These are chat archives for arenanet/api-cdi

29th
Sep 2016
David Reeß
@queicherius
Sep 29 2016 02:01
"[...] we just detected an attack on your IP xxx and moved the server to the secured infrastructure". No shit you did. http://i.imgur.com/r0i96zd.png
Guess this is being weekly now. This time only 6m downtime instead of 3h. Getting better at this.
Archomeda
@Archomeda
Sep 29 2016 02:02
:(
Aralicia
@Aralicia
Sep 29 2016 09:23
Wow. Where do all those calls come from ?
There are some indications that this attack was launched with the help of a botnet that has enslaved a large number of hacked so-called “Internet of Things,” (IoT) devices — routers, IP cameras and digital video recorders (DVRs) that are exposed to the Internet and protected with weak or hard-coded passwords.
smiley
@codemasher
Sep 29 2016 09:39
1.1TB per second
holy shitballs
Archomeda
@Archomeda
Sep 29 2016 14:05
>_>
Archomeda
@Archomeda
Sep 29 2016 14:37
also, i need 14 more wins in capricorn :(
but i only get coliseum now :(
David Reeß
@queicherius
Sep 29 2016 14:54
@codemasher Yeah I read about that too, it's ridiculous. D:
smiley
@codemasher
Sep 29 2016 15:33
welcome to the internet of things!
David Reeß
@queicherius
Sep 29 2016 16:08
TBH the thing that I am scared about too is the cars getting connected to the internet. We had a guy at uni visiting that was working in that area as a CTO... most questions were security related and most of the answers left me with slight goosebumps. To me it looks / feels like all the different areas of computer science dont really look at how the other areas solved similar problems and have to fail first to learn.
smiley
@codemasher
Sep 29 2016 16:09
reasons why i won't give away my 14yr old BMW... :D
all BMW after that one are already idrive connected
people are crazy with shit like this
David Reeß
@queicherius
Sep 29 2016 16:11
I'm also not convinced the internet of things is as awesome as people are saying, but that's a different topic. All the "cool" applications are so far away. I always thought about having a fridge that knows what's in it, when stuff goes bad, orders things, builds recipes out of ingredients inside etc. And what do we get from Bosch as a "IOT" fridge? A fridge with a camera, so you can see a picture of the inside. Great.
smiley
@codemasher
Sep 29 2016 16:12
https://twitter.com/internetofshit is the only one i trust about IoT
David Reeß
@queicherius
Sep 29 2016 16:12
Haha I love that twitter. :D
smiley
@codemasher
Sep 29 2016 16:16
btw. everyone wants IoT, but the communication devices we used to know as "cell phone" like 20 years ago, have become a whole IoT device that can do everything except the thing it originated from. that's progress, eh?
and the last manufacturer of "usable" cell phones announced just yesterday that they won't build phones anymore.
David Reeß
@queicherius
Sep 29 2016 16:19
I only use my phone to browse the internet, write messages and listen to music anyway. Who in our time still "calls" people. :P :D
I wanted the new google nexus, but it's so damn expensive. It's like half a great computer. :(
Nabrok
@Nabrok
Sep 29 2016 16:20
Work calls, calls to businesses, etc. Don't really call friends though.
smiley
@codemasher
Sep 29 2016 16:21
Who in our time still "calls" people
fair point
anyway, i need to every now and then and got me a blackberry passport recently
David Reeß
@queicherius
Sep 29 2016 16:21
Like 90% of my work calls are via Skype, but most of the stuff is text via random messengers
Even my dentist started sending me emails now. D:
smiley
@codemasher
Sep 29 2016 16:22
lmao
Nabrok
@Nabrok
Sep 29 2016 16:22
Mine does too (and texts), but if I need to reschedule an appointment because everything at work blew up I'm going to call them.
smiley
@codemasher
Sep 29 2016 16:22
dang, i will miss blackberry. their hardware is a dream
Edgar Doiron
@Coffee4cr
Sep 29 2016 17:13
IOT could be awesome if it wasn't for hackers.
IOT could be awesome if it weren't for people writing totally insecure code.
Edgar Doiron
@Coffee4cr
Sep 29 2016 17:13
like in the perfect world where everything IOT wouldn't be touched/modified by external sources
@lye write it as secure as you want, there's always someone up to the challenge of breaking in
windwarrior
@windwarrior
Sep 29 2016 17:17
well what we have now in IoT devices is just plain stupid
no-one even considers the possibility of hackers
and believes their devices will be behind a NAT
Edgar Doiron
@Coffee4cr
Sep 29 2016 17:19
but what's the point, it's either you pour tons of money to add security and just delay the inevitable
that's why IOT is doom from the start
windwarrior
@windwarrior
Sep 29 2016 17:19
"just leave your door unlocked, cus intruders will get in anyway"
Edgar Doiron
@Coffee4cr
Sep 29 2016 17:19
only takes a single person to break your security
and you're screwed
DARPA has an interesting project for writing resiliant systems -- Galois (the company that uses haskell for everything) is one of the performers and they've come up with this: http://ivorylang.org/
It's basically designed to port C to a more ... memory-safe language.
But there's a ton of additional work being done to advance the state of verifiable systems, which if specified correctly are "unhackable" from a software standpoint.
windwarrior
@windwarrior
Sep 29 2016 17:30
Tesla has a record of hacks including full access to the CAN-bus, but also in fixing their mistakes. I fully believe that IoT becomes better when those devices can and are maintained
oh that looks awesome, @lye, how is performance?
oh its an eDSL even
windwarrior
@windwarrior
Sep 29 2016 17:39
so you basically define functions in an eDSL in Haskell, and they become callable C-functions?
and haskells typechecker enforces sanity in your code
It's more the reverse -- you port from C to Ivory and the typechecker enforces the sanity
windwarrior
@windwarrior
Sep 29 2016 17:49
the problem with many of those solutions is that there is soo much legacy code in this world
Ivory might be modelled after a C-like language, but still there needs to be someone who wants to translate their stuff to Ivory
or -- more formally wants to invest to translate
I guess the challenge of my generation of CS people
That's fair.
Ivory was designed to make porting C fairly straightforward, but it still is effort.
Effort that no one really cares to put resources into, unfortunately, because there are practically no financial repercussions for shipping insecure software.
windwarrior
@windwarrior
Sep 29 2016 17:53
security is too much of a technical problem, there is - in the minds of the consumer - no difference between different attacks, and people dont seem to understand some of the implications of insecure devices
if I would try to convince my mother that our router is used in a botnet, she would 'not care'
haha, yeah
windwarrior
@windwarrior
Sep 29 2016 17:55
(my parents have a very nice Fritz!Box that I configured fairly conservative so thats not happening :>)
still very happy that I study Computer Science, field full of interesting challenges ^^
windwarrior
@windwarrior
Sep 29 2016 18:11
the "exit" and "character select" button of gw2 are too close :<
Edgar Doiron
@Coffee4cr
Sep 29 2016 18:12
YES
also that stupid exit button that flashes when Raiding..
windwarrior
@windwarrior
Sep 29 2016 18:14
or the "go to LAA" button in the rifts menu
Edgar Doiron
@Coffee4cr
Sep 29 2016 18:14
get good at buttons ANET
smiley
@codemasher
Sep 29 2016 18:15
UX is overrated
windwarrior
@windwarrior
Sep 29 2016 18:15
we should git gud at pressing buttons
and not, you know, pressing next to buttons
Edgar Doiron
@Coffee4cr
Sep 29 2016 18:15
@codemasher you're right, we should be able to command line(chat in our case) everything
smiley
@codemasher
Sep 29 2016 18:15
:+1:
Edgar Doiron
@Coffee4cr
Sep 29 2016 18:16
also, why don't we have /ready for ready check yet?
or /r
smiley
@codemasher
Sep 29 2016 18:16
wait, still not?
but /yell
oh wait, that had been killed during beta :D
Edgar Doiron
@Coffee4cr
Sep 29 2016 18:16
:P
smiley
@codemasher
Sep 29 2016 18:19
anet give us a customizable UI like wildstar, just not LUA... :D
Edgar Doiron
@Coffee4cr
Sep 29 2016 18:20
if it was up to @lye it would be in haskell
smiley
@codemasher
Sep 29 2016 18:20
hehe
windwarrior
@windwarrior
Sep 29 2016 18:20
and be a monad or even higher
Archomeda
@Archomeda
Sep 29 2016 18:26

@windwarrior

the "exit" and "character select" button of gw2 are too close :<

just bind log out to a key, use that keybind and press enter for character select :D

and alt+f4 for quitting :P
if i want to swap characters, i just press shift+f11, enter
@Coffee4cr haha pretty much
Edgar Doiron
@Coffee4cr
Sep 29 2016 18:51
ooooh wvw abilities
Archomeda
@Archomeda
Sep 29 2016 22:26
ohhh the wvw poll results now actually separates people who opted out :D
Pat Cavit
@tivac
Sep 29 2016 22:41
:wave:
(not actually me, but nice to see someone noticed!)
I think you're allowed to claim credit for things your team does <3
Pat Cavit
@tivac
Sep 29 2016 22:42
always feels weird
windwarrior
@windwarrior
Sep 29 2016 22:55
we cannot check anything
everything is yours :>
Archomeda
@Archomeda
Sep 29 2016 23:08
haha :smile: