Log4j RCE

A recap about the Log4j Apache logging software vulnerability, that affects anything from iCloud to car radios.

https://www.lunasec.io/docs/blog/log4j-zero-day

@DevMisc
#bugbounty #security

Are 14 people really looking at the product?

Spoiler: no, they aren't.

https://scribe.rip/are-14-people-currently-looking-at-this-product-e7fe8412f16b

@DevMisc
#extra

Do DNS records actually take hours to propagate?

https://jvns.ca/blog/2021/12/06/dns-doesn-t-propagate

@DevMisc
#dns #misc

Koalas to the max, a case study (2013)

https://hacks.mozilla.org/2013/01/koalas-to-the-max-a-case-study

@DevMisc
#mozilla #extra

Exploring JavaScript prototype pollution with PwnFunction

https://youtu.be/XS_UMqQalLI

@DevMisc
#security #bugbounty #javanoscript

Logout4Shell

Use Log4Shell vulnerability to vaccinate a victim server against Log4Shell.

https://github.com/Cybereason/Logout4Shell

@DevMisc
#security #java #tools

Python Mutable Defaults Are The Source of All Evil

How to prevent a common Python mistake that can lead to horrible bugs and waste everyone's time.

https://florimond.dev/en/posts/2018/08/python-mutable-defaults-are-the-source-of-all-evil/

@DevMisc
#python #learn #misc

The Evolutions of Lambdas in C++14, C++17 and C++20

https://www.fluentcpp.com/2021/12/13/the-evolutions-of-lambdas-in-c14-c17-and-c20/

@DevMisc
#cpp #lambda #fp #learn

@DevMisc
#meme #python #stackoverflow

CHUNGUS 2

A very powerful 1Hz Minecraft CPU. This guy built a RISC CPU + assembler from scratch using solely redstone.

https://youtu.be/FDiapbD0Xfg

@DevMisc
#minecraft #lowlevel #extra

TypeScript is Literal Magic

Merge union types into every possible combination using template literal types.

https://youtube.com/watch?v=5JqzCjg4YRU

@DevMisc
#javanoscript #typenoscript #tips

What Is Fast-Math?

-ffast-math is a compiler flag that enables a set of aggressive floating-point optimizations.

https://pspdfkit.com/blog/2021/understanding-fast-math/

@DevMisc
#c #compiler #lowlevel

Windows 10 RCE: The exploit is in the link

"We discovered a drive-by code execution vulnerability on Windows 10 via IE11/Edge Legacy and MS Teams."

https://positive.security/blog/ms-officecmd-rce

@DevMisc
#windows #security #rce

Tips on adding JSON output to your CLI app

Best practices when adding a JSON output option to your command-line application.

https://blog.kellybrazil.com/2021/12/03/tips-on-adding-json-output-to-your-cli-app

@DevMisc
#json #cli #tips

Microsoft_craziness.h

https://gist.github.com/Kalinovcic/b4d9cc55a37f929cb62320763e8fbb47

@DevMisc
#c #gist #microsoft #extra

New Raspberry Pi 400 is a keyboard!

(Totally not a sponsor :P)

https://www.raspberrypi.com/products/raspberry-pi-400

@DevMisc
#raspberry #extra

Linux x86 program start up

This is for people who want to understand how programs get loaded under linux. In particular it talks about dynamically loaded x86 ELF files.

http://dbp-consulting.com/tutorials/...

@DevMisc
#linux #elf #lowlevel #x86

Monads in Python

A simple implementation of the Failure monad pattern.

https://medium.com/swlh/monads-in-python-e3c9592285d6

@DevMisc
#python #fp #monad

@DevMisc
#meme #indentation

SSH-MITM

Ssh man-in-the-middle (ssh-mitm) server for security audits supporting.

@DevMisc
#ssh #security #tools

Welcome to Fleet!

Built from scratch, based on 20 years of experience developing IDEs.

https://blog.jetbrains.com/blog/2021/11/29/welcome-to-fleet

@DevMisc
#jetbrains #ide #fleet