Drew Robinson ocean

## twitter_oauth_setup.rb
#!/usr/bin/env ruby

# Command line util for acquiring a one-off Twitter OAuth access token
# Based on http://blog.beefyapps.com/2010/01/simple-ruby-oauth-with-twitter/

require 'rubygems'
require 'oauth'

puts <<EOS
Set up your application at https://twitter.com/apps/ (as a 'Client' app),

## twitter_oauth_getter.js
#!/usr/bin/env node

var argv = require('optimist')
  .usage('Usage: --key=[consumer key] -secret=[consumer secret]')
  .demand(['key', 'secret'])
  .argv
;

var OAuth = require('oauth').OAuth;
var Step = require('step');

## pedantically_commented_playbook.yml
This playbook has been removed as it is now very outdated.

## XGH - en.txt
eXtreme Go Horse (XGH) Process

Source: http://gohorseprocess.wordpress.com


1. I think therefore it's not XGH.
In XGH you don't think, you do the first thing that comes to your mind. There's not a second option as the first one is faster.

2. There are 3 ways of solving a problem: the right way, the wrong way and the XGH way which is exactly like the wrong one but faster.
XGH is faster than any development process you know (see Axiom 14).

## GIF-Screencast-OSX.md

      
              2 files
            
          
              666 forks
            
          
              78 comments
            
          
              5313 stars
            
          
                dergachev
                / GIF-Screencast-OSX.md
            
            
              Last active
              May 17, 2024 02:53
            
              
                OS X Screencast to animated GIF
              
          
    OS X Screencast to animated GIF

This gist shows how to create a GIF screencast using only free OS X tools: QuickTime, ffmpeg, and gifsicle.

Instructions

To capture the video (filesize: 19MB), using the free "QuickTime Player" application:

  
## gist:5008251
- Apache configured to accept SSL on a number of ports, each with their own cert demonstrating an individual test case.
- ELBs performing PAT so I had :443 on a number of IPs ending up hitting apache on it's various ports.
- PHP on the webserver would parse the Host Header, and return a response setting a corresponding div to vulnerable
- When the main domain name was accessed, it would instead return a bunch of DIV's each named to correspond to a given vuln, and including the CSS file (generated by PHP above) to test for cert validation.

The end result of all this was a table that looked like the ones shown near the end of;
http://www.secureworks.com/cyber-threat-intelligence/threats/transitive-trust/

Tested included;
- Mismatched CN

## user-timing-rum.js
// Support routines for automatically reporting user timing for common analytics platforms
// Currently supports Google Analytics, Boomerang and SOASTA mPulse
// In the case of boomerang, you will need to map the event names you want reported
// to timer names (for mPulse these need to be custom0, custom1, etc) using a global variable:
// rumMapping = {'aft': 'custom0'};
(function() {
var wtt = function(n, t, b) {
  t = Math.round(t);
  if (t >= 0 && t < 3600000) {
    // Google Analytics

## html.tpl.php
<?php

/**
 * @file
 * Default theme implementation to display the basic html structure of a single
 * Drupal page.
 *
 * Variables:
 * - $css: An array of CSS files for the current page.
 * - $language: (object) The language the site is being displayed in.

## gist:6124235

      
              1 file
            
          
              0 forks
            
          
              1 comment
            
          
              2 stars
            
          
                aphyr
                / gist:6124235
            
            
              Created
              July 31, 2013 17:35
            
          
    http://dl.dropboxusercontent.com/u/42561/Screenshots/i60w-q0t2ybn.png
I've learned more about orbital mechanics in six hours with this game than in my entire physics undergrad, haha. Lost an astronaut during an EVA last night, and didn't know how to use his little RCS jetpack, so he orbited the earth independently. Sent a rescue mission to pick him up, but it ran out of fuel. Sent another rescue mission, finally picked up the guy, but didn't have enough fuel to deorbit so now I've got seven astronauts in orbit. And no parachutes.
https://pbs.twimg.com/media/BQeyq5dCUAAlP1f.jpg:large
Decided to dock with one of them to form a small space station. Here's my three-stage launch vehicle almost snapping in half due to an uncontrolled SAS control-plane feedback loop:
https://pbs.twimg.com/media/BQfs3wxCQAMkb0g.jpg:large

  
## cf-ddns.sh
#!/usr/bin/env bash
set -o errexit
set -o nounset
set -o pipefail

# Automatically update your CloudFlare DNS record to the IP, Dynamic DNS
# Can retrieve cloudflare Domain id and list zone's, because, lazy

# Place at:
# /usr/local/bin/cf-ddns.sh
	#!/usr/bin/env ruby

	# Command line util for acquiring a one-off Twitter OAuth access token
	# Based on http://blog.beefyapps.com/2010/01/simple-ruby-oauth-with-twitter/

	require 'rubygems'
	require 'oauth'

	puts <<EOS
	Set up your application at https://twitter.com/apps/ (as a 'Client' app),
	#!/usr/bin/env node

	var argv = require('optimist')
	.usage('Usage: --key=[consumer key] -secret=[consumer secret]')
	.demand(['key', 'secret'])
	.argv
	;

	var OAuth = require('oauth').OAuth;
	var Step = require('step');
	eXtreme Go Horse (XGH) Process

	Source: http://gohorseprocess.wordpress.com


	1. I think therefore it's not XGH.
	In XGH you don't think, you do the first thing that comes to your mind. There's not a second option as the first one is faster.

	2. There are 3 ways of solving a problem: the right way, the wrong way and the XGH way which is exactly like the wrong one but faster.
	XGH is faster than any development process you know (see Axiom 14).
	- Apache configured to accept SSL on a number of ports, each with their own cert demonstrating an individual test case.
	- ELBs performing PAT so I had :443 on a number of IPs ending up hitting apache on it's various ports.
	- PHP on the webserver would parse the Host Header, and return a response setting a corresponding div to vulnerable
	- When the main domain name was accessed, it would instead return a bunch of DIV's each named to correspond to a given vuln, and including the CSS file (generated by PHP above) to test for cert validation.

	The end result of all this was a table that looked like the ones shown near the end of;
	http://www.secureworks.com/cyber-threat-intelligence/threats/transitive-trust/

	Tested included;
	- Mismatched CN
	// Support routines for automatically reporting user timing for common analytics platforms
	// Currently supports Google Analytics, Boomerang and SOASTA mPulse
	// In the case of boomerang, you will need to map the event names you want reported
	// to timer names (for mPulse these need to be custom0, custom1, etc) using a global variable:
	// rumMapping = {'aft': 'custom0'};
	(function() {
	var wtt = function(n, t, b) {
	t = Math.round(t);
	if (t >= 0 && t < 3600000) {
	// Google Analytics
	<?php

	/**
	* @file
	* Default theme implementation to display the basic html structure of a single
	* Drupal page.
	*
	* Variables:
	* - $css: An array of CSS files for the current page.
	* - $language: (object) The language the site is being displayed in.
	#!/usr/bin/env bash
	set -o errexit
	set -o nounset
	set -o pipefail

	# Automatically update your CloudFlare DNS record to the IP, Dynamic DNS
	# Can retrieve cloudflare Domain id and list zone's, because, lazy

	# Place at:
	# /usr/local/bin/cf-ddns.sh