« first day (2558 days earlier)      last day (2380 days later) » 

12:02 AM
some times I'm amazed when there are still crashes in PHP which can be triggered by something as simple as $o = new stdClass; $o += [];
Not that you'd ever write code like that intentionally, but somehow a value which should have been an array was an object and it segfaulted :-D
I really don't know why nobody found that one yet … is array addition via += that uncommon?!
 
12:25 AM
Crash when assign-adding an array to an object – #75393
 
@bwoebi ... yes? yes please ;)
 
12:41 AM
@FélixGagnon-Grenier why "please"? :-D
 
it's a please kinda directed towards the powers that be, so that they can make it so that it is uncommon :)
 
@FélixGagnon-Grenier I got that, but why are you hoping for it being uncommon?
 
I believe I don't particularly like the semantic meaning of "adding an array" to a language whithout operator overloading
 
It's a pretty trivial operation, pretty much like array_merge (with string keys), just more direct
 
12:44 AM
but yeah, it's a not very explicit way of saying "just add the damn keys of the right operand which aren't present in the left"
 
well... yeah, maybe. come to think of it, it's not so bad when considering adding an array to an array
@bwoebi good point, I'm less uncomfortable with this now
 
but I don't disagree with you if you say it should rather be a function than an operator. But that's how it is :-D
 
php -r 'set_error_handler(function() { throw new \Exception; }); $a = "2"; $a .= "a"; try { $a+=1; } catch (\Exception $e) { } var_dump($a);'
int(3)
uh … why?!
well… that at least explains why to doesn't leak … but.
Also assign-ops are leaking resources …
$rsrc += 1; // leaks (but goes unnoticed thanks to destroy all at shutdown)
 
1:19 AM
php -r 'var_dump([] ** 2);'
int(0)
wtf
why the fuck is that not giving an error
aka: why is that special cased there?!?!? lxr.room11.org/xref/php-src%407.0/Zend/zend_operators.c#1125
 
1:37 AM
https://github.com/php/php-src/commit/aff56f3c4539869910cf2778cf0ece2d8c2dd671
Convert arrays to int(0)
Exponent with array as a base becomes int(0)
why.
 
> use PHPMailer\PHPMailer\PHPMailer;
lol
 
@NikiC if you have some time … ^ I had fun … but don't really see how to properly fix all these together
Needs a bit bigger restructuring around zendi_convert_to_scalar_number() if I'm not mistaken…
--TEST--
Bug #75393 (Crash when assign-adding an array to an object)
--FILE--
<?php

try {
        $o = new stdClass;
        $o += [];
} catch (\Error $e) {
        var_dump($e->getMessage(), $o);
}

?>
--EXPECTF--

Notice: Object of class stdClass could not be converted to int in %s on line %d
string(25) "Unsupported operand types"
object(stdClass)#1 (0) {
}
 
none#75394
 
hey guys, anyone know why $_REQUEST would hold server variables such as $_SERVER?
 
2:07 AM
@Addramyr what variables in particular?
 
3:22 AM
 
3:43 AM
Hey guys. Does anyone know if there's a name for the 'type' of program that asks you a series of questions and then provides you with a diagnosis/result? I'm sure there is but I can't for the life of me think what it is not can google mind read :(
 
4:06 AM
Evening.
 
evenin LeviMorrison
 
:p
 
\o/ My first build of sapi/cli/php with CMake! /cc @bwoebi @NikiC @ircmaxell
I'm sure it's totally broken but hey! I have to start somewhere.
Hey! my hello-world.php actually worked. It's not totally broken after all.
 
6:00 AM
please help me to resole this, stackoverflow.com/questions/46783253/…
Package egeloen/http-adapter is abandoned, you should avoid using it, How to fix on composer update
can't update composser:(
 
6:51 AM
err... mornings o/
 
mornin
 
Core dump in in timelib_get_time_zone_info – #75395
 
morning
 
7:11 AM
/o
 
 
Is there xampp software for windows x64?
 
@Wes Already saw it. Kill me now
 
@Gordon it's beautiful
 
7:26 AM
@Wes I hate kittens
 
I am tempted to flag that
 
posted on October 17, 2017 by kelunik

- Do not release resource on `__destruct()` in `ResourceInputStream`. This ensures `getResource()` still returning a valid resource during cyclic garbage collection. See #29. - Optimize memory consumption of `Amp\ByteStream\pipe()`.

 
moin
 
hola \o
 
7:43 AM
@Gordon and of course someone did... Please don't flag completely harmless stuff peeps... :p
 
mornin
 
It absolutely was not harmless
 
@JonClements it wasn't me, but it sure aint harmless to hate kittens.
I blame it on @ToukaXKaneki's extended exposure to tentacle porn… these teenagers dont know how to stomach that. It has detrimental effects on their psyche.
 
tentacle porn isn't really all that bad, as people claim it to be
 
boy, if it makes you hate kittens, it really is all that bad
 
7:49 AM
Strange how one's mind connects things... I'm now confusingly thinking of a certain James Bond film :)
 
the one where he says: keep the martinis dry and yourself… ah you know what I mean?
 
I don't remember James Bond having tentacles. Is George Lazenby an octopus?
 
Anyone find that James Bond movie title generator?
Live and let Ball was a pretty good one
 
Goldenball would be better
Thunderfinger
 
Or "SkyPussy". I found this one but it's not the one we all used years ago
 
7:54 AM
@JonClements Goldmember?
that wasn't a Bond movie
 
On Her Majesty With Love
Sorry I seem to have got the James Bond/porn thing inextricably intertwined in my head
 
Wes
morning 2
 
@bwoebi Did you read my message about the Aerys release?
 
I remembered the last time I saw a bond movie I was horrified how misogynistic and sexist it was. Like totally unacceptable. He literally forced himself on that nurse or whatever she was by threatening her to tell her employer she was responsible for some incident on a massage bench. she wasn't. but he threatened nevertheless. of course she submitted.
 
7:58 AM
why do have this suspicion, that it was produced by brazzers
 
@tereško s/brazzers/digitalpg
 
@Gordon Exactly how it should be!
/giphy trollol
But it's just a movie and no people don't copy James Bond films
James Bond was an asshole, but a funny one
 
Anonymous
mornin
 
posted on October 17, 2017 by kelunik

- Fixed issues with responses without `content-length` and without `transfer-encoding: chunked`. - Revert fix for v3.0.10, as this has been properly fixed in `amphp/byte-stream`. - Catch `ConnectException` from `amphp/socket` and throw `SocketEx...

 
Wes
8:04 AM
had an accident with a razor this morning. it's like a tiny x-men wolverine tried to fight my face
they should call it wolverine, not mach3
 
@Wes y u use a razor? a rough towel should be good enough
 
@bwoebi heh
@kelunik You want to report a bug for that exit issue?
 
Wes
@Gordon sanding paper? it ruins my skin :B
 
@NikiC Can do, yes.
 
a rock usually does the job
 
8:17 AM
@Wes no, not sanding paper. a rough towel.
it works for @Jimbo
 
@Wes I did this because I wanted to shave but had no hair yet. I was 8
Grats dude!
 
Wes
:B
thanks :B
 
@NikiC Done.
 
Hi. is there any way that we can install php packages that host on my own hosting using composer?
 
also private packagist, which is easier to use but has a cost
 
8:23 AM
@DaveRandom .oh Thnks.
 
or..... you can create your own package managing application and a repository
 
@ToukaXKaneki How? you means install git open source on my system for managing package or etc?
 
no... ignore me actually :P I was just fooling around :D
 
:) thanks okay.
 
Wes
every time i think i've finished with windows update i receive more updates... it's about 60 now... rebooted 3 times already
 
Anonymous
8:32 AM
That means you are very much out of date
 
why do you even use Windows?
 
Wes
@JayIsTooCommon i was
but windows is a pain in the ass as you know
 
Anonymous
indeedy
 
Wes
@ToukaXKaneki i would use linux if photoshop ran on it
blame adobe
 
you can use wine, to run ps
and also gimp
 
8:34 AM
@ToukaXKaneki the only difference between Windows and linux when it comes to updates is that in linux you need to initiate the update process yourself. You don't need to update linux any less often, it's just much easier to forget that it needs to be done, which I would argue is the actual problem.
Windows has a lot of problems, Windows Update is not one of them (mostly)
 
Wes
ps on wine is certainly not going to work well. i mean ps works barely even on windows... imagine on wine lol
 
Wes
these days my major annoyance is illustrator... i think i could live with gimp since i don't do much photo editing anyway, but there is no illustrator for linux... inkscape is great only because it's free
 
3 messages moved to Trash
 
Wes
and of course the other things i could use for drawing are also windows and mac only
 
8:38 AM
you can use paint in linux, by wine...
 
Wes
like corel draw or rhino
 
is corel draw still a thing?
 
Remember the XKCD for "it's compiling!"? The modern version: "It's running composer update"! No I'm not disabling xdebug #php
Srsly, takes bloody ages ^
 
I had that on my 386
 
Corel Draw was awesome!
 
Wes
8:42 AM
@Jimbo why don't u ask
 
@Jimbo at my last job we put composer on hhvm because it took so long
 
@Wes Why don't I ask wut
 
Wes
@Jimbo what you want to write in the balloon :P
 
@Wes What balloon? I missed the context
Unless you're referring to Coral Draw...
(logo was a balloon)
 
^
I am also confused because that
 
8:46 AM
on a side note: the "new compiling" is really "training the neuronal network"
 
@Gordon i.e: if statements
 
Ahh
Can't find meme generator for it
 
Wes
i am doing it :B
 
Please make an xkcd font
> xkcd.com is best viewed with Netscape Navigator 4.0 or below on a Pentium 3±1 emulated in Javascript on an Apple IIGS at a screen resolution of 1024x1. Please enable your ad blockers, disable high-heat drying, and remove your device from Airplane Mode and set it to Boat Mode. For security reasons, please leave caps lock on while browsing.
lol I have never noticed that before
 
Wes
9:03 AM
user image
5
ftr, it's not that without xdebug installed it is much faster
 
@Jeeves Thanks asshole!
!!uptime
Errr....
!!wotd
Who's fault is it?
 
Anonymous
yours.
 
Anonymous
9:11 AM
/ @DaveRandom @PeeHaa
 
@Jimbo You're welcome!
╔══════════════════════════════════════════════════════════════════╗
║ [1 day, 15 hours, 54 minutes and 37 seconds] without an accident ║
║                   since [2017-10-15 17:15:49]                    ║
╚══════════════════════════════════════════════════════════════════╝
4 messages moved to Trash
mealy-mouthed avoiding the use of direct and plain language, as from timidity, excessive delicacy, or hypocrisy; inclined to mince words; insincere, devious, or compromising.
 
umm... OK
 
Anonymous
heh
 
That sucked
Sep 28 at 15:01, by Jeeves
user image
 
As a general rule SE won't let us perform that many actions that fast, I suspect that was an SE issue rather than ours
 
Anonymous
9:15 AM
@DaveRandom hmm, he also didn't log the tweet message though
 
Anonymous
I need to stop personifying computers.
 
@JayIsTooCommon yeh that is a bit weird, but I can see that happening if SE didn't give us a success response to the message post after it succeeded
The reason I'm fairly confident it's not us is that 5 actions came through at once, and chat definitely does not let us do that
 
Anonymous
yeah, good point
 
It won't even let you post 2 messages in <2secs
 
9:35 AM
@ircmaxell bugs.php.net/bug.php?id=75388 thoughts please if you have time/opinions
 
@DaveRandom Sounds like timers / queues need to take this into account
 
@Jimbo yeh they do, that's a solved problem within Jeeves - when we hit a rate limit we get a response back that says "try again in n seconds", we back of for n + 1100ms when that happens
but what happened there is that 5 actions arrived in chat at once, which makes me think it must have been a server issue
 
Wes
@DaveRandom i thought only clients needed to be patched
 
@Wes sure, but plenty of people use APs/routers as wireless clients
 
Wes
ok
 
9:46 AM
e.g. wireless WAN, wireless LAN bridges
 
Wes
so like a modem-router-wireless should not be patched?
 
@Wes For the main vulnerability, yes. But there are others vulnerabilities in e.g. fast access point switching that need access point updates.
 
@Wes *does not need to be unless you are using it as a wireless client
It should always be patched to the latest stable firmware though ;-)
 
reddit.com/r/programming/comments/76uk7a/… (both article and the comments)
 
9:58 AM
@DaveRandom See the message above yours. Mostly needs to be patched anyway if you have multiple routers for the same SSID.
Yubico has shipped broken RSA generators inside its YubiKeys. yubico.com/keycheck
5
 
@kelunik I believe that's a less widespread problem, notably draytek sent me an email this morning explicitly stating that their equipment is not affected unless it's in client mode, and they will be rolling out patches starting tomorrow
apparently they are even going to be patching EOL products
 
Anonymous
10:11 AM
heh, Sky's official advice for KRACK
 
Anonymous
> If you are concerned we'd recommend you change your anti-virus software settings to 'Public Network'. This will give you an additional layer of protection.
 
@JayIsTooCommon as in Sky News?
 
Anonymous
@tereško Same company yes. Sky are also one of the leading TV and broadband providers in the UK
 
Poopert Turdoch
 
holy fucking shit
 
10:19 AM
I mean that sounds insane but actually it's not terrible advice today
There are no patches available yet, and that will at least shut down SMB
the problem is that a lot of people will think "oh, problem solved" and forget about it
 
^ that
 
@DaveRandom I thought Windows wasn't that affected, because it doesn't allow replay of the third handshake message and violates the protocol?
 
Anonymous
@DaveRandom it's too presumptuous though
 
@kelunik the issue there is more that potentially other vectors might be exploited on the back of krack to gain control of devices inside the network, then you can do some real damage with the SMB kitchen sink
SMB is just... it's just awful
@kelunik esp. consider that a lot of the people who are listening to that advice are the sort of people who buy internet-connected lightbulbs that have a root password of root and stuff like that
related:
Levels of hacker enlightenment: - my security is shit - all security is shit - everything is shit https://twitter.com/ivanassen/status/911350840002322432
 
@DaveRandom I have that. But it uses LAN. And of course no dumb password default. :-D
 
10:29 AM
I remember reading a while ago that some worm was mining bitcoins on random IoT devices, that amused me a little
 
10:47 AM
@Jimbo Run it with "vanilla" cli php binary...
 
@tereško interesting read!
 
Anonymous
@Wes day 9.
 
I really should stay away from local developer communities
 
how can I write a tag in here? what was the syntax?
 
10:55 AM
the syntax ...
 
[tag:php]
:troll:
 
someone yesterday told me that: "The best part of CakePHP is the ORM that is bundled with it"
 
got it, thx
 
Anonymous
@tereško it's like saying the best part about shit is the smell that comes with it.
 
.. and when I told them, that it's not really an endorsement, they got confused
after which I was told that I have no clue what I am talking about, because both Laravel and Rails also user active-record ORMs
lets put it this way - I can't even work up the anger to start arguing
 
Wes
11:03 AM
@JayIsTooCommon @Dereleased i did yours i.imgur.com/1yXicLd.jpg
 
@tereško now it's time to put on that yt video again
 
Anonymous
@Wes ...
 
Wes
@JayIsTooCommon how pissed are you
who's left? @Gordon would you please wear the snake one for at least one day :B
i'd do levi's but i like that kitten too much
 
me me me me
 
@Wes does the pope wear knickerbockers?
 
Wes
11:10 AM
only swiss guards
 
Anonymous
 
3 messages moved to Trash
 
Wes
what an asshole.
 
Anonymous
@Wes feel better now thank you
 
Wes
but you keep ruining the joke
 
11:11 AM
 
Anonymous
@Wes But it'll be the first question that comes to their head anyway
 
Wes
good point ahaha
 
@DaveRandom if the paper defines a secret, then nothing to lose in exposing it. I wouldn't invent a new algorithm tho. So I guess +1
 
... from the same chat: the "PoEAA" was described as "some bullshit on the internet"
I'm done, fuck them all
 
@tereško Y U CHATTING IN LARACHATS?
 
11:26 AM
I am chatting in a latvian "Web Application Development" skype room
... I really shouldn't
then national level of "clue" is extremely disappointing
 
!!dad
 
Is this pool safe for diving? It deep ends
 
Wes
@DejanMarjanovic because he's secretly italian i.imgur.com/9g1D2qY.jpg
10
 
Yay, university email recommends not doing any banking transactions via WLAN because of #KrackAttack.
 
@tereško Can you please rephrase this sentence?
 
11:40 AM
> there are too many uneducated "developers" in my country
 
oh .. got it
 
there was a typo in the previous sentence s/then/the
 
got it :)
 
@ircmaxell OK ty
 
@DaveRandom Does "ty" mean "thanks"?
 
11:51 AM
yes, "Thank You"
 
ah ok
 
12:03 PM
morgen
 
o/
 
\o
 
o/
 
@PeeHaa f5381c47.ngrok.io :D
most of the js functionality is out of order
:P
 
12:11 PM
> Too Many Connections
Just get a vps like a normal person
 
sorry.. :P I'm just tunneling my local server :D
try 3e473dd8.ngrok.io instead
 
Looks mostly fine to me I guess although won't work with translations because it's too small. But mralien is my gatekeeper in this project. It's all up to him
 
sure. he'll probably have some time since this thursday and we'll prolly sync up!
 
Cool
 
I'm trying to better inform myself against a vendor's excuses. They host our SSO portal. In the past, I asked them to disable SSLv3 from the server, but they said they couldn't because there are SSO applications that don't support TLS yet. I would like to read up on this to know if they're full of shit or telling the truth.
I'm not sure what to google to try and figure this out
 
Wes
12:26 PM
@Tiffany is starting to blend in with some proper nerd talk. i have no idea what she's saying and makes me feel a noob :B
 
@Wes SSO = single sign-on
SSO portal is another 1/4 of my job :P
It's not really a PHP question, but didn't know if someone might know
 
Wes
some pedantic security expert like peehaa probably
COME AT ME #KRACK
 
Anonymous
@kelunik that's good and proactive of them though
 
Wes
notice the tinfoil hat
 
what is krack?
 
12:40 PM
WPA2 vulnerability
 
@Tiffany pretty sure that's only IE6 so IMO that's no valid excuse - see ssllabs.com/ssltest/…
@Tiffany we've disabled it for all our public sites as well - no one ever complained
 
@Sjon yeah, SSL Labs was what I was using to test their site, and saw that SSLv3 was enabled. I've pressured them before about disabling it, but the excuse they gave me was that some of the services we SSO to don't support TLS, so they can't disable it yet. I didn't understand it well enough at the time, so I let it go. I started pressuring them again to get it disabled.
 
Haha mi piace molto!
:D
 
@Tiffany Yes I understood that. SSLlabs also tells you which clients don't support TLS
 
12:50 PM
is it just me or do we need a way to check for strictness in reflection?
 
So that is to say, the protocol is browser based, and not based on the connection to the application?
 
@Tiffany the sso-server supports a set of (ssl/tls) protocols. The client picks the best one. You want to have as little insecure protocols as possible, which is why you should indeed disable SSL
There aren't any relevant browsers that don't support TLS - so their argument is weak
 
@JayIsTooCommon No, it's bullshit. People should just watch out for HTTPS. The same attacks can happen by everyone on the network path to the origin server without the vulnerability.
 
@Sjon IIRC, there was one or two services that had not enabled support to TLS yet, but this was a couple years ago. I'm going to check each service individually then.
Thanks
 
Anonymous
@kelunik til
 
12:54 PM
@Sjon The server picks cipher suite and version.
 
@kelunik only if prefer_server_ciphers is specified
by default the client's choice wins
(in openssl, anyway)
the server gets the final say, but the default in openssl is to let the client choose
 
@kelunik p16.praetorian.com/blog/… is pretty relevant
 
@DaveRandom It's still the server's choice, it might just pick the first one listed in by the client.
 

« first day (2558 days earlier)      last day (2380 days later) »