Return Styles: Pseud0ch, Terminal, Valhalla, NES, Geocities, Blue Moon. Entire thread

ssl vulnerability

Name: Anonymous 2014-04-08 12:14

http://heartbleed.com

Reminder to update your machines and invalidate your possibly compromised certs.

cross posted from /g/

Name: Anonymous 2014-04-13 17:07

>>39
Real programming, as done in industry, is about producing maintainable code that works in a productive manner. Ease of use aids productivity. Because productivity is a concern to real programming, ease of use of the tools used by the programmer are also a concern.

Name: Anonymous 2014-04-13 17:16

>>41
Go to hell, worthless code monkey.

Name: Anonymous 2014-04-13 17:18

>>40
n might be received from input, in which case you have to insert a runtime check. On the other hand, n might be the result of a convoluted calculation that may make a runtime check unnecessary. In that case you would have to prove that this particular calculation preserves this particular invariant. And this proof may require a hell of a lot of writing because the compiler is not an AI and does not understand code the way you do.

Then there's the problem of modularity: if you export a function that preserves some invariants, you have to be able to declare that property, because the client must be able to prove things about your code without seeing your implementation. And that means more writing on your part.

Name: Anonymous 2014-04-13 17:29

>>41
What you're describing is pedestrian or webmonkey programming. If you're in an easy-to-use environment, that means a real programmer already done the hard work in your domain and provided you with your safe productive little frameworks and SDKs so you can flirt with bitches in the office all day.

Name: Anonymous 2014-04-13 17:53

>>37
The issue is computers not cryptography.

>>38
Not at all, let alone the existence of one time pads. And if that was true then they would be focusing on having as much computational power possible and not the development quantum computers.

Name: Anonymous 2014-04-13 17:55

>>38
Stop acting like you're some sort of supervillain. You're a nobody that doesn't know shit.

The NSA has that power
I'll wait till snowden confirms it.

Name: Anonymous 2014-04-13 17:56

>>20
Usenet quotes have been around for more than ten years. The word ``implying'' has been around for more than one hundred years.

That's not what I meant and you know it. It's about its recent usage, not about its date of conception. Don't be a smartass, /g/ro.

Name: Anonymous 2014-04-13 18:01

>>36
Yeah, just like how it can come up with general relativity and do it better than Einstein ROFL[i]![/i].

smart
Shows how serious you are about this. At least call it something respectable like ``intelligent'' since that's what it will have to literally be if it were able to program on its own as programming isn't a quantitative thing that can be automated by machines.

Name: Anonymous 2014-04-13 18:25

>>45
At least read the wiki before creating ignorant shit-posts, man.

It has also been proven that any cipher with the perfect secrecy property must use keys with effectively the same requirements as OTP keys.[3] However, practical problems have prevented one-time pads from being widely used.

So like I said, all ciphers are breakable.

Name: Anonymous 2014-04-13 19:44

>>47
recent usage
Do you count 1983 as recent? You imply that about 10 years is enough to make quoting with `>' legitimate in your eyes, and the following:

Witnesses have testified that Jim Jones (like a few other professional faith-healers) used shills part of the time...

appeared in 1983 (Prometheus Rising, if I can trust the first result of my favorite search engine), with the same meaning as that implied by the post you take offense with. Or had you just never seen the word `shill' aside from on an imageboard?

Name: Anonymous 2014-04-13 20:52

>>50
The word ``meme'' has been used for at least one hundred years, yet it carries a negative and completely different connotation from its original intended meaning.

You can't deny the usage of ``shill'' has been unnecessarily inflated by infantile /g/ /pol/ posters. Please do tell me why everyone and their mom is spouting said word lately, when there are many other words such as cheat, rogue, cheater, swindler, bluff, con man/artist, impostor, crook, enticer, decoy, or even kike. It doesn't have anything to do with the imageboards and their endless buzzword spouting, right?

For fuck's sake, I swear you're being dense on purpose.

Name: Anonymous 2014-04-13 21:04

If the Sussman could see the horrible thread he would kill himself just to spin in his grave. Fuck off, most of you faggots.

Name: Anonymous 2014-04-13 21:20

>>49
Wiki says nothing about all ciphers being breakable you pseudo-intellectual /g/nigger. Prove it.

Name: Anonymous 2014-04-13 21:37

>>51
Because it carries a very specific connotation that none of your other nouns match. I don't see what's so hard about this. You didn't complain when I used the word ``imply'' in >>50, so why should you complain about the word ``shill'' in >>10?

Unless, of course, the supposition in >>10 was correct, and this is an inept attempt at distracting people from >>8's point.

Name: Anonymous 2014-04-13 22:36

>>43
There is no inserting a run time check in C. But a warning is issued if an index is used that cannot be bounded.


int a[5];
int i; // i is currently undefined
scanf("%u", &i); // i can now be any value.
a[i] = 3; // i's type does not contain a predicate implying 0 <= i < 5, so this will signal an error.

int a[5];
int i; // i is undefined
scanf("%d", &i); // i is some value
if(0 <= i && i < 5)
{
// within this block, i satisfies the predicate, 0 <= i && i < 5
a[i] = 3; // length of a is 5, so i is safe.
}

printf("%d\n", a[i]); // i is not safe in this scope.


>>3
le pedophile sage

>>4
le pedophile sage

>>7
le pedophile sage

>>9
le pedophile sage

>>10
le pedophile sage

>>19
le pedophile sage

>>21
le pedophile sage

>>35
le pedophile sage

>>37
le pedophile sage

>>45
le pedophile sage

>>47
le pedophile sage

>>48
le pedophile sage

>>50
le pedophile sage

>>51
le pedophile sage

>>52
le pedophile sage

>>53
le pedophile sage

>>54
le pedophile sage

Name: Anonymous 2014-04-13 23:18

>>55
a's type (int*) would store the information of its size. (Why would i store that?)

This would be made easy by making malloc(), etc to be constructs rather than functions, but much of the type and bounds checking could be made transparent for most programs that wouldn't make LAC go on a shooting spree.

Seems like Sepples could runtime bounds checking (vectors do not fucking count) this pretty easily, but it doesn't.

le pedophile sage
I hope you didn't cite all those posts by hand.

Name: Anonymous 2014-04-13 23:40

>>55
Optimize your quotes, AhmadinaJEW!

Name: Anonymous 2014-04-13 23:48

>>56

It's in C's philosophy to perform runtime checks explicitly.


if(my runtime check here)
{
// respond with an error, or drop the message, or whatever
}
else
{
// handle it
}


Otherwise you end up with a weird exception system. If a language level runtime check fails, what should happen? Should the program terminate? How do you express recovery? Exceptions work ok in Java but have weird consequences for C++ when objects are managed with RAII.

I hope you didn't cite all those posts by hand.
Some tasks must be done by hand.

>>57
le pedophile sage

Name: Anonymous 2014-04-14 0:34

>>55
A-are you the real >le pedophile sage guy?
I fucking love you

Name: Anonymous 2014-04-14 1:21

>>59
No, but I think the real >le pedophile sage guy has visited.

Name: Anonymous 2014-04-14 2:26

>>60
Do you mean before /prog/ closed or after?

Name: Anonymous 2014-04-14 2:36

Name: Anonymous 2014-04-14 3:49

As the inventor of the `>le pedophile sage' meme, I must remark that you fools have terrible judgment in this matter. `>le pedophile sage' should never, ever use optimized quotes.

And anyway, I started that just to annoy one /g/ro after the CAPTCHA was implemented. I cannot believe that you retards would deify it or the other faggots who spammed it everywhere without thinking.

`>le pedophile criticism' was a nice mutation though.

Name: Anonymous 2014-04-14 4:00

>>63
And anyway, I started that just to annoy one /g/ro after the CAPTCHA was implemented.
/g/ros come and go, they are like insects. We're the ones who have to deal with your terrible shitposts. Is that what you want to do, to hurt your friends?

Name: Anonymous 2014-04-14 5:01

>>63
This software uses optimized quotes even when there is no space after the >.

test
test
'>test
`>test
>test
> test

Sometimes a weapon is needed to defuse the sage storms. The are particularly intense in prog ][ at times.

Name: Anonymous 2014-04-14 5:32

>>55
Actually this is impossible unless single assignment is used, huh. And even then. It would be easy if all variables are local, created once, and passed into subroutines that are called once. Recursion makes it harder. Tracing the properties of values as they go into data structures is harder.

Name: Anonymous 2014-04-14 10:32

>>65
That's not what optimized means in this case though. It refers to combining references, ex. >>55,63-65

Name: Anonymous 2014-04-14 10:43

>>63
Okay, I get it, you wanted to annoy someone. What do you mean by breaking ``sage storms'' though? You already know what sage is used for. You could always bump the threads you want to see on top with good content and encourage other people to do so.

Read this thread, the people using sage aren't ``directly contributing'' to the topic. You should appreciate their politeness and bump with good posts instead of spamming le pedophile sage.

Name: Anonymous 2014-04-14 12:02

>>68
Sometimes the discussion devolves into an exchange consisting of nothing beyond personal attacks. These exchanges lack content and only escalate until both parties run out of energy. This behavior correlates with the use of sage as an insult. Such cycles are diffused by making the use of sage too annoying to perform. If sage is used, a response of >le pedophile sage is issued. Therefore one cannot have the pleasure of giving a sage as insult without later being annoyed by a >le pedophile sage. The only rational choice is to abandon the cycle.

Name: Anonymous 2014-04-14 13:08

>>69
But sage isn't an insult, why would you even think that?

Name: Anonymous 2014-04-15 0:09

>>69
This behavior correlates with the use of sage as an insult.
No, no, no, NO. Would you bump a thread about Common Lisp interpreters in Scheme with ``fuk u faget XD''? I wouldn't, but sometimes you can't resist the temptation to reply to a provocating post. Obviously, you can't tell the other party to continue this on /lounge/, so you reply with a sage. That way, you won't disappoint someone who just opened /prog/ and is eagerly waiting for new VIP quality responses in that thread you just took a shit on.

As ironic as this might sound for you, I'm bumping this thread with my shitpost because I'm sick of le Heartbleed. We already fucking know, http://hackerkik.es/r/programming has been all over this shit for at least one week. As grave as this issue might be, we don't need a pack of hipster to show us their epic bleeding heart logo.

Come on, this is not an imagereddit. People here try to give sage a proper use. No offense, but the reason you think sage is an insult might be your long exposure to imageboards.

Name: Anonymous 2014-04-15 0:30

>>71
People here try to give sage a proper use

I certainly try to use sage in moderation when I cook sausage or pork.

Name: Anonymous 2014-04-15 0:31

>>68
I said I invented it and implied that I was not the one who spammed it. Learn to fucking read. I posted it maybe twenty times to disrupt the flood of javashit homework questions posted by some /g/ faggot (the one who kept accusing Admin-kike of being the spammer in a bizarre plot to drive traffic here) who was trying to claim the board right after CAPTCHA was implemented.

Name: Anonymous 2014-04-15 6:22

>>73
I wonder if we'll ever have the pleasure of having the poster(s) that spammed pedophile sage, accused admin-kun of spamming old-prog, spammed this /prog/, and actually used the report feature on old /prog/. I hope our disfunctional family can be one again.

>>71
A post containing nothing beyond an insult does not improve the quality of the thread. In the worst case it launches a stream of personal attacks, which are much worse than any single shit post.

>>70
What I think and the author intends are not always the same. Also see the response above.

Name: based openbsd 2014-04-15 7:18

https://lobste.rs/s/3utipo/openbsd_has_started_a_massive_strip-down_and_cleanup_of_openssl

Changes so far to OpenSSL 1.0.1g since the 11th include:
* Splitting up libcrypto and libssl build directories
* Fixing a use-after-free bug
* Removal of ancient MacOS, Netware, OS/2, VMS and Windows build junk
* Removal of “bugs” directory, benchmarks, INSTALL files, and shared library goo for lame platforms
* Removal of most (all?) backend engines, some of which didn’t even have appropriate licensing
* Ripping out some windows-specific cruft
* Removal of various wrappers for things like sockets, snprintf, opendir, etc. to actually expose real return values
* KNF of most C files
* Removal of weak entropy additions
* Removal of all heartbeat functionality which resulted in Heartbleed

as seen on leddit

Name: Anonymous 2014-04-16 1:01

Name: Anonymous 2014-04-16 4:38

God bless Theo, OpenBSD, and correctness.

Name: Anonymous 2014-06-06 22:12

Name: Anonymous 2014-06-06 22:36

* Fixing a use-after-free bug
these guys...

Name: Anonymous 2014-06-06 22:41

>>78
lol roflel xDDD dude u rustlin my jimmies topkek lel xD
lelelelelelelelele
le epic xDDD :DDDD tell it to all the /g/ros here! xD

Newer Posts
Don't change these.
Name: Email:
Entire Thread Thread List