|
JavaScript type confusion: Bypassed input validation (and how to remediate)
-
snyk.io
-
4 years ago
-
eng
Learn about common type confusions scenarios where input sanitisation and validation can be bypassed by providing an unexpected input type. We’ll also provide remediation examples or suggestions for open source maintainers who are looking to patch these kinds of input validation bypasses.
|
Préambule important Dernière mise à jour 15 mai 2024 1 Cette liste est très ancienne, nombreux programmes ne sont même plus livrés par défaut dans la ROM. La priorité est ce qui est écrit dans UAB car certains programmes peuvent être désormais important pour le bon fonctionnement de l’OS. Avant, j’utilisais XiaomiADBFastbootTools pour supprimer les applications, mais maintenant j’utilise UAB qui met directement dans l’applicatio....
|
|
Avec une carte graphique AMDRendez-vous dans le panneau de configuration AMD Clic droit sur le bureau → AMD Radeon Software Dans la catégorie Affichage , crée une nouvelle résolution. Augmente le taux de rafraîchissement et teste-la pour voir si l’écran le supporte Augmente de 5 en 5, quand l’écran n’affiche plus rien, réduit de 1 en 1 pour trouver la fréquence parfaite. Quand tu l’as trouvé, vérifie que l’écran prend bien toute la....
|
|
Dernière mise-à-jour le 31 août 2022 1 Cette liste n’est pas maintenue à jour. Merci à Discord de Capet Discord de Wanda sarkraï Cette page est une liste de truc que je trouve cool, n’hésite pas à me contacter si tu veux discuter. Tables des matières Quel système d’exploitation choisir ? Web Le navigateur Extensions Apps PC Benchmarks, stress tests et infos PC Équivalents à la suite d’Adobe Apps Android L....
|
|
Welcome to 2021. We have: supply chain issues no reasonably priced GPU-s consumer-grade CPU-s with peak power consumption at 296W GPU-s that consume 350-400W of power under normal use Accurate representation of CPU-s in 2021. At the same time, we have made great leaps in CPU/GPU architectures and chip manufacturing technologies, which should result in faster and more efficient devices, right? Well, yes. However, with ....
|
|
Git loses untracked files during "stash" if there are conficts
-
www.databasesandlife.com
-
4 years ago
-
eng
Git had a bug from version 2.33 onwards, fixed in 2.35. (Thanks to Richard Laager’s comment for the exact version numbers.) “Stashing” then “unstashing” untracked files (new files you’ve just created) loses those new files, if any of the existing tracked files has a conflict. Let me explain.
|
|
Repository: @knadh/koanf GitHub release page: v1.3.2 What’s Changed Refactor the posflag provider to make pflag parsing pluggable. by @knadh in https://github.com/knadh/koanf/pull/117 Full Changelog : https://github.com/knadh/koanf/compare/v1.3.1...v1.3.2
|
|
While planning drag and drop image support in Chronicles, I had some confusion about handling files once dropped. There are many tutorials out there but they often provide a “copy this code” approach and offer little insight. Many recommended using base64 encoding but that did not seem right. The more general problem of file uploading through a browser is one I occassionally return to, so I wanted a conceptual deep dive I could use as a fou..
|
|
Learn how MongoDB built a successful security champions program and how they were able to encourage a mindset shift to embrace, rather than avoid, application security.
|
|
Table of Contents Don’t Fear Outdated Caches – Change Data Capture to the Rescue! Change Data Streaming Patterns in Distributed Systems Analyzing Real-time Order Deliveries using CDC with Debezium and Pinot Dissecting our Legacy: The Strangler Fig Pattern with Apache Kafka, Debezium and MongoDB Bonus: Debezium at the Trino Community Broadcast Learning More If you love to attend conferences around the world without actually leaving the comfo..
|
|
Table of Contents Don’t Fear Outdated Caches – Change Data Capture to the Rescue! Change Data Streaming Patterns in Distributed Systems Analyzing Real-time Order Deliveries using CDC with Debezium and Pinot Dissecting our Legacy: The Strangler Fig Pattern with Apache Kafka, Debezium and MongoDB Bonus: Debezium at the Trino Community Broadcast Learning More If you love to attend conferences around the world without actually leaving the comfo..
|
|
Table of Contents Don’t Fear Outdated Caches – Change Data Capture to the Rescue! Change Data Streaming Patterns in Distributed Systems Analyzing Real-time Order Deliveries using CDC with Debezium and Pinot Dissecting our Legacy: The Strangler Fig Pattern with Apache Kafka, Debezium and MongoDB Bonus: Debezium at the Trino Community Broadcast Learning More If you love to attend conferences around the world without actually leaving the comfo..
|
|
The Greenwald-Khanna quantile estimator is a classic sequential quantile estimator which has the following features: It allows estimating quantiles with respect to the given precision $\epsilon$. It requires $O(\frac{1}{\epsilon} log(\epsilon N))$ memory in the worst case. It doesn’t require knowledge of the total number of elements in the sequence and the positions of the requested quantiles. In this post, I briefly explain the basic i..
|
|
The Greenwald-Khanna quantile estimator is a classic sequential quantile estimator which has the following features: It allows estimating quantiles with respect to the given precision $\epsilon$. It requires $O(\frac{1}{\epsilon} log(\epsilon N))$ memory in the worst case. It doesn’t require knowledge of the total number of elements in the sequence and the positions of the requested quantiles. In this post, I briefly explain the basic i..
|
|
I want you to consider for a moment all the human lifetime wasted in ideological stalemates on the Internet, all that energy, all that anger and frustration. Imagine if you take even a fraction of that time, and put it to creating something constructive instead, learning skills, doing anything meaningful. It boggles the mind, doesn’t it? It must amount to entire human lifetimes every week. Ideology, or in a wider sense, ethics, is all a..
|
|
Skills, stories, and software every dev should know - 123dev #44
-
justingarrison.com
-
4 years ago
-
eng
The newsletter passed 250 subscribers and 200 Twitter followers this week and I appreciate you all. ❤️ I love reading your replies and seeing you all share issues too. If you have suggestions for future topics feel free to hit reply and send them my way.
|
|
Traditionally, git’s default branch was called master - but this isn’t always true, it’s just a default - and one that’s currently undergoing change. GitHub & GitLab have changed their defaults to main and the git project itself is in the process of doing the same. I have a longstanding git alias - git up - that I use to pull my local checkout up to date with the remote. It’s a shorthand for the following: Change branch to the default....
|
|
During Carolina Code Conf, I gave what is probably the most entertaining presentation ever given about email. We walk through how to protect, raise and nuture the domain for my pirate themed gym, Slimmer Ye Timbers.
|
|
During Carolina Code Conf, I gave what is probably the most entertaining presentation ever given about email. We walk through how to protect, raise and nuture the domain for my pirate themed gym, Slimmer Ye Timbers.
|
|
Video: Developing a Layered Email Security Strategy Webinar
-
www.brightball.com
-
4 years ago
-
eng
In this joint webinar between dmarcian, GreatHorn and Inspired eLearning I had the opportunity to share an overview of SPF, DKIM and DMARC as part of a layered email security strategy.
|
|
Video: Developing a Layered Email Security Strategy Webinar
-
www.brightball.com
-
4 years ago
-
eng
In this joint webinar between dmarcian, GreatHorn and Inspired eLearning I had the opportunity to share an overview of SPF, DKIM and DMARC as part of a layered email security strategy.
|
|
Security misconfigurations can have a huge impact on your application’s security. Read more on what security misconfigurations are and how to prevent them.
|
|
Review of Macbook Pro 14 (M1 Max, 32GPU Cores, 64GB Memory) - Performance, Windows, Parallels and more
-
www.outcoldman.com
-
4 years ago
-
eng
I have been using Macbook Pro with M1 since the release of the MBP 13" M1 in 2020. And I am huge fan of the new Apple CPU - M1. Time to time I need to do some work on my 2019 16" MBP with Intel Processor (all maxed out), so I keep experience the difference between using those two. On MBP with M1 I can definitely see that the macOS works way more smooth. No more glitches or frozen screens for a few seconds, less heat, less time I hear the ..
|
|
Introduction You are jogging and want to show off your route to your friends. Let’s imagine the data you have for your route is a CSV file in the following format: Listing 1: track.csv time,lat,lng,height 2015-08-20 03:48:07.235,32.519585,35.015021,136.1999969482422 2015-08-20 03:48:24.734,32.519606,35.014954,126.5999984741211 2015-08-20 03:48:25.660,32.519612,35.014871,123.0 2015-08-20 03:48:26.819,32.519654,35.014824,120.5 2015-08-2..
|
|
Repository: @knadh/tg-archive GitHub release page: v0.3.10 Full Changelog : https://github.com/knadh/tg-archive/compare/v0.3.9...v0.3.10
|
|
Show me a gambler and I’ll show you a loser, show me a hero, and I’ll show you a corpse. Mario Puzo, author of The Godfather Last week we began the “ How to be a game changer ” series. Today, we’ll start answering the question - “Which games to change”, by defining the two main types of games we don’t want to play - zero-sum games and win-lose games. Zero sum games One way to simplify looking at games, is to look at the pos....
|
|
In this scholarly biography by Janet L. Nelson, Charlemagne is stripped back from the years of mythologizing and idolizing that have occurred since his death. He is presented as distinctly human, and this book is the first time I have felt I could reasonably understand Charlemagne as the man he was, not the man he has since been painted to be. Moreover, Nelson is excellent in her discussions of Charlemagne’s wives and their roles. For examp..
|
|
In this scholarly biography by Janet L. Nelson, Charlemagne is stripped back from the years of mythologizing and idolizing that have occurred since his death. He is presented as distinctly human, and this book is the first time I have felt I could reasonably understand Charlemagne as the man he was, not the man he has since been painted to be. Moreover, Nelson is excellent in her discussions of Charlemagne’s wives and their roles. For examp..
|
|
In this scholarly biography by Janet L. Nelson, Charlemagne is stripped back from the years of mythologizing and idolizing that have occurred since his death. He is presented as distinctly human, and this book is the first time I have felt I could reasonably understand Charlemagne as the man he was, not the man he has since been painted to be. Moreover, Nelson is excellent in her discussions of Charlemagne’s wives and their roles. For examp..
|
|
In this scholarly biography by Janet L. Nelson, Charlemagne is stripped back from the years of mythologizing and idolizing that have occurred since his death. He is presented as distinctly human, and this book is the first time I have felt I could reasonably understand Charlemagne as the man he was, not the man he has since been painted to be. Moreover, Nelson is excellent in her discussions of Charlemagne’s wives and their roles. For examp..
|
|
Perfecting GLFW for Zig, and finding lurking undefined behavior that went unnoticed for 6+ years
-
devlog.hexops.org
-
4 years ago
-
eng
Today, I am announcing mach-glfw : Ziggified GLFW bindings with 100% API coverage, zero-fuss installation, cross compilation, and more. Building Mach for everyone If Mach engine only benefits people interested in using that engine, and not the broader Zig (and even gamedev) community I would consider that a total failure . Whether you’re interested in using all of Mach, just some of it with your own engine / project, or just the to....
|