« first day (1076 days earlier)      last day (4102 days later) » 

21:08
@Simon no, I am a zombie
Also playing dota, but mostly the zombie thing
@KevinvanderVelden Dota?? That's so 2004.
21:25
0
Q: company is sending md5 string via GET['password'] Should I be preparing a lawsuit?

TheUnpragmaticProgrammerSo, this big, reknown company (you all heard off) is sending md5 encrypted strings (with GET key: password) over HTTP. I accidentally came over it since I wanted to use jnlp on a non-windows machine. And I am curious. Is it by definition insecure to work like this, or can it be safe when one us...

migrate here or close as crap?
@DavidFreitag well ok, dota 2. Close enough
@KevinvanderVelden Never played dota 2, but i've heard it's crap..
@DavidFreitag almost at 800 games, it's good :)
@KevinvanderVelden Interesting. I'll have to check it out the next time i get some free time :]
@Gilles I'd migrate it here, but then again i wouldn't really be able to identify crap. At least, it doesn't seem glaringly awful.
@DavidFreitag “md5 encrypted strings” is off to a bad start, but it's par for the course, we're used to correcting this kind of misconception, as long as he's willing to learn
21:31
@Gilles Well, at least, it seems he wants to know about the possible security flaws in sending MD5 hashes over HTTP GET, which sounds like it's our territory...
Apart from some misuse of terminology, of course. But i think at some level that's supposed to be expected, especially from SO.
21:50
@DavidFreitag IT STILL SUCKS ASS
@Simon Wuh?
Steve Kard strikes again:
Might not be SFW.
22:27
@Simon simply talking to you while at work is not safe.
@D3C4FF I don't deny it.
22:41
@RoryMcCune it was way more sensible than usual govt "cyber" stuff. Sure, they had Cranfield there, showing off their syllabus: some normal stuff (forensic investigations) and some funnier (high speed projectile design, for example) but they had Rapid7, Palo Alto etc
Ladies and gents, it's that time of the year again.
My goatee is gone.
@RoryAlsop good stuff nice to see a slightly more level-headed less "cyber-war all the things" approach :)
@RoryAlsop BTW you going to make it along on Thursday for OWASP? Looks like we have a full house with 10-15 Glasgow Caledonian Students coming along
@RoryMcCune Sadly I can't. Hopefully you should have had a registration from Ross Foley, and Fraser would have come but is away on holiday so I can sort of forgive him
@RoryAlsop ah shame, yeah I think I did see Ross' name in there. Next year I think I'm going to do some stuff over Glasgow way if there's demand for it, the travel through to Edinburgh is a bit long (did it today for a meeting 2.5 hours each way!) So going to see if I can "persuade" someone to organise the east coast stuff and I'll do west coast
@RoryMcCune makes sense, definitely!
@Simon - you'll like this. Make sure you wiggle the mouse hard. And turn up the volume :-)
22:50
@RoryAlsop LOL I'M LAUGHING HYSTERICALLY
lolololol finally a developer is as crazy as I am.
@Simon that is Hardstyle, right :-)
@RoryAlsop Of course! It's only missing a proper kick, some distortion and to be slowed down to ~150 BPM.
@DavidFreitag You might find intro/outro boring but the melody is just amazing: youtube.com/watch?v=Jpc0rMKeIec
That's trance so it builds up very slowly.
23:08
@RoryAlsop Oh holy fuck my eyes
23:39
i need to get that off my screen
no
few more lines
keep going
just a little more
ok
almost there
ok it's gone
lololol
Why would you want to get rid of Steve Kard?
23:57
you know why

« first day (1076 days earlier)      last day (4102 days later) »