Viewing profile — orkj

From the reporter of the React vulnerablility, Lachlan Davidson

very interesting to read. However, if I am reading this correctly, your PoC falls in the category described here: https://react2shell.com/ > Anything that requires the developer to…

> what is an auth description? They are probably referring to the text in the basic auth "pop-up" which is usually set like WWW-Authenticate: Basic realm="my text"

Did you see this one? https://www.casio.com/europe/watches/casio/vintage/product.A...

This sounds like a great idea for a feature for the OP. Cool feature to kickstart the database. Take a photo. Something something AI. 150 rows filled in

Seems like general good advice, but for me it was simply a matter of `atuin import auto`. The initial response was similar (as in, here is no history, where is my history, this is …

The description of the repo is "A compendium of absurd "open-source" licenses." Which I think is relevant to change the title to (the addition of the word "absurd" specifically. Th…

Tangentially related: I have been having a ton of fun programming for the sensor watch lately: https://www.sensorwatch.net/ Granted it's far from as smart as pebble, but that batte…

Built https://violinist.io , a PHP / composer update service in 2017 and it passed that figure probably something like 2021?

Does something like this exist for my phone, android specifically? Any good recommendations?

It's mentioned in one of the first references in this article: https://boehs.org/node/everything-i-know-about-the-xz-backdo... IRC activity

This made me think of http://prose.io which I remember was a thing 10 years ago. Pleasantly surprised it still is a website, not sure if it still works. But I remember the basic id…

If you are using some of the library packages (i.e nodejs / ubuntu / golang), you can resort to using ECR Public: https://www.docker.com/blog/news-from-aws-reinvent-docker-of... To…

$ docker pull public.ecr.aws/docker/library/golang

@technics256 But also not as a reply, so it's more visible: I have had luck with using Amazon ECR Public https://www.docker.com/blog/news-from-aws-reinvent-docker-of... To quote th…

Replying to myself. I guess I read that a bit too quickly: > In Node.js, the answer involves a WebSocket to TCP socket proxy, Asyncify, and patching deep PHP internals like php_sel…

I did know of those, I'm just assuming its going to cause some sort of problem with network calls and sockets and what not (they mention this specifically as part of the caveats)

Genuinely curious: does this mean you can run WordPress as a cloudflare worker (ignoring database for now)? https://developers.cloudflare.com/workers/runtime-apis/webas...

> There's another thing that really split the community, many want automatic security updates to Drupal core, but the Drupal core devs have taken a hard stance against this. That m…

It's in the FAQ in the readme, which links to this issue: https://github.com/go-gitea/gitea/issues/1029 Basically... They're working on it