Vincent Durand madwork

## app.html
<!DOCTYPE html>
<html>
  <head>
    <meta charset="utf-8">
    <title>Bind Once</title>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/angular.js/1.3.13/angular-sanitize.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/angular.js/1.3.13/angular.min.js"></script>
  </head>
  <body ng-app>
    <p><input type="text" ng-model="foo"></p>

## parse-cookie.coffee
# Credits to Alfonso de la Osa
# https://github.com/botverse/node-rails-cookies
crypto = require('crypto')

module.exports = (options) ->
  secret = crypto.pbkdf2Sync(options.base, options.salt, options.iterations, options.keylen / 2)
  signed_secret = crypto.pbkdf2Sync(options.base, options.signed_salt, options.iterations, options.keylen)
  (cookie, cipherName) ->
    signed_parts = cookie.split('--')
    hmac = crypto.createHmac('sha1', signed_secret)

## keybase.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                madwork
                / keybase.md
            
            
              Created
              July 1, 2015 10:34
            
              
                keybase prove github madwork
              
          
    Keybase proof

I hereby claim:

I am madwork on github.
I am madwork (https://keybase.io/madwork) on keybase.
I have a public key whose fingerprint is E0C0 7490 6640 693C 8AEC  BD3E 6BF4 9CEC 089D 7137

To claim this, I am signing this object:

  
## decode_session_cookie.rb
# decode_session_cookie.rb
# ------------------------
# The purpose of this script is to show that if I have the secret_key_base
# and a cookie to an active Rails session, I can decrypt it and gain access
# to key information about the user's session.

require 'rubygems'
require 'cgi'
require 'active_support'
require 'json'

## caesar_cipher.rb
# CaesarCipher
# Example:
#   cipher = CaesarCipher.new "Ruby is a dynamic, open source programming language!"
#   cipher.encrypt(13)
#   => "ehol vf n qlanzvp, bcra fbhepr cebtenzzvat ynathntr!"
class CaesarCipher
  attr_accessor :sentence

  def initialize(sentence)
    @sentence = sentence

## utf8-sanitizer.rb
# Utf8Sanitizer
# Rack/Ruby on Rails: ArgumentError: invalid byte sequence in UTF-8
# raise 400 error
# http://dev.mensfeld.pl/2014/03/rack-argument-error-invalid-byte-sequence-in-utf-8/
class Utf8Sanitizer
  SANITIZE_ENV_KEYS = %w(
    HTTP_REFERER
    PATH_INFO
    REQUEST_URI
    REQUEST_PATH

## install.sh
brew install wget chruby openssl libyaml libxml2

# https://github.com/sstephenson/ruby-build/issues/550#issuecomment-40863879
cd /usr/local
git checkout 0181c8a Library/Formula/readline.rb
brew install readline

export ARCHFLAGS="-arch x86_64"
export CFLAGS="-g -O2"
export LDFLAGS="-L/usr/local/lib -L/usr/local/opt/readline/lib -L/usr/local/opt/openssl/lib"

## install.sh
brew install chruby readline openssl libyaml

export ARCHFLAGS="-arch x86_64"
export CFLAGS="-g -O2"
export LDFLAGS="-L/usr/local/lib -L/usr/local/opt/readline/lib -L/usr/local/opt/openssl/lib"
export CPPFLAGS="-I/usr/local/include -I/usr/local/opt/readline/include -I/usr/local/opt/openssl/include"

mkdir ~/.rubies

# ruby 2.1.0

## iptables-stop.sh
iptables -F
iptables -X
iptables -t nat -F
iptables -t nat -X
iptables -t mangle -F
iptables -t mangle -X
iptables -P INPUT ACCEPT
iptables -P FORWARD ACCEPT
iptables -P OUTPUT ACCEPT

## deploy.rb
after "deploy:restart", "puma:restart"

namespace :puma do
  task :restart, roles: :app do
    run "cd #{current_path} && #{bundle_cmd} exec pumactl -S #{shared_path}/pids/puma.state restart"
  end
end
	<!DOCTYPE html>
	<html>
	<head>
	<meta charset="utf-8">
	<title>Bind Once</title>
	<script src="https://cdnjs.cloudflare.com/ajax/libs/angular.js/1.3.13/angular-sanitize.min.js"></script>
	<script src="https://cdnjs.cloudflare.com/ajax/libs/angular.js/1.3.13/angular.min.js"></script>
	</head>
	<body ng-app>
	<p><input type="text" ng-model="foo"></p>
	# decode_session_cookie.rb
	# ------------------------
	# The purpose of this script is to show that if I have the secret_key_base
	# and a cookie to an active Rails session, I can decrypt it and gain access
	# to key information about the user's session.

	require 'rubygems'
	require 'cgi'
	require 'active_support'
	require 'json'
	# CaesarCipher
	# Example:
	# cipher = CaesarCipher.new "Ruby is a dynamic, open source programming language!"
	# cipher.encrypt(13)
	# => "ehol vf n qlanzvp, bcra fbhepr cebtenzzvat ynathntr!"
	class CaesarCipher
	attr_accessor :sentence

	def initialize(sentence)
	@sentence = sentence
	# Utf8Sanitizer
	# Rack/Ruby on Rails: ArgumentError: invalid byte sequence in UTF-8
	# raise 400 error
	# http://dev.mensfeld.pl/2014/03/rack-argument-error-invalid-byte-sequence-in-utf-8/
	class Utf8Sanitizer
	SANITIZE_ENV_KEYS = %w(
	HTTP_REFERER
	PATH_INFO
	REQUEST_URI
	REQUEST_PATH
	brew install wget chruby openssl libyaml libxml2

	# https://github.com/sstephenson/ruby-build/issues/550#issuecomment-40863879
	cd /usr/local
	git checkout 0181c8a Library/Formula/readline.rb
	brew install readline

	export ARCHFLAGS="-arch x86_64"
	export CFLAGS="-g -O2"
	export LDFLAGS="-L/usr/local/lib -L/usr/local/opt/readline/lib -L/usr/local/opt/openssl/lib"
	brew install chruby readline openssl libyaml

	export ARCHFLAGS="-arch x86_64"
	export CFLAGS="-g -O2"
	export LDFLAGS="-L/usr/local/lib -L/usr/local/opt/readline/lib -L/usr/local/opt/openssl/lib"
	export CPPFLAGS="-I/usr/local/include -I/usr/local/opt/readline/include -I/usr/local/opt/openssl/include"

	mkdir ~/.rubies

	# ruby 2.1.0
	iptables -F
	iptables -X
	iptables -t nat -F
	iptables -t nat -X
	iptables -t mangle -F
	iptables -t mangle -X
	iptables -P INPUT ACCEPT
	iptables -P FORWARD ACCEPT
	iptables -P OUTPUT ACCEPT
	after "deploy:restart", "puma:restart"

	namespace :puma do
	task :restart, roles: :app do
	run "cd #{current_path} && #{bundle_cmd} exec pumactl -S #{shared_path}/pids/puma.state restart"
	end
	end