|
In December 2022, Adobe, through the Computer History Museum (CHM), released the source code for PostScript®, version 1.0. PostScript is one of the foundational technologies of the desktop publishing revolution of the early 1980s, along with laser printers, the graphical user interface of the Apple Macintosh, and Aldus PageMaker. PostScript is a programming language and a page description format for translating visual content into printed d....
|
In practice this already happened a couple of years ago, now we are just making it official. For those who don’t know, Hawkpost is a side project that I started while at Whitesmith back in 2016 (8+ years ago). I’ve written about it here in the blog on several occasions. To sum it up, it […]
|
|
List Resource Requests and Limits for Kubernetes pods (Misc)
-
snippets.bentasker.co.uk
-
1 year ago
-
eng
Running kubectl get pods is pretty straightfoward, but it can do also do a lot of filtering If you've ended up with fewer pods per node than expected, it's worth looking at what resources are being requested. Similarly, if you're seeing a high rate of evictions, it's worth looking at what the limits are This snippet details listing requests and limits, per pod, on a node Note: if you have, or are able to install the kubectl-ice plugi..
|
|
How to prevent log injection vulnerability in JavaScript and Node.js applications
-
snyk.io
-
1 year ago
-
eng
Fortify your Node.js applications against log injection attacks! This guide dives deep into the dangers and solutions to protect your logs from malicious manipulation. Stop attackers and build secure Node.js applications today.
|
|
Fearless Concurrency Ep.2: Managing Threaded Programs and Data Races in Rust
-
www.ardanlabs.com
-
1 year ago
-
eng
Introduction: Welcome to Episode 2 of the Fearless Concurrency in Rust series! In this episode, Herbert Wolverson dives into the fundamentals of threading in Rust, demonstrating how to use Rust’s threading capabilities effectively while maintaining safety. The focus is on using std::thread to spawn threads, preventing data races, and ensuring efficient, reliable multithreaded execution. Creating Threads in Rust: How to spawn and ma..
|
|
I got to visit the Stasi museum in Berlin this week, and it gave me a newfound appreciation for why it’s important to resist surveillance. Interestingly, surveillance is not exclusively limited to one kind of government: it can appeal to both left- and right-wing governments, and corporations in the digital age use surveillance to make money. In every form, surveillance is evil and must be resisted.
|
|
I got to visit the Stasi museum in Berlin this week, and it gave me a newfound appreciation for why it’s important to resist surveillance. Interestingly, surveillance is not exclusively limited to one kind of government: it can appeal to both left- and right-wing governments, and corporations in the digital age use surveillance to make money. In every form, surveillance is evil and must be resisted.
|
|
Introduction Today, TLS certificates in the Web public key infrastructure (PKI) have long validity: almost all remain valid for at least three months! An attacker compromising a certificate early enough in its lifetime 1 keeps it compromised for months. Certificate revocation addresses this problem: a client must know to distrust a certain key for a domain, even if the valid key hasn’t expired yet. The issue? Billions of clients use....
|
The book discusses the fundamentals of systems theory, emphasizing interconnectedness, stock, and flow dynamics. It highlights systemic problems, such as addiction and resource management, and explores how common misconceptions can lead to ineffective approaches. It underscores the importance of understanding system behavior and structural change for driving impactful outcomes and sustainable solutions.
|
|
Youtube Video, via JS Party podcast episode Building LLM agents in JS Notes Non Agentic workflow: Do it start to finish. Mostly zero shot prompts. Agentic workflow: Revise, iterative, reflect, use tools if you need to…. Four design patterns. 1. Reflect: Produce one thing and ask another chat thread with different system prompt to evaluate it. E.g. Create a code, than ask a rubberduck debugger to read it line by line, or run the test suite a..
|
|
Youtube Video, via JS Party podcast episode Building LLM agents in JS Notes Non Agentic workflow: Do it start to finish. Mostly zero shot prompts. Agentic workflow: Revise, iterative, reflect, use tools if you need to…. Four design patterns. 1. Reflect: Produce one thing and ask another chat thread with different system prompt to evaluate it. E.g. Create a code, than ask a rubberduck debugger to read it line by line, or run the test suite a..
|
|
Learn how to create secure applications using Deno. Explore the default security measures provided by Deno, understand potential vulnerabilities such as Server-Side Request Forgery (SSRF), and uncover the best practices for minimizing risks. Enhance your application's security by leveraging Deno's advanced features.
|
|
Using a Cloudflare Tunnel and connecting to a local service serving via self-signed certificates forced me to enable No TLS verify in that tunnel’s TLS settings. Not ideal! Thankfully Cloudflare thought about that and allows you to create an origin certificate . For this to work properly, I had to install Cloudflare’s Origin Root CA certificate on my server running Ubuntu 22.04.5 LTS. First I downloaded one of the two origin r..
|
|
Upload PNGs to your maps to use as icons and patterns. You can add photos to use as icons for landmarks.
|
|
Do you ever wonder what exactly Reflect is for, and why you'd use it? You're not alone. In fact, there's a good chance a lot of people you work with have never heard of it. Reflect's documentation covers a lot of lower-level, seemingly abstract ideas, which leads to it being unclear as to why you'd use it. This isn't because you're not catching on or understanding; it's because its functionality is narrow yet its capabilities are extrem....
|
|
When building web applications, unit testing your individual components is certainly important. However, end-to-end testing provides assurance that the final user experience of your components chained together matches the expected behavior. Testing web application behavior locally in your browser can be helpful, but this approach isn’t efficient or reliable, especially as your application grows more […] The post Testing a React App in Ch..
|
Emacs #TIL : I learned about save-interprogram-paste-before-kill - which saves the existing system clipboard text into the kill ring before replacing it. This ensures that Emacs kill operations do not irrevocably overwrite existing clipboard text. A common workflow for me is to copy some text from a different application and paste it inside Emacs. But, if I want to first delete a word or region …
|
|
Emacs #TIL : I learned about save-interprogram-paste-before-kill - which saves the existing system clipboard text into the kill ring before replacing it. This ensures that Emacs kill operations do not irrevocably overwrite existing clipboard text. A common workflow for me is to copy some text from a different application and paste it inside Emacs. But, if I want to first delete a word or region …
|
|
Emacs #TIL : I learned about save-interprogram-paste-before-kill - which saves the existing system clipboard text into the kill ring before replacing it. This ensures that Emacs kill operations do not irrevocably overwrite existing clipboard text. A common workflow for me is to copy some text from a different application and paste it inside Emacs. But, if I want to first delete a word or region …
|
|
Recently, I had to configure some security headers in GitLab. GitLab uses Nginx as its web server, and it allows for easy configuration changes for some settings. For instance, enabling HTTP to HTTPS redirection can be done simply by setting nginx['redirect_http_to_https'] = true in the gitlab.rb configuration file. However, adding custom headers for security, particularly those that control cross-origin policies, requires a bit mo....
|
|
Discover how to secure your C and C++ code with Snyk. Learn about common vulnerabilities like memory leaks and buffer overflows in C and C++ and how Snyk’s static code analysis tool can help you identify and fix them. Protect your critical software from security threats.
|
|
This blog post describes getting Docker up and running inside an Azure Windows Virtual Machine. This might sound like a simple task, but trust me, there
|
|
Thanks for the tip. This also works in a checkout worktree. I have an obscure usecase: If you need to clone a repo and you can't control the checkout branch (because you are using another tool that assumes the default branch), you can still control which branch will be checked out on clone.
|
|
Comment on Serializing/deserializing Matlab data by Cookie
-
undocumentedmatlab.com
-
1 year ago
-
eng
If you have the parallel toolbox there is a method
byteArray = distcompserialize64(myData) which appears to function the same as getByteStreamFromArray()> but does not seem to have data size limitations. MATLAB\R2017b\toolbox\distcomp\distcomp\distcompserialize64.mexw64 There is a function distcompdeserialize() which reconstructs the matlab data from the bytes. Fwiw, getArrayFromByteSt..
|
|
After more than a year, the blog is getting an update. This is a short summary of what is getting changed
|
|
After more than a year, the blog is getting an update. This is a short summary of what is getting changed
|