« first day (2135 days earlier)      last day (2807 days later) » 

11:00 AM
Because php will be decrypting with those passwords and i don't anyone to have access to those unless its my php script
 
mornigns
 
we hash password
morning Sir
 
o/
 
\o
 
I don't want to store them in the pages themselves but in a different file which cant be accesed by users.
I mean keys.
For decryption.
 
11:03 AM
Mornhaa
 
@Fabor I prefer Peeing
 
@CoderDudeTwodee In general you don't whenever possible
 
@bwoebi lol
 
If you are going to do it at the very least encrypt the keys using the users password as key and using key stretching
Although I am kinda worried about random people on the web trying to store encryption keys
Where kinda is an understatement
 
11:07 AM
i didn't understand what he trying to do?
 
Omg, is that you Linus Sebastian?!
 
@PeeHaa how are you not numb to this sorta thing by now?
 
@Linus AFAICT he is trying to encrypt data for users
 
@bwoebi Is there a good reason to use a static here? I'd always avoided them completely previously.
@HassanAlthaf Does it look like him?
 
:P
 
11:09 AM
@Fabor only if the request is stateless.
 
Much the same I am Fabien Potencier
 
use static when there's a point of using static…
 
@Fabor Maybe Linus is trying to hide his identity over the internet so he used a different profile picture. (jk)
 
@PaulCrovella There is always a possibility people will be using it at some point and get bitten
 
@Fabor i.e. when request processing doesn't depend on any internal state.
 
11:10 AM
you can also say Linus Torvalds :P
 
@Fabor fapore potandcider
 
@bwoebi You know the rough project I am undertaking with this?
 
@Fabor no.
 
@Linus Unfortunately, I'd say Linus Sebastian is more popular than Toravalds. But sure, lets call you Linus Torvalds.
 
At its simplest a chat app where the users can create rooms.
 
11:11 AM
Who the fuck is Linus Sebastian anyway?
!!? Linus Sebastian
 
Search for "Linus Sebastian" (https://www.google.com/search?q=Linus+Sebastian&lr=lang_en)
• Linus Sebastian - Wikipedia, the free encyclopedi… - Linus Gabriel Sebastian (born August 20, 1986) is a YouTube personality, presenter, producer, and… (https://en.wikipedia.org/wiki/Linus_Sebastian)
• Linus Sebastian | LinkedIn - View Linus Sebastian's professional profile on LinkedIn. LinkedIn is the world's largest business… (https://nl.linkedin.com/in/linus-sebastian-578a0752)
• LinusTechTips - YouTube - We make entertaining videos about technology, including tech reviews, showcases and other
 
@PeeHaa Seriously? youtube.com/user/LinusTechTips He's our hardware man.
 
@Fabor You should collaborate with @icecub … [who wants to do exactly that, see transcript of this night]
 
@HassanAlthaf yes seriously. I'm not a 14 year old girl who does youtube hardware reviews
As a matter of fact hardware should just die
 
@bwoebi Suppose that kind of depends on ability and goals. I wouldn't want to drag a project down.
 
11:13 AM
@PeeHaa true… you're a boy…
 
@PeeHaa He's a 29 year old man. :P
Man, I've been getting into C# lately.
And I've been liking it.
 
@HassanAlthaf never heard of him…
 
After 5 seconds of this youtube.com/watch?time_continue=5&v=s2334eeA9Zs I can confirm. WTF would I know anything about whatever he is
 
@PeeHaa He does latest hardware indepth reviews, comparisons, benchmarks.
 
I think people getting on on the shape of a piece of hardware arre odd
 
11:15 AM
Without hardware, you and me wouldn't be chatting right now. :P
 
@salathe I have written the majority of the migration guide (see here), but for some reason the files I've copied into en/appendices are ignored when I try to locally validate them or build the docs. I don't recall doing anything different before... If I can't figure it out then you may have to commit them for me
 
Yes but hardware should just work. That's about all I care about
 
@PeeHaa he's more irritating than I expected
 
ikr
 
Who @PaulCrovella
 
11:16 AM
dude in that video
 
@PeeHaa Lol, when you build your next rig, Linus gonna be your savior. (Unless you decide to pay an overpriced price for a prebuilt one).
 
Fuck off
I don't "build rigs"
 
for reals
 
-crai-
ysoserious
 
@PeeHaa he's a youtuber who couple years ago made hardware related videos and now is doing bullshit
 
11:19 AM
@tereško I'd say his channel NCIX tech tips is better.
 
@HassanAlthaf you entirely overestimate the importance of youtube personalities
 
@HassanAlthaf all his channels are shit now
 
@PaulCrovella Nah. Not really. They are nothing more than educators/entertainers for me.
 
@PeeHaa are you looking to get a new PC?
 
11:21 AM
Nope.
 
So, what formats do I save the keys in? ".txt"?
 
@HamzaDairywala Hello! Welcome to the world of PHP!
 
I was just arguing the retarded point of:
 
@CoderDudeTwodee "pocket"
 
Pocket?
 
11:22 AM
yeah .. preferably in your jeans
 
10 mins ago, by Hassan Althaf
@Linus Unfortunately, I'd say Linus Sebastian is more popular than Toravalds. But sure, lets call you Linus Torvalds.
 
I keep mine under the mattress.
 
@PeeHaa yeah, that's a fucking retarded point
 
And also, how do I restrict access to the keys?
 
@Peehaa He definitely is. Of course the developers community will know Torvalds very well, but non-coders barely know Torvalds. At the same time, any person who uses YouTube often will most probably know Linus Sebastian. :P
 
11:22 AM
I am serious here.
 
@CoderDudeTwodee E_VAGUE
 
@CoderDudeTwodee can you tell us what this service is so we can be sure to avoid it?
also serious
 
@HassanAlthaf I can only conclude you are an idiot
 
^ that
 
11:26 AM
 
If you don't understand how utterly stupid that statement is let me graph it for you so perhaps you can grasp that
@Fabor lol
 
just because you have subscribed to some little nobody on youtube does not make it more important for everybody else
 
Look clearly. Torvalds is getting unpopular day by day.
And Sebastian is getting popular.
 
You are too stupid to eat
 
@tereško I do not want anyone else to think he's important. He's just an entertainer...
 
11:30 AM
This conversation is pretty fruitless.
 
@Fabor <------ Give this man a medal.
 
@Fabor yeah, a few strawberries wouldn't be bad now.
 
Passion fruit
 
Damn tasty
 
11:32 AM
Yeah they are. Great for drinks too.
 
which fruit is that?
 
1 min ago, by Fabor
Passion fruit
:P
 
\o
brb me is going to get groceries beer and bacon
 
11:36 AM
@JanakaRRajapaksha Sri Lankan?
 
@HassanAlthaf yep :)
 
@JanakaRRajapaksha City?
 
Ohhh @JanakaRRajapaksha Same here.
 
anyidea why this is not working? http://codepad.org/kuobtDjL
I am using php 5.5.3
@HassanAlthaf nice to meet you :)
 
11:46 AM
How do I instal phpdbg on windows?
 
it solved my problem ;)
 
12:02 PM
wat
 
Just click the green blurb
tl;dr cookielaw sucks
 
@PeeHaa you meant just close the tab
 
Whatever suits you
 
Anonymous
Afternoon sisters
 
ohai
 
12:04 PM
@PeeHaa next vid you post from there better be worth having this discussion
 
:)
 
ALL THAT FOR WATCHING A SHEEP BURP?
 
@bwoebi so if I have a ->put() which creates the websocket with chat and creates a new host. I then have a second method which ->get() loads that url but I should use that same host instance?
 
@Fabor why not?
 
Just wondering how to get that same instance on the second request
I'm basically trial & erroring my way through this atm
 
12:24 PM
@Fabor what do you mean with same instance?
same Aerys process?
 
@Fabor why do you put the configuration into responder callables?
 
No reason, I don't really know what I am doing tbh :P
 
@Fabor And I'm not even sure what you're trying to achieve :-D
 
PUT /room/room1 (Creates room1)
GET /room/room1 (Loads the chatroom)
 
12:28 PM
so, you put in your file:
$router = (new Router())
    ->route("GET", "/room/room{id}", websocket(new Chat))
    ->route("PUT", "/room/room{id}", [Chat::class, "create"])
;

(new Host)
    ->name("chat.dev/room/" . $args['id'])
    ->expose("*", 1337)
    ->use($router)
;
 
The URI in the router isn't static though.
 
@Fabor I've just updated it…
 
Ah right
 
moo
 
mornic
 
12:39 PM
@NikiC Can we have a larger root buffer in PHP? (perhaps configurable…)
if you hammer Aerys enough root buffer starts to reach limit triggering a gc run on everything and slowing it down immensely…
(yes, I realize this needs extra 2 bytes on every refcounted :-/ (more likely: 4 bytes because alignment)
 
@bwoebi not easily...
the current gc situation kinda sucks heh?
 
@NikiC in what way?
 
TRS
What is crossdomain.xml?
 
diff --git a/Zend/zend_gc.h b/Zend/zend_gc.h
index eb8e500..684b552 100644
--- a/Zend/zend_gc.h
+++ b/Zend/zend_gc.h
@@ -40,12 +40,12 @@
 # define GC_BENCH_PEAK(peak, counter)
 #endif

-#define GC_COLOR  0xc000
+#define GC_COLOR  0xc0000000

-#define GC_BLACK  0x0000
-#define GC_WHITE  0x8000
-#define GC_GREY   0x4000
-#define GC_PURPLE 0xc000
+#define GC_BLACK  0x00000000
+#define GC_WHITE  0x80000000
+#define GC_GREY   0x40000000
+#define GC_PURPLE 0xc0000000

 #define GC_ADDRESS(v) \
        ((v) & ~GC_COLOR)
that's all you need (to make PHP not crash with a larger buffer)
 
"all"
Doesn't that make everything 8 bytes larger?
 
12:43 PM
2 mins ago, by bwoebi
(yes, I realize this needs extra 2 bytes on every refcounted :-/ (more likely: 4 bytes because alignment)
(the way here is 4 bytes, … not 8)
 
@bwoebi In practice it will be 8 bytes
refcounted itself may get a size of 12, but the next member is generally 8-aligned
 
@NikiC true [at least on 64 bit builds]
 
though I'd assume refcounted also got the full 16 bytes due to the type_info u64
 
also true :-D
 
does make you wonder ... is a u32 refcount really enough?
 
12:47 PM
Eih, can't we just dynamically recompile PHP at runtime according to an ini setting (j/k)
@NikiC haha… well, a full packed array pointing to the same string would take 2^36 bytes
 
@bwoebi that's pretty close to doable on consumer hardware ^^
 
@NikiC and easily on beefy 1 TB RAM server machines
 
@bwoebi Anyway ... we could reuse those extra 32 bit a la Z_NEXT etc
at least in most cases
But selling this to dmitry is gonna be a tough one :D
 
Yeah, it's trading edge case against normal case
@NikiC Well, we might put colors into gc_flags… then we'd have a full 2^16 slots
 
TRS
@Wes awesomescreenshot.com/image/1498901/… While accessing the guide.room11.org
 
12:56 PM
@bwoebi I think objects use those pretty aggresively
 
@NikiC colors would need at least two bits
 
@bwoebi objects have one :D
 
@bwoebi BTW ->name("chat.dev/room/" . $args['id']) causes a 400
 
@Fabor wtf is that a hostname?
the hostname is "chat.dev"
 
The one you pasted :P. I'm developing on a VM.
 
12:59 PM
@Fabor ugh… I've just C&P'd from your example
missed this
 
furry
 
is it bad that I came here after noticing "furry" in the sidebar?
 
@NikiC idea: we could hash the object pointer (shift by 5 or such) and use llinear probing instead :-D
(think that's too slow too)
 
Well the GET call after nets me a 426. Will poke around.
 
@Fabor sure
it's a websocket
you need to open this with a websocket client (e.g. JS websocket API)
 
1:02 PM
I'm opening it in browser
 
@Fabor amphp.org/docs/aerys/websocket/handshake.html … like described at the bottom example
 
TRS
like avs
 
1:19 PM
What is this doing in there @bwoebi @kelunik?
var ws = new WebSocket("ws://localhost/ws?password=reallyverysecure");
 
hmm?
 
the password thingy
 
it's an example
like if you'd have a SPA and do auth upon ws connect
 
Oh it's actually used in the server
 
yes
 
1:20 PM
Yeah missed that
Still would probably wanted to have seen just any random get param instead of pw :)
 
the purpose of onHandshake, as far as I've seen, is doing auth though.
[whether already logged in or logging in right now]
 
It's just that I am allergic to stuff that results in it
if ($req->getParam("password") != "reallyverysecure")
Considering copypasta community
 
I think using md5 would be a good idea \s
 
:P
 
how would you handle something like a chat room if users were connected to different workers? (sorry if this is a stupid question, I've only barely played with aerys)
 
1:26 PM
@PaulCrovella use some pub/sub service, like redis.
 
oh good, that's what I had in mind.. well that or just limiting the worker count to 1 :p
scaling is for other people
 
Hi guys is it possible to use subquery in codeigniter with the use of $this->db->query()?
 
@PaulCrovella well, that works...
 
Well my brain is fried, going to go play with my cat instead.
 
@Fabor I think putting brain in freezer would be more efficient
 
1:32 PM
Morning.
 
@bwoebi :P.
 
@LeviMorrison morning
 
If a project is GPL it can use MIT components right? As long as those components have full source availaible?
Can the MIT code be re-licensed as GPL?
 
no unless you are the author/owner of the code
 
@crypticツ yes, if you own the copyright to the code
@crypticツ yes
 
1:44 PM
@PeeHaa What?! Kill that with fire!
 
@crypticツ you can also do that if everyone who has contributed to the code in the past agrees to that. This is why most CLAs explicitly state the contributor must agree to transfer copyright to some org or the project lead.
 
And the author of that as well.
 
lol
 
oh, so if I wanna make sure the project source will always stay GPL and no part can be made proprietary I'd have to use only GPL components I presume.
 
Shall we do a quick blame and find out it's @bwoebi? :D
 
1:46 PM
Never ever have passwords in the URL.
 
@PeeHaa I'm sure it was me
 
@crypticツ No, not really. Just own the copyrights to the code. And mandate everyone to transfer it to you.
 
@kelunik that URL is not going to be displayed in browser bar…
 
@kelunik Glad we agree
 
Same here, i wouldn't ever do that.
 
1:47 PM
@bwoebi That not how it works ;)
 
@bwoebi still..
 
@bwoebi it has nothing to do with browsers
 
@kelunik what then?
 
Server Logs, Proxy Logs, URL leaks
 
@bwoebi that's bad
 
1:48 PM
@kelunik proxies may as well log request body data…
 
Just use your existing Auth Cookies, no need for tokens with Aerys
 
of course
 
29 mins ago, by bwoebi
like if you'd have a SPA and do auth upon ws connect
 
@littlepootis I'm thinking more of 3rd party packages and dependencies that the app would use. I can't own those copyrights.
 
@bwoebi they usually don't, that's the point
 
1:50 PM
^ i.e. if you don't have an auth cookie yet @kelunik
 
@bwoebi you have your Cookies there as well or some token
@bwoebi then you don't Authenticate Users first via the WebSockets handshake
 
@crypticツ third party packages are not technically a part of your project, so it won't matter much. As long as your project's license is compatible with the third party package's and is not very closely tied to your project, you should be fine.
 
Anyway, don't have time, there are Baby kittens here
 
lol
 
@kelunik lol
@PeeHaa The annoying point is "The method of the [handshake] request MUST be GET" …
 
1:52 PM
@crypticツ You cannot re license those
 
So, for..
> if I wanna make sure the project source will always stay GPL and no part can be made proprietary
wait
 
So just write everything myself then? =oD
 
What does "part" refer to here? A third party package?
 
yeah
I guess
 
@crypticツ why do you even want GPL?
 
1:53 PM
@bwoebi Thinking out loud here. What about just successfully doing the handshake and sending whatever you need as one of the first things to the server?
 
@PeeHaa that needs one more roundtrip and thus is slower :-)
 
"slower"
 
@crypticツ You can't just unGPL something so you should be fine even if a package decides to go proprietary. You'll have enough time to make a switch.
 
@PeeHaa I mean in terms of latency, not processing time
 
@bwoebi because it does not allow code to be distributed without source available. So it's more true to opensource than MIT. Afaik.
 
1:54 PM
BTW gpl is scary and a huge gray area. If you are going to close something and distribute it I would try to steer away from it
 
open all teh thingz!
 
You can, however, re-release it as proprietary (or dual license it as such).
 
@bwoebi It's just one message and only one time per session
 
@littlepootis GPL?
 
@PeeHaa hah, yes
 
1:56 PM
well fuck
 
@crypticツ yes
 
@PeeHaa (Yes, I know … just messing around)
 
Staph messing around with me! I am innocent!
 
While I like GPL, if I'm releasing something, I'd just CC0 or MIT it and keep mah copyrights with me.
 
@crypticツ The TL;DR of it is really: GPL benefits the end user most, MIT benefits the developer most
imo
 
1:57 PM
imo2
 
:P
 
end-users > developer
Thanks for the info you guys, looks like I got a lot more reading to do. =o(
 
Fuck the users :P
 
lol
 
@tpunt You need to add &appendices.migration71; to doc-base/manual.xml.in. I've also send a PR.
 
1:58 PM
GPL would be the go-to license in an ideal world where everything is GPL-licensed.
 
@PeeHaa said lucifer.
 
@PeeHaa GPL benefits the end user most only in as far as it doesn't impede the developer
 
@bwoebi lol
@PaulCrovella That's actually a good point
 
you sound surprised
 
I know, but I shouldn't :)
 
1:59 PM
Is WordPress still GPL-licensed?2
 
afaik yes
 
That's one project that'd benefit* from dual licensing.
 
s/dual licensing/dying in a fire/
 
2:26 PM
@DaveRandom posted
 
guys i want to do something like this in my input pattern="[/-_,\s0-9]{10}" so accept all number and , and - and _ and spaces but the only problem is that it accepts uppercase too
i tried ^A-Z but didnt fix it
 
@Lynob /-_ is a range of everything between / and _, which includes uppercase characters. see asciitable.com
 
then how to allow / and - and _ ?
 
/\-_ I think
 
@MarkWeiman will give it a try thanks
 
2:30 PM
you can escape it like that, or put the - at the very beginning or very end of the character class
 
That too.
 
@PaulCrovella will do that thanks
 
@salathe Ah, I knew it was something simple... Thanks Peter! I'll push what I've done to php.net either tonight or tomorrow.
 
@Lynob no problem. if you want more info read regular-expressions.info/charclass.html ... even if you don't want more info read that site anyway, it's useful
 
@crypticツ Don't forget that licensing something as GPL prevents most other open-source projects from using it as well
 
2:41 PM
They're in the minority though.
 
no, they're not
 
evenin
 
3:00 PM
evenin' peeps
 
Ekn
evening
 
it's official, i finally can't even
 
Ekn
heh
 
indeed
morgens also
 
3:18 PM
Mornix
 
@PaulCrovella thank you!
 
When did so improve their mobile chat? Looks good
 
I'd say only 4 months ago @Fabor
 
Guess it's been a while
So, what's everyone doing this Saturday?
 
I'd hazard solid hangovers all around
 
3:27 PM
not as bad as yesterday
 
Ugh. I can't handle hangovers.
 
actually had a bit of a scare - there were a good solid few hours when I could suddenly no longer read, had spontaneously developed a severe blind spot
 
Migraine
 
was a new one on me, fortunately a good nap cleared it up
 
You have a headache? Nausea, disorientation? Speech impediment?
Usually after the auroa goes away and you can read again
 
3:32 PM
only had a mild headache with it, and a bit of lightheadedness
speech and everything else was fine
 
Sounds like a migraine. Google migraine aura and look at images.
I get them regularly every six months
 
not sure how any of this is reassuring :p
 
You had the right course though. As soon as I get the aura I pop 2-4 headache pills, load up some classical music on my phone (earphones), put my blindfold on and try to sleep.
 
I get something like that (the blind spots and visual fuzziness) sometimes after doing sport on an empty stomac
 
Be weary though, the symptoms for a migraine are incredibly similar to a stroke
 
3:35 PM
yeah, that was my big concern.
 
Only some people suffer migraines. Welcome to the club.
Tbh I'm a little more surprised you only had one now. I have had then since my early teens.
 
on the plus side it wasn't nearly as painful as the cluster headaches I used to get quite a bit
yeah, if that was a migraine that showed up really late in my life.. my sisters has always suffered from them
 
Oh, luckily I dont have those. Those are much worse I'm told.
Oxygen is supposed to help a bit with those
 
you will, without hyperbole, consider suicide.. they still come up for me every few years but they don't last as long - when I was a kid they'd take me out for a week straight
 
Migraines are the reason I hate headaches/hangovers though. No matter how smashed I drink 2-3 pints of water before bed
@PaulCrovella yup, I dont think I could suffer through them regularly.
I watched a video once where a guy takes mushrooms to cure his. Worked for him.
 
3:44 PM
there's no way in hell I would attempt to trip during one of those
 
Oh I believe he takes them generally to prevent it.
 
Is it possible to upload php file as some other mime type with .php extension an run it?
 
Headaches always remind me just how little we understand the brain
 
mushrooms will remind you of that too :p
 
Heh. One day maybe :p
@AbrarAhmed why?
 
3:50 PM
@AbrarAhmed if you've totally screwed up your file upload handling, sure
 
Tying to hack!
LOL
 
hmmm... some months ago someone shared a link to a website that allows you to input two names then would generate a quote with said names (at the time, someone chose "Madaha Uchiha sucks - Ocramius", who knows wky). Said website would throw a very snarky screen when one would try to xss a <script> in it. would anyone remember the site? I dearly want to see it again.
 
Ekn
foaas.com this?
 
@Ekn Why is this a thing?
 
3:57 PM
no this actually seems like it! thx @Ekn
that's awesome!
 
Ekn
I really don't know @MarkWeiman :-)
and I don't wonder
 
because fuck you, that's why
 
Ekn
lol
 
It's awesome and I'm going to bookmark it and make heavy use of it, but why??
 
41 secs ago, by Paul Crovella
because fuck you, that's why
 
Ekn
3:59 PM
:D
 
>
622 - ALL THE FUCKS

SERVER INVITES YOU TO CONSIDER THE TRULY MONUMENTAL AMOUNT OF FUCKS IT COULDN'T GIVE ABOUT YOUR REQUEST.
on a scale of one to ten, how fucked would I be if I were to sneak such an exception in a production serious website?
 

« first day (2135 days earlier)      last day (2807 days later) »