|
After three years of silence, a new jQuery prototype pollution vulnerability emerges once again
-
snyk.io
-
7 years ago
-
eng
On March 26th, 2019, almost three years after the last jQuery security vulnerability was disclosed, we recently learned about a new security vulnerability affecting the same popular jQuery frontend library.
|
|
I came up with a list of questions I would ask my cloud provider if I was buying a product. They are as follows: 1. What problem is this solving? I would ask this to make sure I even need this product. So many people tend to buy into the hype for “shiny”, they miss if they even needed the thing in the first place. 2. How did you implement this? What is your threat model? So much of the cloud is built on popsicle sticks and glue. Doe....
|
|
Back in 2013, I posted a bunch of articles about Soylent. I liked the idea then, and I like it now, and so I wanted to take a minute to give you an update after I gave it a try. Permalink.
|
|
Out of the box keepass recognizes the URI ssh:// and will open it with putty. However it is limited, you can't change ports from the default port 22 nor can you save a convenient list of port forwards. Thankfully this is something you can change. Things you will need: Keepass Putty Keeagent Alternativly you can do an easy install with the windows package manager chocolatey choco install putty.install keepass.install ....
|
|
Out of the box keepass recognizes the URI ssh:// and will open it with putty. However it is limited, you can't change ports from the default port 22 nor can you save a convenient list of port forwards. Thankfully this is something you can change. Things you will need: Keepass Putty Keeagent Alternativly you can do an easy install with the windows package manager chocolatey choco install putty.install keepass.install ....
|
|
Every agile BA's go-to list of 101 project-tracking questions
-
www.thoughtworks.com
-
7 years ago
-
eng
The agile framework is a brilliant way to build and deliver scalable software solutions irrespective of size or complexity. The foundational principle of agile teams is continuous collaboration and conversation, which helps discover and maintain a consistently holistic and interdependent business view. This approach also keeps the team and client engaged ensuring resounding success until the end of the project, and then some.
|
|
A common pain point in most GUI frameworks is the hidden stack traces. When we have an app in production we get occasional emails from crash protection which are cryptic and hard to figure out. They usually start with the EDT loop and make no sense. The reason for that is callSerially(). When we have code that invokes callSerially we essentially lose the previous stack trace. So your stack trace would look roughly like this:
|
|
Empowerment technologischer BürgerInnen oder doch nur Buzz-Word? “It is time to actually become citizens within technological society” - (Frankenfeld 1992, 477). So kommentiert Frankenfeld das unterforschte Konzept der Technological Citizenship. Was bedarf es um an unserer heutigen hochtechnisierten Gesellschaft teilzunehmen? Aktueller denn je, wird hier untersucht, ob Technological Citizenship Bürgerinnen und Bürger in einer Demok..
|
|
Attic: Search Hundreds of Small and Local Stores and Boutiques . Awesome Search . Indieseek.xyz Directory . Million Short - What haven't you found? . Pinboard: social bookmarking for introverts . Qwant Lite . Startpage (claims most private seatch engine) . UbuWeb . wiby.me - the search engine for classic websites . WikiArt.org - Visual Art Encyclopedia .
|
|
Saving Tony Bedford's python snippets for calculating compound interest . Really just an excuse to fire up Emacs and play with org babel. t = 20 # years r = 0.07 # rate pv = 200000.00 # present value fv = pv * (1+r)**t # future value print("Pension of %.2f at %d%% will be worth %.2f in %d years" % (pv, 100 * r, fv, t)) #+RESULTS: Pension of 200000.00 at 7% will be worth 773936.89 in 20 years t = 20 # years r = 0.07 # rate pv = 200000....
|
|
In addition to providing a static type system and compiler for a superset of JavaScript, TypeScript makes much of its functionality available programmatically. In this post we'll use the TypeScript compiler API to build an interpreter. We'll build off of a TypeScript wiki article and cover a few areas that were confusing to me as I built out a separate project . The end result we're building will look like this: $ cat test.ts ....
|
|
I recently began trying out Cinnamon as my desktop environment and I've been thoroughly enjoying it. The only issue I was having was occasionally a page's form input fields would have a dark background while still having dark text making it impossible to read, and very difficult to write. It wasn't happening everywhere, and I couldn't track down what about a website would cause the issue. Most prominently for me was when this showed up ....
|
|
I promised some posts on this topic, and today I will begin to deliver. Today I want to talk about my journey to weightlifting. It took me a while, but I look forward to sharing the lessons I learned along this long and winding road. Permalink.
|
|
There is often a work culture that you should be busy all the time - if you are a programmer you should always be typing and producing code. Programming is a mental process and so requires thinking. Sometimes a little thought upfront saves a lot of pain and work down the line.
|
|
There is often a work culture that you should be busy all the time - if you are a programmer you should always be typing and producing code. Programming is a mental process and so requires thinking. Sometimes a little thought upfront saves a lot of pain and work down the line.
|
|
With all the talk of Huawei over the last few days , I want to spend a minute on AT&T. You may have seen the company in the news for expanding 5G to new cities despite poor performance . In short, AT&T markets an optimized 4G LTE network as 5GE . Even if AT&T did offer actual 5G, no U.S. devices could use it ; it does not. Huawei receives so much attention in this space because it is the first company to offer an actual 5G network, ..
|
|
I've now built Emacs's mu/mu4e releases a handful of times on macOS. These are the steps, so I don't forget. 1.4 Updated steps for building mu/mu4e 1.4: brew install gmime export CPPFLAGS="-I$(brew --prefix)/Cellar/gmime/3.2.3/include -I$(brew --prefix)/include" export LDFLAGS=-L$(brew --prefix)/Cellar/gmime/3.2.3/lib export PKG_CONFIG_PATH=$(brew --prefix)/Cellar/gmime/3.2.3/lib/pkgconfig:$(brew --prefix)/opt/libffi/lib/pkgconfig ex..
|
|
Often I need to “do X only if files on some folder changed” or whatever. I always need to Google that or find it on old scripts…
|
|
During last year, I’ve migrated hundreds of thousands of lines from Visual Basic.NET to C#. Luckily, most difficult part of this was convincing client, that it is necessary. There are great automated tools for this nowadays, Roslyn be blessed. But I still believe, that Visual Basic is really not bad language . It had many good features that C# copied and there are still few left, that I will miss. These are those features.
|
|
So I had a bunch of YAML files with an array of key/value maps representing environment variables. I wanted to sort these to make comparing them across similar files easier. A web search pulled up this nice pipeline to handle the actual sorting: xclip -selection clipboard -o | awk '{printf("%s%s",$0,(NR%2)?"\t":"\n")}' | sort -k2,2n | tr '\t' '\n' | xclip -selection clipboard # sort pairs of yaml lines So what I did was copy just the....
|
|
So I had a bunch of YAML files with an array of key/value maps representing environment variables. I wanted to sort these to make comparing them across similar files easier. A web search pulled up this nice pipeline to handle the actual sorting: xclip -selection clipboard -o | awk '{printf("%s%s",$0,(NR%2)?"\t":"\n")}' | sort -k2,2n | tr '\t' '\n' | xclip -selection clipboard # sort pairs of yaml lines So what I did was copy just the....
|
|
How to alias and navigate to directories with autocomplete in Linux
-
iridakos.com
-
7 years ago
-
eng
I use the terminal a lot and in my day to day work I tend to navigate to the same bunch of directories. There are some awesome tools out there (like autojump or z ) but sometimes, especially when the directories are similarly named, there is a need to be explicit to navigate to the proper one. I decided to write a script to overcome this issue and to avoid having to edit my .bash* files to manage aliases each time I wanted to add....
|
|
How to alias and navigate to directories with autocomplete in Linux
-
iridakos.com
-
7 years ago
-
eng
I use the terminal a lot and in my day to day work I tend to navigate to the same bunch of directories. There are some awesome tools out there (like autojump or z ) but sometimes, especially when the directories are similarly named, there is a need to be explicit to navigate to the proper one. I decided to write a script to overcome this issue and to avoid having to edit my .bash* files to manage aliases each time I wanted to add....
|
|
How to alias and navigate to directories with autocomplete in Linux
-
iridakos.com
-
7 years ago
-
eng
I use the terminal a lot and in my day to day work I tend to navigate to the same bunch of directories. There are some awesome tools out there (like autojump or z ) but sometimes, especially when the directories are similarly named, there is a need to be explicit to navigate to the proper one. I decided to write a script to overcome this issue and to avoid having to edit my .bash* files to manage aliases each time I wanted to add....
|
|
How to alias and navigate to directories with autocomplete in Linux
-
iridakos.com
-
7 years ago
-
eng
I use the terminal a lot and in my day to day work I tend to navigate to the same bunch of directories. There are some awesome tools out there (like autojump or z ) but sometimes, especially when the directories are similarly named, there is a need to be explicit to navigate to the proper one. I decided to write a script to overcome this issue and to avoid having to edit my .bash* files to manage aliases each time I wanted to add....
|
|
How to alias and navigate to directories with autocomplete in Linux
-
iridakos.com
-
7 years ago
-
eng
I use the terminal a lot and in my day to day work I tend to navigate to the same bunch of directories. There are some awesome tools out there (like autojump or z ) but sometimes, especially when the directories are similarly named, there is a need to be explicit to navigate to the proper one. I decided to write a script to overcome this issue and to avoid having to edit my .bash* files to manage aliases each time I wanted to add....
|
|
Joshua Goldstein, Staffan Qvist, and Steven Pinker believe nuclear power should replace fossil fuels, and serve as the backup that makes renewable energy sources viable. They make a good case in this interesting article on The New York Times, and I even found a few gems in the comments section — one of which pointed me to a piece on Bloomberg. Gerard Mourou, a winner of the 2018 Nobel Prize for Physics, has a novel idea to solve the proble..
|
|
I have spent a lot of time reading about China over the last few days. This reminded me of a great chart that broke down emissions by country, to make an interesting point: for all the attention it receives in the media, emissions from the United States pale in comparison to those of developing nations in general, and China in particular. In fact, the United States’ contribution has almost no effect on global temperatures . I believe we sh....
|
|
I planned to include a link to this piece in Proxy Innovation . As that article grew from a brief comment into a more in-depth rundown of the U.S.-Huawei situation, though, I pulled Herb Lin’s Huawei and Managing 5G Risk out for its own post. Where the five articles I linked to last time focused on this situation at a high level, Herb Lin delves into the technical arguments for and against Huawei’s adoption by the West. As it tur..
|
|
World powers have a penchant for proxy wars. French involvement in the Revolutionary War, anyone? Little has changed a century and a half later . We still see this going on today in Syria , to name just one recent example. We also see this going on today in the fifth domain — cyberspace — with the rise of the Chinese firm Huawei . Although some experts argue that the Communist Party does not control it , recent Justice Department act..
|
Have you ever tried to do a code review on a PR that merges a large release branch or feature branch back into mainline, fixing merge conflicts? It’s not pretty. The diffs are often and easily very big, — 50k+ LOC big — have hundreds of commits, and the actual changes made by the engineer resolving the merge conflicts are virtually impossible to spot. This article covers one nifty trick I’ve been using lately in these cases that lets you....
|