Lighty's game requirement checklist: 1. Is it for PC? 2. Is it Playable on my machine? 3. Is it cheap/steam compatable? 4. Is it something i can play for longer than 5 hours?
On a MacBook Pro, is there a way to change the text in the battery life drop down?
Specifically, where it says "X:XX Remaining" I want it to say "X:XX of Apple Juice Remaining"
Why? Because a good pun is its own reword.
Yes, this is a serious question. Yes, I tried googling first :)
Running...
@JourneymanGeek well, yes. But on my main PC at home I have a decent gaming mouse, a wacom for graphic design and a trackpad for - well, the kids really
@Simon Really? Do they, say, have a tactile feedback how close you are to the border or bump when you slide past its scroll areas? Or at least a gentle relief on it to same effect? Or anything else that others don't do also, probably better and have been 10 years before Apple adopted it? You can't find a better trackpad? You can't handle a trackpad! :P
I'm a fun collueage with alot of interest in learning new things, i can improve on getting here on time, and the work i delivered was really good for my grade
@Simon no it's because it's old, and it's not mine. My team just moved this week. More space, more windows, better workstations, but this keyboard is rubbish - so I need to swap it
@RoryAlsop nice. BTW I may be in town tomorrow afternoon, you about perhaps for coffee? or more likely you're calendar is chocka with meetings for the next month or so :op
I want to drink beer because I feel stress of my life. However, I don't want to gain weight because I have been overweighted. Is there any diet beer in US?
@Simon I suspect that a good portion of the questions on beer.SE are wind-ups. The topic seems to be, from what I can tell, attractive to either the particularly clueless, or trolls. Or perhaps more likely, both.
The answer by Ryan is good, but on another tangent I might suggest that alcohol is likely not the best way to handle stress in your life. You might want to consider other life changes like exercise, or removing stressors first. — Xander17 mins ago
Jesus @Xander you don't suggest to a guy that contemplates binge drinking on light beer to "remove stressors first"
@TildalWave I think it was fine. I thought about a couple of them before choosing the same one. I don't think it's really that big a deal...Even if it isn't the "best" reason, and I don't know that there's a compelling reason it isn't, it's still applicable. It's not like it's an incorrect reason.
Yes, you normally overflow buffers without using environment variables. In fact, I'm not exactly sure how you would manage to overflow a buffer using only an environment variable.
I choose to take it entirely at face value
I suppose I am lying a bit since I can think of how you could use an environment variable for a buffer overflow, but that really is a "wtf made you think that" question
@Xander I know barely anything about security, but that's no reason at all. Rejecting a ban on shooting people in the face because you could still stab them in the face with the same result is a terrible reason.
@Arperum no, a better parallel is that the fact that someone could shoot someone with a gun is no reason not to allow them on airplanes because someone could perfectly justifiably want to shoot a turkey on the plane
@Arperum Why not? If you're going to shoot a turkey, why not shoot it on a plane? Seems as good a place as any to me. Certainly easier than chasing one for miles around the woods.
@Xander Why would you not just shoot it in a cage on the ground? costs way less fuel. Although I guess shooting a turkey in a plane adds something that shooting it on the ground can't give you (the chance for somehow breaking something critical and crashing to your death).
That said, I don't feel that the addition of a constant pepper prefix/suffix to the salt will harm the resulting hash digest in any way due to the Avalanche Effect of modern cryptographic hash functions. The answer you linked to makes some assumptions. — Lakey2 mins ago
Apparently the avalanche effect means that it's ok to roll your own MAC construction. And that @ThomasPornin guy is full of crap.
@TildalWave A year sounds very impossible. after a minute or something they give up, the bloodloss starts to accumulate and no oxygen is being delivered anymore.
@Xander - which part of the answer were you commenting on? I see it's been edited a few times and I don't particularly feel like reading the whole thing
"If you use only per-user salts (which are stored in the database), then if your database is hacked & downloaded, the hacker will have both the digests and the salts, which literally make the use of salts pointless." that got a downvote from me
that's a pretty critical misconception about salts
@AJHenderson Yeah, I haven't downvoted it yet, mainly because I hate downvoting answers on questions I've also answered because it feels slightly slimy....But he certainly doesn't know what he's talking about.
I don't downvote easily, but dangerously wrong gets downvotes
and that qualifies as dangerously wrong
@Xander well he knows just enough to be dangerous, but doesn't understand the actual reasons why things are done, what they are accomplishing and that security by obscurity = bad
Actually, I find this assumption here most disturbing:
Thomas, your answer makes the assumption that a hacker will have access to the entire harddrive, which could happen, but it's much more likely that the hacker will only have access to either the SQL server or the web server, which is why I specifically mentioned that best practice is to host them separately. Statistically, the most likely attack vector is the SQL database, so let's start there: Assume the hacker has downloaded all your hashed passwords and their associated salts. Those salts are meaningless at that point. That is why you need a 2nd salt known only by the web app. — Lakey10 mins ago
@Xander well there is some hope for him. He did apparently acknowledge that he was wrong on saying they were worthless if the salt was known.
@TildalWave the basic premise is kind of sound, in that a SQL injection likely won't give immediate access to the file system, but it's still obscurity based security at that point
and still fails horrifyingly if the server itself is compromised
@AJHenderson Statistically, the most likely attack vector is from within. It's just often not reported (gotta look good in front of shareholders, no?) or goes undetected for years.
at that point though, hashing is the least of your worries compared to someone just flat out compromising the salt to not function properly either or pulling passwords down directly
if there's no functional security internally, it's all a cluster
I guess my main point was just that seperating knowledge between the web server and the SQL server isn't a bad plan, it just also doesn't make hashes magically fix the problem of offline attacks on bad passwords
I wish I had more room to talk to him about why a password isn't security by obscurity (or arguably it is, but it is reducing the requirement of obscurity to the least possible damage)
also, reviewing is hard ... I just read a few random good answers on the site that never popped up in review queue and realized how much time reviewing takes and mostly just leads you to the deep end of it
On a MacBook Pro, is there a way to change the text in the battery life drop down?
Specifically, where it says "X:XX Remaining" I want it to say "X:XX of Apple Juice Remaining"
Why? Because a good pun is its own reword.
Yes, this is a serious question. Yes, I tried googling first :)
Running...
I want to drink beer because I feel stress of my life. However, I don't want to gain weight because I have been overweighted. Is there any diet beer in US?
I was trying to overflow buffers and I was wondering ,
Is there anyway to do a buffer overflows without using environment variables ?
Yes, you normally overflow buffers without using environment variables. In fact, I'm not exactly sure how you would manage to overflow a buffer using only an environment variable.
