CR Secret Santa 2015

Quill

00:04

@TopinFrassi which website is it that we're supposed to 'chat at'?

Mat's Mug

Just realised, there's not really a way of preventing "spoofed" entries - one could go and enter any CR user... I think we'll need a community challenge after Dec.11, to come up with a small web app that uses the SE API to authenticate users and their entries.

Quill

does SE support Oauth on 3rd party sites?

api.stackexchange.com/docs/authentication Yeah, it does

@DanPantry is a JavaScript guy, I'm sure he could use something like this to authenticate: andreareginato.github.io/oauth-ng

Never mind, this is a better option (lol): api.stackexchange.com/docs/js-lib

TopinFrassi

00:21

@Quill It's the same that will be used to draw names. It's in the meta post!

@Mat'sMug Or, we can ask in chat if X user has registered for the challenge. If not, it's a spoofed entry?

But the web app sounds fun too. :p

Quill

@TopinFrassi What if a false and the real apply

how can you tell the difference

I'd be fine to help write the web app, which seems like a more viable option, additionally it could have some more work put into it and become a stack app for other sites too

TopinFrassi

@Quill We could ask in chat for this person to send another email. And say at what time they sent it? But yeah, the web app is clearly more secure

I'll be back tomorrow!

Mat's Mug

02:31

if it's a concern, we could ask people to use the email they've registered their SE account with - it's a CR community thing after all

that way moderators could review the list of participants, and validate that the alleged account matches the email address it came from

not sure how much of a stretch of the moderators' agreement it might be though

rolfl

What sort of numbers are we looking at right now?

Mat's Mug

no idea

rolfl

If it's a relatively small number, I imaging a CM could be asked to do it for you. .... they would likely oblige....

Mat's Mug

I used another email haha

Quill

05:47

lol

Or Topin / Dan could send a code back to the email and we could put it in our CR profiles

Mat's Mug

not crazy at all. #SOreadytohelp-style

Quill

exactly

Mat's Mug

#SeekritSanta

Dan Pantry

08:49

@Quill I can look at creating a web interface if you would like (and do away with the other secret santa site), but are we sure we want to tell people to email @TopinFrassi & then sign up on the web app?

Seems like bad UX to me

I could probably throw something together this weekend, tbh, I have a 3-day weekend. and it would be a nice way to learn React properly!

If we do that, I'll make a github project + org, invite @Quill (and anyone else that wants to contribute) and we'll get @Duga in here

I can also host the production app too on a digitalocean droplet, they're pretty cheap and frankly the cheapest one should be more than enough for our means at $5 a month (which I do not mind paying for)

Mast

09:23

@Quill Send them e-mails. We know the regulars, so the fakes won't be that hard to spot I hope.

The whole reason nobody has done this before it's because it's a PITA to manage. Being CR users, we do it anyway and try to find the best method along the road.

2

Quill

09:43

What about heroku isn't that free

I didn't really have issues with security, I mean really

4 hours ago, by Quill

Or Topin / Dan could send a code back to the email and we could put it in our CR profiles

Some of the others might, I guess it's up to you, I can help either way if you need it

Dan Pantry

@Quill Heroku is free but doesn't scale very well at all (in terms of price)

I'm creating the node project now

I'll push it to github later today around midday my time

Quill

Alright, I'll be kicking around here at that time

Dan Pantry

also, DO gives you much more control over your environment than Heroku does

ie you can ssh onto DO, I don't believe you can do that with Heroku

Quill

ah, okay

Dan Pantry

@Quill github.com/danpantry/secret-santa

Mast

10:28

@DanPantry If all you need is a webserver, I'm already running one. It isn't using it's resources much so I can probably host another on it.

Dan Pantry

10:46

@Mast It'll need to be able to serve static assets but we will also need something that can run a small node app

And can store data using mongodb or a flat file DB

so I think DO is a better idea

Mast

Yea, I can't guarantee you anything databasey

Dan Pantry

It's alright, we'll just use DO

It'sp retty cheap and we can likely host it all on one box

Quill

is everyone gonna know who had who after the event?

Dan Pantry

I don't expect many concurrent users

Dunno, I'm not running this thing. I just suggseted the idea and will make an app that isn't crap ^^"

Ask @Mast or @TopinFrassi

Mast

@Quill Only if they tell.

Quill

10:49

outlook asks me to verify every time I try to send an email, and I verify and try to resend and the same thing occurs, so I haven't sent an email yet

@Mast, okay, cool

Mat's Mug

14:46

@DanPantry eh, just put it up for review, we'll help you make sure it's not crap ;-)

should I feature the meta post?

Mast

15:01

@Mat'sMug Wouldn't that imply any official-ness?

Mat's Mug

that's why I'm asking ;-)

Mast

As long as the ROs of The 2nd can bear a link to the meta and chat every once in a while, I don't think it's necessary to feature the meta.

Mat's Mug

ok

TopinFrassi

I think it would be cool to feature it. It'd shout "Look how great Code Review is, we even do Secret Santa 'cause we rock". But, I'm afraid it might drag too many not honest persons

Mat's Mug

eh, people that pay meta a visit will see it

TopinFrassi

15:10

That's fine by me!

Mast

15:34

@TopinFrassi That last part is another thing I'm hesitant about. @DanPantry, opinion?

Technically it's not CR doing Secret Santa. It's a bunch of regulars who got the idea to have a Secret Santa. We so happen to be regular on CR, but it has nothing to do with CR.

Dan Pantry

I don't think it should be endorsed

At least not this time. Maybe next year, after a trial run

Mast

That ^^

Well, perhaps not endorsed at all, it would bring a lot of paperwork to SE I think.

TopinFrassi

Yeah that sounds legit. Maybe if it grows big it could be endorsed, but right now it's no use.

Dan Pantry

4

coming along nicely :-)

Mat's Mug

nice!

Dan Pantry

15:41

github.com/danpantry/secret-santa/commit/…

Using TDD, which is why it's a bit slow at the moment

The project generator doesn't give you the nicest structure either, but oh well

(PRs/CSS/etc welcome)

Mast

It doesn't have to look good, it just has to do it's job.

Dan Pantry

Yeah, I'm probably just gonna shove some bootstrap in it

or something simple like that

TopinFrassi

CSS **vomits**

Dan Pantry

@TopinFrassi well, it is actually SASS, not raw CSS.

TopinFrassi

is SASS like LESS?

Dan Pantry

15:43

Yes

Syntactically Awesome Style Sheets. :-)

TopinFrassi

I should check it out. I got a little experience with LESS. Though it didn't make my designs any better. ahah

Dan Pantry

It doesn't really make your designs better, it just helps with organising CSS through modules/mixins

TopinFrassi

I wish there was something that made my design better. ahah

Dan Pantry

20:07

Hello~

Dan Pantry

20:34

@TopinFrassi thoughts? gist.github.com/danpantry/5c352b95cb58af85bba3

Also @Mast and @Mat'sMug. What do you think about a rep requirement to be able to participate?

Would prevent people from creating burner accounts. I wouldn't suggest any more than the rep required to talk in chat, though.

Mast

@DanPantry It isn't something official anyway, so we can manually check the accounts before entering them and remove them when we see abuse.

It isn't rocket science.

Dan Pantry

given that we are already using the OAuth API, it wouldn't be hard to extend it I don't think. Just wanted to have a second opinion.

api.stackexchange.com/docs/…

Mat's Mug

@DanPantry 20 seems fair enough

Mast

20:50

@DanPantry If we do turn this into a trial run thing, it would turn into 20 eventually. So it won't hurt implementing it now.

Dan Pantry

Okay. I'm going to see if I can get a quick demo up and online tonight.. no point using react for something this simple, so I'm just going to use pagejs and fetch

TopinFrassi

21:11

Excellent! Good job Dan! :)

And yeah, 20 is perfect

Dan Pantry

21:23

Okay, so far I've made a super simple set up with zurb foundation

It uses pagejs for routing, and all pages can be written in markdown

Mast

@DanPantry At least you know what to use when.

Dan Pantry

no sass support - only css - but shouldn't be necessary with zurb

Mast

I'm amazed.

Dan Pantry

@Mast actually, I picked zurb foundation because buck footstrap.

Mast

^^

Transcript for

CR Secret Santa 2015