« first day (1374 days earlier)      last day (3566 days later) » 

8:01 PM
Guys. How would one attack a website that logs user in by assigning a randomly (with safe algorithms) token to a client, upon validating credentials? (over SSL)
Assuming impossibility to perform SQL Injections and XSS.
 
@TonyTheLion just download it from some online museum, already
 
@chris lol
 
"I love crypto, it tells me what part of the system not to bother
attacking" — Drew Gross, forensic scientist
2
 
@sehe +1
 
8:06 PM
I got it from here:
"Crypto Won't Save You Either" http://regmedia.co.uk/2014/05/16/0955_peter_gutmann.pdf (PDF) "Crypto may be strong, but it is fundamentally unsafe." http://t.co/AswnFq40qi
 
@Jefffrey BEAST or derivative attacks that grab the cookies
 
@EtiennedeMartel you spotted that exceptionally well
 
@sehe As a League of Legends player, I'm used to detecting anger over the Internet.
 
@sehe the problem with Crypto is that people fundamentally misunderstand the purpose of cryptography, they think it's to prevent people from reading what you encrypt.
 
@Mgetz Somehow that was my idea for its purpose, or part of its purpose
but I'm beginning to believe I've been mislead in this
 
8:12 PM
@TonyTheLion you have been, the purpose is only to delay the reading of the information until such time as it is no longer actionable.
 
so it seems
 
right now I assume that governments can break AES128 in around 2 weeks
private entities... depends on who's trying
 
time to make some smores
 
wtf are smores
 
molten marshmallow, on chocolate, on a biscuit (a 'gram cracker', which AFAIK is basically a digestive)
very tasty
 
8:18 PM
A s'more (sometimes spelled smore) is a traditional night time campfire treat popular in the United States and Canada, consisting of a roasted marshmallow and a layer of chocolate sandwiched between two pieces of graham cracker. National S'mores Day is celebrated yearly on August 10 in the United States. == Etymology and origins == S'more appears to be a contraction of the phrase "some more". The first recorded version of the recipe can be found in the publication Tramping and Trailing with the Girl Scouts of 1927. Although the exact origin is unclear, reports on the group as early in 1925 describe...
 
@thecoshman graham cracker*
 
@thecoshman also awesome if you use nice european milk chocolate not the traditional hershey's bar
 
how do I find out what threw what?
 
break on exception
 
I have an uncaught exception somewhere from std::string::erase
but I haven't used the function at all
Oh I found it
 
8:20 PM
Break on throw, look at call stack?
 
18
Q: GDB: How to break when a specific exception type is thrown?

StackedCrookedAccording to the documentation I can break on specific exception type by using conditional breakpoints. However the syntax for the condition isn't very clear to me: condition bnum <expression> Looking at the expression syntax I think this is the pattern I need: {type} addr However, I don...

 
@Mgetz my boss' boss is from the UK, and he shares this belief. We 'muricans do not share his love for that godwaful stuff he calls chocolate.
 
@SamDeHaan doesn't work with European chocolate, too dark but milk chocolate
 
nvm
The answers there don't help
@R.MartinhoFernandes I don't know how to break on throw.
 
8:23 PM
yeah
 
catch throw
 
it gives me "Junk at end of arguments"
 
WOAH
Sounds like serious UB.
 
(gdb) catch throw std::out_of_range
Junk at end of arguments.
huh?
 
try just catch throw.
 
8:25 PM
I guess that works
I'm a nub
Apparently pop_back calls erase which throws
I don't think that's standard conforming
 
it is.
 
I believe you always need to single quote the names in GDB that contain ::.
 
pop_back() on empty std::string is UB, so delegating to erase that throws is perfectly legal.
 
So I would try catch throw 'std::out_of_range'
 
@SamDeHaan any idea what they are supposed to be?
 
8:28 PM
@thecoshman delicious?
 
@Mgetz Hershey's is ok
 
Xeo
8:39 PM
I love the SFX
 
woulda been nice to see them with full thrust
 
@R.MartinhoFernandes Lol. You've encountered mild cases of UB?
 
9:02 PM
I should stop creating Wide examples that crash the compiler.
 
@Puppy BTW yes, Bailey has been fed. Sorry I missed the bitch-fight:(
 
lol
oh fuck
not this .0 shit again.
clang why the fuck do you do this.
 
9:18 PM
2
A: A variable is being used without initialized

Lightness Races in OrbitFrom the documentation for GetModuleFileName(): lpFilename [out] A pointer to a buffer that receives the fully qualified path of the module. If the length of the path is less than the size that the nSize parameter specifies, the function succeeds and the path is returned as a null-termin...

> a pointer into infinite chaos
 
fuck.
I have two functions where, when given certain arguments, one happens to be identical to a call to the other.
but if you call one instead of the other with the certain arguments, the compiler crashes; else, it succeeds.
I should just replace this whole API.
 
@Rapptz I don't even.
 
or better
the Clang people should just fucking fix their codegen stuff so that it a) works and b) is public.
 
@Rapptz Man, this is so fucked up.
 
9:34 PM
> the guy who gets all butthurt when people laugh at a genuinely hilarious event is the one people don't respect.
OMG wisdom on reddit
 
Where's that?
 
Some other post.
 
greetings
 
Wow
 
9:50 PM
That is terrible.
 
sexism much
 
I can hardly believe I'm the first one to suggest a simple template <typename Sig> using fptr = Sig*; here(the July 21, 2014 at 3:03 PM comment)
 
10:05 PM
It was mentioned in the reddit thread where that was posted.
I know it's not the same but eh
 
Ah. I find reddit rather irrelevant
:D
 
10:27 PM
hi all :)
 
hi
 
I am facing a C++ question, I am coding a stream (that inherit and follows the <iostream> design) for decoding ogg/vorbis, and as you may know an audio stream is composed of multiple channels, that are interlaced when encoded in ogg/vorbis, but should become several streams when decoded (one per channel). Does anyone knows how to handle such a thing in a... well... standard design way ?
 
@Puppy how is it sexist?
@germinolegrand Not I
 
there's not a single male there!
 
everning
 
10:39 PM
@germinolegrand Why don't you ask it on the main?
 
@mirgee too broad
 
@Mgetz Seems fixed by TLS 1.1. No?
 
@mirgee mir the main ?
 
10:43 PM
@Rapptz Here bub.
 
(sorry i'm not a SO regular ^^')
 
@Jefffrey Solves a completely different problem.
If I wanted it to be static constexpr I would have put it there
 
Sorry bub. What was the problem?
 
Pretty obvious bub.
I want to store the result in a non-constant boolean.
I know there are work arounds but I can't imagine this being disallowed syntactically.
It doesn't make sense
Clang compiles it fine
 
@Rapptz would be hilarious if there was a bug in g++ about non-static member initialiszers
 
10:45 PM
@Rapptz Switch to Clang++ v0v
 
@Rapptz Yeah, weird, just weird
 
@Rapptz I've seen this before, it's a known bug in Clang. I believe that there may be a fix for 3.5, basically they parse the comma incorrectly. Just add parens around the expression to resolve.
 
This isn't clang
 
It's gcc
 
10:46 PM
You mean it's a known bug in g++?
 
no, I mean I've seen the bug before in Clang.
 
Interesting
 
It is known
 
@Puppy yeah... but it compiles fine there...
 
Silly.
I wonder if there's a bug report for it
 
10:47 PM
@Rapptz same here
 
Coliru has SVN Clang, not a release Clang, so they may have patched it in that version.
also, IIRC Clang's version that I saw before was on default arguments of some kind.
 
@Puppy Why not a release? 3.4 is fine, also for c++1y
 
@Arcoth How the fuck should I know? I'm not Coliru's maintainer.
 
> Status: SUSPENDED
 
@Puppy Calm down
 
10:48 PM
Calm down puppy
 
The hell did you smoke
 
Drugs
 
@LightnessRacesinOrbit I've seen similar issues in Clang (as above).
 
Oh
It's suspended because the standard doesn't specify what should happen.
 
10:49 PM
I feel like that sometimes
 
Interesting.
 
By the way, we just found some weird bug in VC++ here:c-plusplus.de/forum/327071
VC++, silly
 
The date from the DR is 2001
 
What's the "DR"?
 
defect report.
 
@Arcoth Is that a bug? Isn't base_class <10>::foo a dependent name?
G++ compiles it mind you
 
@LightnessRacesinOrbit Nope, because base_class<10> does not depend on any template parameters.
 
:17833247 num_elements
 
So did you and Edward Bird have a fist fight?
 
but even if it was, that wouldn't render the sample ill-formed.
 
10:55 PM
@Puppy sorry, yeah, somehow I read that as an access to my_array?!
bedtime I think
@Rapptz I'm still waiting
 
@LightnessRacesinOrbit Still wouldn't render it ill-formed (except for the visibility violation, obviously)
 
Also I didn't know you had a GitHub account. Now I do.
 
@Jefffrey no, the issue is with TLS/SSL compression not the actual spec
 
@Rapptz I only registered for filing that issue, basically (and a few others in the subsequent days)
 
I'm terrible at reading things.
@Mgetz Wait, isn't TLS compression part of the TLS spec?
 
10:59 PM
@Jefffrey supplementary and optional
most servers have disabled it to prevent such attacks
 
Oh, you meant CRIME and BREACH attacks
@Mgetz From what I understand there's nothing I can do.
 
@Jefffrey depends on the implementation of the server... a ton of servers are still subject to Heartbleed
most exploit kits are just pick a os/configuration and press go at this point
 
user2985029
 
11:19 PM
@LightnessRacesinOrbit well well. this describes your FB friends then
 
user2985029
 
> while he literally shits himself (figuratively)
 
user2985029
@Jefffrey hmm?
 
user2985029
@Jefffrey what is this?
 
Ell
Hi
 
11:24 PM
hello
long time no see
 
Ell
I have WiFi finally. I implemented coroutines in ruby finally!
 
you have been too productive
come back here
 
user2985029
 
Ell
@jefffrey haha too right
I'll be back in a few days though anyway
 
@Borgleader /r/funny is pretty bad
 
Ell
11:29 PM
I gotta go
See you later!
 
@Rapptz I'm sorry for calling you bub two times.
 
?
it's okay
@Borgleader TIL other people think New Balance shoes are cool and comfy.
I thought I was alone
 
@Rapptz comfy i knew, cool thats news to me
 
New Balance shoes are the comfiest shoes I've worn
But I know other parts of reddit think wearing New Balance shoes make you a 40 year old father or something.
 

« first day (1374 days earlier)      last day (3566 days later) »