« first day (2575 days earlier)      last day (2382 days later) » 

12:00 AM
@NathanOsman we should show that we can at least finish a project before trying a new one :p
especially a BANK
 
yes
banks can print money
 
I thought only mints could
 
that's what the 2007 recession was all about. banks printed too much money.
 
I thought they gave too many loans
 
There's a Linux Mint joke in there somewhere.
 
12:00 AM
yes. they created too much money.
 
@NathanOsman no
 
there is way more money in the world than cash. it's just stored in a massive database somewhere. And banks have the power to edit that database whenever they want - thereby the ability to create money.
 
wait why is Nathan dying on us?
@KazWolfe oh
I thought you literally meant print money
 
Spoiler: everyone is dying.
 
not create credit and such
 
12:01 AM
that's what printing money is
 
@NathanOsman awwww, you ruined my favorite part!
wow, that was dark
 
It's true though.
 
no what I said
 
Let's become a payment broker then?
 
a bank can make $200,000 appear out of thin air in your account, and you can withdraw all of that in cash.
 
12:02 AM
@NathanOsman can we make it an Android-only bank, so I can program in Kotlin?
@KazWolfe unless everyone does it at once
 
@TheWanderer Backend shall be in Fortran.
Because all the other banks are doing it :P
 
only if it can be dockerized
 
kek
wait we need to work in SQL injections somehow
 
Actually, Rust seems like a not-half-bad choice.
 
backend is in java
 
12:03 AM
@TheWanderer Easy: PHP.
 
ah yes
but we need to use the old Apache version
 
here. let's actually do things right.
 
you know, the one Equifax is still using
 
VB6?
 
yes
program a bank in Excel
next AP test? ^
 
12:04 AM
I call dibs on the security department!
 
you gonna growl at intruders?
 
I am so tempted right now to start a repository on GitHub with a title like "core-bank-backend", write some skeleton code in VB6, and submit it to Hacker News.
 
@TheWanderer You joke, but I've legit seen 2GB spreadsheets for companies to manage their accounts.
 
rip
@all
 
2 GB spreadsheet. What. The. Heck.
 
12:05 AM
@NathanOsman it'd probably actually work on a bank's backend too xD
 
How much RAM does that require to open?
 
sorry, 2gb decompressed.
 
@TheWanderer Only if we install XP on the machines.
 
no 98
 
bank passwords can only be 6 digits.
 
12:06 AM
98 doesn't support more than 1 GB of RAM.
 
yes, digits.
 
Heh! My bank is pretty similar.
 
@NathanOsman but our software doesn't work on anything newer and we "don't have enough money" to upgrade
 
And they limit the password to alphanumeric characters.
 
no no
we're doing just numbers
and users cant change it
 
12:06 AM
@TheWanderer We could use swap, I guess.
 
only hackers can @KazWolfe
 
That will get us to 2 GB. I think.
 
@NathanOsman now you're thinking
 
or, here. how about this.
 
@KazWolfe ...without a small "maintenance" fee.
 
12:07 AM
@NathanOsman of $666
 
We build a bank layer based on Java EE microservices spread through Docker images, all running on Ubuntu 16.04 LTS hosts. All transit between servers is encrypted.
 
"microtransactions" FTW.
 
@NathanOsman here, have a new Angry Bird
 
@KazWolfe We need the word "cloud" in the title somewhere.
 
Bank management computers will all run on Ubuntu 16.04 LTS, permanently connected to a backend VPN secured by use of a smartcard.
 
12:08 AM
"$5, now only $7.50!"
 
"two PIN changes for the price of one" (fine print: the two PIN changes occur one right after the other)
Hey, this is fun.
 
lol
 
The ATM UIs are terrible. Let's use Flash.
 
no no.
 
noo @edwinksl
 
12:10 AM
It's still supported for a couple more years.
 
lol
who needs HTML5?
 
we use MD4 for hashing, and each password must be unique.
 
We can run it in IE9 in kiosk mode.
 
let's use a web language that needs to be compiled!
@KazWolfe tf is MD4?
 
And the error message will be, "Sorry, you can not use this password as it is currently in use by $user"
2
 
12:11 AM
LOL
 
You know MD5?
 
yehs
@KazWolfe perfetto
 
It's a worse MD5
 
ah
I guess there would be versions
 
MD2 is even better.
 
12:12 AM
although I still don't understand why Samsung's binaries are packaged in "MD5" format
@NathanOsman MD0
 
MD2 wasn't even disabled in GnuTLS until 2009 or so.
 
MD-1
 
doesnt exist
 
MD0.33333333333333333
 
Meh, ROT13 is Good Enoughâ„¢.
Bonus: when users forget, we can email it back to them.
I bet nobody's thought of that before!
 
12:13 AM
ok but for real, scrypt is awesome
 
@TheWanderer wut
 
eyyyy
 
I SHIP IT
 
SHIP WHAT
WHY ARE WE SHOUTING
2
 
SOUNDS FUN
 
12:18 AM
OH
 
12:53 AM
0
Q: rsync error + command not found

Vini.g.ferI'm trying to pull a project from an AWS server, but for some reason I don't understand, rsync is not working. When I try to run this command: vinicius@Inspiron-5537:~/Desktop/PHP$ rsync --protect-args -aP -e "ssh ubuntu@84.26.56.23 -i ~/Desktop/Projeto.pem" "ubuntu@84.26.56.23:/var/www/projeto/...

 
@KazWolfe MD4 for password hashing?! In the wild?!
 
@Seth No, no, no. MD2.
MD2 was finally disabled in OpenSSL and GnuTLS in 2009.
This calls for a tweet.
Except it is proving the opposite - JS is much faster than WASM on my machine for some strange reason.
Oh, it depends on the effect.
 
1:14 AM
actually
now that i think about it the unique password thing is kind of a cool anti-pattern
if someone chooses "password" as a password, they will get hacked and shamed
 
Then a new type of business will crop up that converts passwords into UUIDs that can be fed into your "unique password" system.
Wait. Have I just invented LastPass?
 
lol
retrovention
 
hm. why is everyone worried about KRACK, really?
you need specialized equipment to pull it off, and you still can't defeat normal encryption.
granted, specialized equipment you can order from Amazon.
 
because
 
what requires special equipment today can be had for nothing tomorrow
 
1:21 AM
HYPE HYPE HYPE HYPE VIEWS VIEWS VIEWS VIEWS
 
i'd imagine by the time 2.4GHz SDRs are widespread, we'd already have it patched.
 
Yes. But. Nation-state.
 
implying they dont have any other way
 
Kaz
sometimes I think you're in the wrong field buddy.
 
1:48 AM
that's a new expression
 
hm?
what do you mean by that @Seth
 
you seem to often be along the "whelp, we can't have absolute security so I guess we should give up" line fairly often
 
not quite
we should give up on absolute security but not security
there are points where panic just does nothing but makes you, well, panic
 
I don't think anyone is panicking.
And it's not just this incident that made me think that ;)
 
glad i can add yet another person to the extremely long list of people who think i suck at my job.
 
1:54 AM
eh, I didn't say you suck at your job.
From what I've seen I think you're probably pretty good.
 
part of the issue here is the attacker in question.
those who have the resources and know-how to pull off KRACK will most likely be able to get in other ways
 
large corporations count as nation/state too you know
@KazWolfe it's not about that. Hole's a hole. And any hole hurts you and helps the enemy. Even hard to get in ones.
 
right. you still need to minimize holes, but it's unrealistic to design a perfect system
 
the minute you say "they can't use that to hurt me" is the minute they will.
@KazWolfe ofc.
 
@KazWolfe cauze zero dayz.
Also every f***ing new 'vuln' needs a logo and a cute name
and in any case, https will save us all.
 
2:00 AM
krack is not a big threat now because few people know how to exploit it, and fewer people have the capability to do so. If you're a target, you should be worried. If you're some random at home, this isn't something to cause panic.
 
@KazWolfe no it's not, and I don't see anyone panicking.
 
this isnt the only chat i'm in :)
 
0
Q: Is it appropriate to remove low-quality/downvoted answer?

LisoLong time ago, when I'm still new to this site. I posted 4-5 answer to different question, and all of them got downvote. I recently figured out that they're low quality answer. So is it okay to remove them ?

 
@KazWolfe On SE it is :P
either way, if they're panicking than they're just ignorant.
What does worry me is that two of the systems involved are things with bad update cycles. Phones and routers.
Thankfully (apparently) only one device needs to be patched.
 
@Seth which is an arguement for not having specialised devices with fixed sources for firmware...
 
2:10 AM
@JourneymanGeek yeah well that's a bit difficult for both phones and routers/APs. Unless you've got no budget
 
well, phones it's become effectively impossible
you can jump to a secure (custom) firmware and lose quite a few features for "security" or you can stay on the fully-functional insecure firmware
did i mention how much i hate safetynet/the knox flag?
 
you're not alone.
 
@Seth heh, I suspect if not for wireless, the DIY route's actually pretty cheap.
 
@JourneymanGeek cheap for those with the know-how.
 
but most router makers don't want to make it too easy for you to slap on openwrt
 
2:16 AM
but we find a way anyways
and there is always a way they can stop you (cryptographic signature verification), but for whatever reason they're not quite there yet
 
@Seth been debating spending the 150-200usd for a x86 based, quad gigabit ethernet port box for pfsense
would do wifi too, but my wifi setup is dark and full of terrors.
 
If you can afford it a high quality router is worth it, IMO.
But who's to watch out for the average consumer eh?
 
ignorance is its own reward
 
0
Q: what is the linux source code file name for page replacement?

tilyuI am a student and I need to make some changes in replacing linux pages to make some comparisons, but I can not find the source file. Anyone know what it is?

 
@KazWolfe not when the day comes that you lose everything because of it.
 
2:23 AM
exactly.
 
 
2 hours later…
4:14 AM
next on graphics todo list: check nvidia-381, and then try a different DM
there's still no way to install KDE without breaking Unity, is there?
 
4:25 AM
What the heck, Amazon?
Why do I need a support phone number to list an app on your appstore?
I'm not about to give out my personal cell number to everyone on the web! Are you crazy?
 
Use a google voice number
 
Lol.
And before anyone says "Google Voice", it isn't available here in Canada yet.
I just tweeted that :P
 
right... forgot.
 
well... that didnt work
what the hell is this graphics problem?! it makes no bloody sense
WAT
disabling hardware acceleration in chrome makes it stop happening...
and i think i'm about to tear my hair out.
I think i just fixed it...
 
4:46 AM
I always find that disabling hardware acceleration fixes most things in Chrome.
 
No like for my entire system
It's not happening anywhere anymore.
 
yep
 
Chrome is like that.
 
Even in chrome with hw accel on.
(it's not chrome's fault)
Not chrome. Nvidia
God damn it. One checkbox. It was. One. Checkbox.
 
5:07 AM
@Seth is there a way to cancel a bounty without refund?
 
no. why?
 
damn
because the bounty is now unnecessary, as the problem is solved
no need to continue drawing attention
 
5:28 AM
no harm either
 
 
2 hours later…
6:59 AM
This Ubuntu misspelling looks new: upnutu (@TheWanderer)
0
Q: how to install upnutu in android

medooI want to install upnutu on an android small image but problems happen with me And what is required of an external orinternal area and what programs are install by the program upnutu I hopeyou reply and thank you

 
0
Q: Enable AddHandler support for multiple php version

Manish ShresthaHow do I enable multiple php version support by simply adding override code like: addhandler application/x-httpd-php56 .php addhandler application/x-httpd-php70 .php I have currently installed LAMP environment in ubuntu server 16.04, where I can change default php version using a2enmod

 
 
2 hours later…
10:24 AM
0
Q: fstab blocks mountpoint and prevents external drive from mounting

ananth.pI have an internal backup drive (backup1) with fstab entry to mounts to /mnt/backup. Occasionally, I unplug this drive temporarily, connect another drive (backup2) and do a secondary backup. Once done, I'll remove backup2 drive, plug in backup1 drive, that brings my system to its usual state. My...

 
10:45 AM
how can I search for the existence of two strings in a file using regex?
(string1|string2) returns any file that contains either
 
Oli
You want both? grep -l will output a list of files that match... so you could use that to find string1 and then use that list to search for string2. Bit fugly.
Aha, here's an example: unix.stackexchange.com/a/68142/880
grep -lZ 'foo' * | xargs -0 grep -l '321'
 
in Sublime
 
Oli
Maybe somehthing like this would work with multiline on: ((.*string1.*|.*string2.*)|(.*string2.*|.*string1.*))
Nah, that lets you match string1 string1. Nvm.
(?s)((.*string1.*string2.*)|(.*string2.*string1.*))
That'll do, pig. That'll do.
 
Oli
Yeah that works in ST. It craps out on big files though.
 
10:57 AM
In 17.10, how do I change the screen scaling? I have a high dpi display and would basically just like to scale everything up to x2. In older versions of Ubuntu, there was a slider in the system settings (gnome-control-center) under "Displays" but now not anymore.
 
11:10 AM
@TheWanderer On the same line, or on any lines?
 
any lines
files containing both words
 
The simplest would be something like the grep |xargs Oli gave. You can do it with regex, but it's needlessly complicated and they aren't really the right tool for the job. I'd probably do something like awk '/foo/ || /bar/{a++}; a>1{print FILENAME; next}; NR==1{a=0}' *
But that processes all files needlessly.
 
Oli
I'm trying to work out if multi-line matching is more stressful than double-reading. I think it might.
 
Hang on, grep can do it:
 
Oli
The performance is probably contextual (how likely is matching one not the other, how long are the files, how much distance between terms, etc). But as for matching within Sublime Text, you really can only do multi-line.
 
11:17 AM
grep -lzE 'foo.*bar|bar.*foo' *
And to speed things up a little:
grep -m1 -lZE 'foo.*bar|bar.*foo' *
 
Oli
Would have thought -m1 was implied by -l
 
@Oli Ah, yes, it might be. I've looked into this at some point.
Yep, you're right:
       -l, --files-with-matches
                 Instead of outputting lines from the files, just output the names of  the  files  containing  lines
                 that  would have been output. Each file name is output once, on a separate line. Searching normally
                 stops as soon as a matching line is found in a file. However, if the  -c  (count)  option  is  also
                 used,  matching  continues in order to obtain the correct count, and those files that have at least
 
I'm doing this in Sublime Text, so I'm limited to regex
 
Oli
11:33 AM
Then (?s)(string1.*string2|string2.*string1) or something like it should work.
 
OK thanks
 
11:53 AM
@TheWanderer Why though? Why not just run the command from the terminal instead of fiddling around with complex lookarounds?
@Oli Will . match \n in sublime's regex flavor?
 
Oli
@terdon That's what the leading (?s) does (turns on multiline)
 
Ah, right
 
@terdon Windows
 
Ah
My condolences then.
 
 
3 hours later…
2:52 PM
Hello :)
 
3:07 PM
hullo boxxie :)
 
3:20 PM
@Videonauth Hey Vidy ! :D Cool to see you ! :) How are things ?
 
@DavidFoerster Hi David ! :) Nice to see you ! :) Things are going well - what about you ? everything fine ?
 
3:41 PM
I need to make a small modification to a single method inside of a closed-source JAR file. If I decompile the class containing that method, modify and rebuild it, can I then inject the newly compiled class into the JAR file while leaving all the others untouched?
Or is that not possible?
Maybe @DavidFoerster knows?
 
@AndroidDev Yes, if you don't care about (cryptographically) sealed JAR packages.
 
yeah I don't care in the slightest
 
I monkey-patched JAR packages like that in the past.
 
can you point me to any SO questions or tutorials on how to do it?
 
Uhm, assuming you have the patched .class file handy, just use your favourite ZIP archive manager and replace the original file.
 
3:45 PM
Well no I don't have the patched .class yet. The good news is it looks like the output from the decompiler might be good to go without any modifications, and the file is quite short.
 
I never patched binary .class files before. I only replaced files recompiled from source when I didn't want to rebuild the whole JAR package because of reasons.
7 more rep to go until the trusted user privilege.
 
@DavidFoerster Here we go ! :) Congrats David ! :) Well done ! :)
 
4:02 PM
@cl-netbox: Thanks!
 
@DavidFoerster You're welcome ! :)
 
4:39 PM
well we got an HNQ:
46
Q: How would a local government make the switch from Windows to Ubuntu?

jjepsuomiI work in a municipal government where Windows is used throughout our institution. People use computers in our institution mainly for browsing the internet and using MS Excel or Word. I was thinking of suggesting that we change to a GNU/Linux operating system, such as Ubuntu. (Primarily because I...

 
We are getting heavy rain today.
And there's a wind warning.
:|
 
4:55 PM
@NathanOsman: Berlin’s weather is currently like in late spring or Indian summer.
 
@DavidFoerster same here :)
 
@Seth What's "HNQ"?
 
HNQ = Hot Network Question
 
@NathanOsman I thought maybe "Health Needs Questionaire"
 
Since a few months I'm preparing and now running a Shadowrun campaign (pen & paper RPG). With all the talk about automatic rifles, explosives, drugs and cyber-attacks I'm pretty sure we're all on some list now.
@cl-netbox: ^ if you know what I've been doing recently.
 
5:05 PM
@DavidFoerster what is this shadowrun campaign about ? looks dangerous what you said ...
 
@cl-netbox Have you heard of the sci-fi/fantasy cross-over world that Shadowrun is? There are many novels about it, so you might have heard it even if you don't play the RPGs.
 
@DavidFoerster no, never heard of it ... sorry - also RPG is something I've never heard of - what is that ? :)
 
RPG = role play games. Dungeons & Dragons (pen & paper) and World of Warcraft (video, online) are probably its most famous examples.
 
@DavidFoerster aaahhh ... thanks ! :) now I got it ... you are talking about en.wikipedia.org/wiki/Shadowrun :) You know, gaming is not my thing :)
 
catalystgamelabs.com/shadowrun gives a very quick overview on P&P-RPGs in general and Shadowrun specifically.
@cl-netbox Yes. That Wikipedia article is a bit more extensive than the short info by the publisher.
 
5:16 PM
@DavidFoerster and what is your personal role in the campaign you are running ?
 
@cl-netbox I'm the game master who writes the scenarios and campaign and is the "interface" of the (other) players to the game world.
(I'm also a player with a player character in another campaign led by someone else.)
 
@DavidFoerster WOW ... great David ! :) You are having capabilities which I definitely don't have ... hats off ! :)
 
@cl-netbox: multiple hats? :-D
 
@DavidFoerster Are you getting paid for your work ?
@DavidFoerster OF COURSE ! :D
 
No. I'm doing it for fun with some friends.
 
5:32 PM
@DavidFoerster nice "hobby" :)
 
There are hired game masters but it doesn't appear to be common – at least where I live.
An acquaintance used to do it for game publishers on games conventions or corporate team building events occasionally but he couldn't or at least didn't intend to make a career out of it.
 
Thank you for explaining it to me @DavidFoerster :)
 
5:47 PM
Have to go now ... see you next time around @DavidFoerster :)
 
@cl-netbox: see ya!
 
@DavidFoerster Goodbye David :)
 
6:33 PM
0
Q: start a process during boot time by script in /etc/init.d start at boot?

user5447339I have a process that I want to start as soon my system is rebooted or shutdown or powercycled so I was using upstart script for that but sometimes what I am noticing is my process doesn't get started up during hard reboot (plugging off and starting the system) so I think my upstart script is not...

 
 
1 hour later…
8:02 PM
Hail The Darkness!
(Hope everyone's days have gone better than mine...)
 
Nope.
 
@NathanOsman my day's been on the verge of chaos, and losing my mind and lashing out at the world - EXTRAORDINARILY high anxiety and stress today
@KazWolfe SEcurity has always been broken. The break just had to be discovered is all.
That's really what security is - ongoing patching to fix flaws that are newly discovered.
 
Sounds just like me.
 
8:24 PM
@NathanOsman x2
uhhhh what happened to the Android GitHub?
why did everything get moved to aosp-mirror?
 
9:16 PM
also, woo, my own screenshot service is now working! :D
still needs some improvements, but it's getting better
 
Screenshot service?
 
yeah
 
yells randomly about the world conspiring against us
 
hi thomas
 
bans *.kazwolfe.io in DNS
 
9:21 PM
that solves nothing :D
 
.io domains? Fancy!
 
screenshots here are actually spread across three domains, @ThomasWard.
 
@KazWolfe bans the Internet globally
 
@ThomasWard smart idea
either way, it's all AWS
 
bans all AWS IPs
 
9:29 PM
that's pretty much the same thing as banning the internet
 
and?
 
but not to worry
i also have cloudflare and google cloud acting as CDNs
 
starts World War Three, now the Internet dies in the fireballs
 
and finally
i even have a mirror at 127.0.0.1
 
that doesn't leave your systme
and the EMPs from World War Three happening will wipe out your computer so...
 
9:32 PM
no no. 127.0.0.1 relative to whoever is reading this
 
@KazWolfe same point ultimately
tech won't survive WWIII
 
either way, my image thing is online so.
yay i guess
 
 
1 hour later…
10:37 PM
this is actually an interesting show imdb.com/title/tt4159076
 
0
Q: sd 0:0:0:0 sda Assuming driver cache: write through

xMentalzzI'm a novice Linux user and I recently put GalliumOS on my Hard Drive and it worked fine until the second time i plugged the hard drive in and turned the laptop on. I got this error saying: [large number] sd 0:0:0:0 [sda] Assuming driver cache: write through and i've been this same error everyday...

 
11:00 PM
Hello, guys! Am i able to ask a quick question about using Ubuntu here?
 
Sure.
 
Thank you.
Well, actually I want to see DNS settings. As far I know systemd is used for make connection. So I've tried command "systemd-resolve --status" but got the error "unrecognized option '--status'".
My systemd is 229 and I'm unable to upgrade it.
 
Interesting.
I get the following error when I run the command:
$ systemd-resolve --status
Failed to get global data: Unit dbus-org.freedesktop.resolve1.service not found.
But I have version 235 installed.
(I'm also using Arch :P)
 
Sorry, what Arch is? :)
 
It's a Linux distribution different from Ubuntu.
 
11:09 PM
Well... I thought systemd should be the same for all Linux distributions, should't it?
Should I create a question on askubuntu.com ?
 
the show is interesting, but the subtitles are terrible
 
11:26 PM
Sorry? :)
 
not you guys
 

« first day (2575 days earlier)      last day (2382 days later) »