« first day (2091 days earlier)      last day (3081 days later) » 

17:12
@Trowski, you still around?
anyone on here familiar with array_column?
hi
hello is her any one
Anonymous
yes
how to configure push notification in ios
I have an array that has multiple columns and rows. I have the var_dump on the page running fine. However, I tried to do an array_column and now im getting 0 results in the new array. Here is the array_column code if anyone can help
$serialnumber = array_column($batteryDb, "serial_number");
17:20
i have .pem file but
@samayo and implement it in php code
but i don't know where i am wrong
please any one can help me
@samayo
Anonymous
@ShaileshLimbadiya This is a PHP and you can ask about PHP. I don't know about iOS, but you should ask it in the main site and provide some code examples ... then share the question here.
Anonymous
I can't do anything with "push notification" alone.
im not asking about IOS, that was Shailesh
i am php developer
Anonymous
Yeah, corrected.
Anonymous
17:23
@ShaileshLimbadiya as it in SO.
how to send push notification from php admin panel
@samayo this is my code
I don't think you can do that from just a simple PHP page, unless you have some other service on the server that is executing it...
i have every think
i work on live admin panel
Anonymous
except a dictionary
Gon
Gon
Night o/
17:28
on ubuntu, how do i see file permissions
@virepo: ls -l <file>
is one way
thanks
Anonymous
@JustinSellers what's in var_dump($batteryDb);
a huge array dump
lol want me to post it?
Anonymous
17:32
Just the first sequence
ok one sec
Anonymous
Add it in your answer.
ok updating
I have just ssh into my ec2 server and when i do ls i dont see anything
however when i connect on cyberduck via sftp i can see all my file structures
17:34
ssh -i "staging-key-pair.pem" username@*****************.eu-west-1.compute.amazonaws.com
thats what i used to get in, any ideas?
@virepo, what's the output of pwd?
/home/ubuntu
arr
how do i get back 1 directory
man cd
its not letting me back
17:36
-bash ../ Is a directory
Have you ever used Linux or another Unix before?
no
I did try and connect to it using root@****** but it told me to login as the user "ubuntu" instead of root
so maybe user ubuntu hasnt got permission to see out of home/ubunutu ?
To go back one one directory, do cd ..
.. means up one directory
17:38
ah, thats got it :)
thanks dude
I would strongly advise reading how to use a Unix shell.
I will do, but right now I havent got the time to learn it and need to get someone up asap
but i do plan to learn all thi
only used shared hosting before so never really touched this stuff
Anonymous
@JustinSellers so you are trying to get the value of serial_number?
@virepo: The only reason I say this is because you will probably hit a permissions issue soon and you should probably prepare yourself by familiarizing yourself with using a shell.
yes thats what ive got now aha
17:40
@samayo, yeah im trying to get the entire column
im trying to update a file in cycberduck , but im guessing the permissions wont let me
-rw-r--r-- ,
how could i change that so that i can update the file
Anonymous
@JustinSellers That should be too easy. I don't know why you even bothered to ask..
Anonymous
Anyway, someone will give you answers
thats all i need today, and then when i get time over the weekend ill be looking it all up properly
@virepo: Do you use anything like telegram?
17:41
never heard of that
@samayo if it's so easy, then whats the answer? haha
Anonymous
My time is precious
@virepo: Do you understand what -rw-r--r-- means?
ummm. ok
i kind of do
read write execute
and the 3 are different users?
Anonymous
17:43
@JustinSellers if no one answers let me know
@virepo google for posix permissions
Well, no, the first set (rw-) is for the owner; the second set (r--) is for the group; the third set (r--) is for everyone else
yeah, i did start learning it about a year ago but forgot
how can i change it to rwx rwx rwx just for now
so i can update a file and then switch it back
Is your google broken?
@virepo: It won't work unless you own the file.
You cannot modify file permissions unless you are the owner.
17:46
PeeHa i thought you might just know it straight away instead of me searching to find it
lol , but ill google it
i should be the owner because its my machine :L
Wes
Wes
@Jimbo it's stakeholders -> its stakeholders. looks fine to me, would attend to it :P
@virepo: Nope.
how do i become the owner
@Wes But the apostrophe means owned by here, so the stakeholders are the owner of the business
by ssh in as root?
Anonymous
17:49
Evemong
chmod 777 .env
chmod: changing permissions of '.env': Operation not permitted
Wes
Wes
@Jimbo but possessive pronouns are without apostrophes :\ his her its..
@virepo: Most likely because you don't own it...
@MarkWeiman it wouldnt let me ssh in as root though
turns out my question isnt so simple
17:50
Please login as the user "ubuntu" rather than the user "root".
Wes
Wes
also ubiqutous -> ubiquitous, i spell it wrong too. can't we get a simpler word?
Because ssh login via root is a security risk...
so how can I do this
i just want to edit a file
Wes
Wes
@Jimbo i get the meaning though, i think it should be its but i'm an ignorant fool. you should probably ask someone who can actually english :B anyway good luck for the talk. will there be a video? :D
@Wes Nice, I've updated, appreciate that
If I get in, there'll be a video. I'll see if I can throw a Laravel bash or two in there as well
Wes
Wes
17:52
ha
laravels good :(
how to send push notification
into ios
what code is require for sending push notification into ios
this is php chatroom not ios
that i know
but what code to do in php side
i dont think you can
17:56
this is my php code call when i type some message and send
if possible then please help me
@ShaileshLimbadiya: You cannot just push a notification from an idle PHP script. You have to have another service running (something to run the script). Plus as @virepo said, this is about PHP discussion and it's likely no one here knows how iOS push notifications work...
yes that i know
@Ocramius In our previous discussion you were in favor of subtypes:
> ReflectionClassType seems good source
Why the change when voting?
18:24
"Yeah, let's have a last ten pints and three shots"

- my stupid mind, yesterday
Been there. Done that. 10/10 will do again today
Anonymous
@PeeHaa every night
@PeeHaa is that really that hipster? :-D I'm just going the simplest path down with least error potential
18:32
Do you own a mac? :P
Anyway really out now. Talk to ya laters
@PeeHaa
that kind of joke when you have no clue 'bout the effect
Your mother is a joke
Damn that one was bad even for me
Now I'm reeeeeeeaaaaally gone
user924016
laters
Anonymous
18:45
@PeeHaa It'll just be un-funny men talking atm...
speak fo' yourself. pfff.
@bwoebi I'd say it should be a fake closure
@NikiC why?
@bwoebi Because it's a method that incidentally happens to call a closure ^^
@NikiC hmmm fine
18:50
ReflectionMethod('Closure', '__invoke')->getClosure($closure) also gets you a fake one, right?
true
@bwoebi But not totally sure
Anonymous
19:20
For routing, Is there a correct way to get and remove the root directory from the request URI?
@Jay you write the root directory in your routes?
Anonymous
@FélixGagnon-Grenier But it would differ for live/local. Local localhost/projectroot/request - Request URI = 'projectroot/request'. Live example.com/request - Request URI = 'request'
nvm, can't read
I just change the root of my local server each time I change the project I work on
Anonymous
I guess that's a way around it, wonder what frameworks do though. I'll have a gander
I can't think of any sane / clean way of doing so
Anonymous
19:35
neither can I. I could just add a prefix option for routes I guess
I always get back to the thought that it makes no sense in any project to actually remove a part of it's uri. It kind of makes it logically necessary to wrap everything in my dev environment in some kind of project controller.
so actually.... it reminds me that @DaveRandom actually solved that problem some days ago.
random pings ftw
s/module/projects
wow, it actually took me two weeks to understand I can apply that principle to my other concerns. #howstupidamI
Anonymous
Hmm I guess.. Though Cake is never a good reference, their way seems real hacky
https://github.com/cakephp/cakephp/blob/master/src/Network/Request.php#L331
https://github.com/cakephp/cakephp/blob/master/src/Network/Request.php#L382
@NikiC ugh. this just doesn't work… I need to store the trampoline somehow and reinstall it later :-/
Yet again. The referee is an absolute cock.
Anonymous
19:50
It was slightly harsh ..
Anonymous
though his hand was up
yo folks
does anyone know how to generate a single non-utf8 character?
basically need to write a test that breaks json_encode()
nvm, found:
5
Q: non UTF-8 Character Set

Nitin TripathiOne of my requirement says "Text Box Name should accept only UTF-8 Character set". I want to perform a negative test by entering a non UTF-8 character set. How can I do this?

@NikiC I don't understand trampolines… UGH.
20:17
hey, is there any way to get ouptput from an asynchronous server script thru php or do i need to fix the script's callback
Would asking about get requests be on topic here?
20:38
@warspyking just ask, you'll just get ignored if no one wants to answer.
@Danack
@danack Well okay, I just wasn't sure if it was on topic
I was curious how a get request works when the browser isn't handling the result. What can be returned?
"when the browser isn't handling the result." - what is handling the result?
Nothing
Well
A result gets returned but nothing is done with it afaik
That makes no difference to the server that is sending the response. It doesn't care if anything is using the returned data.
20:41
Okay
The reason I'm asking this is because I'm worried you could potentially get a drive-by-download. But if nothing is handling what gets returned then this is not possible?
Why would you care about that?
I'm trying to find a security vulnerability in a program so I can report it
(If it exists)
btw - I strongly recommend people vote against wiki.php.net/rfc/session-id-without-hashing there's at least two scenarios where it would result in systems that are known to be open to attackers, with no mitigation against the attack - news.php.net/php.internals/94424
Just leaving the hashing code in place, but making it be disabled by default is far more sane.
Anonymous
20:58
XD
@Gordon your country sucks aarsch
@Wes hahahha
Anonymous
good game though
@PeeHaa Pff, that just was misfortune.
@Danack can't I just delegate the seasion atuff fixea to you and @Leigh
I am totes serious
if you copy and paste our votes, sure.
21:02
@bwoebi just ahucks
@Danack that can ve arranged
Can we talk in 15?
@PeeHaa What's that a word?
talk talk or chat talk?
eithers probably fine btw.
Webhook failed: Curl failed with error #0
Coolio @Danack
response 500 -- anyone know what issue i might be facing?
21:04
500 status means the server had a problem.
you should look in the logs.
appreciate it
thanks!
@Danack You do realise how much stuff is broken if any one of those CSPRNGs is flawed?
By that I mean, everything will be broken
That would be a more convincing argument if the same wasn't true for SSL, and the major flaws it had for years that no-one noticed.
I think your concerns are overstated. All of these CSPRNGs draw on a shared pool/state. Two major issues with your state leakage concern. 1) You don't know the state of the state when you began observing. 2) You don't know if any two observations were actually generated sequentially or not
google webcache has taken snapshot of someone's payment through CCavenue i can see clearly all his details ,is this security hole or something else?
21:16
@bwoebi Bird is a the word
@Danack @Leigh But what is the reason for even a potential leak in there?
@Danack I've just asked a crypto dude (yes, seriously), he says go ahead and expose urandom directly
@PeeHaa Do you mean why do they want to remove the hashing entirely, as opposed to just disabling it?
Anonymous
5 hours ago, by Wes
germany will crash france
Anonymous
@Wes what was that?
That was your mother @samayo
21:20
@Leigh can you ask him "doesn't still hashing protect against bugs in the software/hardware?"
@Danack I mean: what is the real benefit of directly exposing the thing that comes out instead of hashing it
Or just when it's been deliberately weakened.
@PeeHaa it's a bit faster.
Saves doing the hashing.
real benefit
I get that, but what do you really gain
Anonymous
@PeeHaa eh you and mothers. Do you hate your mother :P
I am trying to see the bigger picture here
21:22
that's it.
Anonymous
Nobody could hate @PeeHaa's mother..
hashed is what in terms of request (whether http / cli / or anything else) time?
Except maybe reduced code complexity - there's no reason to remove the hashing code.
That's ^ exactly the side I am on cc @Leigh
Anonymous
@JayIsTooCommon I'm going there next year, because I met @PeeHaa mother via facebook.
21:25
@PeeHaa I think just a single SHA1 if that is the hashing function used. Or just a single MD5 if that is what is chosen.
I feel like there is no sane reason to remove it from a user pov
geees that's tiny
I get that a lot
ok
Why?
Anonymous
21:26
xD
@Leigh hehehehe
And are better off why?
@PeeHaa something something I don't believe all contributors to open source software are as sane as they could be.
@PeeHaa better off than fiddling with it
@Leigh Fiddling with it how?
@Danack 90% I am not sure whether I am not sane or the world is not sane
Which grants me the rights to ask potential stupid questions
I am not trying to be an ass @Leigh. I am actually curious how hashing the thing is fiddling with it
@ScottArciszewski halph
Because it doesn't add anything, and you're possibly even lowering the entropy / introducing the flaws of the hashing algorithm
21:33
@Leigh You would still need the original whatever the hashng algo
That's not entirely true btw ;-)
Gimme 1 minute. Getting beer
CSPRNGs are literally stream ciphers right, designed to be indistinguishable from a stream of true random
One downside of that is they can't be checked for fucked-up-ed-ness easily. It's a lot easier to test if a hash function is working or not.
@Danack But do we really know hashing algo x hasn't failed yt?
sorry. hold on
Damnit. It's one of those typical Yasuo rfcs for me
On one hand when I read the rfc it makes sense on the other WTF is dat
The hashing algorithms won't fail for this.....there is no way for an attacker to have control over the input to the hashing, so deliberate hash collisions aren't a concern. (at least as far as I can see.) hashes will be a bit less random than the CSPRNG probably.
But they protect against when the random number generator either has an accidental flaw in it, or when someone deliberately puts one in.
(defense in depth and all that...)
21:49
but the output of a CSPRNG is basically a hash of the state, a cryptographically secure hash
Related: when the *rng is boken we will have a huge fucking problem either way right?
yes, the earth will implode if someone finds a way to predict urandom
So it's either foo/0 or csprng
the thing is, with these kernel based CSPRNGs the state is constantly being mutated by environmental factors
it's not like one of these RNGs where it will produce the same output for the same seed
@Danack tbf I think I had the exact same concern and voiced it with @Leigh about random_*
With the same outcome
I tried the search chat but it's unearchable
With an s ^
@Leigh Kinda related, but what about windows?
21:57
@PeeHaa Microsoft hasn't documented the full list of entropy sources for CryptGenRandom - safe to bet it gets some from system performance counters though
That's at least one I know of where it is was utterly broken
Anonymous
@Leigh really? I thought random number generators relied on fan noise or something
@Leigh But that thing used to be broken because of a "mistake" before
Anonymous
totally uneducated guess ^
@samayo it does, kinda :p
CryptGenRandom is a cryptographically secure pseudorandom number generator function that is included in Microsoft's Cryptographic Application Programming Interface. In Win32 programs, Microsoft recommends its use anywhere random number generation is needed. A 2007 paper from Hebrew University suggested security problems in the Windows 2000 implementation of CryptGenRandom (assuming the attacker has control of the machine). Microsoft later acknowledged that the same problems exist in Windows XP, but not in Vista. Microsoft released a fix for the bug with Windows XP Service Pack 3 in mid-2008. ...
urgh, click the link, goes to the list of known sources of input
21:59
Which again raises a valid point of ackroyd
Anonymous
I have read the only true random number generator is a server based on Switzerland fourmilab.ch/hotbits
depending how deep you want to go, do you think background radation levels and space radiowaves are necessarily random? :p
I'm pretty sure I've gone deep enough to notice it's not random enough. It's not like it's 11 on a scale of 10 or something
Also these things reseed regularly, usually after X seconds or after Y bytes have been consumed, whichever comes first
Anonymous
I'm off, G'night o/
22:05
I'm pretty sure I have asked this the last time: what about: what about after reboot
@JayIsTooCommon nite jay
@PeeHaa redundant text is redundant
@PeeHaa what about it?
@Leigh nvm I just found your link from previous questions about entropy after reboot being pretty much sufficient
by the time PHP is up and able to do things, you're way past well seeded
Can I ask / say somethign stupid? @Leigh @Danack
C'mon encourage me to say stupid!
Anonymous
I will answer your newbie question
22:10
Well, tqbf is right, and that's what PHP does :)
at least, php_random_bytes()
which to users is random_bytes()
!!urban tqbf
whatchoo talkin bout willis
twitter tqbf
I don't know if he uses SO at all
Oh the handle
I didn't want to accidentally tag someone else :P
tqbf = True Quantified Boolean Formula
not unlikely to be duplicated by someone else
also, "the quick brown fox"
22:12
jumps over wat!?
22:29
!!is today Friday
Let me think about it … wait … yes … well actually, no.
22:43
Hello
trying to use mysql on my ec2 server
but cannot get in
doing mysql -u root
and getting ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: NO)
23:04
Is this sentence correct? (English perspective)
> "You have sent lot of requests to reset your password (we've sent you emails for over limit). try it later"

« first day (2091 days earlier)      last day (3081 days later) »