Camelia, the Perl 6 bug

IRC log for #mojo, 2011-05-27

| Channels | #mojo index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:31 GitHub113 joined #mojo
00:31 GitHub113 mojo: master Sebastian Riedel * 19f6f6d (1 files in 1 dirs): added file upload example to lite tutorial - http://bit.ly/l9xdLU
00:31 GitHub113 left #mojo
00:31 sri ok, that should cover the important bits :)
00:38 GitHub155 joined #mojo
00:38 GitHub155 mojo: master Sebastian Riedel * de42366 (1 files in 1 dirs): improved Mojo::Upload documentation - http://bit.ly/mx9H0t
00:38 GitHub155 left #mojo
00:45 perlrocks Twitter: "@mhorsfall did you considered #mojolicious? @kraih, inventor of #catalyst is actively working on it." --alexsergeyev http://twitter.com/alexserge​yev/status/73912798635229184
00:58 GitHub115 joined #mojo
00:58 GitHub115 mojo: master Sebastian Riedel * f825c60 (1 files in 1 dirs): fixed typo - http://bit.ly/jFpiV0
00:58 GitHub115 left #mojo
01:08 crab hmm.
01:09 crab when i upgraded perl, i inadvertently also upgraded mojo. but, no problems.
01:15 vel left #mojo
01:40 alnewkirk sri, have you looked at Mongoose
01:44 sri alnewkirk: of course, it's one of the more innovative ODMs out there, even though javascript makes it kinda ugly
01:44 alnewkirk sri, I think your ODM should extend that
01:44 sri ?
01:45 alnewkirk how does, javascript makes it kinda ugly?
01:45 sri dunno what you mean with extend
01:46 sri http://mongoosejs.com # you surely can't call those examples pretty
01:46 alnewkirk http://search.cpan.org/~rodrigo​/Mongoose-0.10/lib/Mongoose.pm
01:47 alnewkirk confusing this is ... ?
01:47 sri never seen the perl thing, looks like a cheap knockoff
01:48 alnewkirk sri, its actually quite complete
01:48 miyagawa write it in coffeescript and problems solved.
01:48 alnewkirk wrappers for wrapper for wrappers
01:48 sri the coffeescript situation is actually quite funny, node.js hardliners hate it with a passion
01:49 miyagawa real men write javascript by hand
01:49 sri !
01:49 miyagawa :)
01:49 sri alnewkirk: don't think i care about the perl Mongoose thingy
01:49 alnewkirk lol @  real men write javascript by hand
01:50 alnewkirk sri, you said you were thinking about writting an ODM
01:50 sri yea, but i don't see what's special about Mongoose.pm
01:51 sri it is a clone of mongomapper as far as i can see
01:51 sri what makes Mongoose.js interesting is that it is non-blocking
01:52 alnewkirk i think its quite fetching
01:53 sri are there any differences to mongomapper?
01:54 alnewkirk not familiar with mongomapper, at first glance, no, but i like the Moose mapping and relationship handling
01:54 alnewkirk i dont like that its not PP
01:55 sri you should take a look around first then
01:55 sri many good ODMs out there
01:55 sri always look at the originals
01:55 alnewkirk ODMs for Perl
01:56 sri dunno why you would limit yourself to one programming language
01:56 alnewkirk simplicity
01:56 purl Alfred North Whitehead: "Seek simplicity but distrust it."
02:06 sri http://mongomapper.com # the original
02:07 sri Mongoose.pm doesn't look exactly pretty compared, even though it's a port
02:12 crab sigh. ~/misc/old-root/root/old-root/root/old-root/root
02:12 sri looks old
02:12 crab at least i'm consistent.
02:13 perlrocks Twitter: "Let's make something by now Mojolicious" (ja) --DRZ400SM http://twitter.com/DRZ400S​M/status/73934741098868737
02:28 alnewkirk mongomapper is purty
02:35 tholen42 joined #mojo
02:37 tholen left #mojo
02:41 ryanc left #mojo
03:00 vel joined #mojo
03:02 vel left #mojo
03:40 D4RK-PH0ENiX joined #mojo
03:42 d4rkie left #mojo
03:51 d4rkie joined #mojo
03:53 D4RK-PH0ENiX left #mojo
04:03 Alias joined #mojo
04:09 Alias left #mojo
04:20 D4RK-PH0ENiX joined #mojo
04:22 d4rkie left #mojo
04:41 d4rkie joined #mojo
04:43 D4RK-PH0ENiX left #mojo
04:59 D4RK-PH0ENiX joined #mojo
05:01 d4rkie left #mojo
05:13 koban` joined #mojo
05:18 AigleNoir left #mojo
05:19 AigleNoir joined #mojo
05:28 preflex left #mojo
05:30 preflex joined #mojo
05:46 D4RK-PH0ENiX left #mojo
05:48 arthas left #mojo
05:48 arthas joined #mojo
06:21 AmeliePoulain joined #mojo
06:24 fhelmber_ joined #mojo
06:28 MisterHatt can anyone tell me if is_secure can be used as a routing constraint, or is it only for use inside controllers?
06:29 MisterHatt alternatively, any other way to force https usage and/or force a redirect to https page
06:35 cosmincx joined #mojo
06:36 wolf__ left #mojo
06:37 d4rkie joined #mojo
06:38 arthas left #mojo
06:38 arthas joined #mojo
06:57 ysyrota joined #mojo
07:51 abra left #mojo
08:02 abra joined #mojo
08:04 metaperl left #mojo
08:26 cosmincx left #mojo
08:27 cosmincx joined #mojo
08:30 crab misterhatt: still here?
08:34 crab misterhatt: (a) read http://toroid.org/ams/etc/mixing-http-and-https (b) see https://github.com/amenonsen/Gadwall​/blob/master/lib/Gadwall/Auth.pm#L15
08:48 MisterHatt ah brilliant, thanks
08:49 MisterHatt I have learned two things today, one is that watching stargate instead of fixing a critical security hole is a bad but fun idea, and the other is that I am terrible at google
08:50 AigleNoir left #mojo
08:51 AigleNoir joined #mojo
08:57 crab is your critical security hole non-https access to login forms?
09:01 crab you're watching stargate again, aren't you.
09:02 MisterHatt nope, still here
09:02 MisterHatt critical security hole was a massive sql injection issue in something unrelated to perl
09:03 MisterHatt resulted in full perm access to our user database, caught it before deployment at least
09:03 arthas left #mojo
09:04 arthas joined #mojo
09:06 crab ouch.
09:07 MisterHatt that DB was also tied into sshd auth so especially bad
09:17 abra left #mojo
09:17 abra joined #mojo
09:18 perlrocks Twitter: "Page load not that bad on this shared hosting setup,~1.8-2.5s loading Moose,DBIC,Mojo on every req. (in CGI mode :) #mojo #moose #dbic #perl" --arpadszasz http://twitter.com/arpadsza​sz/status/74041893335465984
09:23 jwang left #mojo
09:31 spleenjack left #mojo
09:31 perlrocks Twitter: "Get HTTP methods / Mojolicious http://dlvr.it/T9Zyb Reference" (ja) --hiraba_reader http://twitter.com/hiraba_rea​der/status/74045011796295680
09:31 spleenjack joined #mojo
09:34 MisterHatt crab: I do wonder if just sticking to https the whole time is easier
09:35 crab MisterHatt: if you can do that, it's probably best.
09:35 crab then you can do the initial http-to-https redirect solely in apache (or whatever) and never worry about it in your app.
09:35 MisterHatt well I don't see any reason why not besides for maybe mobile, but iirc mobile browsers can all do https now anyway
09:36 crab the only production mojo app i have right now is https-only. but my next one will be mixed, with https only for and after authentication.
09:36 MisterHatt the app I'm working on right now is 99% authenticated content only, so https for everything makes sense
09:42 snearch joined #mojo
10:05 fmerges joined #mojo
10:05 perlrocks Twitter: "Using Perl, Mojolicious and Redis in a real world asynchronous application: Forum::::. CS Forum / Perl / CGI ... http://bit.ly/m4vKx8" (ar) --saherteam http://twitter.com/sahertea​m/status/74053649088786432
10:06 Akron joined #mojo
10:08 sh4 joined #mojo
10:18 perlrocks Twitter: "Using Perl, Mojolicious and Redis in a real world asynchronous application: صورة: http://www.saher-team.com/sahe... http://bit.ly/krsJXb" --saherteam http://twitter.com/sahertea​m/status/74056924164919296
10:21 snearch_ joined #mojo
10:21 snearch_ left #mojo
10:34 tabbi joined #mojo
10:34 tabbi left #mojo
10:38 arthas left #mojo
10:41 arthas joined #mojo
10:57 AigleNoir left #mojo
12:15 ivkosh joined #mojo
12:17 ivkosh left #mojo
12:46 dekimsey joined #mojo
12:48 AmeliePoulain I was send some unicode data (cyrillic) to my method via AJAX, dumped it and has many '\x{fffd}\x{fffd}\x{fffd}...'. In other methods I have normal russian text. Where is mistake can be?
12:51 sh4 left #mojo
13:01 cosmincx left #mojo
13:13 fish_ mcfly: great, i'll be there around 6-7pm - i'm working only a few meters away
13:13 fish_ oops
13:52 snearch left #mojo
14:10 amoore joined #mojo
14:10 AmeliePoulain left #mojo
14:16 zamolxes left #mojo
14:26 spleenjack left #mojo
14:38 Akron left #mojo
14:39 kaare joined #mojo
14:47 metaperl joined #mojo
14:51 koban` left #mojo
15:03 d4rkie left #mojo
15:26 ysyrota left #mojo
15:32 AigleNoir joined #mojo
15:33 sh4 joined #mojo
15:35 perlrocks Twitter: "Released #svg version of the #perl 5 raptor logo, enjoy. :) http://t.co/KnQTCX0 #mojolicious" --kraih http://twitter.com/kraih/status/74136538342096898
15:42 marty sri++
15:43 sri tried to put the attribution section in layman's terms
15:43 marty Now we can scale the raptor large enough to eat cars
15:44 sri :o
15:46 Foxcool joined #mojo
15:46 crab every time i think "crab, you should be professional and change the default puking-raptor 500 page", somehow i end up thinking "ok, i'll do it later"
15:47 sri bad crab
15:47 metaperl what is "the raptor"?
15:47 sri see tweet above
15:48 sri https://github.com/kraih/perl-rap​tor/blob/master/raptor-black.png
15:48 sri it's the perl 5 logo i made
15:48 crab sri: today i realised that if one of my AJAX-y popup dialogs, it causes a transparent puking-raptor to hover mysteriously over the page and then disappear
15:48 crab er, if one of my AJAXy popup dialogs is reporting a 500 error on the server, i mean.
15:48 sri http://kraih.spreadshirt.net/ # you can also get it on t-shirts *hint hint*
15:49 sri lol
15:49 sri that should be a feature!
15:52 sri can you believe that i've not sold any of these yet? :( http://kraih.spreadshirt.de/mojolicious-fa​ilraptor-shirt-A15601602/customize/color/3
15:52 crab it's like the site is saying "whatever you did, don't do it again!"
15:58 sri btw. the latest batch of spreadshirt t-shirts is just awesome
15:58 sri all flock print
15:59 sri cloth printed on cloth
15:59 * marty thinks sri is a graphics designer trapped in a programmers body
16:00 metaperl larry is a poet trapped in a language designers body, so why not?
16:00 metaperl s/poet/violinist/
16:01 marty Larry is a poet and he didn't even know it.   wakka wakka wakka
16:01 sri perl is a great language for artists, so much room for creativity
16:03 marty Even more than Ruby?  :p
16:03 * marty ducks
16:03 sri way more
16:04 marty I've never messed with Ruby much so I do not know first hand.  But I think I read somewhere that you (sir) went to the Ruby side and came back, so perl must have some benefits for you.
16:05 sri it's true, i've been to the dark side :o
16:05 crab you don't have to call him sir, he's just an ordinary person
16:05 * crab hides
16:05 metaperl "sri" means holy or revered in sanskrit
16:05 marty lol
16:05 sri :D
16:05 marty so either way, sri is god
16:06 marty sri: you are so huge, so magnificent, yada yada yada.  (remember that one?)
16:06 sri purl: sri is also a holy cow
16:06 purl that is too long, sri
16:06 crab metaperl: only sorta
16:06 sri purl: sri?
16:06 purl i guess sri is A PONIE!!1! and a  or no more a javascript noob or evil or a spelling guerilla or the temporary channelclown or a snob now or the perl guerilla or a small mouse with a big head aiming for world domination or the evil sith or has no clue about fuzzy logic or no longer a real hacker :/ or a copycat or pimp to many children or a holy man or looks a lot like pitr or puny or doing ruby now until perl6
16:06 crab in practice, "sri" is just a polite form of address. like "mr." in english.
16:11 metaperl http://en.wikipedia.org/wiki/Sri --- '''polite form of address equivalent to the English "Mr." in written and spoken language, or as a title of veneration for deities (usually translated as "Lord").'''
16:13 arthas left #mojo
16:13 crab yeah, but it doesn't inherently mean holy or revered
16:13 marty ahh, I new it!  Either way, Mr sir sri is god.  :)
16:13 sri purl: sri is also unholy
16:13 purl okay, sri.
16:15 crab if you rearrange sri's last name according to secret wisdom hidden in the arrangement of ancient egyptian pyramids, you get riddle. combine that with metaperl's quote, and you have lord riddle.
16:15 crab so sri is voldemort.
16:16 marty crab++
16:16 * sri vanishes in a cloud of smoke
16:31 ajgb left #mojo
16:34 kaare left #mojo
16:37 fmerges left #mojo
16:48 fhelmber_ left #mojo
17:07 vel joined #mojo
17:10 ua left #mojo
17:42 marty left #mojo
17:44 stephen left #mojo
17:45 marty joined #mojo
17:48 stephen joined #mojo
17:55 perlrocks Twitter: "The problem is similar to the one found in @ vtivti Mojolicious. More information here wrote: http://blog.truecrux.org/post/viii" (ru) --truecrux http://twitter.com/truecru​x/status/74171770600562688
17:59 alnewkirk how would i get a hashref of all params, get, post, etc
18:01 sri req->params->to_hash or so
18:02 sri looks like dancer has the exact same security issue we had xD
18:02 alnewkirk cool, thanx
18:02 alnewkirk what issue was that?
18:02 sri and the russians once again disclosed it before it could be fixed
18:02 sri http://blog.truecrux.org/post/viii
18:04 sri you can grab any file the process is allowed to read... /etc/passwd and so on
18:04 sri also called a directory traversal bug
18:04 alnewkirk ... hot damn
18:05 sri we made a lot of fuzz to get people to upgrade when it happened, wonder if they have the balls to do the same :)
18:06 * alnewkirk tries to resist the urge to hack known sites using new perl frameworks
18:06 marcus heh
18:14 alnewkirk i read an article once about the importance of coming clean with your end-users (when something goes wrong)
18:16 sri yea, security issues happen, what matters is how you handle them
18:18 alnewkirk -- rework by jf and dhh
18:25 iSage joined #mojo
18:28 iSage left #mojo
18:28 marcus humm, for some reason dancer suddenly looks empty in my client.
18:32 * crab tries to figure out what marcus means
18:33 marcus crab: the place where it lists nicks, it was suddenly only listing 1. Works again now. Guess it was a bug in textual.
18:35 tempire have you settled on textual?
18:35 tempire it looks like limechat
18:37 marcus it's a limechat fork
18:37 marcus it has stuff like fullscreen which I like tho. and it's more polished
18:37 marcus I compiled it myself
18:38 d4rkie joined #mojo
18:39 marcus testing the unstable branch now for fun :)
18:40 marcus hmm
18:40 marcus scary :)
18:43 crab marcus: ah, your irc client. ok.
19:02 D4RK-PH0ENiX joined #mojo
19:03 d4rkie left #mojo
19:17 sri goodbye google translate api
19:18 sri http://googlecode.blogspot.com/2011/05/s​pring-cleaning-for-some-of-our-apis.html
19:23 chansen I don't use it, but I can feel the pain for fellow developers
19:24 sri no more funny japanes and russian tweets in this channel :(
19:24 crab doesn't perlrocks use the... ah yes.
19:24 sri *+e
19:24 * crab tries to look sad
19:25 sri what's really sad are the reasons
19:25 miyagawa "economic burdens"?
19:25 miyagawa that's lame. google
19:25 sri apparently people have abused the api to trick the google crawlers
19:25 sri generating new content in more languages on the fly
19:26 miyagawa ... clever.
19:26 d4rkie joined #mojo
19:26 crab haha
19:26 crab seems there's an alternative
19:27 chansen they could offer a commercial and a free accesses  for non-profit organizations/projects such as mojo
19:28 D4RK-PH0ENiX left #mojo
19:37 snearch joined #mojo
19:40 crab the comments on that page all seem somewhat familiar
19:41 sri http://msdn.microsoft.com/e​n-us/library/ff512419.aspx # interesting
19:44 yko left #mojo
19:45 sri guess we could also just scrape google translate :)
19:57 sugar joined #mojo
19:59 metaperl left #mojo
20:04 snearch left #mojo
20:11 Foxcool left #mojo
20:24 dekimsey left #mojo
20:31 ryanc joined #mojo
20:36 sh4 left #mojo
20:47 amoore left #mojo
20:47 perlrocks Twitter: "Interesting to see how other #perl web frameworks handle serious security issues. #mojolicious" --kraih http://twitter.com/kraih/status/74215270692044800
20:50 metaperl joined #mojo
21:21 crab what'd they do?
21:28 crab how can i use ->render_static() and serve the data with an arbitrary mime type?
21:28 crab like, one that doesn't have a nickname like 'txt'
21:31 sugar does anybody solve problem like this?
21:31 sugar http://pb.rbfh.de/2Awi1BllgCC4p
21:31 sugar it's dotcloud
21:32 miyagawa sugar: do you have json.py in your current directory?
21:33 miyagawa or something crazy like that?
21:33 sugar no
21:33 miyagawa change directory to somewhere else and retry
21:33 purl miyagawa: that doesn't look right
21:33 sugar i've install python-json module
21:33 miyagawa you shouldn't need it it's bundled in python 2.6
21:34 miyagawa what do you get if you launch python, and then type 'import json' and 'dir(json)'
21:34 sugar try in another dit, same problem
21:35 miyagawa i guess you should uninstall that python-json module
21:35 miyagawa dunno what that is, but it's not required anyway
21:35 sri crab: ->res->headers->content_type(...)
21:35 sri or add your type
21:36 sugar i get array of values
21:36 sugar ['JsonReader', 'JsonWriter', 'ReadException', 'WriteException', '_StringGenerator', '__builtins__', '__doc__', '__file__', '__name__', '__package__', 'read', 'string', 'types', 'write']
21:36 miyagawa yeah
21:36 miyagawa clearly you have to uninstall that py-json thing
21:37 crab sri: i can call rsh->content_type() after calling render_static?
21:37 miyagawa you should get: ['JSONDecoder', 'JSONEncoder', '__all__', '__author__', '__builtins__', '__doc__', '__file__', '__name__', '__package__', '__path__', '__version__', '_default_decoder', '_default_encoder', 'decoder', 'dump', 'dumps', 'encoder', 'load', 'loads', 'scanner']
21:37 sugar ok, but dotcloud requires it
21:37 sugar hmm, differnet versions?
21:37 sri crab: sure
21:37 miyagawa sugar: how did you install dotcloud
21:38 sugar ImportError: No module named json
21:38 sugar easy_install dotcloud
21:38 miyagawa sugar: your python is broken
21:39 miyagawa json is "core" in python 2.6
21:39 sugar hmm
21:40 sugar what version of json in core python?
21:40 sugar 2.6
21:40 miyagawa json 1.9 in my python 2.6.1
21:41 sugar ok thx
21:42 miyagawa sugar: what kind of python is that
21:42 miyagawa built yourself or come with OS?
21:42 sugar shipped in my distro
21:42 miyagawa which distro
21:42 purl which distro are they in?
21:43 sugar i found another json in my distro, trying ut
21:43 sugar altlinux, russian distro ))
21:46 sugar ['JSONDecoder', 'JSONEncoder', '__all__', '__author__', '__builtins__', '__doc__', '__file__', '__name__', '__package__', '__path__', '__version__', '_default_decoder', '_default_encoder', 'decoder', 'dump', 'dumps', 'encoder', 'load', 'loads', 'scanner']
21:46 miyagawa looks good now
21:46 sugar same
21:46 sugar but does not work
21:46 miyagawa now what
21:46 purl now is the time for the Kwisatz Haderach to arise and conquer America on a sandworm army
21:46 miyagawa should be a different error now
21:46 sugar yes
21:46 sugar ValueError: No JSON object could be decoded
21:49 miyagawa sugar: you can ask on #dotcloud on freenode, or open a support ticket
21:49 vel left #mojo
21:50 sugar ok thx
22:46 sugar left #mojo
23:18 GitHub193 joined #mojo
23:18 GitHub193 mojo: master Sebastian Riedel * 4928309 (1 files in 1 dirs): added more links to lite tutorial - http://bit.ly/k74G9W
23:18 GitHub193 left #mojo
23:22 GitHub110 joined #mojo
23:22 GitHub110 mojo: master Sebastian Riedel * 2cf59ac (1 files in 1 dirs): fixed typo - http://bit.ly/jtJ1qR
23:22 GitHub110 left #mojo
23:57 j3nnn1 joined #mojo
23:58 gbacon joined #mojo

| Channels | #mojo index | Today | | Search | Google Search | Plain-Text | summary