« first day (2274 days earlier)      last day (2896 days later) » 
00:00 - 17:0017:00 - 23:00

17:00
it happens mostly in DVM
I probably have and just haven't realised, what happens and what is shown in the logs?
DVM?
@RevanthGopi Rejected for 11:1 q:a ratio. Please contribute to the community a bit more before requesting again.
Oh, BLE and Sammy runs away
The discovery is reliant on more things than just the advertisement interval though
Dalvik Virtual Machine
17:00
Who's Sammy?
I don't use that
Mark, look at the device he is talking about
17:01
lol
ah lol Samsung
It's been the root of all my BLE heartaches
nice weekend all o/ bye
@TimCastelijns I noticed in your answer which you linked you only have onLeScan, do you not have ScanCallback?
See ya Tim!
I remember from my one foray into Bluetooth and Android that I had an easier time hooking up a Chinese Bluetooth soc to a Taiwanese temperature sensor (neither of which had English documentation), than to make a mesh network at a hackathon with 3 Samsung phones
3
17:03
see the question mark
> I use a LeScanCallback (can not use the newer scan methods because I'm developing for api 18.
ah, I only looked at your answer haha
but since then I have upgraded to minSdk 21, and the issues are all the same
My minSDK is 19
0
Q: Facebook Instant Verification is not verifying mobile number via facebook app

TGMCiansHi I am implementing Facebook Instant Verification in my application. In my application, I am verifying mobile number of customers, for which I am sending OTP to get this verified. I want to change approach as recently Facebook launched with a concept Facebook Instant Verification which verify ...

Facebook team confirmed bug in their SDK via mail
I tried to reach them, finally they replied today
they hinted that sometimes their SDK is unable to find out whether facebook app is installed or not on device
@RaghavSood why is Samsung so shit and yet so popular?
17:08
so things are not working
again it is random kinda issue
@MarkOSullivan94 fuck samsung
poor performance and bugs
Carl never showed up so I had to make myself go get lunch.
It's cheap
@harvey_slash Welcome, on probation. Read, confirm reading, and follow the room rules: room-15.github.io
Samsung has the advantage of being an already established electronics company. So when Android came out, they were easily able to provide confidence
And a few of their high end and some low and phones are actually really good
It's just that their software is bullshit
Battery also sucks. The battery blew up and a person thigh ripped off. Was all over the local news..
17:30
fuck this
i swear so much shit lately just breaks
Try doing production edits over dial up
It'll make you feel better about today
ok ill own up to this last one it was me
but other stuff has been behaving so weird
quick question : how do you guys secure android app ?
In what way?
I am using SSL Pinning, still some tools are there which can help atacker to see your http request on network
17:39
i put an image that says WARNING HIGH VOLTAGE on the code
so people are afraid to touch it
and can modify then send to server
thats also the way i hide my money
Is there a good web development room on SE?
worked on AEPS, eKYC kinda projects
hm, there's no way in Google Play Music app to remember the playback position when switching between albums/playlists, is there?
17:40
where security plays a very important role
I should write an app for that
Certificate pinning can also be removed if someone edits the APK
good luck cygery
Truthfully, there's no way you'll defeat all of them
yes
I experienced also
17:40
google play music is not open at all
You can put an RSA public key in your app and encrypt everything before you send it
I have 13 users on my new Chrome extension :)
That'll stop MITM folks
TGM nothing you are working on is big enough to worry about security like that
But then someone can just decompile your app and see how you construct the requests
17:41
yes
And then pull out the public key, and send fake requests anyway
and if it becomes that big you will be able to afford experts who can help you with that
so for this I am using some kinda so native file
keeping keys there
72 users on my other extension
Honestly though, if you're big enough to worry about this kind of issue, you're big enough to get the people who can deal with it
You can get into an so file too
17:42
so would be pretty difficult for attackers
my product has over 30 million users on it and all we do is https
I know
yes
20 on my other other one
Pretty difficult won't save you from someone who wants to get in
haha
yes
17:42
if someone wants to get in they will in almost all cases
need to secure too much, as this is banking app
code obfuscation will help
have done checksum also
it helped a bit to us
there are some existing patterns for financial transactions
RSA like what was mentioned
17:43
which would probably helped N26
If it's banking, follow the standard procedures. 2FA, sessions expire in 5/10 minutes, require authorisation from a standalone OTP device, RSA everything, duplicate every single validation and more server side and so on
Following best practices will usually get you to a point where random people can't get past
correct
Beyond that, if you have state sponsored, or the really, really experienced people coming after you, then you need to be going back after them
Passive security isn't an option at that level
Hope you have seen BHIM app
Heard of it, haven't used it yet
17:45
same kinda app spice has developed
I'll give it a shot when I'm in India next
raghav are you saying go on the offensive lol
hmm okay
Damn right. They hack you, you hack them right back
ddosing russian warehouses
17:45
i have tried it. Unfortunately not available for my bank SBM
When life gives you Russians, you must become the Winter
are there any russians in this chat
My goal is to be a walking PRISM program by the end of this year
I should be able to meet someone and already own them
no russians? ok lets shit talk russia and russians
lol
Also side note: You can be at the state sponsored level and still be a complete moron like the guy who set up a Presidential candidate's email server in a basement
17:47
JMR - 30M users ???
Don't do that, it's not good practice
yea, not all on my platform
thanks to that dude ww3 is gonna start
@TGMCians some one posted on the android group Storing secure information using NDK. facebook.com/groups/blrdroid/permalink/1233535710029642
yes
we are using same
may help
JMR - That's incredible, the achievement feeling should be awesome :D
the biggest app *I worked on* has after 1.5years around 400K users
17:53
thats not bad either though
it all takes time, when i started working here the android version had <50k users and now its like
wow 30m users
2 million actives 5 million downloads or something
ios is a bit larger due to market share in US
and then a ton of web users too
im the head of mobile dev but i have some spill over into web sometimes as well
nice
@TGMCians which company you work for?
Spice Global is an Indian conglomerate headquartered in Singapore. The company operates in the sectors of telecom, finance, entertainment and technology. They operate internationally in Los Angeles, New York, Kuala Lumpur, London, Dubai, Nepal, Bangladesh, Uganda, Tanzania, Zimbabwe, Sri Lanka and Shenzen. In 2014, the company's aggregated assets totalled US$2 billion with over 10,000 employees worldwide. Spice Global is planning to offer full-fledged banking service, with focus on smart banking, which is showing a 227% annual growth, to its customers. It has applied to the Reserve Bank of India...
174
Q: A Post-Mortem on the Recent Developer Story Information Leak

Tim Post We'd first like to take a moment to thank everyone for their patience while we put this together. Your restraint was a very big help in us handling this incident with the degree of diligence that all of you deserve; thank you for waiting so patiently as we worked to resolve it. tl;dr: On 20...

leak everywhere^
ohh spice nice
17:56
i didnt fill that thing out
me too :)
but reading that did make me want to google my phone number
nothing
theres someone else with my name who is like
C-tier famous
Eh, I keep a separate number for close contacts
my same spelling and everything
I gave up on hiding my number long ago
17:58
so when i search my name its all about him
So I have one that I give out myself now freely
lol
nice
bye guys. Cya.
18:07
o/
Raghav what's a good talk for me to give at a conference?
And don't say keystores 101
Which hackathon?
conference
I'd like to submit a talk proposal for droidcon boston
Hmm. Something security related. Or something performance related
18:09
hmm
wow
has technology gone too far fast?
the booms are cool but honestly that like cloud/wave around the plane when it hits that is what's really interesting to me
It's called a Vapor Cone
8
Q: What happens when an aircraft breaks the sound barrier?

Gabriel BritoWhat happens when an aircraft breaks the sound barrier? Why can't it break the sound barrier near the ground?

Adam - Or something speech recognition related
I've been working on this lately, there is a lot of stuffs to do/improve
18:16
hmm
The google API is buggy but pretty powerful, you can workaround a lot of bugs
works on offline / online
Almost impossible to do a continuous listening because of there crappy bips and restart delay

PocketSphinx is good works offline but tougher to use, you need to provide acoustic models
but provides continuous listening out of the box
and other vendors such as sensory who focus on continuous listening and trigger commands, they're the one training the models for you etc..
anyway, it's pretty rich
That sounds kinda cool.
yeah, but I wished google lib was more stable, some blocking bugs are still opened since 2 years, they break it sometimes after a new release....
it's a nightmare to have your whole business logic around it
yeah I bet
18:40
@piyummadusanka You need at least 80 rep to talk here, and 20 rep to talk in any chat, among other things: room-15.github.io
When do I unlock your picture?
I've overused that joke now.
Lol
I literally have no recent photos of my face
I detest being in photos
lol adam
I'm so fucking tired pardon my french omg
Well, yesterday now
18:56
lool
new hackathon idea
hit me
loool
oh wait you're talking about the hat
yeah, that's the obvious conclusion in the context
18:58
Maybe he wanted to do a hackathon project to unlock me
Yeti Vader
19:18
0
Q: How to install Android Studio from cli

JosephMCaseyI am curling the latest Android Studio dmg file, mounting the image and copying the .app directory into the Applications directory. When I attempt to open the directory I receive this warning, and when I query the application state, I also receive the code below. Any idea how I can generically in...

19:42
hey chatroom
o/ JMR
in an adapter is it worth it to initialize colors in the constructor and serve them up when loading items
o/ jmr
rather than going getColor() on the fly
or is the speed trivial
i forget
i think they are cached
so it is trivial i guess
19:44
sweet thanks
@karl don't prematurely optimise. It's not a long running operation, and given the param is an ID, it's likely a simple lookup. Resources src if you wanted to have a look — ataulm Mar 26 '14 at 19:55
People who have done coursera courses...are only some free or did they change it?
I thought they were free but a coworker just tried to sign up for one but it took him to a payment screen
Some are paid for the final certificate exam or something
But he was just trying to sign up for the course. Not the cert
I thought you could take them for free then pay for the cert if you decided to take it. I've never done one
Dunno. Maybe they changed it
19:58
I dunno either
Idk if colors are cached or not but I do it in constructor for simplicity on my end, but I guess we're all different as to whether or not that simplifies things.
I know several people in here have taken them so I thought it would be the place to ask :P
I think they changed last year to a paid model
some old courses were grandfathered to be free
lol cM
Why is that funny?
thanks
CM - some are completely free and they give you an attendance certification, some are free but the certificate at the end is paid, some are paid, and lately some follow a monthly subscription model
20:17
good night
I see. Thanks, Mehdi
Good night, cygery
20:49
I'm looking into how to intercept calls from an app :
- either blocking them when the app is in front or
- delegating the call "answer/reject" to the app without having the native call screen or ringtone.

So far, I found that there is almost no way to do that cross-smartphone-vendors and cross-android-versions (I'm targeting min SDK 15)

is there no generic way to do this?
filtering a user's call doesn't seem to be to be a desired use case, simply for security concerns
Hmm... I see, but why would the call related permissions be useful for then?
to start calls via your app
that sucks..
Thanks!
21:48
o/
22:08
\o
ello friends
westworld is awesome
if you've not watched it
watch it
I started watching it last weekend
only two episodes in
I watched the movie a while back and it was awesome, even though it was from Carl's time (1973)
it gets really good as it progresses
carl's time LOL
the movie?
there's a movie to it?
yea the series is based on the old movie
ooh didn't know
which I happened to randomly watch on TV one night
22:12
I might watch it, but I find it hard to watch stuff that is so old
it's pretty good, give it a shot
you'll recognize some of the characters
oh sweet :D it has the same characters?
that sounds really good
yea I actually stayed up really late to finish the movie lol
22:35
:D
00:00 - 17:0017:00 - 23:00

« first day (2274 days earlier)      last day (2896 days later) »