Harden and secure browsers in containers, with GUI

I made a few Podman / Docker images for different browsers and OS-es, so I can safely run different browsers in a secure sandbox.

https://crlf.link/log/entries/211008-1/

@DevMisc
#docker #web #misc

Parsing JSON is a Minefield 💣

JSON is the de facto standard when it comes to exchanging data in web programming. But how well do you really know JSON? We'll read the specifications and write test cases together.

http://seriot.ch/projects/parsing_json.html

@DevMisc
#json #parser #learn

Memcached vs. Redis – More Different Than You Would Expect

From how they use memory to how they expire items, the differences are not as subtle as you would expect.

https://engineering.kablamo.com.au/posts/2021/memcached-vs-redis-whats-the-difference/

@DevMisc
#redis #memcached #overview

Hacking YouTube with a MP4

Keyboard Warrior, Breaking software is just finding unintended features, right?

https://realkeyboardwarrior.github.io/security/2021/10/11/hacking-youtube.html

@DevMisc
#youtube #security #web #mp4

Making the whole web better, one canvas at a time

One can have an entire career on the web and never write a single canvas.getContext('2d'), so "Why should I care about this new OffscreenCanvas thing?" is a decent question for many.

https://bkardell.com/blog/OffscreenCanvas.html

@DevMisc
#canvas #web #webdev

Getting to the bottom of web map performance

Raster maps, vector maps, gaming like it's 1993.

https://bdon.org/blog/web-map-performance/

@DevMisc
#geo #web #overview

Highschool student hacks entire districts IoT network for Rickroll senior prank

This is the story of how I created a botnet of IPTVs to rickroll 10,000+ students for my senior prank.

https://whitehoodhacker.net/posts/2021-10-04-the-big-rick

@DevMisc
#meme #security #iot

SHA-1 'Fully and Practically Broken' by New Collision

A chosen prefix collision in SHA-1 has demonstrated a new issue with the venerable hash function developed by the NSA.

https://duo.com/decipher/sha-1-fully-and-practically-broken-by-new-collision

@DevMisc
#sha1 #cryptography #security

Algebraic data types: things I wish someone had explained about FP

Algebraic data types and algebraic data structures sound similar. It’s like they ought to be the same thing. But they’re not.

https://jrsinclair.com/articles/2019/algebraic/

@DevMisc
#fp #data #learn

Sending Emails to Myself

In April, I wrote operatornotify.py, a module which allows my programs to notify me of important information or errors. I was immediately very proud of it.

https://voussoir.net/writing/emailing_myself

@DevMisc
#python #tools #misc

Mechanical sympathy for QR codes: making NSW check-in better

QR codes are now critical infrastructure here in NSW, Australia. Let's learn how to make them better.

https://huonw.github.io/blog/2021/10/nsw-covid-qr/

@DevMisc
#qrcode #optimization #misc

The Problem with Macros

So we’re supposed to be writing a game, right? But in order to make progress, we have to fix a bug.

https://ianthehenry.com/posts/janet-game/the-problem-with-macros/

@DevMisc
#macros #metaprogramming #overview

GTFOBins

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems.

https://gtfobins.github.io/

@DevMisc
#security #extra

How apt renders its fancy progress bar?

It uses good ol' VT100 instructions.

https://mdk.fr/blog/how-apt-does-its-fancy-progress-bar.html

@DevMisc
#apt #learn #misc

Draw to search

Find images from movies based on what you draw

https://huggingface.co/spaces/osanseviero/draw_to_search

@DevMisc
#ai #ml #tools #misc

Using ASCII waveforms to test real-time audio code

I draw sound wave ASCII art in Q2Q’s source code. These ASCII art waveforms ensure that the real-time audio engine at the heart of Q2Q stays bug-free.

https://goq2q.net/blog/tech/using-ascii-waveforms-to-test-real-time-audio-code

@DevMisc
#audio #ascii #extra

Fast character case conversion

...or how to compress sparse arrays.

https://github.com/apankrat/notes/tree/master/fast-case-conversion

@DevMisc
#algorithm #optimization #misc

Every search bar looks like a URL bar to users

Computers would be so much better if they never had to deal with users, amirite?!!? I remember, years ago, working on a mobile web service which had a URl bar – so users could tap in bbc.co.u…

https://shkspr.mobi/blog/2021/10/every-search-bar-looks-like-a-url-bar-to-users/

@DevMisc
#uri #ui #ux #extra

What is CSS preprocessor?

Nowadays, we often craft our styles by using preprocessors syntax. They provides a CSS-like syntax with enhanced features to save our time when building the web.

https://makzan.net/mobile-web-design/what-is-css-preprocessor/

@DevMisc
#css #scss #webdev #learn

Dependency Confusion: How I hacked into Apple, Microsoft and dozens of other companies

Easiest bug bounty money I ever made. No knowledge of hacking was required.

https://medium.com/@alex.birsan/dependency-confusion-4a5d60fec610

@DevMisc
#security #npm #bugbounty

That day my noscript killed 10,000 phones in South America

The story about what happens if your automated tests go wrong.

https://new.pythonforengineers.com/blog/the-day-i/

@DevMisc
#bug #tests #misc