03:13 <nuck> I need somebody smarter than myself to help me take a look at this

03:13 <nuck> Isn't this subject to timing attacks? https://github.com/discourse/discourse/blob/master/lib/single_sign_on.rb#L24

03:14 <nuck> I'm thinking you could feed fuzz in as the sig, studying the timings to figure out each character as you go

03:14 <nuck> And since it's a hex digest you only have 16 possibilities per spot

18:47 <pikajude> features in linux i will debase myself in gratitude for: being able to tail the stderr of an already running process

20:17 <pikajude> I certainly wish not every email client on linux was a steaming pile of dog turds

20:17 <pikajude> but you can't have everything

20:17 <jfhbrook> I use gmail!

20:17 <pikajude> i necessarily have two email accounts that cannot go through the same place

20:18 <jfhbrook> oh I also use online outlook

20:18 <pikajude> me too

20:18 <pikajude> gross!

20:18 <jfhbrook> yeah well

20:18 <jfhbrook> $JOB

20:18 <pikajude> see, Apple Mail supports 1. fetching email from an exchange server and 2. adding events to a Calendar

20:18 <pikajude> apparently nobody using Linux needs a calendar

20:19 <jfhbrook> oh, I use google calendar

20:19 <jfhbrook> and outlook calendar for work shit

20:20 <pikajude> son of a bitch

20:40 <ljharb> a couple jobs ago, we used google apps and got acquired by a microsofty company

20:40 <ljharb> every single engineer, independently, told HR that they would quit if we ever had to use outlook

20:42 <ljharb> and we never had to switch and joy was had by all

21:45 <pikajude> anybody happen to know why people use outlook btw

21:45 <pikajude> what does it offer that makes up for it being execrable garbage

21:47 <ljharb> integration with microsoft's supported ecosystem