« first day (1132 days earlier)      last day (3808 days later) » 

8:00 AM
The bug in Chrome/Linux I'm referring to :
4
Q: Null character in strings

dystroyConsider this string: var s = "A\0Z"; Its length is 3, as given by s.length. Using console.log you can see the string isn't cut and that s[1] is "" and s.charCodeAt(1) is 0. When you alert it in Firefox, you see AZ. When you alert it in Chrome/Linux using alert(s), the \0 terminates the strin...

A potential "exploit" : have the browser alert to the user a string like "this code will be executed : some gentle code\0 some bad code". Do you accept ?
 
@dystroy does the C++'s string has any known exploit
 
Or "Save the file as aww.jpg\0.exe ?"
 
its more or less just exposing the c++ version :D
 
@dystroy this raises the folllowing question: what will be the default icon for .jpg for most people?
 
@AbhishekHingnikar null terminated strings passed from and to languages with a separately kept length have known exploits. I know Oracle fixed some related security flaws last year
 
8:04 AM
Buffer overflows are a primary source of software vulnerabilities. Type-unsafe languages, such as C and C++, are especially prone to such vulnerabilities. In this chapter, Robert C. Seacord discusses practical mitigation strategies that can be used to help eliminate vulnerabilities resulting from buffer overflows.
 
We can imagine an exploit using the bug I found on alert in chrome/linux but only in applications so badly designed that it doesn't really matter. But we might worry for other places of Chrome/linux...
 
lol
@dystroy Array(1e6).join("\0").length;
just add a bunch of these and you can make a client computer run down to ashes without crashing the browser
should i give a demonstration ?
// cause i did some stupid thing like this while writing a c++ addon for node.js and my computer froze because it was almost out of memory
 
@AbhishekHingnikar That's expected. By the way I just crashed my console with a similar code...
 
@dystroy try that :D even with 1e* it doesn't crash :D
but look at the memory spike !
e8
at e9 it crashes hmm
sooo
 
@AbhishekHingnikar Na. Just had to restart Chrome... And I must work ^^
 
8:11 AM
@dystroy The fact that we even see Unexpected Token } is a big concern. I imagine you could do some code } [binary to escape native code] malicious code, but I could be way off
 
@dystroy try this for(var i = 0; i < 10000 ; i++ ){ Array(1e8).join("\0\0\0").length }
 
@Shea I don't think there's a flaw on this precise point. At most the syntax error message is a little off.
 
it freezes the browser for a few seconds but never crashes :D
 
Try this in the chrome console: }; {
 
@AbhishekHingnikar I don't want to freeze my browser at all, it's already snowing here
 
8:13 AM
lol
@JanDvorak lol
awesome
 
Hello, Can someone tell wat mistake in the following code,
 
no syntax errors
 
$(document).ready(function(){
$("#someId").click(function(){
alert("I am clicked");
});
}
 
!!tell thein format
 
due to which my alert is not being called...
 
8:14 AM
@thein Format your code - hit Ctrl+K before sending and see the faq
 
}; console.log(this); {
@JanDvorak
 
@theinsaneone Change the last } to });
 
@AbhishekHingnikar awesome :-)
 
you know what its doing right ?
 
Or maybe V8 is wrapping it in something like this.constructor = function () { ... }
 
8:15 AM
hi
 
exactly lol
 
<script>
$(document).ready(function(){
	$("#someId").click(function(){
		alert("I am clicked");
	});
}
</script>
this is good
 
@Shea not v8 but chrome devl tools
console.log("will run") }; console.log(this); { console.log("idk how this runs");
 
@theinsaneone also, please check the debugger console before asking. If the code does nothing, most likely it's a syntax error.
 
@dystroy thanx man.. :)
 
8:16 AM
@AbhishekHingnikar the last is a block
 
nvm thats a block
yeah got it @JanDvorak
what the heck moment of my life :D
 
@Jan am new to javascript, where can i find this debugger console?
 
@theinsaneone Short answer : F12
 
@theinsaneone what browser? Try F12 or CTRL+SHIFT+K
 
8:18 AM
@theinsaneone eeek
 
} console.log("Music") { console.log("We") }  console.log("will") { console.log("we") } console.log("will") { console.log("confuse") } console.log("you") {
 
@theinsaneone switch. Immediately.
 
fix it and run it :D
 
@AbhishekHingnikar also try console.log($$) and };{console.log($$)
 
nah too much fun
 
8:19 AM
@Jan I know man...bt due to some unfortunate reason am being forced to work on it. Cant say which reasons
 
i got it though
 
@theinsaneone you do live to your username
 
using the wrapper its actually running it in different scope
to open chrome dev tools apio
 
@theinsaneone then firebug lite
 
anyways i am off to a nap before chrome maeks my eyes bleed
 
8:20 AM
@AbhishekHingnikar You made me google "nao"
 
@dystroy ;)
 
@theinsaneone For IE8 you're missing <script language="javascript" type="text/javascript">. Or it might be application/javascript, I don't remember.
 
@theinsaneone worst case: copy-paste into JSLint to catch syntax errors and use alert if console doesn't exist (I think IE8 does have one)
 
Put that on all of your script tags
 
@Shea NO
 
8:21 AM
@Jan thanx, am luking into firebug lite now...as i said am new to javascript in fact web
 
@Shea even IE8 makes the right default
 
Could've sworn I recently had issue with testing this in IE8
 
@theinsaneone If you want to be a developer, you really need to pick reasonable tools. You can't reasonably work on IE8...
 
Either that, or jQuery just stopped working in IE8
 
@theinsaneone also, IE9+ can emulate IE8, except with better dev tools
 
8:22 AM
@dystroy true, uptil now its working fine wth 3 radiobuttons .. :D
 
@Shea JQ2 drops IE8 support
 
I know DTD is pretty important in older IE too
 
Everybody should stop IE8 support. It's too costly to the world. The amount of energy we lost in supporting IE8 could have cured cancer
!!/afk must focus on work
 
@dystroy Just go already!
 
@dystroy You're completely right, and I really shouldn't advocate for it, but I personally enjoy the challenge, sometimes.
 
8:25 AM
@Shea dystroy is afk: must focus on work
 
@Shea Masochist!
 
lol
 
Why do you keep deleting what you say?
It's okay to joke, you know :p
And a lot of us can see it anyway
 
Because that word doesn't mean exactly what I thought it meant, and it sounded weird
 
9:05 AM
Woah, just noticed the thumbnails for related videos
 
@Shea 18M views for the ass on the thumbnail
 
I thought false advertisement was a crime
I don't see the ass one
I see a half naked woman, with her nipples barely being covered by her upper arms
 
lmao totally worth the 3 min
!!wherearethegoats
 
@Shea I ate them
 
9:16 AM
That's why I didn't see it, I usually just ignore playlist type thumbnails
(maybe nsfw, if your boss is a prude) youtube.com/watch?v=_xf3ELqb6kc
 
in Room for Bharanikumar and Shea, 1 min ago, by Bharanikumar
i have some php projects, i am looking partner. are you intrested.
What's going on here?
 
Hi. I'm using Firebug and Firefox. Is there a way in Firebug through which I can find out what javascript function is added a dynamic height to a container during page load?
 
9:35 AM
@asprin check if firebug supports DOM mutation breakpoints.
try right-clicking the element in the DOM tree
 
@mikedidthis youtube.com/…
 
@SomeGuy ta! I am on the yale stuff at the moment.
 
Heh. Which one are you watching now?
@FlorianMargaine You should read the Song of Ice and Fire books if you liked the show. They're loads of fun, and you know what's happening without having to wait for the show!
 
9:52 AM
hi!
I was wondering if a javascript code like thsi was possible var jPM = $.jPanelMenu();
imean <script>
var jPM = $.jPanelMenu();
window.onresize = function(if ($(window).width() > 960) {jPM.off();}

</script>
 
Why not try it ?
 
i did
not working the way i wanted to though
or simply not working
I placed it on index.html but I dunno if I should add it on the js itself?
 
@SomeGuy listening to Foundations: This Is Your Brain
 
Awesome
Freud's up next
 
I have to give credit, the Yale stuff looks awesome, and media wise is well supported
 
10:02 AM
Oh, yeah. It's gotten a lot better recently too
It used to be an ugly pop-up player, and they had XSS bugs in most pages. Then they had a redesign, and the site's been great since then
 
@Kitsu If that was an SO question I'd downvote it
 
Hi guys, I want to use ajax in my page... I should call any js file for this?
 
also hi
@CJRamki there
 
@bar
@ba
 
oh god I really should drink that coffee
 
10:09 AM
okay I suck even at chatting :))
@Bartek Exactly why I didn't post it as an SO question yet
 
no worries I'm before my coffee too
 
@BartekBanachewicz Thanks bro... I will check that link..
 
@Kitsu why don't you focus on improving it instead of dumping it in random chatrooms?
 
@SomeGuy I'm too lazy
 
time home, bye
 
10:12 AM
@Bartek I always try to improve ,y questions here but for some reason maybe its because I'm not really a developer that most often that not I give as much details as possible but people still dont understand what I'm trying to say....I'm an alien in this world
 
@Kitsu you should read some guidelines to formulating your questions here
@Kitsu like this one
 
I'm not sure if my code is correctly formatted I'm not even sure its correctly written since as I said I'm not really a developer more of a self learning newbie...
I'm not even sure if I place it directy in the HTML file or in the JS file
 
@Kitsu why don't you learn the basics first? SO community is open for beginners, but you should show at least some understanding of the subject
being knowing the difference or lack of such in placing the code in .html or .js file
 
@SomeGuy Zirak is afk: learning to fly
 
10:23 AM
I wish there was a school here that teaches these stuff. I only know the basic in front end developing HTML 4 and CSS
They thought us how to use jquery but not in depth on how to edit jquery
taught*
 
@Kitsu Web development is much easier to learn by yourself than other areas
so if you stick to well-known and well-rated resources (which means NOT visiting w3schools), you can do it yourself.
 
any well-known and well-rated resources you can recommend?
I usually try tutorials
 
I am not a web developer, so you might have better luck asking regulars here :)
 
but even then some tutorials aren't in depth
 
@Kitsu MDN
 
10:25 AM
@Jan MDN?
 
Mozilla developer network - the best documentation available
they have some tutorials, too
 
okay I will check that out Thanks @Jan
 
@JanDvorak wouldn't call it "the best" :P
 
What's a base user experience?
Also, who actually upvoted that question?
 
isn't an alert box a modal dialog :-P ?
 
I downvoted it.
 
!!define modal
 
@Kippie modal of, or relating to a mode or modus
 
10:50 AM
@jAndy technically yes
 
well, that's not helpful.
 
I'd like to setup my TS app build on Linux
I've been thinking I could just hook the TS compiler in JS and load the code dynamically
How is it usually done with "compiles-to-js" languages?
 
@BartekBanachewicz There are tools that automate this for you - they watch the directory and every time you save a file they generate the relevant result. If you need something more clever - look at grunt - it's the defacto standard build system
 
@BenjaminGruenbaum hm
 
11:03 AM
@BenjaminGruenbaum too much choice!
well this basarat guy seems to be reasonable
 
That's all the same thing. It's the build tool and two plugins - one to build typescript and one to live-reload it
 
> Written from scratch TypeScript compiler task for GruntJS. It differs from grunt-typescript which is another excellent grunt plugin for typescript.
 
Ah ok. Never did typescript without Visual Studio which takes care of this for you
 
@BenjaminGruenbaum Some folks I'd like to share that with don't have full VS
also I couldn't get VS builtin publishing to work as I wanted it to
it just gave me a .dll :/
 
0
Q: Jquery stop and resume animation

user2264246I've got puzzled with the following issue, I'm trying to stop and resume 7-second animation of the div, so that the whole period of animation was 7 seconds. I mean, if we just stop 7 second animation after 2 seconds and then resume it without stoping the whole animation time will be (2+7) = 9 sec...

 
11:07 AM
!!summon 29074
 
@BartekBanachewicz Use jTypes
 
@BenjaminGruenbaum that looks like a javascript library. Why should I use it?
 
@BartekBanachewicz types and stuff
 
@BenjaminGruenbaum does that statically check them when building?
 
@BartekBanachewicz yeah. It's like stronger typescript
 
11:10 AM
too bad the syntax is so fugly :/
 
@BartekBanachewicz it's actually nice
 
@BenjaminGruenbaum 'oh yes'?
 
Goddamn it I can't take it - jTypes is just so fucking horrible.
 
It's not just the syntax either
 
11:12 AM
It's like a poor-piss pseudo-static type checking
meh.
 
It's not getting it ^^
 
getting what
 
It's giving me the ability to use all those awesome things like private and public and protected and final
Those are swell :P
 
@BenjaminGruenbaum well that is good.
but that's just a tip of the iceberg so
 
11:14 AM
@BenjaminGruenbaum why the hell do people keep linking to that piece of crap. Actually asking right now.
Gosh, I should just use Fay.
why am I not using it yet.
 
@BartekBanachewicz Steve Yegge gets it ^^
 
@BenjaminGruenbaum in a blog called "Stevey's Blog Rants". Way to go constructive.
 
Statically verifying private/protected - like statically verifying types when not working on value types - is meaningless. It's not where the bugs are.
 
oh and you keep repeating that nonsense about "that's not where the bugs are"
 
@BartekBanachewicz It's a pretty famous blog - mostly for steve-yegge.blogspot.co.il/2006/03/…
But also for "universal design pattern" and "good agile bad agile"
 
11:16 AM
I've heard that like 100 times already
and I believe I've already told you 100 times that it's incomplete and incorrect, and those aren't meaningless at all.
and the fact that most people advocating not using them has little to no idea about OO design is only making me believe that stronger
 
Do you believe I have little to know idea about OO design :) ?
 
no, and that's why I am amazed why the hell you keep repeating that nonsense.
Sure, if everything you want is a bunch of button events, go for it, nobody cares
 
Hah, if only I had a bunch of button events to code - that'd be so nice :P
(And for the record - people get button events wrong too all the time)
 
Too bad JS community is so eager to forget that there are people writing JS engines, Spaceship firmware and embedded systems protecting their lives
And neither of those ever was and will ever be dynamically typed.
For. A. Goddamn. Reason.
 
@BartekBanachewicz Mostly because embedded systems need to be more memory efficient.
JS isn't very memory efficient - I wouldn't use most static languages for any of those either.
 
11:21 AM
@BenjaminGruenbaum tell me more how Java is memory efficient (IOW - that's unrelated)
 
Moreover, JS doesn't have numeric value types yet.
 
it's not only about JS
 
@BartekBanachewicz Tell me about all the embedded software written in Java
 
@BenjaminGruenbaum ... excuse me?
 
There is a reason you write things like embedded systems in languages like C.
 
11:22 AM
please tell me you're joking now.
Ever heard of Java EE?
 
@BartekBanachewicz Go ahead - educate me. What big embedded systems are written in Java.
 
@BenjaminGruenbaum ATMs, a lot of older mobile OSes, fridges, washing machines, a lot of goddamn things
 
As for JS engines - try actually reading them :)
 
running under few MBs of memory
 
A lot of JS engines have a lot of JS in them.
 
11:23 AM
@BenjaminGruenbaum yeah, tests.
come on.
 
I mean you're basically FUDing Java and static typing now.
 
@BartekBanachewicz If you write a fridge or a washing machine in Java I feel bad for you. There is a reason it's not used for moble OSs.
@BartekBanachewicz I dislike Java - it's not about static typing.
 
@BenjaminGruenbaum DOES ANDROID TELL ANYTHING TO YOU
what kind of world do you live in?
 
@BartekBanachewicz Go look at the android source code - tell me what android is coded in.
 
11:24 AM
Because it's certainly not the same as mine
@BenjaminGruenbaum I don't have to go there. You, OTOH, prolly should.
I am all for constructive discussion as we stick to facts
and you're now making guesses which are way far from reality
 
I have no idea what you're talking about now -_- , android uses Java on top of other languages.
 
@BartekBanachewicz you obviously hate JavaScript, why bother coming in here?
 
Java just sucks, period.
 
You have C, and C++ , even some JavaScript and typescript in Android :P It's not a Java project.
You write android apps (usually) in Java - that's totally not the same thing.
Yes, a lot of things are written in Java, but not the absolute core.
 
and how are core Android apps not a part of android?
 
11:27 AM
Is Age of Empires part of Windows?
 
@BenjaminGruenbaum and who said anything about "absolute core" only"?
@phenomnomnominal it's not shipped with windows, so no.
 
@phenomnomnominal It's not?!?
 
@BartekBanachewicz you said it's written in Java - not that you can use Java to develop for it.
 
@BenjaminGruenbaum yes, a huge part of the project we call Android is Java.
 
Is Internet Explorer part of Windows?
 
11:28 AM
@phenomnomnominal actually it is, all the DLLs are in /windows
 
@phenomnomnominal It's called "Windows Internet Explorer" FYI
 
@BartekBanachewicz ok, then another huge part is JavaScript :P
 
go figure.
 
@phenomnomnominal actually, yes
 
didn't they have to change that link to IE<->OS by court decision ?
 
11:29 AM
@BenjaminGruenbaum I didn't say JS is not used there. You said that Java is not used in embedded and mobile world
 
If you delete it does it (Windows) stop working?
 
which is the most blatantly wrong statement I've heard from you I think
@phenomnomnominal I don't think you can delete it. Why don't you, like, read about it?
 
@BartekBanachewicz Right, I meant developing embedded systems, not developing for them.
Also, Java is fairly fast today - you just probably wouldn't use it for the core of something like Android?
@phenomnomnominal wtf dude?
 
@phenomnomnominal Yep. Explore.exe is the file browser as well, and it uses the IE core.
 
@BenjaminGruenbaum I'm just sick of this dude.
 
11:30 AM
Why?
 
Because it's the same shit every day.
 
@phenomnomnominal congratulations. You were flagged
 
@BenjaminGruenbaum Embedded systems are often programmed in a SoC way, so there's really no difference between "on" and "for"
 
@JanDvorak would have been very surprised if I hadn't been
 
@phenomnomnominal I'm not really sure I should counterflag
you're at 6 right now
 
11:31 AM
@BartekBanachewicz Java is just not the right tool for that - it's not what you'd use to develop that sort of thing. Not because it's static, because it's managed.
 
@BenjaminGruenbaum I kind of agree here. However, there were hundreds of successful embedded projects written in java under extremely tight HW constraitns
I've read a guy working for Sony Ericsson that said that maybe Java wasn't that good, but their OSes were by far more optimized that "native" iOS is today and worked faster and more reliably.
 
@BenjaminGruenbaum Windows OS is not exactly realtime either
 
@BartekBanachewicz I know people who use JS and Node for embedded systems - the point isn't "can I make this work" - it's "is it the right tool"
 
> This user has been automatically suspended for posting inappropriate content and cannot chat for 28 minutes.
@BenjaminGruenbaum Thing is, I wasn't talking about experiments. I was talking about real software deals.
As much as, again, I agree with you, facts here tend to be a tad different.
 
@BenjaminGruenbaum
 
11:35 AM
@AbhishekHingnikar @AbhishekHingnikar
 
Moving that forward, there's a strong connection between earliest possible bug catching that happens with comprehensive static analysis and the lenght of the bugfixing process.
 
well lemme get a screenshot
 
@ThiefMaster - did the flags register?
 
Especially on those systems, because debugging embedded stuff is much harder, thus lengthier.
 
11:36 AM
@BartekBanachewicz perhaps, but Java is overdoing that :-D
 
@JanDvorak and you're saying that it's overdoing that based on?
 
@BartekBanachewicz sort an array of lists of lists
 
@BartekBanachewicz Static analysis is very valuable when you don't have continuous deployment - it's way more than the types though.
 
@JanDvorak Lambdas are coming. Also that's not a very common scenario, I'd say.
 
11:38 AM
@AbhishekHingnikar 1653 unread messages :OO
 
@BartekBanachewicz you have to type List<List<SomethingVeryLong>> four times.
 
@BenjaminGruenbaum Static analysis is very valuable when you have continuous deployment and you can run the builds constantly.
 
Why are you arguing on how bad Java is - we all know it's horrible and it's way beyond just lambdas and type inference.
 
@BenjaminGruenbaum thats my spam email
 
@BartekBanachewicz It's always within 6-8 weeks
 
11:38 AM
@BartekBanachewicz not nearly as much :P
 
besides did you notice the messed up rendering of chrome vs IE ?
 
@AbhishekHingnikar NO.
 
@BenjaminGruenbaum The whole industry called, it doesn't agree with you.
19 mins ago, by Bartek Banachewicz
Too bad JS community is so eager to forget that there are people writing JS engines, Spaceship firmware and embedded systems protecting their lives
 
@BartekBanachewicz bandwagon effect
 
@BartekBanachewicz that's a bold statement from someone who is using a dynamic language for the first time to someone who has been doing both for years.
 
11:40 AM
@BenjaminGruenbaum who is using a dynamic language for the first time again?
 
The thing is the type system doesn't check behavior and I have to write unit tests anyway so it should get the hell out of my way. If they figure out absolute boss type inference so I don't have to care about it - go ahead.
@BartekBanachewicz you - you are.
Sorry, second time.
 
!!afk lunch
 
@JanDvorak Nobody cares.
 
@BenjaminGruenbaum so just because I only have Lua in my tags you assume I've never used anything else
way to go.
 
posted on November 21, 2013

It’s instructive to take a good look at some local mobile browser market stats, as always by StatCounter. Today we treat Brazil. Only 7% of Mexican website hits come from mobile browsers. Thus the mobile browser level is about half of western developed nations, and can’t compare to much poorer developing nations. I can only guess why this is the case, but let’s try: Mexico

 
11:41 AM
The world called - it's telling you that JS is the language with the most new GitHub repos. It's idempotent, it was chosen over several alternatives - a lot of them static to serve as the language in the only software that practically runs everywhere. You write once run everywhere.
 
@BenjaminGruenbaum You should use both unit tests and static analysis
@BenjaminGruenbaum so, again, what are you using "JS is the language with the most new GitHub repos" for?
 
@BartekBanachewicz Also - I can do static analysis anyway. I don't need the language to specify that.
 
@BenjaminGruenbaum languages tend to have good static analysis, y'know
 
@BartekBanachewicz "the whole industry" bullshit
Anyway, I got to go - talk to you all later.
 
@BenjaminGruenbaum and you are aware that JS is still a fraction of code written worldwide?
 
11:42 AM
!!afk meeting
 
@BenjaminGruenbaum Nobody cares.
@BartekBanachewicz BenjaminGruenbaum is afk: meeting
 
@BenjaminGruenbaum also it's amazing how everyone is trying to get an alternative in browsers right now.
 
@AbhishekHingnikar JanDvorak is afk: lunch
 
@JanDvorak FFS cant u see the whole text is blurred
even the UI is blurred on chrome ?
 
@BenjaminGruenbaum There goes the neighbourhood.
 
11:44 AM
@BartekBanachewicz meh, have this argument with Zirak when he's back tomorrow :P
 
@BenjaminGruenbaum Why are you leaving me!?
 
!!afk lunch
 
@BenjaminGruenbaum :-)_
 
@CJRamki BenjaminGruenbaum is afk: lunch
 
for chrome
go to
pc > c drive > program file > google >chrome > Application
then
right click on chrome > properties > compatibility > and disable scaling

do this for any application that you might find blurry
wow
 
11:46 AM
@CapricaSix what about u?
 
@CJRamki you're talking to a bot now
 
Finally fixed it ... my eyes won't bleed anymore
 
@BartekBanachewicz Bot !!!!
 
life == saved
 
@CJRamki yes, a bot.
 
11:48 AM
@AbhishekHingnikar what a programmatic life...
 
what does "programmatic" even mean :v
 
@BartekBanachewicz welcome to India ... we change English as per convenience using the rules of our own language *hindi*
 
I've noticed that.
And I don't like it very much.
 
yeah its a PITA though and I agree with you upon that.
@BartekBanachewicz have you read v8 source btw ? just wondering ?
Argh ignore the second question mark.
 
11:53 AM
@AbhishekHingnikar yes.
 
Did you like it ?
 
@AbhishekHingnikar At least you don't put "lah" after every sentence like malay do
 
@AbhishekHingnikar I don't like C++03
 
@Kippie Oh I am much worse.
 
@AbhishekHingnikar Oh, I just thought of a question I have to ask you!
What do Indian McDonalds serve? Aren't cows holy in Hindi culture?
 
11:54 AM
My brain is dynamic, it adapts with the people i speak to, these days I am speaking to people who know horrible english
@Kippie Chicken :P and Potato, they have veg versions of their products for India.
 
Oh :(
 

« first day (1132 days earlier)      last day (3808 days later) »