Comment on: Introduction to Matrix Free & Open Source messenger with audio/video calls as Skype/Viber/Slack Alternative
0 07 Sep 2015 17:42 u/Craftkorb in v/programmingComment on: The curse of varargs
Exactly my thoughts. I also have to puke everytime people hate on C because it's not "memory-safe". That term is becoming what NoSQLs "web-scale" is. Sure, nowadays languages have better solutions than those constructs. Usually by sacrificing performance. And why do people use C/C++? Because they can't or don't want to make that sacrifice.
Comment on: Is there a true random number generator?
First off, you're referring to PRNGs, Pseudo-random number generators. Generally they're treated the same, but in your case, I'd like to make this distinction.
Then, for what would we need "real" RNGs, or at least pretty much unpredictable PRNGs? You're correct in that games and all that get by fine with pretty simplistic ones. But there is a large area where you want to have really really good random numbers, and that's everywhere you some sort of cryptography going on. So, for example, TLS connections is such case, as when you do online banking, you really don't want someone else to "listen in". Having good random numbers for stuff like this is highly necessary. Another prominent example would be harddrive encryption using tools like LUKS/LVM on Linux (No idea about other tools). This one requires a large chunk of random data (Probably 4KiB), which uses it as key for the encrypted files (etc.). Why it does this would go too far though :)
Next up, security. As I've mentioned above, we have legit cases where we need good random numbers to offer a secure operation. I want you to take a moment and ask yourself "what would happen if someone would replace a really good RNG with a really bad (= predictable) RNG?". Think about the last paragraph. ... ... Okay. So, the answer is, it's really bad because if you have predictable numbers coming out of a RNG, then all cryptography and security you build on top is completely worthless. In fact, this is a real attack vector used by spy agencies (among others) to tap into connections or access encrypted files. You could write a whole book about this too ..
Now, how could we acquire real random numbers? This is pure physics, and I slept during these classes. What I do know however is that you need a source which is unpredictable. Hopefully, it stays that way for a long time, until scientists figured out how it works. There is for example random.org, who basically aimed a antenna at something in space, and use that incoming noise as random data. Which, as it's unpredictable, pretty good in itself, but see the next paragraph. Then, there are also tons of hardware RNGs, which rely on physic phenomena yielding unpredictable results. Wikipedia has a decent article on that. But, how do computers without specific hardware can acquire random data? This is a hard issue, but in general, this is a feature provided by the Operating Systems Kernel. To do that, it uses somewhat random events as input, and then 'generates' sequences of random data as output. Those events can be inputs (USB devices, e.g. mouse movement, button presses, ..), file I/O (Reading/writing data in sector X on device Y, ...). So, if you were ever asked by an application to now randomly type stuff or move your mouse around, that's why :) But also, things can go wrong, I still remember when Debian completely broke their kernel RNG. But also read the other sections, I don't want to hate on Debian.
At the end, I want to ask you if you trust those services. Let's say you need real random numbers for cryptography, and choose to use a remote service like random.org as source. Well, how are you sure that these numbers are really random, and not just look random to you? Complex issue, which if you think about it, is not really solvable in itself. In general though, if you need really random data, use a hardware RNG, and just hope that it's pretty random.
New OWASP Handbook on automated attacks against web applications
7 0 comments 30 Aug 2015 19:13 u/Craftkorb (..) in v/programmingComment on: "Haskell is Useless" (well, not really!) - Interesting comments from Simon Peyton Jones
Thank you very much for your notification!
Our submission rules explicitly do not apply to comments. I will however remove the comment in question because the account of the author is only used for this exact comment.
On the other hand, I think the community in here already showed what they think about the comment, and I encourage everyone to continue doing so on this kind of "content".
Comment on: Python or Perl? + Questions
Perl is .. a completely weird language. I wouldn't recommend learning it as first language as it has many things in it that are weird at best. If you want to learn a modern scripting language, and don't want to have forced indention, try ruby.
Comment on: Google Code going read-only in the next few hours. Last chance to update with URLs for new project locations.
Now I'm wondering if we could embed that into the sidebar with some CSS hackery. Probably not :|
Comment on: Please welcome your new mods: mwolf, Sylos and Xenoprimate!
Sure, a cookie would be fine. Popcorn donations are also welcome, my stocks are running low :(
Comment on: Please welcome your new mods: mwolf, Sylos and Xenoprimate!
Due to our transparency and no-censorship policies, your comment is here to stay for others to see. Enjoy.
Comment on: The Future of Developing Firefox Add-ons
Some people like to watch the world burn. Lets just hope they won't fuck up theme support.
Bi-monthly Community Feedback Thread Numéro Trois
2 0 comments 21 Aug 2015 17:48 u/Craftkorb (self.programming) in v/programmingComment on: Please welcome your new mods: mwolf, Sylos and Xenoprimate!
I tried to use Haskell in ruby, but then I accidently monkey patched it instead. My now automatic pluralizing string is capable of calculating the force needed to fly to the moon and back by a perfectly intuitive grammar.
Please welcome your new mods: mwolf, Sylos and Xenoprimate!
8 12 comments 18 Aug 2015 17:12 u/Craftkorb (self.programming) in v/programmingComment on: Developers Who Can Build Things from Scratch
The author does have quite an attitude. Especially reading http://www.aaronstannard.com/the-taxonomy-of-terrible-programmers/. It's not that there are not some bad devs. There are plenty. It's also though what you make of it. The determinism of actually categorizing people with that chart and writing a lengthy blog post alone does show some red flags. Not only about the chosen types of devs. But about the author aswell.
Comment on: Crowdsourced Directory of Programming Resources
AngularJS is in the Java category? Huh? Saying that some libraries/tools are "Java" while they use JavaScript is a slap into the face of both communities...
Comment on: Cicada 3301 might be back, we need someone who knows ticker tape programming, punchcard programming or FORTRAN
..Wat?
Underhanded C Contest started today!
22 1 comment 16 Aug 2015 18:08 u/Craftkorb (..) in v/programmingComment on: Sorting Algorithm Animations
Also see this classic https://www.youtube.com/watch?v=SJwEwA5gOkM
Comment on: A short overview of the file system
Last time I played with ext2 was like almost 6 years ago. If I remember correctly, I used http://wiki.osdev.org/Ext2 and probably the specification itself.
Thanks for your link, now I understand your motivation. Keep doing it, there's a ton to learn by tinkering on that level :) I still really hate floppies. Good thing they died. What an abysmal interface to read and write stuff. Protected mode is fun though (Never looked into Long Mode), and being able to run your first small tool in your own userspace is an experience like no other.
Comment on: A short overview of the file system
And .. what's now the benefit of yet another FS over e.g. ext4 or btrfs?
If anyone in here would like to learn the basics, I suggest reading up on ext2. Does not offer journals etc., but is really stable and time proven. Maybe ext4 is a good read too, but never looked into that so yeah.
Comment on: Rule change going into effect on Saturday (August 15th) and WE'RE HIRING
Applications are appreciated no matter the time zone. My timezone is GMT+1 (or CEST). If you want to apply, please do so! Please make it a top comment in this thread, not a reply to this comment.
Comment on: Rule change going into effect on Saturday (August 15th) and WE'RE HIRING
Don't worry too much about the CCP. Every applicant gets two somewhat snarky questions, which if possible are based on their application, to test their reaction. I also do that for transparency sake, so people, and me!, can see how you tick ;)
You're absolutely right with the "power hungry people" part. I'm not saying anyone is that here, but I also want to make sure that they're not and that's where these questions help. Afterall, if I choose wrongly, I'm the one who'll be hated on (Maybe rightfully so). And the then-reduced moderator team would be the one who needs to clean up the mess. Not fun for anyone.
Comment on: Rule change going into effect on Saturday (August 15th) and WE'RE HIRING
It's a great community and I certainly hope to see it continue to grow.
What would you propose to further growing the subverse? Any idea to promote discussion over downvoting? Should one just disable downvotes altogether?
So as such, the rule is necessary except in, perhaps, a rare, highly impactful situation.
What's that? How should do the moderators know if such a rule is met? And how should one explain it to community members posting heated comments that this one submission was allowed, but that other one was not? Is that censorship, or is it not? Or is maybe some kind of censorship allowed?
Thank you for your application!
Comment on: Rule change going into effect on Saturday (August 15th) and WE'RE HIRING
First off the non-meta question (So, technically you get three instead of the common two...): What's your time zone? If you don't want to say the country that's fine as it's none of our business, but the time zone would be interesting regardless.
But "political/drama" submissions probably shouldn't be.
Can you think of any other solution to this? Or is it a non-issue?
That is because it could be used to censor discussions a moderator doesn't like
What would you do if you were to find out (or suspect) that a moderator, in your opinion, abused his/her powers?
Thank you for your application!
Comment on: Rule change going into effect on Saturday (August 15th) and WE'RE HIRING
I want to do this because I want voat to succeed, I think it's vastly superior to Reddit.
Could you elaborate on why voat is superior? Technology-wise, we're far behind. We don't have much tools. It is being worked on. Could we maybe overcome the current shotcomings using creative work-arounds?
Do you think that it's okay, unfair, or maybe sometimes required, to have internal 'meetings' on /v/programming without letting the community know about their outcome? What would you do if you disagree with the outcome of such talks, whatever it was about and its outcome?
Thank you for your application!
Comment on: Rule change going into effect on Saturday (August 15th) and WE'RE HIRING
What is, in your opinion, the most interesting development regarding programming languages of the last years?
Edit: as a clarification of intent, I would do my best to not use mod powers (or purposefully not use them) to undermine a rule which I personally disagree with. I hope that is implied but I'd like to emphasize that since I voiced my qualms with the decision.
Don't worry, I won't go around picking people 100% on line with my views. That'd be harmful in its own right. But I'd like to ask if you have any other idea how this could be solved? Or is it a non-issue?
Thank you for your application!
Comment on: Rule change going into effect on Saturday (August 15th) and WE'RE HIRING
There's learnprogramming for newbs but programming itself isn't very friendly to mid level people like me.
Could you elaborate on this? What would you suggest doing about it?
Also, I have to be that guy, you are right now technically not allowed to mod by the rule that you need a CCP counter of 100 (or more). What do you think about this? Would it be fair to let you in regardless (Because you are active), or would it be unfair to other applicants?
Thank you for your application!
Comment on: Rule change going into effect on Saturday (August 15th) and WE'RE HIRING
Yes, they are allowed. To me, these are highly relevant topics.
Comment on: Github employee attempts to dox user who complained about repo deletion
I like /v/programmingpolitics - It tells you right away what to kind of content to expect. But maybe, we need to think broader, and have a general /v/internetpolitics or something like that. Seeing how /v/KotakuInAction thrives in terms of submissions with actually quite a specific scope, a broader subverse could survive if "done correctly" (?)
Comment on: Rule change going into effect on Saturday (August 15th) and WE'RE HIRING
You are correct with /v/programmingnews. @LittleBobbyTables mentioned that s/he wanted to start a subverse like that and would also be appreciative of drama news. Interesting coincidence, I was about to start writing this post before the PM(s) flew into my inbox. I don't know anything beyond that myself on further plans.
Added later: I wanted to add that we will find a solution. I will not throw those threads out if the other subverse solution doesn't work out for any reason. I just chose a date because I want to find a solution, not because I want to press delete more often. I don't. A megathread, or just allowing it for a certain day of the week, or whatever. Something has to change, but fuck it if it would turn out to be somewhat silencing. Really, it's not about "silencing" or "censoring" anything, it is about finding the proper place for those talks. There is demand for it, legit demand from all parties involved. That stuff quickly became too big and too specific for a general forum like this.
(PS: Being spam blocked in your own subverse sucks.)
Rule change going into effect on Saturday (August 15th) and WE'RE HIRING
3 27 comments 12 Aug 2015 18:20 u/Craftkorb (self.programming) in v/programmingComment on: Github employee attempts to dox user who complained about repo deletion
As a mod, why even get involved with book burning like that? Your "solution" seems more like a problem.
I have written countless times on that topic. Funnily enough, I didn't write any solution (I just said what is not one), and you already rejected that nothing. Third, I'm the moderator of this subverse, which is called /v/programming. It's about programming. It shall not be a self assuring echo chamber of hatred about whatever remotely programming related, no matter if that 'hate' is justified or not. This subverse is still about programming.
I guess that some topics in here would also be allowed in /v/TIL and upvoted. Does it belong there? Probably not.
Really, those who're interested in that, by all means, create a subverse for it, and if it fulfills some standards, I'll link to it in the sidebar.
Comment on: Github employee attempts to dox user who complained about repo deletion
These submissions are getting out of hand. Remember, this is not "GitHub in Action". If these continue to pile up we'll have to come up with a solution. Spamming the frontpage isn't one. If that being remotely affiliated with programming (Employee doing shit -> Something with "SJWs" -> GitHub -> Repository -> Programming related) is good enough, then people might as well post pictures of their mobile phones.
Edit: That stuff was in October 2014. Almost a year ago.
Comment on: How to Write Simple Bootloader Tutorial with int 10h, int 16, int 19h using NASM (Netwide Assembler)
http://wiki.osdev.org/Main_Page is much better than a random YouTube video which looks like one of those "hack your friends facebook" ones..
Comment on: Github disables repository for using the word "retard."
Oh, you're right. Well, it was a result of whatever GitHub announced earlier. Let's not make things more complicated than needed..
Comment on: Github disables repository for using the word "retard."
No, the article itself is also opinionated. I already wrote about it. Not giving "SJWs" any target surface is better for everyone.
Comment on: [META] branching into a new subverse for programming opinion/news/politics posts?
News are fine and appreciated. It's more the current drama that's going on. Drama isn't really news either, it's .. drama. My bets currently are that the current drama wave will disappear quickly again shortly, so right now, I don't worry that it'll be a long term annoyance. So, it's "fine".
Comment on: Microsoft WinObjC: Restore original licenses
Man that escalated quickly. Goes from the legit request of re-adding the license headers to a shout contest in like 5 comments Oo
Comment on: If you use a VPN to keep yourself private, you may want to use this tool to check the JavaScript WebRTC IP Leak isn't exploitable in your browser. [x-post - v/JavaScript]
No problem, your input is much appreciated. We're here to discuss afterall!
Bi-monthly Community Feedback Thread Nummer Zwei!
5 6 comments 07 Aug 2015 18:01 u/Craftkorb (self.programming) in v/programmingComment on: I'm developing note-taking App (iOS first) for all study people.
And how is this Programming related? OP, Please respond within 3 hours.
Comment on: If you use a VPN to keep yourself private, you may want to use this tool to check the JavaScript WebRTC IP Leak isn't exploitable in your browser. [x-post - v/JavaScript]
OP .. how is this programming related? Random software doesn't count.
Please respond within 3 hours. Thanks.
Comment on: What are your opinions on the new CLion editor by JetBrains?
I'm happy with QtCreator. I'm not even interested in moving to a different IDE for C++/Qt development, not only because only supporting CMake is not enough for a commercial product, but also because it's not free (While I don't make any money from the stuff I code). On top of that, what I saw in their videos wasn't really impressive.
Comment on: How do you designed your currency exchange rate table?
In general, "HELP" is for any submission where the OP is seeking for help, no matter the skill level. The lines are quite blurry to be honest when it comes to exactly saying if a question belongs in here, or if it better belongs to some other subverse, like /v/LearnProgramming (For beginner questions), or in this case, some database oriented subverse (Which I don't know). There wasn't really a lot of discussion on this topic yet though.
In general, as moderator I'd like to have a better tool or whatever to direct questions into a subverse where it really belongs, and doesn't get mixed into the tech news and drama submissions of /v/programming. Until then, if no one has a better idea, questions are allowed to stay here, with me making no promise that this will stay this way on the long run.
TL;DR: Right now these submissions are okay, but this may change if someone has a better idea how to handle this.
Comment on: How do you designed your currency exchange rate table?
OP, why didn't you post this to /v/LearnProgramming or any other subverse?
Comment on: [META] We're not getting any other moderators right now, and here's why
No idea if @moe is an admin, but @moe is important enough to be a moderator in one of the official subverses. And, judging from his response to my follow up question, he knows more things than others do, so even if he's not an official admin, he has enough ties to them to make this decision.
Comment on: Programmers of Voat, please spend time in your respective subverses and ask, answer, and discuss programming! The other subverses are pretty bare!
Yes please. /v/programming is not /v/learnprogramming. It especially is not here for TechSupport either.
Comment on: [META] We're not getting any other moderators right now, and here's why
I didn't receive any reply to my last PMs in their direction. My subverse request took two weeks for an answer. If it takes two weeks minimum to respond to anything, if at all, then that's not an option. Sorry, I also have other things to do.
[META] We're not getting any other moderators right now, and here's why
12 7 comments 01 Aug 2015 14:30 u/Craftkorb (self.programming) in v/programmingComment on: the big list of programming and computing subverses
Added it to the sidebar. Thank you!
Comment on: If I want to be more of a defensive programmer where do I start?
I think you were looking for /v/netsec
Comment on: Has anyone used "Meat!"? What did you think of it?
Collecting e-mail addresses. Sigh Popup after some time. Sigh² It's like they desperately are trying to get some addresses. And then using "it's beautiful" as reason for using it takes the cake.
Comment on: [Question] PostgreSQL vs MySQL?
First, MySQL (Or MariaDB) is also ACID compliant. If it does it well is a question I can't answer, as I barely ever used it.
I want to however point out why I think PostgreSQL is a overall 'better' solution. Disclaimer: I haven't used MySQL in a long time myself, things may have changed!
- Foreign Data Wrappers: If needed, you can access all kinds of other databases through PostgreSQL. This may be another SQL DB, MongoDB, or something else. This feature is comparable to UNIXs
mountfunctionality. You may end up never using these though. - The #postgresql IRC channel over at Freenode is quite active and helpful.
- Also, their documentation is great.
- Many features are added every release. Can't wait for the built in
UPSERTcoming in version 9.5 (UPSERT = INSERT or UPDATE if it exists) - It supports JSON directly. You can work with stored JSON documents much like with any other data type. You can SELECT them, you can even add indexes. This is a huge plus in my book.
- If you fear it's hard to set up yourself, don't: It worked for me out of the box, no configuration changes needed.
- PostgreSQL is more happy with throwing errors. So, if you have a
VARCHAR(30)column and you want to put something in there longer than 30 characters, MySQL (by default at least) will just chop off everything coming after the 30th character and carry on. PostgreSQL will raise an error, telling you that it's too long. This is a really important thing to have, as MySQLs behaviour may just break things unexpected.
If I can, I'll stick to PostgreSQL.
Comment on: Github disables repository for using the word "retard."
To be honest, I'd also welcome if any comment in this matter wouldn't use 'censorship' as word every time. It's being overused, and thus loses any meaning because of that. While the delete action I have access to for submissions and comments could be used for censorship, it doesn't mean I want to use it for that. I already stated, I think enough times in the last two weeks, that I'll still delete stuff that violates the rules. These are publicly visible, are the only rules in existence, and if needed, can be discussed through META submissions. I just don't like being accused of censoring things when that's the only feedback I get. That's not fair either, and you're just playing into the hands of people of that other site as other people like to call it here.
With that being said, no, I don't think a flair is censorship in any way. It is a publicly visible badge telling visitors what to expect. Opinionated submission can also be really enlightening, although the visitor should take it with a grain of salt. Which is sad that we have to do that, as you should take everything in general with a grain of salt if you ask me.
Your submission doesn't violate any rule. What is not forbidden is allowed. That's by design. Thus it's here to stay.
Comment on: Github disables repository for using the word "retard."
Ohai, mod here. Just wanted to quickly note that I in terms of being a moderator, will always give politicial submissions like these the Opinion flair. It does not mean that we either endorse or oppose the view reflected by the submission. It does mean that the moderator(s) of /v/programming are staying out of this. For this, it doesn't matter if we as person like or dislike the submission.
With this being said, maybe one should rename the flair to Opinion/Politics or something.
Comment on: Git Repo Step#1 - remove "master" branch
If it were just the trolling at the start, I could've laughed and then decided to either delete it to have my inbox flooded with accusations of censorship, or put it on Opinion and laugh at the people who hoped that the former would happen. But it's not trolling (Not even really good, way too obvious).
So, what's alpha? Some greek alphabet character doesn't carry any more weight than master as name does. It is the common name for the branch containing the most bleeding edge state of the repository.
Hard one to decide if I should flair this one as Beginner, Opinion or OT. Beginner stuff has to at least be non destructive (Which this is not), and should try to refer to best practices (Which this doesn't either). OT is "something something programming, but not too far away". Well, the VCS is a integral part of programming projects nowadays, so it doesn't really fit either. Opinion it is.
Comment on: VS Extension Idea - On save(or key press), incrementally play the next sound in collection of sounds. IE Darude Sandstorm on save.
I think this idea is as good as having the whole UI YELLING AT YOU.
Not really
Comment on: 7 JIRA Integrations To Optimize Your Web Development Workflow
Yep, basically blogspam (to me) are blog posts, which are advertising some product, has a click-bait title (Something like .. um .. "7 JIRA Integrations To Optimize Your Web Development Workflow" .. Is It Really The Case That Matters? It Will Blow Your Mind!), and the articles content are on top of that really basic stuff.
Comment on: 7 JIRA Integrations To Optimize Your Web Development Workflow
Something is telling me that usersnap.com is blogspam. The sidebar is telling me that this would be forbidden by rule 3. Comments?
Edit: Seems that other people in here think the same. I'll thus delete further submissions of this scheme under Rule 3/Blog-spam.
Edit²: I just informed /u/thmslee of this through PM. Hopefully s/he sees it. OP is of course not blocked or banned, and welcome to continue participating in this forum.
Comment on: Can we have stickied post linked to useful materials?
People already don't read the sidebar. If you want to help with that, direct OPs who were looking for /v/learnprogramming there. Having a sticky is like having a ad banner on top and on the right. No one looks at them either.
Comment on: Hey I'm trying to start learning programming but i am having a hell of a time starting. Is there a correct pathway to starting the adventure that is programming?
Thanks for the heads up, updated my comment.
Comment on: Hey I'm trying to start learning programming but i am having a hell of a time starting. Is there a correct pathway to starting the adventure that is programming?
NSA
I hope you know that you're help spying on billions of innocent people, violating their rights. I hope you know that by doing this, you help killing probably innocent people through drones. I hope that it makes you feel better to know that you're doing nothing good. Only thing I'd applaud you for is leaking more stuff.
Edit: Turns out OP meant Network Security Administrator, not the agency. Everythings fine.
Comment on: Thinking of using couchdb, but it uses HTTP for protocol and that worries me.
I'm not a fan of MongoDB either.
What troubles me more than their choice of transport protocol is their it seems pretty horrific default security configuration. Just days ago someone searched for MongoDB instances on the Internet at large and found thousands of open instances with no permissions needed, some even for write access.
I think that HTTP is interesting as option, because I can then query my DB through cURL if needed. Makes for easy scripting, even in bash scripts. Using it as sole protocol, well, not my cup of tea either. The issue I see though is the stateless-ness of HTTP, even if they use keep-alive (No idea!), they shouldn't rely on having that session open forever.
I do think though that TCP is the right choice for it as reasonable default. If people want to use UDP, with all its pros and cons for this environment, then they may have it as well. You can always have a wrapper tool, which listens on a UDP port and then just pumps stuff it receives into the connected MongoDB instance. If both are on the same host, chances are good that the kernel doesn't do the whole TCP SYN/ACK stuff for a local connection (Though I'd like to know if Linux actually does it).
I mean come on, MongoDB isn't ACID compliant, so UDP just makes it worse in the realm of data persistance ;)
Bi-monthly community feedback thread #1
7 1 comment 24 Jul 2015 17:01 u/Craftkorb (self.programming) in v/programmingComment on: Thinking of using couchdb, but it uses HTTP for protocol and that worries me.
Okay, let's use UDP. How do you make sure that your data ends up in the database? Write a custom protocol for it? Ok, now we have a transmission which we control .. let's call it .. TCP!
In all seriousness, have you benchmarked it? I don't see a real reason for not using TCP for a database. And what's stopping you from having asynchronous callbacks with TCP?
Comment on: How do you organize all your coding resources?
I have it in my head. What I visualize ends up on sticky notes. Stickys are great in general. Quick and simple, easy to acquire, and not bound by any limitations of random tools. E.g., I just thought about an authentication scheme. I drew a small login button, some steps as text or small 'images', and then a bunch of arrows. Doesn't need much more. Before you found those elements in some kind of tool, you either forgot it or took way longer than drawing a rectangle and putting some text into it.
In general, don't over-engineer on this level. If I had to share this stuff over the Internet with coworkers, I would probably use some kind of multiplayer paint and use it as whiteboard.
Comment on: Where should I migrate my projects to (from Github)?
Wow. I just began using Opal. Good thing 'meh' quickly closed it with a explanation, and even took the time to respond to the ever same comments. But woooow. People have problems out of this world.
Comment on: Instead of deleting borderline stuff, let's flairs!
I have to disagree. Help is for people seeking help, educational is an article about something educational, so pretty much the other way around. We decided to have a beginner flair to mark these submissions, as they may be educational, but only for the beginner. I'm sorry, but if I'm browsing articles, I don't want to read for the billionths time about ls, cat, or this new cool kid "htop". /u/discopig felt the same.
Comment on: Instead of deleting borderline stuff, let's flairs!
Count again. MS/Lin/Apple are separate flairs.
Comment on: Instead of deleting borderline stuff, let's flairs!
We now have 10 flairs, which is the maximum. We can't add any more.
Comment on: After All These Years, the World is Still Powered by C Programming
I meant it more if there's some kind of guide somewhere on how to draw these kind of images in general. Like, I often want to express something where an image like this could help, and if I could draw it that'd be awesome. Doesn't help though that my artistic knowledge ends after the step of starting Inkscape -.-;
Comment on: After All These Years, the World is Still Powered by C Programming
While looking at the article .. Does anyone know how to draw these images? Is there some kind of package available with these assets? I would google myself, but I don't even know what to search for ..
Comment on: Instead of deleting borderline stuff, let's flairs!
Current flair limit seems to be 10 per sub, so that wouldn't work. Also, I don't think that we need to make it so specific. Webdev, Back-end, Mobile, Desktop or something as broader group would work though while not going over the limit. Thanks for your idea!
Instead of deleting borderline stuff, let's flairs!
8 11 comments 21 Jul 2015 15:13 u/Craftkorb (self.programming) in v/programmingComment on: Alternatives to Webmatrix for Linux
Could you explain the work flow?
Comment on: My discussion was removed and I believe it was an invalid remove
Another good example to consider is an interview about Kevin Mitnick (let's imagine this was more than a decade ago) on Oprah or something.
If it gets beefy, okay-ish if everyone can watch it and it's directly linked through the submission. So either the submission is a link submission linking to the online video, or it's a text submission with a link pointing to the online video. No Paywall, just content.
I suppose an interesting line in the modern grass is Edward Snowden. I would imagine reading about how he pulled some things off (from the technical aspect) would be reasonable but the political aspect of it would not be -- because quite frankly some of that was pretty damn impressive and I imagine many programmers would do well to learn many of those aspects of security. Or perhaps that might be better of in a security specific subverse. hmm.
I agree. So, if it would be an article how he abused programmer mistakes and it gets beefy, I think it's relevant. But if he just (Not trying to downplay) abused mis-configured permissions for access (Afaik he at one point said that he had permissions to impersonate other user accounts which he then abused), I think that's more something for /v/sysadmin (If that's already a thing).
I'm starting to feel that there should be /v/ProgrammingInMedia
Comment on: My discussion was removed and I believe it was an invalid remove
Maybe another way to say it is that a link should have a reasonable expectation that it could change the way someone programs? I suppose that's just saying educational, though.
Yes. Also, I think "reasonable expectation" only adds more oil to this because of the 'reasonable'. What's that?
Comment on: All decisions have consequences, but how did MS break OpenType fonts in such a way that it allows creation of an elevated user?
User-space programs (regular programs) don't have access to hardware resources [...]
It's "interesting" that some people try hard to read stuff into everything. See the IIS server. Is it so hard to let a user-space listen on port 80 TCP? No. You can further have Kernel API to delegate specific permissions to e.g. talk to USB devices, to user-space. This also works for other operating systems. It's obvious that you'd have other Kernel API to do these read/write calls. Stuff like IRQs and Interrupts is not something everything needs. Handling interrupts is the primary job of the Kernel after setting up user-space.
Saying "Muh performance" is just ridiculous to put anything into the Kernel, if it has been show by anyone else that by having a efficient Kernel you can do everything from the user-space. Does OpenType need to handle Interrupts? No. Does it need to haggle IRQs? No. What is it doing in the frigging Ring0?! There. Is. No. Excuse.
Text-rendering on Windows is hardware accelerated, which necessitates a device driver to do it.
The act of rendering is the job of a driver. The act of managing is not. Weirdly enough for all over OS's this works great.
Also, check out who actually develops OpenType (it's not Microsoft)
It doesn't matter a lot. MS puts that stuff into its Kernel, so they better proofread it. Else, shit like this happens.
Comment on: All decisions have consequences, but how did MS break OpenType fonts in such a way that it allows creation of an elevated user?
Afaik Windows does not. Maybe windows 10 does, as this bug only affects versions prior Windows 10.
Comment on: My discussion was removed and I believe it was an invalid remove
First, I think it's important to say: These rules only apply to submissions!
Comments in submissions are not targeted. You can freely talk about anything in there. Jokes, memes, click-bait? Happy commenting! You can cuss in there, you can even insult people and I'll leave it alone for the world to see your behaviour. The exception is of course when comments start doxxing or beyond stupid stuff like that. That's covered by the site-wide rules I guess.
Submissions are subject to the rules. You are correct: The link in your comment is borderline. That particular news article may be ok, as long they don't get too much. This isn't /v/TodayILearned after all. Just the YouTube clip showing that? Most likely violation of rule two.
"Doesn't get too much": This loose term is there to stay loose. I can't give any hard numbers. If posts of these kind don't pile up, it's okay-ish. Not encouraged either. If it gets too much, maybe multiple submissions on the first page, they're more likely to be deleted. Reasoning is, that if this happens, others will feel encouraged that it's fine to do this.
There's currently (Or was?) some kind of joke on the page. A single one. That's okay-ish. Not encouraged. A second one may be too much though.
I think it's fair to demand from the moderation to be transparent about it. But I also think it's fair to think that the mods won't begin and deleting stuff for political reasons. If a mod under would do that, that'd be a kick.
I was thinking about playing with submission flairs. Right now I think they're broken (Ugh..). Anyway, what I envision is having a "soft-delete" flair, which hides the submission by default, but is visible through some other mean. Maybe in night mode or something. Just an idea, I haven't even checked yet if that'd be possible. But would be cool, wouldn't it?
Comment on: My discussion was removed and I believe it was an invalid remove
Saving subverse settings is broken right now. Meh. I'll try again later.
Comment on: My discussion was removed and I believe it was an invalid remove
Carte blanche removing of topics benefits no one, and feels a bit like another atmosphere a lot of us have left because of this type of reaction.
I do think that deleting is the correct answer to submissions not fitting the rules, but I'd also like to have some kind of public log where people could go and judge themselves. I was thinking about like having a bi-monthly sticky to discuss the META stuff and post a list there of removed things. The reasons why the removal happened are put by me always as comment into the submission, for the OP to respond to, or at least get some kind of understanding why it was removed.
A second step on this would be having a bot or something which auto-updates the removal list. There's currently no API for that, and with the current situation I also can't write one which uses the HTML data as 'API'.
A completely community driven deletion-through-downvote process may or may not work well on the long run. I don't have any statistics, so I have to assume that not many can actually downvote. Also, I fear that we'd lose interested people because someone spams the sub (maybe from multiple accounts).
Would I appreciate this concept? Yes! But right now, with the state of voat, there's not a lot of tools at hand to do anything, hell, Reddit at least has some kind of tools, where I have literally none besides "delete". (Send me a mod mail .. oh right .. you can't -.- )
In the end, I can only delete what I as user wouldn't like to see here at all. If you fear that I kept you from tons of fascinating threads, you don't have to. I have removed I think 4 or 5 threads total. You can check comments I made, as every delete did get and will get a written (sometimes short) reason.
Comment on: My discussion was removed and I believe it was an invalid remove
should someone not post it because it came from Australia?
As long it's directly linked through the submission, it's fine. If only a selected few can access it, it's likely to be removed. That's the point I was trying to make. YouTube (Or any other web service on that matter!) is fine because everyone can watch it from anywhere. If it's region locked, it's again borderline.
If it really is that groundbreaking (Which I'd applaud!), the show is sure to appear on YouTube, and based on that it's educational in terms of programming and not a 'correct' depiction of it, are welcome as submission. Don't read too much into ground-breaking, please. The most important factor is that it's widely accessible to everyone.
It's just not my job to read through Google about TV shows.
Edit: Forgot to mention that yes, input on the rules and such META stuff are of course appreciated.
Edit²: Is this: 4. Submissions are expected to be educational, and not only about programming (E.g. movies, TV) good or crap wording-wise?
Comment on: My discussion was removed and I believe it was an invalid remove
I stand by my decision. A random TV show, as I said in a reply to your comment on it, does not qualify for being programming related. Even a TV show actually teaching programming is questionable, as the audience in here is global and not America-only (Where a America-only TV show would maybe work). You can replace America with anything else, it serves as example of a non-global audience.
As you can clearly see, submissions with YouTube videos or channels teaching programming in one way or the other are not removed and are there to stay.
Comment on: All decisions have consequences, but how did MS break OpenType fonts in such a way that it allows creation of an elevated user?
Oh, I forgot. If you want to have some more fun, google animated cursors on windows. They were .. quite risky. Bonus: Websites in IE could deploy their own custom animated cursors too, elevating that bug from a Local Privilege Escalation to a Remote Privilege Escalation. Again: Don't put that stuff in the Kernel damnit!
Comment on: All decisions have consequences, but how did MS break OpenType fonts in such a way that it allows creation of an elevated user?
Many things run in the Kernel in Windows. I'm really sorry to say this, but honestly, that's beyond bad idea. I'm pretty sure though that the MS guys know it themselves, so no need to say further :>
Some things which run in the Kernel: Many things of the GUI drawing, and some other services not belonging there, like parts of the MS HTTP Server IIS (Optionally). All of these don't belong there. Why were they put there in the first place? Good question. For the IIS potion, it's to increase performance. Sorry windows lovers, but looks like the Windows kernel sucks and is abysmal slow, so slow that to win the speed race against linux boxes and their user-space daemons, they had to build a Kernel module to keep up to speed. This is the reason why every security issue inside IIS is immediately beyond critical. Fun times. For other things, I guess it was decided to put there for faster development. Wild guess. Other than that I don't know, I can't think of any good reason, really.
So, as drawing the GUI (Graphical User Interface) is done in the Kernel, font files are also read there. This means that every issue which leads to a crash immediately leads to a critical security issue (Oh, and it makes the system really unstable). I can't find right away what kind of exact issue this was, so let me just do some guessing what kind of issues there could have been:
- Buffer overflow: The good old buffer overflow. Meaning, you have a data structure, allocate some kind of buffer to hold data, and then try to
memcpymore data into it than it has space. This quickly leads to a crash, which may be mitigated by carefully crafting the data. - Missing boundary check: Maybe they didn't do proper boundary checking, so that a index given in the OpenType font was not sanity checked, and thus triggered a write out-of-bounds.
// Example of a buffer overflow:
char buffer[20];
strcpy(buffer, openTypeHeader->something); // BAD: No bounds check! If 'something' contains more than 19 Bytes before hitting a 0x00 Byte, this causes a buffer overflow
// Example of a missing boundary check triggering out of bounds writes
int lookup_table[256]; // Lookup table, mapping from an index to some integer. Replace 'int' with anything you like.
lookup_table[openTypeCharacter->index] = openTypeCharacter->foo; // BAD if index is wider than 8Bits: 'index' may be greater than 256, and thus trigger a out-of-bounds write
To sum it up, I'm pretty sure that the developers over at Microsoft hate themselves that at some point it was decided to put these things into the Kernel. You may have heard of mitigation technologies like ASLR, but these don't help on windows. Why? Take a guess. Got one? Answer is: They're disabled in the Kernel, where we're running. Oh well.
One final note: Never put anything into the Kernel that may be done in user-space. Create a user-space daemon, and carefully give it the needed permissions (And only those!) to do its job.
Drops mic
Comment on: I wrote an Omegle location tracker, and got banned after too many people got freaked out. Anyone wanna try it?
Mh? Is Omegle using P2P traffic?
Edit: Oh, and please see Rule 2. As of yet, this offers nothing of value to this forum. Bragging won't do anything. Proof it.
Comment on: Why you should never, ever, ever use MongoDB
TL;DR:
Never use a database because 'everybody else does', do your own research as to the advantages and drawbacks of a particular database.
Comment on: Does anyone know if you can get the code for NASA probes?
- Code of the Apollo 11 computer
- Open source archive of the NASA This list is so long that it makes my browser lag..
Comment on: My host is having some issues right now...
Some IP addresses, like 6? (The service is known by maybe 5 people or so), try to access web administration tools: phpMyAdmin, SQLiteManager, msd (no idea what that is), JMX console, Jenkins, and other random URLs.
Each IP address requests almost the exact same set. To me it looks like some peoples boxes were compromised.
Comment on: What do you guys think of NASA's programming guidelines? Are they too strict or do they make sense when code correctness is life-or-death?
I think that considering those guys are generally coding stuff that must work for years without human intervention without segfaulting and stuff, it's quite relaxed. You have to consider that those programs run on computers with somewhat limited CPU and memory boundaries. This explains why it's forbidden to do dynamic memory allocation after the start of the program. For a usual desktop application that'd be way too strict of course. The rule to also use the smallest possible data type is just an artifact of the limited memory resources.
I like the intention of having an upper bound for loops. Again, think of that it's impossible for a human to just restart the device after it started. If that thing then hangs in an infinite loop of any kind, it'll kill the entire mission and burn millions of dollars with it.
And the other points are 'just' artifacts of a "God damnit write readable code". IMO the document is perfectly reasonable for what they do.
Comment on: What do you listen to while you write code?
Looks at playlist HandsUp (Internet radio), J-Pop, Metal, German Metal, J-Rock, Soundtracks, Random-Stuff-on-YouTube .. Has to be loud and not something I generally dislike. I don't want to hear my surroundings, which distracts me much much more than having music on my ears.
Comment on: [META] I'm the moderator of /v/programming and pledge to be more active from now on - AMA
I technically agree on the popularity thing, the issue I have with that is defining what's popular and what's not. This subvoat currently boasts almost 15k subscribers (Roughly a third of /v/askvoat) and is a default sub, so in terms of Voat, it's not super small nor really unpopular. Also, as someone said somewhere else (I think in this thread?), it's way harder to split up communities after they've pretty much settled. If we were to add the no-meme-and-stuff rule later on, we could ruin any reputation we had until that point (Whatever kind of rep that is/was). So instead of splitting up the community later on, I want to do it now and actually encourage someone to open up /v/programmerhumor or something, which I may also link in the related subs section in the sidebar. It's a bit UNIX philosophy: We want to do one thing, and do that well :)
Comment on: My host is having some issues right now...
Fun fact: My small internet service gets 50% of malicious traffic from OVH IP addresses. And on this day, not a single thing of value was lost cough
On a more serious note, do the OVH guys respond to abuse e-mail?
Comment on: Need code written for wordpress
If OP does so, please make sure to ask the owner of the iframe'd website for permission if it's not given somewhere on the page itself. Your countries laws are most likely different, here in Germany though you get a whole bunch of direct and indirect law issues with it. And it's just nice to ask the author. To circumvent all of this, just link to the page somewhere.
Edit: Oh and yeah, else you should either consider learn on how to program this yourself, or pay someone. OP, please know that I consider a "Will pay you to build X" submission as job opening, which is against the rules of this sub :)
Comment on: No Code of Conduct: A Code of Conduct for Adults in Open Source Software
People at the Chaos Communication Congress dealt with that crap two years ago. So, these cards turned up and were handed out. Some female gets hold of a bunch (She later blogged about it, so yeah), and layed male and female silhouettes with them as kind of art project. The SJWs were enraged, everyone else laughed their ass off, management was like "Ah shit". Next year, those cards were gone. Thank god, else I may have had to waste my time with that BS.
Comment on: No Code of Conduct: A Code of Conduct for Adults in Open Source Software
I categorize this under "educational". Done. That was easy. As long these kind of submissions don't get too much, it's fine.
Comment on: Might be the wrong place to post, but where/how would I go about learning how to program?
I won't discourage you from learning Python nor Javascript. Both have quite a big following, making things easier.
I want to however encourage you to also look at all kinds of languages. Maybe not now. But if anyone ever tells you that "Some language here is shit because it's so hard!", then please ignore that person. That's like the thought police of programming. Programming languages have their place. Some may be outdated as another language now fills their place now. That's fine, doesn't mean though the previous language is the worst thing ever.
Next, I want to encourage you to do something other think is insane. Try to program something else than the billionths calculator in JS. That's a nice thing to have, but won't teach you a lot of the inner workings of a computer. Will you need that knowledge every waking minute as developer? Thank god no. But will it help you understand things? Absolutely. (And makes for quite some interesting trivia knowledge, heh)
Maybe a challenge? You don't have to do it, of course. Pick up any language and learn it. In maybe two years, come back and learn C with the by then current standard (Probably C17), don't waste your time with C89. Now, go to osdev.org and begin to write a small kernel, the beginning of a small operating system. You'll never learn so much, swear so much and want to kill someone so much ever before in a really short timeframe. And it's fun as hell too!
Oh, and I want to add Ruby to your mix of languages to look at as first language.
Comment on: [META] I'm the moderator of /v/programming and pledge to be more active from now on - AMA
Added a bunch of subvoats for now. Don't want the list to get too long, but two or at most three more could fit in there I guess.
Comment on: [META] I'm the moderator of /v/programming and pledge to be more active from now on - AMA
Also, maybe add some links to related subverses?
Sure, I'd need to compile a short list somehow. Thinking of /v/algorithms, /v/learnprogramming or /v/noobprogramming (Those guys should probably merge?) and /v/techcareerquestions. Any other ideas?
I can help moderate. I am the moderator of /v/algorithms
Awesome! I'd send you a invite if I had a button to do so. I was wondering if I should post to /v/subverserequest. I'm a mod, but then, I don't seem to have all permissions either.
And .. why don't you use Jabber? Or even Tox? Does it do encrypted messaging like OTR or Tox does?