Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
MedicineHut
Feb 25, 2016


That was a very loving long gif man, I almost gave up watching.

e:

MedicineHut fucked around with this message at 10:20 on Jan 27, 2018

Adbot
ADBOT LOVES YOU

Ghostlight
Sep 25, 2009

maybe for one second you can pause; try to step into another person's perspective, and understand that a watermelon is cursing me



Foo Diddley posted:

It seems the laughs are already over, sadly:


The laughs never end.

alf_pogs
Feb 15, 2012


have i missed something in the last ten pages?

Daztek
Jun 2, 2006



CIG replied to the reply



Someone get the doc pls

https://www.scribd.com/document/370105345/031127439162

Daztek fucked around with this message at 11:58 on Jan 27, 2018

The Kins
Oct 2, 2004
:allears:

Mu77ley
Oct 14, 2016

EminusSleepus posted:

they already fired they long time friend for not composing music very well LOL



According to his LinkedIn profile, Martin Galway left his role as Director of Audio at Cloud Imperium in Austin, TX in July 2014.

Ghostlight
Sep 25, 2009

maybe for one second you can pause; try to step into another person's perspective, and understand that a watermelon is cursing me



Streetroller posted:

This is like... a high-schooler's approach to param handling. It's almost intentional.
Yeah, the only other place I've seen security gently caress-ups on this level is Bitcoiners writing their own financial marketplaces after taking an introductory class to php because professionals wouldn't work for equity in a magic bean factory.

Exposing user data in the url isn't just a case of forgetting to set a variable. If you're doing that then everything below it is probably also a gigantic loving mess just to fail pen tests.

tuo
Jun 17, 2016

Streetroller posted:

Uhhh.
Hate to jump in but this is kinda a specialty of mine.

Login requests through JQuery should be sent through some kind of internal secure api via a post script.
(honestly, who writes in plain JQuery anymore anyway? Sheesh)
Even if You're trying to be backward compatible for say Netscape Navigator with a <form /> tag, there literally should be no event in which form data shows up in an address line.
Unless you do something like a hotlink to a php page with form data in the address line such as:
php:
<?
<a href="reallyBadFormExample.php?Param_A=[a]&Param_B=[b]" />?>
This is like... a high-schooler's approach to param handling. It's almost intentional.
(*Okay, guess you could do a Get request... but who the gently caress puts a get request on a form?)
Hey, CIG... CHECK THIS OUT https://www.w3.org/Protocols/rfc2616/rfc2616-sec9.html

Uh, yeah, that's what I said.The thing is, if - due one reason or another - the jQuery runs into an uncaught exception and is written so badly that the submit handler cannot prevent the default submit action, it may happen that the form falls back to it's normal, intended way of working. And if it then misses the 'method="POST"' parameter, exactly this poo poo happens. We can argue that it's stupid that even HTML5 standard assumes method=GET as default for forms....I can't think of any reason when a form should send it's data via GET, if someone knows one, enlighten me, but still:

Of course, if you run into such a situation, there are multiple things you should ask yourself:

1) As you said, ask yourself why the submit-handler failed in such a horrible way that it couldn't prevent the default action or why wasn't it fired in the first place? Is it because I actually write the stuff by hand and don't use one of the gazilliion proven frameworks out there?

2) Why did the form not have method=POST as a further failsafe? Was it because the form was written by hand? If yes, why aren't I using one of the gazillion proven frameworks out there?

It is such an incredible rookie mistake which again shows on what a rotten foundation of source code this whole project is built. It seems it's irregardless of wether it's the website, Star Citizen, CIG, F42, Turbulent....regardless of what source code they touch, it's hosed, and bad, and reeks of rookie mistakes that somehow manage to make it to live releases.

Or maybe the website is pre-alpha? Who knows....

Ghostlight
Sep 25, 2009

maybe for one second you can pause; try to step into another person's perspective, and understand that a watermelon is cursing me



You get an error message immediately on an invalid login, but if your login happens to be bobby drop tables, then it just sits there blinking ominously as if it's having difficulty talking to the server.

CrazyLoon
Aug 10, 2015

"..."

This is art.

tuo
Jun 17, 2016

Ghostlight posted:



Exposing user data in the url isn't just a case of forgetting to set a variable. If you're doing that then everything below it is probably also a gigantic loving mess just to fail pen tests.

We're talking about a company that requests money from you to purge your account after your player avatar turned into a ball of light due to a bug in their "game" because that's apparently their ownly fix for, or that apparently has such an ill-designed database that has to be "cleaned up from the Schmeg" by hand because no one managed to design it well in the first place, implement working stored procedures or implement regular, automatic maintenance (or a reliable ORM in the first place which does all that poo poo for you)....

Sky's the limit when it comes to their levels of incompetence, apparently

Martman
Nov 20, 2006

I like to imagine that CIG has accidentally built some kind of Satanic hellmachine that only functions after being fed money. The fear in Croberts's eyes isn't what we thought...

Raskolnikov
Nov 25, 2003

Martman posted:

I like to imagine that CIG has accidentally built some kind of Satanic hellmachine that only functions after being fed money. The fear in Croberts's eyes isn't what we thought...

Star Citizen: Hubrisraiser

Raskolnikov
Nov 25, 2003

Make that Pandora's box green, not blue.

tuo
Jun 17, 2016

Lol, they actually only fixed it at one place...the other forms - which don't handle passwords though, just reset request and two-factor authentication, still have the flaw:

Ghostlight
Sep 25, 2009

maybe for one second you can pause; try to step into another person's perspective, and understand that a watermelon is cursing me



I loving love web design




And by love I mean that it's the worst loving thing that I also have to go in on a public holiday on Monday to do for eight hours for unconnected reasons.

tuo
Jun 17, 2016

goddamn, the CSS.

This is the from the CENTRAL css file....look at this, just look at it:

Raskolnikov
Nov 25, 2003

Yee olde first geocities page of yore vibes

CrazyLoon
Aug 10, 2015

"..."
I liked web designing back in 2004, soon after just discovering internet and getting all artsy fartsy about my online IRC RP group.

That was the last time I liked web designing.

AP
Jul 12, 2004

One Ring to fool them all
One Ring to find them
One Ring to milk them all
and pockets fully line them
Grimey Drawer
https://www.youtube.com/watch?v=ReAOvo8L0p4&t=740s

tuo
Jun 17, 2016

I mean, there are obvious reasons nowadays (or basically since years) to include quite a lot in single, large css and js files and also pull together stuff like non-svg icons and logos into single images to prevent too many requests to the webserver before the whole page can be rendered, but adding URLs which are only used on a single page of the entire site in your main CSS file....basically ALL OF THEM....I can't see a reason for this, neither performance-wise (keep em in the markup on the single place where they are used, it has to loaded anyway), nor production-pipeline wise.

It shouldn't matter in regards to performance that much with the bandwith we have nowadays (the css is about 400kb, btw., also contains all the svg-data on the entire site, I guess), but it simply makes no sense. This is data that is needed at a place, at a single page of the entire site, but I shove it down the throat of every visitor, irregerdless of wether he actually wants to visit the prowler magazine or not, plus it is stored at a place (I guess the .less file for the prowler page) I wouldn't expect it, like right at the markup, if I already have to do that by hand for magazine style site.

e: also, on the mobile version, when you visit the shop, you can't go to other pages (but the start via the RSI logo). The mobile menu is empty. Clever, RSI, clever....

ee: they actually hosed up their shop on mobile....their most precious thing.....the only way to go forward is buy the drat ship, lol

tuo fucked around with this message at 11:25 on Jan 27, 2018

tuo
Jun 17, 2016

Okay, enough web talk, but it's so drat funny they can't even get their website right. There are too many things wrong with it to list them here....

Alchenar
Apr 9, 2008

Daztek posted:

CIG replied to the reply



Someone get the doc pls

Not empty quoting this.

his nibs
Feb 27, 2016

:kayak:Welcome to the:kayak:
Dream Factory
:kayak:
Grimey Drawer

MedicineHut posted:

That was a very loving long gif man, I almost gave up watching.

e:


yeah the bit at the end is amazing

Solarin
Nov 15, 2007

this game.., what a total shitfest! It's really bad

Daztek
Jun 2, 2006



Daztek posted:

CIG replied to the reply



Someone get the doc pls

Document: https://www.scribd.com/document/370105345/031127439162

his nibs
Feb 27, 2016

:kayak:Welcome to the:kayak:
Dream Factory
:kayak:
Grimey Drawer

"The opposition rambles over ground not set forth clearly or at all in the FAC. By repeatedly attempting to justify getting waved through Rule 12 by arguing phantom allegations, by proffering absurd interpretations of now-revealed plain contract language, by asserting ever-shifting claims for copyright infringement without identifying the allegedly infringing works, and by seeking remedies that are palpably improper under black letter law (e.g., punitive damages for breach of contract and statutory damages for pre-registration infringement), the opposition demonstrates that both efforts at pleading in this case have been an unmanageable, incoherent mess unworthy of proceeding beyond the pleading stage and all of the attendant time and expense thereafter.

The Court should straighten that mess by granting the motion"



:allears:

Alchenar
Apr 9, 2008

Also did the thread do this: https://www.reddit.com/r/starcitizen/comments/7t5uxm/i_was_having_issues_with_the_rsi_site_when_i/

Chalks
Sep 30, 2009

tuo posted:

goddamn, the CSS.

This is the from the CENTRAL css file....look at this, just look at it:



I'm the width: 145.5%

Daztek
Jun 2, 2006



tuo posted:

goddamn, the CSS.

This is the from the CENTRAL css file....look at this, just look at it:



SALES
SALES
SALES
SALES
SALES
SALES
SALES
SALES
SALES
SALES

tuo
Jun 17, 2016

Chalks posted:

I'm the width: 145.5%

It punches above the canvas size

AP
Jul 12, 2004

One Ring to fool them all
One Ring to find them
One Ring to milk them all
and pockets fully line them
Grimey Drawer

Finally we get to see a productive use of backer funds.

Ghostlight
Sep 25, 2009

maybe for one second you can pause; try to step into another person's perspective, and understand that a watermelon is cursing me



Yes, it's why this page is Web Nerd Hell.

his nibs
Feb 27, 2016

:kayak:Welcome to the:kayak:
Dream Factory
:kayak:
Grimey Drawer

AP posted:

Finally we get to see a productive use of backer funds.

I just want to know if this is good or bad for Star Citizen

Chalks
Sep 30, 2009

The whole password in the url thing is testament to the quality of CIG's programmers and their code review process. loving highschool level programming mistakes on production systems, a class act all round.

Loxbourne
Apr 6, 2011

Tomorrow, doom!
But now, tea.

his nibs posted:

I just want to know if this is good or bad for Star Citizen

For those who don't want to read it, it can be summarised as follows:

1. CryTek are MEANIES and BAD and WRONG and CIG are LAUGHING AT HOW WRONG CRYREKT ARE.

2. It doesn't matter anyway because the disclaimer at clause 6.1.4 precludes all claims for damages.

3. CryTek are claiming punitive remedies that don't exist (this is a point I'd be interested to see a specialist lawgoon comment on, actually. This is something we can look up).

4. CryTek's definition of "exclusive" can't be right because it would produce absurdities.

5. Ortwin is the BEST LAWYER EVER and CryTek are IMPERTINENT and SCANDALOUS (sic) for saying such nasty things about him and...the other bloke whose name they can't even be bothered to remember.

This is all in the same confrontational and belligerent style as last time, and finishes with a lengthy "no u!"

As before I am a lawgoon but not an American IP and contractual lawgoon, so I will refrain from commenting on the merits and repeat what I said last time. It's written like a smarmy Freeper's manifesto and peppered with statements that CryTek "fails" and "cannot even" and is "so very wrong". The backers will eat it up.

Loxbourne fucked around with this message at 13:26 on Jan 27, 2018

shrach
Jan 10, 2004

daylight ssssaving time

Exclusivity is back on the menu.

Xaerael
Aug 25, 2010

Marching Powder is objectively the worst poster known. He also needs to learn how a keyboard works.

Loxbourne posted:

For those who don't want to read it, it can be summarised as follows:

1. CryTek are MEANIES and BAD and WRONG and CIG are LAUGHING AT HOW WRONG CRYREKT ARE.

2. It doesn't matter anyway because the disclaimer at clause 6.1.4 precludes all claims for damages.

3. CryTek are claiming punitive remedies that don't exist (this is a point I'd be interested to see a specialist lawgoon comment on, actually. This is something we can look up).

4. CryTek's definition of "exclusive" can't be right because it would produce absurdities.

5. Ortwin is the BEST LAWYER EVER and CIG are IMPERTINENT and SCANDALOUS (sic) for saying such nasty things about him and...the other bloke whose name they can't even be bothered to remember.

This is all in the same confrontational and belligerent style as last time, and finishes with a lengthy "no u!"

As before I am a lawgoon but not an American IP and contractual lawgoon, so I will refrain from commenting on the merits and repeat what I said last time. It's written like a smarmy Freeper's manifesto and peppered with statements that CIG "fails" and "cannot even" and is "so very wrong". The backers will eat it up.

Lox, you literally got your companies wrong :p CASE DISMISSED

Lack of Gravitas
Oct 11, 2012

Grimey Drawer
"Your Honor, we provided bug fixes to Crytek four days ago, something we totally had planned to do even before they began this impertinent waste of the Courts time"

:allears:

Adbot
ADBOT LOVES YOU

Malachite_Dragon
Mar 31, 2010

Weaving Merry Christmas magic
So, they're basically doubling down on the "WRONG COMPANY THEREFORE DISMISS" defense, yeah?

  • 1
  • 2
  • 3
  • 4
  • 5