Here I illustrate how Clojurists (including Yours Truly) like to solve problems and model things using hammocks, pure functions, and the "it's just data" ideology. Also, while the *problem* focuses on "design in the small" of application logic, many ideas in the *solution* can—and do—scale all the way to "design in the large" of whole systems.
|
|
Hello World! This is the first post on this website. It uses static pages generated by Hugo and hosted in S3. To reduce latency, it uses CloudFront in front of S3 as a CDN. There’s also a Lambda@Edge function that routes requests within the S3 bucket that contains all the static files. The site uses AWS Certificate Manager to manage its SSL/TLS certificate. I run deployments using Hugo’s built-in S3 bucket deployment feature, which has t..
|
|
Reviewing CVE-2022-42889: The arbitrary code execution vulnerability in Apache Commons Text
-
snyk.io
-
3 years ago
-
eng
In this post we’ll review CVE-2022-42889, the recent Arbitrary Code Execution Vulnerability in Apache Commons Text, including what it is, how to remediate it, and why it’s not the new Log4Shell.
|
|
2022 Snyk Customer Value Study highlights: The impact of developer-first security
-
snyk.io
-
3 years ago
-
eng
Learn about the 2022 Snyk Customer Value Study. The goal of this study was to understand our customers’ most important value drivers, discover how they think about their return on investment and find out how much quantifiable benefit they’ve realized by leveraging the Snyk platform.
|
|
Implement our list of 8 best practices to improve your overall AWS Security posture. Secure your AWS deployments to prevent data breaches.
|
|
My book Handbook for Defensive Cyberspace Operations contains an extensive chapter on tools and resources for cybersecurity analysts. As a closed project, however, this knowledge has had little impact outside of my niche community. This post contains a version of that chapter suitable for distribution to the public. Permalink.
|
|
General thought on architectural boundaries, levels and issues that need to be tackled at each level.
|
|
WFH Day 946 I had some random thoughts the other day. The invention of Smartphones and the evolution of built-in cameras was a big step forward in reducing friction to asking random people at scenic spots to take a picture of yourself. Do you remember the days you had to instruct people how to use the camera? How to focus, and which button to press before taking a picture? All this instructional talk was eliminated when smartphones start..
|
|
Preprint announcement: 'Finite-sample Rousseeuw-Croux scale estimators'
-
aakinshin.net
-
3 years ago
-
eng
This post announces the preprint on finite-sample properties of the Rousseeuw–Croux $S_n$ and $Q_n$ scale estimators. Pragmastat recommends Spread — the Shamos estimator — as a simpler yet efficient robust scale alternative. Confidence intervals are available via SpreadBounds . pragmastat.dev github.com/AndreyAkinshin/pragmastat Recently, I published a preprint of a paper ‘Finite-sample Rousseeuw-Croux scale estimators’. It’s....
|
|
Preprint announcement: 'Finite-sample Rousseeuw-Croux scale estimators'
-
aakinshin.net
-
3 years ago
-
eng
This post announces the preprint on finite-sample properties of the Rousseeuw–Croux $S_n$ and $Q_n$ scale estimators. Pragmastat recommends Spread — the Shamos estimator — as a simpler yet efficient robust scale alternative. Confidence intervals are available via SpreadBounds . pragmastat.dev github.com/AndreyAkinshin/pragmastat Recently, I published a preprint of a paper ‘Finite-sample Rousseeuw-Croux scale estimators’. It’s....
|
|
Repository: @knadh/dirmaker GitHub release page: v1.1.0 What’s Changed fix: markupsafe version dependency by @vishnus in https://github.com/knadh/dirmaker/pull/3 New Contributors @vishnus made their first contribution in https://github.com/knadh/dirmaker/pull/3 Full Changelog : https://github.com/knadh/dirmaker/compare/v1.0.1...v1.1.0
|
|
As a developer, you probably rely on open source every day. But have you considered going a step further and contributing to open source projects as well? This post will cover the major reasons why you might choose to contribute to — instead of simply using — open source projects.
|
|
in my opinion, self-signatures should have been treated as something normal, with a warning only triggered if the site has been visited before and the signing key has changed Two problems with self-signed Trust On First Use (TOFU): Long-lived secrets without a revocation mechanism. Current approaches— OCSP and client-side CRL checking —all use the certificate authority (CA) system. Zero defense against TLS stripping attacks du....
|
|
We recently made updates to our SoundCloud iOS and Android apps to address key user experience (UX) fixes according to user feedback. We’ll…
|
|
We recently made updates to our SoundCloud iOS and Android apps to address key user experience (UX) fixes according to user feedback. We’ll…
|
|
In this article, we’ll explore TLS and how to use Python to check for a website’s TLS certificate validity. Then, we’ll walk through the steps for adding TLS to your Python application on Linux.
|
|
How to Build an Automated Buying Bot in Python with ScrapingBee
-
blog.adnansiddiqi.me
-
3 years ago
-
eng
I wrote about ScrapingBee a couple of years ago, where I gave a brief intro about the service. ScrapingBee is a cloud-based scraping service that provides both headless and lightweight, typical HTTP request-based scraping services. Recently, I discovered that they are providing some cool features that other online services are not providing as such. What are those features? I thought to explore and explain them with a real use case. I used ....
|
Figure 1: Saturn devouring the GPL Here's a free product idea for the ambitious and morally flexible reader: Microsoft charges you $10/month for access to a service that harvests intellectual property, launders it through an algorithm, and then presents it to you absent its license which is a violation of its copyleft terms . This has been a topic of discussion for several months now, and it appears that this is just one of th....
|
|
The article discusses the XCheck system at Meta (formerly Facebook) and its purpose in preventing accidental enforcement from affecting accounts that are known to be good.
|
|
This guide assumes you know how to insert text, move the cursor, and execute commands in Neovim. Neovim is a text editor based on Vim . It is extremely extensible, and we’ll be taking advantage of that to edit on Fandom wikis. Install Neovim (but Vim should also work for this guide). It might already be on your Linux computer. You will also need an installation of Python, and a library called mwclient from pip, as well as a plugin m..
|
|
The article discusses the XCheck system at Meta (formerly Facebook) and its purpose in preventing accidental enforcement from affecting accounts that are known to be good.
|
|
As someone who’s a fan of entertainment, have you ever been craving to see less from Instagram influencers and more from your own government? The 9 simple tricks to get a juicy tax return?
|
|
yubiuser has released a new updated for PADD, to 3.8.1, so I updated also my modified version with more info that fits 800x480px display. PSA: remember that from 3.8.0 it requires FTL version (>= v5.16). You can download it here: padd.sh v3.8.1 for 800x480px display . I think it needs to have some slight layout change, like the RX and TX section and the “SYSTEM” info. I’ll look in to it soon.
|
|
yubiuser has released a new updated for PADD, to 3.8.1, so I updated also my modified version with more info that fits 800x480px display. PSA: remember that from 3.8.0 it requires FTL version (>= v5.16). You can download it here: padd.sh v3.8.1 for 800x480px display . I think it needs to have some slight layout change, like the RX and TX section and the “SYSTEM” info. I’ll look in to it soon.
|
|
How to add Playwright tests to your pull request CI with GitHub Actions
-
snyk.io
-
3 years ago
-
eng
In this article you will learn the basics of how to write end-to-end tests with Playwright, running tests from GitHub Actions, deploying to Netlify, and preserving debug traces.
|
I reverse engineered the raw format for Sinar emotion digital backs, and created a python GUI tool to convert them to DNGs.
|
|
Where should you use an ellipsis in Python? How does it behave as a placeholder in a script, project, or stub file? What are the next goals for the Faster CPython project? This week on the show, Christopher Trudeau is here, bringing another batch of PyCoder's Weekly articles and projects.
|
|
Client Time Series Model: a Multi-Target Recommender System based on Temporally-Masked Encoders
-
multithreaded.stitchfix.com
-
3 years ago
-
eng
Introduction The foundation of our recommendation stack is a scoring model we call p(sale), which estimates the probability that any given client will purchase any given item. This model has gone through many iterations over the years, from a mixed effects model, to a matrix factorization model, and now to a novel sequence-based model. Internally we call this the Client Time Series Model (aka CTSM) because of its focus on the time-domain o....
|
|
On a recent Reddit comment , tdstoff7 asked if I had considered writing an "Open with" DWIM shell command for those times one would like to open a file externally using an app other than the default. I hadn't, but nice idea. Take images as an example. Though Emacs can display them quickly, I also open images externally using the default app ( Preview in my case). But then there are those times when I'd like to open with a different app ....
|
|
A discussion of the second of five fundamentals of cloud security: prevention and secure design. (Part two in a five-part series.)
|