patrick.net

How to post literal asteriks?

I want to post:



But the asteriks get parsed into html:

a b c = xyz

a %2A b %2A c = xyz

Lol, I had not considered this problem. Let me think for a minute...

*

OK, you can do it with:

& # 4 2 ;

If you remove the spaces. Sorry about the trouble @Tenpoundbass

richwicks says

Alternative communication systems.

People are trapped into what they are used to, simply because they are unaware there are other systems they can use.

Not saying mine is a great suggestion, just a silly one perhaps. But using dancing men to communicate, like in that Sherlock Holmes book where instead of letters they used predefined dancing men to hide communication. It's not exactly encryption and is pretty easy to break, but a neat concept with deniability.

I apologize if this was already suggested, but is there a way to allow copying an image and pasting it directly in a post without having to save it to disk and then upload it?

Would it be difficult to implement a reply limit per thread for anon's? I think it's fine if an anon wants to post a few replies here or there, but if they want to get deep into debate, I think they should have to reveal themselves so we can recognize those who may just be trolling, or if we want to use the ignore feature.

There are websites that allow you to setup temp email accounts with no personal info, so this wouldn't really force anyone to give away anything.

porkchopexpress says

allow copying an image and pasting it directly in a post without having to save it to disk and then upload it

Not yet, but thanks for the idea @porkchopexpress

Ah, there is one way @porkchopexpress

If you paste in an image url from another site (ending in .png, .jpg, .jpeg, or .gif) It should be automatically copied into the comment.

Unless the other site doesn't allow it via technical means (like Twitter, for example). But most sites do.

So you can often right-click on an image, "copy image address", and then paste that url in here and the image should appear.

@NuttBoxer What do you mean by an anon? Everyone is anonymous here, unless they choose to use their real name as their user name.

You can still ignore anyone. If they want to get around that, they'd have to register again with a different email and different user name.

Patrick says

Ah, there is one way @porkchopexpress

If you paste in an image url from another site (ending in .png, .jpg, .jpeg, or .gif) It should be automatically copied into the comment.

Unless the other site doesn't allow it via technical means (like Twitter, for example). But most sites do.

So you can often right-click on an image, "copy image address", and then paste that url in here and the image should appear.

Didn't know that. I'll give it a try. Thanks.

Patrick says

@NuttBoxer What do you mean by an anon?

Someone who posts as Misc. I assume that means they didn't sign in at all and are posting as a lurker.

EDIT:
nvm, I didn't realize that was an actual user. Clever name.

I thought I remembered you putting a feature in to allow for posting without logging in at some point. Anyway, the ignore feature was a great idea. Definitely worth using in certain cases.

Yes, at times I did allow posting without logging in, but it generally doesn't work very well.

One that's been creeping up again lately. Noticing people with unpopular opinions are commonly targeted by personal attacks. We don't have a lot of diversity of opinion here. And no matter how wrong those people are, they deserve the right to say their piece without being personally attacked for doing so. I don't want this to be an echo chamber, and I don't come here for flame wars.

NuttBoxer says

One that's been creeping up again lately. Noticing people with unpopular opinions are commonly targeted by personal attacks.

Ever heard of Crocker's Rules?

http://sl4.org/crocker.html?source=patrick.net

The only person that can offend you, really, is yourself. People have called me everything in the book, and the ONLY time I've been offended is when I thought "well, they did make a good point there, maybe I am a fucking idiot?"

Let us distinguish between:

1. expressing a sincerely held point of view which someone else finds offensive (good)

2. deliberately offending others by personal attacks (bad)

Hi Patrick... am I just missing something? How do I change my password for this website? I went to profile section and can change my screen name, email, etc, but didn't see any way to change password.

@SunnyvaleCA

The only way is to use the "forgot password" link. That will issue you a new random password.

I know people want to choose their passwords themselves, but from years in tech, I have learned that a fair number of people will use, say, their banking password. So then if patrick.net got hacked, it's possible that the hacker would get your banking password and your email address. Not good.

So not allowing password choice is a defense mechanism against that. I know it's not great, but I can't think of a better solution.

Patrick says

That will issue you a new random password.
... I have learned that a fair number of people will use, say, their banking password.

That's pretty reasonable, given how much safer it will be for everyone. Maybe you could add a little blurb on the profile section to save people some time?

I believe the problem of reusing of passwords is solved by adding a salt value to the user's password before salting. I remember the old days of UNIX where the operating system kept a text file of names and salted hashed passwords. Everyone could see that file! Maybe that has been broken by brute-force nowadays?

I propose a new Social Network Model.
The missing password question gave me a mind spark.

Instead of a Social Network where extroverted people go beat their chest and expose their inner demons, and cancel themselves for their outrageous ideas.
How about a website you go to that has a selection of Monikers, already with Username and a profile. (lots of preset monikers, with a wide range of personalities and interests)
You don't log in, you don't sign up, you just visit, assume a moniker and make posts much like Twitter, Gab, or Patnet. You may or may not, identify yourself in the post, though it would defeat some of the purpose for this style of Rando Anon Networking.

This idea gives me a lot of curios things to ponder how people will behave. A place where Truth Bombs can posted, without the Canceling or Doxing. Even if the Fuckers get mad at a Rando Anon thread, they'll have no idea, that original poster posted in one of his threads, and he was having a civil conversation with that person.
Monikers wont be vilinized, unless one happens to be the one assholes and trolls' gravitate to.
It would be kind of funny to see hot women posting bathroom mirror duckface shots under the name Farah's Faucet.
I wonder if that kind of platform would illicit the same perpetual victims that like to sign up for the traditional bluemark verified bonefide services?

Patrick says

So not allowing password choice is a defense mechanism against that. I know it's not great, but I can't think of a better solution.

NOTE there is a danger with this - if they are able to get onto your site and monitor the traffic, they can see the password in the clear before it is translated into the "true" password which is the hash.

@Patrick:

I can because I know how Unix does this. Use password salt. So, don't store a password directly, store a hash of the password plus salt:

https://cyberhoot.com/cybrary/password-salting/?source=patrick.net

It's called adding salt to the password. Something that should work well is something like:

SHA256SUM ("user selected password" + "patrick.net" + "user name")

So for me it would be something like

SHA256SUM ("MyEasyPassword patrick.net richwicks") which works out to be:

f67e091546188ba42d39f3706de32ed6009649f013e68a14f7f4a11adba65b9a

The reason you want the salt to change for every user (in this case the salt is "patrick.net richwicks") is that solving for the hash for ONE user, will only solve it for that one user. Somebody trying to crack passwords have to go through the ENTIRE dictionary of possible passwords for every single user, not just once. The hash will be different for each user even if they have the same password.

Also the salt should be last, otherwise a cracker can cheat by doing SHA256SUM ("patrick.net richwicks") ONCE and from that point, start guessing passwords. It reduces the time needed to calculate "patrick.net richwicks" each time. SHA256sums are calculated from left to right.

SunnyvaleCA says

Maybe you could add a little blurb on the profile section to save people some time?

Good idea, I will add a blurb on the profile section.

I already store the passwords md5 encrypted with a salt, but if someone got control of the site, they could see the password when it is sent to the server before I salt and encrypt and compare.

I suppose that problem could be solved by encrypting the password in the browser with js before sending, and then comparing encrypted versions on the server. But then again, if someone got control of the site, they could disable that js. it's a never-ending arms race, so I pre-empt it by just making passwords random. Then the worst they can do now is just fuck with the site, but not with your bank account. I regularly upload new code, overwriting what is on the server, so they couldn't even do that for very long, I think. But surprises abound in the tech world.

Mirror the site on the dark web in case the man tries to shut you down...


https://www.zerohedge.com/markets/death-truth?source=patrick.net

Patrick says

So not allowing password choice is a defense mechanism against that. I know it's not great, but I can't think of a better solution.

Currently the password size is six. anything smaller than eight can easily be hacked now days. Suggest bumping length to at least 10.

Did anyone requested to see only the new messages when clicked on a previously visited threads. This should eliminate lot of redundant traffic.

Well, when you click on a previously visited thread, it should already position the page so that you start at the new comments. Let me know if that is not working.

Patrick says

should already position the page so that you start at the new comments

It starts at the last page of comments, but it doesn't scroll to the location of the last comment I saw previously. If memory serves, if I never visited the thread previously, then it still shows the last page of comments. That sounds like a much easier system to implement, but I think Blue's idea would be great.

Are you clicking on the "unread comments" icon?




If I click that, it pops to the location of the last comment you saw.

Patrick says

Are you clicking on the "unread comments" icon?

Nope! Not discoverable. Just looks like an annoying animated gif designed to further distract me. (Ooops... sorry. "Annoying" is redundant, as all animations are annoying.). I see you have a text description, but I never bothered to roll over that graphic. I thought it just indicated maybe that there were some new messages.

I'll be clicking that now, though!

Well, that's good feedback. I twas obvious to me, but then I created it, lol. Hard for you all to know what I'm thinking.

Maybe I should have every post link simply open at the next unread comment and not at the top.

Oh, and try the "unread" tab which I created a few months ago.

It will open your most recent active, popular, or new post (depending on what tab you're on). You can just click on it over and over to quickly catch up on everything.

I guess that's not obvious either, but I don't know how to explain it succinctly.

I was just scrolling through those tabs today. I think we are in such a hurry, we just don't pay attention to details anymore. Proof: I'm a SW tester, my career exists for that exact reason.

Good to know about the icon, will retrain myself to start using that.

I think it does make sense to jump to the latest unread comment for people who are logged in and click on a post link.

So I'll make that the default action.

How hard would it be to add a DM feature so we can message other users directly?

It would be significant work to add it as an on-site feature, and then I'd have the problem of people threatening each other over DM. I don't want to be the moderator for that kind of thing.

I used to have a "befriend" feature where if you befriended another user and they accepted, you could both see each other's email address. It would not be very hard to bring that back, and would get me out of the moderation game. Should I add that back?

Patrick says

It would be significant work to add it as an on-site feature, and then I'd have the problem of people threatening each other over DM.

I'll tell you how to fix that, any direct message can be made public by either user - maybe have email addresses removed - those are easy to detect \S+@\S\.

So if somebody makes some crazy statement in a direct message, just expose it.

Patrick says

I think it does make sense to jump to the latest unread comment for people who are logged in and click on a post link.

So I'll make that the default action.

OK, I did that thing.

So if you click on a link on the home page or any other list of posts, you'll automatically jump to the oldest unread comment on it.

I use the heck out of the handy "bottom" and "home" links. I notice today the "bottom" link puts you lower in the thread but not to the bottom, I keep having to click the "last" link to get there. Had me confused looking for my "deleted" post at first.

Also, since bringing it up last, I've figured out which tags work for bold, italic, and underline. When you have time, adding a tool to drop open and close links at the cursor, or before and after highlighted text, would be very much appreciated and save on using CAPS for routine stress or emphasis.

Just read the comment above mine, that the "bottom" functionality was changed to "last post read." That's actually a good idea, but you might change the text to "last read" and bring back the "bottom" link with its original function.