« first day (2350 days earlier)      last day (2613 days later) » 

4:00 PM
depends on what side you're currently on
both sides have shit goin on today
 
do some of you people here have 2nd first name ?
 
what's going on on the US side of said pond?
 
healthcare vote
 
ohh, right
 
are they really voting on this?
isn't it unfinished still?
 
4:01 PM
yup
and yup
 
wtf?
 
they claim there are more phases, but yes, they are voting on phase 1: burn everything to the ground
 
@KarelG all 3 of my names are classed as "first" name worthy
 
once it's unoperatble they think they'll be able to get the other side on board to help fix what they broke i guess
 
you really think they would?
 
4:03 PM
so some degree, but no. not really
 
I don't have another firstname than "karel". Only followed by a family name. But lots of people has 2nd name.
 
Man, that was really really weird
A 50+ year old man just called me to ask me if he could work from home the rest of the day
 
@ssube If I think GitLab should be creating a build job for a merge request, but it doesn't, where can I look for information? From what I can tell, the logs read as if everything is going as it should
 
I'm not his boss, but I'm so high ranking on this project he asked me before he asked his boss
 
did you decline?
 
4:05 PM
That's a weird fucking feeling and I don't like it
 
@OliverSalzburg the request should have a pipeline tab
 
Hell no the dude is weird af better him work from home than going postal in the office
 
I think those show up under the project pipelines as well
 
@ssube It doesn't
 
@OliverSalzburg what makes you think it built?
 
4:06 PM
@ssube Well, it didn't. I just think it should create a job, like it previously did
 
@SterlingArcher Any name is a first name if you want it to be. I'd have no problem with a kid named Goldfish Scrummaster Alexander.
 
gtfo
that's a paddlin
 
you're a paladin
 
@ssube When I just create a new branch on the repo, push it and open an MR, it will get build right away, pipeline tab and everything. When someone opens an MR due to a change in a branch in their fork, I get nothing
 
no this is patrick
 
4:07 PM
lol
 
@OliverSalzburg yeah, that sounds right. It can't build their changes against your repo, that would be a privilege escalation, so it would have to pick up any existing builds from their repo. Those might not be a good record, though. I dunno, it seems it make sense.
 
@ssube Yeah, I was reading something along those lines regarding the new CI permission model. But both the merge requester as well as the repo owner (me) have read-write access to either repo. So I don't see the problem
In fact, I don't even think I'm the owner. The owner is the group we are both a member of
 
I think your best bet would be to merge from fork/topic to base/topic then to base/master
 
Weird. I kinda thought this would be a super common use case
 
it is, just without builds
 
4:12 PM
Ah :D
 
merging across repos is well supported, but that usually means third-party contributions, which you typically don't want to build on your infrastructure
if it's all internal, you can probably grant access to a topic branch, and if you can't, clearly you don't trust them anyway and they may as well be a third party
 
user2620028
@SterlingArcher weren't you the newbie pushing carts around a couple months ago?
 
Cold toilet seats are worse than death
 
I mean, that was 1/4 of the projects I was on
 
@rlemon Are heated toilet seats not a thing in Canada?
 
4:14 PM
@ssube I wanted to use internal, but, to my understanding, that pretty much puts all logged in users into the same basket and that is a bit too global for my taste
 
@MadaraUchiha where is it a thing?
I want that at my home
 
@MadaraUchiha Melts the ice
 
@FlorianMargaine Japan
 
they heat everything but the toilet seats and the poutine gravy
 
I'll give you monopoly money for it
 
user2620028
4:14 PM
lol i was gonna say, i haven't ever heard of heated toilet seats
 
@FlorianMargaine I've seen (felt) it in Japan
 
Then I was moved to this project starting out as a consultant, then once my consulting reports yielded "the people on this project are incompetant af" I was placed into the lead dev position
 
@OliverSalzburg I don't mean internal access, you can use private and grant partial (push to unprotected).
 
It's a wonderful experience.
 
I've heard of them.
Like on late night infomercial
 
4:15 PM
@rlemon Highly recommended.
 
My PM is remote, and he doesn't do shit, so the team sort of naturally flocks to me since I'm in the office and helpful
 
Never seen one in stores
 
user2620028
@SterlingArcher so you went from contractual to their boss?
 
No, I have no actual power
 
It takes like 2 days to get over the "ewww someone just sat on this" feeling
 
4:15 PM
My power is driven from results
 
@ssube Alright. I'll investigate. Thanks so far
 
Then you're in total bliss as you sit down.
 
Man I love being second to the washroom after the missus has #1d. Warm seat
 
I took initiative, made changes, turned the project around, and restored relations with the customer. So my team (i love my team now) works very well with me, and I think they respect all the hard work I've done
I'll take the respect over being a "boss" any day
 
Amazon never fails 😀
 
4:17 PM
@SterlingArcher does respect come with the same compensation
 
@rlemon Why is it that :D yields 😃 and :) yields 😀?
 
Unfortunately yes, and 10-12 hour days every day
 
@MadaraUchiha I stole the translation map
 
I see
 
@ssube Regarding the "you typically don't want to build on your infrastructure" btw. It seems that, if the user sets up CI on their fork, I will get a pipeline/build/job in the MR. Which I found surprising
 
4:18 PM
I'm still a lowly SE2, many years from principal in SNC's eyes. But on the project, I'm the authoritah
 
Like 10% of it is wrong imo
 
@SterlingArcher My power is mass times distance squared divided by time cubed
 
@OliverSalzburg yeah, if it runs in their project (therefore using their project's permissions), that is still useful data (for the most part).
 
Your mom must have a lot of power @KendallFrey
Get it? Cause her mass is huge
I called your mom fat
Fight me nerd
ily
 
you missed the divided by time cubed
 
4:18 PM
And she walks the streets
 
that won't let them use a protected runner, though, so the risk is mitigated
 
it takes her years to get anywhere
 
Time of what? Eating poutine without a fork?
LOL
 
@KendallFrey funny. Only takes me 2 minutes to get where I'm going with her
 
@rlemon relatively speaking, that's years for you
 
4:20 PM
oh boy
einstein strikes again
 
@rlemon that's the only downside. If I had to guess, my PM makes $200k a year because he is a doctor. We don't see him, he's not my boss, and everybody I've talked to says he's slower than old people fucking. So here comes me, making less than half his salary, doing all the project management work. I'm a corporate dream right now
Because my experience says "we pay him well" but my output says "i'm underpaid af"
 
!!giphy demand compensation
 
user7480455
Hi All, I would like to know if anyone can answer an question related to mvc and javascript
 
Salary is tied to title, and I just got a promotion
 
4:22 PM
@007 yes, we talk about that all day
 
Oh fun fact, I set a record last year for most awards and nominations in a fiscal year
That's pretty cool isn't it?
 
@SterlingArcher I set a record for most times taking off my skate and trying to stab someone
 
Calm down Happy
 
It's all in the wrists
 
!!afk foodz
 
4:24 PM
@SterlingArcher I set a record for most fucks of your mom last year
 
4:41 PM
@SterlingArcher grats man!
 
@Loktar SterlingArcher is afk: foodz
 
user7480455
Hi all
 
user7480455
I was just checking in with the c# forum as I was not sure u guys did mvs stuffs over here
 
user7480455
So what I would like to know is how do you call a controller action result passing params to the action result function and getting data back to the mvc view
 
user7480455
currently the application can find the action result function via the javascript call
 
user7480455
4:46 PM
so Iam kinda stumped
 
user7480455
the guys on the csharp side were stumped too
 
user7480455
a link to an example would be great... the links I found only sent one param as I have more than one
 
user7480455
Thanks
 
https://auth0.com/blog/jwt-brute-forcing-hs256-is-possible

"JWT: Brute forcing HS256 is possible" **If I use a 4 char key....what clickbait!
 
@jake JWTs have a lot of problems
 
4:50 PM
@ssube No, JWTs are fine, nobody is going to have a 4 letter secret key!
 
JWTs have a bunch of problems and attacks, all related to the metadata
it's like they didn't pay attention to SSL at all
RSA for the payload is good, but RSA for the entire token is usually better
 
What do you mean by that
I don't know why anyone would use jwt without ssl
 
@Meredith at least one library had a downgrade attack that would let you force unencrypted JWTs
 
Seriously, still have no idea what problem they actually solve.
 
4:52 PM
JWT exists to replay a bunch of problems we've already solved
 
Stateless sessions I think
I don't use them
 
I'm serious, I have no idea in what scenario I'd use JWTs.
 
@Meredith but they're not even the best way to do that
take your session, encrypt it, and use that as a traditional auth token
 
What are the other ways?
Oh
 
@Meredith what's stateless about a session if you share a state variable between client and server?
 
4:53 PM
I think with a long enough key HS256 (symmetric) is fine
 
it's like JWT without all the nonsense
 
Isn't that just a regulra session?
 
Yeah it seems like you basically described JWT
 
@ssube why would you need to encrypt your session? Your browser does HTTPS right?
 
!!afk meeting
 
4:53 PM
@BenjaminGruenbaum "regular session" implies in-memory
@BenjaminGruenbaum it becomes portable and can be safely used as a token
 
@ssube in memory session has no persistence, your sessions have to live in a database.
 
if you don't need long-lived API tokens, then it's unnecessary
 
Oh, we actually do that at TipRanks.com, just not JSON and we don't call it JWT :D
It's just a session for long time login that can be carried around by the user, it can be invalidated at the server if needed.
 
JWT is just the lack of security and the header that helps other servers figure out what you encrypted
there is absolutely no value to it, it's an encrypted token with built in weakness
 
@BenjaminGruenbaum is localStorage classed as in memory?
 
4:55 PM
I'm not sure how encrypting a session is more or less secure than an encrypted session
Cuz that's what you're saying
 
We use localStorage with reactiveVars to create session persistence in Meteor. It seems.. wrong ish.. like it's almost there but something is missing
 
@Meredith JWT with the HS* stuff isn't encrypted in any meaningful way
JWT with the RS stuff only encrypts part of the token and still advertises metadata for no reason
 
I'm pretty sure it is
 
that's a vuln in and of itself
 
I mean I'm not an expert on jwt
 
4:56 PM
you can just RSA the entire token and solve that problem, plus then it plays nice with everything else
 
That's kinda the point of ssl though
Or are you worried about the user storing unencrypted metadata?
 
right, you only need to do that if your session token is portable outside of SSL
if it's a secure http-only cookie, then you don't even need to encrypt it
although by encrypting, you can prove the token came from your server
 
Do you do networking stuff without ssl?
 
@ssube do you remember that device I was working on?
 
think about an API token you copy from the UI and paste into a CLI tool
 
4:58 PM
@SterlingArcher I think he meant server memory.
 
Oh I got you
Yeah then you'd encrypt it
 
@ssube why would you encrypt anything?
 
It does that, but more secure. We create a chaotic, unspoofable token based on signal location to send across SSL. So with the token, it assures you that the server is in the right place
 
@BenjaminGruenbaum because then your API token is your session
 
We just use magnets
 
4:59 PM
@SterlingArcher you have SSL, why would you need to worry about spoofing anything?
 
The guy who patented the algorithm basically created a very secure way to trust a server
 

« first day (2350 days earlier)      last day (2613 days later) »