These are chat archives for arenanet/api-cdi

7th
Feb 2017
windwarrior
@windwarrior
Feb 07 2017 07:46
mostly polygons, some textures too!
windwarrior @windwarrior shows himself out
Darrian
@rikkuness
Feb 07 2017 12:49
glorious
Archomeda
@Archomeda
Feb 07 2017 13:28
LOL
what a salty person :P
smiley
@codemasher
Feb 07 2017 13:29
*bot
Darrian
@rikkuness
Feb 07 2017 13:30
I very rarely use PHP but the times I have it has royally annoyed me because I've been using it in an offline environment and making composer work offline seems to be black magic
Darrian
@rikkuness
Feb 07 2017 13:31
not in particular to this project I might add, just composer in general :)
smiley
@codemasher
Feb 07 2017 13:32
but still, composer is the de-facto standard for php libraries, so...
Darrian
@rikkuness
Feb 07 2017 13:33
yee which is fine, but like for npm I can have an offline mirror and for python I can have an offline pip mirror, can I do the same with composer do you know?
smiley
@codemasher
Feb 07 2017 13:34
no, and only trolls seem to care :D
(see above)
Darrian
@rikkuness
Feb 07 2017 13:35
I might add I'm not trolling, I genuinely wanted to know haha, I've been asked to deploy a bunch of things at work that require use of composer and I've never found a way to do it
smiley
@codemasher
Feb 07 2017 13:36
but... you have internet, no?
Darrian
@rikkuness
Feb 07 2017 13:36
no
smiley
@codemasher
Feb 07 2017 13:37
¯_(ツ)_/¯
Darrian
@rikkuness
Feb 07 2017 13:37
I know it's a bizarre concept but 95% of systems I work on are completely air gapped from the internet
smiley
@codemasher
Feb 07 2017 13:38
so install the libraries on a machine with internet access and copy over the vendor directory - profit.
Darrian
@rikkuness
Feb 07 2017 13:39
ahh gotcha, so that vendor dir is much akin to node_modules or whatever or a node.js platform or whatever?
smiley
@codemasher
Feb 07 2017 13:39
or go and mirror github & packagist
yea, basically
Darrian
@rikkuness
Feb 07 2017 13:40
cool, yeah a lot of the stuff I do I have mirrored github, like I do that to make bower work
so does composer essentially pull from git for the actual packages it installs then much the same as bower does?
via this packagist API I assume
David Reeß
@queicherius
Feb 07 2017 13:45
there is also a thing called "satist" which is a offline mirror for composer
smiley
@codemasher
Feb 07 2017 13:46
so does composer essentially pull from git for the actual packages it installs then much the same as bower does?
yes
Darrian
@rikkuness
Feb 07 2017 13:47
ahh nice, I might have a go at that at some point, it's never really been looked into, everyone seems to do node.js or python, there's just the very odd case of needing PHP
tbh looking at the packagist github repo it only really needs MySQL and Redis, could probably deploy that into my container infrastructure pretty easily
oh but packagist uses composer to install, well, that's all a bit chicken/egg xD
Archomeda
@Archomeda
Feb 07 2017 14:45
welp, steam has another xss bug
something in steam profiles
that people have XSS bugs in this day and age never ceases to amaze me
despite how bloody scary they can be
smiley
@codemasher
Feb 07 2017 18:51
why all the effort when social engineering is so easy and effective? a neighbour asked me recently to check their pc after they logged in to a fake bank site...
darwin's gonna get ya...
windwarrior
@windwarrior
Feb 07 2017 18:59
I think SQL injection bugs are worse tho
like its so easy to protect your crappy PHP site from SQL injection
it's so easy to protect your crappy PHP site from XSS injections too >_>
smiley
@codemasher
Feb 07 2017 18:59
but people are dumb
darthmaim
@darthmaim
Feb 07 2017 19:00
just don't persist any user input, ez
windwarrior
@windwarrior
Feb 07 2017 19:01
whats your name? you can choose ["John", "Adam", "Debbie", "Not Applicable"]
darthmaim
@darthmaim
Feb 07 2017 19:01
you just have to know your target audience :P
windwarrior
@windwarrior
Feb 07 2017 19:01
technically still user input
well things like markdown libraries are also notoriously good in having XSS leaks
markdown is silly
markdown is very simple though, I don't understand
writing correct software is easy if you follow two simple steps:
  1. Don't build upon broken systems.
  2. Realize all systems, being a reflection of their authors, are horribly broken. Give up and choose another profession.
darthmaim
@darthmaim
Feb 07 2017 19:05
:P
darthmaim
@darthmaim
Feb 07 2017 19:07
markdown is worse, can include a limited set of html, and full html in code blocks
have fun with that
^
darthmaim
@darthmaim
Feb 07 2017 19:08
v
just run htmlpurifier after bbcode
htmlpurifier is slow as bananas though, so you'll need to cache the output
smiley
@codemasher
Feb 07 2017 19:08
that's why i try to avoid it :D
it's not that bad; in your posts database table just have a body_raw and body_processed columns
smiley
@codemasher
Feb 07 2017 19:10
that's what i do with bbcode too, might add this as another measure once i run a site using the bbcoder again
Jonathan Andrist
@rwfrk_twitter
Feb 07 2017 19:18
I guess snowstorms are a totally different type of feature freeze/build freeze :P
Anything API slipped into this cycle?
Eearslya Sleiarion
@Eearslya
Feb 07 2017 19:20
@lye for once I envy you and your use of public transport
Jonathan Andrist
@rwfrk_twitter
Feb 07 2017 19:20
Too icey? VPN DAY! \o/
Eearslya Sleiarion
@Eearslya
Feb 07 2017 19:20
that was yesterday
@Eearslya I took yesterday off. Stood outside for an hour waiting for a 221 which never came.
But today the busses are running as normal.
Eearslya Sleiarion
@Eearslya
Feb 07 2017 19:27
I was out yesterday too
Just looked out at my neighborhood and lolnope
the sideroad my house is on wasn't cleared till this morning; had a good six inches on it yesterday
i'm really not sure why they didn't just chain the bus wheels yesterday; seems like it would have fixed the issues?
Eearslya Sleiarion
@Eearslya
Feb 07 2017 19:28
Ours still isn't. Hoping it melts soon.
more likely to compact and turn to ice
Eearslya Sleiarion
@Eearslya
Feb 07 2017 19:29
why would you say this
misery loves company and all
Eearslya Sleiarion
@Eearslya
Feb 07 2017 19:29
It took me 20 minutes to get my damn car door open
and another 25 to make it safe to drive
Edgar Doiron
@Coffee4cr
Feb 07 2017 19:33
I like how 6 inch is a national disaster for you guys
Come live in Canada!
windwarrior
@windwarrior
Feb 07 2017 19:53
2 inch is a national disaster in .nl
smiley
@codemasher
Feb 07 2017 20:04
and you don't even have hills there... :D
Jonathan Andrist
@rwfrk_twitter
Feb 07 2017 21:24
Ice here period is a disaster.
Archomeda
@Archomeda
Feb 07 2017 21:56
2 inch a disaster in NL? try 1 snow flake
1 snow flake and everyone panics
especially the NS (our train company)
only 50% of the trains are scheduled, they promise the trains will be longer (they are not), and most of them are late anyway
Michael Dougall
@madou
Feb 07 2017 22:02
Yeah well it's raining a little in Australia 🙃
this is basically the issue
Darqam
@Darqam
Feb 07 2017 22:12
@Lye is https://api.guildwars2.com/v2/items/66956 suppose to be live? I don't think we have an 8th birthday gift around yet
oops thanks forgot to undo that
misclicked when blessing stuff this morning
darthmaim
@darthmaim
Feb 07 2017 22:14
funny thing about the id is that its one after [Fourth Birthday Gift]
so the ones in between are not even there yet/created after the 8th
pretty sure we've got up to ... the 10th birthday? the ids are fairly meaningless though
darthmaim
@darthmaim
Feb 07 2017 22:15
gift 1-4 are in order
happenstance
windwarrior
@windwarrior
Feb 07 2017 22:15
the texts were datamined yeah @lye
darthmaim
@darthmaim
Feb 07 2017 22:15
¯\_(ツ)_/¯
Archomeda
@Archomeda
Feb 07 2017 22:15
i see people were prepared to have gw2 exist for a long time :^)
Darqam
@Darqam
Feb 07 2017 22:15
I've seen an achievement entry for birthday 10, so yeah
windwarrior
@windwarrior
Feb 07 2017 22:16
anet is just gonna delete the game at 28 aug 2023
because they ran out of birthday presents
Archomeda
@Archomeda
Feb 07 2017 22:23
haha
Jeppe Vennekilde
@vennekilde
Feb 07 2017 23:16
Any chance you guys have changed opinion on this topic over the years?
https://forum-en.guildwars2.com/forum/community/api/API-Creation-Page-Input-Insertion/first
It isn't as big of an issue anymore, as now it is only the people transferring server more or less, that needs to create an api key, and since fsp is full most of the time, it doesn't matter too much.
Though it would still be nice to have.
windwarrior
@windwarrior
Feb 07 2017 23:24
I'm just sad that I can't probably go in the raid wing completely blinded :(
windwarrior
@windwarrior
Feb 07 2017 23:38
software development is hard
Archomeda
@Archomeda
Feb 07 2017 23:46
just get a towel and blindfold yourself
:>
@vennekilde nope, that's never going to be fixed
if I had my way the API would just use OAuth2 and it would be really straightforward
but long story short I didn't get my way
Archomeda
@Archomeda
Feb 07 2017 23:57
i find it both amusing and frustrating that people can't follow instructions for creating api keys for a website
it should follow the OAuth2 flow IMO but alas
not that OAuth2 isn't a total cluster, but it's pretty much standard practice at this point
anyway we could get into a long discussion but I don't really want to
because it still pains my heart
Archomeda
@Archomeda
Feb 07 2017 23:58
long story short, this decision was made from higher up?
yes
Archomeda
@Archomeda
Feb 07 2017 23:59
:verysadface: