« first day (2975 days earlier)      last day (856 days later) » 

12:00 AM
@bad_coder In my experience, usually within 5-10 minutes or so. It's pretty common for power users/moderators to hit due to scripts.
 
12:18 AM
 
@RyanM I was actually just clicking without any userscripts. I've read somewhere the choose badge dialogues are heavy on the system, so just playing around with them is enough to trigger it.
 
12:42 AM
@RyanM I just hit the IP ban again, with a different error message, this time just from reading posts... Amazing.
 
@bad_coder Yeah, I've gotten it from manually opening a bunch of edit reviews in tabs in rapid succession.
 
:! I don't get it, they should increase the rate for power users. I bet there's a bunch of anonymous lurkers who never contribute anything and aren't affected by this.
First time it's happened to me and there's no way to like it.
 
Fun fact: moderators are subject to the same request limits
It's not great.
 
LOL, that's like... duh. I am left wondering if they've lowered the rate even further recently, I used to hear about this but it never happened to me before and I think I've made a lot more requests on other occasions.
 
1:02 AM
 
1:12 AM
@RyanM At least as far as hitting the IP request rate limits, yes, moderators can hit those. I don't know if they are exactly the same, but I suspect that they are, as at least part of the IP rate limiting appears controlled without regard to the characteristics of the source. However, there are some rate limits which are at least different for moderators on the site they moderate (e.g. the rate limit on flagging and opening the flag and close dialogs is at least looser, if it still exists).
 
 
1 hour later…
2:36 AM
 
3:28 AM
 
 
2 hours later…
 
2 hours later…
8:00 AM
@AdrianMole that's spam
 
@RyanM Hmm. Wasn't sure but, if you say so ...
 
(evidence in Charcoal HQ)
 
Good that I brought it here, then, eh? (My subconscious spam-spotter?)
 
8:56 AM
Hey @Makyen not sure if this is the best place for this but the only one I know to reach you... In the requests generator, there is shortcuts for the reasons. I think "b" should be for "Too Broad", then "t" can be for "Typo", and finally "r" can be for "Resource Request". What do you think? :)
 
9:56 AM
 
 
1 hour later…
11:04 AM
 
 
1 hour later…
12:09 PM
I bought myself 27" monitor. Things are a little different now.
 
12:23 PM
stackoverflow.com/a/70694347/4826457 this looks weird.. the library has nothing to do with the question. spam attempt?
 
12:36 PM
Is this edit some sort of sneaky spam? I can't find any evidence that the official website is actually changed.
Today's extremely questionable tag:
 
@RyanM the .org domain redirects to the .io domain. So...useless edit at best. Or perhaps, there is a plan to move over to the .org domain in the future but right now it's just redirecting.
 
the user seems to have some contributions in this tag
 
@VLAZ it doesn't redirect for me, they're just identical
 
Hmm, I tried it again and now it didn't redirect me
Dunno, maybe I fumbled badly writing .org the first time and spelled it as .io
 
their documentation still uses .io to the extent that I checked through
 
12:46 PM
Yeah, I did some cursory web searching and couldn't find anything about a new domain, Wikipedia links .io...
 
WHOIS says that .io was registered in 2013 while .org in 2020. But it seems like they are owned by the same people.
Both of these domains expire in 2023. Well, unless they are updated, of course.
So far, it seems .org is slightly newer but other than that both are valid.
most documentation would likely point to .io.
 
Well, if they want to change the tag wiki, they'll need to provide some sort of evidence. Or just sneak it past less observant reviewers.
 
@RyanM Agreed. I don't think rejecting is unwarranted. I guess it could also be accepted but there is no real strong reason to. Hence why rejection is also possible.
 
@VLAZ best case from what I see, it's no improvement whatsoever. Worst case, it's spam. Either way, it should be rejected.
 
@VLAZ eh? this shows "Tom Dyson" country FR.. this doesnt give anything. Or am I reading wrong?
 
12:53 PM
Unless the project really did decide to switch domains and their first move was to update their SO tag wiki. In which case, well, bold strategy.
 
@SurajRao I missed that.
 
the fact that they have the same Cloudflare NS servers is circumstantial evidence suggesting the same owner or a remarkable coincidence
whois these days is all but useless, the registrars have conspired to remove it from the commons
 
(we do have a couple of these remarkable coincidences in metasmoke but it's rare)
 
@SurajRao Leaning toward "confused user answering the wrong question" but really not sure what's going on. Maybe del-pls?
 
1:09 PM
Morning
 
@NathanOliver The increase in RO coverage is making your morning entrances somewhat less dramatic.
 
:)
I'm okay with that.
 
1:25 PM
@RyanM Would you give up being an RO to make Nathan's entrance more dramatic :P
 
@VLAZ I could just sleep like a normal person and that would be just as effective.
 
@RyanM Given that you're here now, I feel like I know your stance on "sleeping like a normal person".
 
@jps How did you find this question?
 
@VLAZ definitely don't look up my location and check what time it is here.
 
jps
by clicking on the ffmpeg tag
 
1:28 PM
@RyanM I think I vaguely know your location. I've not mentioned just in case you didn't want your stance being more widely known.
 
Ah, fair. Well, enough to get my time zone is in my profile, although I'm pretty sure I've been more specific at some point in chat :-)
A particularly determined stalker could probably even figure out where I buy my groceries.
 
That's easy - at the store!
 
Joke's on them, though: the lines got really awful and I've recently switched to delivery.
 
2:42 PM
@Tomerikoo To a large extent, the shortcuts which existed in old versions of the script have been maintained as they were in order to maintain finger-feel for long time users. I'm not strongly against changing the shortcuts, and they have been adjusted a bit from time to time (mostly new shortcuts added), but we'd need to balance the negative of people needing to relearn what they are with the benefit which might be gained by changing them.
 
3:02 PM
@RyanM I'm waiting for the day when the grocery store I go to, Kroger, replaces even more check out lines with the self-checkout kiosks
they have 6 kiosks at either end of the checkout lanes, but still have like 12 lanes and only 1 or 2 of the lanes are ever open. Each bank of 6 self-checkout kiosks takes up the space of maybe 2 lanes, and only requires 1 attendant. They could easily remove the two outermost lanes on either end and add 12 more self-check out kiosks.
Personally I'd also like them to stop having bags at the self-checkout kiosks. Make users of the self-checkout bring their own
 
@TylerH Ours recently did a significant expansion/streamlining of self-checkout and it's a notable improvement.
 
The only thing I don't like is when you have an item that is age restricted and you have to wait for the attendant
 
Age-restricted items (or at least alcohol) mean you need to go through a regular line here.
 
there should be some way for you to scan your driver's license or something given the attendants just look at it and enter the date printed anyway
 
Also with liquor in particular, they often take it to a specific lane and tell you to go there to check out.
 
3:08 PM
it should be fine to do it totally unattended since you can already order wine to be delivered, in terms of legalness, or whatever
Unfortunately Kroger does not sell liquor, only wine and beer
 
I dunno. Do you really want to scan your driver's license at Kroger? Or Wal-mart?
 
Not that I regularly imbibe hard stuff, but the occasional re-stock on Baileys or Kalhua would be nice to take care of at the grocery store
@Machavity Well, not to store it permanently, just to check once and discard after the transaction
but it could be done through the Ingenico/Verifone devices, which are not managed/modifiable by the stores
 
That'll totally happen because who would store extra data like that?
 
Frankly, my driver's license data isn't the thing I'm worried about getting stolen by hackers on the grocery store's network.
 
The problem is if they get that data, they'll probably store it. And any other data they can get their hands on. "Ryan M really prefers Sloshed Vodka to Buzzed Beer, but not around the holidays"
 
3:13 PM
yeah, but they already have that data stored with my credit cards and rewards account
 
I'd prefer some non-storage solution for the data. I'm just not sure the stores can resist, since data is a commodity these days
 
3:46 PM
Another wave of support spam coming in?
 
I raised a bug on Meta about the 999 page in user ranking and it's apparently by design.
 
By-DDoS-prevention-design
 
@Machavity I mean yeah, but that was Target's database, not the payment processing device. I'm still trying to remind myself via googling but I am pretty sure it was just customer data entered on Target devices (e.g. from online shopping and people who entered their email etc. during transactions at the store) that got breached.
IIRC they already used Ingenico devices which encrypt and tokenize the credit card number as soon as it is sent to the device via swipe/chip insert/or NFC tap
and the POS terminal itself does not have the encryption key or token information
otherwise there'd be no point to encrypting/tokenizing it in the Ingenico device
@VLAZ Someone wants to get an early start on matching the spam numbers from 2021 I suppose
 
4:15 PM
@SurajRao I think it can be easily edited to be (kinda) on-topic... Let me try
(never mind... That invalidated an answer)
 
not sure how useful that is.. the accepted answer says they plan to create a plugin if I understood correctly. The other is a link only to webarchive of a plugin
 
@TylerH Target was storing full stripe data (the swipe part). That's what made the breach so bad and why PCI standards now forbid you from storing the CVV2 and stripe data
My point was more that if they scan your card, there's probably nothing from washing it through OCR and storing, say, your address. Or an image. Since Covid hit, a ton of state-level things now use your driver's license number to verify you
FWIW most hospitals now scan it as well, but they have HIPPA to contend with
 
4:37 PM
@Machavity I guess it makes sense that PCI requirements could have changed in that period; I didn't start working with PCI and POS stuff until ~2015, but by then nothing was stored or transmitted outside the payment devices, and it was encrypted and tokenized immediately upon inserting/swiping, and only the payment processor had the token and encryption keys
 
Yeah, they really hardened everything up after Target. But things were already bad from people stealing card data from ATMs and gas pumps via skimmers. But re-issuing 22M cards was costly
 
5:13 PM
 
6:00 PM
 
6:16 PM
@SurajRao Maybe that can be edited to be more of a standalone answer?
 
6:48 PM
@TylerH Some people really dislike that. I think a mixed is more pleasurable experience for everyone.
@IanCampbell because most are deleted or just left
 
@Machavity yeah it really was needed frankly to kick the US in the rear regarding how it dragged its feet so long on magstripe -> EMV
It still irks me a lot that no one uses 2FA for chip transactions on credit cards
 
@Machavity How amazon does it? I haven't had to put the cvv since years ago
 
@Machavity (HIPAA)
 
It irks me a lot that I still have to put my physical card into a gas pump. This is 2022.
 
I hate gas pumps
 
6:51 PM
@IanCampbell We've been able to tap using NFC for a year or two now, which is great
don't have to worry about card skimmers
 
The newer pumps at some urban stations definitely have them here on the East Coast of the US, but on those cross-country trips... good luck.
 
@Braiam my suggested change wouldn't result in a loss of convenience for people who like traditional checkout lanes, since they are never all open to begin with
but tbh those people are just wrong
self checkout is superior in every way, even considering the license check, since the cashier in a traditional aisle checks that too
@MFerguson I think it's crazy there's a state where it's illegal to pump your own gas
It's so dumb
 
My local grocery has traditional check out only for the beer/wine department.
 
@TylerH Careful, on several establishments in my country they put selfservice, just to put someone in the selfservice to "assist" using the darn thing.
 
@TylerH I was shocked the first time this happened to me. Also, there are at least 2.
 
6:54 PM
Like, it's one thing if a gas station chain wants to have pump technicians to provide that service but to make it a law is just, well it's exactly what's wrong with corporatism as a govt methodology
 
@Braiam Probably tokenization. You take the card data, verify it's good via an authorization, and then store a token. When you need to process the card, you run against the token
 
It's so awful, because I know what to do, let me do it!
 
@Braiam I mean yeah there has to be a cashier working the self-checkout area, but it's 1 cashier for many terminals, which is the whole benefit
 
I actively avoid purchasing gas in New Jersey for this reason. I wonder if this avoidance is more widespread than just me.
 
Home Depot has that though where they have replaced all their aisles with self-checkout sections but two or three lines have cashiers who really push themselves onto you to do everything for you
it's dumb
Like, sure, take my card from my hand and stick it into the payment device right in front of me, and then take it out and hand it to me. What great service you've provided
 
6:56 PM
@TylerH You say hipaa, I say hippo :P
 
@Machavity But yes for this reason I would prefer it be done by the payment processing companies in their devices. That way the stores don't have that data
 
I don't see why gas station owners would lobby to make the law that way since it would cost them money to pay the attendants so I'm kind of clueless as to why the law is that way. But then again we had gas shortages recently where people were filling up walmart bags/trash bags with gas
 
Yeah, I use the self checkout all the time unless I'm buying big stuff. No, I'm not scanning all those rolls of insulation. Do your cashier wizardry, please
 
@TylerH When you are sufficiently big, you see that 5% and start asking yourself: why am I paying out?
 
Drivers licenses all have to have a chip in them these days anyway (except California keeps getting exemptions til like 2024 now or something, I think), so you could just insert the drivers license into the same slot as the credit card device
 
6:57 PM
One of the health systems I work for has a scan of nearly every patient's driver's license front and back along with their social security number and all of their family member's details. How there are not worse breaches is frankly astonishing to me.
 
@Braiam what are you talking about?
 
@TylerH Why you will not get 3rd parties payment processors on big stores
 
7:29 PM
Is this trolling? how does the jombascript?
 
pieThon
 
and c--
Among other stuff
 
@Braiam well in the United States you are required to meet many stringent requirements/restrictions and even the big retailers (e.g. Walmart, Target, etc.) who could easily "afford" to develop their own in-house system don't, because it's not worth it
 
@Braiam For big stores, the percentage which the payment processor takes is considerably below that. Even a small operation can get down to 50% of that, or lower, if they shop around. It should probably be noted that a substantial portion of the remainder gets split between the card logo company/group (e.g. Visa, Mastercard, etc.; ostensibly for fraud prevention, etc.) and the issuing bank (which is used to provide you with benefits like % cash back, airline miles, etc.).
 
They just pay a little bit to Ingenico or Verifone or some other one
 
7:32 PM
@VLAZ That's... weird. That user has a history of normal posts
 
@Machavity Yes, I noticed.
 
Because the cost (or the answer to your question "why am I paying out") is: just look at what they have to pay in a breach in terms of fines/law suit payouts
far far cheaper to pay a few million every year nation-wide than risk paying billions on top of the few million you'd have to pay to your own team anyway to develop, secure, update, etc.
also, as Makyen said, here it is far less than 5%
 
 
2 hours later…
10:19 PM
 
11:06 PM
Programming or applied computer science? stackoverflow.com/q/65736806
 
11:22 PM
@miken32 I don't see a very practical programming problem there. So maybe better for Software Engineering? I'm not sure enough to vote though.
 
same here
 

« first day (2975 days earlier)      last day (856 days later) »