The DMZ

David Freitag

00:39

Everyone should read this: gawker.com/…

David Freitag

00:50

Also, i present this to all the haters of the Volvo estate concept: jalopnik.com/the-volvo-concept-coupe-this-is-it-1217800945

and this: jalopnik.com/…

tylerl

02:54

@Iszi Swooped. Kinda. The question appears to be misguided. You don't normally run Tomcat as your web server. Though I guess theoretically you could.

Scott Pack

I'm fair positive I've seen it several times.

tylerl

03:13

@DavidFreitag And then you should read this: murderpedia.org/male.J/j/jasper-ray.htm

The reason he is correct in saying he didn't commit any murder is because the man didn't die from having his throat slit, but rather from the stab wounds afterwards.

tylerl

03:24

@ton.yeung Why is a bug in GnuTLS considered a "Linux bug"? isn't that like calling a bug in snapchat a "critical iOS bug"?

Terry Chia

04:26

Oh neat, rep capped twice in a row.

@ton.yeung Yes.

OS X, Windows etc all work.

strugee

@tylerl wild and not entirely nonsensical guess: because GNU/Linux security is (often) based on it. e.g. Windows Updates are (I assume) secured with PKI but package managers usually verify signatures based on public key infrastructure. so if you compromise GnuPG you can theoretically compromise the whole distro, because package signing isn't enforced properly.

disclaimer: I haven't read the linked report

Terry Chia

@strugee What? GnuPG and GnuTLS are entirely different things...

strugee

@TerryChia d'oh! I completely misread that was pretty stupid

sorry

Scott Pack

Canadian.

strugee

@ScottPack ?

Scott Pack

04:38

You apologized.

strugee

so?

Terry Chia

Canadians love to apologize. You apologized. Therefore you are Canadian.

Scott Pack

Clearly.

strugee

um

Scott Pack

%s/um/eh/

Terry Chia

04:46

@ScottPack Hahahaha!

strugee

I repeat: ummm...

sticking to my guns

and besides, that would make @ton.yeung Canadian too

tylerl

@TerryChia Arguably it isn't even used inside linux. It's for projects that don't like the OpenSSL license and really, really like the FSF.

so.. mostly for other projects run by the FSF

Scott Pack

@tylerl Do we have a good definition of "inside Linux" that doesn't involve the TSA and a Finn's travel schedule?

tylerl

Linux, not Linus.

Scott Pack

Please take your pedantry out of my humor

2

tylerl

04:56

@ScottPack Honestly it was so off course that it took me a minute of staring at your joke to figure out what it was supposed to mean.

Scott Pack

It happens sometimes

Oh right! You live in that place.

tylerl

Which place?

Scott Pack

Do you know anything about the roving bands of feral chihuahuas that are terrorizing the metro area?

tylerl

@ScottPack I've heard tell on the radio. But i haven't been fortunate enough to witness the terror

Scott Pack

I heard about it on WaitWait and thought it was too good to be true.

tylerl

04:58

Because feral chihuahuas is like saying ravenous bunnies

Scott Pack

Bunnicula man.

Stack Exchange

Bacteria still outweigh us thousands to one--and that's not even counting the several pounds of them in your body.

strugee

well that's just sad

Scott Pack

He must not be including Americans or else there would be more dark grey.

tylerl

I think that just means that humans have domesticated all the large land mammals. Which isn't surprising in the slightest.

How does it compare to all land animals

Oh, this is actually funny in the most ironic sense possible. The error in the GnuTLS library is that it didn't say goto fail;

Scott Pack

05:13

Nice

tylerl

06:16

GRRR

0

Q: How to harden and secure Jetty 7 in Linux?

We are trying to deploy a webapp on Jetty 7 in Linux. We are going to open particular ports for Jetty on the firewall and allow access by general public. We would like to harden the Jetty server. Are there any general instructions or tips to harden the servers to be secure enough to be accessed?...

webserver

0

Q: How to harden and secure Tomcat 7 in Linux?

A web application is going to be deployed on Tomcat 7 in Linux os. We will open a particular port on the firewall for Tomcat server. We are aiming to allow access to the application by general public. Considering the security issue, we would like to harden Tomcat 7 to protect the application or m...

web-application webserver

USE TEH GOOGELS

strugee

that seems like a prime candidate for RTFM

either one

tylerl

06:41

or both. Also too broad.

It's like saying "How do I do Security"

kiBytes

Morning

People doesn't know how to differentiate when they should ask a question and when they should hire a consultant

AviD

07:11

@DavidFreitag oh please. Dont give us none of your communistic crap.

anyone think this is ontopic here, am I missing something?

0

Q: GnuTLS test 'chat' equivalent of OpenSSL s_client s_server

How can I set up a test encrypted "chat" with GnuTLS, equivalent to the OpenSSL s_client and s_server using GPG credentials? I would like to tell GnuTLS-serv and -cli to use keys generated with GPG using (example here ): gpg --gen-key gpg -a --export 5D1D14D8 > openpgp-server.txt gpg --export 5...

ssl pgp openssl

(migrated in from crypto. I think SU would be a better choice.)

Terry Chia

@AviD Yep, SU.

I can't vote to migrate again.

AviD

hmm. neither can I.

Terry Chia

@AviD Huh. I would think mods can migrate stuff again.

AviD

okay. VtC it now.

FEichinger

SE staff can clear the migration and then re-migrate it.

AviD

07:24

5..4..3...

2..

1..

0. missed it.

TildalWave

morning

@AviD interestingly, I didn't see the migration notice displayed for it at all

like it has now over at Super User

ah that would be the mod history purge?

@AviD So how did you do that? A bit of social engineering over at TL? Or we actually can migrate again on our own?

talk to me damnit!

AviD

@TildalWave yeah, just discovered it.

@TildalWave mod button....

TildalWave

@AviD ... ah I see now, migrated ones have "clear migration history"

didn't know about it either

AviD

I think I may have misused it. I was about to close it, and leave a comment on the original - that probably would have been healthier.

TildalWave

does the original post over at crypto still find the new location now?

AviD

07:34

good question...

TildalWave

just checked, it does

goes straight to SU

AviD

yeah? doesnt for me...

TildalWave

@AviD ah so it hops via sec.se and it doesn't redirect you because you're a mod here

AviD

ahh yeah, just sussed that out.

TildalWave

life of mods is hard, they give us toys and don't tell us what they'll do, it feels like the zone from Stalker sometimes

tylerl

07:39

Grr. Finding out how much a given job at a given company pays is particularly difficult.

AviD

@tylerl yes. Hiring is broken.

interviewing, negotiating, etc. All the HR stuff.

see our conversation from a few days ago...

TildalWave

look at what they can afford, extrapolate

tylerl

Last thing I want to do is fly out for interviews only to find out that they want to pay me $70k.

AviD

@TildalWave a. thats bullshit b. you usually have no way of knowing c. it rarely affects the end result anyway

tylerl

@TildalWave they can pay billions. It's what they want to pay

Rоry McCune

07:42

@tylerl big enough company for glassdoor.com to be any use?

AviD

@tylerl yeah. when the interview process has overhead, you need to have the salary range discussion up front.

TildalWave

@AviD yeah, but you know what cars they drive, how big of a house they live in, and if their wives get to have new shoes each week

which might be all that matters, what else you need money for anyway?

AviD

like e.g "okay before we waste each others time, I am looking at a range of X-Y$, assuming the job fits my expecattions. Best case scenario, and of course I wont hold you to this, but if I happen to be the perfect candidate, is there any way that is within range of your budget?"

tylerl

@RоryMcCune Big enough for it not to be of any particular use. A range of $60k to $220k

AviD

@tylerl oh! WhatsApp or Facebook?

tylerl

07:43

@AviD google

Terry Chia

@tylerl Tired of being a consultant?

AviD

@tylerl heh. Okay, its not so funny then.

tylerl

@TerryChia No. they called me.

AviD

and location will also matter.

Terry Chia

@tylerl Ah that's cool.

TildalWave

07:44

@tylerl I meant what people at comparable positions get

AviD

though I doubt they will be limited to 70K for a real job, especially if they came to you.

tylerl

@AviD I imagine it all has to do w/ experience vs comparable prospects vs "competitive wage"

Terry Chia

Heh, I think I just earned $100 from a bug bounty.

tylerl

which.. if they want to compete with "competitive" for a consultant, that's on a different level.

@TerryChia Earning even $3 on a bug bounty is cool. Just the fact that you got it is amazing.

AviD

@tylerl at a place like google, it probably has less to do with you, and more to do with the pay grade assigned to that position, adjusted for location, and maybe a little buffer for the hiring manager to stretch if she really wants to hire you.

TildalWave

07:47

cute typo on site: Bad practice combined with depreciated security standards have opened up this venerability.

AviD

SEI has a very transparent salary grading system. I wish more places would do this.

Terry Chia

@tylerl I'm poking around on hackerone.com. Many websites having bug bounties there now.

AviD

@tylerl yeah, I've had that conversation with some companies a few times.

google might be able to swing it, though.

Terry Chia

$100 for pointing out the password input field isn't limited so it's opened to a DOS from kb length passwords. Pretty neat.

Rоry McCune

@TerryChia cool!

tylerl

07:48

@AviD Yeah. Assuming they want to. I'd have to relocate though. Which doesn't fill me with glee.

AviD

@TerryChia bad boy! passwords shouldnt be limited!

Terry Chia

@AviD 1000 character passwords are really pushing it. ;)

AviD

Glee (TV series)

Glee is an American teen musical comedy-drama television series that airs on the Fox network in the United States. It focuses on the reconstituted William McKinley High School glee club, New Directions, which competes on the show choir competition circuit while its disparate members deal with relationships, sexuality, social issues, and learning to become an effective team. The initial twelve-member main cast encompassed new club director and Spanish teacher Will Schuester (Matthew Morrison), cheerleading coach Sue Sylvester (Jane Lynch), guidance counselor Emma Pillsbury (Jayma Mays), Wil...

tylerl

@TerryChia that's a 8000-bit key!

AviD

@TerryChia .I hate when my bank limits me to 12 character passwords. ridiculous.

@tylerl not really, because each character (assuming its randomly chosen), gives only about 5.6 bits of entropy.

and if its a passphrase, of course its even less.

Terry Chia

07:51

@AviD That's.... not really the point is it now? ;)

AviD

and as we all know, length alone is a poor proxy for password strength.

tylerl

@AviD Do unicode codepoints count as a single character?

AviD

hmm. since we're talking about html field length (I assume), I would say possibly yes - but since we are talking about html field length, you are constrained to whatever codepage the page defines.

tylerl

@AviD ...or you found another vulnerability!

AviD

hehehe

tylerl

07:53

I think your POST submission isn't limited to the codepage of the original HTML page. I think you get to specify your own character set in your request headers

AviD

this one is worth more than 100$, since its a unicode vuln.

Or none at all, since they can't really fix that sh*t.

tylerl

whether or not they respect your decision is another matter

AviD

@tylerl true, true.

tylerl

@AviD Because they wrote the app in PHP. Oh for shame.

AviD

@tylerl in this case, I will point out that everybody has difficulty fixing codepage / unicode bugs, not just PHP.

tylerl

07:55

@AviD That's true. But ruby, python, c#, all modern languages know what unicode is. PHP sometimes does and sometimes doesn't. It's surprisingly inconsistent in surprisingly problematic ways.

I wrote a SO answer about it once... lemme dig that up.

AviD

PHP is surprisingly inconsistent in surprisingly problematic ways? That's surprising.

3

Terry Chia

@tylerl "It's surprisingly inconsistent in surprisingly problematic ways." You just described all of PHP.

2

Dammit @AviD!

AviD

hehehe. I will star yours though, even though mine is better.

TildalWave

@AviD I know what @Simon would reply to that :)

Terry Chia

@AviD There we go, all is right with the world. ;)

@TildalWave "Nurd"?

TildalWave

07:58

@TerryChia I was thinking more something like your face is surprising!

Terry Chia

@TildalWave Nono, that's what @AviD or I would say.

AviD

@TildalWave yeah, no that is proper use of your face. That's beyond @Simon's capabilities.

tylerl

Ah guess it was on this site:

TildalWave

ah,... first coffee, sorry

tylerl

17

A: How did anonymous use UTF-16 ASCII to fool PHP escaping?

First of all "UTF-16 ASCII encoding" is a contradiction, since UTF-16 and ASCII are mutually-exclusive encoding schemes. But presumably he's just referring to using Unicode to bypass filtering mechanisms. The general principle is this: we often think of characters encoded in ASCII -- "A" is the ...

AviD

08:00

hey, is what we do to @Simon considered bullying? I wouldnt want to be a bully. Even to @Simon.

Adnan

$newBalance = $currentBalance - $withdrawl

No way that can go wrong.

AviD

Right. Always prefer Nike.

Terry Chia

@AviD Hahahaha!

TildalWave

@tylerl meh, already upvoted long ago ... you should onebox that over at one of SO chats, or wherever PHP noobs hang out these days (where's @Simon?)

tylerl

@AviD I like Saucony. Good for running.

Adnan

08:02

Somewhere out there is a bitcoin exchange where you can withdraw -1 bitcoin to add a bitcoin to your account.

Tweeted by tqbf on March 5, 2014 at 1:21 AM

Terry Chia

@Adnan That depends. Can $newBalance be negative? ;)

FEichinger

Oh, hey, I missed PHP talk?

Terry Chia

Oh @Adnan, you are finally on Twitter?

Adnan

@TerryChia Yup, you finally convinced me.

AviD

@Adnan why just bitcoin? Real banks aren't allowed to use this pattern? y'know, for performance.

Adnan

08:04

@FEichinger Nah, you missed nothing. PHP talk on the DMZ is pretty much @Terry and @AviD shitty and pissing on the PHP devs. It's fun.

Terry Chia

@Adnan Don't forget Perl talk. Which is @RоryMcCune, @AviD and I pissing on @ScottPack.

2

tylerl

Guys, no need to apply updates to GnuTls, I have reviewed the code and it has braces on every if statement.

Tweeted by migueldeicaza on March 5, 2014 at 12:45 AM

AviD

@Adnan in this case it was @tylerl. I stood up for PHP being not much worse than normal languages, in this specific case.

Adnan

@AviD Yeah, I actually distinctively remember working on an ISP's Internet-facing system that literally did that.

AviD

Or at least, not creating a brand new problem.

Terry Chia

08:05

I think I have ranted about Python 2's shitty unicode handling as well.

tylerl

@TerryChia python 2's unicode is confusing. But you can work with it if you understand the silliness.

FEichinger

@Adnan Hey, hey, every proper PHP dev is self-conscious enough to realize that they are masochists doing magic with a turd.

Terry Chia

@FEichinger And the proper PHP devs are only 1% of the PHP dev population.

FEichinger

That is sadly true ...

I'd also estimate 50% of "PHP devs" are actually WordPress devs.

TildalWave

@FEichinger didn't Mythbusters have an episode proving there's only so far one can polish a turd?

tylerl

08:07

@TerryChia A LOT of people have trouble with getting unicode decode exceptions when they accidentally convert unicode->ascii->unicode again just because of using quoted strings.

@FEichinger JOOMLA

Terry Chia

@tylerl Yeah. If I start a new python project now that deals with unicode, python 3 is definitely the way to go.

tylerl

I would wager that not a single Joomla plugin dev has been writing code longer than 9 months.

Guess how many sites I saw today alone that were hacked because of joomla and/or Wordpress.

TODAY

7

AviD

@TerryChia "that deals with unicode" you always deal with unicode, you're just not always aware of it.

tylerl

Not just saw on the Internets, but actually got people calling me for help

AviD

@tylerl whoa. and its still early morning.

FEichinger

08:09

@tylerl At least the Joomla devs don't talk about it like they have hundreds of years of experience.

tylerl

I'm counting the day that started 25 hours ago.

its 1am here

and I should be in bed by now :(

FEichinger

They know full well they have no idea what they're doing. WordPress devs on the other hand scam people out of five figures because they are such "professionals".

tylerl

@FEichinger oh lawd

FEichinger

For a five minute hackjob that collapses on itself because it's bastardizing WordPress into something it shouldn't be.

tylerl

The Wordpress community is a cesspit of crappy plugin authors. But Joomla is just a cesspit. The whole damn thing.

AviD

08:11

@FEichinger the reason for that is that Joomla is infrastructure, a product for developers. WordPress is (ostensibly) an end user platform, a consumer product.

FEichinger

@AviD True enough.

But, as I said, at least you don't hear Joomla devs bragging about their work and ripping people off with fundamental nonsense.

tylerl

For what wordpress is -- and for the version of PHP that existed when wordpress was written, it's surprisingly well-built. The way a motorcycle built of tinker-toys would have to be well-built. But that's where the positive words I have to say end.

FEichinger

Joomla is crap, but at least it's still used for what it's supposed to be used for.

tylerl

@FEichinger They're largely overlapping. Both are CMSes. Joomla was designed for more management of plugins, while Wordpress was designed to be usable as-is. But there's very little that one does and the other doesn't do in your base design.

I have ... qualms .. with the way Joomla did their plugin architecture, though.

well, anyway. That's enough ranting for me.

And to all a good night.

Rоry McCune

BTW on a related note, anyone have a recommendation for a non-crap CMS?

tylerl

08:17

@RоryMcCune sigh. No.

Rоry McCune

@tylerl heh, ok thought I should check before using a crap one.

FEichinger

@RоryMcCune BYO.

tylerl

I sometimes used Django - either raw or starting out with an existing cms module -- if I'm going to do a very customized site

I've did some work on the Kohana project in its early days. I think there's a CMS built on that.

Rоry McCune

@FEichinger voice of a developer there.

tylerl

And Code Igniter (on which Kohana was based) I know has a cms

FEichinger

08:20

@RоryMcCune Voice of a CMS developer, in fact.

Terry Chia

@RоryMcCune See if you really need a CMS first. ;)

Rоry McCune

hmm yeah there's a lot of choices, it's the missus that'll be using it so she prefers .NET based stuff, but most've them seem to be PHP

tylerl

But my own low-priority sites run wordpress. With no plugins, and I secure the shit out of them.

FEichinger

If I weren't still rebuilding it from scratch every few months because I have no projects to really apply it to, I would try and sell it to you. :P

Rоry McCune

@tylerl yeah wordpress with no plugins seems ok from that perspective these days...

Terry Chia

08:21

@RоryMcCune Sharepoint? ;)

Rоry McCune

@TerryChia at the moment the site is pure HTML/JS but she's doing too many updates to make that practical long term

Terry Chia

@RоryMcCune Ehh, for a blog I presume?

Rоry McCune

@TerryChia <shudder> .. not really a CMS although that doesn't stop people using it as one :)

tylerl

@RоryMcCune not foolpoof. You still have to keep up on updates cause they have core vulnerabilities every now and then. And definitely restrict access to your wp-admin dir, and down allow execution in your wp-content dir, and dont allow uploads OUTSIDE your wp-content dir.

Rоry McCune

@TerryChia part of it's the blog, part of it is video uploads and page changes

FEichinger

08:22

@RоryMcCune Hmm ... Yeh, BYO.

Terry Chia

@RоryMcCune Just use jekyll?

tylerl

Oh, yes jeckyll

was just about to say that

simple as hell. Secure as static content.

because it is static content.

Terry Chia

I'm using that for my blog. Just upload videos on YT and embed.

Rоry McCune

@tylerl yeah ironically one of the security companies we do stuff for put a new site up which is wordpress based. First thing I checked, can I get to the wp-login and sure enough I can and it submits over HTTP... <sigh>

@TerryChia @tylerl yeah I tried to convince her on that one (because hey ruby!) but she wasn't too sure

I'm thinking if I start blogging again I'll use octopress

tylerl

@RоryMcCune I put in IP-based restrictions on the wp-admin dir. No sense letting ANYONE hit it.

Terry Chia

08:24

@RоryMcCune That's built on Jekyll right?

tylerl

Also, TWSS

Rоry McCune

@tylerl exactly, IP restrictions v. useful for that sort of thing..

@TerryChia yep

Terry Chia

@RоryMcCune FWIW, it isn't much work to setup especially if you just use an existing theme.

I just write markdown, run a command to compile and another to rsync it to my server. You can get even fancier and have git hooks deploy automatically upon commits.

Lucas Kauffman

08:45

morning

AviD

@RоryMcCune okay, not sharepoint then.... DotNetNuke?

Rоry McCune

@LucasKauffman mornin'

@AviD ewwwwwwwwwwwww

I can only think that that's based on phpnuke

which was... not good

Lucas Kauffman

@RоryMcCune "oh let's host this blog on this sharepoint here, all I need is to add another 16 GB of RAM to the server"

AviD

@RоryMcCune no real experience here, just remember reviewing a site based on it a looong time ago. I do seem to remember it being pretty decent.

sharepoint is definitely the most straightforward, but it is probably a hella overkill for this.

Rоry McCune

@AviD I suppose I'm thinking back to phpnuke over 10 years ago, so you'd guess it'd get better

@LucasKauffman this is why I use Office365..

AviD

08:48

didja think about having it hosted somewhere?

Rоry McCune

nice products, no way I'm hosting them

AviD

@RоryMcCune not necessarily, it has PHP in the name... ;-)

Rоry McCune

@AviD oh hosted CMS, hmm could be an idea

AviD

@ScottPack lol at that LI comment about your long commute...

Adnan

09:04

@LucasKauffman Watched it already?

Rоry McCune

09:28

@Adnan wrong room text entry?

Adnan

@RоryMcCune Wrong window. I had Microsoft Lync on my left screen, and the DMZ on the right one. After pressing Enter, I realized that I have the Chrome window active and not Lync.

It's been happening a lot lately.

Rоry McCune

yeah focus sucks I need eye tracking software

would be cool, computer works out what I meant by which window I'm looking at

Lucas Kauffman

@Adnan hannibal? yea

it was awesome

Terry Chia

@RоryMcCune I need Jarvis.

AviD

hmm. Chat.SE does not have the new topbar yet.

anyone brave enough to check meta.so to see if this has been noted?

@RоryMcCune doesnt always work for me. Sometimes I'm typing in one window while watching another.

Adnan

09:32

@AviD Dude, don't bring it up. I'm loving it. It's the only way to have the old SuperCollider

AviD

@TerryChia Jarvis

Adnan

@LucasKauffman Damn. I'm gonna have to watch it tonight

AviD

@Adnan really? I actually like some of the new features.

Adnan

@AviD pukes

Terry Chia

@AviD Did you see the news about WP getting Cortana?

That is freaking awesome.

AviD

09:33

whats cortana?

Rоry McCune

@AviD sure but a 90% match would be better than my current hit rate :op

AviD

oih duh

Terry Chia

@AviD halo.wikia.com/wiki/Cortana

AviD

never did get to do much halo.

AviD

09:45

Hmm. I think its time to upgrade soon. Need more memory, definitely more disk, and another monitor would not be useless.

Terry Chia

@AviD Heh. Get a server rack.

AviD

heh. mebbe.

Terry Chia

A full sized rack with routers and switches and all. ;)

AviD

I do have a pile of pieces waiting around to be built into a frankenserver. at least that will offload the DC, fileserver, and such.

Rоry McCune

@TerryChia bit noisy...

@TerryChia tower servers tend to be quieter, we've got an HP one and an siemens one and they're pretty quiet

Terry Chia

09:48

@RоryMcCune Unless @AviD wants MOAR POWER in a year. ;)

Then he can just add another server to the rack.

AviD

@TerryChia thats a good point. might save me from having to get another expensively quiet HDD. just use the fileshare, on noisy server in the other room.

@TerryChia oh yes MOAR POWER for shure!

Rоry McCune

@TerryChia heh, fileserver+dc ain't a more power situation, more diskspace perhaps and more bandwidth

Terry Chia

@RоryMcCune Hey, racks help with moar diskspace as well. ;)

Rоry McCune

heck just go here soyoustart.co.uk/offers/sys-e32-1.xml

AviD

►

Rоry McCune

09:51

32GB RAM 2TB raid 1, £30/month

AviD

@RоryMcCune well sure, if I had MOAR POWER I would use it for other stuff. the frankenserver is a very limited situation....

Terry Chia

That reminds me, I still have to add the SSD I bought into my desktop and install oVirt.

AviD

oh man, I forgot how damn funny that show was.

couldnt find a single MOAR POWER clip though.

Terry Chia

Crap, I have to sign up for S3 and move my blog there. My linode is expiring soon.

Adnan

@TerryChia Why not just extend your current hosting?

AviD

10:00

@TerryChia look at Azure?

Terry Chia

@Adnan Expensive.

@AviD Yep, nothing beats S3 for static sites though.

I'll also stick the free CloudFlare CDN in front of it.

Adnan

@TerryChia Hmm.. what about the domain name?

Terry Chia

@Adnan Paying for it, using it. I'll be keeping the domain name, just moving the hosting.

Adnan

@TerryChia Oh, I meant did you get it through Linode?

Terry Chia

@Adnan Ah, nope. My registrar is Hover.

Just have to change the DNS records.

Adnan

10:02

@TerryChia Sweet

I think S3 free is good enough, no?

Terry Chia

@Adnan S3 is pay per request. My site traffic is low enough that it shouldn't be more than 10 cents every month anyway.

Adnan

@TerryChia Ha?

I could swear S3 had free stuff

Lots of requests per month or something

Terry Chia

@Adnan aws.amazon.com/s3/pricing

Well yeah, low usage is basically free.

Adnan

> for one year.

Ahaaa

So only the first year is free stuff

Terry Chia

Meh, not much of a difference between free and 50 cents a month anyway.

Adnan

10:06

@TerryChia Hmm.. that'd be very interesting. I've never seen/tried doing website hosting on S3.

Terry Chia

@Adnan Static-only. That's the gotcha.

Adnan

@TerryChia Still, I've never seen/tried it. We've only used it for some cloud configuration storage for some busy application

Rоry McCune

@TerryChia can't you do static only for free on Github?

Adnan

but not hosting a website

Oho docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteHosting.html

Terry Chia

@RоryMcCune Possibly, but S3 is the least effort alternative. :P

I don't wanna modify my existing git repo to fit into GH's conventions.

Rоry McCune

10:10

pages.github.com

@TerryChia can't you have a new repo for the site?

Adnan

@TerryChia Ha?

Okay, what @RoryM said

@RоryMcCune IIRC, you need to create a new repo for the site on github, right?

Rоry McCune

@Adnan looks like it skimming through the instructions. so create a specifically named repo and push to that

looks pretty cool actually

Adnan

Whoa! @Terry help.github.com/articles/setting-up-a-custom-domain-with-pages

Rоry McCune

I may try out an octopress blog there

Adnan

Yumm... I like Jekyll

Terry Chia

10:12

@RоryMcCune Oh hmm, seems like I was thinking about the project page hosting for GH where you need to setup the gh-page branch or something like that.

I'll have to experiment with that, thanks!

Also, gotta run. Bye.

AviD

So, I ~~get to~~ need to start learning AngularJS for a client. Any tips / shortcuts? (and no, dont just point me to their documenation. I mean, duhh.)

Adnan

@AviD Oh lord, same exact thing I started doing yesterday.

AviD

@Adnan Angular? funny coincidence.

Rоry McCune

weirdly I was looking at JavaScript frameworks to pick one to learn yesterday too..

AviD

Though I am seeing it around a lot lately, seems to be getting pretty popular.

Adnan

10:25

@AviD Yup, AngularJS in addition to something called Firebase.

AviD

@RоryMcCune you should go for jQuery. Always go for jQuery.

Adnan

@AviD :|

AviD

Comparison of JavaScript frameworks

There are many JavaScript frameworks available. The intention of this comparison is to show some examples of notable JavaScript frameworks. Comparison of JavaScript frameworks {| class="wikitable" style="margin-right:0; font-size:85%;" !style="width:15em"| !AccDC !Ample SDK !AngularJS !CupQ !DHTMLX !Dojo !Echo3 !Enyo !Ext JS !Google Web Toolkit !jQuery !midori !MochiKit !MooTools !PhoneJS !Prototype & script. aculo.us !Pyjamas !qooxdoo !Rialto Toolkit !Rico !SmartClient & SmartGWT !Wakanda !YUI !ZK !Webix !Web Atoms JS |- || Version compared | 3.0 | 0.9.3 | 1.2.14 | 0.2 | 3.6 ...

Rоry McCune

@AviD heh well yeah I'm starting on some stuff there, but then there's frameworks on top of that (loads and loads of them)

@AviD and that's not even up to date, current hotness appears to be knockout JS

AviD

yeah... nevermind that wiki link, though - its missing too many of the better ones.

@RоryMcCune yeah, I was gonna mention knockout. It's cool, MVC on the client.

Rоry McCune

10:27

they've even gone hipster and have an old-school .com domain knockoutjs.com

AviD

also great VS support.

@RоryMcCune haha, so hipsters have now gone oldschool?

Rоry McCune

@AviD yeah .io is too mainstream now

and there's millions of new TLDs

Adnan

@AviD @RоryMcCune docs.angularjs.org/tutorial/step_00

Rоry McCune

so what's more hipster than a .com domain name

Adnan

@Lamia Hey hey hey!

AviD

10:28

lol. I've been on oldschool back when all the hipsters were jumping to .io.

> and DON'T point me at their documentation. I mean, duhh.

Adnan

@AviD That's not the documentation... ahh

AviD

@Adnan DOCS.angularjs.org....

Adnan

@AviD Jesus Ducking Christ! Go read that one!

AviD

@RоryMcCune also take a look at backbone....

Adnan

@RоryMcCune Don't take a look at backbone

Rоry McCune

10:31

heh BTW did you see someone paid $185,000 to create the .ninja GTLD!

AviD

yeah, that. DON'T take a look at backbone. Or rather, look at it, just to have a baseline for comparison.

@RоryMcCune codebrief.com/2012/01/…

that covers most of the main ones

Rоry McCune

@AviD dude 2012, is that going to be written on stone tablets :op

AviD

@RоryMcCune heh, sorry, I didnt notice the date. Or that you are a hipster.

Rоry McCune

@AviD I'm not, I just like making fun of them :)

TildalWave

do I sense aversion to clicking on links?

Adnan

10:33

Just go for freaking Angular and that's it.

Rоry McCune

that said I did get put off a javascript book 'cause it came out in 2010 and mentioned "the upcoming IE 9"

AviD

heh

Transcript for