« first day (2309 days earlier)      last day (2636 days later) » 

idk how I feel about this song
 
6:19 PM
@Abhishrek I have the flu. I hope you didn't get it
 
did you get my pic?
 
Yes.
About the pass.out agaim
 
feel better
 
hi everyone!! I've just found out StackOverflow had a chat room
 
6:28 PM
@nicozica Welcome to the JavaScript chat! Please review the room rules. Please don't ask if you can ask or if anyone's around; just ask your question, and if anyone's free and interested they'll help.
 
welcome
 
ohhi
 
ohh hey its dat boi
 
6:44 PM
github.com/RobinBressan/json-git I'm having a hard time seeing why this would be useful?
 
well, it's just git bindings for JS, right?
 
looks like git in js
 
we have gtk bindings in JS, it's not very useful, but we're all glad it's there
 
it isn't binding to other things tho. it is "A pure JS local Git to versionize any JSON"
 
6:46 PM
either that or I have no idea what binding means
oh, so the whole structure/storage is in JSON as well? It's not git then...
 
why not?
git doesn't care what files it tracks
 
I guess it can kinda help demistifying git backends for people who don't know much about it (like me)
well, is any snapshot/pointer/hash based version control system called git?
 
but when would I ever need git on the client?
@towc I assume if he's calling it git he's following some sort of structure/rules that make it so
albeit I know very little about git
 
@rlemon team projects that are built online with tools like codemirror?
@rlemon I think he also knows very little about git
 
@towc and why would a local version of git in the client help that?
@towc I wouldn't count that out.
 
6:50 PM
@rlemon keep in client, send to server when necessary
 
grr
i set the new nav to not be sticky
 
but yeah, it does seem fairly pointless
 
it's sticky again
 
@towc git can already be local without js
again, I don't see the purpose of this. other than just to make it
 
@KevinB start again, this time with "MOOOOOM"
@rlemon which would be purpose enough in the end
 
6:51 PM
sure, but with that said I'm asking the room in case someone can think of a practical use
 
having something on git could be the sole purpose
 
fair enough
 
I bet you want to be like him when you grow up
 
"when I grow up"
dude, I'm 30
 
6:55 PM
when you retire
or something
that was the joke
oh wait, he's not even that old
 
nahh, big swords are interesting, but I don't wanna make them
I'm happy with making knives, woodworking, and gardening / farming
 
well, but casually making loads more stuff in your garage and having a mighty beard
 
@rlemon he was probably having a hard time using the JS git clients. I don't see the big selling point either.
 
@BenjaminGruenbaum like, it's for sure an interesting project. I'm just struggling to think of a real-world use for it
 
Maybe it was just built because someone was curious.
 
6:58 PM
not that it needs one, but I'm curious
 
@rlemon I agree.
github.com/RobinBressan/json-git#create-your-first-branch I really dislike true/false flags in APIs
 
oh that's interesting -- is that a programmatic approach to git?
 
You know I'm not gonna lie, I had no idea Kazakstan was such a large (space) country
Same with Mongolia
 
not to mention your mom
 
7:12 PM
space per person, or just space in general
 
@SterlingArcher The only larger country is your mom's stomach
 
where have you been. You're late
 
Your mom's late
 
she is
I'm getting a bro/sis soon
 
7:17 PM
Congrats?
i hope?
 
omg you might be my father in law :D
 
what do you mean might
 
(she's not pregnant, I'm not getting a sibling)
 
Dumb question; how do you load a png in a stylesheet in react?
 
what do you mean in law
 
7:17 PM
@KendallFrey better than random bloke who impregnated my mother
 
I don't even know what the relation would be
biological father of a sibling?
can you adopt me kendall?
 
you clearly didn't get the message
towc, I am your father
 
oh right, you're already him
 
im not your father, guy
lol
> luke, i'm your budday
> NEHHHHHHHHHHHHHH
 
7:20 PM
no but like, what are the pros and cons of having an already mostly independent adoptive kid like me?
> Matei Frey
that doesn't sound too good
> Matei Lemon
now that's the jam maple syrup
brb dinner
I can be the adoptive child of the room
> Matei 17
 
depends on how you feel about this song
 
ugh. home office chair is fucked. doesn't recline anymore. lowers on its own.
honestly.. if I didn't have to go looking for a new one, and put it together..
 
Just pay for shipping and building
be lazy
FRIDAY RAGE TIME
 
7:44 PM
i sat on my headset.
time to get a new headset
 
fatty
 
the whole chat feels bad now @KendallFrey nice job
 
it's friday
!!kendall
 
😢 🍟 🍔
 
7:58 PM
Did GitHub just get a dark navbar?
 
ofc
 
yes the did
 
funny, it looks so jarring
 
8:37 PM
hello
 
hello
 
I need to find collaborators on a small project
 
ohhi
 
is someone interested?
 
nope
 
8:38 PM
:D
python chat is boring
 
oh, i mean,
someone might be
but not i
 
@KevinB do you save passwords in the database sometimes?
 
hmm
where else would you save them?
 
how do you do?
 
I still have to help Astro-Shamanaut Ron rebuild his sites
Looking forward to that whenever I can find time.
 
8:40 PM
@KevinB you use something to encrypt them?
 
depends on the system, but it usually involves hashing and a salt
 
I am saving them normally atm
 
plain text? that's terrible
 
using node.js (server) and postgres 9.6 (db)
I started yesterday
today I want to improve somthing
like passwords
but I wonder if it is needed
why I cannot just save them like this?
I mean plain text
 
because doing so means you the developer (or anyone else who gets their hands on the database output) can easily look at everyone's passwords
 
8:44 PM
are there any good youtube video about routing in AngularJS?
 
ow that is the problem?
 
or shouldn't I even bother searching
 
admin is a loyal person
no need to worry about him
 
doesn't matter
loyal people don't always use good passwords or rotate their passwords
 
@neoDev people who hack your site will not be loyal
 
@tereško yesterday guys here in chat said that the website is secure
they tested it
 
@jake I specifically mentioned youtube
 
@neoDev if all you need to login to the site is an admin username/password, it's only as secure as said username/password.
 
@KevinB admin uses a giant password
 
RTFM is an initialism for the expression "read the fucking manual" or, in the context of the Unix computer operating system, "read the fucking man page". The RTFM comment is usually expressed when the speaker is irritated by another person's question or lack of knowledge. It refers to either that person's inability to read a technical manual, or to their perceived laziness in not doing so first, before asking the question. In expurgated texts, substitutions such as "read the frickin' manual", "read the flaming manual", "read the fine manual", "read the friendly manual", or similar variants are...
 
8:48 PM
@neoDev why are you trying to justify your lack of security?
 
@tereško what I should do?
 
securely store passwords.
 
okok
 
or don't store them at all
 
how?
 
8:48 PM
hire someone else and blame it on that guy
@neoDev ever heard of hashes?
 
yes one time I was reading that the algorythms were all hacked
 
bcrypt is a password hashing function designed by Niels Provos and David Mazières, based on the Blowfish cipher, and presented at USENIX in 1999. Besides incorporating a salt to protect against rainbow table attacks, bcrypt is an adaptive function: over time, the iteration count can be increased to make it slower, so it remains resistant to brute-force search attacks even with increasing computation power. The bcrypt function is the default password hash algorithm for OpenBSD and other systems including some Linux distributions such as SUSE Linux. The prefix "$2a$" or "$2b$" (or "$2y$") in a hash...
 
and they were talking a new one called argos2 or something like that
 
you don't know what you're talking about
do you know what a hash is?
if not, I strongly suggest you get to understand that first
and what was meant by "hacked"
 
an hash is one or more secret keys from a secret value such as a master key, a password, or a passphrase using a pseudo-random function
right?
 
8:50 PM
that means nothing
 
what is a hash?
 
did you google it?
 
@neoDev have you been banned from google?
 
yes xD
@tereško nope
 
well, google harder
 
8:51 PM
for node.js
 
A cryptographic hash function is a special class of hash function that has certain properties which make it suitable for use in cryptography. It is a mathematical algorithm that maps data of arbitrary size to a bit string of a fixed size (a hash function) which is designed to also be a one-way function, that is, a function which is infeasible to invert. The only way to recreate the input data from an ideal cryptographic hash function's output is to attempt a brute-force search of possible inputs to see if they produce a match. Bruce Schneier has called one-way hash functions "the workhorses of...
 
now I'll google something, but
can you tell me what you would use in this case (node.js)?
 
you can make your own implementations to help you understand how they work
 
bcrypt?
 
@neoDev A hash is a one way mapping function from string to number
Such as that you can't get from the number back to a string
Here's a really crappy hashing function
function crappyHashingFunction(str: string): number {
  return str.length;
}
 
8:55 PM
@MadaraUchiha do you use something good for this?
 
beer
 
@neoDev Depends on the purpose vOv
 
@neoDev, I honestly find this lack of research disrespectful
it's ok if you googled something and don't understand it
 
Remember how, to check if a file transferred successfully in Windows 15 years ago, you'd open the file's properties and compare the "Actual size" number?
 
but you clearly haven't tried to
 
8:56 PM
That's essentially using str.length as the hash function.
You compare lengths, because you can't compare the very large file byte to byte.
 
@MadaraUchiha 15 years ago he was a sparkle in his father's eyes
2
 
@tereško I like that one.
 
:)
 
@MadaraUchiha I am trying to expand my options for insulting people
 
@neoDev In any case, the original idea of a hash function is that it's expensive to compare extremely long strings, but comparing a 20 digit number is easy.
In the case of password, the "expensiveness" comes from the secrecy involved when using them
You can't store a password in plain text, because an attacker can steal it.
 
8:59 PM
he can
 
However, you can store a hash, from which the original password can't be recovered, and when the user types their password into the field, you compute the hash from their input, and compare against the database.
 
Hi all, I need a JS regex which matches any character in a set being repeated more than once... For example "yess", "yeeesss", "yyeess" should all be caught, but not "yes".
I have this... (yy+e+s+)|(y+ee+s+)|(y+e+ss+), but surely this can be improved.
 
do I have to compare only the lengths?
 
*sigh*
 
no.. it makes no much sense
I have to compare if both hashes are identical
length is a choice if I undertood properly
 
9:03 PM
@EchoLogic You want backreferences. For example, (.)\1 will match aa or bb but not ab
 
length isn't a good choice
 
const repeat = {
  [Symbol.match](str) {
    let lastChar = '';
    for (const char of str) {
      if (lastChar === char) { return true; }
      lastChar = char;
    }
    return false;
  }
};

"yessss".match(repeat);
@EchoLogic ^
 
if you use length, foobar and orange would be treated as the same password.
 
!!magic2
 
9:04 PM
@MadaraUchiha Can't actually use JS.
Has to be just a regex.
 
@EchoLogic Says who?
 
Technically this is YAML...
@MadaraUchiha says Reddit's automod configuration (which is what this is for) :P
 
@KevinB yes, of course... xD sorry
 
!!magic3
 
9:05 PM
I guess I understood. compare hashes 'values'
not lengths
 
@neoDev Length is a crappy hashing function because it has a lot of collisions
Like Kevin said, foobar and orange both compute to 6
A hash function with lots of collisions isn't a very useful hash function
 
The hash of "foobar" should always be the same, but you can't get "foobar" back from the hash, thus making it... far more secure than plain text.
not bullet proof, but far better than plain text.
 
@KendallFrey @rlemon Im not sure who does work on Capera, but that link leads to malware chat.stackoverflow.com/transcript/message/35605787#35605787
 
@KevinB what you mean not bullet proof??
 
!!forget magic3
 
9:07 PM
@KendallFrey Command magic3 forgotten.
 
if you're still just using username/pass alone, it's bruteforceable.
:p
or liftable, such as using phishing sites or keyloggers.
 
@KevinB so what can I do?
 
but at least it would be safer than plain text.
depends on the needs of your app
 
if I want to do it, it has to be good. no bruteforce, liftable, phishable etc
so
 
At the end of the day, find a library that takes care of it for you. History shows how easy it is to mess up
 
9:09 PM
that will likely cost more than your app is worth
:p
 
do not worry, tell me what is needed
 
I dont know what all would be needed
I haven't owned an app that needed that kind of security
 
so if a day I will need that kind of security I'll spend some extra money
fair enough
now relax
:D
plain text are good for now
 
@neoDev No.
 
my pass daves playlists...
 
9:13 PM
plain text is never good, unless you'll never let anyone but yourself create an account on it
 
Plain text is never good for passwords.
 
otherwise... your app is essentially malicious.
 
but if an hacker wants to hack you said that only money will solve the risk
so even if I "hash", hacker can still do it
 
a simple hashing solution could be implemented with just a few lines of code
 
9:15 PM
@neoDev Eh?
 
but you said that is not bulletproof
 
right
 
You can do a proper hashing solution in like 4 lines
Nothing is bulletproof
 
no system that relies on only username/password is bulletproof
 
Doesn't mean you don't wear a bulletproof vest when going in the field
 
9:16 PM
ok, well so now I do a try
it is intersting anyway
 
@KevinB no system is bulletproof
 
I'm going to use this npmjs.com/package/password-hash
 
> Deprecated: Use bcrypt or scrypt
 
mmm I already added in package json.... ok removing it
@KevinB can you post the link please?
 
TIL mongo 3.2 has issues with OSX sierra. Upgrade to 3.4 asap if you have a mac with mongo on it
 
@MadaraUchiha so I include it like this in package.json: "bcrypt": "*"
ok?
 
@neoDev There are very few legitimate reasons to use *
If you value your sanity, that is.
 
there's an npm install command in the readme
said command updates your package.json for you
 
well,
if you use save anyway
 
9:23 PM
is there ever a good reason to not have a webgl viewport be the same as the size of the canvas and starting at 0,0?
 
so:
npm install bcrypt --save
 
yup
 
ok
 
iirc
i've been using yarn
 
got
"bcrypt": "^1.0.2",
Github bar is now black ?
cool
 
9:29 PM
it's too dark
how did too become doo
 
I tried to install node-gyp before
but still getting these errors trying to install bcrypt:
node-pre-gyp ERR! Tried to download(404): github.com/kelektiv/node.bcrypt.js/releases/download/v1.0.2/…
node-pre-gyp ERR! Pre-built binaries not found for bcrypt@1.0.2 and node@6.7.0 (node-v48 ABI) (falling back to source compile with node-gyp)
 
yes I run:
 
node-gyp has it's own dependencies
 
sudo npm install -g node-gyp
 
9:31 PM
yeah, you're not reading the dependencies
 
supshto. is there a way to log the data of an ag-grid table from the inspector? it seems it is obfuscated in some way by ag-grid
 
Python 2.7.10
Xcode 8.1
 
hmm the error you got isn't necessarily a problem.
"node-pre-gyp ERR! Pre-built binaries not found for bcrypt@1.0.2 and node@6.7.0 (node-v48 ABI) (falling back to source compile with node-gyp)"
 
so how can I undo the command:
sudo npm install -g node-gyp
?
 
9:33 PM
remove
 
..
 
it's too late you have to recompile your kernel now
 
:D
 
sudo npm remove -g node-gyp
?
is it the same if I delete the app node_modules folder?
 
Are you even googling?
 
9:35 PM
no of course not
 
I'm not sure as I run it with sudo
 
affected folder were also:
/usr/local/bin/node-gyp -> /usr/local/lib/node_modules/node-gyp/bin/node-gyp.js
/usr/local/lib
 
@neoDev You should never run a command as sudo unless you know exactly what it's going to do.
 
lul
 
9:37 PM
Yup. That's a rule we all follow here.
For sure.
 
@neoDev don't listen to @MadaraUchiha, he's trying to get you to run malicious code
:trollface:
 
@MadaraUchiha to undo what can I run?
 
@SterlingArcher oh god...
 
I want to undo this command:
 
9:38 PM
yes indeed^^
 
Why do you want to undo? you need gyp
 
sudo npm install -g node-gyp
 
@SterlingArcher ikr? Wouldn't want to mess with that guy
 
@SterlingArcher fucking lol
 
9:44 PM
^ @KevinB has the patience of a monk
 
ok, I removed globally node-gyp, then reinstalled all app node_modules (without node-gyp)
now I can use bcrypt, it returns hashes without problems
 
See, you can do lots of things just with some research :)
 
I asked a question on /r/science, and got a /r/shittyaskscience answer :(
 
10:02 PM
@KendallFrey what do you asked?
 
is the earth flat?
 
10:24 PM
obviously not, there's hills and mountains
 
10:38 PM
@KevinB mic drop
 
11:28 PM
you shouldn't be able to take over an open source product like phonegap I liked the docs and site before adobe took over
 

« first day (2309 days earlier)      last day (2636 days later) »