|
Welcome to the Snyk Monthly Vulnerability Profile. In this series, Snyk looks back on the vulnerabilities discovered by or reported to our Security Research Team. This month we’re looking at a prototype pollution vulnerability discovered in express-fileupload.
|
|
Transportation is very important to me. My whole life I’ve never owned a car. I have gotten by with biking, public transit, and various car sharing services. Sadly, biking is incredibly dangerous and stressful, because most cars don’t respect bicycles, and in the winter it’s not very practical, the STM (public transit) offers an incredibly unreliable and unpleasant service, and Car2Go (car sharing) now requires that you use their propri..
|
|
Transportation is very important to me. My whole life I’ve never owned a car. I have gotten by with biking, public transit, and various car sharing services. Sadly, biking is incredibly dangerous and stressful, because most cars don’t respect bicycles, and in the winter it’s not very practical, the STM (public transit) offers an incredibly unreliable and unpleasant service, and Car2Go (car sharing) now requires that you use their propri..
|
|
How would one write a code editor in JavaScript? A long time ago one would take a regular textarea to handle user input and would create another div that would do syntax highlighting etc. However, this approach quickly becomes unusable when someone opens it on mobile. That’s why CodeMirror has been rewritten to use contenteditable and many other editors followed this approach. contenteditable Contenteditable, as the name suggests, allows us..
|
|
How would one write a code editor in JavaScript? A long time ago one would take a regular textarea to handle user input and would create another div that would do syntax highlighting etc. However, this approach quickly becomes unusable when someone opens it on mobile. That’s why CodeMirror has been rewritten to use contenteditable and many other editors followed this approach. contenteditable Contenteditable, as the name suggests, allows us..
|
|
Do I wear a mask or not? Should I get a vaccine or not? Should I… or shouldn’t I? And how do I decide?
|
|
Computer architecture can be considered a boring topic, one that is studied during CS education, then put aside, and leaves place to the shiny new toys that capture the attention. I've recently revisited it, and I'd like to summarize some takeaways.
|
|
While playing around with Swift package manager, it wasn't immediately obvious how to build for iOS from the command line. The default behaviour of invoking swift build is to build for the host. In my case, macOS. In any case, this was it: swift build -Xswiftc "-sdk" -Xswiftc "/Applications/Xcode.app/Contents/Developer/Platforms/iPhoneSimulator.platform/Developer/SDKs/iPhoneSimulator13.0.sdk" -Xswiftc "-target" -Xswiftc "x86_64-apple-ios..
|
|
divan/txqr: Transfer data via animated QR codes . research!rsc: QArt Codes . Show HN: Photo Realistic QR-Codes (Hacker News) .
|
|
Hello, and welcome to my new website. I've been working on this for the last few days in my spare time and I'm happy to finally put it out…
|
|
Hello, and welcome to my new website. I've been working on this for the last few days in my spare time and I'm happy to finally put it out…
|
|
Leo Babauta, in Staying Focused with a Simple Method : “When you notice yourself avoiding something hard or uncertain ... the method is to turn towards it. Turn towards what youâre avoiding. Open to the discomfort, embrace it as training and growth. Bring curiosity. Do it even when you donât feel like it. This is the training. The simple method makes it easier. Take it on, and see what happens.” As I have said before , and w..
|
|
Have you wondered what Python wheels are? How are they used to package Python code? Does Python use pass by value or pass by reference? This week on the show, David Amos is here to help answer these questions, and he has brought another batch of PyCoder’s Weekly articles and projects.
|
|
Relácia z cyklu Politické mimovládky: Čo je na tom zlé 4 - LGB agenda
-
www.politickemimovladky.sk
-
5 years ago
-
slk
V relácii rozoberáme problematiku homosexuality. Nekritizujeme pritom homosexuálov ako takých – naopak, títo čelia často mnohým ťažkostiam aj z dôvodu predsudkov (na čo je vhodné poukazovať a individuálnym prípadom pomáhať vyrovnať sa s ťažkosťami). Kritizujeme však LGB agendu, ktorej cieľom je zásadné pretvorenie spoločenských inštitútov (napr. manželstva) bez spoločenskej legitimity a dostatočnej vedeckej podpory. Stručne zhŕňame evolúciu....
|
|
In this mini-series I will walk you through some habits I replaced in recent times, which have shown to pay off and make me a more productive programmer/power-user of my computer. All these changes should be easy to gradually adopt, so I would highly recommend checking them out. If you’ve any suggestions ☝️ or improvements ✍️, then email me at hi@aknapen.nl or reach out using any of the social media listed here.
|
|
Introduction Once I discovered programming, I was so good at it that I knew that I would make a career out of it. I was wrong. I was recently let go from my job. While it hurt initially, I think it has actually been good for me because I have a chance to reinvent myself and leave an industry that I have begun to believe is fundamentally broken and full of perverse incentives .
|
|
Introduction Once I discovered programming, I was so good at it that I knew that I would make a career out of it. I was wrong. I was recently let go from my job. While it hurt initially, I think it has actually been good for me because I have a chance to reinvent myself and leave an industry that I have begun to believe is fundamentally broken and full of perverse incentives .
|
|
Introduction Once I discovered programming, I was so good at it that I knew that I would make a career out of it. I was wrong. I was recently let go from my job. While it hurt initially, I think it has actually been good for me because I have a chance to reinvent myself and leave an industry that I have begun to believe is fundamentally broken and full of perverse incentives .
|
|
Introduction Once I discovered programming, I was so good at it that I knew that I would make a career out of it. I was wrong. I was recently let go from my job. While it hurt initially, I think it has actually been good for me because I have a chance to reinvent myself and leave an industry that I have begun to believe is fundamentally broken and full of perverse incentives .
|
|
Introduction Once I discovered programming, I was so good at it that I knew that I would make a career out of it. I was wrong. I was recently let go from my job. While it hurt initially, I think it has actually been good for me because I have a chance to reinvent myself and leave an industry that I have begun to believe is fundamentally broken and full of perverse incentives .
|
|
Introduction Once I discovered programming, I was so good at it that I knew that I would make a career out of it. I was wrong. I was recently let go from my job. While it hurt initially, I think it has actually been good for me because I have a chance to reinvent myself and leave an industry that I have begun to believe is fundamentally broken and full of perverse incentives .
|
|
I do not use Qubes OS anymore. Consider this article outdated in various regards. This is going to be a rather long post, and I cannot add sources for everything right away. I may add sources at any time without a notice (my edit policy still applies for other kinds of edits nevertheless). Note that for some things I might never be able to provide sources as these are simply things I heard about in public chatrooms. As you may know, I ....
|
|
The twentieth of every month is a special day here at my blog because that’s the day I take a look at how my blog is doing. It’s a day of statistics and numbers and a day of reflecting.
|
|
Developing and hosting your own Angular, React applications has never been easier, but now there are many options like Google Firebase, Heroku and etc. Github Pages is offering some great features with free of cost no credit card required and no bandwidth limitations. Just create a public repository and commit all of your product ready files. It has a custom domain support with HTTPs enforcement.
|
|
One of my favorite mentors used to tell me this: “Be yourself, unless yourself is a shitbag; then be someone else.” Permalink.
|
|
Shift left” has become the holy grail for security teams today but organizations are still struggling to successfully implement some of the key application security processes that shifting security left entails.
|
|
I’ve noticed some of my colleagues seem to use the terms accountability and responsibility as if they were the same.
|
|
Reachable vulnerabilities: how to effectively prioritize open source security
-
snyk.io
-
5 years ago
-
eng
When being overwhelmed with vulnerabilities affecting your app, a reasonable question to ask yourself is, are all of these issues even exploitable? At Snyk, we address this issue by combining expert security research with automated static analysis.
|
|
Table of Contents Why JmFrX? How To Use JmFrX Customizing Event Formats How It Works Takeaways I’m excited to share the news about an open-source utility I’ve been working on lately: JmFrX , a tool for capturing JMX data with JDK Flight Recorder. When using JMX ( Java Management Extensions ), The Java platform’s standard for monitoring and managing applications, JmFrX allows you to periodically record the attributes..
|
|
Table of Contents Why JmFrX? How To Use JmFrX Customizing Event Formats How It Works Takeaways I’m excited to share the news about an open-source utility I’ve been working on lately: JmFrX , a tool for capturing JMX data with JDK Flight Recorder. When using JMX ( Java Management Extensions ), The Java platform’s standard for monitoring and managing applications, JmFrX allows you to periodically record the attributes..
|
|
Retrieve Git history for a specific line in a file (Git)
-
snippets.bentasker.co.uk
-
5 years ago
-
eng
With git blame you can view the last commit which changed any given line, but what if you want to see the history/activity of a specific line - why was it added, who changed it and when? Git 1.8.4 introduced the ability to do this with git log, you just need to know the (current) line number Read more…
|
It can be pretty confusing to pick how to style your React app. This guide attempts to simplify your choice.
|
|
Changes The draft is a living document which means these posts will need to change over time. This section documents when changes have taken place to this post. 21/08/20 : Moving forward with the generics design draft Series Index Generics Part 01: Basic Syntax Generics Part 02: Underlying Types Generics Part 03: Struct Types and Data Semantics Introduction In the previous post , I showed you how to write a generic funct..
|