« first day (2324 days earlier)      last day (2610 days later) » 
00:00 - 17:0017:00 - 00:00

5:01 PM
well, sha1 is often used incorrectly anyway.
 
most hashes are often used incorrectly anyway ;)
 
now we need to rename it sh1t
thank you, that's my contribution for the day
 
that I mean. people don't know about hmacs or pbkdfs and use a simple hash instead.
there are loads of idiots using php who say "you should just salt your md5 hashes" and like.
 
if i have a tuple T and a var V, and i want to pass the values of both into a function as a single tuple, with the value of V as the last element, is this the correct syntax? somefunc( (*T, V) )
 
5:03 PM
@AndrasDeak what's wrong with sha1t? That's the proper pronunciation in Manchester, I believe.
 
@RichardDunn depending on version, possibly, but you can always try these things for yourself
@MartijnPieters I'll accept it
or somefunc(T+(V,)) ?
 
@RichardDunn I'd like to say "yes" :D
this was added in 3.5 though
 
Would you say the statement I edited into my answer is correct?
1
A: werkzeug.security generate_password_hash alternative without SHA-1

davidismThe use of SHA-1 in generate_password_hash is not vulnerable, as it is only used as an intermediate, iterated step in the PBKDF2 hash. The chance of finding a collision when using a large number of rounds is essentially random. See the discussion in chat. generate_password_hash takes a method ...

 
@AndrasDeak yeah, I just realised this was quicker to test in the interpreter
 
definitely
 
5:06 PM
@AnttiHaapala and "yes" is the correct answer
 
@davidism "The chance of finding a collision when using a large number of rounds is essentially random." sounds a bit weird to me
wasn't that supposed to say 0?
 
@RichardDunn :D
 
Prize is in the post... :D
 
I'll just quote PM2Ring directly.
 
it is 3.5+ so be warned :D
 
5:07 PM
Yeah, on 3.5
 
Python 3.6.0+ (default, Feb 25 2017, 17:33:16)
[GCC 6.3.0 20170205] on linux
Type "help", "copyright", "credits" or "license" for more information.
>>> import curses,readline
>>>
@Antti ^
thanks for the help
 
\o/
Python 3.7.0a0 (default, Feb 25 2017, 18:44:26)
[GCC 6.2.0 20161005] on linux
Type "help", "copyright", "credits" or "license" for more information.
>>>
why's your gcc newer than mine?! (gcc -envy)
 
The Akame ga Kill OST is so good. First soundtrack I've downloaded in a long time.
Unfortunately, the show itself is pretty generic.
@Kevin @idjaw
 
@AnttiHaapala debian testing
otherwise dunno
 
listening now
 
5:15 PM
Good soundtrack, good animation, good premise, terribly executed story and tropes.
 
^^I'm finding that in general happening a lot
is this because of age? We have just seen so much that it all ends up being the same broken story in the end?
 
Yeah, it's partially novelty, although I think a lot of the shows each season have become more homogenous.
They've figured out what sells.
 
@idjaw It's because monomyth
 
^^ yup...that. A lot of times over
Has anyone seen Arrival?
 
It's on my list.
 
5:26 PM
just saw it with my wife a couple nights ago. Let me know when you do see it, davidism. I would like to talk to you about it, actually.
I need to talk to someone about it
 
I think that's one of the ones I need to watch
 
@idjaw We watched it:)
 
oh great
 
@idjaw is it on dvd/Blu-ray yet?
 
probably
 
5:30 PM
yeah
I've been forcing myself to take a legit path with media watching to see how well it works out for me. So far so good.
 
$5 to stream on Amazon video.
 
5:44 PM
anyone know how to remove an item from a list in jinja? I'm trying to do something like url_for('endpoint', stuff=','.join([thing for thing in list if thing != other_thing]))
 
DSM
Temporary early afternoon cabbage.
 
cabbage DSM
 
holy moly, it works!!!!
 
wwoow
 
5:53 PM
@MartijnPieters for the record, they're of same size
so now it takes sub-second to do more pdf collisions
 
But here it's easy to generate two identical heads, right? So it's hard to find a colliding counterpart for an existing object, but it's easy to create two colliding objects to mess with insecure systems. Right?
 
@AndrasDeak yes,
but it means that one cannot use sha1 hashes for authenticity checks.
 
I'm just spending my afternoon watching Graham Norton clips
man these are hilarious
 
yup, I understand the consequences (well, as much as I need to)
 
it also means if you just authenticate the hash, you're screwed.
that's how SSL certificates work :D
 
5:59 PM
oops
 
they're signing the hashes :D
 
how hard can it be to migrate the whole world to something more secure?
maybe 2 steps more secure to prolong the time we'll be safe again
 
nice
 
so this will follow next
but this time I guess they're migrating rapidly away from it.
but many things do not support sha256
including android 2.2 and windows xp original :P
 
6:02 PM
the whats now?
 
@AnttiHaapala Yes, you can create colliding PDFs quickly. Now create documents that'll produce colliding HG node ids.
 
let's google if there is a CA still using sha1
CAs must stop issuing new SHA1 by 1 January 2016. … For SSL certificates, Windows will stop accepting SHA1 end-entity certificates by 1 January 2017. This means any time valid SHA1 SSL certificates must be replaced with a SHA2 equivalent by 1 January 2017.
aha :(
bugger :d
This month, Microsoft has moved its ultimate January 1, 2017 deadline to February 14, 2017. I know a ton of my customers will appreciate the additional month and half to get prepared.
0
Q: Which Root CA still issues SHA-1 ssl certificates?

eladeladIs there any CA that still issues SHA-1 certificates? I need it for TR management to manage devices with base firmware that does not support sha256.

 
I sense traces of Schadenfreude
 
:(
@AndrasDeak no,
I was hoping that there was a CA still issuing SHA1 so that we'd get an attack against it :D
then, I would have had my Schadenfreude...
 
I'm sorry:P
 
6:27 PM
too bad she was a French waitress, I know what a Vietnamese chef would have done (yum)
 
Joanna doesn't sound like a French name
 
7:19 PM
yay over 200 rep today
too bad 200 of those were association bonuses.
 
 
2 hours later…
8:56 PM
Should I use decimal.Decimal or int cents to store dollars?
 
if you google "python store currency" you get interesting results, this is the first one, many relevant and informative answers
and links to essays and whatnot
and some of them are only 5 years old
wait, it was "python currency type"
 
9:44 PM
yeah so just decimal i guess
is fine
 
10:32 PM
nothing to achieve by using int
@Hatshepsut there is also a deleted answer
"Use integers that represent cents."
with comment: "Thats what Decimal is for, it gives you a consistent decimal class that deals correctly with arbitrary length decimals"
 
@antt
@AnttiHaapala yeah i thought decimal was the way to go, seems right
and id be worried about forgetting the decimal with int(cents)
 
whatever you do, you should generally make sure you don't forget anything when you're handling currency
 
this is read only but nonetheless i want to avoid as many opportunities for forgetting something as possible
 
11:04 PM
Oh, my orange hasn't updated It just looks the same as the old one, oops!
 
did you re-upload?
 
I think so, this orange looks mostly loaded now
 
not where I am now
 
Still! Well it's an orange, you're not missing much
 
it's a 4 megapixel image of an orange, maybe that's why thumbnailing goes haywire
if I were you I'd try uploading a manually downscaled version
say, ~500x500 pixels
 
11:13 PM
I thought i put a cartoon orange up (small file size)
 
this is your full profile image at least on main
yup, on chat too
either you didn't, or it's caching
 
Beautiful, isn't it?
 
not for the OCD-prone
 
Darn, someone used my comment answer as their full answer. But they mention me so thumbs up :D
 
was it trivial?
nevermind, I can see your comments:P
 
11:18 PM
It's taken me months to get enough points to comment on things, i wanted to try it;)
Okay, a new orange should appear later
 
thanks for trying, we'll see in a few minutes
did you also select the new image after uploading to your profile?
it's just that I would think that the change should be visible by now on your main profile (chat is always lagging)
this is now more scientific curiosity than concern on my part, so don't worry about me pestering you with it
 
I realised what you meant, when i upload it the icon changes. But i refreshed the page and it went back to the old one . I'm going to clear the cache, see if that helps
 
OK. Maybe you need to save the settings in your profile?
 
...
 
11:25 PM
Oh look, it works
 
changed on main
5-10 minutes and we'll see here:)
 
Note to self: Scroll down
 
scrolling is for wusses
 
My chat picture looks a bit squashed..
 
I still see the old one in your chat profile
unless it was a pun on "squash"
 
11:31 PM
The "uploaded picture" comes up with the new icon. Orange you glad I didn't say squished.
 
when you said "chat picture", did you really mean "picture on stackoverflow.com" instead?
because this is the "chat picture" I still see:
 
Yeah, that'll be the same until however long. But the new icon link is : i.stack.imgur.com/lubfC.jpg?s=42&g=1
 
takes longer than usual....
@Orange I know, as I said, your profile changed on main. I just got confused by the confusing stuff you said
 
The matrix is failing
Sorry, i was googling for orange puns and didn't check what i wrote made sense.
 
11:47 PM
if isinstance(A, self.__class__):
shouldn't this ^ be if type(A) == type(self) ?
hmm, guess not
with stuff like collections.abc
but then again self.__class__ can't ever be an ABC
 
argghhh
 
yes?
 
33 % of all C questions are caused by OP not indenting the code
Yet again a question that is asked because OP doesn't care to indent code properly!!! — Antti Haapala 49 secs ago
 
11:50 PM
yikes
 
Please indent your code properly!!! — Antti Haapala just now
 
alternatively, it would suffice to use proper bracketing
 
I will always upvote a C question now that just presents properly indented code.
my upvote/downvote ratio is now closer to 1:4
 
don't do that, please
 
\0 vs /0 - the direction of that slash kind of matters! — Antti Haapala 23 secs ago
@AndrasDeak upvote C questions that are properly indented :D
 
11:56 PM
nooo
This is not evolution, it isn't enough to be not as bad as you could be! Please only upvote properly indented decent questions:P
 
I will soon get a ban just like Martin James
 
I still don't know why he got that
it probably involved an attitude and Shog, if my impressions are correct
I'm also wondering why dark top nav bar theme guy got a 1-year suspend
 
00:00 - 17:0017:00 - 00:00

« first day (2324 days earlier)      last day (2610 days later) »