Skip to content

Instantly share code, notes, and snippets.

View jens1o's full-sized avatar
💻

Jens Hausdorf jens1o

💻
View GitHub Profile
@thesamesam
thesamesam / xz-backdoor.md
Last active July 25, 2024 09:00
xz-utils backdoor situation (CVE-2024-3094)

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Background

On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that

@djmitche
djmitche / mozilla-levels.md
Last active July 15, 2024 22:57
Mozilla Levels

[UPDATE July 2024]

New year, new links:

I don't work at Mozilla any longer, but I'm happy to keep this up-to-date. Please reach out (same username on gmail) with any updates!

[UPDATE June 2020]

@soulmachine
soulmachine / jwt-expiration.md
Last active June 21, 2024 14:09
How to deal with JWT expiration?

First of all, please note that token expiration and revoking are two different things.

  1. Expiration only happens for web apps, not for native mobile apps, because native apps never expire.
  2. Revoking only happens when (1) uses click the logout button on the website or native Apps;(2) users reset their passwords; (3) users revoke their tokens explicitly in the administration panel.

1. How to hadle JWT expiration

A JWT token that never expires is dangerous if the token is stolen then someone can always access the user's data.

Quoted from JWT RFC:

@PaulSec
PaulSec / coin-hive.txt
Last active April 20, 2022 07:32
Extract from the Top 1M Alexa domains (and also from investigations) using coin-hive mining service
0x00sec.org
10.32.59.31:32204
10.45.35.173:7990
1122qq.weebly.com
123movies.co
123moviesfull.co
123movies.re
1337x.io
141jav.com
1592878.com
@SammyK
SammyK / php-retry-keyword-2.0.md
Last active May 25, 2017 13:11
Proposed `retry` keyword in PHP 7.NEXT

Proposed retry keyword in PHP

This is a pivot of the original syntax proposal thanks to feedback from twitter.

The retry keyword adds to the try\catch\finally block to optionally execute an arbitrary statement before jumping to the top of the try block n times.

TL;DR The retry keyword offers a cleaner, more readable & more efficient solution to a common problem.

A simple example

@cstroe
cstroe / OpenSourceCRM.rst
Last active July 25, 2024 11:29
A distilled list of open-source CRM software
@atoponce
atoponce / gist:07d8d4c833873be2f68c34f9afc5a78a
Last active July 26, 2024 09:10 — forked from tqbf/gist:be58d2d39690c3b366ad
Cryptographic Best Practices

Cryptographic Best Practices

Putting cryptographic primitives together is a lot like putting a jigsaw puzzle together, where all the pieces are cut exactly the same way, but there is only one correct solution. Thankfully, there are some projects out there that are working hard to make sure developers are getting it right.

The following advice comes from years of research from leading security researchers, developers, and cryptographers. This Gist was [forked from Thomas Ptacek's Gist][1] to be more readable. Additions have been added from

@fevangelou
fevangelou / my.cnf
Last active July 26, 2024 12:48
Optimized my.cnf configuration for MySQL/MariaDB (on Ubuntu, CentOS, Almalinux etc. servers)
# === Optimized my.cnf configuration for MySQL/MariaDB (on Ubuntu, CentOS, Almalinux etc. servers) ===
#
# by Fotis Evangelou, developer of Engintron (engintron.com)
#
# ~ Updated December 2021 ~
#
#
# The settings provided below are a starting point for a 8-16 GB RAM server with 4-8 CPU cores.
# If you have different resources available you should adjust accordingly to save CPU, RAM & disk I/O usage.
#
// ==UserScript==
// @name Shopstopper
// @namespace https://www.softcreatr.de
// @version 0.2
// @description Reminds you, that you already bought this product (if you did...)
// @author Sascha "SoftCreatR" Greuel
// @match https://pluginstore.woltlab.com/file/*
// @grant none
// ==/UserScript==