00:03:37 I don't think so 00:03:45 Well, Cookies: is 00:03:47 As a header 00:03:54 And Set-Cookies: 00:05:00 wtf http://i.imgur.com/crossdomain.xml 00:05:14 http://imgur.com/crossdomain.xml 00:07:21 -!- Phantom_Hoover has quit (Ping timeout: 258 seconds). 00:08:01 don't get pickles in your cookies 00:08:07 websec / cooking advice 00:09:18 im sure someone enjoys pickle cookies 00:09:34 someone you don't want doing your websec 00:16:40 Tables do not work well in epub 00:16:47 Or well, the ones in this book don't :( 00:22:30 we used to make chicken cookies 00:24:12 -!- quintopia has quit (Ping timeout: 252 seconds). 00:25:46 -!- Phantom_Hoover has joined. 00:27:56 we used to make chicken cookies in this country, now we just have our hand in the next guy's pocket 00:32:08 -!- zzo38 has quit (Remote host closed the connection). 00:34:26 -!- Phantom_Hoover has quit (Read error: Operation timed out). 00:34:59 -!- Phantom_Hoover has joined. 00:44:43 -!- Phantom_Hoover has quit (Read error: Operation timed out). 00:52:36 -!- Tritonio_ has joined. 00:54:08 -!- Tritonio_ has quit (Read error: Connection reset by peer). 00:54:45 -!- Tritonio_ has joined. 00:55:47 -!- Tritonio has quit (Ping timeout: 272 seconds). 00:58:57 -!- Phantom_Hoover has joined. 01:03:52 python has some neat higher order functional stuff, even if they avoid the label 01:03:55 like http://docs.python.org/2/library/contextlib.html#contextlib.contextmanager 01:04:10 turns a coroutine that yields once into an exception safe resource scoping thing 01:05:17 Hrm. What's that page that demonstrated a Javascriptless chat room using a gif? 01:07:07 though i've realized I'm using it wrong, sigh 01:07:20 shachaf: https://github.com/videlalvaro/gifsockets ? 01:09:28 Sgeo: [shachaf's up-hand character] 01:09:57 -!- Phantom_Hoover has quit (Ping timeout: 248 seconds). 01:10:44 As in, it would leave a connection to a gif open and the 'gif' would get a new frame when someone entered a line 01:11:12 «to the anonymous person that submitted the fairly competent, seemingly unironic, furry digimon(?) inflation porn version of “Squirt Force”, as an obfuscated url, to our ask box, i have a couple questions» jerkcityhd is going well 01:13:52 Sgeo: pretty sure that's kmc's link 01:14:24 haha 01:15:16 kmc said shachaf though 01:15:29 * Sgeo clicks link 01:15:41 Oh, that's what you meant by [shachaf's up-hand character] 01:15:52 yeah I meant "Sgeo:" whooops 01:15:54 I thought you were saying embedding images into chat 01:16:12 the keys are practically right next to each other 01:16:38 Sgeo: ☝ 01:16:42 I don't know if that's the same. 01:16:46 shachaf is mysterious. 01:16:53 I could have sworn that there was an old implementation 01:16:56 Somewhere 01:17:11 Which would imply not clojure 01:17:12 There's a white one but not a black one, even though there are black ones for left and right... 01:17:28 * Bike adds "racist" to Unicode complaints, realizes that was probably already there from Han unification or something 01:19:09 -!- Koen_ has quit (Quit: Koen_). 01:19:49 yeah 01:28:23 -!- Phantom_Hoover has joined. 01:32:36 i wonder if you could encode those scripts' characters with series of radicals or something (spoiler i don't know any chinese scripted languages) 01:35:00 Bike: Though not done, this would be entirely practical. 01:36:08 hm, both the major non-unicode representations of chinese (big5 and guobiao) seem to just use characters the same way 01:36:18 Yup. 01:36:52 i'm having that "if this was a workable idea someone would have tried it" thought 01:38:10 Is there any more reason to cater to NoScript people than no-cookie people? 01:38:11 It's definitely a workable idea. It's just that it's computationally intensive to compose characters that way. 01:38:35 it might go against the Unicode idea of what a "single character" is 01:38:40 which I'm still not super clear on 01:38:40 Compared with just using a giant lookup table of codepoint to font. 01:38:51 Bike: U+261D hth 01:39:02 ☝ 01:39:03 hm, that's true, composition would be nasty 01:39:15 kmc: A Unicode "single character" is more-or-less an abstract notion of the glyph. 01:39:22 Which can be composed with one or more codepoints. 01:39:23 composition aka "something you have to do to actually display the characters" 01:39:32 Bike: Yes. 01:39:41 -!- Phantom_Hoover has quit (Ping timeout: 268 seconds). 01:39:47 "something you probably want to be simpleish for a usable system" 01:39:56 However, in terms of it being *able* to express Chinese characters, it's certainly workable. 01:40:07 Bike: that's why Hangul has both precomposed characters and composable characters 01:40:12 i see, i see 01:40:16 (the former called syllables, the latter called jamos) 01:40:24 lifthrasiir: isn't hangul like, way more reasonable than han in a lot of ways 01:40:24 -!- Phantom_Hoover has joined. 01:40:44 correspondance between glyphs and sounds for instance 01:41:09 Bike: well, Han ideographs also have Ideographic Description Sequence (IDS) for the composable characters, except that they are not normalizable at all 01:41:13 The relevant bit here is that the composition rules for hangul are simpler and more regular. 01:41:40 gah, thinking about languages makes me think about phylogeny 01:41:45 Though I think there's actually *more* jamo than radicals? 01:41:47 and phylogeny is just a stupid clusterfuck how appropriate 01:42:02 pikhq: conceptually no, practically yes. 01:42:27 when I'm saying "practically" it refers how Hangul was implemented in Unicode 01:42:29 But there's only a few fixed ways that jamo combine into a single syllable block, making it a lot easier to do on a computer. 01:43:09 wait, are the precompose hangul blocks actually in unicode? 01:43:09 right, but when the character set was defined for the first time (around 1980) it was not practical at all 01:43:13 kmc: Yes. 01:43:18 weird 01:43:21 kmc: Both must be in Unicode for round-trip compatibility. 01:43:24 yes. U+AC00..D7AF I think? 01:43:24 sigh 01:43:36 round-trip compatibility is unfortunate 01:43:36 (that's a fine chunk of BMP space actually) 01:43:50 Wait, why do you need both exactly? 01:43:56 Round trip through what? 01:44:00 other encodings 01:44:04 Bike: Legacy Korean charsets had both. 01:44:05 EUC-KR and ISO-2022-KR. 01:44:23 a rather onerous design goal of Unicode is that you can convert any encoding to it and back without losing information 01:44:26 Unicode is designed so that legacy charset -> Unicode -> same legacy charset doesn't change anything. 01:44:33 pikhq: one catch here is that legacy Korean charsets do *not* have composable characters at all 01:44:39 You couldn't roundtrip other encoding's precomposed char -> sequence of jamo -> recomposed char? 01:44:42 lifthrasiir: Oh. Sigh. 01:45:21 -!- augur has joined. 01:45:29 they are designed for the two-byte-sequence-fill-two-column terminals 01:46:06 they even do not cover every modern Hangul syllable either 01:46:06 Right, yes, that particular oddity of legacy CJK encodings. 01:46:11 (2350 out of 11172 to be exact) 01:46:45 and MS decided to add remaining 8822 of them in the way incompatible to EUC for just that reason 01:46:58 (more standard-ish way involves 3-byte sequences) 01:47:32 so it is more like a historic and political issue 01:47:37 which I consider borked up 01:47:42 -!- Phantom_Hoover has quit (Ping timeout: 268 seconds). 01:47:50 Character encoding is freaking complicated. 01:48:00 praise God who sent His prophet Ken Thompson to bring us the good word of UTF-8 01:48:21 -!- Phantom_Hoover has joined. 01:48:37 -!- Tritonio_ has quit (Read error: Connection reset by peer). 01:48:44 once upon a time there was Plan 9 (from whatever) 01:48:49 clearly i should organize a committee of ROC and PRC reps to work out how chinese will work for once and for all. the resulting violent collapse of civilization will leave all character encoding problems solved by default 01:48:52 -!- kmc has set topic: Happy UTF-8 Appreciation Day everyone! | http://underhanded.xcott.com/?page_id=5 | http://codu.org/logs/_esoteric/. 01:49:00 -!- Tritonio_ has joined. 01:49:18 -!- augur has quit (Remote host closed the connection). 01:49:21 > "Happy UTF-8 Appreciation Day everyone!" 01:49:22 "Happy UTF-8 Appreciation Day everyone!" 01:49:29 i was expecting homograph attacks. 01:49:30 -!- TeruFSX has joined. 01:49:33 heh 01:49:41 well one thing to appreciate is that it's a superset of ASCII :) 01:49:47 Bike: there are Chinese characters for every discovered atomic elements 01:49:49 "hooray" 01:49:56 so it can't be ;) 01:49:57 "This has resulted in a substantial number of web application vulnerabilities, but to this day, Internet Explorer developers seem to have no regrets and have not changed the default behavior of their code." 01:50:05 #yolo 01:50:18 (About content-sniffing HTML when being told it's a text/plain) 01:50:56 Hong Kong and Macau also use a different character encoding from mainland PRC 01:50:59 Aside from a handful really old elements, IIRC the element characters have some rather nice regular properties. 01:51:11 do you mean trad? or something worse 01:51:15 Speaking of Ken Thompson, "A few minutes ago I spoke with Ken Thompson. He confirms that he and his colleagues never wanted argc to be 0; and he agrees with me that the authors of C89 should not have allowed that case to be legal. He is pretty sure that Plan 9, in particular, always ensured that argc>=1, by supplying a default environment if necessary." 01:51:24 -!- augur has joined. 01:51:28 well I guess it is related to the trad / simplified split 01:51:38 but i meant Big5 01:51:47 pikhq: radicals represent the type of those elements at STP? 01:51:48 i.e. all the metals have 金 (metal), the gasses have 気 (air/gas/spirit/this character has a lot of semantics), the liquids 水 (water/liquid). 01:51:48 oh <_> 01:51:51 lifthrasiir: Yes. 01:52:06 oh, chinese does the breath-life thing too, eh 01:52:56 fortunately for Chineses their pronounciations follow those of non-radical parts 01:53:19 I'd be tempted to still call those "radicals", but yeah. 01:53:19 (it is actually common for many Chinese characters) 01:53:48 Though that's for lack of a better term for the more generic "Chinese character component". 01:54:04 but they still have to memorize the meanings and pronounciations of at least thousands of basic characters 01:54:09 As opposed to "Chinese character component that is used for dictionary lookup, that generally has some amount of semantic meaning." 01:54:16 hundredfold improvements! 01:57:31 -!- Bike has quit (Ping timeout: 245 seconds). 01:58:03 mnoqy: got any monqy wisdom and/or mnoqy wisdom for me today 01:58:16 hm idk 01:58:18 or even..yqnom wisdom 01:58:28 -yqnom wisdom 01:59:27 -!- Bike_ has joined. 02:00:05 -!- Bike_ has changed nick to Bike. 02:00:14 It's always fun when a book on web security begins a sentence with "To their horror and disbelief" 02:00:36 the implication that they do this often enough for you to notice is good 02:01:26 No, sorry. Although things that imply sheer pain do occur often enough 02:01:30 yeah I like the writing style of that book 02:01:39 it's engaging and not dry 02:01:49 the author finds it all amusing in a "we're all fucked" kind of way 02:02:00 I think there are some intrinsic properties shared by good exploits and good jokes 02:02:18 that would explain roughly everything about hacker culture 02:02:26 -!- Phantom_Hoover has quit (Read error: Operation timed out). 02:02:43 _The Tangled Web_? 02:04:28 yes 02:04:33 Probably I should read that. 02:04:47 Did you see http://lcamtuf.coredump.cx/postxss/ ? 02:04:47 i should finish reading it 02:04:51 yes 02:05:02 http://en.wikipedia.org/wiki/Reverse_migration_(birds) how could anyone not like biology, i ask you 02:05:03 o.O coredump.cx is real? 02:05:41 Is the book like that page? 02:06:08 Sgeo: .cx TLD? 02:06:33 oh, well, it's the same author 02:06:35 .cx is the best tld 02:06:41 i think it's pretty similar 02:06:45 That page is full of cleverness. A lot of these sorts of things are. 02:06:51 what the heck, does anyone use