#arpnetworks 2010-05-26,Wed

↑back Search ←Prev date Next date→ Show only urls(Click on time to select a line by its url)

WhoWhatWhen
mrbithttp://chattanooga.craigslist.org/sys/1691930492.html
damn... I think i'm picking that one up tomorrow
[00:00]
jdoeyawn.
1850s are okay.
[00:00]
mrbiti could probably talk him down 250 on that [00:01]
jdoedell's lights-out shit sucks ass though (and I'm not even sure if it's on those offhand) [00:02]
mrbitmaybe 2 [00:02]
amdpropheti built my quad core xeon (x3360) rig for like $600, brand new
mind you, it's not rackmount
[00:02]
mrbiti likerackmount
takes up less space nice and neat
[00:02]
amdprophetyea they're cool [00:03]
mrbitman i need to quit fucking around and get back to work so i can get some sleep
its beenn fun
[00:03]
amdpropheti've got a few rackmount boxes, dual xeon 2.8, dual g5 xserve [00:03]
mrbitttyl [00:03]
amdprophetlates [00:03]
........ (idle for 37mn)
***AndrewBC has quit IRC (Ping timeout: 258 seconds)
AndrewBC has joined #arpnetworks
[00:40]
schmir has joined #arpnetworks [00:49]
LT has joined #arpnetworks [01:02]
................................................ (idle for 3h55mn)
nerdd has quit IRC (Read error: Connection reset by peer)
nerdd has joined #arpnetworks
[04:57]
.... (idle for 19mn)
Guest11764 has joined #arpnetworks [05:16]
Guest11764Sorry if I'm late to the game, but is anyone else having trouble getting to their VPS?
(This is mike-burns .)
[05:18]
amdprophetlet me see
i can get to both
[05:18]
Guest11764Oh I can get in now. [05:19]
mike-burnsWeird. [05:19]
***Guest11764 has quit IRC (Client Quit) [05:19]
amdprophetamdprophet goes to sleep
5:27 am...
[05:20]
mike-burnsNice and early. [05:20]
........... (idle for 52mn)
***cmeiklejohn has quit IRC (Quit: leaving)
cmeiklejohn has joined #arpnetworks
cmeiklejohn has quit IRC (Changing host)
cmeiklejohn has joined #arpnetworks
[06:12]
RandalSchwartzstill chuckling last night that he confused me for being some official rep, and just wouldn't shake that notion loose
and if he's *not* 17, he definitely stopped maturing about then. :)
[06:18]
***heavysixer has joined #arpnetworks
ChanServ sets mode: +o heavysixer
vtoms has joined #arpnetworks
[06:31]
.................. (idle for 1h28mn)
schmirI sometimes can't connect to my vps via ssh. http/https work fine. anyone else noticed that? [08:01]
mtvenope [08:01]
WraithanRandalSchwartz: looks more like you were getting confused, not him [08:09]
mhoranschmir: I believe there's a rate limit on SSH, perhaps that's what you're hitting? [08:14]
RandalSchwartzWraithan - I was clearly not confused.
he was addressing me like I worked for ARP
even after I told him twice
[08:18]
WraithanRandalSchwartz: he was addressing the channel, and even explained that [08:18]
schmirmhoran: can't imagine. I can't connect for 5 minutes... [08:18]
WraithanRandalSchwartz: you were the one being confused [08:19]
bob^^tbh i thought that too
trouble with irc i guess, easy to misunderstand/misread :)
[08:20]
awyeahmorning. [08:23]
AndrewBCHiyo [08:23]
RandalSchwartzno... he was chatting with me, and said "on your website"?
clearly, he thought, and continued to think, that I was staff.
[08:23]
WraithanThat was an initial misuderstanding
but he wasn't thinking that after you said you weren't staff
[08:23]
bob^^i think it was just an unlucky turn of phrase to use
i think he expected someone from ARP would read back up their log and see it
[08:24]
RandalSchwartzno - it continued after that.
... <mrbit> i was rly looking forward to getting one of the vps' tonight but i'll - just get one when you guys get some more in
again.. ."you guys"
[08:24]
Wraithanhe was making general statements due to the fact that this channel is ARP's channel, so speaking in the plural you is natural [08:24]
bob^^yeah, i think it's just general usage [08:24]
Wraithanyeah [08:24]
bob^^i'd do the same tbh
and i wouldn't mean it in the way you've taken it
either way
[08:24]
RandalSchwartzI'm sorry... when I'm chatting *with* people, I presume I'm talking *to them*.
Call it a human trait.
[08:25]
WraithanRandalSchwartz: did he tag your name on the front of the message? [08:25]
bob^^i don't think he was talking to you [08:25]
RandalSchwartzso if I say "you" here, it's Wraithan and bob.
not Arp
that's a very human thing to expect
[08:25]
WraithanRandalSchwartz: if not, it wasn't directed only at you [08:25]
bob^^you're right on that, but i think he was directing his comments at the channel (ARP) rather than you
hehe
symantics of language... fun :)
[08:25]
RandalSchwartzthen he should have said "when arp gets more boxes"
not "when you get more boxes"
[08:26]
bob^^lol @ my typo
semantics, even :)
[08:26]
RandalSchwartzI mean seriously, have we really ruined communication skills that far? [08:26]
coilmaybe he was drunk or something [08:26]
Wraithanit is a plural you dude, it is part of our language, other languages have a more explitic plural you that isn't confused with singular you [08:26]
AndrewBCAnd the world makes fun of Texas for "y'all" [08:27]
RandalSchwartzeven with plural you... to mean it means "the people currently participating in the conversaion"
even if I said "y'all" right now, it'd be the four people who have spoken here in the past few minutes
not the 25 idlers
[08:27]
bob^^why not the idlers too [08:27]
Wraithanto you, to him he obviously (and explained as such) meant the company [08:27]
RandalSchwartzbecause they're not talking [08:27]
bob^^what happens if you drop into a channel and go 'hey yall'
you wouldn't be aware of who had just been talking before you joined
so... you'd be addressing everyone
[08:27]
RandalSchwartzI'd expect it to mean the same thing as if I did that in real life [08:27]
bob^^all depends on context :) [08:28]
RandalSchwartzwhich initially would be "everyone in the room" [08:28]
AndrewBCyou'd be addressing the current active people implicitly [08:28]
Wraithan20:34:18 RandalSchwartz │ who the hell are you talking to?
20:34:27 mrbit │ the arp staff
[08:28]
RandalSchwartzbut if people start talking to me, the focus narrows [08:28]
Wraithan20:34:33 RandalSchwartz │ yeah, they aren't here
20:34:35 RandalSchwartz │ not right now
20:34:41 mrbit │ yeah well i'm sure they'll see it later randal
[08:28]
bob^^^^ that
he assumed they'd scroll back
[08:28]
RandalSchwartzcorrect, and that means he should stop using "you" to mean "them" [08:28]
bob^^which is probably not an unreasonable assumption, and he was polite enough about it too
anyway, moot point
[08:28]
RandalSchwartzsince to me "you" is "me" [08:28]
bob^^he's gone now [08:28]
RandalSchwartzif you're talking [08:28]
bob^^so hey ho [08:28]
coilhes still here [08:29]
bob^^bob^^ goes back to doing something useful [08:29]
coilidling [08:29]
bob^^oh hehe :) [08:29]
AndrewBC.... waiting [08:29]
bob^^bob^^ waves [08:29]
AndrewBCready to pounce
on ... YOU
[08:29]
RandalSchwartzRandalSchwartz goes back to preparing for FLOSS Weekly [08:29]
coilyeah i refered him to arp [08:29]
bob^^eep! [08:29]
coilbecause i've had great service [08:29]
WraithanRandalSchwartz: your rules surrounding English aren't the only ones. [08:29]
bob^^me too coil :D [08:29]
coilbut i wish people wouldn't speak for the company that aren't staff [08:30]
WraithanI can see plainly why he used you, though you are correct that he could have been less ambiguous [08:30]
coiland make someone lose business [08:30]
bob^^well hopefully your friend will still use ARP
:)
[08:34]
mhoranRandalSchwartz: I floss daily.
Har har.
[08:47]
AndrewBChee hee [08:53]
RandalSchwartzyeah, never heard THAT one before [08:54]
bob^^:D [08:54]
***LT has quit IRC (Quit: Leaving)
AndrewBC has quit IRC (Ping timeout: 264 seconds)
cedwards is now known as Zelut
Zelut is now known as cedwards
AndrewBC has joined #arpnetworks
[09:04]
..... (idle for 24mn)
sentabi has left "Leaving" [09:35]
........ (idle for 38mn)
schmir has quit IRC (Remote host closed the connection) [10:13]
........ (idle for 38mn)
dxtrOkay
I'm about to do my last course now!
The second course in Local Networks
o
[10:51]
bob^^easy stuff :D [10:55]
dxtr:D
Hmm... Five common operating systems for servers
GNU/Linux, FreeBSD, OpenBSD.. Windows Server?
[11:02]
RandalSchwartzsolaris
hpux
[11:03]
dxtrI'll go with HPUX :) [11:04]
RandalSchwartzsolaris is more prevalet
prevalent
since it came out earlier
[11:04]
dxtrDon't hate [11:05]
RandalSchwartzeh? [11:05]
dxtr:) [11:05]
RandalSchwartzjust trying to be accurate [11:05]
dxtrHehe [11:05]
RandalSchwartzif you don't need accuracy, just make things up [11:05]
dxtrWell, doesn't say any specific
Just "Five common server operating systems"
I'm going to write up on their history, differences and s tuff
Piece of cake (Wich is why I saved this for last)
[11:05]
RandalSchwartzoh yes, there's the Cake operating system. :)
RandalSchwartz ducks
[11:07]
dxtrThat would be awesome
Huge splash screen saying "The cake is a lie" or something when one boots it
[11:08]
RandalSchwartzoh yeah, and PortalOS(tm) [11:09]
jdoepfft
IRIX
[11:09]
hmm
jdoe gives Padre a shot.
http://is.gd/cqg4S had some neat things I'd never heard of before.
[11:16]
dxtrHmm
About OpenBSd
I've never gotten this: Wikipedia says FreeBSD is a UNIX-like operating system, but OpenBSD a derivative
Isn't it same-same? :P
Because as far as I understand FreeBSD is a derivative too
[11:27]
***heavysixer has quit IRC (Quit: BAMPF!)
heavysixer has joined #arpnetworks
ChanServ sets mode: +o heavysixer
heavysixer has quit IRC (Client Quit)
heavysixer has joined #arpnetworks
ChanServ sets mode: +o heavysixer
heavysixer has quit IRC (Client Quit)
[11:39]
..... (idle for 20mn)
schmir has joined #arpnetworks [12:00]
.... (idle for 17mn)
cedwardsI don't know about the derivative comment, but I understand they have to say 'UNIX-like' because of a trademark on the term 'UNIX'
unless you pay the piper you can't call yourself 'UNIX' (something OS X has done)
[12:17]
dxtrahha [12:17]
cedwards..at least that is my understanding. I have been wrong before. [12:21]
RandalSchwartzboth obsd and fbsd are in the same camp
and both are derived from real unix, so I'd call them "derivative"
where I'd call linux "unix like" since it shares no original code
[12:32]
......... (idle for 41mn)
***heavysixer has joined #arpnetworks
ChanServ sets mode: +o heavysixer
[13:13]
......... (idle for 44mn)
dxtrHmm [13:57]
***AndrewBC has quit IRC (Quit: Bye!)
AndrewBC has joined #arpnetworks
[13:59]
.... (idle for 16mn)
jdoeRandalSchwartz: er... can't imagine fbsd/obsd still have original code since proper unix licensing restrictions are, er, more restrictive than the BSD license. [14:18]
***vinnyt has joined #arpnetworks [14:24]
RandalSchwartzthey have "real" BSD code
I consider BSD to be "real" unix, because that's how it was shipped
as in, it was inherently blessed by AT&T before AT&T turned over the trademark to the Open group
[14:29]
jdoeer
my understanding is that FreeBSD (and the rest) were descended from BSD
a very big deal was made of BSD not containing any AT&T code.
[14:30]
RandalSchwartzyes.. but it contains code that was shipped in something that was full-out called "unix" [14:31]
jdoeer, sorry, BSDi [14:31]
***vinnyt has quit IRC (Ping timeout: 276 seconds) [14:31]
RandalSchwartzwhether it has any AT&T code doesn't matter at that point
so originally, unix = "just at&t"
for a while, unix = "at&t + bsdi"
now freebsd = "bsdi + other"
so yes, I consider freebsd to be real unix, since it contains parts that were shipped accurately under the unix label
even if they didn't come from at&t
nothing on the linux side can claim that
hence, linux = "unix-like"
[14:31]
amdprophetRandalSchwartz: you were saying you use HE's tunnelbroker on openbsd right? [14:33]
RandalSchwartzI had, yes.
no wait.
I used sixxs with openbsd
now I'm using HE with Airport Extreme
but I *could* have used HE with openbsd
it's just that I already had sixxs
sixxs predated HE
[14:33]
amdprophetahhh gotcha
i'm having issues with it, it's probably PF getting in the way but...
[14:34]
RandalSchwartzyeah... pf is gonna be crazy
outer rules for the ipv4
[14:35]
jdoewhich is the one that provides a bare tunnel and which requires a client? [14:35]
RandalSchwartzinner rules for the ipv6
sixxs needs a gif interface
he configures just fine with airport extreme
[14:35]
jdoeah [14:37]
.... (idle for 17mn)
***cmeiklejohn has quit IRC (Ping timeout: 272 seconds) [14:54]
toddfpf and HE works fine on OpenBSD, I have several systems tunneling to HE from OpenBSD
you need to understand that on the physical interface 'inet proto ipv6' is what must be passed for gif(4) to work, and then separately filtering v6 on the gif(4) interface
[15:06]
jdoe... wow the Mojolicious test suite is garbage
why on earth would testing apache cgi/fastcgi require osx... why on earth is it trying to listen to (and connect on) a privileged port... eesh.
[15:12]
cedwardsall of that sounds very "Ruby" to me, although I'm not familiar with Mojolicious. [15:14]
***AndrewBC has quit IRC (Ping timeout: 276 seconds) [15:16]
jdoeit appears to just be one of my favorite CPAN complaints. Everything works fine on Linux, someone is likely deciding all the world's GNU... [15:16]
dxtrhm, how did one easily calculate the amount of addresses in an ipv6 subnet? 2^(128-subnet)+
?
My mind is blank at the moment :P
[15:20]
up_the_ironsdxtr: yes [15:21]
dxtrWhere does the 2 come from?
do*
[15:21]
up_the_ironspower of 2 [15:21]
dxtrYeah, what I thought [15:21]
up_the_ironsdon't ask that if you're taking computer classes
or i will hit you with a noob stick
[15:21]
dxtrHaha :D
I'm doing my report in Local Networks B
[15:22]
***AndrewBC has joined #arpnetworks [15:23]
up_the_ironsLOLZ
$ make search key=dspam
Port: dspam-3.8.0p0-sqlite3
Path: mail/dspam,sqlite3
Info: anti-spam filter
Maint: Todd T. Fries <todd@OpenBSD.org>
...
toddf is a popular guy
[15:24]
dxtr:D [15:25]
up_the_ironstoddf: so do you prefer dspam over, say, spamassassin? I've run dspam for several years on Linux, and liked it quite a bit, but now that I'm redoing my mail server in OpenBSD, I'm revisiting spamassassin / amavis-new just b/c there is so much "support" for it (easy to find docs / how-tos) [15:26]
DaCaever compared the load generated by those two? [15:27]
jdoeup_the_irons: my experience with dspam is that it's (of course) much faster and less unpleasant with ram than perl, and more accurate given a large enough corpus and effort to keep it trained. [15:29]
up_the_ironsDaCa: dspam used a lot less resources
jdoe: yeah that's basically my experience too. training kinda sucks though
[15:29]
DaCaup_the_irons: indeed :) [15:29]
jdoeup_the_irons: training isn't *that* bad if it's just you. [15:30]
up_the_ironsDaCa: what do you use? [15:30]
jdoesetting up training for multiple users is a pain though.
... and then you have to figure out if you want a global data set, per-user training, etc.
which is why I always bitch out and use SA ;)
[15:30]
up_the_ironsjdoe: yeah, i'd need a multi-user setup. i mean, why not have my training benefit the whole server
jdoe: haha yeah
[15:30]
***vtoms has quit IRC (Quit: Leaving.) [15:31]
jdoefwiw if you get dspam's web thing working properly, that's not bad.
but that sucks if you have multiple domains
awww weak. Mojolicious doesn't play nice with taint mode :/
[15:31]
DaCaup_the_irons: OpenBSD spamd (greylisting+bob beckÃ's spamtrap list+dnswl.org whitelist)and vgrep :) [15:32]
up_the_ironsjdoe: i had dspam's web thing working nicely, but it was pretty slow after a lot of spam signatures were archived over the years [15:32]
jdoethere's some maintenance job that has to run periodically to prune old signatures.
I forget the option offhand, I haven't used dspam in a while.
[15:33]
DaCaI have been saying for more than 5 years that whenever vgrep gets too harsh I'll add dspam to the mix but didn't feel the necessity yet [15:33]
jdoevgrep? [15:33]
DaCavisual grep [15:33]
RandalSchwartzI recall inventing that term 25 years ago
nice to see it come back ground
although might just be a parallel invention
[15:34]
***cmeiklejohn has joined #arpnetworks
cmeiklejohn has quit IRC (Changing host)
cmeiklejohn has joined #arpnetworks
[15:34]
RandalSchwartz<<== old fogey [15:35]
up_the_ironsDaCa: what is "bob beckÃ's spamtrap list"? [15:36]
DaCaRandalSchwartz: dict shows it both in the jargon file and foldoc [15:36]
RandalSchwartzdo they quote me? :) [15:36]
dxtrI'm officially done with everything now [15:37]
RandalSchwartzyour life is over? [15:37]
dxtrNow I'll just have to wait and see if the teachers say I've missed something
Yeah, high school is my life
:(
[15:37]
RandalSchwartzoh. not *everything* [15:37]
dxtrBtw guys
One thing. How the hell would I trace an IP if my webpage had a poll that got spammed?
[15:41]
DaCaup_the_irons: uatraps in the default spamd.conf, itÃ'sa list which blacklists spammers caught at the university of alberta using greytrapping (also a function of spamd) for 24 hours [15:41]
RandalSchwartz"trace"? [15:41]
dxtrDoesn't say if it's distributed or not [15:41]
RandalSchwartzwhois -a "10.1.1.1" [15:42]
dxtrRandalSchwartz: Like, find the perpetrator so one can report it to the ISP [15:42]
DaCaup_the_irons: bob beck is an openbsd dev and admin there [15:42]
RandalSchwartzthat'll tell you who owns the IP
from there, it's up to getting cooperation from them
[15:42]
dxtrRandalSchwartz: But what if it's distributed? [15:42]
RandalSchwartz"distributed"? [15:42]
dxtrLike a botnet spammed my poll [15:42]
RandalSchwartzOh. good luck
not a chance
[15:42]
dxtrThat's what I thought :) [15:42]
RandalSchwartzyou *did* have a captcha, right? [15:42]
dxtruhm.. yeah... ofcourse :P [15:42]
RandalSchwartzif not, there's your lesson for next time [15:43]
dxtrIt's an assignment, RandalSchwartz [15:43]
RandalSchwartzwhat's an assignment? [15:43]
dxtrLike.. school stuff [15:43]
RandalSchwartzI mean, how is a poll an assignment? [15:43]
up_the_ironsDaCa: oh oik [15:43]
dxtrThe school assignment is about tracing IP-addresses [15:43]
up_the_irons*ok [15:43]
RandalSchwartzahh.
so the answer is... "too bad"
botnets are highly sophisticated now
that's why spam is outta control
[15:43]
up_the_ironsDaCa: default spamd.conf in which openbsd version? I have 4.6 and there is no /etc/spamd.conf.. [15:44]
dxtrThe assignment is: "Your boss have discovered a spam attack on your companys poll on the website. And now he wants to get the perpetrator (Is it called perpetrator, btw?). How do one do that? How do you get the IP? How do you trace an IP once you got it?"
I'm saying "Check the logs, do an whois <ip>"
But.. WHY IS THIS A GROUP ASSIGNMENT?
[15:45]
up_the_ironsdxtr: yeah, that's pretty much the basics [15:45]
RandalSchwartzoh - that's not a botnet
that's a single IP
[15:45]
DaCaup_the_irons: isn't it in /etc/mail? [15:46]
RandalSchwartzand yes, whois -a that.addr
and follow up with the owners of that IP
[15:46]
dxtrRandalSchwartz: It doesn't specifically say so :p [15:46]
RandalSchwartzwell - in one case, you might have a solution
in another, you can't
which do you think you got assigned? :)
[15:46]
dxtrBut still, I just asked if there's a way to find some source if it's distributed [15:46]
RandalSchwartzunless he's just trying to tweak you [15:46]
dxtr:) [15:46]
up_the_ironsDaCa: oh duh, thanks! [15:46]
RandalSchwartzRandalSchwartz goes back to worrying about whether he's presenting at LA.pm tonight or not [15:47]
dxtrBut how do these botnet guys sometimes get caught anway
anyway*
[15:47]
RandalSchwartzthe botnet people have to convert on the other side
it's like drug running
at some point, you have to connect with customers
and exchange things for money
[15:47]
dxtrAh, right [15:47]
RandalSchwartzbotnet operations are highly sophisticated and international, just like drug trafficking
but it all comes down to making a profit
and that's nearly always the weak link
or you have someone in your org that turns on you
[15:48]
dxtrcool [15:48]
RandalSchwartzbecause you piss them off or don't pay them on time
so yeah, the parallels are quite obvious once you think about it
the only difference is the actual product
since the product in both cases is pretty much internationally illegal, although to varying degrees
[15:48]
dxtrYeah
So that's how they get caught. I thought it was years and years of international investigation after a DDoS that leads to a conviction
:p
[15:49]
RandalSchwartzand to report the sophistication of these guys... their command-and-contact domain names are often based on the tweeting trends list [15:50]
dxtrlike, pseudo-randomness? [15:50]
RandalSchwartzas in... a bot wakes up, pulls the tweeting trends, computes a hash value from that, contacts hashvalue.org
and gets its next instruction
it's hard to get in the middle of that
[15:50]
dxtr:D [15:51]
RandalSchwartzespecially when a successful contact will then transmit a new hashvalue computation
so if you haven't been in touch from the beginning, good luck
[15:51]
dxtr:
:)
[15:52]
RandalSchwartzas I said - sophisticated stuff [15:52]
dxtrBy the way, RandalSchwartz. Speaking of FLOSS weekly
Downloaded episode 120 - and that guy in the beginning is hot! Anyway, do you have a way of like.. downloading EVERY episode?
Or do I have to click through every single episode? :D
No, I can't watch one episode. I'll have to see every one!
[15:52]
RandalSchwartzpull down the RSS feed
it has the most recent 20 eps on it
[15:54]
dxtrrght
Right*
[15:55]
RandalSchwartzryan or aaron? [15:55]
dxtrhuh+ [15:55]
RandalSchwartz"guy in the beginning" [15:55]
dxtryou, smartass [15:56]
RandalSchwartzuh... not sure I like being called "hot", unless you happen to be female. [15:56]
dxtrI was kind of joking.. You know..? Fun..? [15:56]
RandalSchwartzthat...comes across weird. please don't do that. [15:56]
dxtr:D
That usually happens around me
[15:57]
RandalSchwartzthen again, you're in high school... still not adjusted. :) [15:57]
dxtrTo be honest I think it's cultural. [15:57]
RandalSchwartzquite possibly
"hot" has to come from MOTAS for us
and if not from MOTAS, we object
[15:57]
dxtrMOTAS? [15:58]
RandalSchwartzmember of the appropriate sex [15:58]
dxtrHaha
Here we laugh about it :P
[15:58]
RandalSchwartzyeah - definitely cultural then
just beware when dealing with us crazy americans
[15:59]
dxtrWe usually say that when, for example, someone's on TV. Either "God that guy is hot/whatever" or the opposite
someone = someone we know
If we say the positive we usually have sarcasm in the voice though
So.. Yeah.. I guess it's cultural :P
[16:00]
RandalSchwartzyeah - that doesn't come through either
if you had smileyfaced "hot", I might have let it slip
it's why the smiley was invented
sarcasm doesn't come through in teext
[16:01]
dxtrYou never nkow
know*
[16:02]
RandalSchwartzOh... I know. Believe me... I know. :) [16:04]
dxtrHaha
http://imgur.com/gallery/9AKYl hmm
[16:04]
***schmir has quit IRC (Ping timeout: 240 seconds) [16:09]
jdoeRandalSchwartz: you're a cranky old perl guy, can you weigh in on something for me? [16:15]
RandalSchwartzI'm more than cranky about Perl
I have a wide range of cranks :)
[16:16]
jdoetaint mode in cgi: useful, unnecessary, or somewhere in between? [16:17]
RandalSchwartzYes. [16:17]
jdoeunhelpful response ;) [16:17]
RandalSchwartztoo broad a question
so if you give me a question that hasn't had quantum collapse, I respond likewise :)
[16:17]
jdoeI'm talking with the Mojolicious developers. I noticed that their module does not play nice with -T and found a reference to a mailing list discussion on a list that no longer exists, so I went to ask why it's broken and if it's going to stay that way or if someone's working on it, or...
... and I'm being told that -T for CGI is silly and why on earth would you want that, and so on and so forth.
[16:18]
RandalSchwartzthe problem is that it's horrible for absolute beginners, because they then cut-n-paste the code that untaints everything [16:19]
jdoeincluding some babble I don't fully understand about how "parsers" automatically untaint everything. When pressed on what "parsers" covers I got "HTTP, CGI, PSGI, chunked" etc. [16:19]
RandalSchwartzit's great for initial to intermediate hackers
and it's horrible again for experts
if you're playing with Mojolicous, you're probably in the expert category
[16:19]
jdoeI'm not convinced that's true ;) [16:19]
RandalSchwartzyou asked my opinion. :)
I wouldn't hand Mojo to any intermediate person
too early in the cycle, too underdocumented
too bizarre
[16:20]
jdoetrue. Can you elaborate on why it's so horrible to have programmers of any skill level forced to sanitize input? [16:20]
RandalSchwartzand too likely to change in the next release
that's a completely separate question
you asked about taint
[16:20]
jdoeis it? [16:20]
RandalSchwartzyes
taint is a detection for failure
[16:20]
jdoedoesn't taint force (or at least encourage) sanitizing input? [16:21]
RandalSchwartznot a means to sanitize
it forces the same rules on all data
some data it doesn't matter
for example if you know you'll be carefully inserting this data into a database using a placeholder, then you don't need to sanitize at all
or if you'll be using it as an arg in a multi-element system call, and you know what that's calling
so taint is a broad brush
sometimes you want a smaller brush
thus... good for beginners to intermediate
bad for advanced
and bad for early beginners tempted to work around it
I don't need taint like I don't need warnings enabled.
I *know* the good practices.
and warnings enabled just make me do stupid things
like $foo =~ /bar/... no wait, I have to use ($foo || '') =~ /bar/
too much crappy code like htat
anyway, you asked, I told
jdoe?
[16:21]
dxtrRandalSchwartz: By the way, when you get a weird question like that in the beginning
The standard answer is "How long is a string?"
[16:26]
RandalSchwartznot for me [16:26]
dxtror rope [16:26]
RandalSchwartzI like to be a bit more clever
heard "how long is a string" too many times :)
maybe you haven't, you tyke. :)
[16:26]
dxtrI think that one is clever because it still makes people think for a while [16:27]
RandalSchwartznot if you've heard it 100 times :)
I think having to think about what a "Yes" answer means for that is more fun
[16:27]
dxtrUnfortunately, yes :/
That's more "wtf" actually
[16:27]
RandalSchwartzyou should hear what I do for false dichotomies :) [16:28]
dxtrBut I might be damaged from my mom [16:28]
RandalSchwartz"should I use Apache on my next project? or Squid?" [16:28]
dxtrI can ask stuff like "What do you want to eat? Pizza, burgers or something else?" and she's like "uhm, yeah" [16:29]
RandalSchwartzmy reply might be "should I take my lunch or the bus to work" [16:29]
dxtr"Mom, wtf?" - "Oh, what did you say?" [16:29]
RandalSchwartzok. time to sync the iphone... and head down to happy hour [16:30]
dxtrI'm getting an HTC Desire o [16:30]
RandalSchwartzthat would not be as useful for me as an iphone is [16:30]
dxtrSure it would! [16:31]
up_the_ironschannel poll: how do you subscribe to mailing lists? do you use, say, your regular email (gdolley@arpnetworks.com) or an email + extension (gdolley+ml-openbsd-misc@arpnetworks.com)
email + ext, for automatic filtering into folders
[16:31]
RandalSchwartzit depends on whether my email is revealed to others [16:31]
dxtrup_the_irons: I haven't gotten that last to work with postfix :/ [16:31]
RandalSchwartzany place where it might be, I just use merlyn@ [16:31]
jdoeRandalSchwartz: sorry, I'm distracted by real work and an increasingly irritated mojo dev :P [16:31]
RandalSchwartzbut if I know it'll always be hidden, I tag it [16:31]
up_the_ironsdxtr: mail + ext works really easily with postfix using dovecot as the LDA [16:32]
RandalSchwartzthere's more than one mojo dev? [16:32]
jdoewell, if he's not a dev, than an op. [16:32]
up_the_ironsRandalSchwartz: gotcha [16:32]
RandalSchwartzespecailly when dealing with companies
every single time some $vendor wants my email, I use "merlyn.$vendor@"
[16:32]
dxtrup_the_irons: LDA? [16:32]
RandalSchwartzso that I can tell when my name gets sold [16:33]
dxtrLegal Drinking Age? [16:33]
RandalSchwartzand then quickly block that spam, and yell at $vendor [16:33]
dxtrLow density amorphous ice?
Ah
[16:33]
up_the_ironsRandalSchwartz: roger [16:33]
dxtrsilly me
Ignore that, up_the_irons :D
[16:33]
up_the_ironsdxtr: local delivery agent [16:33]
dxtrIt's just me being tired [16:33]
up_the_ironsok [16:33]
RandalSchwartzI've had one vendor repeatedly sell my email, regardless of the checkboxes
but I can't switch because I have a contract with them for a good number more years.
[16:34]
dxtrSo postfix doesn't handle it by itself? [16:34]
up_the_ironsdxtr: it probably can, I just never tried [16:34]
RandalSchwartzI use procmail to sort mine [16:35]
up_the_ironsI use dovecot as my LDA so everything is just delivered to it
i wanted to use procmail, but then i saw the syntax
[16:35]
RandalSchwartz.. * LOCAL ?? ^merlyn+stonehenge+/.* .. {
.. TO="$MATCH" so that lets me grab TO = everything after that dot
then I can sort on that
... * TO ?? ^majordomo$
etc etc
procmail rocks
[16:35]
jdoeRandalSchwartz: yeah, I get that if you know explicitly where something is going that you may know better than perl does, but isn't that an argument for a framework to use taint checking? By definition it has no idea where the input is going, except maybe for a couple cases like using the url path to figure out what handler to call. [16:35]
RandalSchwartzagain - broad brushes sometimes paint too much
so... no
[16:36]
jdoenot "better safe than sorry"?
;)
[16:37]
RandalSchwartzjdoe -- see my warnings example
crappy code doesn't make me feel less warned
it simply says that warnings are too broad for me
ditto taint mode
it interferes sometimes when I know better
therefore, I can't use it
at least warnings has "no warnings qw(foo)"
if you can remember the foo
but taint has no such thing
except an overbroad regex match
[16:37]
jdoeRandalSchwartz: "Sebastien Riedel", if the name means anything to you. [16:38]
RandalSchwartzyeah. *the* mojo dev [16:38]
jdoehe may not have been irritated, just German. [16:38]
RandalSchwartzthat's why I said "more than one?"
SRI
[16:38]
jdoeyeah, I just assumed his nick would have some relation to his cpan username [16:39]
RandalSchwartzso far, mojo seems to have one dev, and a few dozen interested users
who are willing to put up with SRI :)
[16:39]
jdoeI liked the looks of it in theory. [16:39]
RandalSchwartzand you know the old saying [16:39]
jdoeI'm less impressed with his assertion that everything magically untaints itself. [16:39]
RandalSchwartzthe difference between theory and practice in theory, is less than the difference between theory and practice in practice. :)
somewhere I saw someone recurse that one more level
but I can't find it now
the difference between the difference between theory and practice in theory and theory and practice in practice ... is less than...
something like that
[16:40]
jdoeI dunno. I like having -T as a safety net. Worst case it annoys me, I'd rather it do that than miss something that could cause problems. [16:41]
RandalSchwartzyeah - so you're in the middle. happy for you! [16:41]
jdoeit's not perfect, but it at least forces me to think first. [16:41]
RandalSchwartzI'm over here ==> beginner [ . . . . / ] expert
so it merely annoys me
[16:41]
jdoehaha. Wherever I am, I prefer to think of it as acknowledgement of fallibility than a comment on skill.
... although yeah, I'd be pretty happy to call myself intermediate.
[16:42]
RandalSchwartzI fail, but I have other means to check that [16:42]
jdoedo tell [16:42]
RandalSchwartzI would, and I'd miss more of happy hour.
g'nite all!
[16:43]
jdoelater!
haha
[16:46]
dxtrRandalSchwartz is getting wasted
Is it just me or is it disturbing that my teacher have mail contact with my girlfriend?
[16:47]
***Nat_UB has joined #arpnetworks [16:50]
mick_laptop has quit IRC (*.net *.split)
nbari|away has quit IRC (*.net *.split)
bob__ has joined #arpnetworks
mick_laptop has joined #arpnetworks
nbari|away has joined #arpnetworks
bob^^ has quit IRC (Read error: Connection reset by peer)
[17:02]
..................... (idle for 1h41mn)
heavysixer has quit IRC (Quit: heavysixer) [18:44]
....................... (idle for 1h50mn)
Aila has joined #arpnetworks [20:34]
Aila has left "Leaving" [20:44]
mrbithey Randal
how are you tonight?
[20:47]
............................. (idle for 2h24mn)
dxtrYay!
Apparently I don't have to go to school today o
[23:11]
mrbityay!
sup dxtr
[23:22]
dxtrNot much
And it feels weird
For a couple of years know I've always known I've had school stuff to do
Now I'm done with everything and don't have to go to school today
So I don't know wtf to do .p
[23:23]
mrbithehehe [23:23]
dxtrI have nothing important to suppress [23:23]
mrbitenjoy it man!
damnit i forgot my passwd on #arp
:sigh:
*reads logs*
brb
[23:23]
dxtrHehe
Since I got my VPS in March or something I've used about 30GB bandwidth :D
[23:31]
mrbitNICe
unmetered i assumem
[23:35]
dxtrWell, I've got 100GB each month so [23:42]

↑back Search ←Prev date Next date→ Show only urls(Click on time to select a line by its url)