Open Side Menu Go to the Top

04-09-2015 , 05:54 PM
Quote:
Originally Posted by iosys
I've been thinking of making software that just does a lot of random web activity to scramble ways people are classified by their web presence.
Call it Spartacus, as in "I'm Spartacus."
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD **
$25m Guaranteed WPM on CoinPoker
Join the action now
Daily Rewards • Splash Pots • CoinRaces
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD **
04-09-2015 , 06:08 PM
Quote:
Originally Posted by daveT
You wouldn't need a config area as this could all be done programmatically. A public / private key combo can be auto-generated with two databases talking to each other. You have to be logged in to your email account use the key, which is functionally no different than being logged into your computer as the correct user and using RSA to ssh into your server.

What am I missing here?
If you're storing the private key on the server, you don't have E2E security. If you're not storing the private key on the server, you can't read the email elsewhere, without a more intrusive mechanism like a dongle.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
04-09-2015 , 06:13 PM
I was at a meetup where they were talking about secure login via Facebook. They actually add a checksum to your browser to confirm your identity. Why can't email work the same way?

We are talking about a mechanism that is terribly broken as it is. We put our entire lives (back account info, password resets, etc) on an application with a public email address hidden behind an easy to remember password. One thing Gmail is doing is denying login via Thunderbird if I'm not logging in via my home IP Address.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
04-09-2015 , 06:22 PM
Quote:
Originally Posted by daveT
I was at a meetup where they were talking about secure login via Facebook. They actually add a checksum to your browser to confirm your identity. Why can't email work the same way?

We are talking about a mechanism that is terribly broken as it is. We put our entire lives (back account info, password resets, etc) on an application with a public email address hidden behind an easy to remember password. One thing Gmail is doing is denying login via Thunderbird if I'm not logging in via my home IP Address.
Email encryption is 100% about protecting yourself from intermediaries. There's no need for any kind of encryption involving the end user if you decide that some intermediary (Google) is trustworthy enough that you can give them your private keys.

Edit: Authentication - which is what you're talking about here - is a completely different problem and much easier to solve - proper 2FA is easy, makes account hacking close to impossible and doesn't force everyone else to do anything different.

Last edited by candybar; 04-09-2015 at 06:28 PM.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
04-09-2015 , 06:45 PM
Quote:
Originally Posted by JSLigon
Haven't read the link but this just means you'd have to download and decrypt every received message on your own machine where you could then run the spam filter if you want it filtered, right? You still can have a spam filter, just have to run it locally. I'll read through the link though.
The link talks specifically about the problems with relying on purely client side spam filtering.

In a nutshell (and I'm leaving out a lot of good stuff) modern spam filtering relies on lots of data from different sources and not just the content of the email you're trying to filter.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
04-09-2015 , 06:48 PM
Quote:
Originally Posted by candybar
Edit: Authentication - which is what you're talking about here - is a completely different problem and much easier to solve - proper 2FA is easy, makes account hacking close to impossible and doesn't force everyone else to do anything different.
It drives me insane that my most important accounts (banking/investment accounts) don't support 2FA and generally have ****ty password policies.

2FA is so easy now that you can use a smart phone app instead of a physical dongle - there's no excuse for not offering it.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
04-09-2015 , 07:17 PM
my bank refuses to even update its ios app

spending money baaaaad, keeping clients' money safe baaaaaad
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
04-09-2015 , 07:56 PM
Quote:
Originally Posted by candybar
Different indent styles used to be a lot more common, especially in the days of C/C++, see:

http://en.wikipedia.org/wiki/Indent_style

And I assume the C# style (Allman/BSD style) is what Microsoft internally uses for C/C++ projects - see https://raw.githubusercontent.com/do.../src/gc/gc.cpp for example. What happened since then I think is that the popularity of Java and the fact Java came from a specific vendor as opposed to C/C++, led to Sun's K&R variant (1TBS) and similar styles becoming much more dominant than before. At the same time, the popularity of open source and even Q&A sites and forums where people share source code probably reduced the diversity of indent styles within each ecosystem. Also the Allman style, which is the most popular style after K&R, is not suitable for Javascript because automatic semicolon insertion.

Kernel style and GNU style are ridiculous IMO, yet they are used for huge projects that run this world.
I can't stand anything other than Allman style. Having all my braces symmetrical is so much more readable imo
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
04-09-2015 , 08:03 PM
For the sake of standards and portable code - all programmers all over the world should all just get together and agree on one style. I will go along with whatever majority comes up with.

Spoiler:
As long as it's Stroustrup.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
04-09-2015 , 08:06 PM
Quote:
Originally Posted by Dudd
I can't stand anything other than Allman style. Having all my braces symmetrical is so much more readable imo
i think it goes....

no food for 2 days >>>>>> open braces are on their own line > having fingernails pulled out
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
04-09-2015 , 08:39 PM
I've noticed zed shaw uses different brace styles for functions than for structs, if/else etc

http://c.learncodethehardway.org/book/ex19.html

not sure what I think of it
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
04-09-2015 , 08:53 PM
Quote:
Originally Posted by e i pi
I've noticed zed shaw uses different brace styles for functions than for structs, if/else etc

http://c.learncodethehardway.org/book/ex19.html

not sure what I think of it
i'm actually fine with it in that specific case, since it's accomplishing the goal of visually offsetting function names. as a general rule i think it wastes space, since the text of the opening line itself visually matches the close brace already.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
04-09-2015 , 09:20 PM
Quote:
Originally Posted by e i pi
I've noticed zed shaw uses different brace styles for functions than for structs, if/else etc

http://c.learncodethehardway.org/book/ex19.html

not sure what I think of it
That's how it was originally done by K&R and still the most common for C.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
04-09-2015 , 09:29 PM
Looking at this:

http://minnie.tuhs.org/cgi-bin/utree.pl

And this in particular,

http://minnie.tuhs.org/cgi-bin/utree...V5/usr/c/c00.c

Looks they didn't care too much about consistency in the early days and slowly moved from the currently popular Java/Javascript style (no opening brace gets a new line) to the K&R style (opening braces for functions get new lines)
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
04-09-2015 , 10:46 PM
Meh, I'm a pretty big AWS fan boy but I don't think this is that big of a deal.

It's not really their strength (their user interfaces are generally clunky and not user friendly) and there a bunch of people already doing something like this but better. Including some already built on AWS so they're already getting the benefits of S3/EC2.

It's also this weird spot where their users still have to know a bunch of ML concepts. And most of those people will probably prefer using existing libraries/techniques/tools than the probably not very customizable AWS ui.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
04-10-2015 , 02:59 AM
Quote:
Originally Posted by jjshabado
The link talks specifically about the problems with relying on purely client side spam filtering.

In a nutshell (and I'm leaving out a lot of good stuff) modern spam filtering relies on lots of data from different sources and not just the content of the email you're trying to filter.
Is a good filter basically just getting on spammers' list and adding whatever email that your dedicated spam email account receives as instant delete from email server. I know about checking for common words that are spam related and the other criteria but I think the step above is really the best you can do.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
04-10-2015 , 03:16 AM
Regarding code style. The key thing is consistency. Nothing is more frustrating than seeing different styles in a single project.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
04-10-2015 , 06:43 AM
Encryption of communication isn't going to solve anything at the end of the day so long as we're using centralised services (Gmail, Facebook, etc etc) as those authorities can be (and are) compromised by the NSA with and without their knowledge.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
04-10-2015 , 07:31 AM
Quote:
Originally Posted by iosys
Is a good filter basically just getting on spammers' list and adding whatever email that your dedicated spam email account receives as instant delete from email server. I know about checking for common words that are spam related and the other criteria but I think the step above is really the best you can do.
Just read the link. It's not very long and covers this.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
04-10-2015 , 10:13 AM
I think I had a good idea last night.

A browser or maybe just a standalone application that algorithmically predicts your mobile Internet use and every so often caches this prediction, so even if you are in a parking garage underground, in a tunnel, train etc. It seems like you are always online.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
04-10-2015 , 10:14 AM
I'm thinking if it caches your instagram front page, websites you frequent, etc. It could be pretty great at helping significantly increase the perceived speed of the mobile phones connection.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
04-10-2015 , 10:22 AM
Mobile networks already leverage caching in some ways (but not as you describe). For example they will often downsample hi-res images before passing them over the expensive networks like 4G.

I think your idea would better be implemented by browsers themselves, and there is already a spec for that:
https://developer.mozilla.org/en-US/...refetching_FAQ

Beware of quirks using prefetch though, different browsers will prefetch in different ways, and IIRC Chrome for example does execute JS! Although I might be wrong, was a long time ago since I last used it.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
04-10-2015 , 10:23 AM
Quote:
Originally Posted by Larry Legend
I'm thinking if it caches your instagram front page, websites you frequent, etc. It could be pretty great at helping significantly increase the perceived speed of the mobile phones connection.
Chrome on desktop has been doing prefetching already (but more based on what you're already browsing, etc) so this is technically not that difficult but I think you're way overestimating the predictability of browsing patterns. Also battery life is a big problem for smartphones even when they don't have to do anything. Unless the smartphone somehow knows when you're likely to lose connection, it has to be doing this all the time, which is going to kill the battery very quickly.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
04-10-2015 , 10:37 AM
And for those of us in ****ty cell-phone-plan countries it would cost a bunch of bandwidth too.
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD ** Quote
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD **
$25m Guaranteed WPM on CoinPoker
Join the action now
Daily Rewards • Splash Pots • CoinRaces
** UnhandledExceptionEventHandler :: OFFICIAL LC / CHATTER THREAD **

      
m