I ask as a moderator of security.se. Would it be better if moderators didn't gain/lose reputation for their questions and answers? We are already supposed to represent the communities we mod, and we already have full access to the tools that are the 'prize' for good participants. So perhaps we, l...
@TimStone yeah, it was too late (I was sleepinating) or I would've offered some feedback on that one ... I think the accepted answer was the simplest tho
I'm creating a GreaseMonkey script to improve the user interface of the 10k tools Stack Overflow uses. I have encountered an unreproducible and frankly bizarre problem that has confounded me and the others in the JavaScript room on SO Chat. We have yet to find the cause after several lengthy debu...
The most awesome thing about that code being, if you write it almost any other way, it doesn't break. Only when you write it the way you almost always would...Took us several hours to figure out what the hell was going on, heh. I think Yi Jiang was almost ready to voluntarily go wash rice.
@TylerChacha Yeah, interesting things arise from lack of forward planning.
If everyone cared, and nobody cried, if everyone loved and nobody lied, if everyone shared and swallowed their pride, then we'd see the day.... when nobody died
Is anyone else seeing switching rooms taking forever ? My internet connection feels fine as far as loading other pages, but loading chat rooms drag on and on.
I'm an idler. I'm in rooms that I rarely speak in, but I like having them there. Same thing I do on IRC. So I'd have a heck of a lot of tabs open if I had a tab per room I'm in.
@RebeccaChernoff Yeah, I have ten open right now...It does kind of get unwieldy, but if I didn't have them open in separate tabs I'd probably not notice activity in the other rooms.
Since I don't have much knowledge in databases and web programming, I won't include the reasons to "why I think it could run on GPE and cost much less to the developers".
But I'll be glad to hear opinions!
@MichaelMrozek actually that probably is the form I want. Trying to simplify a SQL script and get performance boosts where I can
I have left.Value - ( left.Value * r.Sum / r.AdjustedSum ) more or less ... sadly it's in a M:N join so I can't make it a constant without introducing a cursor
@MichaelMrozek Hahah, I have no objections to that. I think it might be even more helpful with the ability to jump to that referenced message (if it's still in the current chat window) and to have the ID and/or timestamp of the message in the preview box (since sometimes I have a hard time figuring out where the message that was being replied to showed up in the transcript)
Does anyone know interesting clones of the SO web site model?
Please list valid clones.
If the site exists in this list of Stack Exchange sites it is not a clone but part of the self-hosted Stack Overflow solution.
@Zypher I look forward to doing this many many many many many many many many many many many many many many many many many many many many many many many many many times.
oo ooo oo they can't even get into the one piece of equipment to save them ... oh my that just makes me smile :-D (cus i turned over the passwords on my way out)
better to write down all the passwords and laminate them and then say "if you lose this you're screwed cos I won't remember them" and then check back in 12 months and notice nothing has been changed
remember you're not getting any benefits from them, nor long term commitments, so you have to treat it like a business. Like I said, long talks with my ex-bosses. They were coaching me for contractor work for other customers.
@radp NO cos it'll end up looking like emacs or vi or something that's not based on a red X and blues ;)
I totally missed the part where contracting you plan for 10 hours billable, try and squeeze 30 in pay out of those 10, hope for 40s worth, and still have to manage the overhead of all of that, plus the expenses of no work. It was enlightening
If the trilogy sites are going to look the same, I think they should...look the same.
These minute pixel differences irk me. ;)
@drachenstern For some reason I originally read that as you hanging your headphones on the door and I was confused what that was supposed to signify. Also, gogogo, you're more behind on your timesheet than I am, for shame! ;)
This happens all the time.
The problem (not the answer to the question) is this. Many SO posters are looking for quick points, they favour short quick answers, and get quite upset with anyone who sees the bigger picture, the deeper problem, and speaks to that.
Of course the best thing to do is...
Seriously, who keeps up voting this guy's nonsensical ranting?
@MichaelMrozek Maybe you can explain this to me: "...it effectively allows anyone who could have compromised the otherwise non-privileged user account used to su from to gain root (at the next invocation of su by the admin)." Is it really that trivial to hijack a user's terminal?
@RebeccaChernoff Heheh, what an appropriately played word ;)
It was from an old mailing list explaining why OWL doesn't have sudo, and that sentence in particular was about why there was no reason to SSH into a limited-privilege account and then su to root, since if the limited-privilege account was compromised then the root account could also easily be compromised, invalidating the whole premise.
> Yes, it used to be common sysadmin wisdom to "su root" rather than login as root. Those few who, when asked, could actually come up with a valid reason for this preference would refer to the better accountability achieved with this approach. Yes, this really is a good reason in favor of this approach. But it's also the only one. And the reason I give against using this approach is that it effectively allows anyone who could have compromised the otherwise non-privileged user account used to su from to gain root (at the next invocation of su by the admin). So the separation between the non-root and the root accounts is lost.
@Pekka That's rather unfortunate. Assuming he has the experience he describes, I imagine that there's credible information in his answers, but that's difficult to spot under the condescending tone and wildly tangent retorts. :/
I think I get it well enough now, I was going about it the wrong way. ;)
If the non-privileged account is compromised and the sysadmin doesn't notice, then when the sysadmin logs into the non-privileged account and su's to root, whoever compromised that same non-privileged account could presumably snoop on their activity and repeat it at will, I guess. Which would be almost the same level of effort as if they had just compromised the root account directly.
@TimStone assuming you mean the quy you quoted, and the answer you quoted, that's an incredibly valid viewpoint, and just goes to prove that all security is theater. The best you can do is unplug the network cable and seal the machine in a concrete case.
@TimStone not even that complicated, once someone issues a su command, then any succeeding su in a predefined interval (cos you can change it by system) doesn't require a password.
so if you are running top (or something that shows processes being run) and you see a "root" process run (something only the root user would do) then you would know you had a small window of time to su. once you did su root, then the rest is self explanatory
@drachenstern Yeah, and if you just made it output "Wrong password" and remove itself, the user would rerun su, get the correct one this time, and probably never guess
Does anyone know interesting clones of the SO web site model?
Please list valid clones.
If the site exists in this list of Stack Exchange sites it is not a clone but part of the self-hosted Stack Overflow solution.
This happens all the time.
The problem (not the answer to the question) is this. Many SO posters are looking for quick points, they favour short quick answers, and get quite upset with anyone who sees the bigger picture, the deeper problem, and speaks to that.
Of course the best thing to do is...
