Dev Miscellaneous – Telegram
Dev Miscellaneous
341 subscribers
884 photos
6 videos
5 files
917 links
A channel where you can find developer tips, tools, APIs, resources, memes and interesting contents.

Join our comments chat for more.

Comments chat (friendly :D)
https://news.1rj.ru/str/+r_fUfa1bx1g0MGRk
Download Telegram
Impersonating the brave.com website to deliver malware

With a valid TLS certificate, faux Bravė.com could fool even security-savvy people.

https://arstechnica.com/gadgets/2021/07/with-help-from-google-impersonated-brave-com-website-pushes-malware/#p3

@DevMisc
#security #web #brave
6 Years of Professional Clojure

TL;DR Clojure is a great programming languages due to its functional nature, lack of objects / concentration on primitive values.

https://engineering.nanit.com/6-years-of-professional-clojure-2b61cb6c1983

@DevMisc
#clojure #overview
How to write slow Rust code

How I tried to port Lisp code to Rust and managed to get a much slower program... and how to fix that!

https://renato.athaydes.com/posts/how-to-write-slow-rust-code.html

@DevMisc
#rust #performance
How to boost your popularity on OkCupid using CSRF and a JSON type confusion

https://blog.azuki.vip/csrf/

@DevMisc
#security #web #bugbounty
Working Around a Case Where the Postgres Planner Is "Not Very Smart"

We discovered a Postgres quirk that prevented an existing index from supporting an index-only scan. Here's how we worked around the quirk to achieve a 2x performance win.

https://heap.io/blog/when-the-postgres-planner-is-not-very-smart

@DevMisc
#postgres #performance
How to improve your Docker containers security – [cheat sheet]

Containers are no security devices. That's why we've curated a set of easily actionable recommendations to improve your Docker containers security.

https://blog.gitguardian.com/how-to-improve-your-docker-containers-security-cheat-sheet/

@DevMisc
#docker #security #tips
Awesome Selfhosted

A
list of Free Software network services and web applications which can be hosted on your own servers.

https://github.com/awesome-selfhosted/awesome-selfhosted

@DevMisc
#misc #selfhost
C++ for Python

Cppyy is a python library to make C++ bindings for your application.

https://github.com/wlav/cppyy

@DevMisc
#cpp #library #python
Falsehoods Programmers Believe About Phone Numbers

...and tips on how to use libphonenumber.

https://github.com/google/libphonenumber/blob/master/FALSEHOODS.md

@DevMisc
#extra #tips
A Bit Overcomplicated

Lets say you have a 64-bit integer. You want the first 42-bits. Now, if your language has a bitshift operator, you'd do something like largeNumber >> 22. But what if your language also has all sorts of advanced stream processing and map functions?

https://thedailywtf.com/articles/a-bit-overcomplicated

@DevMisc
#extra #tips
SAML Is Insecure by Design

SAML uses signatures based on computed values. The practice is inherently insecure and thus SAML as a design is insecure.

https://joonas.fi/2021/08/saml-is-insecure-by-design/

@DevMisc
#security #web
HTTP/2: The Sequel is Always Worse

In this research paper James Kettle introduces multiple new classes of HTTP/2-exclusive attacks, demonstrated on popular websites and servers.

https://portswigger.net/research/http2

@DevMisc
#extra #web
I compromised 300 stores and a “Spanish consultancy”

This post aims to show people how their data is vulnerable to get stolen in some environments and how companies forget about a minimum level of good practices regarding cybersecurity.

https://edbrsk.dev/content/real-cases/how-I-compromised-300-stores-and-a-spanish-consultancy

@DevMisc
#security #web
Supporting half-precision floats is annoying

I just added half-precision floats to Futhark, as the type f16. This wasn’t particularly hard (perhaps a day of work), but it was annoying for fairly shallow technical reasons, so as a bit of catharsis, here’s a blog post about the challenges I encountered.

https://futhark-lang.org/blog/2021-08-05-half-precision-floats.html

@DevMisc
#extra
The Problem with Perceptual Hashes

Apple just announced that they will use “perceptual hashing” to detect illegal photos on iPhones. I have some experience to share on this technology.

https://rentafounder.com/the-problem-with-perceptual-hashes/

@DevMisc
#extra #algorithm
Learning APL

crt←{m|⍵+.×⍺(⊣×⊢|∘⊃{0=⍵:1 0 ⋄ (⍵∇⍵|⍺)+.×0 1,⍪1,-⌊⍺÷⍵})¨⍨⍺÷⍨m←×/⍺} ⍝ …but it’s unreadable!

https://xpqz.github.io/learnapl/intro.html

@DevMisc
#apl #overview
Framework Patterns

A software framework is code that calls your (application) code. That's how we distinguish a framework from a library.

https://blog.startifact.com/posts/framework-patterns.html#

@DevMisc
#meta #framework
Nim by example

Nim is a powerful statically typed language that allows the programmer expressiveness without compromising run-time performance. As a general purpose programming language, it gives the same sort of power and performance as C++, but in a nicer package and with even more powerful tools!

https://nim-by-example.github.io/

@DevMisc
#learn #nim
Add a blog to your domain using Hashnode

You can start a blog in just a few seconds using Hashnode and then you can move that to your own domain if you get one later. They will even help distribute your articles on their platform.

https://hashnode.com/

@DevMisc
#blog #web #platform