« first day (1297 days earlier)      last day (3710 days later) » 

12:00 AM
Is that recorded?
 
well, it's next month so probably not?
no idea if they will record
 
Heh I mean will it be a recorded event
E.g. Video of your talk
Gotcha
 
if not, I can do it again on the webcam in that sexy outfit you like
 
The other interesting side of our stack is just how damn fine tuned everything is. I show off the CPU usage chart at every meet and greet I go to.
 
@NickCraver So then do you have some drive that you make builds off of, and save all changes to it?
 
12:01 AM
Every outfit is sexy when it's pants-less.
 
yeah still gotta grab some opserver shots
@hichris123 not sure I follow, we have TeamCity which does a hg update to an staging repo on the agent that does a clean clone for the build that deploys to all servers in a rolling fashion...does that answer it?
 
Yep. I'm so confused at .NET and MS stuff... no less a website as big as SE. :P
 
@NickCraver that still has nothing on I'm a PHP developer, what should I name my cat
 
most things we do are bare metal/simple as possible, if we can stop site, copy files, start site...we will, and do
 
@hichris123 that's all just a big PR lie - it's mostly written in x86 asm cross compiled to VBScript.
 
12:05 AM
Rasmus is a great name for a script kiddie feline.
Oh @NickCraver thought of something else: config in DB rather than JSON/YAML like all the cool kids do. That was weird to figure out.
 
@Shog9 YOU'RE OFF THE ISLAND
 
@Shog9 I guess you made up this lie then... aren't you kinda a PR person too? :P
 
@hichris123 That's ALL I am - never trust any information I give you
 
@KasraRahjerdi no kidding, YAML can blow me
 
@Shog9 You should add that disclaimer to your profile.
 
12:07 AM
@Shog9 Fixed that for you.
 
lol
@hichris123 "I think I know what I'm doing" doesn't give it away?
 
I wonder if there's any IL left in our codebase
/me goes hunting
 
@Shog9 That part isn't on your mSO profile.
 
hmm... what site did I put that on?
 
I know SO.
 
12:08 AM
Well there's Jil which talks to Sigil which is IL
 
yeah we have released most of the things that need IL level optimization as projects for others to use
 
Yeah, SO and A51 @Shog9.
 
wonder if there's any left in the core codebase itself
                    var il = dm.GetILGenerator();
                    il.Emit(OpCodes.Ldarg_0);
                    il.Emit(type.IsValueType ? OpCodes.Unbox_Any : OpCodes.Castclass, type);

                    il.EmitCall(OpCodes.Callvirt, getMethod, null);

                    if (property.PropertyType.IsValueType)
                    {
                        il.Emit(OpCodes.Box, property.PropertyType);
                    }
                    il.Emit(OpCodes.Ret);
oh yeah, there's IL in there
 
Did you guys just come in here to stop working? :P
 
@hichris123 What do you mean "stop"?
 
12:10 AM
multi-tasking!
 
lol
 
What do you mean by "work"
 
@KasraRahjerdi Hmm... ask Anna, since she's apparently a bot.
 
we have to remind Kasra you're supposed to start drinking after work at least twice a week
 
@KasraRahjerdi it's okay, you're a manager now. you wouldn't understand.
 
12:13 AM
@NickCraver speaking of which, Saturday is national margarita day!
 
That sounds like something Shog would be advertising.
 
Shog is not quite the margarita type.
 
I'm so excited to see Chris Pratt in that
 
hell yeah, that looks like a fun one
guess I should arrange babysitting now, is 6 months ahead of time too early?
 
12:23 AM
@animuson yeah, I hate margaritas. Really, I just hate tequila. Although when I make margaritas I make them mostly out of tequila, which tends to not support my argument very much.
 
Hiya @Manishearth
Manishbot has been behaving today
 
@Undo yeah
 
phew Some non-blue people are chatting now. :P
 
Everyone is blue in the Teacher's Lounge. :P
 
@animuson I know. It would be so weird in there...
 
12:32 AM
That's why I want to find a way in there - I could be the first non-blue user in years!
 
In the Teacher's Lounge, noone can hear you scream.
 
Hmmm... I think @AnnaLear is subtly hinting at something.
 
looks at @Undo's user account ashes
 
D:
 
Only at the desperation and futility of a moderator's existence. #ennui
 
12:34 AM
hehe
 
I almost made a code change today that would have let you in. almost.
 
@NickCraver What would it have been?
 
I got tired of seeing crazy SQL in my dashboards =P
 
>:(
@NickCraver What would it have been? I wanna know!
 
@hichris123 just some IQueryable that makes pretty crappy SQL in chat...chat's more Linq2SQL than the Q&A code by a lot
 
12:37 AM
huh
 
Mm... how's that make someone normal be able to get into TL?
 
@NickCraver Hey, Undo's already broken in to better places :p
 
I've broken into the Teachers+1 Lounge!
 
lol
 
Do Teacher's Lounges' at schools count? :P
 
12:39 AM
5
Q: Where does the phrase "balls to the wall" come from?

Kasra RahjerdiI know the phrase means "going all out" but I can't figure out what it literally means or where it originates from.

 
@hichris Are they server-side validated?
 
^ in case you guys were wondering what we talk about at lunch at Stack HQ
 
@Undo There are non blue people in TL
 
@Manishearth On the access list, must be?
 
yeah
also the bot. The one which breaks things.
 
12:39 AM
@Undo Possibly. Not sure... would have to check. :P
 
@Manishearth What does the bot break?
(must be the ping-bot?)
 
@Undo yes,
it breaks markdown
 
rofl
how do you do that?
wonders how I could break markdown
 
we have a timeout restriction on the regex engine, so good luck :)
 
@NickCraver what?
Timeout...on regex? O.o
 
12:50 AM
don't want a regex on a crazy submission pegging a web server
 
@NickCraver Define 'crazy submission'
 
@NickCraver wait, but you guys define the regexes, and there already is a length limit. Why would that ever be a problem?
@Undo unicooooode
 
nothing I could paste it chat, they're usually enormous and have some crazy pattern - not intentionally malicious
 
zaaaaaaalgo
 
also, control characters, which still hasn't been fixed grumble
 
12:52 AM
@Manishearth you can easily create a regex that runs for hours on certain content
 
@NickCraver Yeah, but the reverse? Creating content that runs a relatively simple regex for hours? O.o
 
yeah sure
that caused a hotmail outage once
 
ouch
 
they searched for XXX and someone sent an email of just 50k of XXXXXXXXXXXXXXXXXXXXX
 
12:53 AM
bounced from forwarder to forwarder knocking every one offline
 
rofl
 
checking for 2 char line endings in spaces and people submit things with just 20k spaces at the end of a line can crank for a bit....just weird crap
 
That's an interesting way to take down a server
@NickCraver btw, any chance the cotrol chars thing will be fixed? It still works
in The DMZ on The Stack Exchange Network Chat, Feb 5 at 22:04, by ManishEarth
@AviD #Creative Commons Attribution-ShareAlike / Author Manishearth
 
why not have the safeguard? IMO it should be set by default
 
and its scary
yeah, makes sense
 
12:58 AM
Hello all. When an On Hold question has a successful edit, it is flagged for re-opening somehow? Or is there another process it has to go through?
 
@PaulHicks yes
it gets thrown into the reopen queue
 
Cool, thanks.
 
@Manishearth hasn't come up in our calls - I'll add it to the monday list
 
@NickCraver K, thanks.
 
@PaulHicks The question does have 2 reopen votes.
 
12:59 AM
(y)
 
Does timocracy mean government of the Tim's? O.o
 
1:14 AM
@hichris123 seems reasonable
@PaulHicks reopened
 
@hichris123 swagism
capitalism, communism, bah! We need to try swagism!
 
@Undo Heh. I should really answer that on my test tomorrow...
 
@hichris123 ALL GLORY TO THE HYPNOTOAD HYPNOSWAG
@Undo all property is owned by the lord of the swag, and is doled out generously every now and then?
 
MOAR ISMS
 
@Manishearth exactly
But you have to win a contest to get your property.
 
1:18 AM
Even food? Seems a little extreme...
 
Yes. If you don't work you don't eat!
 
But... but... that means I can't code all day! :(
 
SE branded cakes. That is all.
 
@Manishearth Or branch off SE into SE as it is, and then the other part of SE a baking company. :P
 
stackcakes.com
huh, that's a real domain ;(
 
 
1 hour later…
2:25 AM
@AnnaLear It's nothing really, it's just there's many ways to get into dev.SO without being a SE developer.
 
@TheWobbuffet that's been somewhat intentional, but since it's being abused we'll now lock it down
 
@NickCraver It's not being abused, I've just never seen it. I'm kind of trying to find out how to get in, actually; I just call it hacking, not doing anything wrong.
 
@TheWobbuffet it is, and since there's account skew between dev and prod, or amongst dev, it's not something we can allow anymore
 
@TheWobbuffet It's not really that big of a deal... just some devs testing stuff. :P
 
you can't login as any user, but there's a chance you'd login as some other user due to account ID skew
 
2:30 AM
Oh well...
@NickCraver Yeah, that's what I was in the middle of doing... I was about to do it now, ayway, after I just was about to try out my theory
 
if you can get in, I'm curious which route you're taking
 
@NickCraver I was thinking of messing with the fkey...
 
yeah that's a guid....good luck.
 
Thanks
 
@Nick Have you guys ever patched my hole?
 
2:31 AM
@NickCraver Ask Oded, there are some ... other ways to get in
 
Now I actually know how to get in :P
 
@hichris123 which?
 
Which are more serious
 
@Manishearth Why'd you tell him?
 
@NickCraver I told Oded about it...
 
2:32 AM
@TheWobbuffet I think Oded already knew
@TheWobbuffet uh....because they should fix it
The dev tier is not all fun and games.
 
@Manishearth Not before I try it out :P
 
the API?
 
@Nick Yeah.
 
@hichris123 Wud'yu mean, the API?
 
2:34 AM
@hichris123 I've asked permission into that room, just to see
Who's the owner?
 
@TheWobbuffet You're probably not going to get it... Oded's the owner.
 
@NickCraver The other method, which I haven't fully fleshed out yet, is that dev.stackauth can be a gateway to a PII leak since you can already login to dev.SE.
 
@hichris123 Oh noes :( How'd you get in?
 
@Manishearth no you can't
 
You can't?
 
2:35 AM
try it.
 
@TheWobbuffet He let me.
 
I thought that might be it, @Manishearth
@hichris123 Why'd he let you?
 
@TheWobbuffet I was telling him about the bug...
 
@NickCraver And I'm not sure if it still works, but a couple of months ago HTML manip could get you into dev. And the other parts of the tier as well.
 
@hichris123 Oh, well you can still tell me about it :)
I still can't get into dev.SO... I've tried everything
 
2:36 AM
@NickCraver Are you sure it's best to mention the origin of the hole here, publicly?
 
By everything I mean staring at what might be useful
@Manishearth I think it's a great idea
 
@Manishearth tomorrow I'll be deploying changes to our auth that will lock down dev in a pretty global way.
 
Ignore him, Nick :P
 
@NickCraver Great :)
 
Well, now that the fun and games are over, @hichris123 can tell me how to get in
 
2:37 AM
@TheWobbuffet You probably don't know what the dev tier contains. Again, not all fun and games.
 
@Manishearth I've witnessed being faked as a real user on dev.SE
 
@TheWobbuffet that's not it
 
One does not know until one experiences
@Manish
 
Known vuln with probably no PII leak
 
Oh :P
 
2:39 AM
@Manishearth Keep your fingers crossed... :P
 
Are you saying me talking to myself isn't fun and games?
 
@KasraRahjerdi Testing the Portugese stuff in your username, too, I see.
 
@KasraRahjerdi That seems really fun and gamey, tries harder to get in
 
@hichris123 Racist to think random accents I hit on my keyboard are Portuguese
 
@KasraRahjerdi "random" - doubt it. :P
 
2:41 AM
"user":{"fkey":"4e517466abe87b9bf450280f35e8e7d4","isAnonymous":true} seems fishy, @hichris123
 
All I did was hit random alt combinations until one of them did an accent :)
 
@KasraRahjerdi lol
 
You think if I... change that number, something will happen?
 
@TheWobbuffet it will work even less if you change that
 
@TheWobbuffet Mm... I doubt it.
 
2:41 AM
That's a CSRF token
The mighty fkey
Change it, you break it further
 
Yes... right... so what do I change?
My openID?
 
You change your job (even though you're a kid). Apply for a job at SE, then you'll find out. :P
 
@hichris123 Wud'yu mean?
 
@TheWobbuffet Go work for SE.
 
In other news, generators/yield in Javascript is very fun
 
2:43 AM
So they know they have ways of getting in?
 
@TheWobbuffet Probably... but you'll get access anyway if you're a dev...
 
Only available in firefox right now, and I'm only using it in the browser backend code, but ... wow
 
@hichris123 I don't really have time to try to get in, so can you give me less vague hints to getting in?
 
@TheWobbuffet when they lock it down you can know all
 
Darn it...
But... dude, seriously...
 
2:45 AM
@Manishearth You have to make sure it doesn't work first...
 
You'll also find out why we're being cagey about it. dev.SO isn't the issue
@hichris123 that's easy
@TheWobbuffet ?
 
@Manishearth Yep.
 
that's the [sec.se] blog
 
Nvm
@hichris123 Am I getting closer looking at `site.switch({ target_site:17, item_type:3 }),
site_switcher.click({ item_type:4 })` ?
That might just be the site switcher
I found what's stopping me
StackExchange.ready(function() {
            var ddl = $("#footer select.language");
            ddl.change(function() {
                StackExchange.switchLocale(ddl.val(), '/users/login?returnurl=%2f');
            });
        });
@hichris123
It's not what's stopping me, but leading me to figure out what is
 
2:49 AM
@TheWobbuffet the site switcher and all won't work because they all make POST requests and the site has basically just rewritten all POST requests to /login
 
Dammit
I've indexed through all of the source code, but found nothing useful
 
While we're on the topic, check out d_lec's awesome blog post about hacking SO: danlec.com/blog/hacking-stackoverflow-com-s-html-sanitizer
 
Maybe var ddl = $("#footer select.language");
ddl.change=0; will do something
 
3:06 AM
You know what, tell me tomorrow... I give up... tried changing my user information...
 
change that should lock down dev going out now, then I'll kill existing user sessions
@Manishearth can you try getting in now?
@hichris123 same ^
 
Nope.
You shall not pass.
:(
But... I want to pass @Nick!
 
off to bed, hack away and @ me if you find a way in - I'll be checking for anyone who got in regardless in the morning
 
@NickCraver sigh You and your logs...
I found those extra things you added. :P
@Undo ^^ Is your hole still there?
 
3:23 AM
finally finished all my homework :D
now I have to sleep though
 
3:40 AM
@hichris123 it was six hours ago, don't feel like checking now.
 
@Undo Nick just pushed a patch that should globally restrict access to Dev.
 
I doubt he killed my bug
 
Just try it! :P
 
Fine :P
Wow, I think he might have :D
lemme check some more.
Nope, still there.
 
Aww... :(
Mine's gone as far as I can tell.
 
3:47 AM
They sure locked down Dev.se, though
 
Dev.SE is locked down?
Lemme look.
 
Yeah, try to login
 
Now I need a way to spoof internal IPs. :P
 
Looks like they took my advice:
in Undo & Oded, Dec 16 '13 at 22:12, by Undo the Snowman
Only allowing approved IPs or something.
 
Mm... Kinda.
I don't think they did that on dev.SO.
 
3:57 AM
I think they did
i'm going to have to experiment with IP spoofing, see if Nick was lazy about checking the IPs :P
 
They added some stuff to the login, I can tell you that.
 
When a site graduates, does your flag weight get reset?
 
I doubt it...
What do you think of the design @jmac?
 
The design is awesome
but my flags are lacking
or do you get more flags at 20k than 10k for delete?
 
You get more delete votes with rep... Some more flags too. (Like 1 for 3k rep)
 
4:09 AM
Weird, I have 23 flags, but only a few delete votes. I wonder if it worked that way before too?
 
@NickCraver dev.SO (and other) content still accessible via the other bug. Getting a "suspicious request" if I try to forge POST requests
dev.SE locked down proper
 
4:28 AM
hey , good morning all !
 
 
1 hour later…
5:33 AM
If an answer has erroneous information and one inform about this trough comments. Is it considered better to downvote or edit/correct the answer in question if nothing happens?
 
if you don't have the edit privileges, most likely your edit won't be accepted.
 
OK, thanks. I'll wait and see then.
 
5:54 AM
Good afternoon from here~
 
-1
A: Using Image Magick with Junit and Selenium

user3334304thank you, and I am welcome thank you, and I am welcome thank you, and I am welcome thank you, and I am welcome thank you, and I am welcome thank you, and I am welcome thank you, and I am welcome thank you, and I am welcome thank you, and I am welcome thank you, and I am welcome thank you, and I ...

-2
A: Full screen apps keep switching places

JuanitoAAAAAAAAAAAAAAAMZING. Should have known. Duh.

 
 
2 hours later…
8:03 AM
morning
 
8:32 AM
good morning Flyk
 
Is there a default close reason for questions like this one or is the current custom one fine?
 
double espresso #1 - gone
@Stijn that seems like trivia
you don't seem to have a relevant close reason on SO
 
Thought so. I'll vote on that custom one then.
 
9:39 AM
why do I feel more tired today than I did yesterday
yesterday I had 2 hours of sleep
lastnight I had 9 hours of sleep
WHY
eugh... Aqua - Barbie Girl is playing on national radio...
 
26
A: The Zen of Python

dorkitudeI think Hunter Blanks does a better job of this than I could in PEP 20 (The Zen of Python) by example

 
10:51 AM
-1
Q: What classifies as a Unity3D plugin? How does Unity detect pro-trial usages on a system?

RajaI'm trying to use Intel's perceptual computing sdk unity bindings (a few DLLs). Unfortunately, my pro-trial of Unity has expired. Unity's plugin link says native library code is considered plugin. How do I know if a DLL is native or not? My Unity usage is generally 3-4 days a month for hobbyist...

Could we have a close vote there ^^^^
 
"morning" everybody, men and ponies.
 
And the glasses go ignored ...
 
@Bart . Wouldn't starting a new site proposal on Area 51 for "Pirating & co" be a better idea :P?
O_O who had the courage to UPVOTE?
 
11:11 AM
@Manishearth email me that one please? craver@so
 
@SPArchaeologist It seems the tag implies that Piracy is fine?
 
@Bart ? I am not getting it. Why the R tag? I was joking on that question "How can I bypass Unity licensing management mechanism" - (question which is still there at the moment, strange)
 
 
..............ok.
Maybe he is a pastafarian? that would explain. I would assume that religion-based piracy is fine?
 
Sam
Hi guys
 
11:19 AM
Hiya
 
Sam
if you have time can I ask you to have a look to my question here?
0
Q: What are the pro and cons of allowing opinionable but useful questions?

SamImagine I go on this Website and I ask for a mature implementation (also for a production environment) of an AOP framework which is usable in commercial projects for free and which allows me to decorate properties with attributes that allows to log property values. I think the question could be...

the section is Software Reccomendations
but I think also on SO the rules have become more string in the last period. And that many really useful question of the past today wouldn't be allowed
I'm interested in your opinion, but even more in your contribute
 
Hey guys, a user did not quite like my comments and I suspect of rage dv my answers. Actully anything else would suprise me alot.
http://stackoverflow.com/users/924016/ronni-skansing?tab=reputation
and the thread that seems to have releashed the angry user (not sure if its the OP or the comments to one of the others answers..)
http://stackoverflow.com/questions/21932043/use-function-variable-outside-of-the-function-without-calling-the-function/21932102#21932102
Should I just ignore such throw it in here or..?
http://chat.stackoverflow.com/transcript/message/14859727#14859727
^ this is guess?
 
Sam
I think, instead of punishing guys, we could reward users who closes bad questions, improves bad questions, or stops making flames and so on
 
@RonniSkansing that was indeed a serial downvoter, it will resolve itself shortly.
 
@RonniSkansing It'll be reverted tonight, don't worry about it
 
11:31 AM
Thanks =]
I like sunshines not rainy clouds ;)
So for future ref, if I get serial-dv, just ignore, it will fix itself?
 
@RonniSkansing yup
 
thanks, happy friday
 
I don't know what some people are even doing in the review queue
I've had to rollback 3 out of my last 5 reviews because people approved stuff that plain defaced the post
 
11:47 AM
Say @timpost Those spam edits do seem rather strange, given that it's a seemingly legit company with a Careers page as well ...
 
12:00 PM
jesus, 582 flags... animuson, wake up!
:-)
 
@Bart the ones just brought up on MSO?
 
Ayo, @TimPost
 
@Bart Pinged the careers folks about it, could be the company hired a SEO 'specialist' that's doing this
 
@TimPost Did you had the chance to view the unity question linked above? do we tolerate its implications?
 
I ended up closing it for a more generic reason
 
12:12 PM
cough cough "This question appears to be off-topic because it is about programming as defined in the help center "
Missing a "not"?
 
ooooooooooooops
 
DAMMIT TIM
 
@Tim
oh wow, there are three Tims in here
 
not my fault
 
this makes pinging @Tim today a total of 50% more fun
so far today I have spent 4 hours watching graphs and writing up an email that could be summed up as "your server is crap, that's why your site is slow"
during that time I have consumed 5 double espressos
 
12:21 PM
Hey @Nick I suppose you haven't had time yet to finish this dashboard you showed me a while ago?
 
I mean, who runs their business critical SQL instance on a domain controller
 
Not us, we run our business critical SQL instances on hamsters.
 
@Flyk we finally got a staging server last month. It used to be local dev -> production.
I guess the answer to your question is: people who don't want to spend money :)
 
@stijin @Flyk - I saw environment when the steps to switch from the SharePoint test environment and the production one were "Ok, add the domain users as viewers to the site coll, please"
 
@SPArchaeologist you win.
 
12:29 PM
@Stijn O_o wouldn't call that "winning"...
 
@Stijn it'll never be finished, but it's open source and always improving: github.com/opserver/Opserver
 
@Nick Ah great, thanks, I'll take a look later :)
 
@Stijn if curious, some other views: imgur.com/a/dawwf
 
@TimPost Sorry, was AFK. Yeah, the MSO ones. A quick search of the spam surprisingly lead to Careers. :D
 
@Nick looks nice. We recently installed Marvel for ES but it might be a tad too heavy for our needs.
 
12:38 PM
@Bart I'll hear from them when NYC wakes up. That's odd.
 
@Stijn if you have feedback send it our way...it's free so, cheaper than most
we're working hard on replacing Orion internally, that'll be open sourced as soon as it's solid and a bit more polished as well, that'll make Opserver & it a completely free replacement for most people's needs
 
user202362
12:53 PM
I noticed another of my semi-decently upvoted answer is gone ...
 
user202362
I know the question had a lot of downvotes
 
user202362
But I was told by mods many times a negatively voted question will not be deleted when it has at least a highly upvoted answer
 
user202362
the deleted question had 1 answer with 18+ upvotes, and few other positively upvoted answers
 
user202362
such inconsistency ...
 
Got a link?
 
user202362
12:57 PM
I don't have high enough reps
 
user202362
It's about users avatar
 
user202362
posted a couple of days ago
 
? If it's recently deleted you should be able to get me the link from the recently deleted list?
The bra one?
 
user202362
yeah
 

« first day (1297 days earlier)      last day (3710 days later) »