« first day (1313 days earlier)      last day (3643 days later) » 

9:00 PM
@Burkit how difficult is it to get across Poland for a non-polish speaker? (for tourism purposes) /cc @Bartek
 
@WilliamAndrewMontgomery not terribly hard
typically at least a handful of Poles around is capable of communicating
 
@Rapptz Hmm, turns out that was the night mode. Day mode has a palette similar to Google Maps.
 
@Burkit Alright, if finding places to sleep at is easy then that's enough for me! /cc @Bartek
 
@WilliamAndrewMontgomery cool!
 
you have AirB&B right?
 
can't wait to sing sexualna in public places
 
Why is forcing password reset to all users a bad idea in this case?
 
Firefox UI died again
 
Who says it's bad?
 
@Avery Why wouldn't they do it if it was a good idea?
 
9:09 PM
@Jefffrey I see no reason why they shouldn't force it. I thought you were questioning that decision.
 
> Beginning later today, eBay users will be notified via email, site communications and other marketing channels to change their password.
Doesn't seem like they are forcing it.
 
I thought I had read elsewhere that they were enforcing it. I may be wrong though
Last paragraph
 
> However, users will eventually be forced to change their passwords on eBay and encouraged to change passwords for other accounts if they happened to be using the same passwords there.
(emphasis mine)
Also the paragraph before that one says:
> eBay account holders should receive an email notification from the company sometime later in the day. eBay will also post notifications on its website at that time. It’s not clear why the company is waiting until later in the day to notify its customers.
which kinda confirms what I've previously quoted.
 
"encouraged to change passwords for other accounts if they happened to be using the same passwords there."
 
@CatPlusPlus What?
 
9:15 PM
I'm really curious how the attackers even got the credentials though
 
You're bad at emphasising relevant things
 
Targeted phishing? Random malware? Random password dumps and bad practices?
Also, since it seems that credentials were compromised for over a month, I have no idea no they think anything on their systems is safe
You'd think a month was long enough to escalate something
Does that mean that nothing was actually accessed and this is all just a drill then? Not sure
 
Not if the account had access to only one thing
 
user3010322
If it were employee accounts, they'd have access to everything employees have access to.
 
Even if it only had access to passwords, which it seems they did according to the PR, a month is plenty of time to break some other passwords
 
9:19 PM
Not if they know about principle of least privilege
Who knows what the account was and to what
 
True. Which leads back to the idea that the resets are all just a precautionary drill
 
Also password attacks are not done online, because that gets obvious
 
Obviously
 
So month might not really matter that much
 
but db dumps plus hashcat
anyways - I'm out
 
9:21 PM
I should change my PayPal password.
I haven't changed it in 6 months anyway.
 
user3010322
Good thing I don't have any of those things. c:
 
PayPal has shitty password policy
 
I stopped using paypal when they changed their terms of thingy
 
I don't like PayPal either
 
Why?
 
9:22 PM
They're a bunch of dicks.
 
user3010322
I've never had a reason to use PayPal.
 
user3010322
Either get a fresh, rechargeable debit card and manage that shit online or just use a regular bank-provided debit card.
 
user3010322
Never save your banking information anywhere, etc. etc.
 
That only works if you want to buy.
 
user3010322
? What else would you use Paypal for except... buying things?
 
user3010322
9:24 PM
Do people require paypal for certain services?
 
Maybe selling things? DUnNO
 
+1 looks good to me. You might want to add srand(0) or some constant so others get the same output each time. — pbible 4 mins ago
What. I write a sample that generates /random/ graphs
 
user3010322
Oh. Well, I don't have anything worth selling, so no my problem. :D
 
lol
@CatPlusPlus I forgot I have to type it in.
 
Keepass' autotype works, but you have to temporarily change the sequence to just {Password}
Annoying either way
Also stupid max limit
 
9:25 PM
@CatPlusPlus it always just works for me (keepass + paypal)
 
user3010322
Is there a shortcut that just auto-types the password, not hte username?
 
@sehe I mean the password change form
 
ah
did I miss something important? Why is everybody changing their paypal password?
 
Blocking copy/paste is idiotic and has nothing to do with security
 
9:27 PM
I might work on a browser shim to get rid of that
I'll call it 'unfuck shitty password forms'
 
@CatPlusPlus indeed
 
user3010322
The Shit Shank
 
@Jefffrey oh. ebay
Nothing to do with paypal then
 
@ThePhD Cards are ridiculous.
 
user3010322
They are?
 
9:29 PM
That "security code" bullshit makes no sense at all.
What's the point of having it on the damn card.
 
> After making this post someone immediately pointed out a bug. The original version of int_add_safe had the line const int min = 0x80000000;. That innocuous line is undefined behavior! The goal is to end up with an int with that bit pattern. However that literal is an unsigned int of value 2^31! SOURCE
Isn't conversion from unsigned to signed well-defined in terms of bit patterns?
 
user3010322
I'm not sure.
 
What's funny is that you can get card terminal that doesn't require CVV
Or PIN
 
user3010322
But, all debit/credit cards have a PIN associated with it... though, for some reason, only certain grocery stores ask for it?
 
9:30 PM
Well, theoretically you should have a small subset of your money accessible to the card anyway.
 
Or PIN or anything at all.
1 min ago, by R. Martinho Fernandes
@ThePhD Cards are ridiculous.
 
user3010322
I don't know why all stores don't ask for PIN.
 
And that even works online, e.g. Amazon does that
 
time for drugs yay
 
@ThePhD There's signature verification
 
9:31 PM
"verification"
 
user3010322
@CatPlusPlus ... Which all stores don't ask for either,
 
Which is to say not a verification at all, because written signatures are retardedly unsafe
Even if they cared to carefully compare them
 
user3010322
and more than once, just to see what happens, I've literalyl scribbled garbage onto the pad.
 
user3010322
100% accepted.
 
KeePass is open source right?
 
user3010322
9:32 PM
Yeah.
 
You could totally chargeback that and if they didn't have CCTV they wouldn't be able to prove anything :laffo:
 
The CVV is trivially equivalent to having three extra digits in your card number.
 
@ThePhD "not all stores ask for PIN" FTFY
 
Oh gross. It's on SourceForge.
 
It doesn't partake in Sourceforge's recent idiotic ventures
 
user3010322
9:33 PM
@R.MartinhoFernandes Maybe they think if you have a picture of only one side, you're still mildly safe. Or something.
 
But they put it on the back and call it "security code" and that magically makes it secure.
 
@Rapptz it's old enough :_)
 
The only card security is chargeback institution
Everything else might as well be "YES OFFICER I PROMISE THIS IS TRUE"
 
@R.MartinhoFernandes Oh you're talking about those.
 
@CatPlusPlus I wish my bank allowed that
 
9:34 PM
I always thought that was idiot proofing
 
Your bank can't not allow that?
 
Like if you go on twitter or something you'd see a bunch of pictures of debit/credit cards
 
Just complain to the CC company
 
I still think it's dumb though
 
I've asked in the past and they laughed at me "that's not possible sir, where have you heard about such a thing?"
 
9:35 PM
@Rapptz And idiots telling the CVV when asked too.
 
The CC company is VISA.
 
My CVV is actually extra useless
 
But then again my bank is terrible
 
It's the last 3 digits of my card iirc
 
user3010322
@Rapptz Nice. <_>
 
9:36 PM
Er, it's only useless if someone has that information.
 
user1804599
Post it on Twitter.
 
But even then.
 
And now you've joined the rank of idiots who tell their CVV online
Good job
 
lol
 
Some weeks ago I got 0001 as an mTAN
 
user3010322
9:37 PM
mTAN?
 
Did you know that if you type your PayPal password it'll show to us as asterisks??? Like mine is ******************
 
So awesome.
 
(Please don't actually respond to that)
 
@ThePhD A two-phase authentication scheme.
 
(I have no faith in humanity)
 
9:38 PM
My bank sends me a random code by SMS to validate a transaction.
 
In fact I can't find anything in non-canadian french about how to do a chargeback
 
Security tokens are safer than SMS anyway
 
That one was for picking up a package at the Packstation, though.
 
@CatPlusPlus (by explicit request)
 
@CatPlusPlus ●●●●●●●●●●●●●●●●●●●● just for you~
 
9:38 PM
Coincidentally GSM security is a joke, too
 
SMS, mmmm. Voice call: absurd
 
SMS = Safe Message Security, right?
 
Or was it Secure Message Safety?
 
Did you know that there exist phones that don't tell you when you connect to a BTS that enforces no encryption
 
9:40 PM
Simple Message System?
 
user1804599
@FredOverflow Sadomasochism Sadism
 
@DeadMG That doesn't sound very safe or secure.
 
Shitty Message System
 
Woah, 1GB of maps for three states + Denmark.
 
such namespace detail
 
9:41 PM
@R.MartinhoFernandes Excluding satellite pics and 3d models, I imagine.
 
I don't need that shit.
 
You never know.
 
3d models are pretty sexy.
 
> Our new logo reflects our core beliefs.
What does this even mean?
 
most sexy models are pretty 3d, no matter how flat the magazines will try to make them appear (that's all photoshop)
 
9:43 PM
@sehe I was expecting that kind of joke from someone
 
Our core belief is logos
 
@WilliamAndrewMontgomery I know who
 
> We believe in a world that works for people, rather than the other way around.
 
> We believe in a world that works for people
Yeah, right.
 
user3010322
Where are these quotes coming from?
 
That explains why I can't change my account to Germany.
 
PayPal homepage under "Learn about new logo"
 
user3010322
Lol.
 
user3010322
PayPal.
 
9:45 PM
We believe in a world that works for people, but not in password forms that work for people
 
Password forms are otherwordly
 
hmm
LLVM says: make all your allocas for everything totally unconditional.
 
Just look at this shit
Seems like a f videogame.
 
@Jefffrey it's shit indeed
 
Even the cars are 3d.
 
9:47 PM
What am I supposed to see
 
user1804599
@Jefffrey nice
 
Faggot OS X
Google Maps with automatic 3D
(okay yes, it looks nice)
But they only did cities of 200k inhabitants and above
 
I'm so amazed I almost not fell asleep
4
 
cat has a special brand of humor that pleases me at the most unexpected times. Thank you cat
 
@Jefffrey Is that a picture of a city?
 
9:50 PM
Also people at work are getting hyped for VMs and automation and wohohoh fun times ahead
 
Are you using ansible
 
No, Puppet
 
user3010322
God.
 
We haven't invented ansibles yet.
 
user3010322
Just to have an array passed to a universal template argument
 
9:51 PM
That reminds me: Ender's Game was even worse as a movie.
 
user3010322
have to std::initializer_list<int>{ ... } around the shit.
 
user3010322
I refuse to accept this syntax.
 
user3010322
REFUSE.
 
ACCEPT
 
user1804599
9:51 PM
ACK
 
@ThePhD #define a better language
 
NACK
 
okay poeples for the world its time for me to go to bread and bye
 
user3010322
Maybe I should make a constexpr class which implicitly decays to a std::initializer_list ?
 
std::initibetter languagelizer_list<int>{ ... } v0v
 
user3010322
9:52 PM
That sounds like it could be better.
 
@R.MartinhoFernandes doctor told me that if they keep playing up, they might have to be surgically removed. But they don't usually do that before ~age 12 anymore ...
@ThePhD that's not an array
 
@ThePhD That sounds like a terrible idea.
As usual, it won't work.
 
@WilliamAndrewMontgomery sleep well
 
user3010322
template <typename T>
struct init {
     std::initializer_list<T> res;

     operator std::initializer_list<T> () { return res; }
}
 
user3010322
It looks like it might work.
 
9:54 PM
Yep, broken.
 
Puppet modules on the Forge sadly tend to be shit
 
user3010322
@R.MartinhoFernandes :c
 
@ThePhD -1 not enough copies
@R.MartinhoFernandes missing semicolon, obviously
 
user3010322
Oh.
 
user3010322
Coliru is dying again. :c
 
9:55 PM
I told you about how terrible initializer_list is yet you keep wanting to use it in the ways I told you not to. :c
 
user3010322
@Rapptz I'm not given a choice.
 
user3010322
{ 1, 2, 3 } keeps getting interpreted as an initializer_list, and it won't work with universal template arguments.
 
initializer_list is not a choice.
It won't work.
 
@ThePhD Pro Life!
 
@ThePhD So write an overload for it and call it a day.
 
user3010322
9:57 PM
Never!
 
user3010322
I will make it work.
 
user3010322
It will OBEY ME.
 
UBey maybe.
 
user3010322
... As soon as coliru comes up and I can check the syntax.
 
9:57 PM
@R.MartinhoFernandes I suggested that 3 days ago but he refused
 
@ThePhD It's finnicky as girls that age are. Hair color fashion changes every hour and it's important to follow the latest trends
 
Syntax is irrelevant.
 
Just give up.
 
TIL Annie Nightingale is in her 70s. WTF.
 
It has the wrong semantics.
 
user3010322
9:58 PM
:c
 
user3010322
Maybe I could just use my make_array instead...
 
Or, you know, you could try to use c++
 
user3010322
:c
 
you know
 

« first day (1313 days earlier)      last day (3643 days later) »