« first day (3703 days earlier)      last day (1236 days later) » 

12:00 AM
right click, inspect, change type from password to text?
 
lol
 
ya'll are trying that now, i can tell
but it's an interesting thought problem, i agree
this is entirely client side?
 
no multiple device so it couldn't possibly be client side only
 
ahh.
 
Ok. So we take the user password, lets call it the "master" password, and hash it a couple 100 times. Then we generate a random super long key and encrypt with the master password hash to derive our encrypted key. We send the encrypted key to the server. We then store the key on the device. (Theres more don't worry)
 
12:06 AM
the master password is the password that unlocks all other passwords?
 
no
When a user wants to store a password they enter their master password. It reads the encrypted key from their device, decrypts it. They take their unencrypted key and encrypt the password and send it to the server.
 
and what happens if a user loses their device?
or tries to access their passwords from a different device?
 
I think discord does something similar-ish, you have to download your keys and not lose them if you want to use their super secure security
 
^
 
New device logs in and is sent the encrypted key. The encrypted key can now be decrypted using the master password. The user then requests the password they want and decrypts it using the key they have.
 
12:11 AM
what if you lose your device and forget your password at the same time?
 
Ok I am getting there
 
wait, new device logs in how?
if they dont have the key?
 
they log in using the master password
 
If you loose all your devices and forget your password you are fucked. But if you have one device and/or your password you would be fine. An additional measure would be generating recovery codes for the user to store.
 
ok that all goes to user provided key
 
12:12 AM
I could go more in detail on how the user password and master password is slightly different but its ok.
@DaveS ?
 
I think my brain is warped enough
 
the encrypted key on the server is the user provided key
without the master password to decrypt it you cannot access your stuff
 
so if someone guessed your master password, they could get all your passwords
 
you store it and transfer it, or generate a new key when you reset a password
but at the end of the day you have something you cannot lose access to, to ensure your privacy
 
@DaveS Yes. There are other options as well. But you must always retain something to prove your identity.
You could implement a biomentric option as well.
 
12:14 AM
I like the satellite connected key rings that have a code that changes every 30 seconds
 
Look, my method isn't perfect but i came up with it in like 10 min. If i spent more time i could probably do better, not perfect. But the point is still there
 
yeah but whatever it is, it's still a user provided key to unlock the server key.
 
anyone remember those?
 
there's nothing wrong with your method JBis, it's not bad and has a decent UX
but there's inherent limitations to encryption
 
obviously
 
12:15 AM
you either have something you absolutely cannot lose or you give access to someone else who has something they cannot lose
 
yes thats the basis of encryption
my job is knowing those limitations and how to utilize encrption in the best possible way
and then help the develops implement that properly and check that they did
 
yeah we're just saying from experience that type of knowledge is typical for a senior developer and it's not often there's enough work in that space to justify a full time role for it
 
This is literally my nightmare project. I wouldn't be able to sleep at night
 
btw i chose an extremely difficult example . Password managers are pretty complex. And especially difficult if you have no previous knowledge.
@DaveS evidently it is not typical
 
this is why god made auth0. and stripe if we're talking credit cards.
 
12:18 AM
i highly doubt most senior devs have little idea at all what i am talking about
@nebulae no, gods didn't. People like I did.
 
ok o.o
 
@DaveS Also I'm not out here creating a new role. There are plenty of job openings for Application security engineers (which is a lot of what i want to do).
hey look facebook's hiring, "how are we gonna keep all this stolen personal data secure?"
ooo look. ones gonna pay $189,000
not too shabby
alright, sorry if i sound like a dick @DaveS
And I am not saying I know everything. I mean i picked the password manager example because i knew i could come up with an answer.
there are plenty of things i have no idea how to do. but that doesn't mean your average senior dev does.
 
Tim
@JBis I highly doubt you have any idea about what most senior devs do or don't know
 
lol alright lets stop
 
HAMMERTIME!
 
12:24 AM
I forgot more than I know
 
@Tim i can't stand when you guys pull the "you can't have that opinion or you can't be right because you are young and inexperienced"
alright cya guys
 
Tim
I can't stand when you pretend like you know everything
 
3 mins ago, by JBis
And I am not saying I know everything. I mean i picked the password manager example because i knew i could come up with an answer.
 
soo... happy friday
it's good to be back.
wheres all my old school room 15 homies?
 
o/ neb
 
12:27 AM
carl? warren? nil?
\o
 
Carl comes around
Warren in EU times I think sometimes
no nil
Ahmad and Adam are pretty inactive
 
no nil lol that made me laugh
I havent writen anything android related for literally years
felt like a fraud coming in here
 
@JBis your typical senior dev knows what he does and doesn't know and has the tools and knowledge to teach himself everything he needs to know to successfully complete his job in a particular space. Given a set of requirements I feel myself and most other senior engineers understands the basics of encryption and security more than well enough to leverage existing services to develop something like a password manager.

They also would be likely to hire an outside consulting firm to verify their work and spend more than the 5 minutes we spent here chatting considering their use cases
 
As a typical senior dev, I know enough about encryption to know Id rather send that headache over to auth0 and carry on writing the fun code
 
^
 
12:31 AM
let the ones who love encryption and everything that comes with that have it.
 
Also I do almost no android now either
well directly, I do flutter now for all my apps
native android is maintenance only these days
also do some backend and react web
 
I spent some super fun years writing python for various machine learning endeavors : )
oh nice, are you using any rabbits or zmq for backend?
 
not familiar with those, our backend is a lot of node/express, dynamodb, lambda, docker, we have a couple go servers
 
super fun throwing those events around and acting on them
node is my everything now
postgres, mongo, elastic, docker too
 
yeah we're usually just throwing up low budget CRUD APIs
but we do some unique things for larger apps
 
12:37 AM
lol
nice
 
my jr's really like GraphQL with Amazon Amplify
 
I've heard tell! I think we tried to get the owners to sign off on graphQL at my last job, they didn't tho
so I got mad and quit
 
yeah I haven't had a chance to learn it yet
 
kl lol
 
lol
 
12:39 AM
err jk
RAGE QUIT
I went through that entire machine learning course from andrew ng, holy math
really interesting and brain sharpening tho, if you want some covid entertainment
its cool to actually learn the math behind the algos instead of just importing them and passing your data to a black box
then i promptly forgot it all but eh, Im old
 
lol it sounds interesting
I've dabbled in Approximate Nearest Neighbor cluster matching
but nothing to do with neural nets or how that's different
 
this is a good precursor to the deep learning course: coursera.org/learn/machine-learning
 
wish I had the time, the next course I need to take is to finish my AWS Professional Certification
that one gets me a raise
 
nice! which one is that?
 
12:46 AM
awesome
 
I already have this one
 
nice : ) looks like a lot of work
my eyes crossed just reading that
 
yeah it's not the most compelling
 
damn useful tho
 
yeah for sure
 
12:50 AM
and the devs love you for CI and easy deployments
 
yeah that part is fantastic
most of our projects deploy automatically with an approved pull request
 
I would be seriously lost without our devops guy <3
yep, ours too, kinfa
all the way to staging but its gotta be triggered to go to prod
 
yeah we have that on some
but others you just need to be a repo admin to merge
 
out to dev on merge to master, out to staging on release tag
 
ah nice. We have dev (dev deployment) -> staging (QA) -> prod
 
12:53 AM
you have QA?
 
and sometimes we have a 4th test for testing deployments that we can't test locally
QA is usually the project manager / client
 
well isnt that FANCY
 
or an intern
 
hahah i kid
 
lol bigger projects have more QA hours
We typically deal with budgets around 100k or less so QA often gets neglected =/
hard to sell a client on it unless they have issues or existing users
 
12:56 AM
you're in consulting then? or?
 
yeah we do everything from WordPress/Webflow marketing sites to mobile applications for start ups or B2B integrations
 
nice
 
what are you up to these days?
 
I joined a startup a little over a year ago, we're kicking butt
its been intense but awesome
 
nice, I like the small company vibes
I'm out for the day, good seeing ya again neb
 
1:02 AM
yah, that part has been awesome
we're about to hire a bunch more tho
cya : )
 
 
2 hours later…
3:02 AM
Is there a Room 15 AOC leader board this year?
I'm behind and barely started today. Finished Days 1-3 so far. Day 4 doesn't look too bad. Just need to find time for it.
 
 
4 hours later…
7:33 AM
Rohit Nishad requested access. Rep: 602 - Questions: 6 - Answers: 22 (ratio 4:14.7)
 
 
3 hours later…
10:52 AM
This was the most starred message last year on this day:
 
 
7 hours later…
5:45 PM
@JBis encryption is for pussies so I'd probabl yjust store it all in plaintext in a database
@nebulae fuck man, same lol
@JBis lol sorry if I cheesed u with that comment
 
lol
@ballBreaker boomers
 
6:02 PM
lol
sup dude
 
wbu?
nothing much just chilling
its weekend
how are you here?
 
nice man, have a deployment of my massive project today
been up since 7am for it xD
I make 2x OT on weekends tho so it's pretty sweet haha
 
wow damn
migrates to canada
 
:D
most software companies don't pay OT here tbh
my last 2 didn't, consulting sucks
I looooooooove being the difficult client now
 
wow that is basically 600$ a day
 
6:06 PM
client > consulting every day of the week
 
sounds like worth the weekend work
ah i see
 
haha yeah I make a bit more now than th elast time we spoke too so it's a nice day
I also only really did 1 hour of work
I just gotta check logs and such to make sure its running now
and be around in case something breaks
 
lmao 700$/hr
wow rich crabss
 
lmao nooooo that'd be crazy
I wish
 
well since you only worked one hour instead of a day that is practially 700$/hr
 
6:08 PM
lmfao true
I'll be on call tomorrow too and I'm thinking I might do some shrooms tonight but idk
kinda risky for tomorrow haha
I'm an ideal employee
 
lmao
ideal and crabs sounds oxymoron
since you are making 1400$ over the weekend we need a virtual party
 
hahaha
 
damn this is even better since you are wfh that is basically free money even a pandemic can have some good effect sometimes
 
the pandemic has been lovely to my finances
legit best thing to ever happen to my wallet haha
 
lol
it has been bad for me for the most part
 
6:17 PM
@ballBreaker First, I've never heard that expression in my life. And secondly, nah you're fine. Tim pissed me off more than you and dave.
 
but maybe there is light at the end of tunnel
 
@JBis hahaha yeah its an ontario thing pretty sure
 
who let the kids out?
 
speaking of which i heard toronoto and ontario have it's own language.
 
@ballBreaker naah i understood that comment
 
6:20 PM
haha really? just the slang?
 
i mean i havent heard that before but the statement is kinda clear
from the context
 
yeah deffy fair
 
@JBis pissing people off is dutch national slogan
 
@JBis some people in toronto talk like retards
 
look at tim jordy mwb
 
6:21 PM
dont forget me
im dutch
not a national tho
 
you are dutch?
since when?
 
@CrabsStew in the uk "pissed off" means drunk
 
birth
 
got really confusing when i told my UK camp counselors that another kid was pissing me off at age 10
 
@JBis drinking is their national treasure too :D
@ballBreaker whatttttttttttttttttttttttttttt
i was imaging you had middle eastern genes , "al habibi"
 
 
2 hours later…
8:09 PM
@JBis haha thats funny
"taking the piss" is probably my favourite weird UK phrase
that one really confused me for a while
 
 
1 hour later…
9:27 PM
wait people actually talk in here on saturdays?
 
9:42 PM
haha I gues ssometimes
 
10:32 PM
omfg
the api i am using only sometimes returns a response code in the json and then sometimes its a string and othertimes its number
 
Guys first time in ages I got actual help from electronics community of stackexchange
0
Q: Rc Transmitter not working

asimTrying to fix an old transmitter from some rc toy, I may have removed the crystal oscillator some 4~5 years ago so I can only guess it was either 27Mhz or 40Mhz. I tried 27Mhz crystal oscillator (I don't have 40Mhz) but the transmitter didn't work on any toy that have an rc receiver (tried many),...

 

« first day (3703 days earlier)      last day (1236 days later) »