Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
Messages - Arantor
91
Archived fixes / Re: Forum signature(s) are not present
« on August 4th, 2013, 07:15 PM »
Interesting, yours is hidden as well. All signatures appear to be hidden...
:edit: Ninja'd
:edit: Ninja'd
92
Off-topic / Re: Post count fever
« on August 4th, 2013, 07:12 PM »
I never thought I'd get to 50k posts on sm.org... but it did happen.
93
Other software / Re: SM.org compromised
« on August 4th, 2013, 07:01 PM »
OK, so here's the point I don't get. If the account was 'compromised' and someone else took it over, changing the password should have fixed that entirely. It seems funny that that never happened.
94
Other software / Re: SM.org compromised
« on August 4th, 2013, 06:55 PM »
That's funny, the post I linked was from YOUR ACCOUNT. The closing line of the post I linked to:Quote AndQuote That's funny, because I see posts from your account last month on sm.org.Quote Yes, because May 12, 2013 is more than one year ago.Quote The only misunderstanding is how stupid you think the rest of us are. Are you seriously going to claim that your account was hijacked and someone's been using it to spread nonsense? That would be funny since the writing style hasn't changed in the entire time I've seen your posts.
That is pretty insensitive of you. Dad past away over a year ago.
But the facts and truth is, we have not logged into or posted anything on the SMF forum in over a year.
This is my last post here over a year ago
As an added thought, if you prefer to discuss me or my Dad further, it should probably be done by email. So if you want send me an email and we'll try to clarify any misunderstanding that way rather than detract from the original topic.
95
Other software / Re: SM.org compromised
« on August 4th, 2013, 07:38 AM »
I call BS.
Firstly, he was adamant that they were not fixed in those patches when they arrived.
Secondly, and this is the real BS kicker, either you're lying now about speaking to your father or you've been lying in the past on the various occasions you said your father had passed away, most recently in http://www.simplemachines.org/community/index.php?topic=508045.msg3579546#msg3579546 but in various threads and comments, including here, prior to that. Which is it?
More than one person has suggested to me that you're a troll and specifically that you're using that as an excuse to cover up some deeper issue. If your father has passed away, I'm sorry for your loss but you can't use him as a strawman to cover up for your own issues.
If you want to keep railing about how bad SMF is, please go somewhere else. I would rather you do so willingly rather than making you go, but I have no problem with making you go away if you can't comply reasonably. I doubt there is anything meaningful you could add at this point because you've given me fairly good proof that you're just talking BS now.Quote
Firstly, he was adamant that they were not fixed in those patches when they arrived.
Secondly, and this is the real BS kicker, either you're lying now about speaking to your father or you've been lying in the past on the various occasions you said your father had passed away, most recently in http://www.simplemachines.org/community/index.php?topic=508045.msg3579546#msg3579546 but in various threads and comments, including here, prior to that. Which is it?
More than one person has suggested to me that you're a troll and specifically that you're using that as an excuse to cover up some deeper issue. If your father has passed away, I'm sorry for your loss but you can't use him as a strawman to cover up for your own issues.
If you want to keep railing about how bad SMF is, please go somewhere else. I would rather you do so willingly rather than making you go, but I have no problem with making you go away if you can't comply reasonably. I doubt there is anything meaningful you could add at this point because you've given me fairly good proof that you're just talking BS now.
Through dangers untold and hardships unnumbered, I have fought my way here to the castle beyond the Goblin City to take back the child that you have stolen, for my will is as strong as yours, and my kingdom as great — You have no power over me.
96
Other software / Re: SM.org compromised
« on August 4th, 2013, 04:41 AM »
I'm sorry, which part of 'this was not a security vulnerability' were you having trouble understanding?
It has actually been mentioned how this was exploited on sm.org: someone uploaded a theme with extra files in it, one of which had nasty code in it. There are other routes to doing something similar - namely the theme editing functionality - but the point stands: this was a compromised account by way of an admin being on another site with the same password and the password compromised there.
The real question I would level at the SM people at this point is why basic security practices were not carried out with respect to files not being made read-only after modifications were carried out. But that's still not a security issue in the software, that's a fault of the underlying operating system configuration and a lack of knowledge and understanding from the people who organise such things. I understand there is some confusion as to what must remain writable for standard functionality.
There are, to the best of my knowledge, no vulnerabilities that have been reported and not been investigated. That is not to say that all reports were valid, or that all reports had an exploit that actually needed immediately patching; the most recent vulnerability, for example, actively requires an admin account to actually exploit it. If you already have an admin account, the potential for mischief - as seen - is already demonstrable and thus while there is a bug to fix, it is not really a legitimate vulnerability if it already requires all the keys to the kingdom to be able to exploit it in the first place.
If you can provide a report that you believe has not been taken seriously, please do contact me and I will investigate and take whatever action needs to be taken (including providing patches to SMF if necessary, it's not like we've never discussed vulnerabilities with them before now). I am well aware such claims have been made - but like every time this has been raised, we always ask for reports or indeed anything to back up this bluster and nothing is ever forthcoming. Provide me with something to work on and I'll look at it. Provide me with bluster and the only thing I can conclude is that you're just trolling and shit-stirring.
In any case, haven't you since been banned from sm.org?
It has actually been mentioned how this was exploited on sm.org: someone uploaded a theme with extra files in it, one of which had nasty code in it. There are other routes to doing something similar - namely the theme editing functionality - but the point stands: this was a compromised account by way of an admin being on another site with the same password and the password compromised there.
The real question I would level at the SM people at this point is why basic security practices were not carried out with respect to files not being made read-only after modifications were carried out. But that's still not a security issue in the software, that's a fault of the underlying operating system configuration and a lack of knowledge and understanding from the people who organise such things. I understand there is some confusion as to what must remain writable for standard functionality.
There are, to the best of my knowledge, no vulnerabilities that have been reported and not been investigated. That is not to say that all reports were valid, or that all reports had an exploit that actually needed immediately patching; the most recent vulnerability, for example, actively requires an admin account to actually exploit it. If you already have an admin account, the potential for mischief - as seen - is already demonstrable and thus while there is a bug to fix, it is not really a legitimate vulnerability if it already requires all the keys to the kingdom to be able to exploit it in the first place.
If you can provide a report that you believe has not been taken seriously, please do contact me and I will investigate and take whatever action needs to be taken (including providing patches to SMF if necessary, it's not like we've never discussed vulnerabilities with them before now). I am well aware such claims have been made - but like every time this has been raised, we always ask for reports or indeed anything to back up this bluster and nothing is ever forthcoming. Provide me with something to work on and I'll look at it. Provide me with bluster and the only thing I can conclude is that you're just trolling and shit-stirring.
In any case, haven't you since been banned from sm.org?
97
Off-topic / Re : 3D'ing
« on August 3rd, 2013, 11:40 PM »
I don't touch OpenGL directly. Though in theory I could if I wanted to, since Unity Pro (which I have) exposes low level interfaces, but I really don't want to tangle with Objective C at this stage.
Unity 3.x only exposes triangles, Unity 4.x allows for quads as mesh components, but in this case I'm using raw triangles anyway because it makes the maths much simpler for what I'm doing (seeing that I'm dealing with objects with actually-triangular faces for the most part). There's a hell of a lot of stuff Unity abstracts away - bear in mind that I have the exact same code and same project running on Windows, OS X and iOS with only one change (which operating system is selected at the time) because Unity hides that stuff away.
Unity 3.x only exposes triangles, Unity 4.x allows for quads as mesh components, but in this case I'm using raw triangles anyway because it makes the maths much simpler for what I'm doing (seeing that I'm dealing with objects with actually-triangular faces for the most part). There's a hell of a lot of stuff Unity abstracts away - bear in mind that I have the exact same code and same project running on Windows, OS X and iOS with only one change (which operating system is selected at the time) because Unity hides that stuff away.
98
Off-topic / Re : 3D'ing
« on August 3rd, 2013, 09:57 PM »
Technically I'm not directly using either, I'm using Unity which abstracts a bunch of this stuff away. (Though in this case it's being built ultimately for OpenGL ES 2.0, for iPads)
99
Off-topic / Re : 3D'ing
« on August 3rd, 2013, 07:15 PM »
Unlike the maths I'm doing involving creating meshes procedurally, and just for shits 'n' giggles, the way OpenGL works is that you have to declare each face's points clockwise relative to the normal that the face will generate... doing it anticlockwise means the face is (as far as you're concerned) backwards. That ain't simple math.
100
Bug reports / Re: Periodic notifications don't seem to work
« on August 3rd, 2013, 07:59 AM »
Last point first, Nao didn't want the Notifier to be completely abstract so that anything common to all notifiers could be extended easily. Quite what would be common to all notifiers, I don't know, I can't think of anything but that's the theory behind it.
The notification system is hard. When I wrote the likes notification I started from one of the others that was done and just hacked it about until it worked. I actually don't understand all the guts of it, I don't think I ever have, actually...
The notification system is hard. When I wrote the likes notification I started from one of the others that was done and just hacked it about until it worked. I actually don't understand all the guts of it, I don't think I ever have, actually...
101
Off-topic / Re: Thoughts from Jeff Atwood
« on August 2nd, 2013, 08:16 PM »
:P
I think I know what it is, actually. I think it's because the majority of the time, the 'best answer' is already one I'd considered before trying to find the answer I'm looking for.
I think I know what it is, actually. I think it's because the majority of the time, the 'best answer' is already one I'd considered before trying to find the answer I'm looking for.
102
Off-topic / Re: Thoughts from Jeff Atwood
« on August 2nd, 2013, 06:41 PM »
That's the other problem, the 'best' answer seems to rarely be the best answer for me. The format just doesn't seem geared to promoting the best overall answer.
103
Off-topic / Re: Thoughts from Jeff Atwood
« on August 2nd, 2013, 06:20 PM »
The egomania on SO? It's much the same as on Wikipedia, actually. People vote up what sounds good and blasts down what sounds bad, even if what sounds bad is completely accurate. I know I got downvoted more than once even when the answer I gave was completely correct.
104
Features / Re: New revs
« on August 2nd, 2013, 07:38 AM »
2 files, 2KB
Revision: 2199
Author: arantor
Date: 02 August 2013 06:37:33
Message:
! Atom feeds shouldn't try to optimise links and also shouldn't really use content tags when summary would be more accurate. (Feed.php, Subs-Template.php)
----
Modified : /trunk/Sources/Feed.php
Modified : /trunk/Sources/Subs-Template.php
Revision: 2199
Author: arantor
Date: 02 August 2013 06:37:33
Message:
! Atom feeds shouldn't try to optimise links and also shouldn't really use content tags when summary would be more accurate. (Feed.php, Subs-Template.php)
----
Modified : /trunk/Sources/Feed.php
Modified : /trunk/Sources/Subs-Template.php
105
Off-topic / Re: Thoughts from Jeff Atwood
« on August 2nd, 2013, 05:25 AM »
The problem with them is that they're actually quite hard to navigate. You'd be surprised how often people write new 'answers' when they meant to reply to a comment. This holds true for anything that clones the format, I see an awful lot on Unity Answers (the Q&A community for Unity 3D)
As far as that specific set of sites, they have one pretty large problem. I know I can be pretty egotistical as a developer, and have a low tolerance for various things but the egomaniacs on StackOverflow make me look completely normal.
As far as that specific set of sites, they have one pretty large problem. I know I can be pretty egotistical as a developer, and have a low tolerance for various things but the egomaniacs on StackOverflow make me look completely normal.