IRC log for #friendlyjava, 2015-11-20

##friendlyjava on freenode

All times shown according to UTC.

Time	Nick	Message
02:53		nanoz joined ##friendlyjava
06:02		jennyb joined ##friendlyjava
08:06		jennyb joined ##friendlyjava
12:08		jennyb joined ##friendlyjava
15:14		jennyb joined ##friendlyjava
15:37		bluezone joined ##friendlyjava
16:57		nanoz joined ##friendlyjava
17:28		kazaf joined ##friendlyjava
21:00	pulsar	pdurbin: i have seen worse today
21:00	pulsar	had to integrate with an user database for my auth* stuff
21:00	pulsar	which stores the user passwords
21:00	pulsar	hashed
21:00	pulsar	with md5
21:00	pulsar	no salt
21:02	pulsar	i wonder how long i will keep this gig after emailing every person on the project a screenshot listing top 100 "decrypted" passwords from the database with an idiot proof step-by-step instructions how to do that.
21:02	pulsar	apparently lots of coder accounts in there. > 50 user records had "foo"
21:02	pulsar	and > 30 had a "master" password
21:03	pulsar	support too. a lot
21:03	pulsar	stopped looking at with occurences lower than 20 though
21:05		jennyb joined ##friendlyjava
21:28	pdurbin	pulsar: we're using BCrypt and I think our passwords are secure: https://github.com/IQSS/dataverse/issues/1034
21:29	pdurbin	nice to see new people here. hi jennyb and kazaf
21:35	pdurbin	".@vlad_mihalcea @hibernate me too. My feature request for #JPA 2.2: case insensitive uniqueness constraints https://github.com/IQSS/dataverse/issues/2598#issuecomment-158219334 #java" https://twitter.com/philipdurbin/status/667772604070146048
21:36	pdurbin	Does anyone know how to make a feature request for JPA?
21:37	sfisque	join the jsr
21:45	jennyb	hi. (re pdurbin) I'm a java dev with 15+ years in the field, also teach newbies. just kinda hanging out.
21:50	sfisque	nice! good to see other long time java users :-) (cut my teeth on 0.9b)
21:51	jennyb	:)
21:52	jennyb	1.0 wasn't a stable enough compiler for me to get anywhere, so my useful knowledge starts with 1.1
21:53	sfisque	lies!!!! everything after 1.0 is just frosting :P
21:53	jennyb	heh.
22:21	pdurbin	jennyb: nice. you should consider hanging out in #openhatch. some very nice people there teaching newbies
22:22	pdurbin	sfisque: which one? https://jcp.org/en/jsr/all
22:27	sfisque	whichever one targets JPA-next. i think that page is outdated. it doesnt even list jpa 2.2
22:55	pdurbin	sfisque: is that what it's called? "JPA-next"?
23:19	pulsar	pdurbin: bcrypt is also what spring recommends
23:20	sfisque	no, that was my ephemism for jpa 2.3/3.0/whatever is next version
23:34	pdurbin	right. maybe JPA 3.0 is the next version. I have no idea. is there any roadmap?
23:35	pdurbin	hibernate seems to have a roadmap: http://hibernate.org/orm/roadmap/
23:35	pulsar	perhaps via jcp?
23:36	pdurbin	hmm, not much at https://wiki.eclipse.org/EclipseLink/Development/RoadMap
23:36	pdurbin	pulsar: but nothing is listed at https://jcp.org/en/jsr/all
23:36	pdurbin	about whatever the next version of JPA is
23:36	pdurbin	maybe JPA is feature complete ;)
23:36	pulsar	https://jcp.org/en/jsr/detail?id=317 - there was something for 2.0 up there
23:38	pdurbin	pulsar: that's for 2.0. this one is for 2.1: https://jcp.org/en/jsr/detail?id=338
23:39	pdurbin	nothing for 2.2 or 3.0 :(
23:39	pulsar	338, yeah, just found that too
23:39	pulsar	but not much more
23:39	pulsar	2013... k
23:39	pdurbin	maybe they're sick of working on JPA
23:39	pulsar	well, perhaps they wait for hibernate to lead the way ;)
23:41	pulsar	did not pay much attention lately to jcp/jsrs, how did things work out with oracle in that regards?
23:51	pdurbin	pulsar: oracle keeps adding new JSRs on that list. for Java EE 8 for example
23:51	pdurbin	so I think the list is up to date
23:52	pulsar	i am more concerned about the "community" part in jcp
23:56	pdurbin	I mean I guess I could try to join the java ee 8 mailing list and ask if there's a roadmap for jpa.
23:57	pdurbin	seems weird though

##friendlyjava on freenode