most of them got approved, therefore I can only conclude my edits were acceptable

Adnan

@kalina Adding a period isn't a "clarify edits".

kalina

now shoo giving me grief because you fell out of the bed on the wrong side

ManishEarth

His bed is a mobius strip

There's only one side, and it's the wrong one

kalina

talk to your people

don't make it my fault

Adnan

13:36

@kalina Notice: I didn't say female, I said "girl".

Implying that you'll come back here complaining about your edits being rejected

ManishEarth

cut it out, both of you

kalina

and don't make assumptions and stop being a misogynist

Adnan

In that context, I'd have used "boy" as well.

kalina

@Adnan yet you didn't

you made an assumption

which turned out to be insulting

Adnan

@kalina I can be whatever I want. You don't like it? Fine, go to another room.

ManishEarth

13:37

Seriously, stop bickering over semantics.

Adnan

@kalina That's the least of my worries.

Terry Chia

@Adnan Be nice...

Adnan

@TerryChia I'm not being not nice.

She's accusing me of being a misogynist.

kalina

you are, clearly

and, when asked to stop, you said you don't care

Adnan

In her own opinion, to which she's, of course, fully entitled.

kalina

13:39

when it's pointed out you're being insulting, you said you don't care

Terry Chia

Guys, stop. This is not worth arguing over...

kalina

so the only correct recourse here is that you're warned or banned

Adnan

@kalina So, being nice means that whenever somebody tells you to stop something you adhere?

@kalina I'm being insulted by you calling my a misogynist. Please stop it.

kalina

@Adnan misogynist isn't an insult, it's a description

Adnan

@kalina I'm being insulted by you talking to me. Please stop it.

ManishEarth

13:41

I didn't like doing that, but have fun and please be nice when you come back.

Terry Chia

@ManishEarth Thanks for that.. This is getting really stupid.

ManishEarth

Adnan, you know kalina's a bit sensitive about these matters, don't needlessly provoke her.

Kalina, don't get provoked. And both of you, don't start bickering if this happens.

@TerryChia yes, it is

Gilles

@kalina Be nice. Since you know exactly what you're doing, this will be your only warning from me.

Terry Chia

0

Q: Phone Privacy for Small Business

I'm a small business operator and I'm looking for ways to provide security and reasonable privacy for my own business communications and communications of customers. All these businesses operate outside the U.S. and have no need to export their data to U.S. servers. All the smartphones I've see...

Off topic or not? It really reads like a product recommendation question imo.

ManishEarth

13:58

> Are there other criteria I should consider?

Read the Q&A is hard, let's go shopping blog post

They advocate the same thing, "what qualities should I look for?" instead of "what should I buy?"

Terry Chia

@ManishEarth Sure, that's the part that is making me hesitate.

But he already has a list of criteria that he wants. So I dunno...

Gilles

@TerryChia I don't see how it's off-topic. It's about privacy, which is a security concern.

ManishEarth

@Gilles he's talking about the recommendation bit

Gilles

@ManishEarth that's not a matter of topic, but possibly a matter of suitability for SE

however, he isn't asking for a product recommendation, he's asking for criteria, which is exactly what we want

Terry Chia

@Gilles Well, the product recommendation thing is listed as a off topic reason so...

ManishEarth

14:01

bleh. Currently the product recommendations close reason is nested under "off topic"

Lucas Kauffman

@kalina I actually improved some of your edits, because they weren't completely correct

ManishEarth

because SE never fixed that

Gilles

the only close reason that might apply is too broad

@TerryChia yes, but that sucks

Terry Chia

@Gilles Well, yeah. Take it up with SE. :P I'm just working with the tools I'm given.

Gilles

only two persons seem to think it makes sense, but unfortunately one of them is in charge

Terry Chia

14:02

Alright, I'll defer to the two of you and not VTC it.

ManishEarth

57

Q: Can we rename the off-topic close reason label on the primary screen?

When you click on the button to cast a close vote, you get a list of options: duplicate, off-topic, unclear, too broad, and primarily opinion based. These appear to be consistent across every site. However, my problem is the "off topic" option: when you click on it, it brings up things that don't...

discussion vote-to-close close-reasons

upvote him

Terry Chia

I was reading it as a product recommendation question although he mentioned criteria because he already has a list of criteria he wants and I don't see any reasonable answer to the question besides "Here is the phone that will do exactly what you want."

@ManishEarth I dunno... I get the feeling Meta.SO is really a theater more than anything...

Lucas Kauffman

@kalina also I must point out that there are, besides you, 3 other female members who frequent stackexchange, yet it seems that you are: 1) the only one who is taking offense 2) The only one to whom Adnan was making his points. So I think misogynist could, at most, be replaced with @Adnan not liking you.

3

Terry Chia

66

Q: Flags in chat are defective by design

Yes, I know the topic has been discussed before. I know that Meta already has threads that complain about how flagging doesn't work. I wanted to give a practical example. Today, a user came in to the JavaScript chat and asked the following question: Hey guys, as soon as I embed javascript,...

discussion feature-request chat behavior chat-flags

This still hasn't got any answers from SE.

Gilles

@ManishEarth rather:

ManishEarth

14:05

@TerryChia shoot, need to post on that

Gilles

126

Q: Shouldn't "off-topic" be only about... off-topic?

A related question/discussion point to this one posted just now, but with a completely different rationale. Whenever a question is closed because it doesn't contain SSCCE, or specific code, it also gets marked as "off-topic". I would argue that this is confusing, especially to new users, since t...

feature-request status-declined close-reasons off-topic

and yes, I already upvoted all of those

kalina

@TerryChia I read the question here as "Are there other criteria I should consider?" which seems perfectly on topic and not a recommendation to me?

@LucasKauffman Don't you think point (1) would be caused by point (2), and that maybe point (2) should be the point that is focussed on?

@Gilles This reads more like a threat than a warning, especially considering it takes two to tango and you've targeted one of us.

@TerryChia Stuff does happen as a result of it getting posted/voted upon on MSO, all the good ideas end up in a queue which I imagine is rather long by this stage.

Scott Pack

@Adnan Oh, that's an easy one to answer. Those are the types of edits I would do so why would I reject them unless only to be an ass?

ManishEarth

I would approve that particular edit too

kalina

@ManishEarth you wouldn't call that too minor?

ManishEarth

14:14

Not that one, no

Lucas Kauffman

Some of them were in fact too minor, but I just improved them

kalina

oh that wasn't a removal of just thanks

still pretty borderline since it's like 12 characters instead of 6

ManishEarth

But the minor-ness in suggested edits is a subjective matter. People are within their bounds to both accept and reject certain types of edits. Like that one.

kalina

@Gilles I have a question

ManishEarth

@LucasKauffman exactly

kalina

14:15

hang on let me find the reject reason again

Scott Pack

I have a much more lenient feeling on too minor. There have been many times I've wanted to make edits that the auto-system rejected.

kalina

the reject reason "Don't force titles into questions when they work better as titles"

I'm sure the agreed policy on that was organic questions > *

Gilles

@ScottPack the auto system is a very crude approximation, I'm not convinced it's a good thing

kalina

and that we should force tags into the question

Gilles

but having the front page filled by minor edits is not good either

@kalina no, there's no consensus on whether question titles should be questions or titles

@kalina definitely no, tags should not be forced into a title

kalina

14:16

@Gilles is this the actual problem?

Scott Pack

@Gilles I don't disagree with that either. I tend to keep my edits to a small handful at a time and wait for the front page to clean up a bit before doing more.

kalina

@Gilles yeah I forced no tags into the title

Gilles

@kalina yes, it is a problem. In addition, some of your edits were good, others were bad. But making, what was it, 30 edits on old posts in quick succession, that's not good because it moves recent stuff away from the front page.

kalina

@Gilles this discussion occurred lastnight already

as a matter of fact, because you didn't have 370+ edits in your queue, you can assume I stopped

Scott Pack

@kalina But what I skimmed through appeared to be primarily @Adnan whining which isn't helpful.

kalina

14:19

@ScottPack I don't see this as any different from normal but if we can avoid talking about him so I don't have to relay my feelings towards how his behaviour is deemed acceptable by moderators who then go on to single me out, that would be great

It did surprise me that you almost appear to be on my side/impartial, whereas I expected you to jump to his defence like some of the others in here

Gilles

@kalina Adnan can be abrasive at times. But you should stop provoking him. As you said earlier, it takes two to tango.

kalina

so thanks for that

@Gilles you still singled me out for the whole "be nice" comment

ManishEarth

For that matter, he should stop provoking you too.

kalina

if somebody acts like an ass to me, I will retaliate

because flagging him didn't work

Gilles

@kalina That's exactly what “be nice” tells you not to do.

kalina

14:21

I gave the moderators a chance to defuse the situation with a valid reason to suspend him and you ignored that opportunity

Scott Pack

@kalina Why?

ManishEarth

@kalina Gilles was replying to this

kalina

as such, I have a right to defend myself

ManishEarth

@kalina Both of you were suspended.

kalina

@ManishEarth I know, notice I didn't complain about it?

ManishEarth

14:22

I know

Gilles

@kalina I haven't looked at the whole transcript, but I didn't see any suspension-worthy behavior from Adnan. If your objective is to have him suspended, that's clearly wrong.

kalina

your hand got forced, you hit the panic button, can't really complain about both of us being suspended

Gilles

You should take a break from SE, at least from chat.

You're being disruptive.

Scott Pack

Oh wow, he also referred to himself as the "whole of security.SE moderation". That's pretty short sighted and unworthy.

kalina

@Gilles I am currently being disruptive?

ManishEarth

14:22

@kalina But I don't see any cases of Adnan not being nice before that linked chat message of yours.

Except for the other cases that have happened ... before

kalina

@ManishEarth you mean apart from the multiple pings about how my edits only got approved because of my gender?

ManishEarth

@kalina link?

Gilles

@kalina Yes. You're wasting my time. I don't think I have anything else to say to you, really. You seem to choose to ignore some of what I already told you, and I have better things to do. You've been here long enough to know better.

kalina

@Gilles ok well, this is your mistake, I am not in a disruptive mood currently, I am trying to clarify my position

if you feel I'm wasting your time, fine, I will stop asking you questions

@ManishEarth I think based on the other mod making assumptions that will likely lead to another suspension, it should be dropped

it's in the transcript though, literally the first thing he said after I went to bed

ManishEarth

@kalina on a previous page of the transcript? ...looks like effort

kalina

14:26

@ManishEarth I know right, I actually think it's two pages back

serious amounts of manual labour

Terry Chia

6 hours ago, by Adnan

Just because she's a girl, it doesn't mean we should auto-approve.

ManishEarth

yeah i found it

Gilles

@ManishEarth yeah, Adnan did say something like that, and the message was deleted

ManishEarth

Despite appearances, I do sometimes take effort. Rarely. When there's an annular eclipse the next day.

Gilles

@kalina @Adnan You should ignore each other

ManishEarth

14:28

@kalina Ok, while I don't think it was out of line to ping you multiple times (I do that too sometimes just so that it doesn't get confusing for others and the autocomplete is so easy to use), the girl thing and the general attitude was out of line.

But yeah, it's best if you two ignore each other.

Lucas Kauffman

@Gilles +1

Scott Pack

There are a number of people I have ignored in chat. I find it much smoother.

kalina

I don't really like using the ignore function because the people I ignore are the ones most likely to say shit that needs a response

Lucas Kauffman

@ScottPack scott scott scott

Terry Chia

@LucasKauffman You are doing it wrong.

@ScottPack @ScottPack @ScottPack.

Lucas Kauffman

14:38

:D

@kalina so basically you enjoy conflict?

ManishEarth

@ScottPack @scott @scott @scott

Gilles

@TerryChia I thought it was @copy @paste @copy @paste?

ManishEarth

Now it's @Scott @Pack @Scott @Pack

sorry @copy @paste, you've been demoted

Terry Chia

knock knock @ScottPack knock knock @ScottPack knock knock @ScottPack

Scott Pack

@TerryChia My friend's kids do that too. They see me, start screaming "SCOTTPACK", and run up to me for hugs.

ManishEarth

14:40

@ScottPack at this rate it's easier to just leave the room forever rather than ignore us all

Scott Pack

@ManishEarth I could probably kick you all out.

Adnan

@ScottPack Oh, seriously, Scott. Is this where we're sinking now? I simply said that we, as a community, are the moderation body of this community, and we, as a community, decide what is fit for our community. @tyler, @Terry, @Gilles, and I rejected some of the edits. All of us participated in that moderation activity. I don't really appreciate twisting my words that way. Greatly disappointing, coming from you.

Terry Chia

@ScottPack He could just as easily demote you. :P

ManishEarth

@ScottPack Mods can't be kicked

Also, I have a kickban bookmarklet

Lucas Kauffman

Adnan

14:41

1 hour ago, by Adnan

In any case, we, as the collective Security.SE moderation body, don't want such edits. We reject as we see fit.

Terry Chia

@LucasKauffman That one is pretty old.

Lucas Kauffman

@ScottPack People wear a superman pyama, superman wears a @ScottPack pyama

Scott Pack

@Adnan I honestly wasn't about to read through the whole transcript because, frankly, everything I looked at was pretty goddamn petty. None of what I approved was worth rejecting. You're the one who attempted to publicly shame me for doing something that you wanted to get all bitchy about.

Lucas Kauffman

@ScottPack do you still like me ?

Scott Pack

@LucasKauffman Of course. Why wouldn't I?

ManishEarth

14:43

Not anymore he doesn't

:P

Lucas Kauffman

@ScottPack I don't know

<3 @ScottPack

Terry Chia

@ManishEarth Can you whip up a Chrome extension that appends @ScottPack to the end of every message? :P

ManishEarth

yes, probably

Scott Pack

Ugh. So Tuesday is election day and I'm still having trouble figuring out what on earth is on the ballot.

ManishEarth

@ScottPack ... ink?

Terry Chia

14:47

@ManishEarth Maybe it's written in blood?

Gilles

@ManishEarth or is there? They have electronic voting in some places in the US

Scott Pack

@ManishEarth It's quite possible.

@Gilles This will be my first time voting in this location but previously we used bubble fill Scantron style voting. I'm looking it up to see if I can find an example.

@Gilles Here's one. You, the voter, fill in the bubbles with an ink pen and then feed the ballot into a tallying machine. voterfind.tzo.org/athensoh/data/20131105G/0001%20%201X.pdf

Optical Scan. That's the ticket! Man, how could I not remember that.

tylerl

15:42

@Adnan While I respect the fact that you're the moderation community, I think the criteria for accepting an edit is "Better A or better B", rather than "is this edit sufficiently transformative to warrant my approval".

Adnan

@tylerl and I definitely agree with that. The problem is that most of those edits weren't substantial and we have a reject reason specific for that.

tylerl

Removing the "thanks in advance" from questions before even considering answering them is pretty much SOP on this site (all sites), and nobody would even consider rolling back such an edit. So if it's sufficient reason for us to edit a Q, then it's sufficient reason for a suggested edit as well.

Adnan

@tylerl Also, PWNED!

tylerl

@Adnan QQ

Adnan

@tylerl I'm talking about the ranks, by the way.

tylerl

15:45

@Adnan i guess that. Hence the crying

ANd while I wouldn't take 6 hours out of my day to remove all the "thank you"s from all the Qs, if @kalina or anyone else wants to take it upon themselves to do so, then I am approve.

Adnan

@tylerl Oh, damn it. I always forget what those QQ are.

tylerl

@Adnan its eyes with tears

clearly you don't spend enough time in 1990s chat rooms

Adnan

I think I've made a huge mistake!

security.stackexchange.com/…

Scott Pack

I generally approve edits if either I would have made that edit or I think it was done in good faith and is an improvement. I won't really care how minor it is just so long as it hits one of those.

Adnan

@ScottPack That doesn't sound unreasonable to me. Can we, as a community, have our own reject reasons? If the majority hold your view, can we modify our suggested edits reject reasons? (the same way we did with the close votes).

tylerl

15:50

If SE is going to make network-wide regulation of don't sign your questions, then we need to at least support anyone who's willing to go remove those signatures. That way new askers won't see bad examples of questions in the history.

@Adnan The edit reject reason is always the same, no matter what site you're on. That's why you don't select a reject reason, you just click reject.

The reason is "this edit isn't better"

If you stick to that reason alone, then the quality of the questions is guaranteed to get better.

Adnan

@tylerl I meant, if we don't care about minor edits, then can't we just remove the "Too minor" reason?

tylerl

Stuff like *changed a period to a comma" doesn't make a question better, nor does adding a single space at the end of the question. So those are clearly rejectable.

it doesn't matter how minor, as long as its minor in the right direction. If you can't tell whether or not its better, then that's too minor

Adnan

@heinrich5991 Welcome.

heinrich5991

@Adnan Hello :)

tylerl

things like changed smtp to SMTP doesn't really make it better, since lowercase abbreviations are totally acceptiable

and there's no stackexchange policy of "all abberviations must be capitalized"

Adnan

15:56

So, @heinrich5991, any questions?

tylerl

@Adnan he's in your fan club

heinrich5991

@Adnan: The point I tried to make is that if the MITM establishes a HTTPS connection to the server (thus making it send all the 'secure' stuff) and stripping everything ssl related when sending it to the client.

Adnan

@tylerl I had a short discussion with @heinrich5991 regarding this question security.stackexchange.com/questions/44843/…

heinrich5991

Therefore the client does not even know that there is something HTTPS related going on.

Adnan

@heinrich5991 Okay, let's talking about the normal case first, and then we'll discuss MITM.

When you connect to the HTTPS server, it will send you a Secure cookie. Meaning this cookie will only be sent again client->server if the connection happened through HTTPS.

tylerl

16:00

@Adnan @heinrich5991 It's better to go straight to SSL (e.g. using HSTS), but redirecting to HTTPS from HTTP does not make thing worse

heinrich5991

from HTTP to HTTPS you mean?

Adnan

@tylerl No disagreement here. We're discussion something else

@heinrich5991 Now, a MITM was able to intercept the initial HTTP request and replace all links to http:// (basically, SSLStrip).

tylerl

@Adnan he's discussing the possibility of the redirect not happening because of SSL strip, and you're discussing secure cookies

Adnan

@tylerl Please refer to the initial comment that started the discussion security.stackexchange.com/questions/44843/…

tylerl

@Adnan Yep. I read it.

Adnan

16:03

I've just noticed something.

> server happily returns data, MITM decrypts it and sends it back to the client.

tylerl

@Adnan Unfortunately, @heinrich5991 is right. you didn't take SSLstrip into account.

Adnan

@heinrich5991 What do you mean by that? How do you think that can be possible?

@tylerl I'd happy to hear more on this. Please, tell me, how would SSLStrip be used here.

heinrich5991

Client -- (HTTP) --> MITM -- (HTTPS) --> Server

this way the MITM can decrypt the response from the server

tylerl

@Adnan client visits unsecured site, evil guy controls all interaction from there forward. This is the classic sslstrip case. You said no mitm is possible, but that's categorically incorrect any time http is used.

secure cookies only come in to play if the user was already logged in to the site. Otherwise, there's no cookies to begin with.

Simon

Sup ladies and gents.

Adnan

16:12

@tylerl @heinrich5991 Yes, now I see it. You both are indeed correct. I'm wrong. I'll try to correct my answer.

@tylerl @heinrich5991 Please have a look at the revised version of my answer and let me know if I need to add/remove something.

I can't believe I missed it. Thanks you guys for helping out.

Hey, @Simon.

tylerl

@Adnan If you wanted to add anything, you could mention HSTS, which is designed precisely to mitigate this issue. Though the fact that "secure.xyz.com" is a different domain messes things up

Adnan

@tylerl I thought about it, but I don't want the other guy to feel like I stole the lights from him. In case the OP accepts the other dude's answer, everything will be fine.

@TerryChia Good job on spotting the dupes.

Simon

16:53

Too localized? security.stackexchange.com/questions/44872/…

TildalWave

17:29

@Simon voted to move it to Super User and added a comment

Iszi

@Simon You missed that about a year or two ago.

@Simon Probably because it hasn't been backed by anything since we departed from the gold standard.

Rory Alsop

evening all

TildalWave

evening @RoryA ;)

Iszi

@RoryAlsop Howdy

Simon

oi

Rory Alsop

17:39

That's three separate regions right there :-)

Iszi

@RoryAlsop Isn't teh Internets awesome?

Rory Alsop

@Iszi yup. It feels like it is back to normal today

Iszi

@RoryAlsop One can only hope. I'm off to see Ender's Game in a bit. Anyone else?

Rory Alsop

@Iszi As soon as I can. I'm desperate for it to be good. The two guys I know who have seen it say Hollywood came good on this one

Iszi

@RoryAlsop The previews don't look promising to one who's read the books.

Also, I've heard they condensed 10 years of Ender's life into 1 somehow - that's gotta dramatically change the characters and story in ways that can't all be great.

But, I've been waiting for this so long that I have to hold out some hope.

Simon

17:45

@ScottPack IT'S THE PACK, THE PACK OF SCOTT.

Scott Pack

I've heard that the movie was good. I've never read the books, but I don't tend to get all uppity about books not matching movies.

Rory Alsop

@ScottPack It was a particularly good book though

And one that just has so much that really should be good on screen

Iszi

@ScottPack There's a certain amount of variance I can forgive, but certain key points need to be maintained.

Scott Pack

I tend to look at them as two different stories that are either set in the same world or are similar.

Iszi

e.g.: Ender's Game

Scott Pack

17:47

@RoryAlsop It's been on my read list for a long time. I just tend to forget about it every time I come to picking up a new book.

Iszi

@ScottPack I suggest you read it before you see it, then.

I'd offer to loan you a copy, but I think mine's buried in storage right now.

Scott Pack

@Iszi Based on how often I watch movies that's more likely to happen anyway.

Libraries, son.

Iszi

Good luck finding one that doesn't have a cover from the movie now.

Simon

@Iszi You know you're gonna complain about it, don't lie to yourself.

Iszi

Oh, this is awesome. Found via the Twitters:

832

Q: Why does HTML think “chucknorris” is a color?

How come certain random strings produce various colors when entered as background colors in HTML? For example: <body bgcolor="chucknorris"> test </body> ...produces a document with a red background across all browsers and platforms. Interestingly, while chucknorri produces a red background as...

html background-color

Scott Pack

17:50

@Iszi And?

Oh, @RoryAlsop. Do you do the Google Talks? I have something I'd like to run by you so I wonder if you'd mind chatting about it or if you'd rather me write it up as an email.

Rory Alsop

@ScottPack Yeah I can do the hangout thing...think I know how to :-)

Scott Pack

@RoryAlsop Cool. Not right now, we're about to eat lunch, but I'll hit you up later.

Rory Alsop

grand - we'll be eating in about 30 minutes once the pasta bake has finished ...baking, so about an hour's time will be grand

Iszi

@RoryAlsop Awww, Grandpa Rory's getting all high-tech these days!

Scott Pack

@RoryAlsop Awesome. We'll see what I'm up to then.

Iszi

18:07

This is almost definitely a dupe, but I don't have time to find the original right now.

0

Q: What is it common to only say "username or password is incorrect" in case of login errors?

When logging in to a site with wrong user/password credentials, the displayed error is most generally a generic "username or password is incorrect". Looking into some PHP code that handles such login I found a MYSQL request constrained on both the user id and the password hash, making it indeed i...

authentication

copy

It's in the sidebar, security.stackexchange.com/questions/17816/…

Rory Alsop

@Iszi not really - I still have problems with it, but I think that is because it is a crap application, rather than my ability to work a new-fangled piece of code

Rory Alsop

18:54

@Iszi Actually my guitar effects are getting high tech - running a lot of high end digital effects - but analogue is still best. Valves FTW

TildalWave

@RoryAlsop they also still work with EM pulse (1 billion times more resistant) so you can have a great gig in the sky if the Earth goes boom

and they go up to 11

Rory Alsop

@TildalWave interestingly enough, it is Prog weekend on tv in the UK, so loads of Floyd, Yes, Tull etc. It's been awesome

TildalWave

@RoryAlsop which channel?

Rory Alsop

@TildalWave hmmm - that's a good question. These days I rarely know - I see a thing, I select it on Sky+ and itrecords for me to watch. Plus, I did drink a little last night. I'll go find out

BBC Four

that had all the pink floyd stuff

TildalWave

Ah cool, I can even switch over to it... I think. Need to check

bloody hell there's 300+ channels ... this might take a while

nope BBC3 and a few others, can't find BBC4

Rory Alsop

19:28

@Scott - have opened a hangout thingy

Rory McCune

19:56

@RoryAlsop Is that the technical term :op

Rory Alsop

20:16

I think it is, yes @Rorym :-)

Rory McCune

@RoryAlsop good to know :op

tylerl

22:25

My Wifey just finished this 5k obstacle course: rocrace.com

it was more interesting than a normal 5k

Rory Alsop

23:45

Looks fun!

@tylerl they don't quite have an equivalent in the UK

There is the Tough Mudder, and the Rat Race, and the Electric Run, but nothing quite the same

tylerl

@RoryAlsop We did the electric run a few weeks ago. Tough Mudder was too far away. At this race, they made a big deal about this being their first time doing it here.

Transcript for