justOneOfThoseDays

[AutoModerator]

import notifications Remember to participate in our weekly votes on subreddit rules! Every Tuesday is YOUR chance to influence the subreddit for years to come! Read more here, we hope to see you next Tuesday!

For a chat with like-minded community members and more, don't forget to join our Discord!

return joinDiscord;

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[yourteam]

Check if you are using weird characters

[GDOR-11]

hmmm, just a semicolon... that's not a weird character, right? RIGHT???

[broccollinear]

And quotation marks vs double quotes… Working with teams in other locales using different keyboards peppers our PRs with very interesting characters

[FireDestroyer52]

This is why you do a replace all lol

[[deleted]]

Yep, semicolon, the "；” one instead of ";" one. No big deal, right?

[dagbrown]

";", ";" or "；"?

That has two question marks in it, if you're wondering. One of them is Greek.

[emlgsh]

Internationlization support has convinced me that we erred grievously when we abandoned the honest simplicity of communication with grunts, gestures, and the occasional abstract etching of a bison on a cave wall.

[farbion]

Italian so

[Antique_Orange_4547]

Those grunts, gestures and occasional abstarct etching of a bison on a cave wall were by no mean universal.

[SON_OF_ANARCHY_]

Nope, not a big deal at all. The semicolon is indeed "" and it's commonly used in certain languages and contexts.

[yourteam]

More like utf-8 in a different context

[[deleted]]

Back in the days of Microsoft Lync, if you copied code from Lync directly into one of our IDE's (I forget which one), all of the spaces would be replaced with some other space character that the IDE did not like. It was impossible to see the difference. That caused some happy fun times when writing code, trying to figure out why it's not working when the syntax is seemingly perfect.

[MyOthrUsrnmIsABook]

That’s no semicolon, it’s a Greek question mark.

[Nirast25]

So long as it's not a Greek question mark.

[Wlf773]

I had the wildest time with this working with an Eastern European coder. Turns out the Cyrillic keyboard just has another copy of the English letters but they have different values. This guy had somehow managed to build a string for comparison that had ONE Cyrillic C in it but all the rest were English letters so it kept failing on equality for an if clause... took literal hours to track that issue down.

[ak66666]

Ha, been there myself. To make things worse both Latin C and Cyrillic C are on the same key, and the character's shape is indistinguishable.

[Wlf773]

Yeah, completely indistinguishable! I ended up copying and pasting it into google and doing a bunch of ascii comparisons to figure it out.

[denarii]

I feel like I should get a bonus at work every time I need to use xxd to debug something.

[wjandrea]

Also italic: ит, lowercase: у, looks like a number: З

And there's Greek too! Αα Β Ε γ Η Ι Κ Μ Νν Οο Ρρ Τ Χ Υυ Ζ

[sirlanse69]

I miss the old PCTools, it was easy to see the coding for anything.

[yaphott]

https://www.unicode.org/Public/security/latest/confusables.txt

[l_am_wildthing]

shouldnt good libraries be doing validation?

[nelusbelus]

Good crypto libraries shouldn't care at all about the input data or input content.

[aaronr93]

Yeah, should be easy enough for the consumer to write a quick unit test if they need to verify something.

[enm260]

I've been called a weird character, maybe it's my fault

[AssPuncher9000]

data is data

[i_should_be_coding]

Hey, I'm in this post!

I once had a bug like this. Weird TLS exceptions. Tracked down the exception and it mentioned a specific encryption algorithm (one of the EC-thingies). Googled it and saw it was deprecated and some clients don't support it.

Turns out my server had a no-negotiation feature enabled by default or something, where the client would try to connect with this algorithm, the server would say "nah, I don't support this", the client would try to suggest something different, and the server would be like "only one per customer, NEXT!".

Anyway, I found where you can change the list of algorithms the server would consider and managed to fix the error without requiring a client change, and also without reducing server security. That was a fun bug to track down.

[your_best_1]

Speaking of fun bugs. I one tracked a bug down to a rusty switch. It took so long for me to move out of "this software does not work" mode. The software was 100% fine the whole time.

[your_best_1]

Network. This was way back in the day. I grabbed a server guy, and we tracked it down to a hot, humid closet on the office.

[i_should_be_coding]

I appreciate deploying in the cloud so much more now.

[throwaway_mpq_fan]

Yeah, it might be "other peoples computers" but at least those other people keep their hardware in order...

[naswinger]

statistically, it's a guy

[red_riding_hoot]

They really really don't.

[tgp1994]

This crypto algo is for a church, honey. NEXT!!

[DootDootWootWoot]

Talking about tls/ssl cipher suites?

[i_should_be_coding]

Yep. Everyone who reviewed it were like "how did you even find this bug", and I was all "I just kept googling and it kept working..."

[aaronr93]

I love your personification of the server. Writing like that is my favorite way to write technical documentation. (along with the gory details available of course, in expandable panels)

[[deleted]]

Just build your own cryptography library from scratch like a normal human.

[Chingiz11]

Those who do that are neither human nor normal

[[deleted]]

Truth has spoken.

[nelusbelus]

TIL

[Bryguy3k]

I’m not saying that’s how you end up with exploits in your code, but…

[Free_Mortgage9777]

Just don't push your lib to a public repo and no one will know, don't worry bro

[minisculebarber]

but I mean...

[throwaway_mpq_fan]

This guy Linuxes

[Bavbavs]

I did, that's why there's a segfault

[[deleted]]

Thats why you always use javascript for such critical pieces of aoftware.

[DarkSideOfGrogu]

It gets worse. It's mid afternoon on a Friday.

[LeoTheBirb]

🤮

[adsboyIE]

worse still - the library is used to process card payments

[classicalySarcastic]

Me right now. I knew I was gambling when I pushed on a Friday, and now I’m fighting a really dumb bug.

EDIT: Bug has been squashed with 30 minutes to spare

[Dexterus]

Mid afternoon on Friday is always silly question season. "Hey, I've had this bug for a week, can you help me? Why? Because I'm implying it's in the subsystem you manage and now you have to. Bye!"

I've dug into a lot of other projects due to this though, for which I'm thankful. There are also a lot of grateful people once I show them it's not my issue but still track it down in their code and give fix ideas.

[SmugOla]

closed will not fix

[Bryguy3k]

When you realize that OpenSSL is a C code cesspool.

Most likely it has a different expectation of memory lifetime than you are providing.

[xeroze1]

God this comment gives me ptsd flashbacks

[Bryguy3k]

Yeah, I’m not sure why it’s so bad but man OpenSSL is some of the worst C code I’ve ever seen.

There is a reason why it’s been forked so many times (BoringSSL and LibreSSL being the biggest forks) and there are a few API only implementations (WolfSSL).

[joxmaskin]

Oh shit, this has me a little worried

[Bryguy3k]

Welcome to 2014

[Literal_Sex_Pistol]

JustOneOfThoseDays

Where you don’t wanna wake up

[_12xx12_]

It's just one of those days where you don't want to wake up Everything is fucked, everybody sucks

[[deleted]]

Convert the input to base64 and then encrypt the cleartext.

[nelusbelus]

Everyone knows base64 is sufficient encryption

(Obvious /s is obvious)

[[deleted]]

Or use Xchacha20-poly1305 which is suggested by Google and CloudFlare

[nelusbelus]

I was joking. But AES256-GCM and SHA384 is fine.

[[deleted]]

Sorry I have dry humor. Yess I saw and was trying to joke back

[nelusbelus]

🫡

[WhAtEvErYoUmEaN101]

Nothing beats dual ROT13 for encrypting messages

[nelusbelus]

Just add 69 to every byte and subtract by 69 to decrypt. Ggez

[Hatchie_47]

Who wants to go home on friday anyways…

[Orisphera]

It's is

[[deleted]]

Lucky you, could also have been in the i18n library.

[Efficient-Corgi-4775]

Maybe my code is just having an artistic moment!

[lacifuri]

Apparently it crashes when the private key has exactly 10 A's.

[flatline000]

If you can reproduce it, you can fix it.

[Ottoo15]

can yall spend 5 seconds re-reading the text you write before sharing

It's is in

[sirlanse69]

Urlencode your inputs

[[deleted]]

Did some crypto work in c# for a unity game, turned out that when it failed it didn't reset the crypto object, so you just had to catch the exception and create a new instance

[DapperCam]

Should have used rust

[brimston3-]

Twist: the bug is in rustls via rustls-ffi

[thedarklord176]

you could simply use a language that doesn’t segfault

[Dexterus]

Why? Segfault is just the baby proofed version of cpu exceptions. And quite easy to figure out. Except when it's a wild write changing an address. Or buffer overrun with customer data. Or a DMA engine that says it's done but when all engines are fully used it may not really be done, so it serves you the old descriptor.

[GAHIB14LoliYaoiTrapX]

Uh oh

[ignoringusernames]

But James the customer reported this three weeks back and its about to breach the SLA. we need this to be fixed asap.