| #!/bin/sh | |
| # This runs Google Chrome in a sandboxed environment with | |
| # only restricted access to $HOME | |
| # | |
| # Requires bubblewrap https://github.com/projectatomic/bubblewrap | |
| # | |
| # TODO: Create a minimal /dev | |
| exec bwrap --ro-bind / / \ |
| # .bashrc snippet to handle git working tree specific PATH | |
| REAL_PATH=$PATH | |
| PATH_SUFFIX='$( git rev-parse --git-dir &> /dev/null && echo $(git rev-parse --show-toplevel)/bin: ) | |
| PROMPT_COMMAND='eval PATH=$PATH_SUFFIX$REAL_PATH' |
| #!/usr/bin/perl | |
| # Rough script to maintain a twitter list with tweeps following me without | |
| # being followed back | |
| # | |
| # Requirements: | |
| # - Install twurl from https://github.com/twitter/twurl | |
| # - Follow the 'Getting started' section of the README for twurl | |
| # - Set your twitter username and list name below | |
| # |
| Title: Securing Wordpress | |
| Subtitle: Reducing collatteral damage from insecure web applications | |
| Abstract: | |
| I am not proud of it, but I use Wordpress for a few personal web sites. To | |
| be true, I'm not good at keeping my Wordpress install updated, and I'm not | |
| proud of that either. | |
| Defacements and data-loss are an acceptable risk: my sites do not need high | |
| availability and I have backups (I think). But what about the risks I put | |
| others in if my webserver gets compromised? |
| // ==UserScript== | |
| // @name Version2 fix-up | |
| // @namespace http://peter.makholm.net/ | |
| // @version 0.1 | |
| // @description Invasive fix-up for the design on version2.dk | |
| // @author Peter Makholm | |
| // @match http://www.version2.dk/ | |
| // @match http://www.version2.dk/* | |
| // @grant none | |
| // ==/UserScript== |
| # Set up a new LXC container: | |
| lxc-create -n sandbox -t $(pwd)/lxc-sandbox.template -f $(pwd)/lxc-sandbox.conf --dir $( mktemp -d -p $(pwd)/ lxc-XXXXXX ) | |
| # Run a single process in the container: | |
| lxc-execute -n sandbox -q -- bash |
| #!/usr/bin/env nqp-p | |
| use NQPHLL; | |
| grammar Expressive::Grammar is HLL::Grammar { | |
| token TOP { | |
| :my $*CUR_BLOCK := QAST::Block.new(QAST::Stmts.new()); | |
| <statementlist> | |
| } |
| #!/usr/bin/perl | |
| use strict; | |
| use warnings; | |
| use Parallel::ForkManager; | |
| my $pm = Parallel::ForkManager->new(8); | |
| for my $file (glob "/usr/local/backup/*") { | |
| my $pid = $pm->start and next; |
| #!/usr/bin/perl | |
| use strict; | |
| use warnings; | |
| use Benchmark qw(cmpthese); | |
| qx(ls -1U); # Populate dir cache | |
| cmpthese(1000, { |