« first day (2266 days earlier)      last day (2681 days later) » 

12:09 AM
Lounge<C++2017>
 
^ It is kinda scary that military grade applications have possibly weakest crypto.
 
Part of the problem is the "military grade" moniker.
That's authority by stamping.
 
@wilx if it's stand alone & not connected to the internet then it's probably okay
 
@sehe Watch the video. The military grade refers to actual military apps and software.
@Telkitty What in this world of today is that isolated, really.
 
I know that. Doesn't change the problem (rather, demonstrates/exemplifies)
 
12:17 AM
@R.MartinhoFernandes Currently it goes beyond the scale (724)
 
@wilx they are trying to at the moment, think about brexit & trump :p
I disconnected my PC from internet for a while
 
"disconnected"
That's just from the internet though :)
 
12:47 AM
/cc @Morwenn
 
nwp
@milleniumbug that is not technically viable, can't have 2 portal pairs at the same time
 
maybe two portal guns were used :D
 
@nwp Haha :D
 
This is why I took Fiber: uploading my 36GiB backup for offsite backup takes 61 minutes
 
1:00 AM
?
 
nwp
@sehe backing up to /dev/null is much faster
 
it is
 
@nwp unless you're Ell, in which case it'll actually put the backup at /dev/null
 
@sehe That's... ~600MiB/min => 10MiB/s?
Unless I fucked up my math which is entirely possible
 
It's rated 250Mbit/s
So it's likely bottlenecked on the servers
 
1:09 AM
send them an angry email telling them to up their speed
 
> $ qalc '(36 gigabyte / (61 minutes)) to (megabit/s)'
(36 * gigabyte) / (61 * minute) = approx. 78.688525(megabits / s)
@jaggedSpire Nah. I'm not angry. It's fine
 
@sehe well then
 
I stopped doing mental maths with shitty units
qalc for the win
 
@jaggedSpire Actually this is how I arrived at the rough estimate
> qalc '(36938 megabyte / (10 megabyte / s)) to minutes'
(36938 * megabyte) / ((10 * megabyte) / second) = approx. 61.563333 min
It's still right on that schedule
 
1:12 AM
nods
 
^ Holly fuck. You can apparently spy on keyboard input on smart phone without any privileges through CPU cache timings.
 
@wilx crazy
 
Man @R.MartinhoFernandes. I just found what lead to the new room topic line. /Sad
Thanks for dealing with that.
 
1:30 AM
@wilx what is keyboard input, though? taps on screen? swipe? bluetooth dev? logical keyboard events?
 
@sehe Taps on screen in this case.
 
Yeah. Well good luck deciphering my typing with taps (which I don't use)
 
@sehe The World does not revolve around you, darling. :)
 
I know. However, my risk mitigation needs do
 
@sehe That was the most wow moment of the talk. Another was that they are able to establish a communication channel between VMs on the same machine through the cache and run SSH through that. :)
 
1:36 AM
That's... WOW!
 
@wilx that reads as 'lemme pat you after I slapped you'
 
Another point was, AFAIK, that this way, on you smart phone, two seemingly innocuous looking application can communicate. E.g., you take a photo and view it in your gallery app. The gallery app does not have to have access to the Internet, it can communicate with another app that has Internet access and upload it wherever.
 
Yeah. it's side-channel data exfiltration. Scary
 
And all of the Internet now has your dick pics. :D
 
I am glad I posted nude pic of me when I was young with hot body. If I post any nude pic of mine now, it will scare people off the internet </trollololo>
 
1:42 AM
@Telkitty Well, I am glad I have never posted any nudes ever anywhere.
@Telkitty Also, pics or it did not happen! :D
 
I wish I could find those pics ... but it's effort
currently effort spent on rectifying deprecated functions
 
@Telkitty Excuses, excuses.
 
my code crashes upon arrival during run time
 
1:59 AM
@wilx that's unlikely. If so, I'd like to see one, as proof
> upon arrival during runtime
Makes me visualize that code as knights galloping towards a glorious runtime
 
No wonder I feel cold the whole day. I forgot to turn on the heating, switching it from night to day regime. FML
 
2 hours ago, by sehe
@wilx *WHACK!*
 
This whole thread
 
my solar lamps have arrived 😂
 
2:09 AM
to the glorious runtime?
 
@Telkitty You live in Australia. Don't you have enough sun as it is?
Or, are you starting a weed farm?
 
that's the point - enough sun so my lamps will work when I go camping in places with no electricity
 
One day, you will tell us you are going for a hike and then we will never hear from you again...
 
@набиячлэвэли Actual effective rate: ~71mbps
 
@wilx speaking of which, one of the ladies who I went on bushwalking with a couple of times died of altitude sickness a few days ago. I haven't seen her for a year and half before the incidence
 
2:19 AM
@Telkitty Altitude sickness? Where?
 
hiking the base camp
I know quite a few people who hiked the base camp, she's the first one who I know died from altitude sickness. I don't know why she choose to do it in December, people usually doing it during warmer seasons
 
3:08 AM
/cc @jaggedSpire @Morwenn @Ven :3
 
Ven
:3
 
3:26 AM
 
heh
 
3:51 AM
@jaggedSpire Are you interested to join C++ question and answer room to help me?
 
sorry, don't do much networking stuff.
 
@jaggedSpire Any idea what i may doing wrong?
 
4:30 AM
posted on December 29, 2016 by Scott Meyers

SQL finally gets the effective treatment. That's an accomplishment, because despite an official ISO standard for SQL, there's enough variation among common offerings that the authors of Effective SQL felt obliged to test their code (e.g., schemas, queries, etc.) on six different implementations. They also point out syntactic and semantic differences between "official" SQL and the SQL you're pr

 
 
1 hour later…
5:58 AM
> How can I make this problem into multi-thread?
these damn multithreads @CheukKinSing
 
not until yesterday did I notice how small of a storage my macbook really is
 
(source for 10k+)
 
Sam
@Borgleader :D :D :D
 
6:47 AM
@user7331538 Yes, use your vendor's library (Cray, IBM), and don't roll your own topology as unless you are a scrub and are using OpenMPI, like some kind of worthless scum
 
user1804599
7:45 AM
> In MySQL, table names can be case-sensitive or not, depending on which operating system you are using.
5
 
user1804599
wat
 
7:55 AM
You. Didn't know?!
 
My macbook disk was full, had to do some emergency migration
I have 1/3 of disk filled with library files
 
@ProblemSlover Code of intense beauty.
 
8:11 AM
@JerryCoffin calculator calculated with the calculator/
 
Intense something anyway.
 
@ProblemSlover whoever wrote that is going to do well when asked in an interview "how many lines of code are in your biggest program?"
 
8:32 AM
@Telkitty Until they get to: "and what features were implemented in your 20 KLOCs?"
 
9:02 AM
omg xcode is occupying a whooping 12.36 GB of memory
cleaning out my closet on mac
ok, now stop telling me that my disk is almost full
lol
 
 
1 hour later…
10:20 AM
It's huge loooool
 
10:35 AM
@sehe No worries.
Need 46 answers! still for that badge.
It will probably take 20 years for 46 decent Unicode questions to show up on SO.
Just saw that Eric Lippert once commented "Nice answer." on one of my answers.
:D
 
-j REJECT?
Why not DROP?
 
@wilx That whole subnet though. :D
 
@fredoverflow Crazy.
 
@fredoverflow Cr8zy.
 
12:05 PM
WTF did I just watch?
 
@fredoverflow Someone having fun with After Effects. :)
 
Those who rushed to uprgrade php have been punished lol
http://thehackernews.com/2016/12/php-7-update.html
 
@fredoverflow Is he German, or did someone purposefully CCed that to the language?
 
@Griwes Yeah. :)
 
user1804599
12:21 PM
@fredoverflow F# is bad.
 
user1804599
@sehe First-world PostgreSQL problems.
 
Ell
12:45 PM
I've never tried F#
 
1:06 PM
I've never tried taco.
 
Ell
hmmm mergesort is heapify followed by extract_max/min until the heap is empty, right?
I should write code for this stuff actually
 
@Ell ...that's heapsort.
 
Ell
@Griwes that's what I meant xD
 
Mergesort is a wholly different thing. :P
 
Ell
I know aha
 
user1804599
1:13 PM
 
Hi
 
2:05 PM
^ This is scary. Apparently, linking to a page that infringes on copyright might be viewed as infringing on the copyright as well. That is retarded.
 
@Telkitty why do you use xcode?
 
@wilx according to a recent EUCJ ruling this is indeed the case, this overturns decades of precedent
 
@Mgetz This is so retarded I have no words.
 
2:22 PM
@wilx She says "jifs"; her argument is invalid.
 
@wilx as best I can tell it's a direct attack on google etc.
 
@R.MartinhoFernandes ouch
 
@Mgetz Because they have money :!
 
Xeo
2:38 PM
Ooh, CCC
If you can, watch the Spiegelmining one
that was great
(not sure if it's up yet)
 
Ven
2:51 PM
@rightfold sorry, I know nothing of that book.
Also -- I think you already know Perl 6 too well for that :-).
 
Xeo
3:17 PM
1 message moved to bin
 
Ven
3:34 PM
What might the lounge be up to?
 
Ell
@Ven Learning data structures and algorithms
it's very boring and difficult :(
 
Ven
What kind?
 
Ell
3:50 PM
heapsort, priority queues, bfs, dfs, topological sort, dynamic programming, spanish trees, bellman ford, dijkstra, fibonacci heaps, quick sort, stable matching, knuth-moris-pratt, something-something-horseplay, maximum flow, fft, linear programming
and proving correctness for all of them :(
(with varying degrees of "proof", though)
 
Ven
4:08 PM
And that's boring? :o
Mind you the only sorts I know are bogosort, bubble sort and another funky one I don't even know the name
 
Ell
@Ven I think learning the algorithm for the first time is interesting
I don't like doing complexity analysis though
and I'm not very good at proofs of correctness so it's difficult :P
 
Ven
Ah, ok. You're Coq-ing?
 
Ell
@Ven No, just hand written proofs
The exam is wholly written so
 
Ven
Oh :'(
 
@Ell Same here.
 
Ell
4:22 PM
Hmm. I meant, the unit is assessed with just 1 written exam
I'm not sure what a not-"wholly written" exam is :V
 
@RobertHarvey inb4 "I'm here because "you're coq-ing" has generated waaaay too many flags"
 
@Ell An exam that's at least partly oral (but oral exams are usually reserved for fairly important situations, since they're obviously pretty time consuming for the staff people).
 
i like coq
7
@Ven Extremely
 
4:37 PM
@Ven Formal proofs tend to be quite boring, because most of them end up as documentation of the obvious. They also tend to border on useless, because the few important parts get lost in the blizzard of irrelevant details.
 
Ell
5:01 PM
Welp my brothers just left to go alcohol shopping without me :(
 
5:22 PM
@Ell Boyer-Moore-Horspool
 
Ell
@Morwenn I always forget this
I can only ever remember "horseplay", which I know is incorrect :V
 
But it's in the C++ standard library :o
 
yup
C++17, fair enough.
I tried to have a new ID card today.
But I had to have an appointment (which wasn't the case before), and had to fill something online beforehand (which wasn't the case before).
So I had to sign up on some gov website, and they sent me a confirmation mail. Then I tried to login after having confirmed my mail address, and realized that I didn't have a password (there was no way to choose one when signing up).
I realized later that they sent a second mail with the login (again), and the password.
Which is ridiculous for something from the « National Agency of Secure Titles » (or omething like that).
Of course since their security is shitty, you're forced to change the password as soon as you log in for the first time, and you're forced to use uppercase & lowercase letters, digits and special characters, which is terribly annoying.
 
Ell
plaintext password?
ah an auto generated one
 
5:31 PM
Yup, plaintext, along with the login.
Then after filling many annoying fields, I was asked whether I had already bought virtual tax stamps or whether I wanted to buy some right now. That was terribly annoying because it took me hours a few weeks ago to find a shop that sold physical tax stamps. But I can't use them so I had to buy virtual ones.
The price for the ID thus already amounts to 50€ + the gas for the car since I can't make the ID in my own town, nor could I find the physical tax stamps in my own town, nor could I declare that my old ID card was stolen in my own town (I could do 2/3 of that a few years ago, but fuck it I guess).
Also, unless I take vacation, I can only do all of that between ~9h00 and ~12h00 on Saturday mornings.
Seriously, I'm sooooooooooo so very annoyed right now.
 
Ell
That sounds terrible
 
It is.
 
Ell
bureaucracy is such a PITA
 
Worst thing is that my own town still produced ID cards a month ago.
But when they told me about it, they didn't tell me that I needed to pre-command the new one online, nor that I needed an appointment... Just that I needed to have it done in another town.
Oh, there was also 5€ of ID photos.
The money isn't really an actual problem for me, but I guess that it's a real PITA when you're a bit short on money.
And now I've got 25€ of motly useless tax stamps.
 
5:56 PM
https://vine.co/v/hKmqMDIHxUV
/cc @jaggedSpire @Morwenn @Ven
Itteh bitteh kitteh welcoming commiteh :3
 
@Borgleader I'd drown in that if needed.
@milleniumbug Good one :D
 
6:15 PM
-2
Q: At&t Smart Limits

Gerald WodkinsI have a bit of a dilemma. My dad imposed restrictions on my At&t phone using the service called At&t Smart Limits, which can be accessed via att.com. I can no longer text, call, or use data after 9:00 PM. Also my dad turns off the WiFi at 10:00. Obviously you can see where I'm going here. I want...

/cc @Mysticial
 
6:54 PM
 
7:12 PM
My grandma called. She likes the erotic novels I offered her for Christmas.
 
You bought your grandma prose porn for xmas?
 
Yup.
It isn't called xmas for nothing.
 
xxxmas
 
Ven
@CatPlusPlus i see.
 
7:58 PM
2 messages moved to bin
 
8:18 PM
 
Cute :o
 
8:59 PM
I was wondering why my mergesort for bidirectional iterators was more performant than in the benchmarks from my standard proposal. Turns out that I hadn't optimized it yet.
 
lol
 
I should really use a k-way merge algorithm in vergesort. It could yiled better results for bidirectional iterators.
 
9:56 PM
This is fun:
The PS4 design seems rather convoluted.
 
Sup anyone is into helping me with a thing here?
I build a proxy server and I'm trying to understand an https request. How do I share the public key with the proxy so it will be able to analyze the data?
 

C++ Questions and Answers

Solve problems and approach solutions. Just ask and lurkers wi...
 
@AsafFisher Sounds more like you're building a MitM attack.
 
@Griwes Nah I'm just trying to make a school monitoring proxy and I need to be able to share keys of the computer with the proxy
 
10:10 PM
Sounds exactly like you're building a MitM attack.
 
It is mitm just not an attack... the student parents and students sign a file that makes it Legal...
 
So you're saying it's a MitM attack.
 
Your just trolling rn
 
Go away, we don't want people that are purposefully trying to break the foundations of internet security and authentication here.
@AsafFisher No, I'm genuinely angry at you right now.
 
It is not breaking I'm just trying to check if there is a way that the computer can authorize a proxy server to monitor its trafic.... not for illegal purposes....
So stop being an *** because you are an closed minded person.
So rude
 
10:16 PM
You'll end up building something like this.
Which is going to be a gigantic clusterfuck that'll allow anyone hijack any traffic on your network once they use one of the 0-days that you won't protect it from.
I have deep hatred for people doing this.
HTTPS is designed the way it is designed for a reason.
It's supposed to secure a connection between two endpoints.
Your thing tries to break the most foundational of its premises.
 
I think this is what some corporations do, supposedly to inspect traffic to social sites so that you do not leak something sekret.
 
Burn those companies down.
 
Thank you!
And if I want to know how to do it for educational reasons is it a big problem Mr. police man
 
Want to make sure nobody leaks anything? There's other ways to do that than destroying the workings of the single most important internet protocol that exists currently.
@AsafFisher Yes, because there's a thin line between knowing a thing and implementing it.
 
Your wrong, the line is between implementing it and executing it on a mass production.
@Griwes
 
10:23 PM
Also if you learned how to do that, for educational purposes, you might miss an important (for implementers) piece of information on what to do and what not to do (that's an unimportant detail for someone learning how it works on a grand scale).
 
Look all I know is that a computer has a shared key with the server and it knows the key. I just want to know where the key is located that's all!!!
 
@AsafFisher Teh shared key is derived/negotiated, IIRC. How it is done also depends on version of TLS, IIRC.
 
Web filtering proxies are not able to peer inside secure sockets HTTP transactions, assuming the chain-of-trust of SSL/TLS (Transport Layer Security) has not been tampered with.

The SSL/TLS chain-of-trust relies on trusted root certificate authorities. In a workplace setting where the client is managed by the organization, trust might be granted to a root certificate whose private key is known to the proxy. Consequently, a root certificate generated by the proxy is installed into the browser CA list by IT staff.
@wilx where do I studie more about it?
 
@AsafFisher Read the TLS specification.
 
> the line is between implementing it and executing it on a mass production.
 
10:33 PM
The proxy is effectively operating a man-in-the-middle attack, and such proxies are almost universally heavily vulnerable in one way or another.
 
> trying to make a school monitoring proxy
 
Okay, let's try another approach here.
 
yes, that's not production /s
 
If you need to ask how to do this, you are not the person that should be implementing this.
End of topic.
Move on.
(That statement is wholly separate from my other statement that no-one should be implementing this. They are compatible since they can be easily combined into "no-one should be implementing this.)
 
@wilx Sony tries to prevent their consoles from being hacked ^^;
 
10:47 PM
@Aaron3468 By obscurity? I am not sure. TBH, it looks typically Japanese convoluted.
 
11:09 PM
Some of the elements are half-hearted attempts at security, but the more I watch, the more I agree that it's over-convoluted.
 
11:29 PM
Haha, I just realized that at least 3 project used cpp-sort, but I broke at least 2 of them meanwhile.
The only one I didn't break simply replaced std::sort by cppsort::sort x)
 
11:53 PM
@wilx the assumption is that you can only leak secrets via the company's network.
Which anyone would agree it's silly.
 
@R.MartinhoFernandes Yeah.
I can walk in and copy whole source trees or just bring laptop home with all them on it. I get it. I do not think it is a good idea either.
But that is what, e.g., I received in email informing us about this interception.
I guess they might be worried about accidental leakage instead of intentional, dunno.
 

« first day (2266 days earlier)      last day (2681 days later) »