« first day (1122 days earlier)      last day (3853 days later) » 

Ampt
Ampt
12:03 AM
Can posters delete comments on their questions?
 
 
1 hour later…
user55340
1:12 AM
@JimmyHoffa an old XKCD for ya xkcd.com/312
 
user55340
 
user55340
@Ampt The owner of a comment can delete it. A mod can delete it. If three people flag it, its deleted automatically.
 
user55340
@Ampt User names aren't unique on SE.
 
user55340
 
user55340
Or then there's this one... stackoverflow.com/…
 
user55340
1:16 AM
And this one...
 
user55340
 
Ampt
Ampt
1:53 AM
 
 
15 hours later…
ChrisF
ChrisF
4:51 PM
@gnat - there's no need to flag something as "cross posted" if the original has been closed on SO.
Unless of course you flagged them before they were closed on SO.
 
 
2 hours later…
gnat
gnat
6:59 PM
@ChrisF all right, will take this into account
 
Jimmy Hoffa
Jimmy Hoffa
7:26 PM
@MichaelT I always preferred
 
Ampt
Ampt
Everyone knows that braces are the only real choice.
Man, PDFs are the devils plaything. Trying to go pdf->editable png in java -> pdf
and there's not a single library that can do that. Either I can render the pdf, which solves the first problem, but not the second
or I can add stuff to an existing pdf, but good luck seeing it real time
 
 
1 hour later…
user55340
8:44 PM
@Ampt Ever read the various security advisories on pdfs?
 
Ampt
Ampt
No, is it insecure or more secure
 
user55340
 
user55340
Its not so much the format, but rather the reader... you can embed almost anything in a pdf.
 
user55340
Like put an excel spreadsheet in there... one with its own exploits. So opening up the pdf in outlook, loads the excel and... yea.
 
user55340
 
Ampt
Ampt
8:52 PM
stakeholders want PDF support, and its a make or break problem. They are making their own PDFs though, so I don't think that exploits are a high security risk
i'd say likelyhood is very low and then damage dealt is very low as well
this app wont contain anything sensitive
 
user55340
pdfs aren't bad... its more a "don't open pdfs from untrusted sources"
 
Ampt
Ampt
yeah, then that's not really on our radar as far as concerns go
 
user55340
Just like "don't run random exe's you get in the mail" - don't open random pdfs.
 
Ampt
Ampt
these are all inhouse PDFs
it's revit/autocad->pdf
 
user55340
People think "oh, its a document, that can't hurt me..." but well, its really possible to make it an executable of its own.
 
Ampt
Ampt
8:54 PM
I'll..... put that on the list of concerns then? where are you going with this?
should i prepare to talk to the stakeholder about the pitfalls of PDFs?
 
user55340
Nah... pdfs you are generating - not a problem.
 
user55340
If they want the app to do something with pdfs thats perfectly ok.
 
Ampt
Ampt
haha alright good. of course I'm already having a hard enough time just doing pdfs.... maybe telling them its just too high of a security risk is an option after all lol
 
user55340
A program that creates a pdf is kind of like a compiler. And you can feed good data into it and get a good pdf out. But people can also make malicious pdfs that exploit the run time environment that pdfs live in (remember the pdf that was a jail-brake for ios?) - thats not a problem of the format, thats a problem of the runtime.
 
Ampt
Ampt
Well if they can bake in a program, why the hell is it so hard to add a few lines...
(Drawn lines.) that seems to be the real caveat here.
 
user55340
9:39 PM
@gnat here's a fun query for you - data.stackexchange.com/programmers/query/139691/…
 
user55340
This was also a fun one to go after - data.stackexchange.com/programmers/query/139689/just-xkcd - you find things from the old days that were answers that simply "here's an XKCD comic"
 
Ampt
Ampt
10:24 PM
this just got checked into my repo 
if(ConferenceManager.getRecipients()[i].equalsIgnoreCase(releaseToolsTo.trim())){              OutgoingCommandHandler.handleSendControlCommand(LoginScreenController.getController().getUserName(), releaseToolsTo.trim() );
yay java
 
user55340
10:39 PM
There's something mildly unsettling about that i there.
 
user55340
Also calling trim() on the same string twice.
 
user55340
Couldn't it be something like...
 
user55340
String releaseToolsToTrimed = releaseToolsTo.trim();
for (Recipient rec : ConferenceManager.getRecipients) {
    if(rec.equalsIgnoreCase(releaseToolsToTrimed)) { ... }
}
 

« first day (1122 days earlier)      last day (3853 days later) »