DDraceNetwork - developer

DDraceNetwork

Development / developer

Development discussion. Logged to https://ddnet.tw/irclogs/ Connected with DDNet's IRC channel, Matrix room and GitHub repositories — IRC: #ddnet on Quakenet | Matrix: #ddnet-developer:matrix.org GitHub: https://github.com/ddnet

Between 2017-11-30 00:00:00Z and 2017-12-01 00:00:00Z

<Learath2> aha, memory problems with haskell, KNEW it not way a functional language works as well as heinrich5991 promised :D

01:22

<heinrich5991> memory problems as in "too much memory used"

01:22

<Learath2> s/not/no/

01:22

<heinrich5991> (just to clarify)

@HMH can you explain the sqlstr::FuzzyString function to me

01:40

?

<nemo2> https://stackoverflow.com/questions/7768536/space-leaks-in-haskell

Space leaks in Haskell

I have read it many times that lazy evaluation in Haskell may sometimes lead to space leaks. What kind of code can lead to space leaks? How to detect them? And what precautions can be taken on part...

01:44

<nemo2> https://news.ycombinator.com/item?id=10263964

okasaki

Analyzing Three Space Leaks in Haskell

01:44

<nemo2> heinrich5991: rust doesn't do that kinda thing

01:45

<heinrich5991> space leaks? no

01:46

<heinrich5991> nemo2: up for a little ddrace? P

01:46

<heinrich5991> :P

01:48

<nemo2> heinrich5991: kid bedtime

01:48

<heinrich5991> k

01:49

<nemo2> should have asked any time in last couple of hours

01:49

<nemo2> heinrich5991: think I screwed up hedgewars release

01:49

<nemo2> feeling pretty sad about that

01:49

<heinrich5991> why?

01:49

<nemo2> heinrich5991: see last 2 commits in channel

01:49

<nemo2> think I did something dumb

01:50

<nemo2> heinrich5991: I'd added basic script hashing. was intended to catch screwups on part of people writing scripts and not distributing 'em to all players

01:50

<nemo2> but also to make life slightly harder for naughty people "augmenting" their scripts

01:50

<nemo2> oddly enough. there are people who write lua cheats but can't be bothered to rebuild their engine to mask them

01:50

<heinrich5991> oh, so you don't verify other people's physics?

01:51

<nemo2> heinrich5991: well it is deterministic lockstep

01:51

<nemo2> heinrich5991: the cheats were informational

01:51

<heinrich5991> ah :)

01:51

<nemo2> one of the things I didn't get around to doing was changing highlander to only deal out weapons on start of that player's turn

01:51

<nemo2> that would have helped a little

01:52

<nemo2> heinrich5991: anyway. I think I used an uninitialised RNG

01:52

<nemo2> heinrich5991: the screwed up script preview is bad on its own

01:52

<nemo2> but if I did that, gotta rerelease since desyncs will just happen

<heinrich5991> nemo2: uninitialized PRNG should just be initialized with a fixed seed

01:59

<heinrich5991> at least that's how I've usually seen it in the C stdlib

02:01

<eeeee> turbo pascal used fixed seed as well i think ^^

@HMH whats the problem with fake entities in maps for example Intercepter

what do you mean, fake entities?

02:28

@ᶰ°Konͧsti ?

<heinrich5991> deen: would you be against preloading hsts for ddnet.tw?

02:36

<heinrich5991> also: if I may, I'd like to add Content-Security-Policy: block-all-mixed-content (or Content-Security-Policy: upgrade-insecure-requests), which blocks all non-https scripts, images, etc. (or upgrades them to https)

02:41

<eeeee> and also X-Frame-Options, Referrer-Policy, X-DNS-Prefetch-Control, X-XSS-Protection, X-Download-Options, and X-Content-Type-Options while you're at it? :D

02:43

<heinrich5991> what are these? ^^

02:44

<heinrich5991> eeeee: what's the time in your timezone?

02:44

<eeeee> attempts to plug various holes in web

02:44

<eeeee> 18:44

02:50

<eeeee> e.g. X-Frame-Options is for the following case: imagine someone knows you have admin on ddnet forum and they want to make you ban fstd there. what attacker can do is lure you to some innocious website (say, freeclientteeworlds.com) and once you visit that site they open an iframe at forum.ddnet.tw/ban/fstd location but render it transparent and also render an opaque "download free client teeworlds no sms or

02:50

<eeeee> registration" button right in the same place as "ban fstd" button in the iframe

02:50

<heinrich5991> ah

02:50

<eeeee> so called "click jacking"

02:50

<heinrich5991> so you can prevent iframing your page

02:50

<eeeee> yea

@heinrich5991 Fake entities are what the name says, it looks like a block/kill/freeze/whatever in entities but its just a fake

how does that work?

02:52

anyway

02:52

I guess you can imagine yourself why that is undesirable

No

02:52

I used it for design

02:52

Looks better

02:52

In entities

entities aren't for design

(edited)

<eeeee> this iframe h4x got popular after web coders learned to protect against CSRF

02:53

<heinrich5991> I see

Ofc they are cuz i allways play with entities feelsbadman

feelsbadman

@heinrich5991 give me mod password i will clean funvoters and trols

feelsamazingman

1

there is no single mod password

what ya mean

@Roco quo4on7A

@ᶰ°Konͧsti then design the main map in a way that satisfies you and play without entities

heinrich go channel 3

02:54

channel for 2

not right now

02:54

going to sleep

why

02:54

y

02:54

just some letters for the mod pw

02:54

so?

there is no single mod pw

was für single pw?

02:55

hat jeder ein eigenes?

yes

02:55

and I don't have one, as it stands

y

@heinrich5991 stop that xD, playing with design is shit, also my own ones. And i dont use fake entities for cheating, just for make things looking cool and hide some secrets

so give me admin pw

I don't have any pw for the servers

02:56

@ᶰ°Konͧsti well no

But access to masterservers?

Well yes

02:56

I showed testers before release

@ᶰ°Konͧsti don't even bother, that's the final answer

They didnt have problems

great, I'll talk to the testers if you want

02:56

@Roco I don't have access to the game servers

Its released more than 4 month and no one died yet feelsamazingman

feelsamazingman

so what, I don't care

OK end discussion ddnet_icon

ddnet_icon

banhammer

banhammer

9

@heinrich5991 no problem with hsts. if you can make sure all pictures still work, sure

07:53

nemo2: we have some kind of android version, but no one bothered to port it to sdl2 yet unfortunately

<fstd> disapproves of the 'ban fstd button' technology

<heinrich5991> fstd: 'ban fstd button'?

08:43

<fstd> i know a couple people who'd happily adopt that new internet standard

08:43

<fstd> we could sell them ban fstd button as a service

banhammer

4

<nemo2> heinrich5991: yeeeeah... unc0rr made his on PRNG long ago

13:30

<nemo2> heinrich5991: I have no idea why

13:30

<nemo2> heinrich5991: it's kinda nice to see the moving parts

13:30

<nemo2> thankfully is not for encryption

13:30

<nemo2> maybe freepascal didn't have a good RNG 11 years ago?

<eeeee> don't need a completely new standard for the ban fstd button, could just add another flag to the widely adopted rfc3514

Exported 110 message(s)