« first day (3001 days earlier)      last day (2171 days later) » 
02:00 - 18:0018:00 - 00:00

18:00
wow it's down to 3k?
yeah
it makes me so happy
@Ahmad yeah they were attaching an auth token to their email links that automatically authed anyone who clicked the email link without a password or 2fa auth mechanism
@DaveS interesting - i've seen a lot of website do that tho
It should have been a $500 or $750 bounty but "because it was behind the email account credentials" it was low priority
well when my CEO sent us an example lyft receipt I could log in as his account
it's a pretty big hole
18:03
OH F
big f
holy f
I even tipped the driver a $1 just to see if I could and his card got charged
I could have changed his password deleted the account whatever, full access
LOOL
this is insane
the bounty definitely should have been higher
They should've hired you
LOL thanks for saving us millions of dollars and/or the company, here's $250
18:05
lol I found it by accident
doesn't matter
you found it
yeah
Oh hey, I find tons of bugs on AS by accident, I don't get a single penny for it
i did get all sorts of private invites to various bug bounty programs I didn't use
including OkCupid
you get rewarded with the joy of being allowed to do android development
that alone is fulfilling enough
that one is just adam testing your hacking skills dave
18:07
@Ahmad They've actually replied me, I'm surprised
they have blessed you
you have been deemed worthy
user image
2
@Dave
lol mauker
First starred meme of the year
I should get a medal
18:24
Lmao
I've waited until that moment, I'm an evil genius
@Mauker lol
o/
Do you guys use ListAdapter instead of RecyclerView?
I saw this on yt, the guy used it for animations in the recyclerView
18:40
Nope
RV all the way
It's for RV
And how do you deal with animations?
looks interesting
depends 100% on the UI elements and animation grrigore
Yes, it's for RV, but not the classic RV
This thing animates things a little bit, check it out
But I think it's quite too early to use it
As it is in alpha-1
RV is animated by default
the animation in the video is the default animation for notifyItemMoved
or position changed whatever it's called
18:50
^
It won't animate like that only if you call "notifyDatasetChanged()"
Which you should probably not be doing
Yes
That's why he used ListAdapter
So it's either ListAdapter or other methods
like Tim said
last time anybody used listadapter it was 2011
this is a ListAdapter of RV tim
do you mean RecyclerView.Adapter
18:55
it's like a wrapper of RV kind of I think..
it's an extension of that
its a default implementation of RecyclerView.Adapter same as ListAdapter which was a default implementation of ListViewAdapter
The ListAdapter in question is an extension of RecyclerView.Adapter
these guys said it better :D
oh so they named it the same
18:56
looks like it's designed to smooth out the recyclerview learning curve
yeah, strangely
not confusing at all
hehe
RecyclerViewListAdapter would be better
> including computing diffs between Lists on a background thread.
I think it's useful for LiveData
As in the example
And now the newbie question: would you use it?
it depends
I think it's quite good, you get rid of notificationItem.. and it uses DiffUtil
So for simple recylcerView I'd use it
but what about the more complex one..
and I think there is no need to use this if you only display a RV
19:44
I'm going to start a Material Design Data Table View for android... someone here would like to join?
I've most of the functionality done
but I'm using compound layouts to achieve this and I would like to extend RecyclerView instead
@DaveS nice catch! :D
try {
  Dave.bugHunt()
} catch(nice)
syntax error
Undefined symbol "nice"
missing catch '{'
Dave.bugHunt ()
also forgot the space there
20:00
Unable to call bugHunt() on non-static class Dave
Fred Mcgiff requested access. Rep: 53 - Questions: 1 - Answers: 1 (ratio 4:4)
!reject
@FredMcgiff you currently do not meet the requirements to chat here. You can find our requirements in the rules.
@Mauker GRADLE BUILD FAILED
@RaymondArteaga OH NO
20:01
Heads up about hijacked libraries
18
@CarlAnderson I thought this was gonna be about the time someone managed to publish a version of the support lib with the same package name and AS told everyone there was an update and they switched to one that wasn't really produced by Google.
wow this is insane
Is that possible?
@RaymondArteaga WOULDN'T BE THE FIRST TIME
@DaveS And won't be the last
20:06
Yeah it's pretty bad
Is maven affected by this "bug"?
no, just jcenter
Thanks for sharing this, Carl.
@CarlAnderson Holy crap that's awful. Thanks for sharing.
This is very very bad
20:12
I never liked to add jitpack lmao
But still wow.
woah
thanks for sharing carl
beware of fishy libs creator i guess
and also dont always trust the stars on a repo xD
it's not a fishy lib, that's why people fell in that trap
The lib is legit CF
someone hijacked it, took advantage that he wasn't using JCenter and published a modified version of it
the original author had nothing to do with it, that's not the problem at all
ah got it
i thought the culprit was the original author himself my bad
holy shit @ that article carl
20:18
What's the Gradle's behavior when resolving dependencies existing on more than one repo?
first come first serve i guess?
Yes ^
time to move jcenter to the back
posted on January 03, 2019 by David Castro

Android Studio 3.4 Canary 10 is now available in the Canary and Dev channels. If you have Android Studio set to receive updates on the Canary or Dev channel, you can get the update by choosing Help > Check for Updates (Android Studio > Check for Updates on Mac). Otherwise, you can download it here. This update includes fixes for several bugs, including the fol

20:21
I just want to see 3.3 stable :(
I want the new assets navigator
i want to see lagless AS
I want the bug I reported solved
I want a raise
20:24
Get one
Same
Threaten them with resignation
Can I have a raise, my prince?
I thought we were just asking for things, you know putting it out for the universe
I want to be Indian royalty, please adopt me my prince
can I ask too?
20:25
xD
@ColdFire Then you need to close your eyes and really focus yourself...
Xiaomi releases a new notchless all screen phone
What do you people recommend: evernote/android-job or Firebase JobDispatcher
??
Depends on what floats your goat
You could apply to both anyway
@Mauker that's notch an apple device
20:38
@DaveS That's not mi fault
20:48
> Android Studio news release: To address the issue with jcenter hijacking, Android studio now parses repositories bottom up
3
21:03
lol
lol
I see 3 lols but only 2 stars
3
#dreamCrusher
5
21:21
I also only see two stars on carl's message. Guess who didn't do it?
carl
To keep the harmony
(lol that was stupid of me)
@DaveS worse, 3 lols and 1 star... i.imgur.com/WiF9B3D.png
the infamous lol to star ratio
imo, Jupyter notebooks are awfully bad for programming as soon as you do something slightly more "realistic" than prints
21:37
That's what you get for not buying a mac™
Oh I have a mac
@DaveS Funny how this got two stars now
adds up to 5, fighting for my dreams
in a stalemate with carl atm
Carl can eat your stars
yeah but it's more fun for him to crush my dreams by consensus
😂😂😂
Oh the power display
those are some nice stars you have Dave. It would be a shame if something were to happen to them.
we call that PeaCarling
21:43
can a RO remove another RO stars?
:o
:p
until the darth vader mods intervene
Better to upload it here
22:25
Marc requested access. Rep: 359 - Questions: 1 - Answers: 11 (ratio 4:44)
@Marc welcome. Please start by reading the rules and confirm you have read them before saying anything else.
I don't do illegal drugs
fair enough
neither do I
or have I (yet)
I have read and understood the rules
22:28
a lot of my friends have mentioned it over the past year so it got me interested
Anyways, is this an Android chat or is it all mdma
:P
you can talk about anything your heart desires
except there is one unspoken rule
you shall not question anything jake wharton does
lol
Jake Wharton is great.
a swell dude
probably
never met him
I love his responses to people when they challenge him on dumb stuff.
22:30
lmao
One day I hope to challenge him on something dumb and get reamed.
basically you want to get rekt?
just tweet out that you're still using actionbar sherlock in 2019 and don't intend on switching anytime soon
and tag him
Could today be the day? I'm having issues trying to do an oauth style "logout" and when the app returns to the login screen I automatically get logged in...as if the token is being cached in Chrome app. (Spoilers: It is)
When I clear all the data in the Chrome App, then I get taken to the login page and I have to log in with a user/pass, as expected.
This has been a very difficult problem to search for an answer to. Many results just tell how to clear the Chrome App's data via OS
Using CookieManager to clear all cookies hasn't helped either. Any help would be appreciated.
22:36
so you redirect the user to the chrome browser?
or is it a webview you have embedded?
Well, I used CustomChromeTabs and I've used WebView
I'll be honest: I need to read a lot more about what CustomTabs is/does and how it works
Logging out on oauth is tougher than you may think!
If you use a provider that uses google for instance, you have to log out of both accounts...
Yes, I've read. I honestly don't know what is going on server side. I was given a url to go to to logout. Locally I just want to clear the cookies. I just saw an SO post finally saying Custom Chrome Tabs shares the Chrome service and therefore I can't do anything about cookies there. If I want to do something with cookies, I need to use a webview
You should always specify that you have to force 'account picker'
otherwise it just logs ya right back in!
well I'm not using Google's oauth
22:48
Hey does anyone know if nesting constraint layouts (for an include) is bad/non-performant?
I've used the Chrome custom tabs before...
Are you forcing the account picker?? That's the biggest issue
Account picker for what?
I'm talking about logging out of my app/service
I'm not using Google credentials at all
Most (all?) 'Identity Providers' provide options for the prompt. See developers.google.com/identity/sign-in/web/…
I realize you're not using google, but you IdP should do something similar
The company I work for is the identity provider.
@Raghav how do you measure resources consumption of something running on a aws cluster (ram - cores etc...)? what's the best practice? like I can keep watching EMR as my program runs and know approximately what operations are greedy, but I have no idea how to drill down granularly and actually log that all (feel free to give me the best practices regardless of aws :D)
@aaronvargas I was given a logout url where I provide a couple query params and it supposedly logs me out
22:57
Right, but it won't if you're still logged into your IdP (your company SSO)
When I go back to the login page, however, I'm logged back in immediately. When I clear the Chrome App's App Info, I get put back to the login page where it asks for username and password
Meh -_- firebase jobdispatcher is deprecated
damn i got confused for a sec whether this is the android room xD
So what I want to do is clear the cache from code. I have just discovered that's not possible in Custom Chrome Tabs so I'll try more on the WebView route
why noone toldme :(
22:58
:44977479 👍
Since your app login -> checks if your 'app' token exists, it doesn't -> requests token from -> Your IdP -> And you're logged in there so it logs you into your app automatically
The logout url is for your app, not your IdP
If you logout of your app, then log out of your IdP. Then attempt to login to your app, you will have to enter credentials (for your IdP)
Which will then, in turn, log you into your app also
The actual flow right now is: App opens login website in chrome tabs. Successful login redirects to custom scheme which I have a registered listener for. This Activity loads up and stores a token. Every subsequent service call is made with the token. Go to logout, I clear the token, but I also go to a logout url webpage which redirects me back to my app. I then load up the LoginActivity which loads up the login website again and I'm already logged in (when I should be logged out).

When I clear Chrome's app info and then load my app up, I'm no longer logged in, which is what I wanted.
So I'm confused with what you're telling me.
No it all makes sense...
You don't want to clear the cache manually like you're attempting
So the problem for me is having to clear Chrome's app info manually by long pressing the chrome app icon, tapping App Info, etc
Yeah. And I've read that it's not possible with Chrome tabs
That would be like, just for example, my app using Google oauth, would log me out of Google, just so my app wouldn't log back in again
You just need to stop the 'automatic' login
23:11
Except that our company wants to log the user out of all of our offerings so it's okay that my app is wanting to log them out
that's normally done by presenting the 'account_chooser' or similar
Okay, I don't know how this account chooser would work. There'd be nothing to choose, I would need to go to a website to login, not the app. I could store their name in some kind of history of users table that I can present, but lets say someone else DOES want to use this app. What would they select? "Sign into different account" ? Then when they go to the login page, they'd already be logged in because the previous user is already logged in
Perhaps I shouldn't have even mentioned "oauth style" and just said "I want to keep Chrome Tabs from remembering my app cookies/data. How can I clear them from my app?"
23:26
Do you have a url that logs you our of you Identity Provider? Perhaps you can fire it to a chrome tab and listen for the navigation event when it completes and close the Custom chrome tab.
Not sure how you would 'get back' if you used a View intent...
I have no idea. I thought going to the URL would just log me out of the provider, but it doesn't. I'd get back from the site redirecting me to a custom scheme that I've registered as a handler of.
What we're assuming here is that the provider code works a certain way. Honestly I have no idea who wrote it.
I don't even have access to it
I guess I'm assuming you can just use a web browser and login to your IdP with a url like mycompany.com/accounts/login or similar...
So you would also have a link that has 'logout' somewhere...
If your company IS the IdP, I'm guessing they gotta have a web login form somewhere...
Yeah, the web login form is the one I'm using to login to
Yeah, but that's the oauth specific one presented.
... It may be the same form as a standard login or least look identical
Hmmmm, I just used an embedded webview and it seems to not be remembering now. I can use the token to determine if I'm logged in or not. When I "logout" I can just delete the token and when I go to login, check if I have one.
I mean....that's gonna be how I have to do it I guess. Will have to go over it with the team to ensure we're doing what we intend
I'm off. thanks for the talk
23:45
Embedded web views are bad for Oauth.
Since you don't have an address bar you cannot verify you are on the site you think you are. So an app could direct to a 'lookalike' site and you'd get phished for your credentials.
Just FYI
So... does anyone know if nesting constraint layouts (for an include) is bad/non-performant?
@aaronvargas Why would you need nesting constraint layouts?
I have a few form elements that are common in a few layouts...
Seems to be working ok
AS extracted them as a 'merge' which is really messy
since you are referring to Ids that aren't even in the same file
both directions too!
and that "common elements" are constrained?
02:00 - 18:0018:00 - 00:00

« first day (3001 days earlier)      last day (2171 days later) »