g-k

@@ -372,13 +372,15 @@ def main(argv):

   try:
     # Wait for ZAP to start
-    zap = ZAPv2(proxies={'http': 'http://' + zap_ip + ':' + str(port), 'https': 'http://' + zap_ip + ':' + str(port)})
+    zap = ZAPv2(proxies={'http': 'http://' + 'localhost' + ':' + str(port), 'https': 'http://' + 'localhost' + ':' + str(port)})
+    logging.info('proxies %s' % {'http': 'http://' + zap_ip + ':' + str(port), 'https': 'http://' + zap_ip + ':' + str(port)})
     for x in range(0, timeout):
       try:
         logging.debug ('ZAP Version ' + zap.core.version)

g-k

Taint checking / analysis for Javascript might be coming to Flow: https://www.youtube.com/watch?v=VEaDsKyDxkY&t=24m45s

It'd be great to extend that to the browser and backend for QA and security.

The wikipedia page links to http://docstore.mik.ua/orelly/web/jscript/ch20_04.html which says Netscape Navigator 3 and 4 used taint-tracking to prevent exfiltrating private data too.

Actually per https://queue.acm.org/detail.cfm?id=2663760 just escape output for the appropriate context or contexts (i.e. what we already know), but Flow could be helpful there too for finding unescaped output/sinks.

g-k

$ curl -so - https://pypi.python.org/pypi/Django/json | python3 -c 'import sys; import json; print(sum([release["downloads"] for version in json.load(sys.stdin)["releases"].values() for release in version]))'
22520974

g-k

git ls-files | grep '.php$' | xargs -L 1 -I % emacs -batch % --eval '(delete-trailing-whitespace (point-min) (point-max))' -f save-buffer

g-k

Facebook Ad Insights v2.2 API Notes

Ad Report Stats (URL ends with: /reportstats despite its name)

Breakdown columns

Data breakdown columns cannot be used together except for few exceptions. See the table for allowed combinations.

• Cannot fetch: country and age or country and gender
• Can fetch: age and gender (but not age,gender because that's not a column name)

g-k

Generate a GPG Key and revocation cert per http://www.gnupg.org/gpg/en/manual.html:

gpg --key-gen
gpg --output revoke.asc --gen-revoke <my user ID or email>

Once gpg key in keyring we can encrypt and decrypt files.

g-k

Bugs:

• Doesn't handle selecting or entering a string in the color picker
• Need to click crystalize twice if it was selected when changing separation

Links:

• http://en.wikipedia.org/wiki/Quasicrystal
• http://www.jasondavies.com/animated-quasicrystals/
• http://mainisusuallyafunction.blogspot.com/2011/10/quasicrystals-as-sums-of-waves-in-plane.html

g-k

Fork of: http://bl.ocks.org/mbostock/5649592

To show: http://glowingpython.blogspot.com/2013/05/a-colorful-trifoil-knot.html

TODO: Figure out how to encode height along path as color or above and below at line crossings.

g-k

From: http://erikdemaine.org/puzzles/LCS2002/

Goal:

• have eight squares with images all facing the same way "up" (on both sides or on each side?)
• no cuts, rips tears
• one piece of paper

How many ways to fold?

g-k

// gamma correction with narrow 8-bit channel leads to banding
// where all the values aren't used

// How many are used?

// node gamma-band.js | uniq - | wc -l

for (var i = 0; i < 256; i++) {
  var value = i;