« first day (3898 days earlier)      last day (1039 days later) » 
07:00 - 16:0016:00 - 23:00

4:00 PM
@MwBakker can not upload to the R15 folder...
 
really?
 
Tim
xD dave
 
@DaveS asked her out in a non autistic way, she said it sounds nice but she can't this sunday thus I offered to cook for her next wednesday
and here is where I got left on read
 
tough, would be easier if she outright rejected you or outright accepted
 
"what if's are the worst"
 
Tim
4:04 PM
what if there were worse things
 
I would try to avoid invitations to a private place on a first date though especially after you were just super awkward
 
Tim
this is also something that super seducer teaches
 
when you guys want some professional opinion about something but you hesitate sharing it with them before it is launched/released, what do you guys do?
 
Tim
say you are asking for a friend
 
@DaveS come on the invitation was vague, but not super awkward and cooking is always my best move on first dates
 
Tim
4:08 PM
they won't realize it's actually for you
 
@asim I thread them not to spread the info that is required
 
@Tim that doesn't work on smart people like you
 
@Tim lmao
@MwBakker in this instance since you're not a stranger, a cooking first date seems fine, but most strangrs would decline that I think
unless they're DTF
 
it never got refused so far
 
yo
 
4:13 PM
really?
I've had so many girls turn down meeting at my place for a first date
I stopped offering and just do a bar date now
the ones who say yes are always the lonely ones
 
I offer to cook at their house but usually it becomes my house by her choice
 
this room has turned into dating 101 lol
 
yes, learn from it for a head start
 
hahaha
 
@JBis as a legend once said, you will understand when you gonna hit puberty
 
4:16 PM
stolen joke
 
ban him
 
how about now xD
 
maybe jbis is asexual
 
@asim 👌
@ballBreaker no im just not talking about dating on r15 lol
 
4:19 PM
hmm
you talk about it elsewhere?
you holdin' out on us bro?
I'm fine talking about other stuff, mwb just loves to share
and its more exciting than anything programming related imo
 
nah go ahead, don't mind me
 
opinions needed
 
logo for a barber shop?
I like
I like a lot
@MwBakker you should take asim out on a date
 
Hey BB, JIBI
 
heya dude! o/
 
4:25 PM
o/
 
@ballBreaker yep but not a shop, its for online store that sells these products
 
@ballBreaker thanks nederbro
@ballBreaker xD
 
Word word
 
Sentence
 
So, I've had this defect for like... 4-5 months
Tester hasn't been able to get her location in a map built into our product but only on one device
We asked her to check she has location permission and she does
I ended up having to build this huge debug UI for her that only appeared for her in the production app as that's the only app she would test
 
4:29 PM
and she didn't have location services turned on the whole time?
 
Eventually asked her to see if she had location services? Yes. Asked her to get her location in Google Maps
Google Maps "Asked her to turn something on" and now everything works
... And I'm like... What the hell did she need to turn on that isn't a location permission or location services?!
So now we have to figure out what that is and put it into our map so we can request the same thing XD
 
yikes
that's an annoying one
 
So now we don't have a repro defect, and we don't know what the problem was, but we should fix it XD
 
just threaten her to reset her phone so you can see exactly what was required
 
the problem was her, 100%
delete her and recommit
 
4:33 PM
:d
Talking about deleting people - want to know something scary (and something kind of over sharey)
 
yes
of course
 
That could have gone either way
 
ahah
 
So - I needed to come over the anti anxiety medication I'm on because of a side effect
And I've basically tried every anti anxiety group by now :P
 
"come over" ?
 
4:35 PM
And I'm now moving from the anti anxiety to an anti psychotic that as anti anxiety side effects o.o
 
like ween yourself off of it?
 
And it's screwing my brain up X.x
Come off**
 
yeah I know a few people on anti-psychotics and they always seem to be a little different after
 
some people are like "hey, my car is not working can you fix it" you be like "what's not working does it make any sound or what" -- "nah its just not working" -- "what happens if you turn the keys" -- "it does not work".........
 
they slur their words a little bit, like they're fighting through a fog
My anti anxiety meds are ADHD meds believe it or not
I'm on Strattera (an SNRI)
took it for ADHD and it as a pleasant side effect entirely eliminated my panic attack disorder
 
4:37 PM
Nice! I'm on something else for my ADHD
 
😳
 
a stimulant?
I took ritallin for a bit but it cranked my anxiety up MASSIVELY so I switched to something that isn't a stimulant
SNRIs suck for withdrawal though, if I miss a day it's insanely bad
like.. .suuuuuuuuuper bad
definitely the worst aspect of it, not that I miss many days, but the fact that if I crashed on a desert island somewhere I'd be dead because of it probably
anyway on that lovely note, summer hours, so I'm outta here!!! Have a good weekend everyone :) my birthday on monday so I have that off as well, might stop by for the birthday wishes though :D
o/
 
@ballBreaker don't hold your breath, wishing you a sad, not belated birthday
 
@DaveS your opinion matters, Please take a few seconds to scroll up, together we can save lives
 
Happy Birthday BB
Yeah, I have huge problems when coming off anti anxiety - it's not actually a withdrawal symptom it's actually a disorder that happens due to a cascade of brain chemicals. Only some people are susceptible to it.
 
4:48 PM
you should take more drugs to help with that
 
I had to get off adderall because it made me overfly fixated on stupid shit and turned me into a shitty person. I just cope without. thankfully my symptoms are mild enough at this point in my life that I can function.
 
Yeah, that's fair. You could say my ADHD is not a lack of ability to focus, but my lack of ability to control my focus. Hyperfocus is a thing. My meds have given me better control, but I still sometimes hyper focus or find it hard to focus.
 
Yeah, just off meds I'm forgetful and struggle with focus but also laid back, patient and forgiving
and I lose those good qualities on adderall and haven't wanted to try anything else
everyone's a bit different
 
@DaveS And hot. Just saying.
 
lol
 
4:58 PM
My anti anxiety are what help me be a nice person
Yesterday I attacked a vacuum, threw lumber into a wall, fell on my ass, screamed expletives for 15 minutes and stabbed myself with a drill
 
ouch
 
Tim
5:16 PM
@asim not bad reminds me a bit of WWII axis logo
 
Half day summer hours here too :D Later guys, see you Monday
 
later graeme
 
Tim
6:04 PM
Later G-rocket
 
6:16 PM
 
no
 
@Tim Now it exactly looks like that
@DaveS yes
 
oi
@ballBreaker lol
 
it looks like a fidget spinner designed to take your finger off
 
true
 
6:25 PM
> Beginning with version 3.0.0, you may specify --max-delete=0 to
be warned about any extraneous files in the destination without
removing any of them. Older clients interpreted this as "unlim-
ited", so if you don't know what version the client is, you can
use the less obvious --max-delete=-1 as a backward-compatible
way to specify that no deletions be allowed (though really old
versions didn't warn when the limit was exceeded).
big oops waiting to happen
 
what context?
 
rsync delete options
 
link to win11 wallpaper, switched to this wallpaper after 8 years using the old one
 
anyone?
 
we don't read books anymore in my country, only ones required for the classes
I have 3 drill machines but whenever I see one online you have no idea how I stop myself to buy it
 
6:44 PM
People on twitter ruin everything. Long story short, someone at HBO Max accidentally sent a test email to like 40 million people. HBO Max tweeted about it making a joke "... and as the jokes pile in, yes, it was the intern. No, really. And we’re helping them through it. ". And then everyone attacked HBO for blaming the intern.
 
too easily offended these days
 
Now people are calling for HBO to apologize and integrate "mistakes are ok" into all their new orientation material using this incident as an example
 
intern as a position, not a person
 
twitter is a cesspool
 
facebook is a cesspool, twitter is more of a gas station bathroom
 
6:47 PM
well the system works
 
7:11 PM
this looks nice
 
i can't take an os seriously that still uses icons from the 90s
 
as an example?
 
can't find the tweet but there are many examples deep within the os
 
well let the icons be the problem
 
Anyone here familiar with unix sockets or ipc in general?
 
7:28 PM
nope
 
Tim
8:10 PM
I forgot about that along with everything else I learned in school
 
surprised you learned about OS features in school
we focused more on conceptual stuff
 
8:33 PM
damn i have no idea how to solve this :(
 
what's the problem?
maybe unix sockets are the wrong solution?
 
@DaveS I am trying to have two separate processes. One is a privileged background app. The second is the GUI frontend app that is used to configure the background process. I am not sure how to have them communicate securely without creating a privilege escalation vulnerability.
I think this is called
In computer programming and computer security, privilege separation is a technique in which a program is divided into parts which are limited to the specific privileges they require in order to perform a specific task. This is used to mitigate the potential damage of a computer security vulnerability. A common method to implement privilege separation is to have a computer program fork into two processes. The main program drops privileges, and the smaller program keeps privileges in order to perform a certain task. The two halves then communicate via a socket pair. Thus, any successful attack...
I have no idea how to do that
 
Tim
8:49 PM
forking, or?
I mean the wiki explains how to do what you want, in concept
 
it explains how to create the elevated permissions process but not really how to communicate with it
 
Tim
via socket
 
have you heard of the loopback address?
 
yes, but how to you authenticate it came from your app
 
have you heard of encryption?
 
Tim
8:53 PM
it already knows because the fork knows who its parent is
 
authentication != encryption
I could use some type of digital signature, but that feels like its not the wrong way to do it
 
you need to provide a secret that can't be easily read on the loopback that authenticates your UI with your background service
hence encrpytion
if something has your private key AND can send arbitrary messages on the loopback interface you're already in a world of hurt
appropriate permissions should protect you against anything short of a rootkit
 
What exactly are you suggesting?
If you have background listening on loopback, how does it authenticate the frontend app?
 
you can add a signature to your messages but simply encrypting them and salting them should prevent other services listening on the loopback to gain unauthed access
you still might have the risk of replay attacks but not sure how useful that could be in this case
 
both would work, yes
@DaveS add a nonce/timestamp for that
 
9:03 PM
but if you just sent the signature without encryption it would be easy to listen to the message and decode
 
The only problem is anyone can access the private key.
 
why?
 
Where can you store it so only fontend app can access?
 
you should be able to generate it in memory or store it with permissions only for your service
essentially making it so only root users can access it
 
What permisions? If you set it to user permissions any other application can access that.
You leave yourself open to a privilege escalation attack
 
9:05 PM
you would restrict it to a user you start your app in that regular users don't have the permission to be
 
Yes but any process owned by that user can access the key, e.g. a malicious process
 
only if you make it that way
 
I am not understanding
 
1. Create a user for your UI that other users can't just be
2. Restrict the private key to just that user
you'll need to do some research to figure out exact steps but it's a common thing to do iirc
 
Hmm. Didn't think of creating a separate user.
That might work but then how does the user 'dave' start the app as the new user
 
9:12 PM
that's what you'll need to research but I'm pretty sure it's common practice to restrict permissions for files to specific executables or users
so you'll need to do some linux research on how to restrict your private key to your program without exposing it to the general user
a sudo installation step can typically make that happen, maybe even without
 
users yes, i don't think its possible to restrict with executables
 
0
A: How to allow non-root users to run certain programs (for example the KDE app store) without root

RalfFriedlYou can use sudo for that. You can specify what users are allowed to run commands, what commands can be executed, and whether to ask for a password of not. See the manual for details. If you don't want to that users have to type sudo in front of the commands, create aliases in /etc/profile for t...

so you could give them permission to start your program but not access the file
but that might not quite workout
wondering if you could restrict it to only starting your program as the user and not adopting the user
might have to experiment there
 
I've been reading a bit more
I think it's only possible to do using notarized/signed apps on macOS and Windows. As in, Apple signs your process and then the privileged process checks to make sure the signature is valid.
 
I think you could use setuid and the user solution which will protect the key from other programs but not the user
it just allows the user to assume your new user to start the program
 
9:29 PM
I'm taking a look at setuid
> Older software sometimes sets the setuid and setgid bits for the executable file, and sets the owner and group of the file to the privilege level it needs (often with the root user and the wheel group). Then when the user runs that tool, it runs with the elevated privileges of the tool’s owner and group rather than with the privileges of the user who executed it.
> This technique is strongly discouraged because the user has the ability to manipulate the execution environment by creating additional file descriptors, changing environment variables, and so on, making it relatively difficult to do in a safe way.
 
yeah it could be "safe" if you limit your commands to be not that dangerous and just use a limited permissions user
but if you want it to be fully safe, linux isn't your OS
users have to kinda take responsibility for their own security on linux
 
hmm ok
thank you
@DaveS hmm, what if i stored the key in the user's keychain? They would need to authenticate at launch for the GUI app to retrieve it and then it would keep it in memory throughout the session.
 
9:45 PM
yes that would work
 
\o/
 
didn't realize linux had a keychain
but we do similar things for mobile
 
in fact, i think macos allows permission for processes that create the key so i might not even need to authenticate on launch
 
sounds good
 
10:35 PM
Ribbit!
 
07:00 - 16:0016:00 - 23:00

« first day (3898 days earlier)      last day (1039 days later) »