bburky

Is that the same feature as vlanid= in openwrt's wpa_psk_file? https://openwrt.org/docs/guide-user/network/wifi/basic#wpa_p...

I was leaning towards using this configuration for splitting devices into VLANs while using one SSID. Yeah, dynamic VLAN+per device PSK would be best, but I'm probably happy enough with a shared PSK per VLAN to isolate a guest or IoT network. Would this VLAN isolation have prevented this attack? At least to prevent an attacker from jumping between VLANs? (I assume shared PSK per VLAN might be vulnerable to attacking client isolation within the VLAN?)

Kaitai is pretty nice. Hex editors with structure parsing support used to be more rare than they are now, so I've used https://ide.kaitai.io/ instead a few times.

Also, the newest Kaitai release added (long awaited) serialization support! I haven't had a chance to try it out.

https://kaitai.io/news/2025/09/07/kaitai-struct-v0.11-releas...

https://xsleaks.dev/docs/attacks/experiments/scroll-to-text-... may be a better description about the security impact, and has more context about this and similar cross site leaks possible with browsers.

There was a conversation on their mailing list contemplating dropping NSS support. https://curl.se/mail/lib-2022-01/0120.html If you have a use case for NSS in curl, you may want to speak up. Perhaps "I want curl to look exactly like a browser" is a significant use case?

When I built an ARM based NAS, I chose to use the Banana Pi BPI-R2 because it was one of the very few boards with 2x SATA ports using PCI-E. It worked fine and got good speeds. It's difficult to run a current kernel on the BPI-R2 though (it is slowly creeping towards mainline). If I built another NAS again I'd just use an x86_64 or aarch64 SBC with a PCI-E port and connect a good SATA controller.

Full build log: https://bburky.com/NAS/

Technically `git push --signed` also exists which could fix the issue of rolling back commits. It would verify that the person doing the push also holds the GPG key at least. But as far as I can tell you have to manually do something with it in the post-receive hook and GitHub doesn't support it at all.

Or many of the other issues that plague archive formats: duplicate files in the archive at the same path, symlinks in the archive or relative links enabling directory traversal.

Wow, git's url bugs always seem to become easily exploitable due to .gitmodules.

I found CVE-2015-7545 a few years ago, a malicious URL using the ext:: scheme could cause code execution. It was only easily exploitable because you can ask the client to fetch any URL you want via git submodules. (This vulneriblity was fixed, and since then the entire ext url scheme was disabled by default.)

I prefer YoNTMA: https://github.com/iSECPartners/yontma-mac

If the laptop is disconnected from AC, it hibernates. It will switch to hibernate if power is removed while already sleeping. If I want to force a hibernate manually, I just pull the power before closing the lid.

This reminds me of the time my party argued about how much modern information theory we were allowed to use in D&D. We wanted to maximize the amount of information to communicate using Sending which states that it sends "twenty-five words or less". Can I use a form of encoding and a compression algorithm? Or can we make up words and can they be arbitrarily long?

> The LE HTTP challenge gives no guarantee which A record it will use.

That almost changed[0], but the current consensus[1] seems to be that you should be using dns-01 for validation behind a load balancer instead.

[0] https://github.com/ietf-wg-acme/acme/pull/138

[1] https://mailarchive.ietf.org/arch/msg/acme/6RSxtvpkcQNPmKs9f...

Done.

If anyone wants these steps fully automated you can use this script:

https://gist.github.com/bburky/40317e6375b1262b1a1fc31072acf...

Just use it as a User Data file on DigitalOcean or elsewhere.

Edit: After doing this, I realized coursera-dl has a Docker script already. You may prefer it: https://github.com/coursera-dl/coursera-dl/tree/master/deplo...

Even better: allow using CSS transitions to make moving turrets.

Nice trick. It looks like this is actually a POSIX shell feature too, so feel free to use this in portable shell scripts even.

Here's the rest of the parameter expansion options. I usually only remember half of them.

http://pubs.opengroup.org/onlinepubs/9699919799/utilities/V3...

While strace is awesome in general, git has some very useful debug environment variables: GIT_TRACE, GIT_TRACE_PACKET, GIT_CURL_VERBOSE and a few more[1].

Try:

    GIT_TRACE_PACKET=1 GIT_TRACE=1 git push

[1] https://git-scm.com/book/en/v2/Git-Internals-Environment-Var...

I have this bookmarked for some reason, it may help: http://stackoverflow.com/questions/3205819/bezier-path-widen...

Half the links are dead now. This is the openjdk Stroker.java code: http://grepcode.com/file/repository.grepcode.com/java/root/j...

Yep, that's mine.

Actually, it was you Christian, who was describing the git graphs as train tracks and prompted me to do this.

vbarbaresi, you should include the script or whatever method you used to generate the metro. I noticed you also used --allow-empty.

Also, curl gained a --next command line option somewhat recently. It lets you send off multiple requests in the same curl invocation. These requests will all be pipelined in the same HTTP connection, which might trigger slightly different behavior in the website.

I have considered writing a program that will let me send of a bunch of HTTP requests at once, but wait to close all the connections at the exact same time. That would probably be the most effective way to trigger race conditions.

Also, is there any reason Git LFS can't be used as a special remote for git-annex?

It would provide an easy way for people to host their git-annex repos entirely on GitHub.

I want to see someone implement surround sound with head tracking. Some Googling turns up some research projects that have done this with either face tracking or accelerometers. And at least one (expensive) commercial product.

I wonder if someone could do it with a software implementation that just takes 5.1 input and uses only a camera or some inexpensive hardware?

Video: https://archive.fosdem.org/2014/schedule/event/servo_buildin...

Yeah, using definitions on symbols to store key-values is indeed incredibly limiting.

Association seems very similar to List: immutable, really good Part syntax for accessing things in deeper levels, etc. I've started to read some of the docs on it too, it looks very nice.

More specifically, the the previous hash-table-like method is just assigning constants as values for a function.

    In[1]:= mymap["abc"]=1;
            mymap[2]=2;
            mpmap[hello]=3;
            DownValues[mymap]
    Out[4]= {HoldPattern[mymap[2]]:>2,HoldPattern[mymap[abc]]:>1}

Defining a function is really just a pattern is matched based on arguments, and is replaced with an expression with the arguments substituted into it. And you can set a constant key argument to a value of a constant value — creating the odd built in hash-table-alike which has been around forever.

That said, Association[] looks nice. Presumably it gets a speed improvement by bypassing the pattern matching. And I remember being annoyed by using JSON data in Mathematica structures, this looks nicer. The literal syntax is appreciated too. Actually I'm kind of surprised they didn't choose another weird unicode symbol like 〚, for the literal syntax.

    $ find /Applications/Android\ Studio.app/sdk/docs/images -type f | sed 's_/Applications/Android\ Studio.app/sdk/docs/images_http://developer.android.com/images_' | wget -x -i -
    $ diff -r developer.android.com/images /Applications/Android\ Studio.app/sdk/docs/images
    Binary files developer.android.com/images/admin/device-admin-activate-prompt.png and /Applications/Android Studio.app/sdk/docs/images/admin/device-admin-activate-prompt.png differ
    [...]
    

Sadly, they're all gone.

You could just display the coordinates that are currently under the mouse. Adding two changing numbers to the statusbar is fairly minimalist.

But aren't the unexpected difficulties half the fun?

Yes. I expect many programs would have trouble, but you probably wouldn't have too much trouble making it work for typical non-interactive command line programs.

But the possibility game mechanics like making files appear after moving a file (an item in the game) into the directory (room) are really interesting.

It would be very interesting to implement something like this atop FUSE[0].

For free you get the ability for the player to use any existing command line tool you want. You could easily make strange and artificial directory structures. And you can dynamically change and detect changes in the filesystem.

[0] http://fuse.sourceforge.net/

Looks like you're setting the <iframe>'s contents with a data uri in the src attribute, you save some characters if you use the HTML5 srcdoc attribute:

    <x id=e><script>for(i=4;i--;)e.innerHTML+=(i?'<textarea':'<iframe')+' id=t'+i+' style=width:49%;height:48% oninput=\'t0.srcdoc=t3[v="value"]+"<script>"+t1[v]+"<\/script><style>"+t2[v]\'>'</script>

https://developer.mozilla.org/en-US/docs/Web/HTML/Element/if...

http://www.whatwg.org/specs/web-apps/current-work/multipage/...

On a Mac set it in System Preferences > Network > Advanced... > Proxies > SOCKS Proxy.

Many Mac programs will automatically pick it up.