"The last message was posted 1 day ago"

And it was an automatic message...

Everybody experimented just a trifle too much with subjects #1 and #2 ?

I'm just back to work today.

Does anyone else feel like they've been cheated out of a bit of password lifetime, when you come back from a long break to a "10 days remaining" warning?

TADA ! All "page 2" users now have 1000+ rep. Swag ! Swag !

@ThomasPornin Shazaam

Ugh. Pseudo-mondays

Does anyone know if SEI has made a New Year's resolution to get us a migration list?

I tried asking Santa, but apparently that didn't pan out.

@Iszi This is becoming a horrible comedy.

@JeffFerland Quite. I presume you've seen the latest related topic, in Meta?

It's really sad when we get something closed as dupe, for an issue that's been outstanding as long as this has.

For the sake of productivity, TVTropes should be blocked at all corporate firewalls & proxies. There should be a law about that.

I dare say one visit to that site could very easily cost an individual more time than their entire day's social media interactions.

@ThomasPornin wow - and just barely so - lbwtz2 has 1000 rep (an even number and thus odd :)

so that's 4 x 9 x 2 users with at least 1000 = 72 - an interesting target number....

time to figure out who the 1% and 99% are :)

@nealmcb Corporate policy and/or goals don't have to, and rarely do, make sense.

What do you guys think of this?

Doesn't belong on SF...

@Holocryptic We should migrate it, or invite the user to open it here. The Tor talk at 28C3 is spot-on for this - I think they're moving from looking like SSL to some other way of hiding so the discussion is ripe

So it is on topic here then?

Sure

I may need to get a couple other opinions on it though. The question seems "controversial", and if I flag it or otherwise try to get it moved, I need to be sure it's a fit

a fit here, I mean

If tor is on topic, so is this. security has to deal with various sides of this issue - how to try to control a network perimiter, how to attack such controls, and how to deal with the messy policy issues, and ultimately how to incorporate basic security issues like human rights

hmmm

point taken. okay, I'll see what I can do

I've flagged it. We'll see what happens now.

And done. Happy trails!

Ah crap... it has 57 votes on it already.

votes migrate with it

@Holocryptic I know. That's the problem.

haha

Speak to the Powers That Be

@Holocryptic Don't migrate questions that become our #3 most voted before they hit our site ;)

If it got 57 votes there, then their community likes it, eh?

It was either migrate it, or deal with shit storm on SF about why it was closed. I went with the easier option for us. Sorry :)

^@$!#! Just forgot that I had used the lid of my thermos as my cup. Poured milk all over my pants....

@JeffFerland Better than, well... I'll just leave it to your imagination.

@Iszi 3 minutes from now

This reminds me of a bash.org quote...

Sooo... who remembers how to stuff UTF-16 into a URL?

@JeffFerland Ew... why?

@Holocryptic You're an asshole.

@ScottPack I've been called worse

@Holocryptic That's probably true.

So, do you want to elaborate, or are we just going to leave it at that?

@Iszi because add_slashes() is getting in my way.

... and dammit, I want a win on this one.

@Holocryptic Oh, migrating that question rather than just throwing out a close vote.

Meh, some people thought it had merit. I checked here first. A valid sounding argument was made for its migration. I acted on it.

Hm. That's a disgusting mixture of cookies and coffee grounds in the bottom of my cup.

@ScottPack Can you sort it? I would like the cookies. You can keep the coffee grounds.

@JeffFerland Unlikely.

@JeffFerland Normally you convert it to UTF-8, and each byte which is not in the list of allowed characters is replaced with %XY where 'XY' is the hexadecimal code for that byte

UTF-16 to UTF-8 is not very complex, and many programming environments already offer code for that. What is yours ?

@ScottPack @JeffFerland I agree that the way migration works is sub-optimal especially from a busy site to a less busy one. I guess a bit more time for discussion might have been better. But it isn't like it got terrible answers before migration. And don't you think the question is appropriate here, and wasn't on SF? Are there any edits that would help frame it better? Tough issue, but the world is a complex place....

@ThomasPornin Pentest job. I can do injection, but I have the pesky addslashes() going on.

@JeffFerland So you want to embed a single quote that the PHP function will let pass unquoted, but that the database will interpret nonetheless as a single quote ?

@ThomasPornin Yup. Of course, that depends on PHP calling it UTF-8 and MySQL calling it UTF-16

Some things might still be done, though.

If you can send as string the byte sequence 61 27 00, then addslashes will turn it into 61 5C 27 00, which, in UTF-16, will be interpreted as U+615C (a Chinese character, apparently) followed by an unescaped single quote

@ThomasPornin I was working from shiflett.org/blog/2006/jan/…

@JeffFerland This uses GBK, not UTF-16. That's another encoding standard (specifically designed for Chinese).

Happy New Year all - good to see traffic again :-)

@Iszi But it really shouldn't be an issue, as if you VTC as offtopic (or flag as such) or even ping one of us in here with a possible migrate we'll look into it, ask the mods from the other site whether they want it and if so we then ping it over

@ThomasPornin Excellent - will keep nudging the SE powers that be :-)