| nkinkade | Since when do SSL certificates cost $250/year! | 00:02 |
|---|---|---|
| *** jgay has joined #cc | 00:14 | |
| *** rohitj has joined #cc | 00:17 | |
| *** Yaco has joined #cc | 00:20 | |
| *** rohitj has quit IRC | 00:22 | |
| paulproteus | nkinkade, I paid $15 for mine. | 00:31 |
| nkinkade | paulproteus: From some cert. authority in Russia? | 00:31 |
| paulproteus | http://www.rapidsslonline.com/?ref=usgoogle&gclid=CJuPiq6vvpUCFSJIagodCVhqPw | 00:31 |
| paulproteus | https://secure.makesad.us/ and https://secure.laroia.net/ use them. | 00:31 |
| nkinkade | Hmm. Let me check it out,. | 00:32 |
| *** javaman1 has joined #cc | 00:33 | |
| *** ftobia has joined #cc | 00:33 | |
| *** javaman1 has quit IRC | 00:33 | |
| ftobia | currybot: list | 00:34 |
| paulproteus | SSL By Chinese | 00:34 |
| paulproteus | ftobia, list | 00:35 |
| ftobia | (1) SOME KIND OF PANEER | 00:35 |
| Bovinity | ftobia: IT FELL DOWN AND CAN'T GET UP | 00:35 |
| ftobia | apparently. | 00:35 |
| ftobia | gah. | 00:35 |
| Bovinity | currybot: food | 00:35 |
| currybot | Bovinity: mmm... curry... | 00:35 |
| nkinkade | paulproteus: Maybe I'm missing something, but it seems that they support low bit rates for the encryption. I just created a 1024 bit CSR, but their Thawte certs only support up to 256-bit. | 00:35 |
| ftobia | currybot: 1 | 00:35 |
| currybot | ftobia: mmm... curry... | 00:35 |
| ftobia | hmm. | 00:35 |
| nkinkade | Maybe there's something I don't understand about it all. | 00:35 |
| paulproteus | Which "they"? | 00:36 |
| paulproteus | 256-bit would be the symmetric key. | 00:36 |
| paulproteus | 1024-bit would be the asymmetric key. | 00:36 |
| paulproteus | The 256-bit key would be a session key generated at session time. | 00:37 |
| paulproteus | I'll accept links, though. (-: | 00:37 |
| *** stevel has quit IRC | 00:40 | |
| paulproteus | Does the Thawte one give you a green thing like PayPal has? | 00:42 |
| paulproteus | I perceive no value in spending more than $15 on this cert. | 00:43 |
| paulproteus | Feel free to say something nkinkade. | 00:43 |
| paulproteus | (voice is fine, I'm getting ready to go to the OM thing) | 00:44 |
| nkinkade | paulproteus: From the RapidSSL.com FAQ: "However it is our opinion that sites conducting more than 50 transactions will require a Professional Level SSL certificate due to the increased likelihood that the website's customers will expect SSL from a highly credible and established SSL provider and well known internationally accepted SSL brand." | 00:46 |
| paulproteus | They also sell more expensive certs. | 00:46 |
| paulproteus | They'd *prefer* you buy those. | 00:46 |
| paulproteus | I guess maybe there's some value in more expensive certs for people who view the cert. | 00:47 |
| Bovinity | fwiw, eff.org use a 256-bit cert | 00:47 |
| paulproteus | Er, that's the session key, not the cert - the cert uses asymmetric crypto. | 00:48 |
| Bovinity | oops | 00:48 |
| nkinkade | I guess the price difference comes down to brand recognition, though it would seem that the RapidSSL.com certs are fully trusted by default in Firefox and probably most every browser. | 00:48 |
| paulproteus | I also can't find any SSL'd EFF pages. | 00:48 |
| Bovinity | https://secure.eff.org/site | 00:48 |
| Bovinity | -site | 00:49 |
| paulproteus | https://secure.makesad.us/ also uses a 256-bit session key. | 00:49 |
| nkinkade | Modulus (1024 bits) | 00:50 |
| nkinkade | From the EFF cert. | 00:50 |
| paulproteus | Wow, I have the same "Verified by:" as EFF does. | 00:50 |
| paulproteus | Equifax. | 00:50 |
| paulproteus | As far as I can tell, EFF uses the same vendor I do. | 00:51 |
| paulproteus | They may not; I'm not totally sure. | 00:51 |
| nkinkade | Yeah, I saw that, and it seems that somehow the RapidSSL.com ones are also signed by Equifax, or GeoTrust, but there seems to be a relationship there. | 00:51 |
| mlinksva | i think http://en.wikipedia.org/wiki/Extended_Validation_Certificate is what ff3 requires for the green bar | 00:51 |
| paulproteus | Anyway, they look the same, and mine cost me fifteen bucks. | 00:51 |
| paulproteus | You can get an Extended Validation cert for as little as US$500. | 00:51 |
| nkinkade | $250/year from Thawte *does* seem a little crazy. | 00:51 |
| nkinkade | Shuttleworth! I'm uninstalling Ubuntu tonight! | 00:52 |
| paulproteus | If you try RapidSSL for one month, and NY doesn't like it, it pays for itself in two weeks of not paying the Thawte price. | 00:52 |
| paulproteus | Oh! | 00:52 |
| paulproteus | No, he *quit* that to make Ubuntu. | 00:52 |
| paulproteus | And you can now either give your money to the Forces of Good, or Shuttleworth's old company. | 00:52 |
| paulproteus | Or keep your money for your *own* forces of good (as we are) and just buy a RapidSSL cert. | 00:53 |
| paulproteus | nkinkade, How about you buy a RapidSSL cert, say you bought a Thawte one, and since no one will ever read the SSL certificate info, we buy ourselves an amazing $235 dinner? | 00:55 |
| paulproteus | Oh, mlinksva is here. | 00:55 |
| paulproteus | We can invite him too. | 00:55 |
| nkinkade | paulproteus: Good plan. I've emailed with Nathan about it off-line and we can discuss it more tomorrow. | 00:56 |
| paulproteus | Great, so now we have FOUR people to invite to dinner with the spoils of our cert. | 00:56 |
| paulproteus | In 2006, researchers at Stanford University and Microsoft conducted a usability study[8] of the EV display in Internet Explorer 7. The study measured users' ability to distinguish real sites from fraudulent sites when presented with various kinds of phishing attacks, and found that there was no significant difference between users who saw extended validation indicators and those who did not. Users who received training with the Internet Explo | 00:56 |
| paulproteus | rer 7 help file were more likely to judge all sites legitimate, regardless of whether they were fraudulent. | 00:56 |
| paulproteus | -- http://en.wikipedia.org/wiki/Extended_Validation_Certificate | 00:56 |
| nkinkade | I imagine that most people won't particularly care about the particular CA, as long as their browser doesn't complain. | 00:56 |
| *** ftobia has quit IRC | 00:57 | |
| paulproteus | There has been some concern that EV certificates, despite their improved authentication and higher cost, will not prevent phishing attacks.[7] | 00:57 |
| paulproteus | AKA: "It's more expensive, but that's its only benefit." | 00:57 |
| nkinkade | Operating under the old axiom that you get what you pay for, clearly.\ | 00:58 |
| nkinkade | And many Windows users get what they pay for, and then some. | 00:59 |
| paulproteus | The Internet gets what Windows users pay for. | 01:02 |
| *** nkinkade has left #cc | 01:03 | |
| *** Bovinity has quit IRC | 01:17 | |
| *** stevel has joined #cc | 01:20 | |
| *** jgay has quit IRC | 01:26 | |
| *** jonico has quit IRC | 01:29 | |
| *** mlinksva has quit IRC | 01:31 | |
| *** isforinsects has joined #cc | 01:35 | |
| *** BobChao has quit IRC | 02:25 | |
| *** tvol has quit IRC | 02:34 | |
| *** stevel has quit IRC | 02:35 | |
| *** ftobia has joined #cc | 02:45 | |
| *** Yaco has quit IRC | 04:30 | |
| *** bringatowel has joined #cc | 04:46 | |
| *** ankitg has quit IRC | 05:01 | |
| *** ftobia has left #cc | 05:12 | |
| *** BobChao has joined #cc | 05:43 | |
| *** pmiller has quit IRC | 05:52 | |
| *** ankitg has joined #cc | 07:11 | |
| *** pmiller has joined #cc | 08:17 | |
| *** pmiller has left #cc | 08:17 | |
| *** balor has joined #cc | 08:37 | |
| *** Ekushey has joined #cc | 10:30 | |
| *** BjornW has joined #cc | 10:32 | |
| *** sama has joined #cc | 11:15 | |
| *** ereslibre has joined #cc | 11:19 | |
| *** Roderick_ has quit IRC | 11:29 | |
| *** Roderick_ has joined #CC | 11:39 | |
| *** BobChao has quit IRC | 12:58 | |
| *** tvol has joined #CC | 13:06 | |
| *** BjornW_ has joined #cc | 13:26 | |
| *** tvol has quit IRC | 13:27 | |
| *** tvol has joined #CC | 13:29 | |
| *** BjornW has quit IRC | 13:42 | |
| *** ftobia has joined #cc | 13:56 | |
| *** balor has quit IRC | 14:10 | |
| *** Ekushey has quit IRC | 14:15 | |
| *** Ekushey has joined #cc | 14:16 | |
| *** tvol has quit IRC | 14:21 | |
| *** tvol has joined #CC | 14:23 | |
| *** skyfaller has joined #cc | 14:41 | |
| *** Ekushey has quit IRC | 14:50 | |
| *** Ekushey has joined #cc | 14:52 | |
| *** jgay has joined #cc | 14:55 | |
| *** sama has quit IRC | 15:10 | |
| ftobia | currybot: list | 15:12 |
| *** currybot has quit IRC | 15:13 | |
| *** currybot has joined #cc | 15:13 | |
| ftobia | currybot: list | 15:13 |
| currybot | (1) DAL LOUKI (Chickpea lentil cooked with white squash) | 15:13 |
| currybot | (2) SINDHI BHAJI (Fresh vegetables cooked with red onions, tomatoes, sesame seeds, and spices) | 15:13 |
| currybot | (3) TULSI MURG (Boneless chicken cubes cooked in a basil leaves curry sauce) | 15:13 |
| currybot | (4) PORK-DO-PIYAZA (Boneless pork cubes cooked in curry flavored raw mangoes, onions, tomatoes, red bell pepper and vinegar) | 15:13 |
| *** mlinksva has joined #cc | 15:14 | |
| *** stevel has joined #cc | 15:15 | |
| *** Roderick_ has quit IRC | 15:20 | |
| *** tvol has quit IRC | 15:39 | |
| *** tvol has joined #CC | 15:39 | |
| *** BobChao has joined #cc | 15:49 | |
| paulproteus | ankitg, Howdy. | 16:11 |
| paulproteus | Well done, ftobia. | 16:11 |
| ankitg | paulproteus: Hey ... | 16:12 |
| paulproteus | Do you think you're going to continue thinking about / working on the stats stuff? | 16:13 |
| ankitg | surely | 16:14 |
| paulproteus | Cool - what are you working on now, how's it going, and do you have any questions for me? | 16:15 |
| ankitg | right now, I'll am working on making the algo a bit smarter ... instead of picking out the whole history of URLs that change(d) their license, the script will only retrieve the changes ... as for questions, I am trying to get Giorgos involved with this, am I allowed to share info. or do I ned to go through some NDA or something? | 16:18 |
| paulproteus | Well, we never signed an NDA. | 16:19 |
| ankitg | yay! | 16:19 |
| paulproteus | I would treat the data as private for now, so you can share it with other people you trust, but I wouldn't publish a whole lot of blog URLs yet until we've had a chance to think about it. | 16:19 |
| paulproteus | But Giorgos is surely a trustworthy dude, by all means let's talk to him. | 16:20 |
| ankitg | noted | 16:20 |
| paulproteus | I'd appreciate being CC:d on your discussions with him if they're by email since I'm interested in the project too. | 16:20 |
| *** Bovinity has joined #cc | 16:20 | |
| ankitg | mostly IM ... or in-person ... | 16:20 |
| paulproteus | Aw well. (-: | 16:20 |
| paulproteus | Then try to keep me posted one way or another, if you can. | 16:20 |
| ankitg | done. | 16:21 |
| paulproteus | ankitg, Okay, can we talk about a code review sometime soon? | 16:22 |
| paulproteus | Let's pick a time. | 16:22 |
| paulproteus | Is the latest code in git yet? | 16:22 |
| paulproteus | I don't understand how you don't use git all the time for everything. | 16:22 |
| ankitg | yep, licChange.py has be bumped up to version 8.2 | 16:23 |
| ankitg | How about the weekend ... does that work for you ... ? | 16:23 |
| paulproteus | Hmm, lemme see. | 16:25 |
| paulproteus | What might be some times? | 16:25 |
| ankitg | whatever works for you ... | 16:26 |
| ankitg | say this time, your Saturday? | 16:26 |
| paulproteus | Okay, great. | 16:33 |
| *** nkinkade has joined #cc | 16:33 | |
| paulproteus | Morning, nkinkade. | 16:35 |
| nkinkade | paulproteus: Good morning. | 16:36 |
| nkinkade | I recovered my Debian install on the Freerunner. | 16:36 |
| paulproteus | How, trivial fdisk? | 16:36 |
| nkinkade | It was just a matter of running fdisk and recreating the partitions. | 16:36 |
| nkinkade | Yes, trivial fdisk. | 16:36 |
| *** ftobia has quit IRC | 16:37 | |
| *** balor has joined #cc | 16:37 | |
| *** Bovinity has quit IRC | 16:47 | |
| *** Bovinity has joined #cc | 16:48 | |
| *** Yaco has joined #cc | 16:50 | |
| *** Bovinity has quit IRC | 17:03 | |
| *** Bovinity has joined #cc | 17:04 | |
| *** K`Tetch has quit IRC | 17:09 | |
| *** luisv has joined #cc | 17:35 | |
| *** Yaco has quit IRC | 17:49 | |
| *** sama has joined #cc | 17:59 | |
| *** BjornW_ has quit IRC | 18:02 | |
| nkinkade | Bovinity: So do you think this comment issue for ccLearn will be trivial to fix. Off the top of my head it seems like it could be somewhat difficult. | 18:07 |
| Bovinity | nkinkade: it's trivial | 18:07 |
| nkinkade | The posts are made at CC.org, right? | 18:08 |
| Bovinity | yeah | 18:08 |
| nkinkade | But display at ccLearn. | 18:08 |
| nkinkade | Just pulled in as an RSS feed. | 18:08 |
| Bovinity | i mean, it's non-trivial to display a comment count at cclearn, but it's trivial to make the comments form show up for cclearn feature articles | 18:08 |
| nkinkade | So people will have to view the article at ccLearn, and then go to CC.org to actually make a comment. | 18:08 |
| Bovinity | yes | 18:08 |
| nkinkade | That seems less than ideal. | 18:08 |
| nkinkade | It'll probably confuse people. | 18:09 |
| Bovinity | i'm sure having the features link back to cc.org is confusing already | 18:09 |
| nkinkade | But I guess this who thing with RSS feeds is somewhat less than ideal too. | 18:09 |
| nkinkade | s/who/whole/ | 18:09 |
| *** tvol_ has joined #CC | 18:12 | |
| *** tvol has quit IRC | 18:12 | |
| *** OuzOuzA has joined #cc | 18:26 | |
| *** paulproteus has quit IRC | 18:28 | |
| *** paulproteus has joined #cc | 18:30 | |
| *** luisv has left #cc | 18:31 | |
| *** paulproteus has joined #cc | 18:32 | |
| *** paulproteus has joined #cc | 18:34 | |
| *** paulproteus has joined #cc | 18:36 | |
| *** paulproteus has joined #cc | 18:38 | |
| *** paulproteus has joined #cc | 18:40 | |
| *** paulproteus has joined #cc | 18:42 | |
| *** paulproteus has joined #cc | 18:42 | |
| *** paulproteus has joined #cc | 18:45 | |
| *** paulproteus has joined #cc | 19:02 | |
| *** tim_hwang has joined #cc | 19:02 | |
| nkinkade | Bovinity: Are you able to login to the wiki? | 19:10 |
| Bovinity | nkinkade: ack, no! | 19:11 |
| nkinkade | Bovinity: Neither can I. I guess I'll investigate it. | 19:13 |
| Bovinity | is it becuase our memory banks are clogged? | 19:13 |
| Bovinity | :P | 19:13 |
| *** Ekushey has quit IRC | 19:32 | |
| *** mecredis has joined #cc | 19:39 | |
| mecredis | hey there | 19:40 |
| mecredis | anyone play around with picasa.exe? | 19:40 |
| *** sama has quit IRC | 19:45 | |
| *** jonico has joined #cc | 19:51 | |
| nkinkade | nathany: Bovinity: Can you login to the wiki now? | 19:57 |
| *** Ekushey has joined #cc | 20:00 | |
| Bovinity | nkinkade: aye | 20:40 |
| *** tvol_ has quit IRC | 20:45 | |
| *** tvol has joined #CC | 20:46 | |
| *** tvol has joined #CC | 20:48 | |
| mlinksva | paulproteus: is labs pointing to the wrong place again? http://labs.creativecommons.org/~paulproteus/csv-dumps/ only goes to aug 13 | 20:49 |
| *** balor has quit IRC | 20:59 | |
| *** jgay has quit IRC | 21:02 | |
| *** pktck has joined #cc | 21:15 | |
| *** Yaco has joined #cc | 21:17 | |
| *** [mharrison] has quit IRC | 21:19 | |
| *** Ekushey- has joined #cc | 21:19 | |
| *** jonico has quit IRC | 21:27 | |
| *** tvol has quit IRC | 21:27 | |
| *** Ekushey has quit IRC | 21:39 | |
| paulproteus | nkinkade especially, but for all: http://www.flickr.com/photos/publicresourceorg/2789712883/in/set-72157606911738805/ | 21:43 |
| paulproteus | (more in that set) | 21:43 |
| nkinkade | paulproteus: And that is apropos to ... ? :-) | 21:48 |
| paulproteus | Our earlier discuss of proprietary standards. | 21:48 |
| paulproteus | MEET: Proprietary law! | 21:48 |
| paulproteus | Think about this one. | 21:49 |
| * paulproteus chuckles | 21:49 | |
| *** tim_hwang has quit IRC | 21:50 | |
| nkinkade | paulproteus: You're using APC for the FC wiki, right? | 21:50 |
| paulproteus | Yup. | 21:50 |
| paulproteus | Why, is it corrupting everything? (-: | 21:51 |
| paulproteus | nkinkade, Any decision? re: expensive vs. cheap SSL certs | 21:52 |
| nkinkade | Before lunch authentication was failing for everyone on the CC wiki. I was poking around and somewhat accidentally figured out that APC was behind it. | 21:52 |
| paulproteus | Oh! | 21:52 |
| paulproteus | ...curious. | 21:52 |
| paulproteus | I did upgrade to the latest a few days ago at SFC. | 21:52 |
| *** pktck has quit IRC | 21:54 | |
| *** pktck has joined #cc | 21:56 | |
| nkinkade | Sadly, we are already at what I believe is the newest version 3.0.19. | 21:57 |
| nkinkade | Now to find some mailing list where I can complain. | 21:58 |
| *** pmiller has joined #cc | 22:05 | |
| *** skyfaller has quit IRC | 22:13 | |
| paulproteus | Curiously, it works okay for us. | 22:31 |
| paulproteus | I upgraded our PHP to lenny's, 5.2.6. | 22:31 |
| paulproteus | That may have something to do with why it works for SFC but not CC. | 22:31 |
| paulproteus | Or we have older MW/SMW/SF/etc. | 22:31 |
| *** nathany has joined #cc | 22:36 | |
| nathany | paulproteus: it appears that the domain dir is configured in development.ini | 22:36 |
| paulproteus | nathany, Oh, right. | 22:36 |
| paulproteus | BTW, the permissions interface will be /bureau and called "Bureaucracy". | 22:37 |
| nathany | ok | 22:37 |
| nkinkade | nathany: Removing the "st" dir from the i18n/po dir stopped the Deed from showing up, but didn't remove the link to the language. Some poking around indicates that it may get the active_languages from something like: | 22:46 |
| nkinkade | domain = queryUtility(ITranslationDomain, i18n.I18N_DOMAIN) | 22:46 |
| nathany | nkinkade: did you rebuild the mo files? | 22:46 |
| nathany | (or remove the st mo files, more specifically) | 22:46 |
| nkinkade | nathany: No I didn't, but are the Deeds autogenerated on staging, or maybe that's beside the point. | 22:47 |
| nkinkade | nathany: Removing the dir from cc/engine/locales seemed to do it. Does this mean that removing it from Pootle, commiting, and then updating the production cc.engine and reinstalling i18n should do it? | 22:58 |
| nkinkade | Or something similar to that. | 22:59 |
| nathany | nkinkade: yes | 22:59 |
| nathany | although i'm not sure installing i18n will remove the directory for you | 22:59 |
| nathany | so you can probably just substitute "rm locales/st" for "buildout install i18n" | 22:59 |
| nkinkade | I guess I'll do that, and manually remove the locale file, if necessary. | 22:59 |
| nathany | just manually remove it -- no point in asking buildout to do it (since i suspect -- hope -- it won't) | 23:00 |
| *** [mharrison] has joined #cc | 23:03 | |
| nkinkade | paulproteus: nathany: Is there anything to discuss with regard to SSL certificates? I think I know Asheesh's thoughts: the cheaper the better, as it won't matter anyway. | 23:28 |
| paulproteus | $15 is so cheap it almost undercuts CACert. | 23:35 |
| paulproteus | This is why I love RapidSSL: | 23:38 |
| paulproteus | 2. Your RapidSSL order may get flagged by GeoTrust for a manual security audit. Such orders may take longer than ten minutes. Contact support via Live Chat in such cases. | 23:38 |
| paulproteus | If "more than ten minutes" is what they apologize for, I'm already sold. | 23:39 |
| *** nathany has quit IRC | 23:42 | |
| *** BobChao_ has joined #cc | 23:47 | |
| isforinsects | oh my god... | 23:52 |
| isforinsects | So much writing | 23:52 |
Generated by irclog2html.py 2.6 by Marius Gedminas - find it at mg.pov.lt!