The Nineteenth Byte

Even then, it's much simpler to just validate the email address by sending an email :P

the major one being it output HTML which doesn't get rendered by default

@ArtOfCode In other news, Alt+255 is a valid username

@Bas yep

PhiNotPi

1:24 PM

Are you coding that entire site from scratch?

oh god

I may have just absolutely murdered everything

every answer displays on every question

@PhiNotPi yep

@ArtOfCode The brute force approach ensuring every question has the best possible answer...

Cᴏɴᴏʀ O'Bʀɪᴇɴ

bai

@ArtOfCode Oh by the way how are we sanitizing the HTML?

@quartata I threw another gem in

1:29 PM

@MarkyMarkov how did you get in here??

?

Shit. Marky's gone rogue.

@Geobits Who's in charge, exactly?

I thought me...

lol

zyabin101

Shit. Windows Explorer permanently broke.

1:30 PM

@zyabin101 Yep, about a decade ago.

@ArtOfCode What if someone actually wants a plaintext <tag> or something

@quartata you can probably do the same as SE, use <

PhiNotPi

my first question: stage.artofcode.co.uk/questions/56

sigh everything is fixed, good

@PhiNotPi that definitely didn't come straight off project euler

And, for the first time in quite a while, I have no open issues on the GH repo.

UH @ArtOfCode whenever I up vote, I get this:

1:34 PM

@VTCAKAVSMoACE eh? What have you got in the console?

Vote cast failed: status 422

@ArtOfCode I'm so happy this works

@VTCAKAVSMoACE 422 Unprocessable Entity. Your CSRF token is invalid. Log out and log back in; clear your browser cache if you can.

@ArtOfCode Do you have all of our passwords?

@ArtOfCode undeleting doesn't work

1:36 PM

@KennyLau I have your encrypted passwords, yes

as in bcrypt hashed with cost factor 11

@ArtOfCode Using what encryption? (I didn't use my real password anyway)

@ArtOfCode "Do you have all of our passwords?" "I have your encrypted passwords, yes" - All webmasters

3

ain't no way I'm finding out what your cleartext passwords are

@ArtOfCode Did all of that, still happening on this page

@quartata questions or answers

1:38 PM

@ArtOfCode yes

answers

@VTCAKAVSMoACE repro'd

@ArtOfCode Could you show me my encrypted password?

lso I think we need a rep recalc cause some weird shit is happening with rep

@KennyLau what's your account ID

1:38 PM

deleted an answer with -5 and lost rep

@ArtOfCode kc_kennylau

@KennyLau $2a$11$sulBFE9JNvF6xzYGJ7KQZufyYKZnvbO/IsynqWjqajphvRmy.UV6K

No unprintables?

@VTCAKAVSMoACE found your bug

@ArtOfCode Doesn't match with this website dailycred.com/article/bcrypt-calculator

1:40 PM

@ArtOfCode Here's another for you.

@KennyLau different cost factor

@ArtOfCode I entered 11.

also salted and peppered

@ArtOfCode What should I enter?

@KennyLau shrug

This is why the security is good - I don't know the salts, the pepper, or the cleartext.

1:42 PM

@ArtOfCode you run the website.

I could probably find the pepper, it's probably in the config. The salts... shrug

Salts are random.

@KennyLau doesn't mean I can automatically see everything

passwords are one of those things

If you're worried about security, I can show you the source code, and the gem that's handling user creds.

I didn't even write login myself to make sure that it was secure.

@ArtOfCode Thanks in advance.

Negative 7 rep. cha-ching

1:43 PM

@VTCAKAVSMoACE fixed

@ArtOfCode Aw.

Welp.

I still have -9, but okie!

@VTCAKAVSMoACE Yeh I think we have downvoting bot or somethin

@KennyLau Line 3 of the routes file: offload all the user processing to the Devise gem

I'll do a recalc in a minute

This is the Devise gem.

I think it uses ActiveRecord's has_secure_password, which is bcrypt etc etc

Recalc done.

Could you add rep recalc to the admin page

1:48 PM

@quartata Yeah, planning on that. It's currently a script, I'm gonna need to figure out how to do it.

I just upvoted my own question

@quartata fixed

Yeah AllowSelfVotes is currently true

Fatalize

@Geobits we know it's you

Someone legitimately downvoted my markdown status completed, wtf.

Why does it come up with an error when I vote sometimes? In an alert, a bunch of nonsense along with "body must be at least 30 chars". I can get the full message if you want.

1:51 PM

@Geobits the post isn't long enough to survive the current length restrictions - edit it to over 30 chars, then it'll work

Fatalize

@Geobits It's a feature to limit your downvotes

Found a weird bug. I cannot delete the what is this place question but every time I attmpt to it gives me my rep back

@ArtOfCode But what does that have to do with voting? I can't see a good reason to check the body length when voting.

infinite rep farm woohoo

@Geobits I can't remember off the top of my head, but there's a point in the vote process where I have to re-save the post, at which point it gets re-validated.

Oh, of course, updating the score means I have to re-save.

1:53 PM

Hmm. Maybe you should bring votes into their own table.

@Geobits they are

@ArtOfCode i now have 101 rep pls fix