| 00:05.49 | *** join/#uphpu btholt (~btholt@ip-67-215-39-51.syringanetworks.net) |
| 00:06.23 | *** join/#uphpu jnbek (~jnbek@pdpc/supporter/active/jnbek) |
| 00:06.23 | *** mode/#UPHPU [+v jnbek] by ChanServ |
| 00:41.32 | TuxToaster | $chuck-fact |
| 00:41.33 | raifbot | Chuck Norris does simply walk into Mordor |
| 00:57.32 | *** join/#uphpu btholt (~btholt@ip-67-215-39-51.syringanetworks.net) |
| 02:47.50 | *** join/#uphpu davad (~davad@c-50-160-45-107.hsd1.ut.comcast.net) |
| 02:47.50 | *** join/#uphpu fungus (fungus@2600:3c01::f03c:91ff:fe96:4597) |
| 02:48.04 | *** mode/#UPHPU [+o fungus] by ChanServ |
| 03:08.53 | *** join/#uphpu hhatfield (~hhatfield@67-41-177-27.slkc.qwest.net) |
| 03:08.54 | *** mode/#UPHPU [+v hhatfield] by ChanServ |
| 03:09.08 | hhatfield | $rlart |
| 03:09.08 | raifbot | overclocks herlo until herlo burns out. |
| 03:09.10 | hhatfield | ~rlart |
| 03:09.11 | infobot | strangles unum with a doohicky mouse cord |
| 03:09.26 | *** join/#uphpu kim27 (~kim27@host-166.arcadia-srv-216-83-132.fiber.net) |
| 03:32.52 | shanemhansen | Very stupid php question, if you want to append to the include path using an ini directive, what's the syntax? |
| 03:36.03 | *** join/#uphpu UtahDave (~boucha@c-174-52-220-233.hsd1.ut.comcast.net) |
| 03:36.03 | *** mode/#UPHPU [+o UtahDave] by ChanServ |
| 03:40.31 | hhatfield | @shanemhansen http://php.net/manual/en/function.set-include-path.php |
| 03:40.33 | hhatfield | Example 2 |
| 03:40.42 | hhatfield | $path = '/usr/lib/pear'; |
| 03:40.42 | hhatfield | set_include_path(get_include_path() . PATH_SEPARATOR . $path); |
| 03:41.14 | shanemhansen | So, I thought I was looking for the syntax to use from within a conf.d/asdsad.ini file. |
| 03:41.19 | shanemhansen | But it turns out that's correct. |
| 03:41.44 | hhatfield | if you actually want to change it in the ini file, http://www.php.net/manual/en/ini.core.php#ini.include-path |
| 03:41.44 | shanemhansen | It's actually an apache vhost configuration where I need to do the equivalant of set_include_path(...) |
| 03:44.41 | hhatfield | http://stackoverflow.com/questions/6508429/how-to-set-the-php-include-path-via-htaccess |
| 03:45.26 | hhatfield | in the question there, there is an example of the syntax |
| 03:45.34 | hhatfield | <PROTECTED> |
| 03:47.38 | shanemhansen | hhatfield, I was hoping for something like what ubuntu drops in /etc/php5/apache2/conf.d/zend-framework.ini but in a vhost configuration. |
| 03:47.51 | shanemhansen | Since is dynamically appends to the existing path. |
| 03:48.06 | shanemhansen | But it looks like I'm just going to have to spell them all out like in the example you posted : ( |
| 03:48.27 | hhatfield | out of curiosity, why does it need to be in the vhost file? |
| 03:48.52 | shanemhansen | one sec, my cat just threw up. yuck. |
| 03:49.28 | hhatfield | $clean the cat |
| 03:49.32 | hhatfield | ~clean the cat |
| 03:49.32 | infobot | ACTION nukes the cat's room and says to the cat: Und zie problem is solved |
| 03:50.29 | shanemhansen | So I have a development environment with n developers each with m sites. |
| 03:50.47 | shanemhansen | Each developer needs a library path included from their source checkout. |
| 03:51.08 | shanemhansen | But it can't be global because developer's checkouts would clash. |
| 03:51.21 | shanemhansen | So the scope is per vhost. |
| 03:54.22 | hhatfield | ok |
| 03:54.37 | hhatfield | you mentioned zend framework before |
| 03:55.08 | hhatfield | Would it be possible in your setup to have a configuration like they do? |
| 03:55.55 | hhatfield | one where each developer could have their own paths setup and inherit any configs common to all? |
| 03:56.34 | hhatfield | what kind of control do you have over where the libraries are checked out? |
| 03:59.16 | *** join/#uphpu ninnypan_ (~ninnypant@69.169.155.132.provo.static.broadweavenetworks.net) |
| 04:00.33 | *** join/#uphpu mgeary (~mgeary@69.169.142.45.provo.static.broadweavenetworks.net) |
| 04:00.33 | *** mode/#UPHPU [+v mgeary] by ChanServ |
| 04:05.19 | *** join/#uphpu clintberry (~clintberr@c-76-27-26-207.hsd1.ut.comcast.net) |
| 04:05.19 | *** mode/#UPHPU [+v clintberry] by ChanServ |
| 04:32.38 | *** join/#uphpu supernovia (~Adium@208.64.91.46.static.utbb.net) |
| 04:32.38 | *** mode/#UPHPU [+v supernovia] by ChanServ |
| 04:36.25 | *** join/#uphpu carmony (~carmony@198.61.169.8) |
| 04:36.25 | *** mode/#UPHPU [+o carmony] by ChanServ |
| 04:55.27 | *** join/#uphpu carmony (~carmony@198.61.169.8) |
| 04:55.27 | *** mode/#UPHPU [+o carmony] by ChanServ |
| 05:02.31 | *** join/#uphpu carmony (~carmony@198.61.169.8) |
| 05:02.31 | *** mode/#UPHPU [+o carmony] by ChanServ |
| 05:04.18 | *** join/#uphpu hhatfield (~hhatfield@67-41-177-27.slkc.qwest.net) |
| 05:04.18 | *** mode/#UPHPU [+v hhatfield] by ChanServ |
| 09:50.19 | *** join/#uphpu stevecoug (~stevecoug@oalug/member/stevecoug) |
| 09:50.19 | *** mode/#UPHPU [+v stevecoug] by ChanServ |
| 12:30.29 | *** join/#uphpu eggyknap (~jtolley@unaffiliated/eggyknap) |
| 12:30.29 | *** mode/#UPHPU [+v eggyknap] by ChanServ |
| 12:47.28 | *** join/#uphpu romanovic_ (~romanovic@puritynine.com) |
| 12:54.07 | *** join/#uphpu jnbek (~jnbek@pdpc/supporter/active/jnbek) |
| 12:54.07 | *** mode/#UPHPU [+v jnbek] by ChanServ |
| 14:15.43 | *** join/#uphpu opapo (~quassel@204.113.97.235) |
| 14:15.43 | *** mode/#UPHPU [+v opapo] by ChanServ |
| 14:27.56 | *** join/#uphpu josephscott (~josephsco@proxy.iad.automattic.com) |
| 14:34.59 | *** join/#uphpu captbrogers (~brian@70-89-245-77-Bank-of-Utah-ut.hfc.comcastbusiness.net) |
| 14:41.53 | *** join/#uphpu kendsnyder (~kendsnyde@67.214.245.39) |
| 14:41.53 | *** mode/#UPHPU [+v kendsnyder] by ChanServ |
| 14:43.09 | *** join/#uphpu kendsnyder1 (~kendsnyde@67.214.245.39) |
| 14:45.07 | *** join/#uphpu mgeary (~mgeary@69.169.142.45.provo.static.broadweavenetworks.net) |
| 14:45.08 | *** mode/#UPHPU [+v mgeary] by ChanServ |
| 14:56.23 | *** join/#uphpu btholt (~btholt@ip-67-215-39-51.syringanetworks.net) |
| 15:12.01 | *** join/#uphpu hhatfield (~hhatfield@199.104.95.10) |
| 15:12.02 | *** mode/#UPHPU [+v hhatfield] by ChanServ |
| 15:15.36 | *** join/#uphpu mgeary (~mgeary@67.136.112.81) |
| 15:15.37 | *** mode/#UPHPU [+v mgeary] by ChanServ |
| 15:25.57 | ninnypants | $rlart |
| 15:25.58 | raifbot | tries to shut jsmith up. |
| 15:28.59 | *** join/#uphpu ryan_ (~ryan@2002:421d:b58e:0:9850:5908:a6f1:17af) |
| 15:42.05 | *** join/#uphpu hhatfield (~hhatfield@64.147.139.68) |
| 15:42.05 | *** mode/#UPHPU [+v hhatfield] by ChanServ |
| 15:43.39 | *** join/#uphpu btholt (~btholt@ip-67-215-39-51.syringanetworks.net) |
| 15:44.03 | *** join/#uphpu clintberry (~clintberr@75-148-102-17-Utah.hfc.comcastbusiness.net) |
| 15:44.03 | *** mode/#UPHPU [+v clintberry] by ChanServ |
| 15:58.06 | josephscott | wasn't sure what to expect here - http://devour.com/video/unexpected-ballers/ |
| 16:03.55 | *** join/#uphpu undertakingyou (~undertaki@67.214.250.163) |
| 16:03.55 | *** mode/#UPHPU [+v undertakingyou] by ChanServ |
| 16:06.56 | *** join/#uphpu SunSparc (~jonathan@69-27-175-74.acedatacenter.com) |
| 16:06.56 | *** mode/#UPHPU [+v SunSparc] by ChanServ |
| 16:07.58 | ninnypants | http://blog.elliottkember.com/chromes-insane-password-security-strategy |
| 16:13.17 | fungus | ninnypants, so much hate for Chrome in that post. It's not a "Chrome problem". It has existed that way for a very long time, even back in the Mozilla days. |
| 16:13.37 | ninnypants | fungus: true |
| 16:14.15 | ninnypants | but I don't remember being able to just view plain text passwords from firefox |
| 16:15.25 | *** join/#uphpu MikeHansenMe (~mike@173-165-131-122-utah.hfc.comcastbusiness.net) |
| 16:16.27 | fungus | yup, it did that too |
| 16:17.12 | fungus | Though Mozilla and Firefox both offered an option for a master password, but kind of hid that capability deep in the preferences. |
| 16:20.34 | *** join/#uphpu btholt (~btholt@ip-67-215-39-51.syringanetworks.net) |
| 16:22.12 | ninnypants | I wonder what exactly "Streaming of copyrighted works" means does that mean I can't rip my dvds and stream them to myself? http://www.washingtonpost.com/blogs/the-switch/wp/2013/08/05/sopa-died-in-2012-but-obama-administration-wants-to-revive-part-of-it/ |
| 16:36.49 | DexterTheDragon | http://raidersec.blogspot.com/2013/06/how-browsers-store-your-passwords-and.html |
| 16:40.42 | *** join/#uphpu UtahDave (~boucha@63.230.12.160) |
| 16:40.42 | *** mode/#UPHPU [+o UtahDave] by ChanServ |
| 16:55.23 | *** join/#uphpu NoCoolName_Tom (~NoCoolNam@64.124.34.2) |
| 17:23.53 | *** join/#uphpu TuxToaster (~TuxToaste@66.219.204.99.provo.dynamic.broadweavenetworks.net) |
| 17:23.53 | *** mode/#UPHPU [+v TuxToaster] by ChanServ |
| 17:24.07 | TuxToaster | http://www.informationweek.com/security/attacks/https-hackable-in-30-seconds-dhs-alert/240159435 |
| 17:28.40 | josephscott | the BREACH attack isn't exactly that clear cut |
| 17:31.42 | *** join/#uphpu hhatfield (~hhatfield@64.147.139.68) |
| 17:31.42 | *** mode/#UPHPU [+v hhatfield] by ChanServ |
| 17:36.15 | josephscott | it isn't like they can decrypt the whole page in 30 seconds |
| 17:36.29 | *** join/#uphpu Benni_Hanna (~Benni_Han@neutroninteractive-xmission.xmission.com) |
| 17:37.59 | Skinner1 | insert insult here about decrypting your mom in 30 seconds |
| 17:41.14 | *** join/#uphpu undertakingyou (~undertaki@67.214.250.163) |
| 17:41.14 | *** mode/#UPHPU [+v undertakingyou] by ChanServ |
| 17:50.01 | *** join/#uphpu undertakingyou (~undertaki@67.214.250.163) |
| 17:50.01 | *** mode/#UPHPU [+v undertakingyou] by ChanServ |
| 18:00.09 | hhatfield | ~mom Skinner1 |
| 18:00.16 | hhatfield | ~lame |
| 18:00.22 | *** join/#uphpu cro (~Adium@204-228-149-217.ip.xmission.com) |
| 18:00.26 | hhatfield | ~lart me |
| 18:00.26 | infobot | breaks out the Hoover and sucks up hhatfield |
| 18:03.43 | *** join/#uphpu davad (~davad@50.160.45.107) |
| 18:04.49 | *** join/#uphpu ponderability (~u0604136@dongato.chpc.utah.edu) |
| 18:15.14 | *** join/#uphpu davad (~davad@c-50-160-45-107.hsd1.ut.comcast.net) |
| 18:20.57 | ninnypants | TuxToaster: from what I looked at on it they weren't pulling straight of the network but that user's computer |
| 18:21.02 | ninnypants | maybe I'm wrong though |
| 18:23.42 | *** join/#uphpu tierra (tierra@ibaku.net) |
| 18:42.34 | TuxToaster | ~jar hhatfield |
| 18:42.34 | infobot | hhatfield took the cookie from the cookie jar. "Who, me?", "Yes, you!", "Couldn't be!", "Then, who?" "ponderability !" |
| 18:43.24 | TuxToaster | ninnypants: hard to say, from one of the computers in the connection getting at SSL data is relatively easy since it's decrypted on that machine |
| 18:47.28 | ninnypants | TuxToaster: yeah that's my thinking as well. Seems like it would be easy to get at if you had malware on the computer it'd be a lot easier than pulling it off the network |
| 18:48.57 | TuxToaster | http://codepen.io/desandro/pen/kdqgy |
| 18:58.32 | *** join/#uphpu btholt (~btholt@ip-67-215-39-51.syringanetworks.net) |
| 18:59.10 | TuxToaster | People say that if you play Microsoft CD's backwards, you hear satanic things, but that's nothing, because if you play them forwards, they install Windows. |
| 19:02.07 | DexterTheDragon | ninnypants: BREACH is a man-in-the-middle attack that requires the web server to be compressing the response, and have user entered data and a secret token (like a CSRF token) in the response |
| 19:02.40 | josephscott | so make sure your CSRF tokens are unique for each page view |
| 19:02.45 | DexterTheDragon | it then floods the server with brute force and compares the differences in the compressed response to guess the secret |
| 19:02.48 | DexterTheDragon | basically |
| 19:02.59 | *** join/#uphpu ryan_ (~ryan@2002:421d:b58e:0:9850:5908:a6f1:17af) |
| 19:04.41 | DexterTheDragon | josephscott: it can also target the http header and obtain your login cookie |
| 19:06.01 | josephscott | guess you could reset the login cookie on every page view |
| 19:06.53 | josephscott | in theory you could brute force any value given sufficient resources and time |
| 19:07.08 | josephscott | so complex, reasonably random, login cookies should help there |
| 19:14.36 | hhatfield | I like cookies |
| 19:22.52 | *** join/#uphpu ryan_ (~ryan@66.29.181.142.static.utbb.net) |
| 19:23.12 | josephscott | $lart data centers that go offline |
| 19:23.13 | raifbot | whips out a shotgun, trudges over to data centers that go offline, and goes postal. |
| 19:23.57 | captbrogers | Can you imagine someone taking a shotgun to a server cabinet? That would be brutal |
| 19:26.37 | *** join/#uphpu opapo (~quassel@204.113.97.235) |
| 19:26.37 | *** mode/#UPHPU [+v opapo] by ChanServ |
| 19:27.11 | *** join/#uphpu stevecoug (~stevecoug@oalug/member/stevecoug) |
| 19:27.11 | *** mode/#UPHPU [+v stevecoug] by ChanServ |
| 19:29.33 | hhatfield | well raifbot went postal, so there's a good chance it'll never get delivered |
| 19:53.53 | *** join/#uphpu UtahDave (~boucha@63.230.12.160) |
| 19:53.53 | *** mode/#UPHPU [+o UtahDave] by ChanServ |
| 19:55.40 | TuxToaster | $8ball does hhatfield like cookies? |
| 19:55.40 | raifbot | TuxToaster - Yes - definitely. |
| 19:55.58 | TuxToaster | $8ball did hhatfield steal the cookie from the cookie jar? |
| 19:55.59 | raifbot | TuxToaster - Don't count on it. |
| 19:56.01 | TuxToaster | lol |
| 19:56.26 | TuxToaster | $8ball if not him, then who? josephscott? |
| 19:56.26 | raifbot | TuxToaster - Outlook not so good. |
| 19:56.44 | TuxToaster | your sources should have said yes. |
| 19:57.13 | josephscott | $suggest thefts |
| 19:57.13 | raifbot | josephscott suggestions for 'thefts' : theftspy, thefts, theftsandwrecks.com, theftsmart, thefts in your area, theftspy xda, thefts of a particular character, thrift shop, theftspy login, thrift shop lyrics |
| 19:57.43 | TuxToaster | thrift shop lyrics? |
| 20:07.56 | josephscott | http://breachattack.com/#mitigations |
| 20:31.32 | josephscott | DexterTheDragon: did more reading, looks like many people have turned off header compression after the CRIME attacks, in which case your cookies should be ok |
| 20:31.46 | DexterTheDragon | yep |
| 20:32.11 | josephscott | also, I like the idea of just appending random strings of random length to the end of the response |
| 20:36.20 | jsmith | josephscott: Oh c'mon -- they're even more fun if they're non-random strings of random length :-p |
| 20:37.03 | josephscott | what ever jumbles your compressed results works for me :-) |
| 20:37.46 | *** join/#uphpu jnbek (~jnbek@pdpc/supporter/active/jnbek) |
| 20:37.47 | *** mode/#UPHPU [+v jnbek] by ChanServ |
| 20:41.11 | jsmith | (The Count of Monte Cristo would be too obvious, now) |
| 20:42.40 | mindjuju | jsmith, that reminds me of a time when I went into a restaurant and ordered a Monte Cristo sandwich and the waiter says: The wrote a book on the sandwich! |
| 20:42.46 | mindjuju | he WAS being dead serious |
| 20:43.18 | jsmith | mindjuju: That's OK -- the whole reason I drove over Monte Cristo pass was to find the sandwich :-p |
| 20:43.59 | hhatfield | they named a sandwich after the movie? |
| 20:44.09 | jsmith | hhatfield: No, after the book |
| 20:44.22 | jsmith | hhatfield: The movie was named after the sandwich :-p (OK, I'm kidding...) |
| 20:45.06 | hhatfield | ~jar the count |
| 20:45.06 | infobot | the count took the cookie from the cookie jar. "Who, me?", "Yes, you!", "Couldn't be!", "Then, who?" "unum !" |
| 20:45.24 | hhatfield | ~LoLstats |
| 20:45.25 | infobot | total count of LoL on #uphpu: 10. Top 3: mahelious -- 6 (60.0%), captbrogers -- 3 (30.0%), Skinner -- 1 (10.0%) |
| 20:45.44 | hhatfield | ~lOlstats |
| 20:45.44 | infobot | total count of lOl on #uphpu: 1. Top 1: Skinner -- 1 (100.0%) |
| 20:46.08 | jsmith | mindjuju: You do know where Monte Cristo pass is, right? |
| 20:46.27 | captbrogers | lol |
| 20:51.16 | *** join/#uphpu btholt (~btholt@ip-67-215-39-51.syringanetworks.net) |
| 20:54.21 | captbrogers | LoL |
| 21:01.51 | *** join/#uphpu NoCoolName_Tom (~NoCoolNam@64.124.34.2) |
| 21:05.29 | *** join/#uphpu NoCoolName_Tom (~NoCoolNam@64.124.34.2) |
| 21:12.29 | *** join/#uphpu itimber (~Adium@204.10.234.111) |
| 21:12.29 | *** mode/#UPHPU [+v itimber] by ChanServ |
| 21:30.11 | ninnypants | $rlart |
| 21:30.11 | raifbot | calls kendsnyder1 on the phone ... the lights are on but nobody's home. |
| 22:28.41 | *** join/#uphpu supernovia (~Adium@208.64.91.46.static.utbb.net) |
| 22:28.41 | *** mode/#UPHPU [+v supernovia] by ChanServ |
| 22:32.56 | shanemhansen | Who says php developers don't have a good sense of humor: |
| 22:32.58 | shanemhansen | if (!empty($_SERVER['SCRIPT_FILENAME']) && 'ppibfi_admin.php' == basename($_SERVER['SCRIPT_FILENAME'])) die ('Stop! Hammer time!'); |
| 22:33.47 | ninnypants | shanemhansen: I've seen harry potter references in die() as well |
| 22:35.31 | josephscott | we used to have ghost busters references |
| 22:35.50 | josephscott | I think the translation folks ended up removing them :-( |
| 22:36.53 | ninnypants | josephscott: on wp.com or in all of wp? |
| 22:37.08 | ninnypants | or just in Automattic products |
| 22:37.20 | josephscott | I think it was in bbpress, been a long time |
| 22:37.48 | josephscott | we have a few easter eggs floating around wordpress.com still, I think |
| 22:42.38 | ninnypants | yeah I've found a few but can't remember any but the x-hacker header |
| 22:44.49 | *** join/#uphpu clintberry (~clintberr@75-148-102-17-Utah.hfc.comcastbusiness.net) |
| 22:44.49 | *** mode/#UPHPU [+v clintberry] by ChanServ |
| 22:50.03 | TuxToaster | http://rt.com/news/apple-patent-transmission-block-408/ |
| 22:53.34 | tierra | "Having invented one of the most sophisticated mobile devices, Apple now appears to be looking for ways to restrict its use." |
| 22:53.42 | tierra | heh, yeah, that's kind of what Apple is known for |
| 22:54.10 | josephscott | ug |
| 22:54.20 | josephscott | $lart remote de-activation |
| 22:54.21 | raifbot | whacks remote de-activation upside the head. |
| 22:54.51 | josephscott | tierra: you could just s/Apple/most companies/ and still bit on target |
| 22:56.19 | josephscott | TuxToaster: have you seen a link to the actual patent any where? I'd to confirm this |
| 22:57.31 | tierra | well, these days even car manufacturers are looking for ways to *open* their new tech gear they equip cars with... but they have to also contend with crazy saftey laws, etc |
| 22:57.49 | tierra | sure, they didn't used to be though |
| 22:58.39 | TuxToaster | josephscott: not yet, haven't looked |
| 22:58.50 | TuxToaster | I know they had a similar mention of this about a year ago though |
| 22:59.02 | TuxToaster | oh wait, that post is from last year |
| 22:59.05 | TuxToaster | haha |
| 22:59.20 | josephscott | just noticed that too :-0 |
| 22:59.24 | josephscott | :-) |
| 22:59.34 | ninnypants | seems like some of what they list is something you'd want a camera active at |
| 22:59.35 | ninnypants | weddings, funerals, academic lectures |
| 23:02.47 | TuxToaster | USANA would be all over it though |
| 23:03.01 | TuxToaster | they currently ban SLRs because of the detachable lens |
| 23:15.58 | TuxToaster | Computers are like air-conditioners, they stop working properly when you open Windows. |