« first day (3742 days earlier)      last day (1218 days later) » 

7:34 AM
morning dudes
 
8:14 AM
in Java, yesterday, by Neil
your heap methods are acting like the tree is <last inserted> is the root and then it's a and b beneath, then c and d underneath a, etc.
@mr5 this is Niel's last message
 
[mr5] Oh ic. He's a Jabba man now.
[mr5] I would probably switch to Jabba but hopefully Kotlin too.
 
he has always been a Jabbaman
 
 
1 hour later…
9:28 AM
[Captain Obvious] Security Advisory (Denial of Service) for ASP.Net core applications running .NET Core 3.1 and .NET 5 on Kestrel when handling HTTP/2 requests: github.com/dotnet/aspnetcore/issues/29236
2
 
10:11 AM
so... yall azure users...
how do you authenticate your applications to invoke stuff on azure?
 
[mr5] you do oauth
 
so far I have used a PAT
 
[mr5] ew
[mr5] upload your ssh keys
 
that is how MS recommends it
but I fail to see how that would work for a service account
 
[mr5] wait. are you referring to API calls or managing stuffs on azure as a user?
 
10:14 AM
managing stuff on Azure... automatically
not tied to a user
 
[mr5] How do you attach PAT on your requests?
 
afaik, the sdk is just a (horribly) typed wrapper around the rest api
so, eventually through the headers of http requests
 
[mr5] in authorization?
 
var creds = new VssBasicCredential(String.Empty, personalAccessToken);
var connection = new VssConnection(new Uri(collectionUri), creds);
but this in code
@Botler probably
 
[mr5] Downside of PAT is it's only valid for limited time then you need to request for another. Unless you also automate this stuff, I can't see why you need an alternative way.
 
10:19 AM
because PATs are tied to a user in Azure
and the application is not working on behalf of a user, but rather on behalf of... a procedure
 
[mr5] How would the Azure identify the one who made the request if it's not tied to a user?
[mr5] Maybe you're referring to a service account?
[mr5] Like server-server communication?
 
ye
a service account
 
[mr5] I think you would need to download some file from Azure and install it in your server.
 
ew
I ain't touchin' no dolphin.dll from Azure
 
[mr5] I am not really sure if that thing exists on Azure, but GCP have that concept.
[mr5] It's a certificate file.
 
10:27 AM
AWS just has permissions
why cant everyone just have IAM like AWS? :(
 
[mr5] Is the AWS permission thing secure?
[mr5] Or how secure is it?
 
I found someone answering this kind of question

> Keep in mind flow is a user based service, perhaps also look at logic apps or azure runbooks.
However, You can exclude that specific account from MFA, or if you log in to flow manually with the service account under MFA and recreate any connections, that should also allow the flow to work.
so you could exclude your service accounts from the policy
but I don't have any experience about this
 
AWS IAM is pretty damn secure
but I have no doubt that GCP and Azure also don't have significant security issues
@ntohl for me, it is not so much about the policy, but simply having the server be authenticated
and authorized
if that is via creating an actual user, logging in with that user to generate a PAT and use that PAT in the application, then so be it
but to me, coming from a world where applications can be authorized based on other things than an actual user, creating a user sounds weird
 
what claims would an authenticated service account have?
 
claims?
it would just be allowed to invoke a few api calls
iDunno which claims it would have
 
the calls it will make are mostly create-git-repository, push-git-commit, create-build-definitions and create-policy-configuration
 
so no real need to authenticate, just authorize
 
yes
 
[mr5] I also see this @Wietlol
[mr5]
 
I see...
an empty message :p
 
10:45 AM
[mr5] lol
 
(botler and stuff)
 
[mr5] view it on datcord you lazy lion
[Ntohl] come to the light side
 
lemme start datcord
ironically, discord is dark mode and SO-chat is light mode, so the SO website would be the light side :D
@mr5 logic apps would require it to be hosted in Azure tho
and then begs the question... how to invoke that logic app remotely?
also, reading the description, it is probably not capable of doing what I want
so I would need another application doing all the hard work, then use logic apps as a replacement for the azure sdk
which is even more silly
I could program it into an azure function
and somehow inherit the authorization of that azure function
 
[mr5] Couldn't find any. Maybe Azure is trying to prevent devs from doing those things outside of their nice.
 
but then I also need to provide authentication to ensure no one has found the endpoint and invokes it
 
10:54 AM
[mr5] Does your API wrapper provides something like service.InvoiceUserById(wietlol.Id, $1000, Interval.Seconds) or something like things you can only do from the portal as a user?
 
well no...
i just use the azure sdk, i dont expand it
 
[mr5] which specific service are you trying to auto manage?
[mr5] oh calibrating a VM would be a good use case.
 
devops
 
[mr5] Oh I have another idea.
[mr5] Switch to GitHub
 
as i said, it just creates repos, does initial commits, creates build definitions and applies policies
switching word be interesting, but not my choice
 
10:58 AM
[mr5] You can automate stuffs on GitHub the way you describe it and they have a good documentation on how to do it.
 
then I would use AWS over Github anyway
 
[mr5] Well, switch to GitHub to automate, then automate the cloning to republish it to devops.
 
their sdks are almost all so easy, I dont even have to look at the docs
 
[mr5] Are you trying to make CI/CD thing?
 
no, just use it
 
11:00 AM
[mr5] Cuz you probably have ton of experience in AWS dasway
 
or configure it
no, because AWS' design origin is based on an API
while Azure is based on a service, on which the API is the after thought
 
[mr5] You can also do this using PowerShell or some CLI language I think.
 
ye... heck no
anyway off to get lunch
 
 
1 hour later…
12:29 PM
sdk: Task<IList<GitBranchStats>> GetBranchesAsync()
> Exception: repository has no branches
what the heck happened to "return an empty list"?
 
!~shiba
 
thanks :D
I needed that
 
you're welcome
 
 
3 hours later…
3:48 PM
Hi all
 
 
2 hours later…
mr5
5:22 PM
@Wietlol kek
Did you manage to make credentials for your service account?
 
 
1 hour later…
6:32 PM
Hi
Im really stuck on this c sharp error if anyone could take a look stackoverflow.com/questions/65707666/…
thanks :D
 
6:52 PM
[mr5] Do you want to disable the CTRL + enter?
 
I mean, Id rather it not do that, but if thats the only option to get it working then yeh
as in, not disable it, just have it not happen at all
 
7:09 PM
[mr5] just have a filter in your loop for character it only accepts?
[mr5] oh crap. datcord won't delete the one from SO
 
 
2 hours later…
9:22 PM
@mr5 ye... but it is just a normal user account which we abuse to become a service account
 

« first day (3742 days earlier)      last day (1218 days later) »