« first day (1877 days earlier)      last day (3074 days later) » 

10:01 AM
HIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIII
 
Pfft. Why are people blogging about C++11 when it's 2015?
Get with the times gramps.
 
@Rapptz cuz we party like its still 1969
the hangover is still 2003
 
@Rapptz 11 cool tricks you can do with lambdas!
 
@Rapptz lol, I am still not up to date with that. Let alone C++14.
 
@LucDanton So many lambda blog posts.
 
10:17 AM
@JorgeBucaran That totally depends on you, if you want to do it or not. I do not install those for log4cplus. OTOH, if you have some useful demo app, well, I would install it.
 
How are lambdas implemented again?
 
Go read one of the ten thousand blogposts on the subject.
 
lambda tutorials will be the new monad tutorials
 
@Rapptz Probably because their workplace just updated
 
Except lambdas have a close imperative analog
Monads are these rainbow unicorns that blind people
 
10:22 AM
Cinch forecast: get your umbrellas
 
a close imperative analog
 
My python code is now littered with yield from
Is this the future
When will I be able to litter my C++ code with _Await?
 
@Rapptz no it is the coroutine
 
8/10
 
lol
Sup Jamal.
> Modern C++: Variadic template parameters and tuples (murrayc.com)
Speaking of C++11 blogs in 2015.
0 points too.
 
10:31 AM
it’s called 'Modern C++' because it’s contemporaneous with Modern Art
 
let's program contemporary code extemporaneously
 
@Rapptz moi_irl
 
@LucDanton do you happen to understand how code injection works? is there a small example of how it can be done/avoided?
 
no & no
 
10:35 AM
:c
 
it involves syringes and other nasty stuff
 
@Pigman168 what do you mean by code injection
 
@VermillionAzure i guess something where user input is processed and based on the input, the code can be manipulated
 
@Pigman168 In what language
 
C++
 
10:36 AM
what platform
 
OSX
 
and... wait what arch is that
 
arch?
 
So VS2015 Update 1 has modules?
 
yes
 
10:37 AM
im on 10.7 if thats what you mean
 
No
I mean x86, etc.
 
sounds hype
 
oh x86 i think?
 
is it any good
 
looks like x86-64
 
10:37 AM
or X11?
oh ok
 
saw people using it but didn't try it myself
 
X11 is a windowing system I believe
 
sorry, im not familiar with that terminology
yea
 
It's often referred to as the Instruction Set Architecture
 
10:38 AM
ohh ok
 
VS actually getting a feature before GCC/Clang is quite a feat.
 
Well... I really can't say but...
I'm not an expert but...
 
buut? :D
 
You'd probably start by looking up the calling conventions of the code first
 
oh
 
10:39 AM
cinching hard
 
So, usually, on x86-64, you store the return address of a function in its $ra register
 
oh ok
 
??? Sorry I'm not too good with x86 I've been studying mostly mips in school
But I think the basic idea works this way:
 
oh no dont worry, anything helps
 
Rewrite the part in memory or the return address register for the stack frame
When the function returns, it should jump to wherever the return address is in memory
 
10:40 AM
ohh ok
 
The return address should point to code that you want to run or something like that
 
mhm, that makes sense
 
The hard part is figuring out the memory layout of the function and having a mechanism to overwrite the return address data in the first place
 
true
 
lol
 
10:41 AM
If I remember correctly, writing to a part of memory that the program doesn't "own" according to the operating system at runtime will result in a segmentation fault so...
You'll probably want to examine the assembly first hand or something, get the source code, etc.
 
:O sounds nasty
oh ok
 
I've never done it, but I've heard that buffer overflows can often be used for this
If you write past the bounds of a buffer, you'll be writing to somewhere else in memory
 
ahh ok
 
If you happen to write past the buffer into the return address, that's a mechanism for changing it
But then again, we also must consider other logic that may exist in the program
 
that would occur by coincidence?
 
10:43 AM
...???
I dunno, but an example would be function pointers
I've never done it, but I'd guess that function pointers have the same return address for each function call, same parameters...
But the logic for each function can be different
 
yea, but is it just luck if the return address is past the buffer?
 
and different depending on the logic of how it is called
 
oh ok
 
@Pigman168 No, usually compilers and all code follow some sort of calling convention
 
oh
 
10:44 AM
It's also how other programs can use external code because they all follow a common convention
 
i see
 
I believe there's some established ones on a page on Wikipedia for C but that's just C
 
aw ok
 
C++ code can be compiled to C but I have no clue how they do it in C++
 
well thanks for all the info!
 
10:45 AM
Also
swiper no swiping please
 
hm?
 
Don't be a hacker? yeah that.
 
ohh hahah, i wasnt aware of that phrase
i uhhm, never watched dora the explorer :P
 
but everyones a greyhat to some extent right?
well, almost everyone
 
10:48 AM
No
 
no? :o
 
Statisticians never go near that
 
ive heard thats the majority but maybe that source didnt know what they're talking about or he had the wrong social circles
 
Uhhhhhhhhhh
Probably not
Usually it's the code crunchers, web, networking, encryption, and security people that do that sort of thing
Code crunchers being disassembly people, static analysis, etc.
 
oh ok
well then i probably dont even have the brains to do it
still good to know what to be careful about when writing my own programs
i thought it would be more dangerous and everything ive ever written is at risk of it but from what youve said i guess thats not the case
or maybe it is, who knows
 
10:53 AM
@Pigman168 It's both on the compiler and programmer's part I believe
The programmer needs to have good convention in order to prevent these sort of security vulnerabilities
The compiler may or may not implement techniques for additional protection
 
true, but can that be avoided if the optimization is set to 0?
so that the vulnerabilities are all on the programmer?
 
@Xeo what is your avatar from
she looks like she has a brain tumor
 
sbi
Good morning, folks.
 
Good morning
 
sbi
I see there's still a high percentage of users from the meta police around here.
 
10:58 AM
Yes, they live here now
 
sbi
Uh oh. Maybe you guys (+Morwenn) need to go somewhere else then? :)
 
you wanna be alone with the mods eh?
 
Well we have an IRC channel
beyond that, we're not going anywhere
 
@Pigman168 don't know
 

« first day (1877 days earlier)      last day (3074 days later) »