AboutGreentext master, POTUS but you don't know yet
SkillsWhatever the fuck is needed. Master one, master all.
Joined devRant on 11/23/2016
Do all the things like ++ or -- rants, post your own rants, comment on others' rants and build your customized dev avatarSign Up
From the creators of devRant, Pipeless lets you power real-time personalized recommendations and activity feeds using a simple APILearn More
As you might have figured out my name is Kim. There is a gtld .kim. So my mail address is just firstname.lastname@example.org, which is nice.
Also always hilarious seeing people's reactions when you tell them where to write an email to8
Things you don't want to see at night
Ripped out of Netflix-Mode by a Warning notification and currently monitoring further development
Green line is temperature, blue humidity. Temperature rises at ~1°/10min, but seems to flatten just now. ~0.6°C to go and I'll have to head out. I'm thinking one of the ACs failed, but states are fine. Never trust a single information source for critical infrastructure guys15
>>> Stadia thread <<<
Stadia is a new Cloud Gaming platform that runs on GCP and details were announced some minutes ago.
For maximum performance you would need at least 35mb/s, while about 10mb/s are enough for 720p l, Stereo gameplay.
Maximum performance provides 4k, HDR and 5.1 Surround Sound and comes in at 9,99$ / month for Stadia Pro. As far as announcements go, there are no lower performance tiers available.
Stadia Pro will get you unlimited access to your Games (I believe this is Bring-Your-Own-License, but I might be wrong), while Stadia Basic allows unlimited access to one specific game. For that you probably buy the game directly of Stadia, which then includes any fees in it's price.
Stadia will be usable on all devices that run Chrome and on the Chromecast Ultra. Android will get it's own app, first available on the Google Pixel 3, to be expanded later on, iOS was not mentioned.
Google developed a custom Stadia controller that works out of the box, including an Google Assistant and a DVR button. However, all other controllers should supported too, but I don't believe that's the case for playing on the Chromecast Ultra.
Starting now, you can get the Stadia Founders Edition, that allows you to be one of the firsts on the platform, includes a Controller, a Chromecast Ultra, 3 months of Stadia Pro, 3 additional months of Pro you can gift to your buddy and some Destiny Bundle with the first and second game, including all add-ons, plus the Destiny 2 Season pass.
The founders edition can be pre-ordered right now for about 129$.
Stadia launches 'later' this year, founders edition buyers will be the first to get public access on launch.8
Google Pay is about to support PayPal as virtual card (at least in Germany)
That's quite the finger to the local banks here
I like it12
To whomever just deleted his rant asking for help about showing/hiding radio buttons:
Roses are red
When I was little I wanted to play my train game, but my sister already occupied the pc by watching some Disney movie2
Pick his nose and well
You know what happened next..
Hey! You said what another dev did, not mandatory dev related! Exploited the question5
I'm looking for some beta testers. Preferably if you use a MQTT broker with some IoT connected shit.
Bonus points for IFTTT.
Leave something in the comments if you're interested and I'll get in touch if the time has come4
So I have seen this quite a few times now and posted the text below already, but I'd like to shed some light on this:
If you hit up your dev tools and check the network tab, you might see some repeated API calls. Those calls include a GET parameter named "token". The request looks something like this: "https://domain.tld/api/somecall/..."
You can think of this token as a temporary password, or a key that holds information about your user and other information in the backend. If one would steal a token that belongs to another user, you would have control over his account. Now many complained that this key is visible in the URL and not "encrypted". I'll try to explain why this is, well "wrong" or doesn't impose a bigger security risk than normal:
There is no such thing as an "unencrypted query", well besides really transmitting encrypted data. This fields are being protected by the transport layer (HTTPS) or not (HTTP) and while it might not be common to transmit these fields in a GET query parameter, it's standard to send those tokens as cookies, which are as exposed as query parameters. Hit up some random site. The chance that you'll see a PHP session id being transmitted as a cookie is high. Cookies are as exposed as any HTTP GET or POST Form data and can be viewed as easily. Look for a "details" or "http header" section in your dev tools.
Stolen tokens can be used to "log in" into the website, although it might be made harder by only allowing one IP per token or similar. However the use of such a that token is absolut standard and nothing special devRant does. Every site that offers you a "keep me logged in" or "remember me" option uses something like this, one way or the other. Because a token could have been stolen you sometimes need to additionally enter your current password when doings something security risky, like changing your password. In that case your password is being used as a second factor. The idea is, that an attacker could have stolen your token, but still doesn't know your password. It's not enough to grab a token, you need that second (or maybe thrid) factor. As an example - that's how githubs "sudo" mode works. You have got your token, that grants you more permissions than a non-logged in user has, but to do the critical stuff you need an additional token that's only valid for that session, because asking for your password before every action would be inconvenient when setting up a repo
I hope this helps understanding a bit more of this topic :)
Keep safe and keep asking questions if you fell that your data is in danger
You copy and ____
You throw it in the ____
MwF4yCq2 is what you need
Combine them and you shall succeed
Ranting about devRant on devRant:
devRant just got rid of my 3k story after I tried setting up the tags..
Yeah, not going to write that again today
---- BEGIN RANT ----
---- END RANT ----
I have to fix this fucking fucked up thing again. Fuck.
The dude who wanted to use it does not have the skills to fix it. Fuck off. This bullshit is going to get migrated asap16
THEY PULLED IT OFF! THEY FUCKING DID IT. FUCK YES!
TO THE MOON
TO THE MARRS
Falcon Heavy launch coming up!
I can't wait. That's something people should watch, fuck the superbowl!
I would say it's 60% as significant as the moon landing was, if not more; a field of technology we should really focus on, but governments rather spend money on stupid war
Make sure to tune in tomorrow, 18:30 / 06:30pm UTC, on SpaceX's YouTube channel
It's going to be spectacular, success or failure7
Want to play some Tic Tac Toe? Letting my bot go for a good first round of public testing
Probably will break right away.. Who knows :D
For starters limiting to one simultaneous game. Have fun!58
Uhmmm. Why is the merch hoodie left handed? I always look like a moron at the zipper for a good 2 seconds not knowing what to do before I realize that the zipper is left handed :D18
Merch package signed by dfox himself :D
Maybe I should keep that part, should we ever blow up like Facebook hehehe28
I proposed an introduction for a non-image feed, to separate the meme section and give quality rants a bigger chance of being seen.
Head over to https://github.com/devRant/devRant/... and give the issue a thumbs up (and possibly some additions) if you agree and would like to see something into that direction