greptilian logo

IRC log for #friendlyjava, 2018-04-29

##friendlyjava on freenode

| Channels | #friendlyjava index | Today | | Search | Google Search | Plain-Text | plain, newest first | summary

All times shown according to UTC.

Time S Nick Message
06:27 nanoz joined ##friendlyjava
07:34 nanozz joined ##friendlyjava
07:43 nanozz joined ##friendlyjava
12:56 aditsu damn, java's sort implementations are scary
13:10 pdurbin I guess I do most of my sorting in the database.
13:12 aditsu I'm studying and implementing some algorithms
13:13 pdurbin I'm listening to Sad Robot by Pornophonique: https://www.youtube.com/watch?v=u7Dg3LrhmIY
13:15 aditsu strange :p
13:19 pdurbin aditsu: did you say you're in Hong Kong?
13:19 aditsu yeah
13:19 pdurbin I'm sort of heading to your part of the world in a week. Indonesia.
13:21 aditsu that's still far.. what are you doing there?
13:22 pdurbin I'm giving a talk: http://lipi.go.id/pengumuman/Workshop-on-Management-of-Research-Data-to-Improve-Research-Quality/20266
13:23 aditsu cool
13:23 pdurbin I'm not sure how much I'll be talking about Java but our app is written in Java.
13:25 nanozz i'm breaking my head on java security
13:25 nanozz package
13:27 nanozz is this live talk
13:28 pdurbin live talk? :)
13:28 nanozz via online
13:30 nanozz your Project Manager? pdurbin ??!
13:31 nanozz i thought you guys were Architect
13:32 pdurbin I'm not. It's a mistake. I'm not an architect either. I'm just a code monkey.
13:32 pdurbin Hopefully a corrected version will be up soon. I let them know.
13:33 nanozz is there any open source project you work on?
13:34 aditsu dataverse is open source, isn't it?
13:35 pdurbin yep, pull requests welcome! https://github.com/IQSS/dataverse
13:35 nanozz do be clear dataverse is a framework
13:35 nanozz for data analysis
13:35 nanozz similar like R
13:37 nanozz there are 824 issues
13:49 pdurbin nanozz: data *hosting* is more of a focus but "external tools" can be added for analysis
13:55 pdurbin Is 824 open issues too many?
14:00 aditsu depends on the size of the project
14:02 nanozz joined ##friendlyjava
14:04 pdurbin Do you mean lines of code?
14:12 pdurbin Or some other measure of size? Number of users?
14:15 nanozz too many open issues
14:15 nanozz its takes too long to fix it.
14:16 aditsu lines of code can be a metric, yes; I'm mainly thinking about complexity and number of features
14:16 aditsu although the number of users also has an effect, I guess
14:18 pdurbin Features are easy enough to count, I guess. I'm not sure how you'd measure complexity.
14:20 pdurbin nanozz: too long to fix all the issues, you mean? Any one issue may not take too long to fix. It depends on the issue. We do some backlog grooming every other week and try to estimate them as 1, 2, 3, 5, 8, etc.
14:24 aditsu https://en.wikipedia.org/wiki/Cyclomatic_complexity
14:40 pdurbin I talked about conditional complexity at https://www.youtube.com/watch?v=Y6udg_seKrY but it wasn't my term. It's my understanding that cyclomatic complexity is the same or similar.
16:42 mr_lou joined ##friendlyjava
16:49 nanozz i'm following pdurbin but i never actually noticed it
22:46 rubbercable_m3 joined ##friendlyjava
22:49 rubbercable_m3 is it theoretically possible to rotate jks/jceks without restarting the java or tomcat app?
22:54 aditsu rubbercable_m3: if it's for https, I recommend doing it in nginx or some other web server instead (reverse proxy)
22:54 rubbercable_m3 hmm.
22:54 * pdurbin agrees with aditsu
22:56 aditsu I can renew a certificate and restart nginx without affecting the java web server
22:57 rubbercable_m3 yeah - i wonder if an app can support two keys simultaneously - so it won't kill the current sessions (allow it to expire/drain)
22:58 aditsu if you don't restart the java server (or if it persists sessions to disk), they will be preserved
22:59 rubbercable_m3 i've not read up much on keymanagemeent services. do they work with that i wonder
22:59 rubbercable_m3 or do they do a complete different thing
23:00 aditsu no idea
23:00 rubbercable_m3 youtubing :)
23:17 rubbercable_m3 no i don't think it's possible the way the devs want it.
23:17 rubbercable_m3 they want to issue new session-keys (tls?) with a 6hr expiry
23:48 aditsu rubbercable_m3: I think session keys are generated automatically (and randomly) within TLS, it don't think they're something you would put in a keystore or manage explicitly in an application
23:50 aditsu they're used for encrypting the actual communication with minimal overhead, after negotiation the initial connection (where the stored keys/certificates are involved)

| Channels | #friendlyjava index | Today | | Search | Google Search | Plain-Text | plain, newest first | summary

##friendlyjava on freenode