At 6/29/16 02:10 AM, GeoKureli wrote: What city do you live in , and what's your specialty/preference?

Denver (which hosts a lot of really cool shit regarding GPS and cartography, so you'd think..) and I like making useful tools/utilities in C# (which I know is a real thing because Google, Apple, and Battle.net all have those kinds of positions)

Otherwise, I can do some frontend/gui stuff but my preference is backend development. I like cryptography way too damn much, which is funny because I never liked math (theoretical math is super interesting to me and I have no idea why)

All of that aside I'd happily take a job in security or pentesting. Nobody can tell me they don't need more security because at this point I've seen way too much shit. Set me outside your company with my laptop and I will show you all of your internal IP and data.

Hell, I'd go for an IT position, but apparently I'm overqualified for most of them. Nobody's overqualified to answer phones for $8 an hour, though, so that's what I'm doing. (to be fair it's not a terrible deal because it's inbound, pays $10/hr after three months, and is only part-time until I find something else. Plus free coffee and bagels)

/frustration rant

On a quick side-note, today was the first day of training. With the amount of rules, insta-fails, and last warnings they have I genuinely fully expect to get fired within a month.
Using a phone is a last warning. Cluttered desk is an insta-fired plus $1500 fine. Forgot to say something on the phone? Final write-up. That's not even half of it.
Jesus.

At 6/29/16 02:41 AM, egg82 wrote: Denver

I was hoping you would have said Austin, Camarillo, Chicago, Eugene, Los Angeles, New York, San Diego, San Francisco, Dublin, Toronto, or Bangalore, India. My company has offices in these places we hire front-end, back-end, and IT frequently. In this case, I recommend you move.

jk

Honestly though, I heard Denver was pretty up and coming in the tech industry, but it hasn't hit any kind of boom yet. Pretty soon the bay area is gonna burst, and everybody is gonna flock away to form startups in nearby cities where living and operational costs aren't as bad. Denver seems like a likely candidate.

At 6/29/16 02:41 AM, egg82 wrote: Cluttered desk is a [...] $1500 fine.

That's incredibly illegal.

I would just quit if I working at that shit-hole. Hell, you're even being paid less than the minimum wage where I live.

At 6/29/16 01:12 PM, Diki wrote: That's incredibly illegal.

It would be, but it's not them that set up that fine and it's not them that fines me :/

I would just quit if I working at that shit-hole. Hell, you're even being paid less than the minimum wage where I live.

$10/hr is liveable if you have roommates here. In fact, you can afford a decent place with $8/hr and two roommates (three people total), but you wouldn't be able to buy anything extra. $10/hr allows for some extra stuff after all is said and done.

At 6/29/16 04:13 AM, GeoKureli wrote: Honestly though, I heard Denver was pretty up and coming in the tech industry, but it hasn't hit any kind of boom yet. Pretty soon the bay area is gonna burst, and everybody is gonna flock away to form startups in nearby cities where living and operational costs aren't as bad. Denver seems like a likely candidate.

Well, Google Map's HQ is here and (from what I heard) Apple and MS have their "maps" areas here as well (didn't fact-check that last bit, just got the info from a college) - plus there's a metric ton of tech jobs here, I just can't seem to find any that want to hire me.

http://haxeflixel.com/blog/03-HaxeFlixel-4-0-0/

Ok, so it was 2000+ commits from master to dev. That's reasonable, perfectly reasonable

At 6/29/16 10:05 PM, MSGhero wrote: http://haxeflixel.com/blog/03-HaxeFlixel-4-0-0/

Ok, so it was 2000+ commits from master to dev. That's reasonable, perfectly reasonable

https://github.com/Geokureli/HaXe/compare/Flixel4-Upgrade?expand=1
It actually wasn't horrible to fix (136 additions and 115 deletions)

Only thing that's left is that all my tilemaps are totally screwed up, but it's probably just an error is my toCSV conversion

At 6/29/16 05:10 PM, egg82 wrote: $10/hr is liveable if you have roommates here. In fact, you can afford a decent place with $8/hr and two roommates (three people total), but you wouldn't be able to buy anything extra. $10/hr allows for some extra stuff after all is said and done.

it's a personal peeve of mine when cities think they can fix everything by raising the minimum wage, in the end it usually just increases the cost of living. $15/hr to bag my groceries, come on

</political rant>

At 6/29/16 10:25 PM, GeoKureli wrote: it's a personal peeve of mine when cities think they can fix everything by raising the minimum wage, in the end it usually just increases the cost of living. $15/hr to bag my groceries, come on

I wish this weren't true, but it is. Colorado has been pushing hard for $15/hr for the last few months and all of a sudden everyone's surprised they're getting laid off and everything's getting more expensive. Like, duh, you really didn't see that coming? :/

Anyway, for the love of all that is holy do NOT touch this folder.
Yeah, that's about 100GB (60 at the time of picture), and I'm still adding to it.

I'm going to move that drive off my PC in a little while, but for now I'm labeling it "SERIOUSLY DO NOT FUCKING TOUCH"

If anyone else here sets up far too many Win systems, then I found this and it's the best thing ever. Literally just run it, go to lunch, come back, and you've got an up-to-date system.

Edit: By "run it" I mean it generates an iso that you then run on multiple systems. Either way, still really simple.

I want to make a real Linux box now, but there's about a million options:

Ubuntu (I do like this name), Lubuntu (no), and mint. I want to compile haxe projects eventually, but I may also need to do some arduino-like dev. Does it really matter which one I pick? How much RAM and space should I reserve? I'm on an SSD with like 60gb left, and I won't be running a 3D game and the box together. I might want to compile Windows and Linux at the same time, though. And I will need to test the game in the box, though it's not demanding.

Please advise.

At 7/1/16 11:38 AM, MSGhero wrote: I want to make a real Linux box now, but there's about a million options:

Ubuntu (I do like this name), Lubuntu (no), and mint. I want to compile haxe projects eventually, but I may also need to do some arduino-like dev. Does it really matter which one I pick? How much RAM and space should I reserve? I'm on an SSD with like 60gb left, and I won't be running a 3D game and the box together. I might want to compile Windows and Linux at the same time, though. And I will need to test the game in the box, though it's not demanding.

Please advise.

Ubuntu and Lubuntu are mostly the same with different display managers. Mint is based on Debian. Does it matter which one you choose ? Probably not. It's mostly down to preference. Ubuntu is really nice. It's well-maintained and it works out of the box. Unity is pretty nice as well. I think they have a "free software mode" that you can choose if that sort of thing is important to you. I'm not sure if that also disables the amazon integration in the search feature too, but you probably will want to do that.

I also tend to like Debian, although I would go with Debian vanilla and install gnome or i3.

Anyways it's probably not worth spending a ton of time bikeshedding different distros. Just pick one and get going. You can always switch later.

At 7/1/16 11:38 AM, MSGhero wrote: Please advise.

Ubuntu uses the Unity interface since 11 (used to use Gnome/KDE interface) - Lubuntu is a "lightweight ubuntu" or "LXDE Ubuntu" which uses the lightweight LXDE interface (fantastic for old laptops like mine)

If you're looking to save the most resources, use an Arch server.
If you're looking for the lightest-weight Desktop distro, go Puppy or Mint.
If you're looking for lightweight with the full functionality of Debian, go Lubuntu.
If you're looking for a desktop experience, go Ubuntu.

Or Redhat/Fedora I guess if you're into that sorta thing.

Any way you look at it, all the install CDs are ~700MB each and come in live/"try me" form. Pick one you like from the screenshots and run it in a VM. After a while you'll be able to start picking out features you like/don't like and will be able to look a little deeper into the distros.

If you want some suggestions, try these links:
http://www.tuxradar.com/content/distro-picker-0
http://www.linux.org/threads/which-distro-is-right-for-me.4834/
https://distrowatch.com/search.php

At 7/1/16 06:21 PM, egg82 wrote:

Or Redhat/Fedora I guess if you're into that sorta thing.

I will never install anything named Fedora. I don't care that much so I'm just gonna go with Ubuntu. I basically just want Windows but it's Linux instead.

At 7/1/16 06:58 PM, MSGhero wrote: I will never install anything named Fedora. I don't care that much so I'm just gonna go with Ubuntu. I basically just want Windows but it's Linux instead.

https://www.reactos.org/
Well, you asked for it ;)

At 7/1/16 07:16 PM, egg82 wrote: https://www.reactos.org/
Well, you asked for it ;)

No like I require Linux, I just don't want my experience to be any different than using Windows. If Windows had Linux binaries I could compile with, I would not make a VM.

At 7/1/16 07:31 PM, MSGhero wrote: No like I require Linux, I just don't want my experience to be any different than using Windows. If Windows had Linux binaries I could compile with, I would not make a VM.

Then Ubuntu until Win 10's anniversary update.

At 7/1/16 09:13 PM, egg82 wrote:

At 7/1/16 07:31 PM, MSGhero wrote: No like I require Linux, I just don't want my experience to be any different than using Windows. If Windows had Linux binaries I could compile with, I would not make a VM.

Then Ubuntu until Win 10's anniversary update.

I'm not sure if that will count as far as -linux compiling, but if it does then I'm deleting the VM except wait I need it for research never mind. I'll delete it after I graduate.

At 7/1/16 10:08 PM, MSGhero wrote: I'm not sure if that will count as far as -linux compiling

We really don't have any information to go on (it's all speculation and rumors) but in theory it's a complete Ubuntu kernel so it should work just fine.
We'll see, though.

Has anyone contributed to a mainstream open source git library?

cough, MSGHero

I really thought this would be a thing I do all the time, and I'm thinking I'm gonna start with Tiled. I'm gonna start off small, looking at some small bugs to learn the codebase before I even consider adding a feature.

It's kind of awkward, like starting a new job, knowing nothing about a new codebase and constantly telling yourself, "don't refactor things on your first week".

At 7/2/16 10:20 PM, GeoKureli wrote:

cough, MSGHero

I started by adding a small feature that only I needed, then by simplifying some math (think: getting the direction from A to B without doing trig twice), tackled some minor issues that people didn't have time for, completely rewrote the object pool, posting some meta issues, etc etc.

I'm not sure where Tiled is, but since flixel still largely has/had as3 flixel's codebase, there is a lot of room for improvement. Some things are just that the original author wasn't aware of a better algo or wrote something quickly and didn't account for uncommon use cases. There are currently 100 issues, and I just knocked one out really quickly since the OP actually posted the solution but didn't PR. In OpenFL, I fixed a weird ass issue in non-flash Textfields, I could just kinda see what the problem was without looking at any code.

Don't add a feature, or at least post an issue or whatever gathering feedback about it if you want it. Flixel has 2 years of issues and 6 months of open PRs to look through, and some have easy solutions or aren't relevant anymore, but no one remembered to close them.

.. These are the people I work for. Hoooooly shit.
What, does their security team consist of a hamster or something? This is absolutely unacceptable. They can't honestly expect to keep their PCI compliance when I can, as an outsider and with zero previous knowledge, dump all of their databases with private and CC info (as well as internal passwords) in a matter of hours.

/rant

I'm applying for their IT position in a couple of days. I'm gonna fix all this shit.

Last week I created this thread and asked Tom(who responded faster than PsychoGoldfish) about it. He responded, saying that Berserk Studios personally implemented the API feature that allows them to determine what players were supporters, and they are decidedly losing out on ad revenue by doing this.

1. I always had them pegged as a game company that really wants to seem indie, when in fact they were just as bad as the companies whose monetization strategies they bash. It turns out I'm 100% wrong, and they're actually legitimately non-aggressive about monetization and virality over player experience.

2. This API feature may not be something readily available to most devs... yet, and when it is, it may not count towards ad revenue, right away. Apparently, the number of plays from supporters is a small enough percentile where this isn't a huge deal.

All the same, I'm super interested in doing this, I like the idea of adding value to NG supporter package. Honestly, if there was no Newgrounds, I would probably not be a game developer, or even a programmer right now.

At 7/6/16 09:55 PM, GeoKureli wrote: All the same, I'm super interested in doing this, I like the idea of adding value to NG supporter package. Honestly, if there was no Newgrounds, I would probably not be a game developer, or even a programmer right now.

I suggested adding that feature to Psycho a while ago, and he did, so you can access that from the API so long as you know your secret key (which you can test here), which will give you this response:

I have no idea where you go to get your secret key, but I was able to get mine from Psycho via a PM.

edit:

I do have access to the beta API and everything, so that might be why he gave me my secret key. I dunno. I just sent him a PM asking how to authenticate users for HTML5 games and he gave it to me.

At 7/8/16 04:48 PM, Diki wrote: {"success":true,"user_name":"API-Debugger","user_id":10,"images":{"icon":"http://\/img.ngfiles.com\/defaults\/icon-user.gif","profile":"http://\/img.ngfiles.com\/defaults\/image-user.gif"},"supporter":0}

neat

I have no idea where you go to get your secret key, but I was able to get mine from Psycho via a PM.

Every project made in the NG Project Manager has it's own encription key and an App ID

At 7/8/16 07:45 PM, GeoKureli wrote: Every project made in the NG Project Manager has it's own encription key and an App ID

neither of those worked here, maybe it's for restricted access

This is hilarious :D

At 7/8/16 08:34 PM, GeoKureli wrote:

At 7/8/16 07:45 PM, GeoKureli wrote: Every project made in the NG Project Manager has it's own encription key and an App ID

neither of those worked here, maybe it's for restricted access

I'm not exactly sure what it is, but he has to give it to you for now.

@egg82 lol hurtful comments

At 7/8/16 07:45 PM, GeoKureli wrote: Every project made in the NG Project Manager has it's own encription key and an App ID

It's not an encryption key specific to a project; it's just a single key passed to the API server—from your own server, not from the client; it should never be used in a way that the public can know what it is—to verify that the HTTP request being sent was sent by you. You only have one secret key and it can be used for any project you make.

At 7/9/16 10:44 AM, Diki wrote: It's not an encryption key specific to a project; it's just a single key passed to the API server—from your own server, not from the client; it should never be used in a way that the public can know what it is—to verify that the HTTP request being sent was sent by you. You only have one secret key and it can be used for any project you make.

In a swf that can be decompiled easily, how do you prevent people from seeing that key? Are cpp and js exports just as easy to see the source of? I haven't touched the api in a while, so I don't remember when I used that key. Is it even in the code at all?

Edit: even if not, how do you prevent people from seeing other keys in your code?

At 7/9/16 11:16 AM, MSGhero wrote: In a swf that can be decompiled easily, how do you prevent people from seeing that key? Are cpp and js exports just as easy to see the source of? I haven't touched the api in a while, so I don't remember when I used that key. Is it even in the code at all?

You wouldn't put it in your SWF application. It would go on a separate application that acts as your server, such as the WebSocket framework I've been developing for the past while. It only ever exists on your own server, and the public never has direct access to it, so your secret key would never be exposed.

So the way it is used with my framework is like this: when the HTML5 game is viewed, the user's info is passed to the HTML5 application via a query string. (Of course, changing a query string is trivial, so it can't be trusted.) That info is then passed to the server (i.e. the thing running my framework) via WebSocket. The server then takes that info and sends a POST request to newgrounds.io along with the secret key, and newgrounds.io responds that the user info is valid or invalid. If it's valid, the server then accepts further WebSocket messages from the client (i.e. playing the game). The server would never—or should never—be accessible by anyone but you or your team, so there's no risk of someone finding your secret key.

At 7/9/16 11:16 AM, MSGhero wrote: Edit: even if not, how do you prevent people from seeing other keys in your code?

Not much you can ever do about that if the compiled version is publicly available.

At 7/9/16 11:16 AM, MSGhero wrote: Edit: even if not, how do you prevent people from seeing other keys in your code?

You don't. Which is why you never trust the client with this kind of information.