Join devRant
Do all the things like
++ or -- rants, post your own rants, comment on others' rants and build your customized dev avatar
Sign Up
Pipeless API
From the creators of devRant, Pipeless lets you power real-time personalized recommendations and activity feeds using a simple API
Learn More
Search - "certificate"
-
So, someone submitted a 'bug' to Mozilla.
As some of you may know, in the next year, the new mass surveillance law in the Netherlands is going into effect.
Another fun fact is that the dutch security agencies/government have their own CA (Certificate Authority) for SSL/TLS certificates.
The new law says that the AIVD (dutch NSA/GCHQ equivilant) is allowed to hack into systems through obtained certificates and also that they're allowed to INTERCEPT TRAFFIC THROUGH OBTAINED PRIVATE SSL/TLS KEYS.
So someone actually had the fucking balls to submit a fucking issue to Mozilla saying that the Dutch State certs shouldn't be accepted anymore when the new mass surveillance law gets into place.
This person deservers a fucking medal if you ask me.68 -
When you're about to do a payment and the payment form is loaded without an SSL connection/certificate... Come on, it's 2017...3
-
When someone beats the level of stupidity you thought was possible.
No, when you request a Let's Encrypt certificate, you DON'T fill in YOUR OWN NAME in the "Common Name" field 🤦
Also, it explains right next to the fucking field that non-experienced users SHOULDN'T ALTER THE FUCKING VALUE.
😷23 -
I'm really not much of a drinker, but last night I was apparently.
I thought I played video games until I passed out on the couch and was carried to bed.
This morning, my laptop reveals to me that I had an idea for a web app last night because I made a very misspelled, yet highly detailed to do list for the app, a very blank index file, and 37 open tabs of what looks like research for certain web features.
Project seemed to be some sort of organization thing with a lot of really random and unrelated features like "fruit meterr that scales different fruits you earn" (what does that even mean??) and "sassy bill reminder".
I'm closing out all the tabs I had opened, when I see the tab showing the domain name I chose and bought. I even got the SSL certificate and email domain purchased.
Drunk me seemed to have been really excited about this idea 😶19 -
So I named my daughter "io"
everyone calls her by the name and then we register her on our local gov't to get birth certificate.
AND THEN THESE FUCKED FACED FUCKERS! dont accept my daughter's name because of this STUPID SYSTEM OF THEIRS!
because "io" is too short for first name field to accept. Its like the devs become the law and just set their own limit.
It pisses me off. our law didn't say `len(firstName) > 2` and we can't use paper anymore as alternative.
I really want to punch the fucker in neck. sorry40 -
> installs devRant app on my iPhone
> too lazy to type my 18-char random password on mobile
> password manager app not on App Store yet
> dig up my old Macbook
> install XCode & homebrew package manager
> install 2 other package managers using homebrew
> install App deps from the 2 package managers
> query stackoverflow for why my deps fail to install
> open App in XCode
> setup Apple provisioning profile
> trust my certificate on my iPhone
> dig up an old router & setup a local WiFi network
> start a server on my laptop to serve my PGP keys
> download my PGP keys to my iPhone
> app crashes
> open an issue on github with steps to reproduce & stacktrace
...
> type my 18-char random password
> rant on how I wasted an entire afternoon13 -
Started talking with someone about general IT stuff. At some point we came to the subject of SSL certificates and he mentioned that 'that stuff is expensive' and so on.
Kindly told him about Let's Encrypt and also that it's free and he reacted: "Then I'd rather have no SSL, free certificates make you look like you're a cheap ass".
So I told him the principle of login/registration thingies and said that they really need SSL, whether it's free or not.
"Nahhh, then I'd still rather don't use SSL, it just looks so cheap when you're using a free certificate".
Hey you know what, what about you write that sentence on a whole fucking pack of paper, dip it into some sambal, maybe add some firecrackers and shove it up your ass? Hopefully that will bring some sense into your very empty head.
Not putting a secure connection on a website, (at all) especially when it has a FUCKING LOGIN/REGISTRATION FUNCTION (!?!?!?!!?!) is simply not fucking done in the year of TWO THOUSAND FUCKING SEVENTEEN.
'Ohh but the NSA etc won't do anything with that data'.
Has it, for one tiny motherfucking second, come to mind that there's also a thing called hackers? Malicious hackers? If your users are on hacked networks, it's easy as fuck to steal their credentials, inject shit and even deliver fucking EXPLOIT KITS.
Oh and you bet your ass the NSA will save that data, they have a whole motherfucking database of passwords they can search through with XKeyScore (snowden leaks).
Motherfucker.68 -
This facts are killing me
"During his own Google interview, Jeff Dean was asked the implications if P=NP were true. He said, "P = 0 or N = 1." Then, before the interviewer had even finished laughing, Jeff examined Google’s public certificate and wrote the private key on the whiteboard."
"Compilers don't warn Jeff Dean. Jeff Dean warns compilers."
"gcc -O4 emails your code to Jeff Dean for a rewrite."
"When Jeff Dean sends an ethernet frame there are no collisions because the competing frames retreat back up into the buffer memory on their source nic."
"When Jeff Dean has an ergonomic evaluation, it is for the protection of his keyboard."
"When Jeff Dean designs software, he first codes the binary and then writes the source as documentation."
"When Jeff has trouble sleeping, he Mapreduces sheep."
"When Jeff Dean listens to mp3s, he just cats them to /dev/dsp and does the decoding in his head."
"Google search went down for a few hours in 2002, and Jeff Dean started handling queries by hand. Search Quality doubled."
"One day Jeff Dean grabbed his Etch-a-Sketch instead of his laptop on his way out the door. On his way back home to get his real laptop, he programmed the Etch-a-Sketch to play Tetris."
"Jeff Dean once shifted a bit so hard, it ended up on another computer. "6 -
We're using a ticket system at work that a local company wrote specifically for IT-support companies. It's missing so many (to us) essential features that they flat out ignored the feature requests for. I started dissecting their front-end code to find ways to get the site to do what we want and find a lot of ugly code.
Stuff like if(!confirm("blablabla") == false) and whole JavaScript libraries just to perform one task in one page that are loaded on every page you visit, complaining in the js console that they are loaded in the wrong order. It also uses a websocket on a completely arbitrary port making it impossible to work with it if you are on a restricted wifi. They flat out lie about their customers not wanting an offline app even though their communications platform on which they got asked this question once again got swarmed with big customers disagreeing as the mobile perofrmance and design of the mobile webpage is just atrocious.
So i dig farther and farthee adding all the features we want into a userscript with a beat little 'custom namespace' i make pretty good progress until i find a site that does asynchronous loading of its subpages all of a sudden. They never do that anywhere else. Injecting code into the overcomolicated jQuery mess that they call code is impossible to me, so i track changes via a mutationObserver (awesome stuff for userscripts, never heard of it before) and get that running too.
The userscript got such a volume of functions in such a short time that my boss even used it to demonstrate to them what we want and asked them why they couldn't do it in a reasonable timeframe.
All in all I'm pretty proud if the script, but i hate that software companies that write such a mess of code in different coding styles all over the place even get a foot into the door.
And that's just the code part: They very veeeery often just break stuff in updates that then require multiple hotfixes throughout the day after we complain about it. These errors even go so far to break functionality completely or just throw 500s in our face. It really gives you the impression that they are not testing that thing at all.
And the worst: They actively encourage their trainees to write as much code as possible to get paid more than their contract says, so of course they just break stuff all the time to write as much as possible.
Where did i get that information you ask? They state it on ther fucking career page!
We also have reverse proxy in front of that page that manages the HTTPS encryption and Let's Encrypt renewal. Guess what: They internally check if the certificate on the machine is valid and the system refuses to work if it isn't. How do you upload a certificate to the system you asked? You don't! You have to mail it to them for them to SSH into the system and install it manually. When will that be possible you ask? SOON™.
At least after a while i got them to just disable the 'feature'.
While we are at 'features' (sorry for the bad structure): They have this genius 'smart redirect' feature that is supposed to throw you right back where you were once you're done editing something. Brilliant idea, how do they do it? Using a callback libk like everyone else? Noooo. A serverside database entry that only gets correctly updated half of the time. So while multitasking in multiple tabs because the performance of that thing almost forces you to makes it a whole lot worse you are not protected from it if you don't. Example: you did work on ticket A and save that. You get redirected to ticket B you worked on this morning even though its fucking 5 o' clock in the evening. So of course you get confused over wherever you selected the right ticket to begin with. So you have to check that almost everytime.
Alright, rant over.
Let's see if i beed to make another one after their big 'all feature requests on hold, UI redesign, everything will be fixed and much better'-update.5 -
was thinking of buying an s8, but fuck samsung.
http://www.samsung.com/us/apps/
price of ssl certificate: about $15
price of samsung: about $254,000,000,00023 -
Motherfucker. It's two thousand fucking seventeen. You can get a free ssl certificate for any website.
Then WHY are there still some fucking websites which contain login portals, sensitive information or anything that SHOULD be protected in transit WITHOUT FUCKING SSL?!
I hope that the people who manage those sites and are AWARE that they can get a free cert but don't do that die in agonising pain.
This really fucking pisses me off.
On another note, EVERY site should have SSL, it's free anyways and protects your visitors from a range of threats.-24 -
Good morning campers,
It has come to be known that LetsEncrypt will be moving on from a "Small" Certificate Authority to one of the big guys with their own Root certificates in the coming months.
https://letsencrypt.org/2019/04/...
Now for the average joe this means nothing, besides awaiting for root certificate updates to flow down for their operating system 🤔 but for LE, that's a major step up in such a short time of being in existence.5 -
This is a true story
I am a freelance developer, i recently had this conversation with my client:
Client: Add multi language option to my website
Me: Ok, I need for it 3-5 days
Client: Why?
Me: I need to create multi language system, this
website is built from scratch without using any
framework
Client: No need to built it, Just enabled it i need it fast
Me: Sir there is no such thing to enable features that
does not exit
Client: Listen me, I need this feature today, enable it
and we are done.
Me: Thats not how it works..
Client: I know how it works, i have hacking certificate15 -
One of our clients deploy their own server app. So this happened after a prod deployment. (4am)
*Cellphone rings while sleeping*
Client : we need you on the conference call now. URGENT!
*Gets on conference call*
*Client explain the problem*
*Explaining to the client that the problem is in their side (https connection not working, either network or certificate problem)*
*Client doesn't believe it and pushes me for a fix that I have no control on*
*4 hours later in a heated conversation*
Client : ok problem is on our side. We used our SSL certificate from staging with production and thought it would work.
Me :5 -
Fuck stupid client.
Sorry:
Boss: client want to white label the solution.
Me: ok. They just need to create A record and send as SSL certificate and I will do it.
Client : here is your SSL certificate.
Me: spend whole night to make the transfer and setup server and check whole solutions one by one for reference to our company.
Next day wake around 2 pm to 100 whatsapp message, call from client and noss.
Turns out client IT team revoked the certificate without informing and the product stop working for all people.
Me: go to back to sleep.6 -
So I've been looking for a Linux sysadmin job for a while now. I get a lot of rejections daily and I don't mind that because they can give me feedback as for what I am doing wrong. But do you know what really FUCKING grinds my FUCKING gears?
BEING REJECTED BASED ON LEVEL OF EDUCATION/NOT HAVING CERTIFICATIONS FOR CERTAIN STUFF. Yes, I get that you can't blindly hire anyone and that you have to filter people out but at least LOOK AT THEIR FUCKING SKILLSET.
I did MBO level (the highest sub level though) as study which is considered to be the lowest education level in my country. lowest education level meaning that it's mostly focused on learning through doing things rather than just learning theory.
Why the actual FUCK is that, for some fucking reason, supposed to be a 'lower level' than HBO or Uni? (low to high in my country: MBO, HBO, Uni). Just because I learn better by doing shit instead of solely focusing on the theory and not doing much else does NOT FUCKING MEAN THAT I AM DUMBER OR LESS EDUCATED ON A SUBJECT.
So in the last couple of months, I've literally had rejections with reasons like
- 'Sorry but we require HBO level as people with this level can analyze stuff better in general which is required for this job.'. - Well then go fuck yourself. Just because I have a lower level of education doesn't FUCKING mean that I can't analyze shit at a 'lower level' than people who've done HBO.
- 'You don't seem to have a certificate for linux server management so it's a no go, sorry!' - Kindly go FUCK yourself. Give me a couple of barebones Debian servers and let me install a whole setup including load balancers, proxies if fucking neccesary, firewalls, web servers, FUCKING Samba servers, YOU FUCKING NAME IT. YES, I CAN DO THAT BUT SOLELY BECAUSE I DON'T HAVE THAT FUCKING CERTIFICATE APPEARANTLY MEANS THAT I AM TOO INCOMPETENT TO DO THAT?! Yes. I get that you have to filter shit but GUESS WHAT. IT'S RIGHT THERE IN MY FUCKING RESUME.
- 'Sorry but due to this role being related to cyber security, we can't hire anyone lower than HBO.' - OH SO YOUR LEVEL OF EDUCATION DEFINES HOW GOOD YOU ARE/CAN BE AT CYBER SECURITY RELATED STUFF? ARE YOU MOTHERFUCKING RETARDED? I HAVE BEEN DOING SHIT RELATED TO CYBER SECURITY SINCE I WAS 14-15 FUCKiNG YEARS OLD. I AM FAMILIAR WITH LOADS OF TOOLS/HACKING TECHNIQUES/PENTESTING/DEFENSIVE/OFFENSIVE SECURITY AND SO ON AND YOU ARE TELLING ME THAT I NEED A HIGHER LEVEL OF FUCKING EDUCATION?!?!? GO FUCKING FUCK YOURSELF.
And I can go on like this for a while. I wish some companies I come across would actually look at skills instead of (only) study levels and certifications. Those other companies can go FUCK THEMSELVES.39 -
I really, honestly, am getting annoyed when someone tells me that "Linux is user-friendly". Some people seem to think that because they themselves can install Linux, that anyone can, and because I still use Windows I'm some sort of a noob.
So let me tell you why I don't use Linux: because it never actually "just works". I have tried, at the very least two dozen times, to install one distro or another on a machine that I owned. Never, not even once, not even *close*, has it installed and worked without failing on some part of my hardware.
My last experience was with Ubuntu 17.04, supposed to have great hardware and software support. I have a popular Dell Alienware machine with extremely common hardware (please don't hate me, I had a great deal through work with an interest-free loan to buy it!), and I thought for just one moment that maybe Ubuntu had reached the point where it just, y'know, fucking worked when installing it... but no. Not a chance.
It started with my monitors. My secondary monitor that worked fine on Windows and never once failed to display anything, simply didn't work. It wasn't detected, it didn't turn on, it just failed. After hours of toiling with bash commands and fucking around in x conf files, I finally figured out that for some reason, it didn't like my two IDENTICAL monitors on IDENTICAL cables on the SAME video card. I fixed it by using a DVI to HDMI adapter....
Then was my sound card. It appeared to be detected and working, but it was playing at like 0.01% volume. The system volume was fine, the speaker volume was fine, everything appeared great except I literally had no fucking sound. I tried everything from using the front output to checking if it was going to my display through HDMI to "switching the audio sublayer from alsa to whatever the hell other thing exists" but nothing worked. I gave up.
My mouse? Hell. It's a Corsair Gaming mouse, nothing fancy, it only has a couple extra buttons - none of those worked, not even the goddamn scrollwheel. I didn't expect the *lights* to work, but the "back" and "Forward" buttons? COME ON. After an hour, I just gave up.
My media keyboard that's like 15 years old and is of IBM brand obviously wasn't recognized. Didn't even bother with that one.
Of my 3 different network adapters (2 connectors, one wifi), only one physical card was detected. Bluetooth didn't work. At this point I was so tired of finding things that didn't work that I tried something else.
My work VPN... holy shit have you ever tried configuring a corporate VPN on Linux? Goddamn. On windows it's "next next next finish then enter your username/password" and on Linux it's "get this specific format TLS certificate from your IT with a private key and put it in this network conf and then run this whatever command to...." yeah no.
And don't get me started on even attempting to play GAMES on this fucking OS. I mean, even installing the graphic drivers? Never in my life have I had to *exit the GUI layer of an OS* to install a graphic driver. That would be like dropping down to MS-DOS on Windows to install Nvidia drivers. Holy shit what the fuck guys. And don't get me started on WINE, I ain't touching this "not an emulator emulator" with a 10-foot pole.
And then, you start reading online for all these problems and it's a mix of "here are 9038245 steps to fix your problem in the terminal" and "fucking noob go back to Windows if you can't deal with it" posts.
It's SO FUCKING FRUSTRATING, I spent a whole day trying to get a BASIC system up and running, where it takes a half-hour AT MOST with any version of Windows. I'm just... done.
I will give Ubuntu one redeeming quality, however. On the Live USB, you can use the `dd` command to mirror a whole drive in a few minutes. And when you're doing fucking around with this piece of shit OS that refuses to do simple things like "playing audio", `dd` will restore Windows right back to where it was as if Ubuntu never existed in the first place.
Thanks, `dd`. I wish you were on Windows. Your OS is the LEAST user friendly thing I've ever had to deal with.31 -
(The PM is pretty technical)
One day:
Me: Could you create this subdomain?
PM: Sure, just a sec.
Me: Ohh and could you add a letsencrypt cert? (one click thingy)
PM: Why would you need that on this kinda site...
Me: Well in general for security...
PM: Nahh.
*walks away*
Next day:
(referring to my internship manager/guider as Bob)
Bob: Hey... we have a new subdomain!
Me: Yup!
Bob: Wait why is there no letsencrypt certificate installed...?!?
Me: Well, the PM didn't find that neccesary...
Bob: (Oo) of course it is... are we going for security by default or what?
Me: Yup agreed.
Bob: *creates cert and sets everything up in under a minute*
It wasn't a high profile site (tiny side project) but why not add SSL when you can for free?8 -
I can't believe this company.
They want to stop using Certificates because it bothers the customer.
I had to use https because we were using service workers for a PWA.
I tried explaining we need them for the product to work, and also it's a basic security measure.
They were removing the certificates without my knowledge.
I found out because a colleague wanted a way to disable the service worker and asked me for help.
The manager said your not the boss of the company, it's not your company to make decisions.
Just do what they say, he tried to justify the decision from above, I said ok when was the last time you installed a certificate? he said never.
Ok, then what the fuck are you talking about, its 10 minutes to get a certificate letscrypt HELLO.
This company is very hierarchical 1900 style, I'm the person who does innovation in the organization, that's the most fucked up part, they say no to everything.
OMG, I'm going to quit.
There just asking to get hacked, this is just the tip of the iceberg.
Is this common or are they morons?17 -
FUCKING SHIT.
I'm at my first Hackathon with my best friends in life and there has never been a time when I've felt this miserable all my life.
The theme is IoT (something idk jackshit about) and people here are done with the projects when we are still at the idea stage.
Yes, it's true that this shit is intense but I really want to do good at this.
This is what I've learned from my first Hackathon:
1. Prepare your shit.
Unless the problem statements are given on the spot, you should've discussed everything that you would be doing and not divert. (We spent 5 hours on a problem statement and then we decided not to go with it.)
2. Have people with different abilities who you can trust to get the work done without you having to give a second thought.
3. Don't you dare build a sub-par application. What's the fucking use of that? Don't do it for the certificate or the stickers. If you do that, then how the fuck can you make yourself put those stickers on your laptop?!
4. Have food. Keep yourself healthy and up to max potential.
5. DO NOT BE DISCOURAGED. A lot of people will look like they're done with the shit. You know what you have to do now? NOT GIVE A FUCK! Just focus and do your thing and make it awesome.7 -
!rant
The change log from notepad++ update. The last paragraph is the cream!
" The issue of a hijacked DLL concerns scilexer.dll (needed by Notepad++) on a compromised PC, which is replaced by a modified scilexer.dll built by the CIA. When Notepad++ is launched, the modified scilexer.dll is loaded instead of the original one.
It doesn't mean that CIA is interested in your coding skill or in your sex message content typed in Notepad++, but rather it prevents raising any red flags while the DLL does data collection in the background.
It's not a vulnerability/security issue in Notepad++, but for remedying this issue, from this release (v7.3.3) forward, notepad++.exe checks the certificate validation in scilexer.dll before loading it. If the certificate is missing or invalid, then it just won't be loaded, and Notepad++ will fail to launch.
Checking the certificate of DLL makes it harder to hack. Note that once users’ PCs are compromised, the hackers can do anything on the PCs. This solution only prevents from Notepad++ loading a CIA homemade DLL. It doesn't prevent your original notepad++.exe from being replaced by modified notepad++.exe while the CIA is controlling your PC.
Just like knowing the lock is useless for people who are willing to go into my house, I still shut the door and lock it every morning when I leave home. We are in a f**king corrupted world, unfortunately. "2 -
"Facebook pays teens to install VPN that spies on them"
So after they got banned from the apple app store for doing that directly, they now just abused their certificate to sideload that app.
https://techcrunch.com/2019/01/...30 -
Last year, a customer bought a very expensive Symantec certificate for their website (that is not hosted by us).
They got the certificate and everything seemed nice. We got paid and all everything.
And yesterday, the customer called and said that their certificate has stopped working. I thought "that is strange" so I visited their site and what I saw was horrible.
The site has used and still used a Let's Encrypt certificate. The webdevs they have had not bothered to install the very expensive Symantec certificate for $1500...13 -
So... my girlfriend has a very random work schedule. Sometimes she works 4 days a week sometimes only 1, sometimes only at the weekend sometimes not at all. If only there would be an app to track that... 🤔
She tried quite a few apps on the app store but they were shit/ugly/too complex..etc
Wait.. i’m a developer, i can do that.
So i made a dead simple calendar-like app in javascript+fuseopen.
She selected the colors, background, layout etc..
If she taps on a date it turns red indicating that is a workday, if a workday is tapped it turns back to normal color.
The main logic is:
Main:
If(AppHasSavedWorkdays){
//check if save is current month
LoadCalendarWithWorkdays();
}else{
CreateEmptyCalendarAndSave();
}
She likes it.
Cool, so let’s build this! She has an iphone and my mac is still in the service center so i can’t build🙁
But its okay, i have a mac at my office, we can build there, the only downside is that is 40min of travel.
We take the subway, go to the office, build the app, make a certificate, install to her phone, everything goes as planned.
Coming back we were lucky enough to catch the bus that goes in 30 min intervals, we only had to wait like a minute so life is good 😃
I enter the house, chill down on the bed, pull out my laptop to close the project when a FUCK ME!!!!
I completely forgot to implement a whole else branch on start!!!
Soo the app does nothing when is opened on january 1😂😂
I guess that’s why we have testers and qa.. 😃8 -
I hate Wordpress. I hate Wordpress. I hate Wordpress.
Wordpress can take a big shit on itself and crawl into a deep dark hole far away from all that is good.
Who even uses Wordpress? Bloggers? Come on, let’s be honest, they’re using more intuitive sites like weebly, wix, and square space. So WHAT is Wordpress for? I’ll tell you, it’s just to FUCKING TORTURE PEOPLE.
So, being the “techy guy” of the family, a relative contacts me asking for some help with their website because they need to install an SSL certificate but they don’t know how to. I tell them I’d gladly do it because, sure, they’re family and how long can it possibly take to install a certificate? I’ve done it before!
Well, I get to work and log into the sluggish Wordpress dashboard and try to use a plugin that would issue a LetsEncrypt certificate because they are free and just as good as any other SSL. But one plugin after the next I keep getting errors about how my hosting wouldn’t allow it.
So I contact GoDaddy (don’t get me fucking started) and ask them about the issue. The guy tells me it’s “policy” to only be able to use GoDaddy’s certificates. How much do they cost? Oh, how about $100 a year?! Fuck you.
I figured out the only way to escape this hell was to ask them to open an economy Linux hosting account with cPanel on GoDaddy (the site was formerly hosted on a “Managed Wordpress” account which is just bullshit for not wanting to give you any control over your own goddamn content). So now I have to deal with migrating the site.
GoDaddy representative tells me that it should only take 20 minutes for me to do this (I’ve already spent way too much time on this but whatever) so I go forward with the new account. I decide I should migrate the site by exporting a backup and manually placing everything on the new server. Doesn’t it end up taking an entire hour to back up a 200MB site because GoDaddy throttled the processing speed?!
So, it’s another hour later and I’ve installed all the databases and carried over all the files. At this point, I’m really at the end of my rope and can’t wait to install the certificate and be done with this fuckery.
I install the certificate and finally get ready to be on my way, but then I see it. A warning. A warning from my browser telling me the site is only partially secure. It turns out the certificate was properly installed but whoever initially made the site HARDCODED ALL THE LINKS to images, websites, and style sheets to be http instead of https.
I’m gonna explode.
I swear, I’m gonna fucking explode.
After a total of 5 hours of work, I finally get the site secure by using search and replace on every fucking file.
Wordpress can go suck a big one. Actually, Wordpress can go suck the largest fuckin one in existence and choke on it.
TL;DR I agree to install an SSL certificate but end up with much more work than I bargained.38 -
TL;DR: I dont work in IT, but I code at work, and the non-IT higher-ups lack of knowledge shows brutally.
So I work in aviation, not IT. Through coincidences, I was tasked to work on our flight plan distribution logic years ago, which was then written in BRL (Business Rule Language). In lockdown 2020, I finally started to learn "real" programming with Python, but soon shifted to Java. Which was good, since all of a sudden a few months ago the company ditched BRL and the godawful IBM ODM IDE for... Java and IntelliJ. Nice. BUT my teammates have zero clue about Java and no real inclination to learn it by themselves. So I have been appointed their mentor, despite me stating Im still a beginner myself. Its somewhat doable, I get the hard problems, they do basic maintenace, basically renaming variables and stuff. One of my yearly goals is to make sure a completely new guy is able to do everything I do by september. It took a LOT to talk them out of it.
In my last yearly review I got some flak for not "selling" myself to other teams enough, whatever that means. So, as a learning project, I designed a new intranet page for our department in Javascript. Its loved by all. It has links to all the stuff we need woth a nice interface and built in tools to make work easier and more efficient. I did it on my own, in my spare time, simply because I was fed up with the old crap and it was an enormously good learning opportunity. Now they want to give some other guy the responsibility over that page/tool because apparently it is "not in my process team description". They even planned a day for me and him so he can "learn Javascript then". Suuure...
I also did a digital checklist tool as a webapp. All this runs from a local folder, no server at all because reasons. I made it work. Now they want it integrated into some other tool some other guy made. He wrote his tool in PHP entirely so merging the two will take considerable time. Which I told them multiple times. No, it does not take about two hours.
Sometimes, comrades, sometimes....
Im still grateful for the opportunity to code at work but the lack of knowledge really REALLY shows. My goal now is to talk management into paying for a Java course for me (they are very expensive here). That way, they get a better employee and I get more knowledge and an actual certificate thats worth something. Usually in this company, this has higher chances of success than straight up asking for more money.
Sorry for the long story, but it felt good just typing it all out, even if nobody reads this.4 -
I'm not sure if this entirely qualifies and I might have ranted about it a few years ago but fuck it.
My last internship. Company was awesome and my mentor/technical manager got along very well with me to the point that he often asked me to help out with Linux based stuff (he preferred Linux but was a C# guy and wasn't as familiar with it as me (Linux)).
We had to build an internal site thingy (don't remember what it was) and we delivered (me and some interns) and then the publishing moment came so I went to out project manager (a not-as-technical one) and asked if he could install a LetsEncrypt certificate on the site (he knew how and was one of the only ones who had direct access to the server).
He just stared at us and asked why the fuck we needed that since it was an internal thing anyways.
I kindly told that since it's free and can secure the connection, I preferred that and since its more secure, why the fuck not?
He wasn't convinced so it was off.
Next day I came in early and asked my mentor if he could do the SSL since he usually had access to that stuff. He stared at me with "what?" eyes and I explained what the PM said.
Then he immediately ssh'd in and got the damn cert with "we're going to go secure by default, of course!"
A minute later it was all set.2 -
I found this posted by a recruiter and I liked it:
| hired someone that didn't shake my hand firmly during the
interview - he rocked as an employee.
| hired someone with three typos on their resume. - She was
the most detailed oriented person l’ve ever worked with.
| hired someone without a college degree- He was way
smarter, innovative, and creative than mel!
| hired someone with four kids- Never met someone so
devoted and committed to her career.
| hired someone who had been incarcerated as a young adult.
- He's a VP now.
| hired someone over 60- she taught me some tricks on excel
that | use to this day!
Can we please throw out all those silly assumptions and rules that we've made up in our head about what a person needs to
be, look like, have accomplished, and do, to succeed?
In my experience, as an HR leader and as a hiring manager, it's those that typically don't get a “shot” who tend to kick butt
in the workplace!
So before you throw that resume away because they don't have every certificate and degree - or - don't call back that candidate because they didn't give you a firm handshake - think about trying something new. Someone new.10 -
In 2018, while working in Tokyo for a Fukuoka-based startup, one of my co-workers insisted that he wanted an SSL certificate installed on his local dev machine, but he didn't know how to do that. So I created and self-signed one for him. When our CEO came to visit our Tokyo office from Fukuoka, the coworker proudly showed him how his browser would display that green lock icon when visiting localhost:3000. This apparently impressed my CEO, because a few days later the coworker was invited to work at the HQ in Fukuoka while everybody else at the Tokyo office (incl. me) was let go.
This coworker would also only copy whole open source repositories, foo/bar/g all occurrences of the project name with our company name, and tell our CEO that he wrote that code.
I don't know how to deal with this bullshit.9 -
Wannabe college coder starter pack:
1) SUN Certified JAVA Programmer
2) W3Schools Certificate
3) I know all computer languages
4) I'm going to Join Google by the end of college.11 -
Made the mistake of mentioning ISO27001 security standard near management.
- "What?? Why don't we have that certificate?! Why are you not thinking about this?"
- "We don't need it."
- "Of course we do! we must have the highest standards!! Lets hire some lawyers and security consultants to help us get certified!"
A week later:
"Ok, turns out we don't need it."
Satan give me strength...9 -
diploma || certificate == "I am somehow warranted to write shit and get away with it"
## WHAT THE FUCK IS WRONG WITH THIS FUCKING WORLD?!!!!14 -
I started to get super pissed off to people saying you don’t need a college, masters degree to get an IT job. Instead go and gain practical knowledge, showing your practical certificates projects is much better than a having a degree that doesn’t prove if you can do the job or not.
Is a degree absolutely necessary to get a job? No, I agree on that. You can tear yourself apart to be known make projects loads of people contribute in GitHub spend maybe years on practicing and creating stuff for your portfolio..
But excuse me what do you think people do in college studying degrees? Are we getting it from the shop in the corner on a Saturday?
Respect people’s achievements and titles. Especially Masters degrees push you hard, make you sweat apart from loads of courses you work at least a year on a practical project, dissertation, thesis and only pass if it is your own opinion and findings. It is not like a multiple choice exam certificate or you study watch videos for few months and create a web page.
Don’t throw shit on people’s efforts and accomplishments without knowing how it is achieved just because you don’t have it.
Yes it is not necessary. Does it make you learn? Yes! Is it practical? Yes! Does it help you get a job? Hell yes! Why most companies look for degrees? Do you think they might know what it takes to get it and the skills and knowledge you gain?
Don’t come and say in IT degrees not worth it without even knowing how to draw UML. Without knowing IT management you go and be a leader later on, no clue on how to manage projects, people and soft skills sweeping the floor.
It doesn’t matter if you are a YouTube celebrity or a president. What does the title say? “Master” now go, respect and digest it! Don’t be a sour loser.
Ooh I am fierce today and not done yet12 -
“Don’t learn multiple languages at the same time”
Ignored that. Suddently I understood why he said that. Mixed both languages. In holiday rechecked it and it was ok.
Sometimes mistakes can lead to good things. After relearning I understood it much better.
“Don’t learn things by head” was another one. Because that’s useless. If you want to learn a language, try to understand it.
I fully agree with that. I started that way too learning what x did what y did, ... But after a few I found out this was inutile. Since then, I only have problems with Git
Another one. At release of Swift, my code was written in Obj-C. But I would like to adopt Swift. This was in my first year of iOS development, if I can even call it development. I used these things called “Converters”. But 3/4 was wrong and caused bugs. But the Issues in swift could handle that for me. After some time one told me “Stop doing that. Try to write it yourself.”
One of the last ones: “Try to contribute to open source software, instead of creating your own version of it. You won’t reinvent the wheel right? This could also be usefull for other users.”
Next: “If something doesn’t work the first time, don’t give up. Create Backups” As I did that multiple times and simply deleted the source files. By once I had a problem no iOS project worked. Didn’t found why. I was about to delete my Mac. Because of Apple’s WWDR certificate. Since then I started Git. Git is a new way of living.
Reaching the end: “We are developers. Not designers. We can’t do both. If a client asks for another design because they don’t like the current one tell them to hire one” - Remebers me one of my previous rants about the PDF “design”
Last one: “Clients suck. They will always complain. They need a new function. They don’t need that... And after that they wont bill ya for that. Because they think it’s no work.”
Sorry, forgot this one: “Always add backdoors. Many times clients wont pay and resell it or reuse it. With backdoors you can prohibit that.”
I think these are all things I loved they said to me. Probably forgot some. -
That moment when your entire application goes down ...
Because someone forgot to renew the SSL certificate. Of course.5 -
HOW FUCKING HARD CAN IT BE TO NOT STORE PASSWORDS IN CLEARTEXT AND THEN PROCEED TO SEND ME AN UNENCRYPTED EMAIL WITH THE PASSWORD IN IT??? THE SITE HAS A PREMIUM FUCKING SSL AND SAFETY CERTIFICATES YET THEY STILL DON'T COMPLY TO THIS? FUCK YOU! IF IT WASN'T FOR THAT I HAD TO ORDER A NEW SCREEN FOR MY BROKEN PHONE, YOU COULD'VE SUCKED BETTER THAN ME + VACUUM CLEANER.
Sorry abt that. But for real, mytrendphone stores passwords in plain texts and waves a fucking safety certificate in your face...13 -
Hey guys and ladys. I've got another little rant about my teacher.
As some of you may know, i finished my final exams last week, so basically every relevant grade is done. Every teacher except of my special snowflake programming teacher spends the lessons casually talking with us (some even say we dont need to show up anymore).
Little backstory: Grades need to be done on 18th, June and i get my certificate on 22nd.
Back to my rant. Special Snowflake is different. He wants ANOTHER project. This is totally his idea and is nowhere mentioned in our curriculum. It has to be done until next friday, it has to be C# and we need a detailed documentation. This wouldn't be a problem normally - if I wouldn't be moving at the moment. Special Snowflake knows this but doesn't care.
Except from the criteria above he wants it to be:
- fancy
- loved by everyone. Literally we need to make something EVERYBODY wants in their daily life
- good looking
- everyone should want to pay money for this
How am I supposed to come up with an idea and program the shit out of it in less than 2 weeks, which i need to paint my new office and pack some more stuff.3 -
Me: "Concierge, I have noticed this issue with live potential on ground a couple of months ago, just a friendly reminder that this still hasn't been fixed."
Concierge: "Well yeah this building is certified (god I hate that word) so whatever measurements you've taken, it doesn't mean anything when it isn't done by the electricians."
M: "Aha, back to that piece of paper huh.. taking measurements requires a piece of paper these days, doesn't it."
C: "Glad you're quick on the uptake."
M: "Well I have the brains in my head to do a proper measurement without dying, and the numbers don't lie."
C: "What do you think that the landlord is going to say? I'm sure you still remember that email "DON'T TOUCH THE ELECTRICITY!""
C: "And remember that she'll probably rather file a complaint against you than to let an electrician come check it, because the latter costs money for something that's already certified."
M: "Well that sucks..."
C: "The certified electricians certified this building. Your hands are pretty much tied."
M: …
*walks off in frustration*
Now, as for the rant. *inhales deeply*
YOU KNOW WHERE YOU CAN SHOVE THAT PIECE OF PAPER?! DOWN YOUR FUCKING ASS! WHAT DOES A FUCKING PIECE OF PAPER MEAN TO JUSTIFY WRONGDOING?! WHAT DOES IT FUCKING MEAN WHEN IT ISN'T BACKED BY A FUCKING BRAIN?!
Yet I apparently can't do anything, because I refuse to certify myself. Now you know why I fucking hate certified enganeers, and why I use that word. The piece of paper doesn't mean shit when you can't back it with an actual fucking brain. And requiring a certificate to do stupid shit, even for changing a fucking light bulb, or a switch or an outlet or whatever. Certified enganeers, because fuckers like that don't deserve to be called engineers. You know what, certified motherfuckers? FUCK YOU!! I can change it myself and I don't (shouldn't) need a bloody fucking certificate for that!!16 -
I just realized why you should never help people with tech problems, at least for free.
I went to grab the rent from a family that lives in my grandma's childhood home.
The father asks me if I could have a look at their new internet connection because it doesn't open any pages on the browser.
After fiddling for about an hour and a half trying every trick in the book and gently explaining to his children how everything is supposed to work (kids need to learn how these machines work imho) I ask him to give me his service provider number and confirmed that indeed the problem was that the connection wasn't activated on their side. Installed chrome, set the date,/time because it wouldn't sync and told them twice how to get past the certificate problem should some page not open. Smiles all around, all is well.
Fast forward next to next morning and I get a call from the guy telling me his internet doesn't work because he pulled out the power cable for whatever reason. I instruct him to restart the router just to be sure and then ask him what's on the screen. Turns out it was the certificate problem. I try as best I can explaining and reminding him how to get past but he doesn't understand. He goes on asking me to "come over for 5minutes and have a look at it". I politely tell him that just the trip is half an hour and that I am currently in the middle of exams to finish university. His tone becomes increasingly passive aggressive as I tell him again that it's isn't possible for me to make the time for a one hour round trip at the moment. Hangs up with a grim "right right whatever you say."
First time I was genuinely angry at a person being both so ungrateful after helping them and not even trying to fix something after I took the time to explain it to them.10 -
My school just tried to hinder my revision for finals now. They've denied me access just today of SSHing into my home computer. Vim & a filesystem is soo much better than pen and paper.
So I went up to the sysadmin about this. His response: "We're not allowing it any more". That's it - no reason. Now let's just hope that the sysadmin was dumb enough to only block port 22, not my IP address, so I can just pick another port to expose at home. To be honest, I was surprised that he even knew what SSH was. I mean, sure, they're hired as sysadmins, so they should probably know that stuff, but the sysadmins in my school are fucking brain dead.
For one, they used to block Google, and every other HTTPS site on their WiFi network because of an invalid certificate. Now it's even more difficult to access google as you need to know the proxy settings.
They switched over to forcing me to remote desktop to access my files at home, instead of the old, faster, better shared web folder (Windows server 2012 please help).
But the worst of it includes apparently having no password on their SQL server, STORING FUCKING PASSWORDS IN PLAIN TEXT allowing someone to hijack my session, and just leaving a file unprotected with a shit load of people's names, parents, and home addresses. That's some super sketchy illegal shit.
So if you sysadmins happen to be reading this on devRant, INSTEAD OF WASTING YOUR FUCKING TIME BLOCKING MORE WEBSITES THAN THEIR ARE LIVING HUMANS, HOW ABOUT TRY UPPING YOUR SECURITY, PASSWORDS LIKE "", "", and "gryph0n" ARE SHIT - MAKE IT BETTER SO US STUDENTS CAN ACTUALLY BROWSE MORE FREELY - I THINK I WANT TO PASS, NOT HAVE EVERY OTHER THING BLOCKED.
Thankfully I'm leaving this school in 3 weeks after my last exam. Sure, I could stay on with this "highly reputable" school, but I don't want to be fucking lied to about computer studies, I don't want to have to workaround your shitty methods of blocking. As far as I can tell, half of the reputation is from cheating. The students and sysadmins shouldn't have to have an arms race between circumventing restrictions and blocking those circumventions. Just make your shit work for once.
**On second thought, actually keep it like that. Most of the people I see in the school are c***s anyway - they deserve to have half of everything they try to do censored. I won't be around to care soon.**undefined arms race fuck sysadmin ssh why can't you just have any fucking sanity school windows server security2 -
I once got fired for being sick and show up at the office without doctor certificate, crazy thing i got better job same day then posted to LinkedIn haha1
-
I bypassed SSL certificate verification because that goddam certificate had some flags which my JVM did not understand and threw errors. Still in prod after 10+ years 🤐1
-
Apple iPhone testing without being on the app store is so annoying, I had to sign up some people to test the app I've been working on and had issues on my end, it really is this whole security bullshit, really it isn't needed.
I couldn't get the team provisional certificate thing to show up because when I clicked the account the team certificate settings would disappear, only after right clicking and hitting help then clicking the team while it was selected could I go to the right window.
I don't see why it's so damn hard to do this crap.
Yet with Android, it's so easy.
I really have issues with the testing for this iPhone app, I went through so many different ways to try and get it to work.
Anyways all done, crashlytics is an awesome testing tool if you can get around that small issue I had.4 -
Certificate: * expired yesterday *
Chrome: 🚨🚨🚨 THIS WEBSITE MIGHT TRY TO ROB YOU AND TAKE YOUR FAMILY HOSTAGE CALL THE ARMY IMMEDIATELY AND WAIT FOR FURTHER INSTRUCTIONS 🚨🚨🚨
Ofcourse it's sorta justified, but still, it's funny to see what the consequences are of forgetting to reload the nginx server after a certificate renewal 😂2 -
I got fucking scammed.
Too bad that I just realized it.
As most of you know, I am in Cappadocia atm. We had a balloon flight. Yada yada yada.
Then I took a green tour that was provided from an travel agency that was a Partner of the hotel I am in.
[Skip]
The guide brought us to a stone seller. At the jewellry store, we were told that they have a special kind of gem. It gets mined in Mugla(Turkey).
Thus we thought that the stones they sell are mined natural gems called Zultanit.
Oh boy were we fucking wrong.
The zultanit gems are able to change their color depending on the light it receives. We were all fascinated at the demonstration. They told us that it is the second Turkish gem. First comes Turquoise.
I bough a zultanit bracelet for myself. And a zultanit ring for my mum.
It took me about 635 Lira which is about 95 Euro.
I was like damn. They are so damn valuable. It maked sense to me, because it was changing its colors at differentt areas.
Now guess what...
I went onto the internet and checked reviews about that shop. They were mostly saying that these are not real, but lab created gems. I was deeply shocked.
I checked the "certificate" that I got from them. It matched. My gems are lab created and not mined as they told to us tourists ffs.
I am crying internally.
How could I be that dumb to believe that?
Guys, never buy anything they tell you. Check everything to its detail.
The "zultanite" is a real gem. They even have their own trademark, but we were sold a "zultanit (lbrt)".
They did not show the certificate before buying it.10 -
My first job was actually nontechnical - I was 18 years old and sold premium office furniture for a small store in Munich.
I did code in my free time though (PHP/JS mostly, had a litte browsergame back then - those were the days), so when my boss approached me and asked me whether I liked to take over a coding project, I agreed to the idea.
Little did I know at the time: I was supposed to work with a web agency the boss had contracted to build their online shop. Only that he had no plan or anything, he basically told them "build me an online shop like abc(a major competitor of ours at the time)"
He employed another sales lady who was supposed to manage the shop (that didn't exist yet). In the end, I think 80% of her job was to keep me from killing my boss.
As you can imagine, with this huuuuge amout of planning and these exact visions of what was supposed to be, things went south fast and far. So far that I could visit my fellow flightless birds down in the Penguin's republic of Antarctica and still need to go further.
Well... When my boss started suing the web agency, I was... ahem, asked to take over. Dumb as I was, I did - I was a PHP kid and thought that Magento, being written in PHP, would be easy to master. If you know Magento, you know that was maybe the wrongest thing I ever said.
Fast forward 3 very exhausting months, the thing was online. Not all of it worked yet, but it was online and fairly secure.
I did next to everything myself, administrating the CentOS box the shop was running on, its (own) e-mail server, the web server, all the coding required for the shop (can you spell 12 hour day for 8 hour pay?)
3 further months later, my life basically was a wreck, I dragged myself to work, the only thing I looked forward being the motorcycle ride home. The system worked though.
Mind you, I was still, at the time, working with three major customers, doing deskside support and some admin (Win Server 2008R2 at the time) - because, to quote my boss, "We could not afford a full time developer and we don't need one".
I think i stopped coding in my free time, the one hobby I used to love more than anything on the world, somewhere Decemerish 2012. I dropped out of the open source projects I was in, quit working on my browser game and let everything slide.
I didn't even care to renew the domains and servers for it, I just let it die without notice.
The little free time I had, I spent playing video games and getting drunk/high.
December 2013, 1.5 years on the job, I reached my breaking point and just left, called in sick at least a week per month because I just could not see this fucking place anymore.
I looked for another job outside of ALL of what I did before. No more Magento, no more sales, no more PHP. I didn't have to look for long, despite what I thought of my skills.
In February 2014, I told my boss that I quit. It was still seven months until my new job started, but I wanted him to know early so we could migrate and find a replacement.
The search for said replacement started in June 2014. I had considerably less work in the months before, looks like he got the hint.
In August 2014, my replacement arrived and I got him started.
I found a job, which I am still in, and still happy about after almost half a decade, at a local, medium sized ISP as a software dev and IT security guy. Got a proper training with a certificate and everything now.
My replacement lasted two months, he was external and never really did his job - the site, which until I had quit, had a total of 3 days downtime for 3 YEARS (they were the hoster's fault, not mine), was down for an entire month and he could not even tell why.
HIS followup was kicked after taking two weeks to familiarize himself with the project. Well, I think that two weeks is not even barely enough to familiarize yourself with nearly three years of work, but my boss gave him two days.
In 2016, the shop was replaced with another one. Different shop system, different OS, different CI. I don't know why and I can't say I give a damn.
Almost all the people that worked at the company back with me have left for greener pastures, taking their customers (and revenue) with them.
As for my boss' comments, instructions and lines: THAT might not be safe for work. Or kids. Or humans in general. And there wouldn't be much left if you put it through a language filter...
Moral of the story: No, it's not a bad thing to leave a place if you're mistreated there. Don't mistake loyalty with stupidity!
And, to quote one of my favourite Bands: "Nothing matters when the pain is all but gone" (Tragedy + Time by Rise Against).8 -
Oh the irony.
Translation:
Warning
The certificate of this website is not trustworthy. Proceed anyway?2 -
Photographer gave me a bigger discount (per his boss' orders) because I showed him free/inexpensive certificate options.
Thanks to all on here who have mentioned that; wouldn't have remembered about free options without others who think in terms of security. -
update of after i got fired: after the fuck developers company llc was left with no developers, there was a girl there that i didn't mention earlier because as i said: the story is more complex. she came there with good intentions but after she knew the cruel nature of fuck and shit she became notoriously mad, we're still in contact with her so it's nice to hear from her some of the gags that happen there, one of which my really intelligent ex-boss the wordpress DEVELOPER himself told her to finish one of the projects i was working on, and a friend of mine who is infamous of his coding shenanigans left it in my hands before he left as well a couple of months prior (well he was fed up before us, and when i told him to stay with us he said "dude just listen to the motherfucker's voice, i can't do this anymore", my lovely ex-boss has this equally lovely screechy high pitched voice that caused me tinnitus), it's an asp.net project, uses web forms, and a lot of apis, the database is sql server, standard shit but there's no original creation script and i fucked up the only existing database which was in a local computer he used to like calling a SERVER, now to the point: this girl is not a developer, she was however working as a reporter?? kind of like jaspersoft the human or sap crystal woman and she claims that she's pretty good at it, and she's a genuinely good person who was dragged to hell just because she wanted to be close to her daddy (she was working in a different city with more than double the salary she's given now), but she's rich and her dada convinced her to come. she's currently learning java ee on her own so she'd probably leave in the next two months, in her resume she wrote that she know php, well i know php you know php we all know php (the syntax) kind of like mr. shit who passed the sololearn php CERTIFICATE and couldn't stop telling his boss and his boss a.k.a my ex-boss goes "sweet!". going back to the punchline of this rant: she told us that he came to her and asked her to finish the project with php.12
-
I'm starting to get sick of people calling out js for being what it is, a terrible pile of shit, without taking any effort learning the language. just because you wrote an app in java or python doesn't mean you're entitled to a free certificate in any language with a name that makes it sound easier.
in fact, I'd claim that for an experienced programmer, Java is much easier to pick up than JavaScript.
but, if all you want to do is sit here and complain, and you can find no joy in reading pages on end of documentation... well then, the only thing you're missing out on is the biggest fucking platform of the world. so don't worry I guess. it'll be fine. right? eventually the users will see that the web is just a nuisance for developers and they'll all start using native apps...6 -
Me: Hi! I'd like to apply for the front-end developer position!
Them: Mmhmm. What's your education? It involves a lot of javascript.
Me: I recently earned a certificate in javascript development for front-end, on top of my professional experience.
Them: What's you're experience?
Me: 8 years of professional front-end development.
Them: Hmm. That won't work. What about this job, Implementation Specialist?
Me: So I have to help the customer write requirements, train the customer with new software, write documentation for the customer... you want me to apply to be in customer support?
Would I have spent the last 8 years of my life learning and earning programming if I liked dealing with people?3 -
So apparently I own land in dubai. Like three separate mortgages based on the email I received.
Your request (Mortgage Registration)
with request number xxxxx / 2024
has been completed
and you can print your issued certificate from this [link]
I've stripped out the numbers and link.
After confirming it was safe I followed through on a old spare cellphone, and yep, I own three mortgages for properties in dubai.
Except obviously I don't.
Someone used my name, an american, to register mortgages in dubai. *Nice* properties according to the pictures.
What started out as a scam email, or what looked like a scam email, went to an actual government of dubai website, with real mortgage registrations.
How in the fuck does that happen?
The only thing I can think of is someone committed identity fraud, and/or an alphabet agency went through the list of known political dissidents, set up a bullshit mortgage in a questionable territory, and are now using that as a pretext to monitor 'extremists with foreign ties.'
All that for some guy on the west coast that hasn't attended a political rally in his entire life.
Must have been that sign I held at sixteen years old by the side of the road that said "bush lied us into a war, and people died."
or maybe it was that time I told a really enthusiastic obama supporting police officer that it amazed me obama had time to win the nobel peace prize what with all the bombings he carried out against foreign civilians.8 -
Me: I need an SSL certificate.
Support: No problem. Just fire up your command line and generate one via OpenSSL.
Me: I'm on Windows.
Support: Ok, so what you do is code a Linux command line from scratch that will run in Powershell. Next, compile OpenSSL from your favorite of 60,000 versions available. Now, just fire it up and you're all set.
Me: Goodbye everything I've ever enjoyed doing in my free time.16 -
After hard learning for a while I've passed Microsoft's C# exam.
And they just gave me this. Shit. Only. No certificate.14 -
Got pretty peeved with EU and my own bank today.
My bank was loudly advertising how "progressive" they were by having an Open API!
Well, it just so happened I got an inkling to write me a small app that would make statistics of the payments going in and out of my account, without relying on anything third-party. It should be possible, right? Right?
Wrong...
The bank's "Open API" can be used to fetch the locations of all the physical locations of the bank branches and ATMs, so, completely useless for me.
The API I was after was one apparently made obligatory (don't quote me on that) by EU called the PSD2 - Payment Services Directive 2.
It defines three independent APIs - AISP, CISP and PISP, each for a different set of actions one could perform.
I was only after AISP, or the Account Information Service Provider. It provides all the account and transactions information.
There was only one issue. I needed a client SSL certificate signed by a specific local CA to prove my identity to the API.
Okay, I could get that, it would cost like.. $15 - $50, but whatever. Cheap.
First issue - These certificates for the PSD2 are only issued to legal entities.
That was my first source of hate for politicians.
Then... As a cherry on top, I found out I'd also need a certification from the local capital bank which, you guessed it, is also only given to legal entities, while also being incredibly hard to get in and of itself, and so far, only one company in my country got it.
So here I am, reading through the documentation of something, that would completely satisfy all my needs, yet that is locked behind a stupid legal wall because politicians and laws gotta keep the technology back. And I can't help but seethe in anger towards both, the EU that made this regulation, and the fact that the bank even mentions this API anywhere.
Seriously, if 99.9% of programmers would never ever get access to that API, why bother mentioning it on your public main API page?!
It... It made me sad more than anything...6 -
I am Done! I am extremely burnt out and unhappy with my work. I have been doing this professionally for over 5 years now and much longer than that unprofessionally.
This new company I joined finally gave me the salary I always dreamt of but now I am extremely unhappy and depressed and anxious all the time. And I don't like the work I am doing. I don't like the team. I hate being isolated at home for over 2 years, working from home. I had a mental breakdown in the middle of the meeting the other day. And after that, I said. that's it. I am done. So, I gave the resignation letter. I don't know what I am gonna do. But I sure as hell can't do this shit any longer. But now, the fucking hr is making it even more difficult for me by not letting me leave without serving the notice period. I told her I am on fucking medication and I am having severe mental health issues. Now, she wants to see the medical certificate. Or I have to pay two months' salary. WTF? If I had that kind of money lying around, I wouldn't have slaved myself away at your shitty company, would I?
I went to my psychiatrist whom I have been seeing consulting for the last couple of years now. I asked for a medical certificate and he thinks it'll hamper my future career. So, he said I should get a certificate from a general physician. So, that's the world we live in then? You can't even speak the truth? And the way HR is behaving over the mail makes me feel like a total slave. I mean I am not at all fit for work these days, and it feels like, if she had her way, she would tie me down to a chair and ask me to push out code. what the fucking fuck. This is some fucked up industry and I think I am finally done with software development. But now, I don't have any idea what I am gonna do with my life or how am I gonna earn money. I am so burnt out and anxious that even the thought of working again gives me panic attacks. even working from home. What the fuck do I do?8 -
The next motherfucking asshole, that says there is a shortage of trained IT personnel in Germany, will get their eyeballs ripped out and squished back into their mouth.
I've got my trade degree in mid August. since then I've been without a job. The first 2 months where, bevause my former employer took ages to create my work-certificate (document that shows that you actually worked there and what you did).
Since then, I applied to a multitude of companies and got denied for various reasons. My favorite was "seems unmotivated".
The number of open IT positions is directly correlated to the collective assholelishness and entitlement of HR/management.27 -
So I have been looking for a job for so long now. I keep losing faith every single time I get the dreaded "thank you for taking the time to apply but we did not find a match for you at this time" I am having such a hard time staying optimistic!
I've seriously lived thru some fckd up last few years, my father died, my grandpa died and I didn't get to see either of them.
I filed for a divorce from the worst most scamming fraudulent person ever and have survived and have come out the other side, thankfully I am rid of him and all crappy people in my life. I did it all without a plan on how to make it all better, I just went with it by knowing I didn't know where I would end up but I sure as hell wasn't going to stay in that situation, nope, not a chance.
While going thru a contentious divorce and court dates, I was also learning to code--it kept me looking forward to something. Once I graduated and received my certificate . . . PANDEMIC.
Now I am competing for jobs with people with years of experience! how am I ever going to get a job in this type of situation?
I know this has to end sometime and I will eventually be able to get a job but seriously how do you stay optimistic with so many rejections non stop day after day?
this is horrible and I don't know what else to do. I'm glad I found this space for my rant.20 -
!rant - Story:
I got accepted to the university of Osnabrück!
Finally! I've had a though time.
After kindergarten kids went to primary school while I had to go to a place called "Vorschule". Kids with disabilities go there. I, for one, was not physically disabled. I was psychologically disabled.
My German was not that good. My native language is Turkish. I had to spend 1 or 2 years there, before I was able to attend the primary school like the normal kids.
In the primary school a few teachers started making racist comments. I didn't really understand them, but my father did. After 2 years of attending that school, I switched to another primary school and continued with everything there.
In the secondary school (comprehensive school) I got bullied a lot. I was getting racist comments on a daily basis. Even by some teachers. Whereas some other teachers were showing it indirectly.
In the same school a teacher made me get a bad grade in one subject on purpose. Thus I got a bad certificate. Not the certificate I deserved.
I spent a year in economics after the secondary school. I was in a vocational school. I didn't like it, because I wasn't really interested in economics.
"Why did you choose that then?" you might ask. That's a legitimate question.
I didn't get accepted in anything related to informatics.
Anyways, I got bullied there, too. Physically beaten by trouble makers in my class and mentally by a french teacher.
He told me that I will not be able to get my certification that allows me to attend a university after me telling him that I will change the school and try it again in informatics. Several times.
I was in the new vocational school after that one. It was very stressful.
I, again, got bullied there. But this time not by the kids, but by some abusive teachers and directors.
One of them was a racist moron. My ex-PE teacher. He someday told me that I won't be able to achieve anything in my life.
I was always naive and kind of let all these words destroy my future plans in my head, but I had a little bit of hope nonetheless.
Today, I got a letter in which it was written that I got accepted to the university of Osnabrück!
Omg! I'm so fucking happy! I could explode! (A lil racist pun)17 -
About browsers and whole SSL CERT thing...
Most likely everyone here noticed, that https site with broken certificate will throw these big red warnings, in your face and there is so much wording like "ITS NOT SECUREEEE" or "ITS HACKEDDD" almost like it was written by passionate fanatic.
But when you are on plaintext http browsers reaction is like ¯\_(ツ)_/¯
Even if you have plaintext with password, it will for example in chromium put small little red thingy that almost no one notices.
I believe that broken cert with some error like invalid date is MORE secure than plaintext password, yet still there is this hypocracy with browsers...
I dont say that broken SSL cert is good, or something, Im just pointing out contrast of "broken" https vs plain http.... One looks for casual Joe like end of the world is coming and second is bearly noticable. Da fuck?
I disagree with this approach18 -
Bought an ebook that turned out to be a .DRM file
...that only worked with that publisher's Android app
......that only works with Android versions < 6.0 (I use Android 9)
Tried it anyway, which among incompatibility issues, was raising a certificate error. I contacted the publisher about it
..."sorry, the author did not give us permission to sell this. You can have your money back"
What
Why are you even advertising it on your website as a publisher then??7 -
TLDR: crappy api + idiot ex client combo rant // devam si duška
I saw a lot of people bitching about APIs that don't return proper response codes and other stuff..
Well let me tell you a story. I used to work on a project where we had to do something like booking, but better..crossbreed with the Off&Away bidding site (which btw we had to rip off the .js stuff and reverse engineer the whole timer thingy), using free versions of everything..even though money wasn't an issue (what our client said). Same client decided to go with transhotel because it was sooooo gooood... OK? Why did noone heard of them then?
Anyhow, the api was xml based.. we had to send some xml that was validated against a schema, we received another that was supposed to be validated againts another schema.. and so on and so on..
...
...
supposed..
The API docs were nonexistent.. What was there, was broken English or Spanish.. Even had some comments like Add This & that to chapter xy.. Of course that chapter didn't even exist yet. :( And the last documentation they had, was really really old..more than a year, with visible gaps, we got the validation schemas not even listed in the docs, let alone described properly.
Yaaay! And that was not everything.. besides wrong and missing data, the API itself caused the 500 server error whenever you were no longer authenticated.
Of course it didn't tell you that your session was dead.. Just pooof! Unhandled crap everywhere!
And the best part?! We handled that login after inspecting what the hell happened, but sent the notification to the company anyways.. We had a conf call, and sent numerous emails explaining to them what a 'try catch' is and how they should handle the not authenticated error <= BTW they should have had a handled xml response for that, we got the schema for it! But they didn't. Anyhow, after two agonizing days talking back and forth they at least set up the server to be available again after the horrified 500 error. Before, it even stopped responding until reset (don't ask me how they managed to do that).
Oh yeah, did I mention this was a worldwide renown company?! Where everybody spoke/wrote English?! Yup, they have more than 700 people there, of course they speak English! <= another one of my ex clients fabulous statements... making me wanna strangle him with his tie.. I told him I am not talking to them because no-one there understood/spoke English and it would be a waste of my time.. Guess who spent almost 3 hours to talk to someone who sounded like a stereotypical Indian support tech guy with a flue speaking Italian?! // no offence please for the referenced parties!!
So yeah, sadly I don't have SS of the fucked up documentation..and I cannot post more details (not sure if the NDA still holds even though they canceled the project).. Not that I care really.. not after I saw how the client would treat his customers..
Anywayz I found on the interwebz some proof that this shitty api existed..
picture + link: https://programmableweb.com/api/...
SubRant: the client was an idiot! Probably still is, but no longer my client..
Wanted to store the credit card info + cvc and owner info etc.. in our database.. for easier second payment, like on paypal (which he wanted me to totally customize the payment page of paypal, and if that wasn't possible to collect user data on our personalized payment page and then just send it over to paypal api, if possible in plaintext, he just didn't care as long as he got his personalized payment page) or sth.... I told the company owner that they are fucking retards if they think they can pull this off & that they will lose all their (potential) clients if they figure that out.. or god forbid someone hacked us and stole the data.. I think this shit is also against the law..
I think it goes without saying what happened next.. called him ignorant stupid fucktard to his face and told him I ain't doing that since our company didn't even had a certificate to store the last 4 numbers.. They heard my voice over the whole firm.. we had fish-tank like offices, so they could all see me yelling at the director..
Guess who got laid off due to not being needed anymore the next day?! It was the best day of my life..so far!! Never have I been happier to lose my job!!
P.S. all that crap + test + the whole backand for analysis, the whole crm + campaign emails etc.. the client wanted done in 6 months.. O.o
P.P.S. almost shat my pants when devRant notified my I cannot post and wanted to copy the message and then everything disappeard.. thank god I have written this in the n++ xDundefined venting big time issues no documentation idiot xml security api privacy ashole crappy client rant11 -
Expat issues of the month is that the HR is taking its sweet time, while I'm trying to find a house and probably need to provide employment certificate or some shit.
So basically, I'll arrive in a month and either be homeless, crash on a friend's at least an hour and half away by PT, or pay for hotel or airbnb.
... Heaven and hell, could you please work together on solving this, particularly the house issue? Because neither am I made of money nor my nerves can currently take this, specially with this upcoming surgery thing. 🙏5 -
Manager: You want a promotion? To senior? Ha. Well, build this web app from scratch, quickly, while still doing all your other duties, and maybe someone will notice and maybe they’ll think about giving you a promotion! It’ll give you great visibility within the company.
Your first project is adding SSO using this third party. It should take you a week.
Third party implementation details: extremely verbose, and assumes that you know how it works already and have most of it set up. 👌🏻
Alternative: missing half the details, and vastly different implementation from the above
Alternative: missing 80%; a patch for an unknown version of some other implementation, also vastly different.
FFS.
Okay, I roll my own auth, but need creds and a remote account added with the redirects and such, and ask security. “I’m building a new rails app and need to set up an SSO integration to allow employees to log in. I need <details> from <service>.” etc. easy request; what could go wrong?
Security: what’s a SSO integration do you need to log in maybe you don’t remember your email I can help you with that but what’s an integration what’s a client do you mean a merchant why do merchants need this
Security: oh are you talking about an integration I got confused because you said not SSO earlier let me do that for you I’ve never done it before hang on is this a web app
Security: okay I made the SSO app here you go let me share it hang on <sends …SSL certificate authority?>
Boss: so what’s taking so long? You should be about done now that you’ve had a day and a half to work on this.
Abajdgakshdg.
Fucking room temperature IQ “enterprise security admin.”
Fucking overworked.
Fucking overstressed.
I threw my work laptop across the room and stepped on it on my way out the door.
Fuck this shit.rant root mentally adds punctuation root talks to security root has a new project why is nowhere hiring enterprise sso12 -
Right, I've been here before.
Our app requires an internet connection, and one of our clients wants to roll it out on a strictly managed network.
We told them which addresses our app communicates with and their network team opened them up for traffic. Should work, right?
Nope, doesn't work.
So I request them to use Fiddler to do some debugging of the network traffic, and lo and behold, it does work when Fiddler is active.
One important detail is that Fiddler uses it's own SSL certificate to debug HTTPS communications. I've had moments where expired certificates were the cause of things not working and running Fiddler "fixes" this because of their own certificate.
So I point this out in numerous mails to their network team, every time I get a response saying "nah, that can't be it".
I keep insisting "I have had this before, please check if any installed Root CA Certificates is expired"
At this point I'm certain they have updates turned off on these machines, and their certificates must not have been updated for a long time.
At one point they come back to me. "Hey, when Fiddler is off, WireShark shows the app communicating with ICMP calls, but when it's on it shows HTTP calls instead".
...YOU'RE THE SUPPOSED NETWORK EXPERTS?! You think data can be send via ICMP? Do you even know what ICMP is? Of course you'll see ICMP calls when the network is rejecting the packages instead of HTTP calls when everything's fine.
(ICMP is used to communicate errors)
I'm trying to keep my patience with these guys until they find exactly what's wrong because even I am somewhat grasping at straws right now. But things like this makes me doubt their expertise...6 -
Apple revoked FB and Google's Experimental Certificates!
Way to go Apple! Showing the cojones!
https://theverge.com/2019/1/...3 -
Good news!
I recently found a job at a call center for a local Japanese food joint, and I will finally get enough money for a paid Apple Developer certificate, and now I will be able to publish the app on TestFlight, have proper notification services, etc! I will update you on the situation.7 -
I created a curriculum to homeschool myself way up for a MSc in AI/ML/Data Engineer for Application in Health, Automobiles, Robotics and Business Intelligence. If you are interested in joining me on this 1.5yrs trip, let me knw so I can invite you to the slack channel. University education is expensive..can't afford that now. So this would help but no certificate included.17
-
Fucking youtube ads... Showing me the same retarded ad 100s of times a day will definitely make me buy the thing, real fucking geniuses...
I am still looking for a way to block them forever on android, but I have no idea how. I've been looking for a public key or some sort of certificate in the apk so I could at least do a man in the middle, but no luck so far..14 -
When a website has a messed up certificate and it’s so bad that there is no “proceed anyway” button, JUST TYPE “thisisunsafe” AND THE WEBSITE WILL FUCKING LOAD ANYWAY
works in chrome9 -
Freak yeah!!! Just installed my first SSL Certificate on my Ubuntu Server!!!!! 🤘🏾🤘🏾🤘🏾🤘🏾🤘🏾 First time I had my IT friend do it. I thought about contacting him again, but then thought, what the hell, let's give 'er a shot. 2 days and a whole lot of anger and frustration later https:// is a green light!!! 😝😝😝😝😝😝😝14
-
TL;DR: Printers suck. MS-Word sucks.
Yesterday I wanted to print a few participation certificates for my blender project students.
*Turns on printer, runs downstairs, gets paper, runs upstairs, puts paper in*
So I tried to print in word. Nothing happened. Printer was online. I checked queue: Nothing.
*a couple of tries later*
Okay, fuck it! I export it as a pdf and open it in edge (8 times. 8 documents. Edge is a neat pdf-viewer, fight me). I press print on one. It works. I print the others and check: They look shit. The images look like 25% resolution and 50% jpg compression. I check word.
It by default exports in low quality. Yea, thanks for asking me. I export pdfs again and check "high quality". Open them, print. Done.
These were like 30 wasted minutes and print color. And paper.
Btw they look fucking neat. I can't show them right now but gradient text headline, project name is a rendered and edited 3D object :D4 -
// This is not a Rant, it's a sad story
I am a Software Engg. Student at my college, and I am a scholar, I stand 1st rank in my department for my academics. Our college expects us to do an internship this semester break, and I am stuck. The college expects us to do an internship for a period of around 6 weeks from a company with a CMM level 3. The real pain is the fact that the college didn't prepare us with the right skill set to get an internship like that. And in the end all our college wants is a certificate to show to them that I have done an internship.
My problem is, the people who don't have the slighest skill to do an internship are getting certificates because they have contacts, and they have no intentions to learn anything. But, here I am, although I believe I don't have that good skill set either, but I am stuck with no contacts, no internship offers, and no responses from the company I have applied to. Don't know what I am gonna do, but I have a zeal to do perform well, let's hope I find an opportunity to exhibit my talents.
If anybody can help me, please do. 🙏❤5 -
I'M GONNA KILL THIS MAC
what the FUCK!!!???!!!??? IT WORKED YESTERDAY!!!!
Now the whole iOS build pipeline fails again complaining smth about distribution profiles. Then about certificates. And then it starts using a completely unrelated certificate and complaining that provisioning profile does not include it...
what the f...
IT FUCKING WORKED YESTERDAY!!!!!!26 -
To long to read. So don’t do it.
I feel disappointed. It’s not about job or stuff. I’m disappointed about world in general. I don’t see my future on this planet anymore.
The world more or less looks like that :
Politics are trying to help you by stealing more money from you. The more you’re lucky the more money you will pay for it.
Media punch you with some family stuff from everywhere, give you young rich and far away, beautiful picture photos of places, people and food that you at most could visit once or twice per year during holidays that are break from work concentration camps.
If you’re lucky you’re rich or got rich or wealthy and infamous so you can walk wherever you want and don’t give a fuck what you wear but again your old friends are not so lucky bastards so you need to find new friends that are probably assholes. At the end most of the days you you’re doing nothing except killing time to meet with people you like during weekends or evenings.
Then there are families and everyone want to tell you that’s important. Family is like herd of assholes, if you’re weak they will sacrifice you and tell that you’re looser behind your back but when you get wealthy they will come back to tell you that when you were young and stupid they played with you so now you have to buy them some stuff or get them a job.
At the end there are people with “I wrote that book” certificate of excellence try to sell you opinions on everything starting from sexual positions ending on how to take a good dump. The problem is that the moment they wrote that book it becomes obsolete. Teachers of useless knowledge from last century that forgot about google or wikipedia.
All of them are playing your emotions, cause impulses and hormones are what makes you weak and people are looking for your weaknesses to take advantage of you. Get your money or get your attention and maybe even both at the same time. Cause views matter you know it. So like and subscribe dumb fucks.
If you’re lucky you find couple of them who aren’t doing that. Who the fuck knows why but this shit happens. It doesn’t matter if they’re family or you met them month ago. Those are only to keep and hardest to find. Unluckily those also can change by other people they meet or when they’re young.
If you can’t find a friend get a dog or cat or whatever animal you like. Their love is unconditional and obvious to read.
Well that’s most of the “I want to be spotted” culture that is all boring as fuck. Personalized ass and glamorous pictures and short movies of everything you don’t need but looks awesome. And as you see it’s still growing with more specialized portals like onlyfans, twitch and tiktok. We all need to look at what everyone else have or want to have cause 99% of time 99% of us are boring and is bored as fuck. Most of us can repeat same small amount set of stories all their life cause we’re not created to entertain.
I don’t feel joy looking at this shit fucked full of shit people arguing who’s dick is bigger. Who can post most dumb thing. I think I need a break but how to break from everything ? How to break from culture of money where to live on your country land you need to pay property tax ?
That’s all fucked up. Life’s fucked up.24 -
Am I the only one who's getting more and more aggrevated about how the large youtube channels misinform and make out VPN providers (I am looking at you, Nord VPN, mostly) as the messiahs of the internet? How they protect our data that would otherwise be in incredible "danger" otherwise?
I understand they need clients, and I know most of the YT channels probably do not know better, but... This is misinformation at best, and downright false advertising at the worst...
"But HTTP-only websites still exist!" - yes, but unlike the era before Lets Encrypt, they are a minority. Most of the important webpages are encrypted.
"Someone could MITM their connection and present a fake certificate!" - And have a huge, red warning about the connection being dangerous. If at that point, the user ignores it, I say its their fault.
Seriously... I don't know if Nord gives their partners a script or not... But... I am getting super sick of them. And is the main reason why I made my own VPN at home...15 -
Y'all, are internships in your area paid, unpaid or u need to pay to get one?
Our uni made internships mandatory! being from one of the country which produces largest number of engineers per year. Every godamn student from our uni is running around to get an internship! And there arises these dick heads with so called made up startups which has never done a godamn single project, just legally registered before the dawn and puts up advertisements for internship trainings!! All our uni needs is a fucking certificate from a technical company which is legally registered. And these assholes provide internship to those who pay them hella amount, and attend there couple of days just to get the certificate!! No developers! Just some random guy talking about html and css! Now thats Internship!
Fucking shit! Making money by looting students in their hard times! Students get the certificate that satisfies the uni, but for fucks sake at least bring an expert to guide them! No!! Need to stand up against this shit!11 -
I know folks do their best, but come on Apple, this can't be that hard. Bought an IPhone at an estate sale (elderly individual died suddenly, so no one had knowledge of the apple id, passwords, etc) and I've been trying to convince apple to clear the activation lock. (AS = Apple Support)
<after explaining the situation>
AS: "Have you tried putting the phone in recovery mode? That should clear the lock"
Me: "I've already done that. It prompts for the apple id and password, which I don't have"
AS: "You need to talk to the owner and get the information"
Me: "As I explained, I purchased the phone at an estate sale of someone who died. I have the bill of sale, serial number, the box, obituary. What else do you need?"
AS: "Have you tried contacting a family member? They might have have that information."
Me: "The family members at the sale told us this is all they had. This kind of thing has to happen. I can't believe Apple can't clear the activation lock."
AS: "Yes, we can, but I'm very sorry we take security seriously."
Me: "I understand, what do I do now?"
AS: "Did you log out of the phone? Go to settings ..."
Me: "Yes, I tried all those steps before calling. It prompts for the AppleID and password."
AS: "Did you try entering the password?"
Me: "No, I don't have it. I already explained there is no way to know"
AS: "Yes..yes...sorry...I'm just reading the information in front of me. I found something, have you tried submitting a activation lock removal request?"
Me: "Yes, it was denied, didn't tell me why, which is why I'm calling. What about taking this phone to an Apple store? I have all the paperwork."
AS: "Sure, you can try. You might need the death certificate. The family or the coroner will have a copy."
Me: "What!? Apple requires a death certificate to unlock a phone!? I'm pretty sure not even the family is going to give a total stranger a death certificate"
AS: "Sorry sir, I'm just reading what is in front of me. Without that certificate, there is no way to prove the person died. You can try the Apple store, but they will likely require it."
Me: "That's a lot of drama for unlocking a phone. A *phone*"
AS: "Yes sir, I understand. If there anything else we can do let us know and thank you for being an a apple customer."
Next stop, the Apple Store.12 -
!rant
FUCKING FINALLY
I GOT THE APPLE DEVELOPER CERTIFICATE
PUBLIC TESTFLIGHT PARTICIPATION SOON
THIS IS SLAMMIN5 -
So apparently the CIA signed some of their malware with a kaspersky certificate to not get caught...
I think this kind of a genius thing from a hackers pov, but very very scary... Gotta remove that thwate ca 😁😁 (they singed the fake kaspersky certificate for the CIA)
Source (in German, I'll add one in English as soon as I fond one): https://m.heise.de/newsticker/...6 -
What a relief!
I got my final certificate for finishing 9th grade, and the council has determined that (drums please)
IM GOING TO CYBER / COMPUTER SCIENCE NEXT YEAR!!!!!!!!!!4 -
I've got this customer who for some fucking reason won't change their DNS to point to our new servers, but wants to fucking stay on that old piece of crap, where we have to ask our sub-provider to generate a CSR to send to our customer to use to sign a certificate to send to us to send to our sub-provider. Because yeah, that's so much fucking easier than just pointing your domain to our new system, and get SSL set up automatically. For fucks sakes! And also, your certificate expires tomorrow, and since our idiot sub-provider hasn't responded to my email about CSR in a week, you basically have no option. So get that thumb out your butt and just switch the DNS!
-
I just installed Opera Mini on my PSP. That alone isn't very exciting on its own, although I am stoked that my website does in fact render on a device from 2009. With the helpful guidance of a laptop from 2004 that's doing the hotspot duties for this thing.
No, what really got me stoked is that Opera still supports these old platforms, and how small they managed to make it. The .jar file for Opera Mini 4.5 is ~800kB large. There's a .jad file as well but it's negligible in size and seems to be a signature of sorts.
Let that sink in for a moment. This entire web browser is 800kB. Firefox meanwhile consistently consumes 800 MEGABYTES.. in MEMORY. So then, I went to think for a moment, how on earth did they manage to cram an entire functioning web browser in 800kB? Hell, what makes up a web browser anyway?
The answer to that question I got to is as follows. You need an engine to render the web page you receive. You need a UI to make the browser look nice. And finally you need a certificate store to know which TLS certificates to trust. And while probably difficult to make, I think it should be possible to do in 800k. Seriously, think about it. How would you go *make* a web browser? Because I've already done that in the past.
Earlier I heard that you need graphics, audio, wasm, yada yada backends too.. no. Give your head a shake. Graphics are the responsibility of the graphics driver. A web browser shouldn't dabble with those at all. Audio, you connect to PulseAudio (in Linux at least) and you're done. Hell I don't even care about ALSA or OSS here. You just connect to the stuff that does that job for you. And WebAssembly.. God I could rant about that shit all day. How about making it a native application? Not like actual Assembly is used for BIOS and low-level drivers. And that we already have a better language for the more portable stuff called C.
Seriously, think about it. Opera - a reputable browser vendor - managed to do it in 800kB on a 12 year old device. Don't go full wank on your framework shit on the comments. And don't you fucking dare to tell me that there's more to it. They did it for crying out loud. Now you take a look at your shitpile for JS code and refactor that shit already. Thank you.21 -
So apparently I can't test my apps on my own device without paying my Apple Developer Certificate.
I knew it is needed to pay for it if you want to publish/distribute your app but c'mon... This is ridiculous.
My app was literally a fresh app creation, a fucking white screen one page fucking app and when I tried to run in on my iPhone, then I ended up having this problem:
dyld: Library not loaded: @rpath/libswiftCore.dylib
Referenced from: /var/containers/Bundle/Application/BCD48EAA-82C2-46F6-ADEE-45C740C3B66D/HWorld.app/HWorld
Reason: no suitable image found. Did find:
/private/var/containers/Bundle/Application/BCD48EAA-82C2-46F6-ADEE-45C740C3B66D/HWorld.app/Frameworks/libswiftCore.dylib: code signing blocked mmap() of '/private/var/containers/Bundle/Application/BCD48EAA-82C2-46F6-ADEE-45C740C3B66D/HWorld.app/Frameworks/libswiftCore.dylib'
(lldb)
If any of you guys know how to solve it without paying (even more) PLEASE let me know
THANKS14 -
Finally convinced the IT at my University to disable their badly-deployed HTTPS inspection.
So bad even the employee laptops in the domain didn't have the certificate (and the students got it on Google Drive a week later).
I feel great.1 -
Finnegan by @retoor has received 16 points for Presentation and 12 points for Functionality (28 total) during the voting phase. And with this, I call it the Winning devRant clone 2023!
She will get an SVG with her likeness and layered sliding animation made by yours truly, which is a potentially perfect trophy for her portfolio. Hope you'll like it, @retoor, so give me a time and it will arrive!
ragedev by @SidTheITGuy has received 6 points for Presentation and 3 points for Functionality (9 total). As such, he will only receive a static SVG portrait. But it's still a good addition to his YouTube channel, I believe!
@ostream with others get a certificate for participation. I don't really know why I'm issuing those, but please accept! It's the least I can do for your all's contributions. Come by the next "jam" announcement, I promise it will be more exciting ;)))
Archive of Unofficial devRant Clone Jam: https://devrant.com/search/...4 -
>pentester
Raised an issue with a web application for out client that was weak TLS protocols/cipher suites in use on the sever hosting their application.
Then I was asked to confirm that reissuing the certificate was the correct remidial action for fixing this...
Man, it's scary to think non-technical project managers are in charge of fixing this stuff...4 -
New policy at work!!
Now we have to submit a Doctors certificate as proof if someone is taking sick leaves for more than 2 days or if someone is taking sick leave on Friday or on Monday(Seems trust issues LOL).
SMH!11 -
Made an Android app a while ago. I needed some pet project so I decided to go with Java for Android. First time, no experience at all.
So everything went ok, I had a little help from a colleague, structuring code, and pushing to the store. Work done app was doing ok.
A year later I came back to this project. I needed to fix a bug - date time and daylight savings crap. 😥
Spent a week on it. Ready to push a new version to the store, with some extra features! Build apk. All good.
Wait. I need to sign the APK? Wtf. I had to format my hard drive. How do I recover my fucking certificate?
*Google's for a while*
No fucking way. I can't restore the certificate. Or get the keystore back. The solution is to create a new app with a brand new package name?
Thanks for nothing, I'm done with Android development.9 -
was applying to college when i saw “enter social security number (optional)”
yes ok, i’d also love to give you my bank account information, address, and birth certificate. anything you need!!!18 -
Just came out of an internship interview with the CEO of the company, who's a computer graduate apart from being an MBA guy.
Few things bother me as to whether to join them or not?
1. He's scared of GIT.
-He's asked me not to use git because that will make the code public.
2. He's asked me not to use bootstrap.
-He's afraid it'll be a copyright violation.
3. Asked me to develop ERP/CRM for the company.
- I'll be the sole developer on the thing, developing a whole CRM with Project Management System. And the internship is "almost" unpaid. Almost because, they are willing to pay an amount equal to what I spend on my monthly caffeine drinks.
I'm in a rut whether to join this company or not, as this is don't see any learning here (being the sole developer). I'll be doing what I've been doing for years (develope a Web app) but for a fraction of what I get from freelancing.
But, I'd love a internship certificate to show at the campus placements later this year.
Help!14 -
> Have nothing to do with programming
> Starts shitty coding bootcamp online, possibly for free
> Learns html/css/js course
> Builds to-do app (dont know how to deploy it with anything but github pages, but who cares)
> Takes a week to finish course
> Gets e-certificate and posts it on LinkedIn
> Adds web and front end dev as Professional Skill on LinkedIn
.
.
.
> Complains how bad the tech industry is for 'new entries and beginners'2 -
Why do the HR folks cannot be more passionate about their work. Everywhere I have worked, they don’t pay a lot of attention to how their processes affect their employees.
I had a Visa appointment along with my wife today. The appointment was scheduled couple of weeks back. The email with appointment schedule had the list of documents that we needed to carry.
There was one document which HR folks needed to generate themselves and share to me. Its basically the certificate of employment. Now, I had a Certificate of Employment from last year and I thought that would suffice. But then the Visa lady told me that they needed a latest one(generated in last 3 months). It was very weird for the Visa process since I didnt have to carry that certificate couple of years back. But anyways.
My issue with the HR people is that if there was a need to generate this document from their side, they could have already generated it and shared with me. But no, they will wait for something like this to happen. They will only do this when I had asked about it and then they would have generated the certificate and shared with me.
Similar experience in my previous company, when I moved to Germany couple of years back and the company had arranged for accommodation for me. The building where I had my initial temporary stay, had two entrances and only one of them had the elevator, which was at the back side of the building. My apartment was located on the 5th floor. Since there was no mention of the elevator in the email that I received from the HR folks, I had to carry 6 bags up 5 floors after my 12 hours of flight. It took almost an hour to get all of them up.
All of this could have been easily avoided if the HR folks were a bit more empathetic towards the people they deal with and tried making their life a bit more easy. A little note of elevator, or generating certificates automatically feels the lives of employees so easy and it really avoids a lot of hassle, both for employee and the HR folks themselves.3 -
RedHat Certified Expert in Virtualizationjoke/meme struggle redhat oneinfew engineering certificate destiny international goals mehnat engineer recognized6
-
Did anyone else notice how setting up a letsencrypt.org certificate for a domain became a lot easier as this year went on? Certbot + automatic renewal was set up in four commands on my RasPi, I remember it being more difficult to set everything up 🤔1
-
Let's talk a bit about CA-based SSH and TOFU, because this is really why I hate the guts out of how SSH works by default (TOFU) and why I'm amazed that so few people even know about certificate-based SSH.
So for a while now I've been ogling CA-based SSH to solve the issues with key distribution and replacement. Because SSH does 2-way verification, this is relevant to both the host key (which changes on e.g. reinstallation) and user keys (ever replaced one? Yeah that's the problem).
So in my own network I've signed all my devices' host keys a few days ago (user keys will come later). And it works great! Except... Because I wanted to "do it right straight away" I signed only the ED25519 keys on each host, because IMO that's what all the keys should be using. My user keys use it, and among others the host keys use it too. But not by default, which brings me back to this error message.
If you look closely you'd find that the host key did not actually change. That host hasn't been replaced. What has been replaced however is the key this client got initially (i.e. TOFU at work) and the key it's being presented now. The key it's comparing against is ECDSA, which is one of the host key types you'd find in /etc/ssh. But RSA is the default for user keys so God knows why that one is being served... Anyway, the SSH servers apparently prefer signed keys, so what is being served now is an ED25519 key. And TOFU breaks and generates this atrocity of a warning.
This is peak TOFU at its worst really, and with the CA now replacing it I can't help but think that this is TOFU's last scream into the void, a climax of how terrible it is. Use CA's everyone, it's so much better than this default dumpster fire doing its thing.
PS: yes I know how to solve it. Remove .ssh/known_hosts and put the CA as a known host there instead. This is just to illustrate a point.
Also if you're interested in learning about CA-based SSH, check out https://ibug.io/blog/2019/... and https://dmuth.org/ssh-at-scale-cas-... - these really helped me out when I started deploying the CA-based authentication model.19 -
We won a competition - it was the first time he has taken part on it - and we had 1. place (me :p) and 2. place.
He was happy like a small kid, hung the certificate on the wall, made photos with our principal and the winners and we got in the newspaper xD4 -
Asked a 3rd party developer to add HTTPS support to an IoT device which interfaces with our webservice.
Spent almost 4 weeks trying to explain they don't need the server side certificate to do so. -
Really regretted to born in India. I know I should not say bad about the country in which I born and living it but there are so many reasons.
Govt of India is very poor. Nothing can be processed if you don't have offered bribe or you don't have political power and pressure.
My company offering me onsite to go London for my project, govt is not issuing me PCC Police Clearance Certificate even I never had any crime.
Police says for your current address 6 month is duration you're living here so we submitted 6 months crime is nil and 4.5 years is more required.
I went to passport office and happy to submit all documentation for previous addresses so that police verification can be done but no body is taking documents
No progress in my file.
I'm too much frustrated now.
I reported to ministry and prime minister of India but even no progress.
I'm really fed-up.
:(14 -
Well. Fuck.
A sunny monday morning. The sun almost glimpsing over the horizon. I'm on my way to the office, taking a breath of fresh cool air. It is infused by the scent of sweet pastries.
I reach the office, but something is different. Why is the door slightly opened? Carefully I grab the door handle. I do my first step past the doorframe and wooosch. Thick and sticky stuff is running done my spine, finding it's way through my clothes. I feel so un-fucking-believably dirty in this very moment.
This should give you an impression how I felt when I had to change a DNS record in this completely broken setup for just a matter of seconds until the letsencrypt client renewed the certificate.
I'm feeling seriously dirty.1 -
Did you know, that you can just type 'thisisunsafe'? This will tell Chrome to skip certificate validation 🤯1
-
Why does email suck so much oh my god, I don't want a fucking lesson in the kinds of domain records, I can set a TXT to prove that I control the DNS record, I have a TLS certificate, what the fuck else would I possibly need to prove!? None of this is contributing anything to security! Just fucking figure it out, it's the internet, not an international border, jesus.6
-
Went through changing Apple ID email. I have 💻,📱and⌚️.
Felt like that horror movie moment when protagonist tries to be stealthy but makes a noise and a huge mob of zombies turn heads all at once. For what I love apple, the simplicity, in the email changing process there is none of that.
They forced me to enter my 60 arbitrary obscure characters password on Apple Watch screen.
On the other hand I felt nostalgic. When I was using Linux this all was my day to day experience no matter the distro, and I got a Linux Foundation certificate, I contributed to Elementary. Can’t imagine the experience of a user who just switched to Linux.
Windows? I don’t want to think about that, let alone talking. You only need to know that I successfully configured a SoE setup AND active directory in ad-hoc unstable network of literally rusty old computers. And I still switched to Linux back then.4 -
So my brother went back to school today. Now, during the 5 years I was there they had the most shit security on their IT systems, but aparently now they have fucked up their ssl. If you try to load the https page it comes up with the warning saying its an invalid certificate, but once you click it, it doesn't even load the school website, it loads this random page. Clicking on the buttons then take you to a page under their domain provided by another school. Going to this schools website, the https seems to be broken in the exact same way. It wouldnt be so bad, but it can confuse the hell out of people who type https before a url, and thos who dont realise and end up on the insecure site will need to provide passwords over an insecure connection. I am so glad im out of that place, they had such crap IT and everything was so easy to break.1
-
Saw this sent into a Discord chat today:
"Warning, look out for a Discord user by the name of "shaian" with the tag #2974. He is going around sending friend requests to random Discord users, and those who accept his friend requests will have their accounts DDoSed and their groups exposed with the members inside it becoming a victim as well. Spread the word and send this to as many discord servers as you can. If you see this user, DO NOT accept his friend request and immediately block him. Discord is currently working on it. SEND THIS TO ALL THE SERVERS YOU ARE IN. This is IMPORTANT: Do not accept a friend request from shaian#2974. He is a hacker.
Tell everyone on your friends list because if somebody on your list adds one of them, they'll be on your list too. They will figure out your personal computer's IP and address, so copy & paste this message where ever you can. He is going around sending friend requests to random discord users, and those who accept his requests will have their accounts and their IP Addresses revealed to him. Spread the word and send this to as many discord servers as you can. If you see this user, DO NOT accept his friend request and immediately block him. Saw this somewhere"
I was so angry I typed up an entire feature-length rant about it (just wanted to share my anger):
"1. Unless they have access to Discord data centres or third-party data centres storing Discord user information I doubt they can obtain the IP just by sending friend requests.
2. Judging by the wording, for example, 'copy & paste this message where ever you can' and 'Spread the word and send this to as many discord servers as you can. If you see this user, DO NOT accept his friend request and immediately block him.' this is most likely BS, prob just someone pissed off at that user and is trying to ruin their reputation etc.. Sentences equivalent to 'spread the word' are literally everywhere in this wall of text.
3. So what if you block the user? You don't even have their user ID, they can change their username and discrim if they want. Also, are you assuming they won't create any alts?
4. Accounts DDoSed? Does the creator of this wall of text even understand what that means? Wouldn't it be more likely that 'shaian' will be DDoSing your computer rather than your Discord account? How would the account even be DDoSed? Does that mean DDoSing Discord's servers themselves?
5. If 'shaian' really had access to Discord's information, they wouldn't need to send friend requests in order to 'DDoS accounts'. Why whould they need to friend you? It doesn't make sense. If they already had access to Discord user IP addresses, they won't even have to interact with the users themselves. Although you could argue that they are trolling and want to get to know the victim first or smth, that would just be inefficient and pointless. If they were DDoSing lots of users it would be a waste of time and resources.
6. The phrase 'Saw this somewhere' at the end just makes it worse. There is absolutely no proof/evidence of any kind provided, let along witnesses.
How do you expect me to believe this copypasta BS scam? This is like that 'Discord will be shutting down' scam a while back.
Why do people even believe this? Do you just blindly follow what others are doing and without thinking, copy and paste random walls of text?
Spreading this false information is pointless and harmful. It only provides benefits to whoever started this whole thing, trying to bring down whoever 'shaian' is.
I don't think people who copy & paste this sort of stuff are ready to use the internet yet.
Would you really believe everything people on the internet tell you?
You would probably say 'no'.
Then why copy & paste this? Do you have a reason?
Or is it 'just because of 'spread the word''?
I'm just sick of seeing people reposting this sort of stuff
People who send this are probably like the people who click 'Yes' to allow an app to make changes in the User Account Control window without reading the information about the publisher's certificate, or the people who click 'Agree' without actually reading the terms and conditions."8 -
Encryption, Data, Servers, Protection, Certificate
oOOO WEE, I use big ear old words so I must be a hacker.2 -
Taking charge of an existing project...
Me: "This certificate requires a password. Can you send it to me"
Other dev who was earlier responsible for the project : "Just use the default one"
Me: " And what's that?"
Other dev: "CHANGEIT"! All caps
Me: 😐 -
Finally getting my first certificate in Udacity , which is a website where you can have courses in coding 🚶🏻♀️💕...
In order to get it I had to first learn the lessons there and then do a final project which involves all the things I learned which was HTML and CSS in making and designing websites in browsers 🍃21 -
Yeah so... I‘m an IT student and am supposed to have a certificate exam about software engineering RIGHT AT THIS VERY MOMENT!
The person from the certificate place arrived half an hour late due to a delay of her flight.
That sucks alot because many students have other exams just after this one.
I always go one hour early to exams so even if 2 trains are delayed I will be there in time.
I would expect said person to do the same.
It gets even worse. We sit there expecting to start the exam half an hour late and guess what:
The distributed exam is not the one we are meant to take......... FOR FUCKS SAKE why did I even come here?!?!5 -
!rant but seeking für help
Hi!
So my boss came to me yesterday and asked me if I could do some penetration / security testing for a web application our company made.
Interested in learning it and being familiar with HTML, PHP, JavaScript and MySQL I said yes.
Though I have some really basic knock edge of the subject (E.g SQLInjection) I was wondering if you know any good website / udemy course or whatever that can get me started.
I don't mind if there will be a certificate at the end but it is not necessary.
Thank!8 -
Am I bad? I charged a client for an SSL Certificate and installation, but just used LetsEncrypt instead, cost me fuck all.6
-
I still wonder why some certifications cost 200$+ just to answer some questions to get a PDF certificate without actually being trained or receiving studying material.9
-
Was just reading some of the OpenVPN scripts to renew a certificate where I forgot to source the vars file first (apparently OpenVPN stores those in a separate file that you always have to source first, and I tend to forget it sometimes).
Reading the revoke-full script that OpenVPN provides, it's just bash so I can read it no problem. But traversing through it and trying to understand it... Horrible! There's a test file in $RT named keys/revoke-test.pem. It's not used anywhere in OpenVPN for anything useful as far as I'm aware. The script however - the script that's running on a production server! - attempts to remove this file. It doesn't exist. Test files do (or at least should) not exist in production. They're not supposed to be there.
It exports empty variables. Some of them are set by the sourced vars file, some aren't. Not entirely sure why it's exporting variables as empty when they're uninitialized, or why it doesn't just unset the ones that are initialized.
And finally it goes ahead and revokes the key file that I'm actually concerned about through regular OpenSSL and verifies it.
Not to mention that the lack of the sourced vars file, which admittedly I should think about in the current status quo, if it *always* needs to be sourced anyway... Why doesn't the script do that itself then? One less thing to go wrong. But hey, proper design?
Gore. I don't have any other words for it.
And before anyone tells me that I should go and fix it if I'm so worried about it. Remember, I am not a developer. That's the job of the developers that made this in the first place.9 -
F**k the education system. We have a project for each programming subject to which I am committed. Adding upon that, a startup company shows up from nowhere, with their mainstream project which is to be completed by students and in return we get a useless certificate for completing their modules. And the worst part is that they have kept it compulsory.
I don't know who is going to benefit more, the college, the students or the company.2 -
Yay got my first certificate! C# (even though half of the context wasn't available in our books...)3
-
I’m one of maybe the 10% of dev boot camp graduates that had a successful outcome. Most people think it’s as easy as just showing up, write mediocre code, get a certificate then you’re automatically an “engineer” with job offers being thrown at you. It’s not. I already had experience writing code throughout high school and took 2 years of cs classes at university before dropping out. TLDR; only worth it if you already have some technical knowledge or experience otherwise your just pissing away your money.5
-
A few years ago, i had a task to implement a webservice of an insurance-company into our .NET Development.
The security requirements of this insurance-company webservice were top notch.
As a client you had to build a request that used a negotiated certificate, canonical header structures, security timestamp, a secret token in header, ...
To configure all this stuff via web.config WCF was pure pain in the ass.
After many phonecalls and emails, i finally managed to meet all security requirements to send a valid request.
First, i didn't recognized my breakthrough, because my client still had thrown exceptions while calling the insurance-webservice.
Why was that?
The exception told me on the most possible gentle way, that .Net isn't able to process an unsecured response, when there was a secured request before.
So there was top notch security for requesting, but dumbass unsecured responding with all the precious customer information.
*epicfacepalmnuclearexplosionfollowing*
I even had to raise the. Net Version of our. Net client, because i wasn't able to configure that it is allowed to process an unsecured response after using a secured request.
Whyyyyyyy?!!?!!1el even!?! -
Internal system sent me an email with a dead link, saying a certificate is due to expire. Couldn't find the tool, opened IM with help support and was greeted with a passive aggressive note:
"Did you know that the support staff you speak too will use the same website available to you to resolve the issue, have you tried searching here ..."
... well thank you chat bot, did you know I wouldn't be here if said website actually fucking worked?3 -
After an year of not giving up, finally got a certificate. I am a certified developer now, how cool is that 😎😁3
-
Spending 2 days trying to figure out why code signing wasn’t working when deployment is started from teamcity. Every time I tried manually it worked, but through teamcity it just kept telling me that no certificate could be found.
I finally twigged what the problem was, my code signing certificate is smart card based and you can’t access it if is requested from a RDP session. I had launched the teamcity build agent from an RDP session a few days back without thinking…
Rebooted and started the buildagent via VirtIO VNC and low and behold it started working again. -
Debugging TLS failures.
In Java.
With the funny certstore cause "we need to do this by ourselves".
Fucking shitty broken pile of cunt code.
At least the debugging output is good.
As much as I love TLS, debugging it is a nightmare and when a programming language like Java decides to wrap it, it becomes Ctulhu.
OS
- TLS Library
-- TLS Certificate Chain
- JDK
-- JDK SSL Handler
--- JDK Certstore
---- Java Library Abstraction, eg. WS SSL
Joyfully fingering of a tentacle arsehole.2 -
My company provides its services as web pages and web services to our customers.
Once a year we update the certificate used for the https connections.
I notified the update to the clients that use the web services.
One of them asked me a copy of the public key.
No problem. Open the web site with the browser, save the key and send by email.
One day later the client asked me the public key in a zip file because the anti virus blocked my attachment.
Why the client hates the Chain of Trust ?
He could obtain the public key by them self from the browser or openssl.1 -
Some birds told me Galaxy S9 is really good.
Googled it, and found something more interesting.
PS: this is the 3rd largest mobile server provider in NZ
Use development code in production.
Distructed certificate.
Nice work guys!2 -
There was some erroneous calculation in the leaves taken for the month in her account certificate, even after repeated correction request from her end. This had happened twice.
She just stood up, shouted at the HR (who was responsible for this) and headed straight to the co-founder's cabin. After 4 hours of discussions, she came out. Whispered to me that she just quit, and went away. Never saw her again. -
So in the last 2 hours I felt both frustrating and happiness, because of Xcode and code signing.
So what I did yesterday was removed all the Xcode certificates on my keychain because I had major issues getting the newest version of the certificates despite have auto signing enabled.
Without much notice until going to send the iOS app today through Fabric I came across an error while uploading the newest build :/
Googling it I found the same issue on stack overflow with only two answers one being fastlane, which just automated the process to the same error LOL
So anyways I found the solution and was quite happy about it :D I had to go to the apple developer website and download the right certificate DESPITE the auto signing ...
Anyways uploaded and done!
Also added a stack overflow answer in regards to it, I hope it helps someone out.
Oh and I emailed fabric to ask for help and 30 mins later emailed them basically saying NVM fixed it! Lol
Fuck you Xcode lol -
Hey! This is a followup to my last story.
TL;DR: I thinking of quitting my old job, got an offer at a startup, about the same pay, but much better working conditions.
First of all, the meeting with my lead. It was a performance report on her side to me, and I got 100 to 110% in performance in all points. My lead said "this team without you wouldn't be this team anymore" - which makes me feel a little bit bad for her if I decide to quit. She is a great team lead, but I don't belive the old company is worth my time anymore.
Now to the new company. Shortly after that performance report meeting, I had a call with the ceo, and what do I have to say besides: What a cool dude. He listened to me, asked me questions about my previous jobs (not just as programmer) and so on. But because first looks are deceiving, I went to their office last thursday. And wow. Their are exactly what I imagined them to be. Cool, young folks, 100% tech enthusiasts, and open minded.
One of the new hires in the new company wanted a 6 months internship between his studies. Instead they offered him a full time job - for the 6 months. They even offered me to pay back my scholarship that I will own my old company for leaving early. This is awesome.
The only things that will be worse than my old job are, that I have to negotiate payment instead of yearly increases, 4 days less paid vacation, so only 26 days, and 40h weeks. And they have no workers council, which isn't good, but it's not the worst either.
I got them fixed on 57.000€, not including an up to 10.000€ annual bonus. The way you achieve your bonus seems good to. It's split in two parts, internal and external bonus. Internal bonus is when you engage with internal events like tech calls, sharing your knowledge on your main IT topics, etc. External Bonus is a bit more complicated, but also straight forward. You work on projects for customers, and if you have less than 3 weeks a year that you dont participate in an project, you get the full bonus.
Last friday, I filed a request for a certificate of employment from my current team lead, this is odd for her because I have never done it before, and she asked why I requested it. I said to her that we can talk about it, and she agreed but didn't call me, yet.
Lastly, another good friend of mine will be employed by my team soon, but for a fraction of the payment that I currently receive! He is doing the exact same work, and even worse, he is doing project managment for his main developer project too! And is getting less paid... I just cant...
Yesterday we needed to update a few cloud instances, the only other person who knows about setting up CICD and our OpenShift Containers than me is only in part time and works two days a week, his trainee didn't know anything, so it's up to me. This isn't hard or anything, but it shows that this system our mangement maintains will fail soon, maybe even with me going? I sure hope so tbh.
One of you guys said, I should go to my team lead and negotiate a higher pay, but the truth is, that because we are a big ISP we have an collective agreement for payment and are grouped by tasks (which is bull shit btw, because I'm doing tasks much higher paid than currently). This also means that I cannot simply jump in another group, and can only increase my current pay to about 115%, which is done automatically every year by 5% up to 115%. Anything above is considered extra, but I don't think they will go with it.
I will decide this week about my future at the old company, but I really don't know what to do...2 -
I'm fiddeling around with progressive web apps. I made something and hosted it on a subdomain. Today I made a typo and found my app on an other domain. All my assets and files are copied there. He even uses my SSL certificate.
It's not that spectacular. The app is nothing "revolutionary". It's just the first time it happend to me.
Have you ever found your code on other websites ? How did you react ?7 -
(probably a stretch and only Aussies will understand half of what I'm saying with this one buuut)
Not at all, I did a certificate 3 from TAFE in information and technology with a prominent amount of the course being on software diagnostic and web development and to this day have used absolutely 0 of the knowledge I gained and half of it is now deprecated and obsolete anyway ¯\_(ツ)_/¯4 -
When nginx decides to just NOT answer to any IPv4 requests, áfter 2 weeks of having it set up for IPv6, just because I updated the Let's Encrypt certificate..
self::facepalm(); -
Novice computer enthusiasts argue that an application is safe because it's end-to-end encrypted.. but they don't realize this doesn't guarantee safety because of MITM attacks on possibly exploitable midpoints.
A good example of this is mail servers using TLS 1.2 but one or two of them not verifying certificate autorities.5 -
I need to add a certificate to an Apple ID. First time doing that - should be no trouble.
> Open Xcode
> Xcode --> Preferences... -> Accounts
> Select the correct Apple ID
> Manage Certificates...
Hmm. What's this '+' button?
> Clicks the button
> Categories show up - no descriptions for their use beyond names. Maybe if I click one?
> Clicks arbitrary category
> Immediately creates a certificate and adds it to keychain
> Can't be removed from this window
> Must be revoked from Apple's portal and then deleted
I feel dumb.3 -
var rant: QuantumBool = PartlyTrue
So now I think I've got everything in my app right.... But I can't test it because ***** xcode doesn't create a **** certificate so I can deploy it to my phone (it uses motion sensors)
I deleted all the certificates of developer from the keychain because of a bug and now I **** can't deploy my apps for testing....
Please, does anyone know how to reset the icloud keychain to absolute nothing?7 -
Disclaimer - Day in the life of a whitehat student.
Whitehat Whitehat Whitehat
What is this????
When I attended my first white hat jr online free trial class, I got to know that the teachers does not know the difference between java and javascript. Infact they were saying blockly as javascript. I was knowing the difference between the same. There were 3 types of courses -
***Note : - This information is taken from the whitehat official website***
1.) Introduction to Coding :-
Sequence, Fundamentals Coding Blocks, Loops
(Teach us to drag and drop blocks of code.org(blockly))
2.) App Developer Certificate:-
Events / UI,Conditionals, Complex Loop, Logic Structures, Turtle Coding
(Advanced drag and drop(blockly))
3.) Advance Coding with Space Tech -
Extended UI/UX, Rich GUI app, Space Tech simulation in Space Lab / Game Lab, Professional Game Design.
(GUI - with tkinter(python), Game Design - Blockly(code.org))
These things are rubbish ......making GUI's is simplest with tkinter and the students who make games (with code.org) submit their codes to the whitehat community (because the teacher says "they will compile it to an android app, then you can publish it to playstore" --- this is for 1% students who are able to design their own games).
The thing whitehat do with code given by 1% best students:-
Export to HTML from code.org
Download HTML to APK Convertor
Setup SDK
Successfully converted to APK!
Publish it to Whitehat Jr console account
Credits of the students
Income of the exporters
Rest all students will only think to be the CEO of google one day.
My Opinion - StackOverflow, Unity for Game Development, Android Studio, Dart, Flutter and Kivy (using google colab for compiling the python code to an apk) for app development and Flask, HTML, CSS for web development.7 -
First day of job. Im doing jack shit. They just make me watch udemy courses of Azure and linux shell and bash scripting all for devops purposes so they can pay a microsoft certificate for me to pass and get certified and they pay for udemy courses. Im basically getting paid to watch courses on the job10
-
On every website I visit, first thing is to snoop who gave the SSL certificate to the domain
Idk why I do this2 -
For my local dev, set up my own root CA, added to trusted root CA in my machine, generated a cert for my local domain, signed by my own root CA, but the behavior is different across browsers:
Can someone help in making Google Chrome padlock green or grey (not red)?6 -
/Rant
Fucking hell it is so hard to find an internship these days.
Now, I am just an normal student from a small college in India. The companies who are even slightly big/established won't even consider your resume unless you are from one the best colleges or know someone extremely high up in the management. The smaller startups are so disorganised that they just want free labour for a website or an app. Now ok I admit I slacked on my entrance exams and couldn't get a good college, but at least give me a chance. Take an interview, a test something. My mates from even slightly better colleges get internship offers from bigwigs just because their college is better and companies hire from them regularly. They come to campus and also takes interns with them. Meanwhile, here we are. Sitting empty on our assess waiting for a service recruiter to pick us all up.
I feel like it's worthless to slog through this shitty college now. Shitty colleges in India are lost causes. Shitty infrastructure, shitty faculties and the number one thing they care about is ATTENDANCE. Fuck them and fuck the education system.
Oh and did I tell you that the college administration won't let you intern at a no name startup and you need a No Objection Certificate from the Department Head to be able to pursue your internship otherwise it won't count towards your curriculum.
I am sorry if this bothered any of you and sorry if I came out to be a really arrogant person but I needed someplace to vent. -
Final year at the university, and I only feel regret.
I hoed around in different technologies and fields. I had developed a game that i played with my friends back in high school. They liked it, so in varsity, i tried game development, 3d modelling scared me off, or rather I pussied out.
Web development, didn't go too deep, App Development with Flutter, didn't go too deep, Cybersecurity, went as far as passing the EC council's exams (the training wasn't that good). I tried putting my knowledge into practice, but resources like HTB aren't really free, you need money to learn (one would say i didn't try hard enough ) but now the certificate sits, useless in my resume, anything I learned fading away. I had an idea that applied blockchain, but my dad said "blah blah blah you could be targeted" (are there symbols for paraphrasing ?). I decided to decide on a stack (picked MERN, good idea ?) and work on it, but I feel like maybe tech isn't for me. AJR songs really hit now.
Final year at the university, and I only feel regret.2 -
The fucking worst part of my job is when I get thrown an error on a bug I'm trying to fix and it doesn't even contain an error message. For example, I'll try to verify a self signed certificate but I get an error and literally the only error thrown is [Error 0], no fucking message. If you try to track down the error in the docs they don't even fucking list errors. Times like these make me wish I could castrate people with my1
-
Is there a way to sign code for free (or atleast not need to pay over £200 for it)? Im a student and cant really afford much but I have been working on a website and made an electron build for it, however downloading the installer prompts the user to discard it in chrome, then running the installer prompts the user to select do not run in the windows security thingy as its from another computer.
What would be the best way around this if I cant get a certificate for it?2 -
I found out that apache had built-in support ( via a module - mod_md ) for automatic TLS certificate management with Let's Encrypt since October 2017.
Bloody Hell! Why didn't I hear of this sooner?
So, I ran off into my cloud to set up this so-called ManagedDomain ( mod_md ).
Found the module in the package repositories, installed it and started testing it out.
I started writing IfModule conditions under mod_ssl so that I wouldn't have to overwrite my existing TLS configurations ( which was already issued by Let's Encrypt via certbot, by the way ).
After a whole night of twisting and turning with the configurations, it turns out that the module in the package repositories were built for ACMEv1 and that API has been dead for as long as the module has been around.
I had noticed that the module was 'experimental', but I still hoped that they had the packaged the module.
Finally, I cozied back up with certbot. At least, until this so-called mod_md becomes stable and mainstream.
I hope certbot doesn't make a fuss. I'm sure, it got offended that I was trying to cheat it with mod_md.4 -
Mfw on azure/iot conference, one presenter shows his certificate validation, to connect to all devices in his house:
return true;
He said:
"lets not be paranoid about security" -
I just remembered I have a list of funny things I want to put in a tech movie. Just thought of new one today:
Programmer trying to do IT work and cannot locate the person they are trying to help:
I have a specialized set up skills. I will find you, and I will fix your printer.
The character would be a programmer and have a PHD. Printer Help Desk certificate.4 -
School decided to shut down their WiFi for "security" reasons (Everyone used a VPN and they were dumb fucks at networking, blocking sites like Google for having an invalid SSL certificate).
Now I'm forced to use my mobile data to keep using my Arch Linux laptop D:3 -
HELP, ITS A MESS!!
Here is a thing : 30 hours ago, i was completely free nd useless .Had a lot of reminders to open source & learn new techs for upcoming summer vacations .
But day before yesterday my friend called me to say that he got a 6 month internship in web from some (not so big) startup and they were looking for some Android dev too, so he gave my name and wanted me to mail him my resume.
I did, and within half an hour he called, discussed about the work and wanted to test me.(as i said i didn't had plans for internship , leave alone a sudden test, but the company was work from home so i didn't denied ) The test was a big one but easy, he wanted me to design 15 UI activities for an app by looking at the wireframe. I asked for next 6 hours, did it in 4.5 and submitted him the repo...
THE TROUBLE STARTS NOW...
1) He seemed impressed i guess, coz the next day when he saw my message, he Created a group of 5 people within a few minutes and started assigning tasks(?!) And in the personal chat what he said was just weird : "You are the lead for this project" (WTF??!?)
2)I had already mentioned him that i currently had exams so won't be doing any much of practical work but after every few grp messages, he was trying to assign me some task and a deadline. Weirdly, the test was actually a wireframe based on the project idea from some of their client , and just to show my skills, i have designed layouts of 15 of their activities of their app.
3) The negetive part comes like this: THERE IS NO MONEY AND ITS A 6 MONTH INTERNSHIP !! Fed up of this continues indirect deadlines, i asked him What's my responsibilities as a team dev, what will be my tenure and what will be the pay to which he replies that:
"there is no stipend for this, we have multiple projects lined up in which you can contribute and your internship period is 6 months which could be increased/decreased on the basis of your performance. You will get a PPO, Internship certificate , mentor support and intellectual code rights (which i am guessing means my 2 word name in the about pages of the apps i develop for them ) .And as a lead , you will be getting an experience in leadership skills "
I am really confused. Work from home seems like a relaxing thing , and being a team lead for the first time definitely would make me a little more confident. But why does it feel to be kind of fraud plan? Plus there is no pay and i would be ignoring my creativity ideas for this (not completely but i am sure anyone giving a job would expect some work from me eceryday ).
WHAT SHOULD I DO???3 -
Got my “Certificate” for SQL. What do you think? I have a few other just not sure if this means jack squat despite it being a free “certification”.9
-
UNOFFICIAL DEVRANT CLONE JAM
Challenge at least 3 participants of this spontaneous hackathon by presenting your devRant clone until tomorrow, 4 Dec 18:00 UTC! After that, I will repost entries for public rating by people of devRant.
Don't fret and show what you're made of. Each participant gets a certificate from dR Bulletin Board - and winners receive extra artistic prizes contributed by volunteers!3 -
That feeling when the Jenkins build fails and fixing it is both out of your scope and permission.
Dear devops, you should know when a certificate expires that we use to authenticate with external web services. -
!dev
Still haven't got a schedule for my master thesis defense after 2 months. The normal deadline is 1 month.
My professor is ignoring my follow up emails, even after the head of the program urging him to finish the review.
I feel discriminated as this didn't happen to other students that worked under him before.
I am job searching now, what if a job offer came but I still couldn't get a graduation certificate because of my delayed defense.
Will the university willing to compensate for the time loss not being able to work?
Maybe I should start finding out how to hire a lawyer in case I have to sue the uni.
😡3 -
I'm a tiny bit happy today.
Recently I've been noticing that I'm developing a tolerance for deeply crowded spaces. I don't know if the AC/DC concert was an effective shock therapy or something.
I'm not at the point where I can comfortably head outside into town by myself yet, but I have a feeling that it's not going to be too long until I can.
Maybe I can even find some joy in "being under people".
Maybe make some contacts, friends, whatever.
The biggest challenge will probably be getting over my, I guess "crippling" isn't the right word, but close-ish to it, self-conscious.
The worst thing is that as of yet, I have no idea why I'm still like that.
I think I know the root cause, but that's not something relevant right now.
Hell, I go out with friends, guys and girls, and eventually it goes like:
>"How come you are not dating someone?"
>"Can't really. Can't go out and fine someone, also I think I'm not good-looking enough."
>"Bullshit, you look awesome."
That's coming from close friends, hence why I don't believe it's just some "oh, he'll feel better if I compliment him" shite.
I somehow am unable to gain self worth from compliments.
[...]
In other news, I got a certificate at the FernUni Hagen for a course in IT project management.
Also, my programming and solution finding/problem solving skills are improving noticeable. I think.
I'm not in Uni or anything, but I feel like I'm getting more competent/professional in my development activities at work.
Contrary to what I stated above, I can gain self worth from good work done.
...which worries me, because I am afraid that eventually I'll only be able to feel good after having worked myself to the metaphorical bone.
In job college, I talk to my classmates.
Turns out, everybody is mostly sitting on their ass doing fuck all at work. They are telling me that I'm a workaholic.
I think that I'm either going mad, or that they are lazy fuckers.
From Wednesday to Thursday evening, three colleagues and I went to the CAS Partner Preview Day & CAS Customer Centricity Forum in Karlsruhe. Lots of talks (mostly boasting about themselves), some workshops and a lot of "networking opportunities".
Stuff which I mostly consider bullshit, but I never would've figured how effective it is to put on a smile and feign interest in things.
Some of that feigned interest turned into actual interest and we "networked" for hours.
It was a good training for social interactions outside my direct comfort zone.
Thank you for reading the ramdump of my mind.
$./felix
Segmentation Fault
Core dumped6 -
If you have got any skill, do you need a certificate to prove it to everyone?
What are your experiences on it?4 -
When your website's SSL certificate expired two months ago, the likelihood of me trying your software is less than zero.
-
Plans for 2019 are to release two products.
1. A text-based strategy game engine that will act as the core of two or more progressive web applications, using Node.js/Express, EJS, and SCSS. It will be proprietary, subscription-based, and playable 24/7 online or offline as a web site or mobile app with nightly/weekly/monthly events and items (think KoL, on steroids, with butter on top.)
I am currently undecided whether to go with MongoDB, MySQL or PostgreSQL, so any feedback - without derailing the other choices, and understanding that it needs to be minimal at first with the ability to expand to millions of users - would be appreciated.
2. I'm sculpting collectors figurines of guinea pigs, molding, casting and then selling a limited set that are hand-painted by me with a certificate of authenticity, as well as marketing blank versions of each with a choice of three colors (including white, and either red or black for eyes - a total of five) for people to either paint by themselves, family members, or friends.
This will also have a website that allows you to choose the breed and colors (changing the picture according to your choices), as well as allowing people to use it as a social media outlet - as if their own guinea pigs had profiles instead of humans. It's also planned to support rescues worldwide and educate folks about properly caring for cavies.4 -
Finally done with school. It were three years of ups and downs.
The downs were plenty and mostly in the way school material was organized.
We've spend years learning web development where the course should have been more broad (application development)
So by the time my first internship period of half a year approached I searched for a company outside of web development and ended up at a company which did serious games using unity C#. Those were the best months of my 3 years. I managed to push the company into a direction for a future even though it was reletively small.
After that I took up .net and got the MTA C# Fundamentals certificate from microsoft itself. (School offered the exam).
Then there was the 2nd internship.
Worked for a company who sold intranets to other enterprises and I developed a mobile app which connected a user's phone to their account on their intranet. Allowing to seperate work and their private life.
That project was fun but the company itself was terrible. 4 people at the office and the owner treated us as objects rather than people. The company was too small for such an environment and most of them were irritated 9 times out of 10. Glad to be rid of them.
Now I'm in the process of looking for a job and have a meeting with a recruiter tomorrow
Wish me luck.4 -
I'd love to meet the sadist that lead the Apple certificate and provisioning portal/process. Apple really needs to up their game, their dev tools have gone way downhill.1
-
Hey guys / and girls I've been of the grid as faar as social media is concerned for quiet some time... I assume the IT-world ist still as fucked up as it was when i left?
What happend? (Other than jase creating and deleting N-numbers of Accounts)
Also ist @linuxxx still alive? I just got a certificate error accessing https://linu.xxx
I missed you, devranters... Bring me up to speed14 -
Fucking linux foundation, bought the CKA exam last year and now they tell you if you take the exam after first of April the cert will only last 2 years instead of 3, wtf is this shit?
God certs are such a fucking scam! yet they are quite valuable if you have them on your cv so you just have to suffer in silence.6 -
Today i chartered new realms for me.
I created a new hyper-v vm on the company windows servers and added a 5th instance to it, but instead of running another windows server i installed an ubuntu 18.04 (cause i am a bit familiar with debian from my raspberry pi)
we have two servers, one which runs the 4 vms and a replica. I first had the new vm on the main server but it occured me to move it instead to the unusued replica machine. That kinda worked..i did a planned failover but the main server isnt configured to be the replica..and even when activating that it didnt work. This is weird.
For the moment i ignored that and proceeded to install nginx, mariadb and php 7.2..basically the lemp stack. I managed to setup nginx and a static ip adress for the machine (which was different from how i remembered it to do (in 18.04 its not done with the network conf but a yaml file).
in the end i added two different virtual servers, one for actual use and one for dev stuff (with phpmyadmin running for instance), listening on port 80 and some random other port.
as a test i brought a mediawiki onto the Port 80 server and it worked.
on monday i have to figure out how to implement the wildcard certificate i have for our company domain (internal dns simply routes intranet.company.com to the local server vm)
i am mighty proud cause all my experience with linux was with a raspberry pi so far and i am fairly certain i did it right and without shortcuts this time. (unlike my raspberry experience)
just wanted to share
(i also sweated a lot of blood when editing the hyper v settings as i did not set up the server in the first place)
((i also installed xrdp and a mate desktop, but i am less proud of that, but sometimes seeing folders graphically helps me)) -
Can you come up with something to spend money on that is even more useless and worthless than NFT?
I honestly tried. I thought of the most dumb crap but it had still some potential collection value or at the very least entertainment value.
NFTs don’t give you anything in return. It’s not a license, it’s not a currency, it isn’t shares, it isn’t art, not entertainment, not physical, not limited to some domain so not suitable to be collected by collectors.
You can’t even brag about owning it because you are owning just a kind of reference to it and not the actual thing. It is not like an ownership certificate because the seller of the NFT doesn’t even have the rights to sell the ownage for it, or the thing is not ownable. And if it was ownable, an NFT wouldn’t make you the official owner of it, because NFTs are not official.
I started to think about it because I can’t believe how many people spend so much money on literally nothing.
So, seriously let me know if you can up with something that beats NFTs in that regard.10 -
"Your connection is not secure". It is too! The certificate is valid to 2019, and in Chrome it's no problem. Stupid Firefox!3
-
Irony - The new TLS certificate was finally issued after 10 days of waiting. The project management portal I need to upload it to crashed this afternoon. No ETA on recovery time yet.5
-
Anti-features need to be fought with fire (metaphorically speaking).
This means they must be eliminated, not just made optional.
Why? Because an optional anti-feature is just one step away from a mandatory anti-feature.
For example, "secure" booting: https://youtu.be/vvaWrmS3Vg4?t=750 (Jody Bruchon)
Another example are disguised remote kill switches, such as add-on signing ( https://digdeeper.club/articles/... ). It started as optional and people were able to opt out, and everyone accepted it because no one expected what would come next.
All that was left was removing the ability to opt out, and then Mozilla has control over which extensions users are allowed to use.
For years, this feature sat dormant and users did not know of its existence. But in early May 2019, the metaphorical thread snapped and an expired certificate remotely disabled all extensions, wasting millions of man-hours of productivity.
From the digdeeper.club article:
"The funny thing is, the whole point of the extension prison was allegedly to increase security - and yet today, all security addons got disabled because of it! Shows how freedom always has to trump over security or it ends up in a disaster like this."
Evil needs to be nipped in the bud before it can flourish.2 -
A previous rant made me start doubting my choices.
I just graduated from college (but college here is probably not what you call college. You choose whether you do one more year and gain the 'x technician' certificate or you do two years and get the 'practical engineer' degree)
Hope you understand it.
Anyway, so I continued 1 year (I skipped 1 year so it's like I did the whole two years) and I have a practical engineer degree in electronics.
I love programming and really want to work in the field but (since I know nothing about the market) I don't even know if I'll get a job without going to university and getting a degree (which I want to get, I want to learn Software Engineering though, not CS)
So now to my question, do you guys truly think getting a degree will be a waste of my time?
tl;dr I want to get a Software Engineer degree, but a lot of posts say it's a waste of time. Who agrees and who doesn't?8 -
My DEV Story
After reading it, make a favor by ++d
Thought to be a software engineer in future
Learnt Python's basic modules, AI, and some ML
After getting intermediate in python, I started learning Java as my second language but could not do it because of JDK 8. Now don't ask me why.
Then, just stepped into game development with unity and C#, having a basic knowledge of C# with no experience in making a game myself. This is called ignorant.
After getting no success, I started learning PHP and got the chance to make a website having no content ;)
But it cannot meet my requirements
Soon I got content that AdSense regards as no content, no problem
I started learning Flask, a module in python for making web applications.
It took me 1 month to complete my website, which can convert file formats.
The idea for deploying it to the server
Sign Up to DigitalOcean
Domain Name from GoDaddy (I know NameCheap is better but got some offer from it)
Made a VPS for what I have to pay $5/month
Deploy my Flask App using WSGI server
This is the worst dev experience
.
.
.
.
Why in all the tutorial, they only deploy a flask app which displays Hello World only and not anything else
WSGI or UWSGI Server does not give us permission to save any file or make any directory in it
Every time........ERROR
Totally Fucked Up
Finally, it works on localhost with port 80
I know this is not the professional way to host a website but this option was only left.
What can I do
Now, I cannot issue a free SSL certificate through Let's Encrypt because **Error 98 Address Already In Used**
The address was port 80 on which my Flask App was running
Check it out now - www.fileconvertex.com8 -
This fucking manual with their abstract ssl section is driving me nuts. Why do you need so many keys? Fucking jks!
Fuck your pseudonyms, and why in the name of the holy cunt do you have to cope them with aliases?
Jerry, barry, tango. You all get a fucking certificate!
Jerry is an asshole, barry is a cuntand I don't even know who tango is, but fuck tango in particular! -
FFS! having nodejs server on heroku, added certificate successfully for https, yet when going to www.example.com it uses http on prod and maintanence page while example.com goes to https.
All my attempts to catch http connection failed.
This is the definition of me wanting to bang my keyboard and problem autosolves itself while I am doing it!
Where is the my one click and everything is ready. I want to code back end and front end not spend 2 days trying to figure out https bullshit for unknown reason. -
After nearly 4 weeks, my account has finally been generated to access the VDIs for our development environment. I tried to authenticate with my smartcard and kept getting errors with very bland messages. after hours of digging through (useless) windows logs, someone told me that the certificate authority that signed my card isn't in the trust store for the VDI backend. Based on the current pace of things, I'm guessing it's going to be a while before this gets sorted out. My internship ends in 2 weeks and I haven't been able to do anything yet :/
-
FINALLY got Chrome to accept my self signed ssl certificate on OSX!!!!
F*ck this has taken waaay to long....
For anyone seeking advice, look here:
https://alexanderzeitler.com/articl...9 -
Since last update (version 63) Google chrome forces all *.dev domains to use https. Guess who used a *.dev domain for his local development virtual machine and now have to switch to *.local ...
Removing the HSTS Rule from chrome seems not to be possible and surprisingly I could not use a self signed SSL certificate to make it working again.3 -
I’m proud to announce my collaboration with IZIPIZI France and Carl Zeiss. Enter the Antibouba Glasses!
Any successful public persona knows how important mental hygiene is. Our product is aimed at public personas who are either mentally special or not yet used to haters.
Antibouba glasses work like this:
1. You put them on,
2. You can’t see boubas and anything they broadcast.
Works like a charm with any medium including real life. Also blocks bouba-insinuations of non-bouba people.
Comfortable lightweight frame, highest grade oleophobic coating, also blocks 60% of blue light.
Dm me to make an appointment. Provide your kiki certificate to be included to the shortlist. My telegram is in my bio.15 -
Follow up on my internship:
>The recruiter told me to use whichever stack i prefer for the full stack development of their e-commerce website.
>I chose MERN stack.
>After completing the project 90% in 2 weeks, he wanted to host it on his shared hosting platform of godaddy.
> It doesnt have shell access nor allows node.js to install on it.
>Now he wants me to convert my node.js code to PHP using Dreamweaver software.... Shut up already. Give me my money and certificate and leave me the fuck alone.5 -
When you commit a more readable README on GitHub to a non native English speaker sends you an email a day later asking for help why his self-signed certificate isn't trusted by his browser or his other computers.
The project he's working on is to sniff Wi-Fi packets that are encrypted through a MiTM attack. I've now stopped following this project and moved on.
Has anyone else had any stupid questions from debs which were about the key purpose of their project and how to go about it? -
Spent days to setup a newer-Android version with reverse-proxy-HTTPS certificate in its CA store + one that'd support Google Play and signing in (old school man-in-the-middle).
FINALLY got the API calls of this 1 app whose unofficial client I wanted to make coz their main sucks ass. Just to get stuck on the phone-number-based OTP that they use for their login (:
They send a unique token for each OTP request, I assumed they're using some hard-coded string based function, which they decrypt on their backend to verify.
Downloaded their APK and decompiled. Went through dozens of weird-ass-named classes (coz decompiled). For the 2nd time I thought I had it!
But no -.- they call Google's Firebase messaging for the phone-num OTP n that function simply called firebase, looked into that service n ofc it's very tightly coupled with the calling API's backend
It was fun while it lasted I guess~~~1 -
Nothing prepares you for Windows deciding your program as a virus for all your thousands of users and having no idea why.
It wasn’t virus related at all. It needed a new signing with an updated certificate. Did the error say anything like that? Hell no . -
lol......a random deployment made me discover an expired certificate in a lower env.....the same will expir in prod in a few days.....I would be fucking screwed if that happened.....best part it only a redeploy/restart would have triggered the whole damn thing
-
Learning rust or go. Not sure which one yet, but I'm really interested in giving both a shot at some point. I just need to decide which one first, and build something nice with it.
Will probably go for another AWS certificate too, probable Architect associate.4 -
Listing my skills:
I have published react-native apps.
I can build an extensive backend/API thing with node.JS/a good framework.(worked on something for my countries national football league during an internship as main/only dev)
I have some experience with c# but havent used it since school.
I have no issue getting into new frameworks/languages, as long as its not PHP.
I have experience working in software teams.
I have experience running my own company(Online store selling airsoft supplies - i quit).
Im working towards getting familiar with Tensorflow 2.0.
I have a Cambridge English assessment certificate at grade C2.
I am currently working(for 0 pay for 50% of the shares) on developing a social media app that uses location tracking on a 20-200 meter scale.
I have ADHD and have been spoken on/warned due to its effects( i.e. forgetting to report progress, getting distracted, needing stimulation so i browse youtube(even have it playing in the bottom corner sometimes), poor communication.
Am i worth anything at all as a developer... im getting pretty depressed due to not having an income at this point... and I dont think anyone will hire me4 -
- Stay relevant in technology
- Keep working from home and writing code
- Try to finish some personal projects
- Post more content online
- Print more 3d stuff
- Learn Blender
- Gain CKA k8 certificate and some other cloud related certificates
- Try to find one more nice remote client
That’s more on less everything related with dev / computer stuff. -
Today I discovered trial and error driven development for myself:
Me, reading spec..
Spec: „Do something with an CSR“ (not the exact wording :D)
So instead of just googling C# + CSR and copying the code examples,
I went like:
What means CSR -> Certificate (Something Something)
-> could be this namespace (Something with „Crypto...“ in its name)
-> could be this class (Something with „Certificate“ in its name)
-> take the easiest overload (string is always nice)
-> try filling in the parameters from the spec
-> start debugger and inspect properties
-> repeat if necessary
I don’t know if this is the correct pattern to proceed my project with...
But hey, today it worked and now I also know, what „distinguished“ means -
Sometimes you don't need to think of an interesting or funny rant because life does it itself!
Several years ago I did my Bachelor's degree in Business Informatics which was not Informatics at all - regret at that time that I had choosen the subject.
After that started working for HP in a business/ marketing role which was quite nice but missing any technics.
So I internally applied for a dev role that was quite purely based on Linux knowledge that I did not have. Seems I convinced with my will to learn something new every day. And I did!
After two years in that role I now have my Linux certificate (CompTia Linux+), did a great job (according to my boss) and I am starting my Master's Degree in pure Informatics next week!
That led me to the most important decision - registering here at devRant. Seems we are colleagues now ;D.
Wish me luck and thank you all!1 -
Fucking Comodo certificate authority expired on saturday....guess who is enjoying monday morning. Fuck!
-
AHHHHHHHHHHGGGH
I HATE VPN SETUP
- Trying OpenSwan
Installing open swan on a Debian machine.. setting up the config.
Restarting openswan. Syntax error. No syntax error to be found.
Different tutorial.. it starts! Try to connect.. I can’t connect. Look at the logs. No errors.
Tcpdump. My traffic is coming through.. all fine.. try to connect again.. it works! (Nothing changed!)
Try to ping somewhere else.. no connectivity.
Try to ping an IP in the same network.. works fine. So I have connectivity, just no internet.
Spend an hour finding out about traffic directions of which no one seems to know what they really mean.
Boss tells me to stop using openswan because it’s deprecated and replaced by strong swan..
- Strongswan
Reinstall Debian machine, install strongswan. Copy openswan config. Oh, they’re incompatible? Look up strong swan config, and the service starts.
Connect to the VPN.. it works! Again, no internet, just connectivity in the same network. Spend 2h debugging the config, disable firewalls everywhere, find an ancient bug in the Debian package related to my issues.. ok, let’s try compiling from source.. you know what, let’s not. I’ll throw this Debian machine away and try something completely different.
- pfSense
Ok, this looks easy enough! Let’s just click through the initial setup, change some firewall rules, create an L2TP VPN with a simple wizard.
Try to connect to VPN. First, it times out. Maybe a firewall issue? Turn off firewall.. ah, something happens now. I get an error message right after trying to connect to the VPN. Hmm, the port doesn’t even get opened when I enable the firewall.. this implementation seems a bit buggy.. let’s try their OpenVPN module.
Configure OpenVPN. Documentation isn’t that clear.. apparently a client isn’t actually a client but a user is a client.. ok, there’s a hidden checkbox somewhere.
Now where do I download my certificate? Oh, I need a plug-in for that.. ok, interesting. Able to download the certificate, import it, connect and.. YES!!! I can ping! But, I have no DNS..
Apparently, ICMP isn’t getting filtered but all outbound ports are.. yet the firewall is completely disabled. Maybe I need outbound NAT? Oh. There’s no clear documentation on where to configure it. Find some ancient doc, set it up, still no outbound connectivity.
AHAHAHAHHHHHHHHHHG
Then I tried VyOS. I had a great L2TP VPN working in less than 15 mins. Thank you VyOS for actually providing proper docs and proper software.3 -
Guys, have you experience in taking AWS Certificate as a SysOps Admin associate?
I am curious to know about the preparation s and all the matters during the exam?
Thanks4 -
Yesterday I spent 7 hours on a silly SSL certificate error. The exact same webpage gave me "certificate revoked" error when viewed in one browser/device but it displayed fine on others!
But everything is back to normal today! As if nothing happened!
I'm not a web dev, so I have no idea why this happened. I'm just pissed that I wasted 7 hours on a thing that wasn't my fault... -
So after my webhost told me the reason my ssl was broke was due to an issue I had no control over i threw a fit any 12 year old would be proud of (im 22) bought a new domain name and ssl certificate. Created an account on digital ocean for the cheapest tier and got to work learning about nginx (just to learn my new thing for the day nothing against apache) real quick
Few hours later https://jessiejfoley.dev is working
No content yet. But no server side errors I cant fucking fix through a limited dashboard
Don't know if that counts as petty but I feel better now7 -
My DNS provider does not have an API. They do have one... That is wrong... But on the description page, they say we have to open a ticket to be given access. No requirements. Nothing...
And then I am told "they do no longer offer dns for private hosting". I don't even host with them, I only have a domain with them.
But the magical word is no longer. That means they did offer it. In the description of the API it still says "and for everyone who feels comfortable interacting with a REST API." Oh, and they asked anyone who works on it to be so nice and share any SDK's they might have coded up. Would have shared my SDK. Would have... If no Rust SDK was available yet.
So, what the fuck...
The problem with that is that I need a wildcard certificate for my homelab with DNS validation. So, I need to dynamically set a txt record. Now I wonder... Was this done on purpose? They are selling wild card certificates. Letsencrypt are giving them out for free. I bet they deactivated it, so they can sell more...
Anyway. Solution time.
Short term: I make my own API with black jack and hookers... And selenium.
Long term: I need to fucking move my domains to a different provider.
But what the fuck... What the fuck?7 -
Part of my remote work is to have a daily call reporting in on what I have done yesterday and what I am about to today. My colleague calls me for it. She's hired as a tech support and is suddenly assigned to take note and report on my work activities to our boss. Several times, I caught her pretending to know what I'm talking about like with Puppet configurations, Firewall diagnosis packets, ActiveMQ, Regex, etc. Most of the time, I just let it go as its not my job to validate her knowledge on these different but many services. Just do the call, get the report in, carry on. How difficult was that?
Yesterday, our call was left sour because I somehow blew up. I think I've reached my patience with this woman's assumptions to how these services work. Now I feel guilty for yelling at a lady but goddamn she stoopid for fibbing through my ear. Somebody help! What do I do?
If I report to our boss about her technical incompetence (politely), she might get sacked. She's a good tech support as long as she still has her trusty manuals by her, she can fix specific problems. But when it comes to unknown tech to her, she assumed she knew.
If I tell her about her weaknesses, however constructive I can get and as politely as I can get, all the while complimenting something about her, showing her how to improve herself, maybe she'll do better not to ask silly questions like buying a Puppet certificate? At least getting rid of ignorance would definitely help but not sure how she would take it. The worst thing I would imagine is her backfiring and yelling at me and then we ended up fighting.
If I kept quiet and tuck it all into a can, it will eventually implode as we go on.
This is not about her gender. I don't see her as a woman. I see her as a tech support engineer who should know her stuff.1 -
I'm in need of advice. I reckon this is no stack overflow but that's probably for the best as I wouldn't feel as comfortable posting there as I am doing it here. So, back to the question: I'm currently working with legacy code, written in .NET 2.0. This code is responsible for calling upon PEC services in order to finally create personal smart cards. I was tasked with the job of creating a repository system that would allow the program to call on the old legacy services or the new ones without any distinction. We are talking about SOAP services in both cases. The issues is: the new service definition is comprised of soap policies. This wouldn't be a problem per se, with more modern version of the framework, but with .NET 2.0? Yes, it is. It doesn't support policies and signing the body with a certificate right out of the box. How can I manage this? I feel like the only way would be letting the proxy class do its thing up until the very last moment: intercept the SOAP request before its sent and modify it according to the specifications. But I reckon this is very bad practice. Is there any other way out of this?
Thanks for anyone that would like to help. 🙂6 -
My way through front end started with a simple request of changing a blog CSS.. which I knew nothing of. Looking back it feels odd starting with CSS then HTML, JS and now first PHP; but oh well what ever works?
That was a couple of years ago and lately I've done couple of minor freelance projects and have helped students at my university with it (I studied network engineer because I doubted myself..).
I never felt that I knew enough of programming or front end.. that I wasn't really "good enough" to apply for a job even though I almost finish the frontend certificate at FCC, did the Android application schoolar via Google and have worked a lot with Adobe CC overall and help people with their front end issues from school, even with library's I haven't touched (mighty power of Google search and quick learning).
Now sit here as a stockmen in my lunch break being all excited for one thing based on a conclusion I took last week.. if I never try to follow my passion for it, I'll stay a stockmen.. so I applied for s frontend job and got a call in for an interview today. I still doubt myself but figure I must try.. I do not wish to stay where I have been the whole year but to move on and work as a front end Dev. If I get it.. than Santa came early and if not.. well.. keep on evolving and trying I guess. *Holding thumbs* -
So I'm building this environmental monitoring system for one of the Labs to monitor Temperature and Humidity. the "software" that comes as part of the package with these sensors is really just a website you host yourself if you don't choose the cloud option. No big deal really, (see my previous rant about getting windows server through SSC) I setup IIS and get the "software" registered get a couple sensors running looks good. However I don't like the error messages that popup because it's unsecured. do some reading and I find out that most browsers will give you a warning if your not using HTTPS even if it's for internal use only. OK we'll how hard can it be in implement encryption, turns out it's not that hard and you can do it for free how with letsencrypt and other places. I like free, now i have to use SSH to get into the server and run an ACME client. Hey open SSH is part of windows now cool, download an ACME client SSH into the server and nope doesn't work. Oh right I'm behind a corporate firewall and a bunch of other shit I can't control. Why is so damn arduous to setup this god dam internal website and the problems aren't even the site. Now I'm playing with AWS spinning up an instance to be able to try and get an SSL certificate just so i don't have to tell people it's OK to trust this site ignore the big angry warning.
Best part is other similar internal sites don;t use SSL and all have big messages about someone stealing your soul if you go there and these are commercial systems that run all the HVAC for all the campuses across Canada.
I need more Tylenol. -
i need an adult. I know noone who would understand my worries, so you guys need to be it.
i have a nextcloud running on my raspberry pi. performance is horrible, dont ask, but it works.
i mostly use it to backup the photos of my phone sd card every night when my phone charges. Internally this works good. If i am elseplace it wont for obvious reasons.
In my youthful joy of doom i opened port 443 and forward it to my raspi. I get internet via cable and my ip is pretty much static (it was the same for 10 months). So external access is provided.
Now i thought, its stupid that i cannot sign an ssl certificate cause i dont have a domain. Lets buy domain. But before i do that i did some try runs with duckdns to test the principle.
Some back and forth, it works now. Pretty god, i could even make a cron job on the raspbi to renew (that should work right?). Only problem. randoname.duckdns.org doesnt work internally. Or should not at least.
So i googled a bit and it turns out that my router (a cable fritz!box i bought myself) can be a local network dns. Or cannot. Regardless what i try, it doesnt accept the changed config file.
Now the problem.
It works anyway. randoname.duckdns.org points to my external "static" ip and resolves to that from my internal network..so it works on my phone or laptop. if i traceroute the thing it goes via two hops out and finishes in less than 1ms.
Now to the problem:
I have no fokkin clue why. The expected behaviour would be that it shouldnt work. If i do what i intended todo on pc in the hosts file tracert works correctly, directly pointing to the internal ip.
What i cannot figure out, is it the fritz!box being smart? Is it my ISP being smart?
Reason to rant: i have absolutly NOONE to ask, i know not a single person who would even understand what troubles me. I want to learn, i want to know WHY not just some mindless russian patchwork of "if it works its good enough".
thats depressing.8 -
So I've to take a Google Developers Certificate because it's required by my company, and the deadline is in a few months. The Google website for taking the exam is broken. I mean, the website for a web development certificate is broken, am I supposed to fix it to pass the exam?
Oh, I was forgetting. There isn't any "contact us" button. Nice job for a 150$ worth certificate3 -
How to deny a "friend" who is asking me to lend some money ( what he is asking is the largest anyone ever have asked me )?
What's the social etiquette here?
P.S:
I don't have good impression about him.
Few weeks ago, i changed my plans for him so that he could tag along with me to a place quite far away to apply for our course certificate . He delays the plan, not doing what he was supposed to do and had told me he would do.
I end up wasting 3 days waiting on him and finally goes on my own ( how it was supposed to be before I offered him free ride in the first place )
I don't like people who can't keep their words or let alone lie or don't tell you if they are not intending on keeping it.
Now I'm amazed by his nerve to ask money like that.8 -
I’m in between jobs due to the pandemic and need structure in my life. I have ADHD and no structure makes me a sad panda. I’m desparately grasping for some online educational content bc my previous tech stacks are a little old and need to keep up with the modern stacks so I can get a new role and have a structured regimen that school gives.
Unfortunately most of these courses are just boring as shit video lectures where you watch the developer code! WTF!! They’re advertised as “you will code a real world application” and 🤣you get a certificate at the end!
So if anyone took a full stack curriculum using modern stacks like the MEAN stack where they actually developed something themselves, post it here please?6 -
You would think that the top information gathering government agency would be having their https certificate configured properly but apparently not...
https://iad.gov/NIETP/reports/...1 -
Spent a couple hours trying to obtain an SSL certificate to encrypt my site last night... No luck so far. It kept saying it doesn't have access, when I verified that nginx serves to port 443...20
-
I just signed up for the preparation course for the Offensive Security Certified Professional (OSCP) certificate. Does anybody have experience doing this course? or has maybe some tips for the exam? or any learning suggestions?
I‘ve decided not to get a CEH certificate because its just too theoretical, the OSCP is way more practical and i think there is way more to learn from this course/exam1 -
Nobody thought about the scenario, where you received your vax certificate via pdf on your phone and wanted to register the qr code that was inside it? Like using a screenshot of the code or the pdf itself? The covid app on my phone demands to scan a qr code using my phone's camera. Understandable, if you receive the code on a piece of paper. But what about doing it this way too?7
-
!rant
I need to quickly test how my web app works on mobile
PROBLEM: some of my features require https. I can test from my pc on localhost just fine, since localhost works.
From Android, however, those features are blocked, since I reach my webapp with my IP address; it is not localhost so Chrome raises a middle finger when I try to access the camera from an unsecured website -and rightly so.
I really need to get these tests done, how am I supposed to do?
I install an SSL certificate on my pc?!?
I disable Chrome security checks on my Android?!? (is that even possible?)
I install bluestacks real quick and hope everything works fine?!?
Wwyd?4 -
So i just learned aws elastic beanstalk (EBS, ECS, ALB, EC2, Amplify, S3, RDS, SQS)
Essentially i learned how to operate with aws to deploy a full stack web application with custom backend i built, with security and jwt token, certificate manager, ssl/tls to set up https and redirect from http, and react/angular/nextjs on frontend
All with custom CI/CD pipelines docker and other devops shit
But i still feel like im missing on A Lot of stuff regarding aws. I havent worked with Fargate for example and dont know how it works or when to use it, but i heard other devs use it
Can someone list me a number of things i as a dev should know more regarding aws?3 -
Since Electron is getting some well deserved flak, I think I'll add my two cents.
Why in the actual fuck can it not proceed any way to allow us to USE OUR SELF FUCKING SIGNED CERTIFICATES.
Yes, security hole, but for messing about with new software, I'm not going to pay a CA for a certificate so I can put it on a server that only I and a few select individuals use!
At least give us a usable frontend for allowing our self-signed certificates so I can use my fucking server!1 -
Anyone's got a CKA certificate (Certified Kubernetes Admin)? I'm considering taking the course and getting certified, but a quick search on the internet scared me a little. The course and exam aren't that bad, but the experience of the PSI browser the exam must be taken in apparently is awful: it's a lottery whether it'll work or not, even a passing precheck test does not guarantee anything. People are setting up separate OS installations just for the exam.
Others say that their laptops cannot be used for the exam because of dual-gpu (even on windows).
This sounds like a nightmare.
I'm on LinuxMint 20.3 and I'm actually considering a separate installation of clean ubuntu.
I wonder, has anyone tried taking it? What's the experience? Has anyone tried taking the exam using a Linux (ubuntu?) live-boot?5 -
I always find it hilarious when I hear anyone say "I worked my ass off during my internship".
Because I did NOTHING at mine. I only showed up, browsed YouTube, drank company coffee and left.
I didn't have to pay them and they didn't pay me either. 3 months later, they gave me a certificate. That was the entire ordeal.5 -
Spent a couple of weeks on writing a cronjob which updates a certain value in the application config, and spend the last few months on testing it in different environments to make sure it does not fail in production. Ran the deployment script, and the damn cronjob fails because of ssl certificate on production. fuck me
-
Deadline for your devRant clone: 18:00 UTC!
Help and chat: https://matrix.to//...
Posting guide: https://kbin.melroy.org/m/drbboard/...
Works in progress: https://kbin.melroy.org/m/drbboard/...
Artistic prizes for winners, certificate for everyone. -
For someone not deep-into-security, can someone tell me why "encrypted"/"non-compromised" communication is hard?
Wouldn't a private server that holds conversation in-memory (imagine Dictionary holding U2U GUID-GUID list of 'msg' objs) suffice?
Incoming IP info is disregarded and nothing gets written on-disk ever
Need to erase everything? just reboot the server, it's all in memory anyway
To avoid man-in-the-middle, pre-handshake check cert integrity by exposing the certificate-fingerprint by another endpoint, if the fingerprints match, proceed to switch to websocket
Wouldn't this be wayyyy more secure for actual anti-establishment talks than all the fancy probably-backdoored software that exists today? .-.
Hell it's easy enough that someone could make it go live in a few days, keep it up accessible if you know the IP and port to communicate and close-and-delete when done16 -
Im deploying a nextjs site via amazon aws amplify. Working with amazon is truly hell. But once it works its truly amazing. Jess bozos have outdone himself. I still dont understand what im doing every time im using aws. Its just trial and error every time for me. (note i still cant deploy the site to my domain there is some build error. Hours of fucking with this and still cant resolve it). However i somehow managed to assign an Amazon SSL Certificate to my domain9
-
Was about to post a pic of my mobile sites certificate from Google, and then I realized that my real name would be revealed to possible co-workers who might use this app.
Whew!!!!! Dodged a bullet. -
Why is GitHub's certificate showing up on semver.org? I can no longer access the site normally because of the browser warning. Who's responsible for this atrocity?
I checked with a VPN and without, same result. Can someone confirm?
https://www.semver.org/5 -
You know my earliest design relating to ML was something intended to mimic human evolution by creating large trees of ideas and rules regarding emotions and how they regulated decisions and priorities.
I somehow think that was a better approach. It was more complex but it was better.
and i could reproduce the stolen diagram from memory as well.
hey is it illegal for someone to sell the contents of a storage locker with your birth certificate in it ?2 -
So I need some advice... I've been applying for jobs as a web dev for a while now but not so much as a bite. I think a large part of this is a lack of formal education. Do you think it's worth attending a class just for the certificate? Maybe do a bootcamp? If you got hired while being self taught how did you do it?1
-
In my lieu of female interns and employees they target more on getting proof of their knowledge (certificate or some kind of letter) while males generally don't care about certificates and stuff, they just wanna learn. Has anyone ever seen things like this?2
-
In the modern world, a human is not a human. The human is only human if they have ID, passport, insurance, bank account, credit card, facebook, covid certificate. Otherwise you’re nothing3
-
Advice/input welcome:
I’m nearing the end of my first year of a 2 year SE program at college. I’m considering leaving at the end of this year and looking for a job, but I don’t have much of a portfolio and feel insecure about my ability to make it in this industry. I know it’s probably just impostor syndrome, but it’s a really hard feeling to shake. It’s a trade college, so the program is designed to have students work ready by the end, but there is a certificate for having completed the first year even though most students do both years.
I’m competent with java, web dev including JavaScript vanilla and bootstrap, ok with python and a lil c++, and I used c# over last summer in unity to develop a game I never finished. 2nd year is mostly more of the same, just more in depth. I’m feeling like idgaf about school anymore, and there are some things happening in my life that would benefit from a full time salary and a decent health care plan.
I spoke with an alum of the program who left after one year to work, and he strongly suggested I stay for the 2nd year, but wasn’t clear on why he thought that.
So what I wanna know is, from folks in the workforce, do you think I should stick it out for the last year and then look for work? Or would I be ok to just... go and start looking for a job now?2 -
// Rant 1
---
Im literally laughing and crying rn
I tried to deploy a backend on aws Fargate for the first time. Never used Fargate until now
After several days of brainwreck of trial and error
After Fucking around to find out
After Multiple failures to deploy the backend app on AWS Fargate
After Multiple times of deleting the whole infrastructure and redoing everything again
After trying to create the infrastructure through terraform, where 60% of it has worked but the remaining parts have failed
After then scraping off terraform and doing everything manually via AWS ui dashboard because im that much desperate now and just want to see my fucking backend work on aws and i dont care how it will be done anymore
I have finally deployed the backend, successfully
I am yet unsure of what the fuck is going on. I followed an article. Basically i deployed the backend using:
- RDS
- ECS
- ECR
- VPC
- ALB
You may wonder am i fucking retarded to fail this hard for just deploying a backend to aws?
No. Its much deeper than you think. I deployed it on a real world production ready app way.
- VPC with 2 public and 2 private subnets. Private subnets used only for RDS. Public for ALB.
- Everything is very well done and secure. 3 security groups: 1 for ALB (port 80), 1 for Fargate (port 8080, the one the backend is running on), 1 for RDS postgres (port 5432). Each one stacked on top and chained
- custom domain name + SSL certificate so i can have a clean version of the fully working backend such as https://api.shitstain.com
- custom ECS cluster
- custom target groups
- task definitions
Etc.
Right now im unsure how all of this is glued together. I have no idea why this works and why my backend is secure and reachable. Well i do know to some extent but not everything.
To know everything, I'll now ask some dumbass questions:
1. What is ECS used for?
2. What is a task definition and why do i need it?
3. What does Fargate do exactly? As far as i understood its a on-demand use of a backend. Almost like serverless backend? Like i get billed only when the backend is used by someone?
4. What is a target group and why do i need it?
5. Ive read somewhere theres a difference between using Fargate and... ECS (or is it something else)? Whats the difference?
Everything else i understand well enough.
In the meantime I'll now start analyzing researching and understanding deeply what happened here and why this works. I'll also turn all of this in terraform. I'll also build a custom gitlab CI/CD to automate all of this shit and deploy to fargate prod app
// Rant 2
---
Im pissing and shitting a lot today. I piss so much and i only drink coffee. But the bigger problem is i can barely manage to hold my piss. It feels like i need to piss asap or im gonna piss myself. I used to be able to easily hold it for hours now i can barely do it for seconds. While i was sleeping with my gf @retoor i woke up by pissing on myself on her bed right next to her! the heavy warmness of my piss woke me up. It was so embarrassing. But she was hardcore sleeping and didnt notice. I immediately got out of bed to take a shower like a walking dead. I thought i was dreaming. I was half conscious and could barely see only to find out it wasnt a dream and i really did piss on myself in her bed! What the fuck! Whats next, to uncontrollably shit on her bed while sleeping?! Hopefully i didnt get some infection. I feel healthy. But maybe all of this is one giant dream im having and all of u are not real9 -
I have a customer who forget to renew his internal SSL certificate. It expires on a Sunday. I have to generate the new CSR and call the relevant people to approve the signed certificate before I can use it2
-
Is freecodecamp frontend certificate worth something in the community, I am about get mine soon only two projects away...5
-
I've been since friday with my boss trying to implement bridge between an SDK of another company for Android and iOS (yes the project is in React Native).
Today I've managed to put all the code that is needed to make that bridge and made tests. But in order to test the SDK functions, we need the info that should be easy to request through a service... The service is made with soap, using a certificate .p12.
*No problem, follow the documentation and everything will be okay* I thought... Even the example request in the docs doesn't give a 200 response. And when we finally made a 200 request, it still returned and error code...
And this isn't even the best part. Today we talked to the person that has been collaborating with us, and even he says "Implementing with this company is always hard". Even their worker knows it!!!! -
I am burntout because my last job (which i quit, you can read the drama at my profile)
So, now that I am unemployed and in lock-down I want to learn new things, but idk where to start.
I want to try python (I am mostly did backend stuff, with java and node). And I want to see if i can do backends with it. Idk where to start, there are certificates on it?
I always wanted to learn about security/ pentesting (more for curiosity than anything), again, idk where to start or where to get a course/certificate).
Where to start with devops? I have no clue about front-end either...
So, any advice? Right now I am a bit lost about... well, everithing and need to do things to keep me bussy.
Thanks and sorry if my english is not perfect, It is not my native language.4 -
A friend and I made a voting application that was used for student body elections that and subsequent years. We got a certificate of excellence or something.
-
I have completed my graduation in compter science from youtube and stackoverflow but still I got an university certificate.2
-
Got paid to follow the wrong instructions on installing an SSL certificate.
It's working now but only after a few hours of trying different things1 -
I deployed a website and hosted it today. Also used a SSL certificate but now when I'm opening it on another device with its own data connection, it is not loading and showing error "This site can’t provide a secure connection".
But if my device is connected to wifi, the website is functioning normally. Can anybody help me out? My website - https://covid-india.live/4 -
Wow, angular is still a pile of shit in 2024, nothing changed.
I renew my https://devrant.com/rants/7582990 previous rant
I've recently switched to angular 17, not because I'm a masochist, but because, unfortunately, we have a huge portal for a super huge multinational enterprise and it's made in angular.
It's 2 years worth of work, and they've suddenly decided it's cool to switch to angular 17, because standards, because it's new etc.
Now that this crap angular 17 came out I prepared my hair pulling room, where there are whips and self torture instruments, and I've typed into browser url they "super new super modern super efficient" angular.dev, which apparently is their new official super 1337 documentation site (spoiler, it's shit as the other if not worse).
Since they realized angular was pigshit, they decided to eviscerate it like a sacrifical lamb in ancient maya age and add lot of stuff that makes it modern and more friendly.
They think they made the big bang of news, but they implemented stuff that exist since 10 years after people were cutting their wrists in their github "request a feature" section for years.
Well, to make it brief, they made a whole clunky obscure way to bootstrap it and didn't even had the decency and modesty to properly document it (they never learn, sigh....)
In any case I put up a .NET minimal API that works well, and a small angular app with a Hello world page that fetches a "hello word" string from a test api route.
The api works everywhere, browser, postman etc etc.
But ta-dahhhh, in angular throws error.
They put various way of using http client. Main 2 are withFetch() and without.
withFetch() says "as error "Invalid self signed certificate" and withoutFetch "Unknown error".
Apparently we have to do shenanigans also to do some dev development3 -
I have the following scenario with a proposed solution, can anyone please confirm it is a secure choice:
- We have critical API keys that we do not want to ship with the app because de-compiling will give access to those keys, and the request is done before the user logs in, we are dealing with guests
Solution:
- Add a Lambda function which accepts requests from the app and returns the API keys
- Lambda will accept the following:
1. Android app signing key sha1
2. iOS signing certificate sha1
- If lambda was able to validate them API keys are sent back.
My concerns:
- Can an attacker read the request from the original (non-tampered) apk and see what the actual sha1 value is on his local network?
- If the answer to the question above is yes, what is the recommended way to validate that the request received is actually from the app that we shipped and not from curl/postman/script/modified version of the app11 -
I’m 20 years old MERN (Mongodb, Express.js, React.js, Node.js) Stack Developer, Working in a start up as a full time employee. They’re paying me 20k (INR) (< $300)/month. I’m in 2nd year of my college for my Bachelor’s Degree in computer Science. My Job is work from home. I’m doing programming for 4 years now. I have 1 year full time experience and extra 6 months internship in the same company and also doing freelance for 1 year. I’ve worked on many technologies like AWS, Azure, GCP, React, Tailwindcss, Flutter, Node.js, Express.js, Docker, Vercel, Linux and keep learning things cause I love doing this. But I think my salary is too low, I work 6 days/ week. They promised me that they’ll increase my salary but I don’t think they will. I think there is a lot I can achieve but nothing I can see right now. I’m not comparing myself to anyone but I think I’m eligible to get good food and good Education cause I’m paying for everything (College, food, etc). Family is not supporting after I started earning. I’ve basic understanding of DSA, Networking, etc. Pls Guide me, Please like what to do.. should I leave my job, if I do then I’ve to serve 45 days of notice period.. They said they’ll raise some amount from this new year. So should I wait to get the offer letter then should I quit.. and even after I quit then where should I apply? Should I apply abroad or Bengaluru? Should I take IELTS Certificate or any other tech certifications? Please Help, PLEASE PLEASE PLEASE🙏🙏🙏4
-
Made an app for a client on both iOS and Android, published the the app on app store and google play at the same time week ago, google published the app within 2 hours, apple still though, WHY THE FUCK WE PAY THEM 99$ LER YEAR BRUH, THEY NEED A CERTIFICATE OF OWNER SHIP ON THE APP BRAND NAME SMH, CHANGE THIS AND THAT, FUCK THIS SHIT 2 WEEKS TO PUBLISH AN APP AND MY CLIENT IS YELLING WTF3
-
Been applying with a couple of colleges for a certificate course on data management and the admissions coordinator is being a complete fuck! Called and left a message to which he offered to arrange a phone call if I felt like I needed it (I didn't at the time) and so I politely ended that particular convo by saying "thank you and I'll be sure to send any questions your way" (I think a gesture of good faith considering he did offer a phone call).
I sent him a couple questions the day after asking politely application dates and then another the next day (he hadn't replied at that point, but I suppose it's better to show interest than not, especially since I'm entering into this with not - a - engineering /computer science background) about whether a campus tour is available and also about funding. And the guy just hasn't replied! It's been two full days now and I'm pretty sure that's not exactly kosher for a program coordinator to do. Like was I being too persistent with the emails (3 in total) instead of just waiting it out in the dark? (the issue is I'd need to wait until the next cohort so May of next year instead of January so I'm in a rush!)
It doesn't help that it turns out that the program coordinator is a professor at the college 🤔 so I think maybe he's got some big d*** issues1 -
I m a 1st year student of Engineering and I m willing to learn coding. Which app should I prefer for online learning where I can get certificate of completing that course with good teaching at low cost???
Plss ans...
I belong to a middle class family bt I have to learn it.8 -
hey, so i have recently started learning about node js and express based backend development.
can you suggest some good github repositories that showcase real life backend systems which i can use as inspiration to learn about the tech?
like for eg, i want to create a general case solution for authentication and profile management : a piece of db+api end points + models to :
- authenticate user : login/signup , session expire, o auth 2 based login/signup, multi account login, role based access, forgot password , reset password, otp login , etc
- authorise user : jwt token authentication, ip whitelisting, ssl pinning , cors, certificate based authentication , etc (
- manage user : update user profile, delete user, map services , subscriptions and transactions to user , dynamic meta properties ( which can be added/removed for a single user and not exactly part of main user profile) , etc
followed by deployment and the assoc concepts involved : deployment, clusters, load balancers, sharding ,... etc
----
these are all the buzzwords that i have heard that goes into consideration when designing a secure authentication system for a particular large scale website like linkedin or youtube. am not even sure how many of these concepts would require actual codelines and how many would require something else.
so wanted inspiration from open source content to learn about it in depth, replicate and create new better stuff if possible .
apart from that, other backend architectures like video/images storage system, or just some server for movie, social media, blog website etc would also help.2 -
9 Ways to Improve Your Website in 2020
Online customers are very picky these days. Plenty of quality sites and services tend to spoil them. Without leaving their homes, they can carefully probe your company and only then decide whether to deal with you or not. The first thing customers will look at is your website, so everything should be ideal there.
Not everyone succeeds in doing things perfectly well from the first try. For websites, this fact is particularly true. Besides, it is never too late to improve something and make it even better.
In this article, you will find the best recommendations on how to get a great website and win the hearts of online visitors.
Take care of security
It is unacceptable if customers who are looking for information or a product on your site find themselves infected with malware. Take measures to protect your site and visitors from new viruses, data breaches, and spam.
Take care of the SSL certificate. It should be monitored and updated if necessary.
Be sure to install all security updates for your CMS. A lot of sites get hacked through vulnerable plugins. Try to reduce their number and update regularly too.
Ride it quick
Webpage loading speed is what the visitor will notice right from the start. The war for milliseconds just begins. Speeding up a site is not so difficult. The first thing you can do is apply the old proven image compression. If that is not enough, work on caching or simplify your JavaScript and CSS code. Using CDN is another good advice.
Choose a quality hosting provider
In many respects, both the security and the speed of the website depend on your hosting provider. Do not get lost selecting the hosting provider. Other users share their experience with different providers on numerous discussion boards.
Content is king
Content is everything for the site. Content is blood, heart, brain, and soul of the website and it should be useful, interesting and concise. Selling texts are good, but do not chase only the number of clicks. An interesting article or useful instruction will increase customer loyalty, even if such content does not call to action.
Communication
Broadcasting should not be one-way. Make a convenient feedback form where your visitors do not have to fill out a million fields before sending a message. Do not forget about the phone, and what is even better, add online chat with a chatbot and\or live support reps.
Refrain from unpleasant surprises
Please mind, self-starting videos, especially with sound may irritate a lot of visitors and increase the bounce rate. The same is true about popups and sliders.
Next, do not be afraid of white space. Often site owners are literally obsessed with the desire to fill all the free space on the page with menus, banners and other stuff. Experiments with colors and fonts are rarely justified. Successful designs are usually brilliantly simple: white background + black text.
Mobile first
With such a dynamic pace of life, it is important to always keep up with trends, and the future belongs to mobile devices. We have already passed that line and mobile devices generate more traffic than desktop computers. This tendency will only increase, so adapt the layout and mind the mobile first and progressive advancement concepts.
Site navigation
Your visitors should be your priority. Use human-oriented terms and concepts to build navigation instead of search engine oriented phrases.
Do not let your visitors get stuck on your site. Always provide access to other pages, but be sure to mention which particular page will be opened so that the visitor understands exactly where and why he goes.
Technical audit
The site can be compared to a house - you always need to monitor the performance of all systems, and there is always a need to fix or improve something. Therefore, a technical audit of any project should be carried out regularly. It is always better if you are the first to notice the problem, and not your visitors or search engines.
As part of the audit, an analysis is carried out on such items as:
● Checking robots.txt / sitemap.xml files
● Checking duplicates and technical pages
● Checking the use of canonical URLs
● Monitoring 404 error page and redirects
There are many tools that help you monitor your website performance and run regular audits.
Conclusion
I hope these tips will help your site become even better. If you have questions or want to share useful lifehacks, feel free to comment below.
Resources:
https://networkworld.com/article/...
https://webopedia.com/TERM/C/...
https://searchenginewatch.com/2019/...
https://macsecurity.net/view/... -
does anyone know a hosting service that allows installing 3rd party SSL certificate (Comodo) FOR FREE, WITHOUT buying overpriced 70$/year additional dedicated IP?4
-
Hello fellow Ranters, I need a little help.
I am trying to get a software signing certificate from CAcert.org, which provides certificates free of charge. However I am having questions about how reliable these certificates are. Does anyone here know more about this than I do? Thanks. 😸5 -
I have hoed around in different technologies during my university life, Web dev, game dev, cybersecurity (even got a CEH certificate, the training wasn't adequate tho and it's an expensive field needing all those certs), tried blockchain, machine learning but at the end, I haven't gotten anything done. No big projects.... well, apart from a miniproject that extracts text from videos, doesn't work half the time (T-T), No internships...no experience, nothing. I was really, reaaally dumb xD
Now, in my 4th and final year of university , I have decided to settle on Web development (MERN) with game dev on the side (leisure activities), but I need advice.
Before deciding my path, I enrolled in the year-long ALX Software Engineering course. I'm in my 6th month. It promises access to The Room, where they say job opportunities that aren't shared publicly exist. Problem with the course, tho, is they rush, and I don't get time to consolidate what I learn in the course. I feel like i am not gaining anything (first few months were cool). I am on the verge of giving up cos I found solace in FullStackOpen. It teaches MERN, is self-paced, and ergo gives me time to build my portfolio and has a nice community. I know what to do (quit and focus on my portfolio and projects cos my CV is crap ), but advice from you all could really help. Thanks in advance seniors, this little brother appreciates it. -
I gave a certificate, laminated and all to a team member today:
<name> is the worst person on earth according to all Entomologists.
He keeps eliminating bugs all day long.1 -
Was told to "not reinvent the wheel" by the same senior who seems to think that:
1. Fetching a self signed certificate
2. Adding a new entry to my `etc/hosts`
3. Manually importing the certificate to hijack Firefox's security
..in order to access the app at "something.loc" instead of "localhost" is perfectly fine.3 -
Looking for iOS and Android app developers to join startup in Rutherford, NJ area. Must be able to show portfolio of apps and have some published. Must be able to pull and compare data with sensitive databases (social security number, passport, birth certificate, etc) to verify user. You will be compensated hourly. Must sign NDA.